Function at 0x412730
Capabilities:
Contain obfuscated stackstrings
Create thread
Get graphical window text
Read .ini file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5ca308
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x12f4
call fcn.0054c4b0
mov eax, dword [0x63fbf0]
xor eax, esp
mov dword [esp + 0x12f0], eax
push ebx
push esi
push edi
mov eax, dword [0x63fbf0]
xor eax, esp
push eax
lea eax, [esp + 0x1308]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [esp + 0x25c], 0x6a626f5f
mov byte [esp + 0x260], bl
mov dword [esp + 0x3c8], 0x5f6a626f
mov dword [esp + 0x3cc], 0x6d726f66
mov byte [esp + 0x3d0], bl
mov dword [esp + 0x34c], 0x5f6a626f
mov dword [esp + 0x350], 0x707061
mov dword [esp + 0x2f4], 0x646e6957
mov word [esp + 0x2f8], 0x776f
mov byte [esp + 0x2fa], bl
mov dword [esp + 0x2e4], 0x61656843
mov dword [esp + 0x2e8], 0x6e452074
mov dword [esp + 0x2ec], 0x656e6967
mov byte [esp + 0x2f0], bl
mov dword [esp + 0x534], 0x6c615654
mov dword [esp + 0x538], 0x68436575
mov dword [esp + 0x53c], 0x65676e61
mov dword [esp + 0x540], 0x6d726f46
mov byte [esp + 0x544], bl
mov dword [esp + 0x3a4], 0x68706172
mov dword [esp + 0x3a8], 0x5b202d20
mov byte [esp + 0x3ac], bl
mov dword [esp + 0x31c], 0x4b50532e
mov word [esp + 0x320], 0x5d58
mov byte [esp + 0x322], bl
mov dword [esp + 0x380], 0x686e6f5b
mov dword [esp + 0x384], 0x2e6b6f6f
mov byte [esp + 0x388], bl
mov dword [esp + 0x2bc], 0x7265732e
mov word [esp + 0x2c0], 0x5d
mov dword [esp + 0x214], 0x37323323
mov word [esp + 0x218], 0x3037
mov byte [esp + 0x21a], bl
mov dword [esp + 0x264], 0x626d6f43
mov dword [esp + 0x268], 0x6f424c6f
mov word [esp + 0x26c], 0x78
mov dword [esp + 0x3d4], 0x75686370
mov dword [esp + 0x3d8], 0x7265746e
mov byte [esp + 0x3dc], bl
mov dword [esp + 0x3b0], 0x75484350
mov dword [esp + 0x3b4], 0x7265746e
mov byte [esp + 0x3b8], bl
mov dword [esp + 0x2ac], 0x6c736554
mov word [esp + 0x2b0], 0x61
mov dword [esp + 0x270], 0x6e756854
mov dword [esp + 0x274], 0x52726564
mov dword [esp + 0x278], 0x614d3654
mov word [esp + 0x27c], 0x6e69
mov byte [esp + 0x27e], bl
mov dword [esp + 0x36c], 0x6e756854
mov dword [esp + 0x370], 0x52726564
mov dword [esp + 0x374], 0x6f463654
mov dword [esp + 0x378], 0x43446d72
mov byte [esp + 0x37c], bl
mov dword [esp + 0x334], 0x734d4256
mov dword [esp + 0x338], 0x6474536f
mov dword [esp + 0x33c], 0x706d6f43
mov dword [esp + 0x340], 0x72674d
mov dword [esp + 0x228], 0x69676f4c
mov dword [esp + 0x22c], 0x3037326e
mov dword [esp + 0x230], 0x4c4c442e
mov byte [esp + 0x234], bl
mov dword [esp + 0x21c], 0x706c6548
mov dword [esp + 0x220], 0x642e7265
mov word [esp + 0x224], 0x6c6c
mov byte [esp + 0x226], bl
mov dword [esp + 0x1b4], 0x6d2e7373
mov word [esp + 0x1b8], 0x3370
mov byte [esp + 0x1ba], bl
mov dword [esp + 0x1dc], 0x2e647370
mov dword [esp + 0x1e0], 0x6c6c64
mov dword [esp + 0x1d4], 0x2e52434f
mov dword [esp + 0x1d8], 0x6c6c64
mov dword [esp + 0x1ac], 0x642e7373
mov word [esp + 0x1b0], 0x6c6c
mov byte [esp + 0x1b2], bl
mov dword [esp + 0x290], 0x7370616d
mov dword [esp + 0x294], 0x3336315c
mov dword [esp + 0x298], 0x742e3438
mov word [esp + 0x29c], 0x7478
mov esi, 0x35
mov word [esp + 0x72c], si
mov esi, 0x30
mov word [esp + 0x72e], si
mov esi, 0x20
mov word [esp + 0x730], si
mov esi, 0x30
mov word [esp + 0x732], si
mov word [esp + 0x734], si
mov esi, 0x20
mov word [esp + 0x736], si
mov esi, 0x36
mov word [esp + 0x738], si
mov esi, 0x46
mov word [esp + 0x73a], si
mov esi, 0x20
mov word [esp + 0x73c], si
mov esi, 0x30
mov word [esp + 0x73e], si
mov word [esp + 0x740], si
mov esi, 0x20
mov word [esp + 0x742], si
mov esi, 0x37
mov word [esp + 0x744], si
mov esi, 0x33
mov word [esp + 0x746], si
mov esi, 0x20
mov word [esp + 0x748], si
mov esi, 0x30
mov word [esp + 0x74a], si
mov word [esp + 0x74c], si
mov esi, 0x20
mov word [esp + 0x74e], si
mov esi, 0x36
mov word [esp + 0x750], si
mov esi, 0x35
mov word [esp + 0x752], si
mov esi, 0x20
mov word [esp + 0x754], si
mov esi, 0x30
mov word [esp + 0x756], si
mov word [esp + 0x758], si
mov esi, 0x20
mov word [esp + 0x75a], si
mov esi, 0x36
mov word [esp + 0x75c], si
mov esi, 0x39
mov word [esp + 0x75e], si
mov esi, 0x20
mov word [esp + 0x760], si
mov esi, 0x30
mov word [esp + 0x762], si
mov word [esp + 0x764], si
mov esi, 0x20
mov word [esp + 0x766], si
mov esi, 0x36
mov word [esp + 0x768], si
mov esi, 0x34
mov word [esp + 0x76a], si
mov esi, 0x20
mov word [esp + 0x76c], si
mov esi, 0x30
mov word [esp + 0x76e], si
mov word [esp + 0x770], si
mov esi, 0x20
mov word [esp + 0x772], si
mov esi, 0x36
mov word [esp + 0x774], si
mov esi, 0x46
mov byte [esp + 0x29e], bl
mov dword [esp + 0x1ec], 0x6f6d6544
mov dword [esp + 0x1f0], 0x6b636f2e
mov byte [esp + 0x1f4], bl
mov dword [esp + 0x280], 0x6c646c6f
mov dword [esp + 0x284], 0x61656e69
mov dword [esp + 0x288], 0x652e6567
mov word [esp + 0x28c], 0x6578
mov byte [esp + 0x28e], bl
mov dword [esp + 0x1e4], 0x2e79654b
mov dword [esp + 0x1e8], 0x6c6c64
mov word [esp + 0x776], si
mov esi, 0x20
mov word [esp + 0x778], si
mov esi, 0x30
mov word [esp + 0x77a], si
mov word [esp + 0x77c], si
mov esi, 0x20
mov word [esp + 0x77e], si
mov esi, 0x36
mov word [esp + 0x780], si
mov esi, 0x45
mov word [esp + 0x782], si
mov esi, 0x20
mov word [esp + 0x784], si
mov esi, 0x30
mov word [esp + 0x786], si
mov word [esp + 0x788], si
mov esi, 0x20
mov word [esp + 0x78a], si
mov esi, 0x30
mov word [esp + 0x78c], si
mov word [esp + 0x78e], si
mov esi, 0x20
mov word [esp + 0x790], si
mov esi, 0x30
mov word [esp + 0x792], si
mov word [esp + 0x794], si
xor esi, esi
mov word [esp + 0x796], si
mov esi, 0x34
mov word [esp + 0x79c], si
mov esi, 0x43
mov word [esp + 0x79e], si
mov esi, 0x20
mov word [esp + 0x7a0], si
mov esi, 0x30
mov word [esp + 0x7a2], si
mov word [esp + 0x7a4], si
mov esi, 0x20
mov word [esp + 0x7a6], si
mov esi, 0x36
mov word [esp + 0x7a8], si
mov esi, 0x46
mov word [esp + 0x7aa], si
mov esi, 0x20
mov word [esp + 0x7ac], si
mov esi, 0x30
mov word [esp + 0x7ae], si
mov word [esp + 0x7b0], si
mov esi, 0x20
mov word [esp + 0x7b2], si
mov esi, 0x36
mov word [esp + 0x7b4], si
mov esi, 0x37
mov word [esp + 0x7b6], si
mov esi, 0x20
mov word [esp + 0x7b8], si
mov esi, 0x30
mov word [esp + 0x7ba], si
mov word [esp + 0x7bc], si
mov esi, 0x20
mov word [esp + 0x7be], si
mov esi, 0x36
mov word [esp + 0x7c0], si
mov esi, 0x39
mov word [esp + 0x7c2], si
mov esi, 0x20
mov word [esp + 0x7c4], si
mov esi, 0x30
mov word [esp + 0x7c6], si
mov word [esp + 0x7c8], si
mov esi, 0x20
mov word [esp + 0x7ca], si
mov esi, 0x36
mov word [esp + 0x7cc], si
mov esi, 0x45
mov word [esp + 0x7ce], si
mov esi, 0x20
mov word [esp + 0x7d0], si
mov esi, 0x30
mov word [esp + 0x7d2], si
mov word [esp + 0x7d4], si
mov esi, 0x20
mov word [esp + 0x7d6], si
mov esi, 0x32
mov word [esp + 0x7d8], si
mov esi, 0x45
mov word [esp + 0x7da], si
mov esi, 0x20
mov word [esp + 0x7dc], si
mov esi, 0x30
mov word [esp + 0x7de], si
mov word [esp + 0x7e0], si
mov esi, 0x20
mov word [esp + 0x7e2], si
mov esi, 0x36
mov word [esp + 0x7e4], si
mov esi, 0x34
mov word [esp + 0x7e6], si
mov esi, 0x20
mov word [esp + 0x7e8], si
mov esi, 0x30
mov word [esp + 0x7ea], si
mov word [esp + 0x7ec], si
mov esi, 0x20
mov word [esp + 0x7ee], si
mov esi, 0x36
mov word [esp + 0x7f0], si
mov esi, 0x43
mov word [esp + 0x7f2], si
mov esi, 0x20
mov word [esp + 0x7f4], si
mov esi, 0x30
mov word [esp + 0x7f6], si
mov word [esp + 0x7f8], si
mov esi, 0x20
mov word [esp + 0x7fa], si
mov esi, 0x36
mov word [esp + 0x7fc], si
mov esi, 0x43
mov word [esp + 0x7fe], si
mov esi, 0x20
mov word [esp + 0x800], si
mov esi, 0x30
mov word [esp + 0x802], si
mov word [esp + 0x804], si
mov esi, 0x20
mov word [esp + 0x806], si
mov esi, 0x30
mov word [esp + 0x808], si
mov word [esp + 0x80a], si
mov esi, 0x20
mov word [esp + 0x80c], si
mov esi, 0x30
mov word [esp + 0x80e], si
mov word [esp + 0x810], si
xor esi, esi
mov word [esp + 0x812], si
mov esi, 0x38
mov word [esp + 0x6ac], si
mov esi, 0x33
mov word [esp + 0x6ae], si
mov esi, 0x20
mov word [esp + 0x6b0], si
mov esi, 0x46
mov word [esp + 0x6b2], si
mov esi, 0x38
mov word [esp + 0x6b4], si
mov esi, 0x20
mov word [esp + 0x6b6], si
mov esi, 0x33
mov word [esp + 0x6b8], si
mov esi, 0x37
mov word [esp + 0x6ba], si
mov esi, 0x20
mov word [esp + 0x6bc], si
mov esi, 0x37
mov word [esp + 0x6be], si
mov esi, 0x44
mov word [esp + 0x6c0], si
mov esi, 0x20
mov word [esp + 0x6c2], si
mov esi, 0x33
mov word [esp + 0x6c4], si
mov esi, 0x35
mov word [esp + 0x6c6], si
xor esi, esi
mov word [esp + 0x6c8], si
mov esi, 0x35
mov word [esp + 0x6cc], si
mov esi, 0x43
mov word [esp + 0x6ce], si
mov esi, 0x20
mov word [esp + 0x6d0], si
mov esi, 0x30
mov word [esp + 0x6d2], si
mov word [esp + 0x6d4], si
mov esi, 0x20
mov word [esp + 0x6d6], si
mov esi, 0x36
mov word [esp + 0x6d8], si
mov esi, 0x46
mov word [esp + 0x6da], si
mov esi, 0x20
mov word [esp + 0x6dc], si
mov esi, 0x30
mov word [esp + 0x6de], si
mov word [esp + 0x6e0], si
mov esi, 0x20
mov word [esp + 0x6e2], si
mov esi, 0x36
mov word [esp + 0x6e4], si
mov esi, 0x43
mov word [esp + 0x6e6], si
mov esi, 0x20
mov word [esp + 0x6e8], si
mov esi, 0x30
mov word [esp + 0x6ea], si
mov word [esp + 0x6ec], si
mov esi, 0x20
mov word [esp + 0x6ee], si
mov esi, 0x36
mov word [esp + 0x6f0], si
mov esi, 0x34
mov word [esp + 0x6f2], si
mov esi, 0x20
mov word [esp + 0x6f4], si
mov esi, 0x30
mov word [esp + 0x6f6], si
mov word [esp + 0x6f8], si
mov esi, 0x20
mov word [esp + 0x6fa], si
mov esi, 0x36
mov word [esp + 0x6fc], si
mov esi, 0x43
mov word [esp + 0x6fe], si
mov esi, 0x20
mov word [esp + 0x700], si
mov esi, 0x30
mov word [esp + 0x702], si
mov word [esp + 0x704], si
mov esi, 0x20
mov word [esp + 0x706], si
mov esi, 0x36
mov word [esp + 0x708], si
mov esi, 0x39
mov word [esp + 0x70a], si
mov esi, 0x20
mov word [esp + 0x70c], si
mov esi, 0x30
mov word [esp + 0x70e], si
mov word [esp + 0x710], si
mov esi, 0x20
mov word [esp + 0x712], si
mov esi, 0x36
mov word [esp + 0x714], si
mov esi, 0x45
mov word [esp + 0x716], si
mov esi, 0x20
mov word [esp + 0x718], si
mov esi, 0x30
mov word [esp + 0x71a], si
mov word [esp + 0x71c], si
mov esi, 0x20
mov word [esp + 0x71e], si
mov esi, 0x36
mov word [esp + 0x720], si
mov esi, 0x35
mov word [esp + 0x722], si
mov esi, 0x20
mov word [esp + 0x724], si
mov esi, 0x30
mov word [esp + 0x726], si
mov word [esp + 0x728], si
xor esi, esi
mov word [esp + 0x72a], si
mov esi, 0x30
mov word [esp + 0x914], si
mov word [esp + 0x916], si
mov esi, 0x20
mov word [esp + 0x918], si
mov esi, 0x34
mov word [esp + 0x91a], si
mov esi, 0x42
mov word [esp + 0x91c], si
mov esi, 0x20
mov word [esp + 0x91e], si
mov esi, 0x36
mov word [esp + 0x920], si
mov esi, 0x39
mov word [esp + 0x922], si
mov esi, 0x20
mov word [esp + 0x924], si
mov dword [esp + 0x2fc], 0x706e694c
mov word [esp + 0x300], 0x6f72
mov byte [esp + 0x302], bl
mov dword [esp + 0x304], 0x506e694c
mov word [esp + 0x308], 0x6f72
mov byte [esp + 0x30a], bl
mov dword [esp + 0x3f8], 0x65646148
mov dword [esp + 0x3fc], 0x652e3273
mov word [esp + 0x400], 0x6578
mov byte [esp + 0x402], bl
mov dword [esp + 0x494], 0x30323141
mov dword [esp + 0x498], 0x30373239
mov dword [esp + 0x49c], 0x6c642e31
mov word [esp + 0x4a0], 0x6c
mov dword [esp + 0x484], 0x30333141
mov dword [esp + 0x488], 0x30373233
mov dword [esp + 0x48c], 0x6c642e31
mov word [esp + 0x490], 0x6c
mov dword [esp + 0x474], 0x30333141
mov dword [esp + 0x478], 0x30393138
mov dword [esp + 0x47c], 0x6c642e31
mov word [esp + 0x480], 0x6c
mov dword [esp + 0x3bc], 0x65727543
mov dword [esp + 0x3c0], 0x7478742e
mov byte [esp + 0x3c4], bl
mov dword [esp + 0x4b4], 0x56746547
mov dword [esp + 0x4b8], 0x69737265
mov dword [esp + 0x4bc], 0x652e6e6f
mov word [esp + 0x4c0], 0x6578
mov byte [esp + 0x4c2], bl
mov dword [esp + 0x4e4], 0x6b746f48
mov dword [esp + 0x4e8], 0x61737965
mov dword [esp + 0x4ec], 0x656c706d
mov dword [esp + 0x4f0], 0x7478742e
mov byte [esp + 0x4f4], bl
mov dword [esp + 0x404], 0x706d6153
mov dword [esp + 0x408], 0x742e656c
mov word [esp + 0x40c], 0x7478
mov byte [esp + 0x40e], bl
mov dword [esp + 0x4d4], 0x6e617274
mov dword [esp + 0x4d8], 0x74616c73
mov dword [esp + 0x4dc], 0x2e6e6f69
mov dword [esp + 0x4e0], 0x747874
mov dword [esp + 0x458], 0x736e6f4d
mov dword [esp + 0x45c], 0x2e726574
mov dword [esp + 0x460], 0x747874
mov dword [esp + 0x1cc], 0x7478742e
mov byte [esp + 0x1d0], bl
mov dword [esp + 0x204], 0x73257325
mov word [esp + 0x208], 0x7325
mov byte [esp + 0x20a], bl
mov esi, 0x36
mov word [esp + 0x926], si
mov esi, 0x43
mov word [esp + 0x928], si
mov esi, 0x20
mov word [esp + 0x92a], si
mov esi, 0x36
mov word [esp + 0x92c], si
mov esi, 0x43
mov word [esp + 0x92e], si
mov esi, 0x20
mov word [esp + 0x930], si
mov esi, 0x35
mov word [esp + 0x932], si
mov esi, 0x33
mov word [esp + 0x934], si
mov esi, 0x20
mov word [esp + 0x936], si
mov esi, 0x36
mov word [esp + 0x938], si
mov esi, 0x38
mov word [esp + 0x93a], si
mov esi, 0x20
mov word [esp + 0x93c], si
mov esi, 0x36
mov word [esp + 0x93e], si
mov esi, 0x39
mov word [esp + 0x940], si
mov esi, 0x20
mov word [esp + 0x942], si
mov esi, 0x36
mov word [esp + 0x944], si
mov esi, 0x35
mov word [esp + 0x946], si
mov esi, 0x20
mov word [esp + 0x948], si
mov esi, 0x36
mov word [esp + 0x94a], si
mov esi, 0x43
mov word [esp + 0x94c], si
mov esi, 0x20
mov word [esp + 0x94e], si
mov esi, 0x36
mov word [esp + 0x950], si
mov esi, 0x34
mov word [esp + 0x952], si
mov esi, 0x20
mov word [esp + 0x954], si
mov esi, 0x30
mov word [esp + 0x956], si
mov word [esp + 0x958], si
xor esi, esi
mov word [esp + 0x95a], si
mov dword [esp + 0x1a4], 0x74746553
mov dword [esp + 0x1a8], 0x676e69
mov dword [esp + 0x250], 0x6c616d53
mov dword [esp + 0x254], 0x7465506c
mov word [esp + 0x258], 0x73
mov dword [esp + 0x20c], 0x6f72655a
mov word [esp + 0x210], 0x4443
mov byte [esp + 0x212], bl
mov dword [esp + 0x1c4], 0x49556f4e
mov byte [esp + 0x1c8], bl
mov dword [esp + 0x238], 0x69576f4e
mov dword [esp + 0x23c], 0x776f646e
mov byte [esp + 0x240], bl
mov dword [esp + 0x244], 0x654d6f4e
mov dword [esp + 0x248], 0x67617373
mov word [esp + 0x24c], 0x65
mov dword [esp + 0x2c4], 0x4b746f48
mov dword [esp + 0x2c8], 0x72447965
mov dword [esp + 0x2cc], 0x6b6e69
mov dword [esp + 0x60], 0x706573
mov dword [esp + 0x1bc], 0x30303050
mov byte [esp + 0x1c0], bl
mov dword [esp + 0x1f8], 0x78797073
mov dword [esp + 0x1fc], 0x2e6b6878
mov dword [esp + 0x200], 0x6c6c64
mov dword [esp + 0x3e0], 0x65726957
mov dword [esp + 0x3e4], 0x72616873
mov word [esp + 0x3e8], 0x6b
mov dword [esp + 0x2dc], 0x6163702e
mov word [esp + 0x2e0], 0x70
mov dword [esp + 0x4a4], 0x74706143
mov dword [esp + 0x4a8], 0x6e697275
mov dword [esp + 0x4ac], 0x72662067
mov word [esp + 0x4b0], 0x6d6f
mov byte [esp + 0x4b2], bl
mov dword [esp + 0x344], 0x64646946
mov dword [esp + 0x348], 0x72656c
mov dword [esp + 0x4f8], 0x7373654d
mov dword [esp + 0x4fc], 0x20656761
mov dword [esp + 0x500], 0x6c616e41
mov dword [esp + 0x504], 0x72657a79
mov byte [esp + 0x508], bl
mov dword [esp + 0x464], 0x69737953
mov dword [esp + 0x468], 0x7265746e
mov dword [esp + 0x46c], 0x736c616e
mov byte [esp + 0x470], bl
mov dword [esp + 0x44c], 0x4274654e
mov dword [esp + 0x450], 0x6e616c61
mov dword [esp + 0x454], 0x726563
mov dword [esp + 0x2d0], 0x656c6946
mov dword [esp + 0x2d4], 0x696e6f4d
mov dword [esp + 0x2d8], 0x726f74
mov dword [esp + 0x548], 0x6f68614d
mov dword [esp + 0x54c], 0x69576962
mov dword [esp + 0x550], 0x776f646e
mov dword [esp + 0x554], 0x73616c43
mov word [esp + 0x558], 0x73
mov dword [esp + 0x30c], 0x446e6957
mov word [esp + 0x310], 0x6762
mov byte [esp + 0x312], bl
mov dword [esp + 0x428], 0x736f6847
mov dword [esp + 0x42c], 0x616c4374
mov word [esp + 0x430], 0x7373
mov byte [esp + 0x432], bl
mov dword [esp + 0x520], 0x446e6957
mov dword [esp + 0x524], 0x72466762
mov dword [esp + 0x528], 0x43656d61
mov dword [esp + 0x52c], 0x7373616c
mov byte [esp + 0x530], bl
mov dword [esp + 0x50c], 0x65636943
mov dword [esp + 0x510], 0x49556f72
mov dword [esp + 0x514], 0x46646e57
mov dword [esp + 0x518], 0x656d6172
mov byte [esp + 0x51c], bl
mov dword [esp + 0x2a0], 0x65766564
mov dword [esp + 0x2a4], 0x652e766e
mov word [esp + 0x2a8], 0x6578
mov byte [esp + 0x2aa], bl
mov dword [esp + 0x434], 0x646e6977
mov dword [esp + 0x438], 0x652e6762
mov word [esp + 0x43c], 0x6578
mov byte [esp + 0x43e], bl
mov dword [esp + 0x4c4], 0x58676244
mov dword [esp + 0x4c8], 0x6568532e
mov dword [esp + 0x4cc], 0x652e6c6c
mov word [esp + 0x4d0], 0x6578
mov byte [esp + 0x4d2], bl
mov dword [esp + 0x588], 0x7263694d
mov dword [esp + 0x58c], 0x666f736f
mov dword [esp + 0x590], 0x69562074
mov dword [esp + 0x594], 0x6c617573
mov dword [esp + 0x598], 0x73614220
mov dword [esp + 0x59c], 0x5b206369
mov byte [esp + 0x5a0], bl
mov dword [esp + 0x55c], 0x63646e77
mov dword [esp + 0x560], 0x7373616c
mov dword [esp + 0x564], 0x7365645f
mov dword [esp + 0x568], 0x5f64656b
mov dword [esp + 0x56c], 0x6b7367
mov dword [esp + 0x38c], 0x4f454449
mov dword [esp + 0x390], 0x72656e77
mov byte [esp + 0x394], bl
mov dword [esp + 0x32c], 0x2e354256
mov dword [esp + 0x330], 0x455845
mov dword [esp + 0x354], 0x2e364256
mov dword [esp + 0x358], 0x455845
mov dword [esp + 0x3ec], 0x2d502d57
mov dword [esp + 0x3f0], 0x78652e45
mov word [esp + 0x3f4], 0x65
mov dword [esp + 0x440], 0x20455057
mov esi, 0x36
mov word [esp + 0x95c], si
mov esi, 0x38
mov word [esp + 0x95e], si
mov esi, 0x20
mov word [esp + 0x960], si
mov esi, 0x31
mov word [esp + 0x962], si
mov esi, 0x39
mov word [esp + 0x964], si
mov esi, 0x20
mov word [esp + 0x966], si
mov esi, 0x30
mov word [esp + 0x968], si
mov word [esp + 0x96a], si
mov esi, 0x20
mov word [esp + 0x96c], si
mov esi, 0x30
mov word [esp + 0x96e], si
mov word [esp + 0x970], si
mov esi, 0x20
mov word [esp + 0x972], si
mov esi, 0x30
mov word [esp + 0x974], si
mov word [esp + 0x976], si
mov esi, 0x20
mov word [esp + 0x978], si
mov esi, 0x36
mov word [esp + 0x97a], si
mov esi, 0x38
mov word [esp + 0x97c], si
mov esi, 0x20
mov word [esp + 0x97e], si
mov esi, 0x3f
mov word [esp + 0x980], si
mov esi, 0x20
mov word [esp + 0x982], si
mov esi, 0x3f
mov word [esp + 0x984], si
mov esi, 0x20
mov word [esp + 0x986], si
mov esi, 0x3f
mov word [esp + 0x988], si
mov esi, 0x20
mov word [esp + 0x98a], si
mov esi, 0x3f
mov word [esp + 0x98c], si
mov esi, 0x20
mov word [esp + 0x98e], si
mov esi, 0x36
mov word [esp + 0x990], si
mov esi, 0x38
mov word [esp + 0x992], si
mov esi, 0x20
mov word [esp + 0x994], si
mov esi, 0x30
mov word [esp + 0x996], si
mov esi, 0x36
mov dword [esp + 0x444], 0x2e4f5250
mov dword [esp + 0x448], 0x657865
mov dword [esp + 0x41c], 0x53706557
mov dword [esp + 0x420], 0x642e7970
mov word [esp + 0x424], 0x6c6c
mov byte [esp + 0x426], bl
mov dword [esp + 0x35c], 0x20455057
mov dword [esp + 0x360], 0x4f5250
mov dword [esp + 0x2b4], 0x2d502d57
mov word [esp + 0x2b8], 0x45
mov dword [esp + 0x324], 0x5f455057
mov dword [esp + 0x328], 0x4f5250
mov dword [esp + 0x398], 0x69575457
mov dword [esp + 0x39c], 0x776f646e
mov byte [esp + 0x3a0], bl
mov dword [esp + 0x410], 0x54505043
mov dword [esp + 0x414], 0x546c6f6f
mov word [esp + 0x418], 0x7069
mov byte [esp + 0x41a], bl
mov dword [esp + 0x314], 0x6f537859
mov word [esp + 0x318], 0x7466
mov byte [esp + 0x31a], bl
mov word [esp + 0x998], si
mov esi, 0x20
mov word [esp + 0x99a], si
mov esi, 0x30
mov word [esp + 0x99c], si
mov word [esp + 0x99e], si
mov esi, 0x20
mov word [esp + 0x9a0], si
mov esi, 0x30
mov word [esp + 0x9a2], si
mov word [esp + 0x9a4], si
mov esi, 0x20
mov word [esp + 0x9a6], si
mov esi, 0x30
mov word [esp + 0x9a8], si
mov word [esp + 0x9aa], si
mov esi, 0x20
mov word [esp + 0x9ac], si
mov esi, 0x45
mov word [esp + 0x9ae], si
mov esi, 0x38
mov word [esp + 0x9b0], si
mov esi, 0x20
mov word [esp + 0x9b2], si
mov esi, 0x3f
mov word [esp + 0x9b4], si
mov esi, 0x20
mov word [esp + 0x9b6], si
mov esi, 0x3f
mov word [esp + 0x9b8], si
mov esi, 0x20
mov word [esp + 0x9ba], si
mov esi, 0x3f
mov word [esp + 0x9bc], si
mov esi, 0x20
mov word [esp + 0x9be], si
mov esi, 0x3f
mov word [esp + 0x9c0], si
mov esi, 0x20
mov word [esp + 0x9c2], si
mov esi, 0x38
mov word [esp + 0x9c4], si
mov esi, 0x33
mov word [esp + 0x9c6], si
mov esi, 0x20
mov word [esp + 0x9c8], si
mov esi, 0x43
mov word [esp + 0x9ca], si
mov esi, 0x34
mov word [esp + 0x9cc], si
mov esi, 0x20
mov word [esp + 0x9ce], si
mov esi, 0x30
mov word [esp + 0x9d0], si
mov esi, 0x43
mov word [esp + 0x9d2], si
lea eax, [esp + 0x1f8]
xor esi, esi
push eax
mov word [esp + 0x9d8], si
mov dword [esp + 0x1a0], 0x73736463
mov word [esp + 0x1a4], 0x6473
mov byte [esp + 0x1a6], bl
mov dword [esp + 0x574], 0x775c3a63
mov dword [esp + 0x578], 0x6f646e69
mov dword [esp + 0x57c], 0x655c7377
mov dword [esp + 0x580], 0x6f6c7078
mov dword [esp + 0x584], 0x2e726572
mov dword [esp + 0x588], 0x657865
mov dword [esp + 0x368], 0x64695751
mov dword [esp + 0x36c], 0x746567
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x414030
push 0xffffffffffffffff
lea ecx, [esp + 0x1fc]
push ecx
mov edx, ecx
push edx
mov eax, ecx
push eax
push 5
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
push ebx
push ebx
push 0x4123c0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push 5
push eax
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
push 0x18
mov dword [esp + 0x4c], esi
mov dword [esp + 0x70], ebx
call fcn.00445142
add esp, 4
cmp eax, ebx
je 0x41814f
mov dword [esp + 0x68], eax
mov dword [eax], eax
mov eax, dword [esp + 0x68]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x68]
mov dword [eax + 8], eax
mov edx, dword [esp + 0x68]
mov byte [edx + 0x14], 1
mov eax, dword [esp + 0x68]
mov byte [eax + 0x15], 1
mov dword [esp + 0x1310], ebx
push 0x18
mov dword [esp + 0xec], ebx
call fcn.00445142
add esp, 4
cmp eax, ebx
je 0x418117
mov dword [esp + 0xe4], eax
mov dword [eax], eax
mov eax, dword [esp + 0xe4]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xe4]
mov dword [eax + 8], eax
mov ecx, dword [esp + 0xe4]
mov byte [ecx + 0x14], 1
mov edx, dword [esp + 0xe4]
mov byte [edx + 0x15], 1
mov byte [esp + 0x1310], 1
push 0x18
mov dword [esp + 0xdc], ebx
call fcn.00445142
add esp, 4
cmp eax, ebx
je 0x4180e5
mov dword [esp + 0xd4], eax
mov dword [eax], eax
mov eax, dword [esp + 0xd4]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xd4]
mov dword [eax + 8], eax
mov eax, dword [esp + 0xd4]
mov byte [eax + 0x14], 1
mov ecx, dword [esp + 0xd4]
mov byte [ecx + 0x15], 1
mov byte [esp + 0x1310], 2
push 0x18
mov dword [esp + 0x80], ebx
call fcn.00445142
add esp, 4
cmp eax, ebx
je 0x4180ad
mov dword [esp + 0x78], eax
mov dword [eax], eax
mov eax, dword [esp + 0x78]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x78]
mov dword [eax + 8], eax
mov edx, dword [esp + 0x78]
mov byte [edx + 0x14], 1
mov eax, dword [esp + 0x78]
mov byte [eax + 0x15], 1
mov byte [esp + 0x1310], 3
push 0x18
mov dword [esp + 0xfc], ebx
call fcn.00445142
add esp, 4
cmp eax, ebx
je 0x41807b
mov dword [esp + 0xf4], eax
mov dword [eax], eax
mov eax, dword [esp + 0xf4]
mov dword [eax + 4], eax
mov eax, dword [esp + 0xf4]
mov dword [eax + 8], eax
mov ecx, dword [esp + 0xf4]
mov byte [ecx + 0x14], 1
mov edx, dword [esp + 0xf4]
mov byte [edx + 0x15], 1
mov byte [esp + 0x1310], 4
push 0x18
mov dword [esp + 0x118], ebx
call fcn.00445142
add esp, 4
cmp eax, ebx
je 0x418043
mov dword [esp + 0x110], eax
mov dword [eax], eax
mov eax, dword [esp + 0x110]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x110]
mov dword [eax + 8], eax
mov eax, dword [esp + 0x110]
mov byte [eax + 0x14], 1
mov ecx, dword [esp + 0x110]
mov byte [ecx + 0x15], 1
mov byte [esp + 0x1310], 5
mov byte [esp + 0x2f], bl
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x88], ebx
cmp esi, ebx
je 0x417ef0
mov edi, dword [sym.imp.USER32.dll_GetWindowLongW]
push 0xff
lea edx, [esp + 0x819]
push ebx
push edx
mov byte [esp + 0x820], bl
call fcn.0054b8b0
add esp, 0xc
push 0xff
lea eax, [esp + 0x9e1]
push ebx
push eax
mov byte [esp + 0x9e8], bl
call fcn.0054b8b0
add esp, 0xc
push 0x104
lea ecx, [esp + 0x5a8]
push ebx
push ecx
call fcn.0054b8b0
add esp, 0xc
push 0x104
lea edx, [esp + 0xae0]
push ebx
push edx
call fcn.0054b8b0
add esp, 0xc
push 0x103
lea eax, [esp + 0xde9]
push ebx
push eax
mov byte [esp + 0xdf0], bl
call fcn.0054b8b0
add esp, 0xc
push 0x103
lea ecx, [esp + 0x10f1]
push ebx
push ecx
mov byte [esp + 0x10f8], bl
call fcn.0054b8b0
add esp, 0xc
push 0x103
lea edx, [esp + 0x11f9]
push ebx
push edx
mov byte [esp + 0x1200], bl
call fcn.0054b8b0
add esp, 0xc
push 0x1ff
lea eax, [esp + 0xbe9]
push ebx
push eax
mov byte [esp + 0xbf0], bl
call fcn.0054b8b0
add esp, 0xc
push 0x1ff
lea ecx, [esp + 0xef1]
push ebx
push ecx
mov byte [esp + 0xef8], bl
call fcn.0054b8b0
mov eax, dword [esp + 0x54]
add esp, 0xc
lea edx, [esp + 0x18]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esp + 0x18], eax
je 0x417ed7
mov esi, dword [esp + 0x48]
push 0x100
lea ecx, [esp + 0x818]
push ecx
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0x100
lea edx, [esp + 0x9e0]
push edx
push esi
call dword [sym.imp.USER32.dll_GetClassNameA]
push 0xfffffffffffffff4
push esi
call edi
push 0xffffffffffffffec
push esi
mov dword [esp + 0x2c], eax
call edi
push 0xfffffffffffffff0
push esi
mov dword [esp + 0x30], eax
call edi
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x270]
push eax
lea ecx, [esp + 0x9e0]
push ecx
call fcn.00547e1a
add esp, 8
test eax, eax
je 0x4143f1
lea edx, [esp + 0x36c]
push edx
lea eax, [esp + 0x9e0]
push eax
call fcn.00547e1a
add esp, 8
test eax, eax
je 0x4143f1
lea ecx, [esp + 0x334]
push ecx
lea edx, [esp + 0x9e0]
push edx
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x4147b3
call fcn.0045590c
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
je 0x418039
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
mov byte [esp + 0x1310], 6
call fcn.0045590c
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
je 0x418039
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
mov byte [esp + 0x1310], 7
mov edi, dword [esp + 0x18]
call fcn.00402da0
mov eax, dword [0x64eea4]
mov dword [esp + 0xac], ebx
mov dword [esp + 0x16c], edi
mov dword [esp + 0x170], ebx
mov dword [esp + 0x30], 0x18
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
cmp eax, ebx
je 0x4144b3
lea ecx, [esp + 0x16c]
push ecx
lea edx, [esp + 0x34]
push edx
push 0x1fffff
lea ecx, [esp + 0xb8]
push ecx
call eax
mov eax, dword [esp + 0xac]
cmp eax, ebx
jne 0x4144c7
push edi
push ebx
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0xac], eax
mov dword [esp + 0x4c], eax
cmp eax, ebx
je 0x41475b
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
test eax, eax
je 0x414750
lea eax, [esp + 0x5a4]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x414500
lea ecx, [esp + 0x5a4]
sub eax, edx
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.00406180
lea eax, [esp + 0x5a4]
push eax
lea ecx, [esp + 0xae0]
push 0x104
push ecx
call fcn.00547e61
add esp, 0xc
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x14c]
lea ecx, [esp + 0xf4]
call fcn.00436f10
mov eax, dword [esp + 0x148]
cmp eax, dword [esp + 0xf4]
jne 0x4145d4
push 1
mov esi, 0x619914
lea eax, [esp + 0x5a8]
mov dword [esp + 0x54], ebx
call fcn.00405ab0
lea ecx, [esp + 0x54]
add esp, 4
push ecx
lea edi, [esp + 0x24]
lea ecx, [esp + 0x5a8]
call fcn.00405b10
add esp, 4
cmp dword [esp + 0x50], ebx
jle 0x4145d4
push 0x61c070
lea edx, [esp + 0x20]
push edx
mov eax, 1
call fcn.00406180
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx - 0xc]
push ecx
lea ecx, [esp + 0x20]
push ecx
call fcn.00406180
lea edx, [esp + 0x18]
lea eax, [esp + 0xf0]
call fcn.00436e90
mov dword [eax], 1
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
push edx
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 0x19
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
mov edi, dword [esp + 0x68]
lea ecx, [esp + 0xe00]
add esp, 0x1c
push ecx
call fcn.00403650
add esp, 4
test eax, eax
je 0x414750
push 1
xor esi, esi
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea edx, [esp + 0xde4]
push edx
lea eax, [esp + 0x5a8]
push eax
call fcn.00545340
add esp, 8
test eax, eax
jne 0x414750
lea ecx, [esp + 0x1c]
call fcn.00406410
lea ecx, [esp + 0x20]
call fcn.00406410
lea eax, [esp + 0xde4]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x414670
lea ecx, [esp + 0xde4]
sub eax, edx
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.00406180
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x120]
lea ecx, [esp + 0x110]
call fcn.00436f10
mov ecx, dword [esp + 0x11c]
cmp ecx, dword [esp + 0x110]
jne 0x414722
push 1
mov esi, 0x619914
lea eax, [esp + 0xde8]
mov dword [esp + 0x54], ebx
call fcn.00405ab0
lea edx, [esp + 0x54]
add esp, 4
push edx
lea edi, [esp + 0x24]
lea ecx, [esp + 0xde8]
call fcn.00405b10
add esp, 4
cmp dword [esp + 0x50], ebx
jle 0x414722
lea eax, [esp + 0x1c]
push eax
mov edx, 0x61c070
call fcn.00406080
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx - 0xc]
push ecx
lea ecx, [esp + 0x20]
push ecx
call fcn.00406180
lea edx, [esp + 0x18]
lea eax, [esp + 0x10c]
call fcn.00436e90
mov dword [eax], 1
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
push edx
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 0x1a
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
mov ecx, dword [esp + 0x4c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [esp + 0x1310], 6
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x414789
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1310], 5
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4147b9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x4147b9
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [esp + 0x814]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4147c3
sub eax, edx
je 0x414982
lea ecx, [esp + 0x3e0]
push ecx
lea edx, [esp + 0x818]
push edx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x4148a2
lea eax, [esp + 0x2dc]
push eax
lea ecx, [esp + 0x818]
push ecx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x4148a2
lea edx, [esp + 0x4a4]
push edx
lea eax, [esp + 0x818]
push eax
call fcn.00545340
add esp, 8
test eax, eax
jne 0x4148a2
lea ecx, [esp + 0x344]
push ecx
lea edx, [esp + 0x818]
push edx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x4148a2
lea eax, [esp + 0x4f8]
push eax
lea ecx, [esp + 0x818]
push ecx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x4148a2
lea edx, [esp + 0x464]
push edx
lea eax, [esp + 0x818]
push eax
call fcn.00545340
add esp, 8
test eax, eax
jne 0x4148a2
lea ecx, [esp + 0x44c]
push ecx
lea edx, [esp + 0x818]
push edx
call fcn.00545340
add esp, 8
test eax, eax
je 0x414982
mov edi, dword [esp + 0x18]
call fcn.00402da0
mov eax, dword [0x64eea4]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x15c], edi
mov dword [esp + 0x160], ebx
mov dword [esp + 0x30], 0x18
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
cmp eax, ebx
je 0x41490c
lea ecx, [esp + 0x15c]
push ecx
lea edx, [esp + 0x34]
push edx
push 0x1fffff
lea ecx, [esp + 0xac]
push ecx
call eax
mov eax, dword [esp + 0xa0]
cmp eax, ebx
jne 0x414920
push edi
push ebx
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0xa0], eax
mov edi, eax
cmp eax, ebx
je 0x41493e
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
push edi
call esi
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 4
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
push ebx
push ebx
push 0x4123c0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call esi
lea eax, [esp + 0x814]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x414990
sub eax, edx
je 0x4149b7
lea edx, [esp + 0x30c]
push edx
lea eax, [esp + 0x818]
push eax
call fcn.00545340
add esp, 8
test eax, eax
jne 0x414a0f
lea ecx, [esp + 0x428]
push ecx
lea edx, [esp + 0x9e0]
push edx
call fcn.00547e1a
add esp, 8
test eax, eax
je 0x414a0f
lea eax, [esp + 0x520]
push eax
lea ecx, [esp + 0x9e0]
push ecx
call fcn.00547e1a
add esp, 8
test eax, eax
je 0x414a0f
lea edx, [esp + 0x50c]
push edx
lea eax, [esp + 0x9e0]
push eax
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x414b5f
mov edi, dword [esp + 0x18]
call fcn.00402da0
mov eax, dword [0x64eea4]
mov dword [esp + 0xa4], ebx
mov dword [esp + 0x154], edi
mov dword [esp + 0x158], ebx
mov dword [esp + 0x30], 0x18
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
cmp eax, ebx
je 0x414a79
lea ecx, [esp + 0x154]
push ecx
lea edx, [esp + 0x34]
push edx
push 0x1fffff
lea ecx, [esp + 0xb0]
push ecx
call eax
mov eax, dword [esp + 0xa4]
cmp eax, ebx
jne 0x414a8d
push edi
push ebx
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0xa4], eax
mov edi, eax
cmp eax, ebx
je 0x414aab
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
push edi
call esi
lea eax, [esp + 0x2a0]
push eax
lea ecx, [esp + 0x5a8]
push ecx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x414aff
lea edx, [esp + 0x434]
push edx
lea eax, [esp + 0x5a8]
push eax
call fcn.00545340
add esp, 8
test eax, eax
jne 0x414aff
lea ecx, [esp + 0x4c4]
push ecx
lea edx, [esp + 0x5a8]
push edx
call fcn.00545340
add esp, 8
test eax, eax
je 0x414b5f
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 6
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
lea edx, [esp + 0x2a0]
push edx
lea eax, [esp + 0x5a8]
push eax
call fcn.00545340
add esp, 8
test eax, eax
jne 0x414b5f
push ebx
push ebx
push ebx
push 0x4123c0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call esi
lea eax, [esp + 0x814]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x414b70
sub eax, edx
je 0x414c7f
lea ecx, [esp + 0x588]
push ecx
lea edx, [esp + 0x818]
push edx
call fcn.00545340
add esp, 8
test eax, eax
je 0x414c7f
mov edi, dword [esp + 0x18]
call fcn.00402da0
mov eax, dword [0x64eea4]
mov dword [esp + 0xb8], ebx
mov dword [esp + 0x14c], edi
mov dword [esp + 0x150], ebx
mov dword [esp + 0x30], 0x18
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
cmp eax, ebx
je 0x414c09
lea ecx, [esp + 0x14c]
push ecx
lea edx, [esp + 0x34]
push edx
push 0x1fffff
lea ecx, [esp + 0xc4]
push ecx
call eax
mov eax, dword [esp + 0xb8]
cmp eax, ebx
jne 0x414c1d
push edi
push ebx
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0xb8], eax
mov edi, eax
cmp eax, ebx
je 0x414c3b
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
push edi
call esi
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 6
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
push ebx
push ebx
push 0x4123c0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call esi
lea edx, [esp + 0x55c]
push edx
lea eax, [esp + 0x9e0]
push eax
call fcn.00547e1a
add esp, 8
test eax, eax
je 0x414cbb
lea ecx, [esp + 0x38c]
push ecx
lea edx, [esp + 0x9e0]
push edx
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x414dd3
mov edi, dword [esp + 0x18]
call fcn.00402da0
mov eax, dword [0x64eea4]
mov dword [esp + 0xb0], ebx
mov dword [esp + 0x164], edi
mov dword [esp + 0x168], ebx
mov dword [esp + 0x30], 0x18
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
cmp eax, ebx
je 0x414d25
lea ecx, [esp + 0x164]
push ecx
lea edx, [esp + 0x34]
push edx
push 0x1fffff
lea ecx, [esp + 0xbc]
push ecx
call eax
mov eax, dword [esp + 0xb0]
cmp eax, ebx
jne 0x414d39
push edi
push ebx
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0xb0], eax
mov edi, eax
cmp eax, ebx
je 0x414d57
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
push edi
call esi
lea eax, [esp + 0x32c]
push eax
lea ecx, [esp + 0x5a8]
push ecx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x414d8f
lea edx, [esp + 0x354]
push edx
lea eax, [esp + 0x5a8]
push eax
call fcn.00545340
add esp, 8
test eax, eax
je 0x414dd3
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 6
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
push ebx
push ebx
push ebx
push 0x4123c0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call esi
lea eax, [esp + 0x548]
push eax
lea ecx, [esp + 0x9e0]
push ecx
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x414f1a
mov edi, dword [esp + 0x18]
call fcn.00402da0
mov eax, dword [0x64eea4]
mov dword [esp + 0xc8], ebx
mov dword [esp + 0x174], edi
mov dword [esp + 0x178], ebx
mov dword [esp + 0x30], 0x18
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
cmp eax, ebx
je 0x414e5d
lea edx, [esp + 0x174]
push edx
lea ecx, [esp + 0x34]
push ecx
push 0x1fffff
lea edx, [esp + 0xd4]
push edx
call eax
mov eax, dword [esp + 0xc8]
cmp eax, ebx
jne 0x414e71
push edi
push ebx
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0xc8], eax
mov edi, eax
cmp eax, ebx
je 0x414e8f
push 0x104
lea ecx, [esp + 0x5a8]
push ecx
push ebx
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
push edi
call esi
lea edx, [esp + 0x2d0]
push edx
lea eax, [esp + 0x5a8]
push eax
call fcn.00545340
add esp, 8
test eax, eax
jne 0x414ee4
lea eax, [esp + 0x814]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x414eb5
sub eax, edx
je 0x415173
lea ecx, [esp + 0x2d0]
push ecx
lea edx, [esp + 0x818]
push edx
call fcn.00545340
add esp, 8
test eax, eax
je 0x415173
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 0x18
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
jmp 0x415173
lea edx, [esp + 0x364]
push edx
lea eax, [esp + 0x9e0]
push eax
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x415173
call fcn.0045590c
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
je 0x418039
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
mov byte [esp + 0x1310], 8
call fcn.0045590c
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
je 0x418039
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [esp + 0x1c], esi
mov byte [esp + 0x1310], 9
mov edi, dword [esp + 0x18]
call fcn.00402da0
mov eax, dword [0x64eea4]
mov dword [esp + 0x90], ebx
mov dword [esp + 0x184], edi
mov dword [esp + 0x188], ebx
mov dword [esp + 0x30], 0x18
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
cmp eax, ebx
je 0x414ffc
lea ecx, [esp + 0x184]
push ecx
lea edx, [esp + 0x34]
push edx
push 0x1fffff
lea ecx, [esp + 0x9c]
push ecx
call eax
mov eax, dword [esp + 0x90]
cmp eax, ebx
jne 0x415010
push edi
push ebx
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0x90], eax
mov dword [esp + 0x50], eax
cmp eax, ebx
je 0x4150fd
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
test eax, eax
je 0x4150f2
lea eax, [esp + 0x5a4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x415043
lea ecx, [esp + 0x5a4]
sub eax, edx
push ecx
lea edx, [esp + 0x24]
push edx
call fcn.00406180
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x128]
lea ecx, [esp + 0x78]
call fcn.00436f10
mov ecx, dword [esp + 0x124]
cmp ecx, dword [esp + 0x78]
jne 0x4150f2
push 1
mov esi, 0x619914
lea eax, [esp + 0x5a8]
mov dword [esp + 0x50], ebx
call fcn.00405ab0
lea edx, [esp + 0x50]
add esp, 4
push edx
lea edi, [esp + 0x20]
lea ecx, [esp + 0x5a8]
call fcn.00405b10
add esp, 4
cmp dword [esp + 0x4c], ebx
jle 0x4150ee
lea eax, [esp + 0x20]
push eax
mov edx, 0x61c070
call fcn.00406080
mov esi, dword [esp + 0x1c]
mov eax, dword [esi - 0xc]
push esi
lea ecx, [esp + 0x24]
push ecx
call fcn.00406180
lea edx, [esp + 0x18]
lea eax, [esp + 0x74]
call fcn.00436e90
mov dword [eax], 1
jmp 0x4150f2
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x50]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x20]
push eax
push edi
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 0x38
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
lea eax, [esi - 0x10]
add esp, 0x1c
mov byte [esp + 0x1310], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41514f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [edi - 0x10]
mov byte [esp + 0x1310], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x415173
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esp + 0x814]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x415180
sub eax, edx
je 0x4152cf
lea ecx, [esp + 0x35c]
push ecx
lea edx, [esp + 0x818]
push edx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x4151e7
lea eax, [esp + 0x2b4]
push eax
lea ecx, [esp + 0x818]
push ecx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x4151e7
lea edx, [esp + 0x324]
push edx
lea eax, [esp + 0x818]
push eax
call fcn.00545340
add esp, 8
test eax, eax
je 0x4152cf
mov esi, dword [esp + 0x18]
call fcn.00402da0
mov eax, dword [0x64eea4]
mov dword [esp + 0x98], ebx
mov dword [esp + 0x17c], esi
mov dword [esp + 0x180], ebx
mov dword [esp + 0x30], 0x18
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
cmp eax, ebx
je 0x415251
lea ecx, [esp + 0x17c]
push ecx
lea edx, [esp + 0x34]
push edx
push 0x1fffff
lea ecx, [esp + 0xa4]
push ecx
call eax
mov eax, dword [esp + 0x98]
cmp eax, ebx
jne 0x415265
push esi
push ebx
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0x98], eax
mov esi, eax
cmp eax, ebx
je 0x415287
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 0xf
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
push ebx
push ebx
push 0x4123c0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [esp + 0x9dc]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4152e0
sub eax, edx
je 0x417ed7
lea edx, [esp + 0x25c]
push edx
lea eax, [esp + 0x9e0]
push eax
call fcn.00547e1a
add esp, 8
test eax, eax
je 0x417df0
lea ecx, [esp + 0x3c8]
push ecx
lea edx, [esp + 0x9e0]
push edx
call fcn.00547e1a
add esp, 8
test eax, eax
je 0x417df0
lea eax, [esp + 0x34c]
push eax
lea ecx, [esp + 0x9e0]
push ecx
call fcn.00547e1a
add esp, 8
test eax, eax
je 0x417df0
lea eax, [esp + 0x814]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x415360
sub eax, edx
je 0x4153ff
lea edx, [esp + 0x2f4]
push edx
lea eax, [esp + 0x9e0]
push eax
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x4153ff
lea ecx, [esp + 0x2e4]
push ecx
lea edx, [esp + 0x818]
push edx
call fcn.00545340
add esp, 8
test eax, eax
je 0x4153ff
mov edi, dword [esp + 0x18]
call fcn.00403d40
mov edi, eax
cmp edi, ebx
je 0x4153d2
push 0x104
lea eax, [esp + 0x5a8]
push eax
push ebx
push edi
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push ebx
push 0x4d
lea edx, [esp + 0x1b4]
push edx
jmp 0x417eb8
lea eax, [esp + 0x814]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x415410
sub eax, edx
je 0x41548f
lea eax, [esp + 0x2e4]
push eax
lea ecx, [esp + 0x818]
push ecx
call fcn.00545340
add esp, 8
test eax, eax
je 0x41548f
mov edi, dword [esp + 0x18]
call fcn.00403d40
mov edi, eax
cmp edi, ebx
je 0x415462
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push edi
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push ebx
push 0x4d
lea ecx, [esp + 0x1b4]
push ecx
jmp 0x417eb8
lea eax, [esp + 0x9dc]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4154a0
sub eax, edx
je 0x4154f5
lea edx, [esp + 0x534]
push edx
lea eax, [esp + 0x9e0]
push eax
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x4154f5
mov edi, dword [esp + 0x18]
call fcn.00403d40
mov edi, eax
cmp edi, ebx
je 0x417e90
push 0x104
lea ecx, [esp + 0x5a8]
push ecx
push ebx
push edi
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
push edi
jmp 0x417e8a
lea eax, [esp + 0x814]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x415500
sub eax, edx
je 0x415547
lea ecx, [esp + 0x270]
push ecx
lea edx, [esp + 0x9e0]
push edx
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x415547
lea eax, [esp + 0x2ac]
push eax
lea ecx, [esp + 0x818]
push ecx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x417d90
lea eax, [esp + 0x814]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x415551
sub eax, edx
je 0x415579
lea edx, [esp + 0x814]
push 0x61c078
push edx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x4153a7
lea eax, [esp + 0x814]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x415583
sub eax, edx
je 0x4155ae
lea eax, [esp + 0x3a4]
push eax
lea ecx, [esp + 0x818]
push ecx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x417d90
lea edx, [esp + 0x31c]
push edx
lea eax, [esp + 0x818]
push eax
call fcn.00545340
add esp, 8
test eax, eax
jne 0x417d90
lea ecx, [esp + 0x380]
push ecx
lea edx, [esp + 0x818]
push edx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x417d90
lea eax, [esp + 0x2bc]
push eax
lea ecx, [esp + 0x818]
push ecx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x417d90
cmp dword [esp + 0x18], ebx
je 0x4158e3
lea edx, [esp + 0x214]
push edx
lea eax, [esp + 0x9e0]
push eax
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x415790
lea eax, [esp + 0x814]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x415642
sub eax, edx
je 0x415790
mov esi, dword [esp + 0x28]
cmp esi, 0x50101
jne 0x415794
mov ecx, dword [esp + 0x48]
push 5
push ecx
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je 0x415794
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x148]
lea ecx, [esp + 0xd4]
call fcn.00436f10
mov eax, dword [esp + 0x144]
cmp eax, dword [esp + 0xd4]
jne 0x4156b4
lea edx, [esp + 0x18]
lea eax, [esp + 0xd0]
call fcn.00436e90
mov dword [eax], 1
mov edi, dword [esp + 0x18]
call fcn.00403d40
mov esi, eax
cmp esi, ebx
je 0x417ed7
push 0x104
lea ecx, [esp + 0x5a8]
push ecx
push ebx
push esi
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
mov edi, eax
cmp edi, ebx
jne 0x4156f2
lea edi, [esp + 0x5a4]
mov ecx, esi
call fcn.00403be0
mov edi, eax
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, ebx
je 0x417ed7
lea edx, [esp + 0x5a4]
push edx
lea eax, [esp + 0xae0]
push 0x104
push eax
call fcn.00547e61
add esp, 0xc
lea ecx, [esp + 0x3d4]
push ecx
lea edx, [esp + 0xae0]
push edx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x41575a
lea eax, [esp + 0x3b0]
push eax
lea ecx, [esp + 0xae0]
push ecx
call fcn.00545340
add esp, 8
test eax, eax
je 0x417ed7
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 0x33
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
jmp 0x417ed7
mov esi, dword [esp + 0x28]
cmp dword [esp + 0x18], ebx
je 0x4158e3
lea ecx, [esp + 0x264]
push ecx
lea edx, [esp + 0x9e0]
push edx
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x4158d9
cmp dword [esp + 0x24], 0x3e8
jne 0x4158d9
mov eax, dword [esp + 0x9c]
cmp eax, 0x44808111
je 0x4157e5
cmp eax, 0x44a08111
jne 0x4158d9
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x130]
lea ecx, [esp + 0xd4]
call fcn.00436f10
mov ecx, dword [esp + 0x12c]
cmp ecx, dword [esp + 0xd4]
je 0x415814
inc dword [esp + 0x88]
cmp dword [esp + 0x88], 2
jl 0x417ed7
mov edi, dword [esp + 0x18]
call fcn.00403d40
mov esi, eax
cmp esi, ebx
je 0x41585f
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push esi
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
cmp eax, ebx
jne 0x415858
lea edi, [esp + 0x5a4]
mov ecx, esi
call fcn.00403be0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00402e50
cmp eax, 1
jne 0x4158a3
lea eax, [esp + 0x570]
push eax
lea ecx, [esp + 0x5a8]
push ecx
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x4158a3
lea edx, [esp + 0x18]
lea eax, [esp + 0xd0]
call fcn.00436e90
mov dword [eax], ebx
mov dword [esp + 0x88], ebx
jmp 0x417ed7
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 0x34
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
jmp 0x417ed7
cmp dword [esp + 0x18], ebx
jne 0x4159d5
mov edi, dword [esp + 0x48]
push 0xfffffffffffffff4
push edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
push 0xffffffffffffffec
push edi
mov esi, eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
push 0xfffffffffffffff0
push edi
mov dword [esp + 0x2c], eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edi, eax
lea edx, [esp + 0x9dc]
cmp byte [esp + 0x2f], bl
jne 0x415963
lea ecx, [esp + 0x214]
push ecx
push edx
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x415994
lea eax, [esp + 0x814]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x415936
sub eax, edx
je 0x415994
cmp dword [esp + 0x24], 0x50101
jne 0x415994
mov eax, dword [esp + 0x48]
push 5
push eax
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je 0x415994
mov byte [esp + 0x2f], 1
jmp 0x415990
lea ecx, [esp + 0x264]
push ecx
push edx
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x415994
cmp esi, 0x3e8
jne 0x415994
cmp edi, 0x44808111
je 0x415990
cmp edi, 0x44a08111
jne 0x415994
inc dword [esp + 0x5c]
cmp dword [esp + 0x5c], 3
jl 0x417ed7
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 0x32
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
jmp 0x417ed7
lea eax, [esp + 0x814]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4159e0
sub eax, edx
jne 0x415cc0
lea edx, [esp + 0x398]
push edx
lea eax, [esp + 0x9e0]
push eax
call fcn.00547e1a
add esp, 8
test eax, eax
je 0x415a2b
lea ecx, [esp + 0x410]
push ecx
lea edx, [esp + 0x9e0]
push edx
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x415cc0
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x140]
lea ecx, [esp + 0xe4]
call fcn.00436f10
mov ecx, dword [esp + 0x13c]
lea edx, [esp + 0x18]
lea eax, [esp + 0xe0]
cmp ecx, dword [esp + 0xe4]
je 0x416ff5
call fcn.00436e90
mov edi, dword [eax]
lea edx, [esp + 0x18]
lea eax, [esp + 0xe0]
inc edi
call fcn.00436e90
mov dword [eax], edi
cmp edi, 2
jl 0x417ed7
mov edi, dword [esp + 0x18]
call fcn.00403d40
mov edi, eax
mov dword [esp + 0x24], edi
cmp edi, ebx
je 0x417ed7
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push edi
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
test eax, eax
je 0x415cba
lea eax, [esp + 0x5a4]
push eax
lea ecx, [esp + 0xae0]
push 0x104
push ecx
call fcn.00547e61
add esp, 0xc
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x138]
lea ecx, [esp + 0x78]
call fcn.00436f10
mov eax, dword [esp + 0x134]
cmp eax, dword [esp + 0x78]
jne 0x415ba7
lea esi, [esp + 0xb4]
call fcn.00436f80
mov byte [esp + 0x1310], 0xa
push 1
mov esi, 0x619914
lea eax, [esp + 0x5a8]
mov dword [esp + 0x2c], ebx
call fcn.00405ab0
lea ecx, [esp + 0x2c]
add esp, 4
push ecx
lea edi, [esp + 0xb8]
lea ecx, [esp + 0x5a8]
call fcn.00405b10
add esp, 4
cmp dword [esp + 0x28], ebx
jle 0x415b8f
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0xb4]
push edx
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x5b0]
push edx
push 0x1f
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
lea edx, [esp + 0x18]
lea eax, [esp + 0x74]
call fcn.00436e90
mov dword [eax], 1
lea ecx, [esp + 0xb4]
mov byte [esp + 0x1310], 5
call fcn.00406de0
mov edi, dword [esp + 0x24]
lea ecx, [esp + 0x314]
push ecx
lea edx, [esp + 0xae0]
push edx
call fcn.00545340
add esp, 8
test eax, eax
je 0x415bfa
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 0x12
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push edi
jmp 0x417ed1
mov esi, dword [0x64f038]
mov eax, dword [0x64f034]
lea edx, [esp + 0x18]
push edx
push esi
push eax
lea eax, [esp + 0x1a0]
call fcn.00438610
add esp, 0xc
cmp dword [eax], esi
jne 0x415cba
push edi
call fcn.00402f10
add esp, 4
test eax, eax
jne 0x415cba
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esp + 0x18], eax
je 0x415cba
lea eax, [esp + 0x18]
call fcn.00436cb0
lea ecx, [esp + 0xadc]
push ecx
call fcn.00403cf0
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x415cba
push ebx
push 1
push ecx
lea edx, [esp + 0x968]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.0043ab40
push 0x300000
push esi
push edi
call fcn.004124e0
add esp, 0x18
cmp eax, ebx
jbe 0x415cba
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0xae0]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 0x13
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push edi
jmp 0x417ed1
lea edx, [esp + 0x270]
push edx
lea eax, [esp + 0x9e0]
push eax
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x416432
lea ecx, [esp + 0x18]
push ecx
lea eax, [esp + 0x124]
lea ecx, [esp + 0x68]
call fcn.00436f10
mov edx, dword [esp + 0x120]
cmp edx, dword [esp + 0x68]
lea eax, [esp + 0x64]
lea edx, [esp + 0x18]
je 0x416ff5
call fcn.00436e90
mov edi, dword [eax]
lea edx, [esp + 0x18]
lea eax, [esp + 0x64]
inc edi
call fcn.00436e90
mov dword [eax], edi
cmp edi, 2
jl 0x417ed7
mov edi, dword [esp + 0x18]
call fcn.00403d40
mov dword [esp + 0x20], eax
cmp eax, ebx
je 0x417ed7
push 0x104
lea ecx, [esp + 0x5a8]
push ecx
push ebx
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
test eax, eax
je 0x416241
lea edx, [esp + 0x5a4]
push edx
lea eax, [esp + 0xae0]
push 0x104
push eax
call fcn.00547e61
mov ecx, dword [esp + 0x24]
add esp, 0xc
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 2
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x12c]
lea ecx, [esp + 0x78]
call fcn.00436f10
mov ecx, dword [esp + 0x128]
cmp ecx, dword [esp + 0x78]
jne 0x415e7b
lea esi, [esp + 0xcc]
call fcn.00436f80
mov byte [esp + 0x1310], 0xb
push 1
mov esi, 0x619914
lea eax, [esp + 0x5a8]
mov dword [esp + 0x2c], ebx
call fcn.00405ab0
lea edx, [esp + 0x2c]
add esp, 4
push edx
lea edi, [esp + 0xd0]
lea ecx, [esp + 0x5a8]
call fcn.00405b10
add esp, 4
cmp dword [esp + 0x28], ebx
jle 0x415e67
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xcc]
push eax
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x5b0]
push eax
push 0x1e
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
lea edx, [esp + 0x18]
lea eax, [esp + 0x74]
call fcn.00436e90
mov dword [eax], 1
lea ecx, [esp + 0xcc]
mov byte [esp + 0x1310], 5
call fcn.00406de0
push ebx
lea esi, [esp + 0x22c]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x415ed3
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 3
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x220]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x415f2b
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 3
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1b8]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x415f83
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 3
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1e0]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x415fdb
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 3
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1d8]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416033
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 3
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1b0]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x41608b
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 3
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x294]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x4160e3
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 3
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1f0]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x41613b
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 3
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x284]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416193
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 3
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1e8]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x4161eb
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 3
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
push ebx
mov esi, 0x61c084
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416241
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 3
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
mov esi, dword [0x64f038]
mov ecx, dword [0x64f034]
lea eax, [esp + 0x18]
push eax
push esi
push ecx
lea eax, [esp + 0x198]
call fcn.00438610
add esp, 0xc
cmp dword [eax], esi
jne 0x416429
mov edx, dword [esp + 0x20]
push edx
call fcn.00402f10
add esp, 4
test eax, eax
jne 0x416429
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esp + 0x18], eax
je 0x416429
lea eax, [esp + 0x18]
call fcn.00436cb0
lea eax, [esp + 0xadc]
push eax
mov edi, dword [esp + 0x24]
call fcn.00403cf0
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x416429
push ebx
push 1
push ecx
lea edx, [esp + 0x738]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.0043ab40
push 0x30000
push esi
push edi
call fcn.004124e0
add esp, 0x18
cmp eax, ebx
jbe 0x416319
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0xae0]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 0x14
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
mov eax, edi
jmp 0x417ed0
push ebx
push 1
push ecx
lea edx, [esp + 0x7a8]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.0043ab40
push 0x30000
push esi
push edi
call fcn.004124e0
add esp, 0x18
cmp eax, ebx
jbe 0x41637d
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0xae0]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 0x15
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
mov eax, dword [esp + 0x3c]
add esp, 0x1c
jmp 0x417ed0
push ebx
push 1
push ecx
lea edx, [esp + 0x6b8]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.0043ab40
push 0x30000
lea eax, [esi + 0x50000]
push eax
push edi
call fcn.004124e0
add esp, 0x18
cmp eax, ebx
jbe 0x4163ce
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0xae0]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 0x16
jmp 0x416417
push ebx
push 1
push ecx
lea eax, [esp + 0x6d8]
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.0043ab40
push 0x30000
push esi
push edi
call fcn.004124e0
add esp, 0x18
cmp eax, ebx
jbe 0x416429
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0xae0]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 0x17
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
mov eax, dword [esp + 0x20]
jmp 0x417ed0
lea ecx, [esp + 0x36c]
push ecx
lea edx, [esp + 0x9e0]
push edx
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x416a18
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x134]
lea ecx, [esp + 0x68]
call fcn.00436f10
mov ecx, dword [esp + 0x130]
lea edx, [esp + 0x18]
lea eax, [esp + 0x64]
cmp ecx, dword [esp + 0x68]
je 0x416ff5
call fcn.00436e90
mov edi, dword [eax]
lea edx, [esp + 0x18]
lea eax, [esp + 0x64]
inc edi
call fcn.00436e90
mov dword [eax], edi
cmp edi, 2
jl 0x417ed7
mov edi, dword [esp + 0x18]
call fcn.00403d40
mov dword [esp + 0x20], eax
cmp eax, ebx
je 0x417ed7
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
test eax, eax
je 0x4169b3
lea eax, [esp + 0x5a4]
push eax
lea ecx, [esp + 0xae0]
push 0x104
push ecx
call fcn.00547e61
mov edx, dword [esp + 0x24]
add esp, 0xc
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 2
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
lea ecx, [esp + 0x18]
push ecx
lea eax, [esp + 0x13c]
lea ecx, [esp + 0x78]
call fcn.00436f10
mov edx, dword [esp + 0x138]
cmp edx, dword [esp + 0x78]
jne 0x4165ed
lea esi, [esp + 0xa8]
call fcn.00436f80
mov byte [esp + 0x1310], 0xc
push 1
mov esi, 0x619914
lea eax, [esp + 0x5a8]
mov dword [esp + 0x2c], ebx
call fcn.00405ab0
lea eax, [esp + 0x2c]
add esp, 4
push eax
lea edi, [esp + 0xac]
lea ecx, [esp + 0x5a8]
call fcn.00405b10
add esp, 4
cmp dword [esp + 0x28], ebx
jle 0x4165d9
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xa8]
push ecx
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x5b0]
push ecx
push 0x1e
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
lea edx, [esp + 0x18]
lea eax, [esp + 0x74]
call fcn.00436e90
mov dword [eax], 1
lea ecx, [esp + 0xa8]
mov byte [esp + 0x1310], 5
call fcn.00406de0
push ebx
lea esi, [esp + 0x22c]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416645
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 3
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x220]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x41669d
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 3
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1b8]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x4166f5
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 3
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1e0]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x41674d
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 3
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1d8]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x4167a5
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 3
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1b0]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x4167fd
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 3
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x294]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416855
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 3
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1f0]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x4168ad
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 3
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x284]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416905
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 3
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1e8]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x41695d
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 3
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
mov esi, 0x61c084
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x4169b3
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 3
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
mov esi, dword [0x64f038]
mov edx, dword [0x64f034]
lea ecx, [esp + 0x18]
push ecx
push esi
push edx
lea eax, [esp + 0x1a4]
call fcn.00438610
add esp, 0xc
cmp dword [eax], esi
jne 0x416429
mov eax, dword [esp + 0x20]
push eax
call fcn.00402f10
add esp, 4
test eax, eax
jne 0x416429
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esp + 0x18], eax
je 0x416429
lea eax, [esp + 0x18]
call fcn.00436cb0
lea ecx, [esp + 0xadc]
push ecx
jmp 0x4162a1
lea ecx, [esp + 0x334]
push ecx
lea edx, [esp + 0x9e0]
push edx
call fcn.00547e1a
add esp, 8
test eax, eax
jne 0x417005
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x144]
lea ecx, [esp + 0x68]
call fcn.00436f10
mov ecx, dword [esp + 0x140]
lea edx, [esp + 0x18]
lea eax, [esp + 0x64]
cmp ecx, dword [esp + 0x68]
je 0x416ff5
call fcn.00436e90
mov edi, dword [eax]
lea edx, [esp + 0x18]
lea eax, [esp + 0x64]
inc edi
call fcn.00436e90
mov dword [eax], edi
cmp edi, 2
jl 0x417ed7
mov edi, dword [esp + 0x18]
call fcn.00403d40
mov dword [esp + 0x20], eax
cmp eax, ebx
je 0x417ed7
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
test eax, eax
je 0x416f90
lea eax, [esp + 0x5a4]
push eax
lea ecx, [esp + 0xae0]
push 0x104
push ecx
call fcn.00547e61
mov edx, dword [esp + 0x24]
add esp, 0xc
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 2
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
lea ecx, [esp + 0x18]
push ecx
lea eax, [esp + 0x58]
lea ecx, [esp + 0x78]
call fcn.00436f10
mov edx, dword [esp + 0x54]
cmp edx, dword [esp + 0x78]
jne 0x416bca
lea esi, [esp + 0x94]
call fcn.00436f80
mov byte [esp + 0x1310], 0xd
push 1
xor esi, esi
lea eax, [esp + 0x5a8]
mov dword [esp + 0x2c], ebx
call fcn.00405ab0
lea eax, [esp + 0x2c]
add esp, 4
push eax
lea edi, [esp + 0x98]
lea ecx, [esp + 0x5a8]
call fcn.00405b10
add esp, 4
cmp dword [esp + 0x28], ebx
jle 0x416bb6
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x94]
push ecx
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x5b0]
push ecx
push 0x1e
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
lea edx, [esp + 0x18]
lea eax, [esp + 0x74]
call fcn.00436e90
mov dword [eax], 1
lea ecx, [esp + 0x94]
mov byte [esp + 0x1310], 5
call fcn.00406de0
push ebx
lea esi, [esp + 0x22c]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416c22
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 3
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x220]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416c7a
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 3
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1b8]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416cd2
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 3
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1e0]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416d2a
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 3
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1d8]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416d82
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 3
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1b0]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416dda
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 3
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x294]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416e32
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 3
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1f0]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416e8a
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 3
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x284]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416ee2
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 3
lea edx, [esp + 0x1b0]
push 0x4d
push edx
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x1e8]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416f3a
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 3
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
mov esi, 0x61c084
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x416f90
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 3
lea eax, [esp + 0x1b0]
push 0x4d
push eax
call fcn.00408b50
add esp, 0x1c
mov esi, dword [0x64f038]
mov edx, dword [0x64f034]
lea ecx, [esp + 0x18]
push ecx
push esi
push edx
lea eax, [esp + 0x19c]
call fcn.00438610
add esp, 0xc
cmp dword [eax], esi
jne 0x416429
mov eax, dword [esp + 0x20]
push eax
call fcn.00402f10
add esp, 4
test eax, eax
jne 0x416429
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esp + 0x18], eax
je 0x416429
lea eax, [esp + 0x18]
call fcn.00436cb0
lea ecx, [esp + 0xadc]
push ecx
jmp 0x4162a1
call fcn.00436e90
mov dword [eax], 1
jmp 0x417ed7
cmp dword [esp + 0x24], ebx
jne 0x417c71
cmp esi, 0x100
jne 0x417ed7
mov esi, dword [esp + 0x9c]
cmp esi, 0x34cf0000
je 0x417036
cmp esi, 0x4cf0000
jne 0x417c84
mov ecx, dword [esp + 0x48]
push 5
push ecx
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je 0x417c84
mov edi, dword [esp + 0x18]
mov byte [esp + 0x17], bl
call fcn.00403d40
mov edi, eax
cmp edi, ebx
je 0x417ed7
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push edi
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
test eax, eax
je 0x417b9f
lea eax, [esp + 0x2fc]
push eax
lea ecx, [esp + 0x5a8]
push ecx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x417b69
lea edx, [esp + 0x304]
push edx
lea eax, [esp + 0x5a8]
push eax
call fcn.00545340
add esp, 8
test eax, eax
jne 0x417b69
lea ecx, [esp + 0x3f8]
push ecx
lea edx, [esp + 0x5a8]
push edx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x417b69
push 0x200
lea eax, [esp + 0xef0]
push ebx
push eax
call fcn.0054b8b0
add esp, 0xc
push 0x200
lea ecx, [esp + 0x11f8]
push ecx
push 0x200
lea edx, [esp + 0x10f8]
push edx
push ebx
push ebx
push ebx
lea eax, [esp + 0x5c0]
push ebx
push eax
call fcn.00547ec0
add esp, 0x24
lea ecx, [esp + 0x5a4]
push ecx
lea edx, [esp + 0xae0]
push 0x104
push edx
call fcn.00547e61
add esp, 0xc
push 1
xor esi, esi
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x1cc]
push eax
lea ecx, [esp + 0x10f0]
push ecx
lea edx, [esp + 0x5ac]
push edx
lea eax, [esp + 0x210]
push eax
lea edx, [esp + 0xbf4]
call fcn.00438640
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
add esp, 0x10
lea ecx, [esp + 0xbe4]
push ecx
push 0x200
lea edx, [esp + 0xef4]
push edx
push 0x619914
lea eax, [esp + 0x21c]
push eax
lea ecx, [esp + 0x1b8]
push ecx
call esi
cmp eax, ebx
jbe 0x4171ee
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0xae0]
push eax
lea ecx, [esp + 0xbec]
push ecx
lea edx, [esp + 0x820]
push edx
push 0xc
lea eax, [esp + 0x1b0]
push 0x4d
push eax
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
lea ecx, [esp + 0xbe4]
push ecx
push 0x200
lea edx, [esp + 0xef4]
push edx
push 0x619914
lea eax, [esp + 0x1d4]
push eax
lea ecx, [esp + 0x1b8]
push ecx
call esi
cmp byte [esp + 0x17], bl
jne 0x41725a
cmp eax, ebx
jbe 0x41725a
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0xae0]
push eax
lea ecx, [esp + 0xbec]
push ecx
lea edx, [esp + 0x820]
push edx
push 0xc
lea eax, [esp + 0x1b0]
push 0x4d
push eax
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
lea ecx, [esp + 0xbe4]
push ecx
push 0x200
lea edx, [esp + 0xef4]
push edx
push 0x619914
lea eax, [esp + 0x248]
push eax
lea ecx, [esp + 0x1b8]
push ecx
call esi
cmp byte [esp + 0x17], bl
jne 0x4172c6
cmp eax, ebx
jbe 0x4172c6
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0xae0]
push eax
lea ecx, [esp + 0xbec]
push ecx
lea edx, [esp + 0x820]
push edx
push 0xc
lea eax, [esp + 0x1b0]
push 0x4d
push eax
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
lea ecx, [esp + 0xbe4]
push ecx
push 0x200
lea edx, [esp + 0xef4]
push edx
push 0x619914
lea eax, [esp + 0x254]
push eax
lea ecx, [esp + 0x1b8]
push ecx
call esi
cmp byte [esp + 0x17], bl
jne 0x417332
cmp eax, ebx
jbe 0x417332
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0xae0]
push eax
lea ecx, [esp + 0xbec]
push ecx
lea edx, [esp + 0x820]
push edx
push 0xc
lea eax, [esp + 0x1b0]
push 0x4d
push eax
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
lea ecx, [esp + 0xbe4]
push ecx
push 0x200
lea edx, [esp + 0xef4]
push edx
push 0x619914
lea eax, [esp + 0x2d4]
push eax
lea ecx, [esp + 0x1b8]
push ecx
call esi
cmp byte [esp + 0x17], bl
jne 0x41739e
cmp eax, ebx
jbe 0x41739e
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0xae0]
push eax
lea ecx, [esp + 0xbec]
push ecx
lea edx, [esp + 0x820]
push edx
push 0xc
lea eax, [esp + 0x1b0]
push 0x4d
push eax
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
lea ecx, [esp + 0xbe4]
push ecx
push 0x200
lea edx, [esp + 0xef4]
push edx
push 0x619914
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x1b8]
push ecx
call esi
cmp byte [esp + 0x17], bl
jne 0x417407
cmp eax, ebx
jbe 0x417407
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0xae0]
push eax
lea ecx, [esp + 0xbec]
push ecx
lea edx, [esp + 0x820]
push edx
push 0xc
lea eax, [esp + 0x1b0]
push 0x4d
push eax
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
lea ecx, [esp + 0xbe4]
push ecx
push 0x200
lea edx, [esp + 0xef4]
push edx
push 0x619914
lea eax, [esp + 0x1cc]
push eax
lea ecx, [esp + 0x264]
push ecx
call esi
cmp byte [esp + 0x17], bl
jne 0x417473
cmp eax, ebx
jbe 0x417473
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0xae0]
push eax
lea ecx, [esp + 0xbec]
push ecx
lea edx, [esp + 0x820]
push edx
push 0xc
lea eax, [esp + 0x1b0]
push 0x4d
push eax
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x498]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x4174d6
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x4174d6
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 0xb
lea edx, [esp + 0x1b0]
push 0x4d
push edx
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x488]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x417539
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x417539
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 0xb
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x478]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x41759c
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x41759c
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 0xb
lea eax, [esp + 0x1b0]
push 0x4d
push eax
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x3c0]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x4175ff
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x4175ff
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 0xb
lea edx, [esp + 0x1b0]
push 0x4d
push edx
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x4b8]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x417662
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x417662
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 0xb
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x4e8]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x4176c5
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x4176c5
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 0xb
lea eax, [esp + 0x1b0]
push 0x4d
push eax
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x408]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x417728
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x417728
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 0xb
lea edx, [esp + 0x1b0]
push 0x4d
push edx
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x4d8]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x41778b
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x41778b
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 0xb
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
push ebx
lea esi, [esp + 0x45c]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x4177ee
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x4177ee
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 0xb
lea eax, [esp + 0x1b0]
push 0x4d
push eax
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
push edi
call fcn.00402f10
add esp, 4
test eax, eax
jne 0x417b9f
cmp byte [esp + 0x17], bl
jne 0x417b9f
lea ecx, [esp + 0xde4]
push ecx
call fcn.00403650
add esp, 4
test eax, eax
je 0x417b9f
push 1
xor esi, esi
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea edx, [esp + 0xde4]
push edx
lea eax, [esp + 0x5a8]
push eax
call fcn.00545340
add esp, 8
test eax, eax
jne 0x417b9f
lea ecx, [esp + 0x1cc]
push ecx
lea edx, [esp + 0x10f0]
push edx
lea eax, [esp + 0xdec]
push eax
lea ecx, [esp + 0x210]
push ecx
lea edx, [esp + 0xbf4]
call fcn.00438640
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
add esp, 0x10
lea edx, [esp + 0xbe4]
push edx
push 0x200
lea eax, [esp + 0xef4]
push eax
push 0x619914
lea ecx, [esp + 0x21c]
push ecx
lea edx, [esp + 0x1b8]
push edx
call esi
cmp eax, ebx
jbe 0x4178ef
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0xae0]
push ecx
lea edx, [esp + 0xbec]
push edx
lea eax, [esp + 0x820]
push eax
push 0xd
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
lea edx, [esp + 0xbe4]
push edx
push 0x200
lea eax, [esp + 0xef4]
push eax
push 0x619914
lea ecx, [esp + 0x1d4]
push ecx
lea edx, [esp + 0x1b8]
push edx
call esi
cmp byte [esp + 0x17], bl
jne 0x41795b
cmp eax, ebx
jbe 0x41795b
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0xae0]
push ecx
lea edx, [esp + 0xbec]
push edx
lea eax, [esp + 0x820]
push eax
push 0xd
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
lea edx, [esp + 0xbe4]
push edx
push 0x200
lea eax, [esp + 0xef4]
push eax
push 0x619914
lea ecx, [esp + 0x248]
push ecx
lea edx, [esp + 0x1b8]
push edx
call esi
cmp byte [esp + 0x17], bl
jne 0x4179c7
cmp eax, ebx
jbe 0x4179c7
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0xae0]
push ecx
lea edx, [esp + 0xbec]
push edx
lea eax, [esp + 0x820]
push eax
push 0xd
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
lea edx, [esp + 0xbe4]
push edx
push 0x200
lea eax, [esp + 0xef4]
push eax
push 0x619914
lea ecx, [esp + 0x254]
push ecx
lea edx, [esp + 0x1b8]
push edx
call esi
cmp byte [esp + 0x17], bl
jne 0x417a33
cmp eax, ebx
jbe 0x417a33
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0xae0]
push ecx
lea edx, [esp + 0xbec]
push edx
lea eax, [esp + 0x820]
push eax
push 0xd
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
lea edx, [esp + 0xbe4]
push edx
push 0x200
lea eax, [esp + 0xef4]
push eax
push 0x619914
lea ecx, [esp + 0x2d4]
push ecx
lea edx, [esp + 0x1b8]
push edx
call esi
cmp byte [esp + 0x17], bl
jne 0x417a9f
cmp eax, ebx
jbe 0x417a9f
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0xae0]
push ecx
lea edx, [esp + 0xbec]
push edx
lea eax, [esp + 0x820]
push eax
push 0xd
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
lea edx, [esp + 0xbe4]
push edx
push 0x200
lea eax, [esp + 0xef4]
push eax
push 0x619914
lea ecx, [esp + 0x70]
push ecx
lea edx, [esp + 0x1b8]
push edx
call esi
cmp byte [esp + 0x17], bl
jne 0x417b08
cmp eax, ebx
jbe 0x417b08
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0xae0]
push ecx
lea edx, [esp + 0xbec]
push edx
lea eax, [esp + 0x820]
push eax
push 0xd
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
lea edx, [esp + 0xbe4]
push edx
push 0x200
lea eax, [esp + 0xef4]
push eax
push 0x619914
lea ecx, [esp + 0x1cc]
push ecx
lea edx, [esp + 0x264]
push edx
call esi
cmp byte [esp + 0x17], bl
jne 0x417b9f
cmp eax, ebx
jbe 0x417b9f
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0xae0]
push ecx
lea edx, [esp + 0xbec]
push edx
lea eax, [esp + 0x820]
push eax
push 0xd
push 0x4d
lea ecx, [esp + 0x1b4]
push ecx
jmp 0x417b92
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push 0xa
push 0x4d
lea eax, [esp + 0x1b4]
push eax
mov byte [esp + 0x33], 1
call fcn.00408b50
add esp, 0x1c
mov esi, dword [0x64f038]
mov edx, dword [0x64f034]
lea ecx, [esp + 0x18]
push ecx
push esi
push edx
lea eax, [esp + 0x64]
call fcn.00438610
add esp, 0xc
cmp dword [eax], esi
jne 0x415cba
push edi
call fcn.00402f10
add esp, 4
test eax, eax
jne 0x415cba
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esp + 0x18], eax
je 0x415cba
lea eax, [esp + 0x18]
call fcn.00436cb0
lea eax, [esp + 0xadc]
push eax
call fcn.00403cf0
add esp, 4
mov esi, eax
cmp byte [esp + 0x17], bl
jne 0x415cba
push ebx
push 1
push ecx
lea edx, [esp + 0x920]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.0043ab40
push 0x100000
push esi
push edi
call fcn.004124e0
add esp, 0x18
cmp eax, ebx
jbe 0x415cba
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0xae0]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 0xe
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
push edi
jmp 0x417ed1
cmp esi, 0x100
jne 0x417ed7
mov esi, dword [esp + 0x9c]
cmp esi, 0x34cf8000
jne 0x417ed7
mov edx, dword [esp + 0x48]
push 5
push edx
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je 0x417ed7
mov edi, dword [esp + 0x18]
call fcn.00403d40
mov edi, eax
cmp edi, ebx
je 0x417ed7
lea eax, [esp + 0x3ec]
push eax
lea ecx, [esp + 0x5a8]
push ecx
call fcn.00545340
add esp, 8
test eax, eax
jne 0x417d42
lea edx, [esp + 0x440]
push edx
lea eax, [esp + 0x5a8]
push eax
call fcn.00545340
add esp, 8
test eax, eax
jne 0x417d42
push ebx
lea esi, [esp + 0x420]
lea eax, [esp + 0x5a8]
call fcn.00405ab0
add esp, 4
lea eax, [esp + 0x5a4]
call fcn.00405b00
test al, al
je 0x417d8a
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x9e4]
push eax
lea ecx, [esp + 0x820]
push ecx
push 0x11
push 0x4d
lea edx, [esp + 0x1b4]
push edx
jmp 0x417d6b
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push 0x10
push 0x4d
lea ecx, [esp + 0x1b4]
push ecx
call fcn.00408b50
add esp, 0x1c
push ebx
push ebx
push ebx
push 0x4123c0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
jmp 0x417ed1
mov edi, dword [esp + 0x18]
call fcn.00403d40
mov edi, eax
cmp edi, ebx
je 0x417dbb
push 0x104
lea edx, [esp + 0x5a8]
push edx
push ebx
push edi
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x5a8]
push ecx
lea edx, [esp + 0x9e4]
push edx
lea eax, [esp + 0x820]
push eax
push ebx
lea ecx, [esp + 0x1b0]
push 0x4d
push ecx
call fcn.00408b50
add esp, 0x1c
jmp 0x417ed7
mov esi, dword [esp + 0x18]
call fcn.00402da0
mov eax, dword [0x64eea4]
mov dword [esp + 0x8c], ebx
mov dword [esp + 0xbc], esi
mov dword [esp + 0xc0], ebx
mov dword [esp + 0x30], 0x18
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
cmp eax, ebx
je 0x417e5a
lea edx, [esp + 0xbc]
push edx
lea ecx, [esp + 0x34]
push ecx
push 0x1fffff
lea edx, [esp + 0x98]
push edx
call eax
mov eax, dword [esp + 0x8c]
cmp eax, ebx
jne 0x417e6e
push esi
push ebx
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0x8c], eax
mov esi, eax
cmp eax, ebx
je 0x417e90
push 0x104
lea ecx, [esp + 0x5a8]
push ecx
push ebx
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x5a8]
push eax
lea ecx, [esp + 0x9e4]
push ecx
lea edx, [esp + 0x820]
push edx
push ebx
push 0x4d
lea eax, [esp + 0x1b4]
push eax
call fcn.00408b50
add esp, 0x1c
push ebx
push ebx
push ebx
push 0x4123c0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x48]
push 2
push ecx
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [esp + 0x48], eax
cmp eax, ebx
jne 0x414232
mov byte [esp + 0x1310], 0xe
mov eax, dword [esp + 0x110]
mov ecx, dword [eax]
push eax
push ecx
lea esi, [esp + 0x60]
lea eax, [esp + 0x114]
call fcn.00437b30
mov edx, dword [esp + 0x110]
push edx
call fcn.00445171
add esp, 4
mov byte [esp + 0x1310], 0xf
mov eax, dword [esp + 0xf4]
mov ecx, dword [eax]
push eax
push ecx
lea esi, [esp + 0x60]
lea eax, [esp + 0xf8]
call fcn.00437b30
mov eax, dword [esp + 0xf4]
push eax
call fcn.00445171
add esp, 4
mov byte [esp + 0x1310], 0x10
mov eax, dword [esp + 0x78]
mov ecx, dword [eax]
push eax
push ecx
lea esi, [esp + 0x60]
lea eax, [esp + 0x7c]
call fcn.00437b30
mov ecx, dword [esp + 0x78]
push ecx
call fcn.00445171
add esp, 4
mov byte [esp + 0x1310], 0x11
mov eax, dword [esp + 0xd4]
mov ecx, dword [eax]
push eax
push ecx
lea esi, [esp + 0x60]
lea eax, [esp + 0xd8]
call fcn.00437b30
mov edx, dword [esp + 0xd4]
push edx
call fcn.00445171
add esp, 4
mov byte [esp + 0x1310], 0x12
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax]
push eax
push ecx
lea esi, [esp + 0x60]
lea eax, [esp + 0xe8]
call fcn.00437b30
mov eax, dword [esp + 0xe4]
push eax
call fcn.00445171
add esp, 4
mov dword [esp + 0x1310], 0x13
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
push eax
push ecx
lea esi, [esp + 0x60]
lea eax, [esp + 0x6c]
call fcn.00437b30
mov ecx, dword [esp + 0x68]
push ecx
call fcn.00445171
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x1308]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x12f0]
xor ecx, esp
call fcn.00544a28
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00406d40
lea edx, [esp + 0x84]
push edx
lea ecx, [esp + 0x104]
mov dword [esp + 0x88], ebx
call fcn.00544aa2
push 0x634bb8
lea eax, [esp + 0x104]
push eax
mov dword [esp + method.std::bad_alloc.virtual_0], vtable.std::bad_alloc.0
call fcn.0054bb88
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esp + 0xc0]
mov dword [esp + 0x58], ebx
call fcn.00544aa2
push 0x634bb8
lea edx, [esp + 0xc0]
push edx
mov dword [esp + 0xc4], vtable.std::bad_alloc.0
call fcn.0054bb88
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x104]
mov dword [esp + 0x88], ebx
call fcn.00544aa2
push 0x634bb8
lea ecx, [esp + 0x104]
push ecx
mov dword [esp + method.std::bad_alloc.virtual_0], vtable.std::bad_alloc.0
call fcn.0054bb88
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0xc0]
mov dword [esp + 0x58], ebx
call fcn.00544aa2
push 0x634bb8
lea eax, [esp + 0xc0]
push eax
mov dword [esp + 0xc4], vtable.std::bad_alloc.0
call fcn.0054bb88
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x104]
mov dword [esp + 0x88], ebx
call fcn.00544aa2
push 0x634bb8
lea edx, [esp + 0x104]
push edx
mov dword [esp + method.std::bad_alloc.virtual_0], vtable.std::bad_alloc.0
call fcn.0054bb88
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0xc0]
mov dword [esp + 0x58], ebx
call fcn.00544aa2
push 0x634bb8
lea ecx, [esp + 0xc0]
push ecx
mov dword [esp + 0xc4], vtable.std::bad_alloc.0
call fcn.0054bb88
int3