Function at 0x4370b0
Capabilities:
Create thread

Disassembly:
mov eax, 0x36ad4
call fcn.004f87d0
mov eax, dword [0x589758]
xor eax, esp
mov dword [esp + 0x36ad0], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x36b1c]
push edi
mov edi, dword [esp + 0x36b1c]
xor eax, eax
xor ebx, ebx
push 0x3ff
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x25]
push ebx
push eax
mov dword [esp + 0x1c], ebx
mov byte [esp + 0x2c], bl
call fcn.004f67e0
push 0x4090
lea ecx, [esp + 0x430]
push ebx
push ecx
call fcn.004f67e0
push 0x3ff
lea edx, [esp + 0x16719]
push ebx
push edx
mov byte [esp + 0x16720], bl
call fcn.004f67e0
push 0x42c8
lea eax, [esp + 0x16b24]
push ebx
push eax
call fcn.004f67e0
push 0x3ff
lea ecx, [esp + 0x89b5]
push ebx
push ecx
mov byte [esp + 0x89bc], bl
call fcn.004f67e0
push 0x609c
lea edx, [esp + 0x8dc0]
push ebx
push edx
call fcn.004f67e0
add esp, 0x48
push 0x3ff
lea eax, [esp + 0x2cf9d]
push ebx
push eax
mov byte [esp + 0x2cfa4], bl
call fcn.004f67e0
push 0x42c4
lea ecx, [esp + 0x2d3a8]
push ebx
push ecx
call fcn.004f67e0
push 0x3ff
lea edx, [esp + 0x12295]
push ebx
push edx
mov byte [esp + 0x1229c], bl
call fcn.004f67e0
push 0x4084
lea eax, [esp + 0x126a0]
push ebx
push eax
call fcn.004f67e0
push 0x3ff
lea ecx, [esp + 0x44e5]
push ebx
push ecx
mov byte [esp + 0x44ec], bl
call fcn.004f67e0
push 0x40d0
lea edx, [esp + 0x48f0]
push ebx
push edx
call fcn.004f67e0
add esp, 0x48
mov byte [esp + 0x27b14], bl
push 0x3ff
lea eax, [esp + 0x27b19]
push ebx
push eax
call fcn.004f67e0
push 0x5084
lea ecx, [esp + 0x27f24]
push ebx
push ecx
call fcn.004f67e0
push 0x3ff
lea edx, [esp + 0x1f251]
push ebx
push edx
mov byte [esp + 0x1f258], bl
call fcn.004f67e0
push 0x5084
lea eax, [esp + 0x1f65c]
push ebx
push eax
call fcn.004f67e0
push 0x3ff
lea ecx, [esp + 0x246ed]
push ebx
push ecx
mov byte [esp + 0x246f4], bl
call fcn.004f67e0
push 0x305c
lea edx, [esp + 0x24af8]
push ebx
push edx
call fcn.004f67e0
add esp, 0x48
push 0x3ff
lea eax, [esp + 0x31661]
push ebx
push eax
mov byte [esp + 0x31668], bl
call fcn.004f67e0
push 0x5084
lea ecx, [esp + 0x31a6c]
push ebx
push ecx
call fcn.004f67e0
push 0x3ff
lea edx, [esp + 0xee39]
push ebx
push edx
mov byte [esp + 0xee40], bl
call fcn.004f67e0
push 0x305c
lea eax, [esp + 0xf244]
push ebx
push eax
call fcn.004f67e0
push 0x3ff
lea ecx, [esp + 0x1adf9]
push ebx
push ecx
mov byte [esp + 0x1ae00], bl
call fcn.004f67e0
push 0x4070
lea edx, [esp + 0x1b204]
push ebx
push edx
call fcn.004f67e0
mov eax, dword [str._asymmetric_]
mov ecx, dword [0x53fd50]
mov ebp, dword [0x53fd54]
mov dl, byte [0x53fd58]
add esp, 0x48
mov dword [esp + 0x1c], ebx
mov dword [0x7c10a0], eax
mov dword [0x7c10a4], ecx
mov dword [0x7c10a8], ebp
mov byte [0x7c10ac], dl
mov dword [0x7c14b0], eax
mov dword [0x7c14b4], ecx
mov dword [0x7c14b8], ebp
mov byte [0x7c14bc], dl
mov dword [0x7c18c0], eax
mov dword [0x7c18c4], ecx
mov dword [0x7c1cd4], ecx
mov dword [0x7c20e4], ecx
mov dword [0x7c24f4], ecx
mov dword [0x7c2904], ecx
mov dword [0x7c2d14], ecx
mov dword [0x7c3124], ecx
mov dword [0x7c3534], ecx
mov dword [0x7c3944], ecx
mov dword [0x7c3d54], ecx
mov ecx, dword [0x53fd40]
mov dword [0x7c4164], ecx
mov ecx, dword [esp + 0x36aec]
mov dword [0x7c1cd0], eax
mov dword [0x7c20e0], eax
mov dword [0x7c24f0], eax
mov dword [0x7c2900], eax
mov dword [0x7c2d10], eax
mov dword [0x7c3120], eax
mov dword [0x7c3530], eax
mov dword [0x7c3940], eax
mov dword [0x7c3d50], eax
mov eax, dword [str._createfile_]
push ecx
mov byte [0x7c18cc], dl
mov byte [0x7c1cdc], dl
mov byte [0x7c20ec], dl
mov byte [0x7c24fc], dl
mov byte [0x7c290c], dl
mov byte [0x7c2d1c], dl
mov byte [0x7c312c], dl
mov byte [0x7c353c], dl
mov byte [0x7c394c], dl
mov byte [0x7c3d5c], dl
mov edx, dword [0x53fd44]
mov dword [0x7c4160], eax
mov al, byte [0x53fd48]
push 0x539c50
push 0x7c11a4
mov dword [0x7c18c8], ebp
mov dword [0x7c1cd8], ebp
mov dword [0x7c20e8], ebp
mov dword [0x7c24f8], ebp
mov dword [0x7c2908], ebp
mov dword [0x7c2d18], ebp
mov dword [0x7c3128], ebp
mov dword [0x7c3538], ebp
mov dword [0x7c3948], ebp
mov dword [0x7c3d58], ebp
mov dword [0x7c4168], edx
mov byte [0x7c416c], al
call fcn.004f726c
mov edx, dword [esp + 0x36b00]
push edx
push 0x539c50
push 0x7c15b4
call fcn.004f726c
mov eax, dword [esp + 0x36b10]
push eax
push 0x539c50
push 0x7c19c4
call fcn.004f726c
mov ecx, dword [esp + 0x36b20]
push ecx
push 0x539c50
push 0x7c1dd4
call fcn.004f726c
mov edx, dword [esp + 0x36b30]
push edx
push 0x539c50
push 0x7c21e4
call fcn.004f726c
mov eax, dword [esp + 0x36b2c]
push eax
push 0x539c50
push 0x7c25f4
call fcn.004f726c
mov ecx, dword [esp + 0x36b4c]
add esp, 0x48
push ecx
push 0x539c50
push 0x7c2a04
call fcn.004f726c
mov edx, dword [esp + 0x36b14]
push edx
push 0x539c50
push 0x7c2e14
call fcn.004f726c
mov eax, dword [esp + 0x36b24]
push eax
push 0x539c50
push 0x7c3224
call fcn.004f726c
mov ecx, dword [esp + 0x36b34]
push ecx
push 0x539c50
push 0x7c3634
call fcn.004f726c
mov ebp, dword [esp + 0x36b44]
push ebp
push 0x539c50
push 0x7c3a44
call fcn.004f726c
push ebp
push 0x539c50
push 0x7c3e54
call fcn.004f726c
add esp, 0x48
push 0x53fd38
push 0x53cd14
push 0x7c4264
call fcn.004f726c
mov edx, dword [str._ESA_]
movzx eax, word [0x53fd34]
mov ecx, dword [str._DSA_]
mov dword [0x7c12a8], edx
movzx edx, word [0x53fd2c]
mov dword [0x7c16b8], ecx
movzx ecx, word [0x53fd24]
mov word [0x7c12ac], ax
mov eax, dword [str._KAT_]
mov word [0x7c16bc], dx
mov edx, dword [str._SM2_]
mov dword [0x7c1ac8], eax
movzx eax, word [0x53fd1c]
mov word [0x7c1acc], cx
mov ecx, dword [str._ECC_]
mov dword [0x7c1ed8], edx
movzx edx, word [0x53fd14]
mov dword [0x7c22e8], ecx
movzx ecx, word [0x53fd0c]
mov word [0x7c1edc], ax
mov eax, dword [str._RSA_]
mov word [0x7c22ec], dx
mov edx, dword [str._ELG_]
mov dword [0x7c26f8], eax
movzx eax, word [0x53fd04]
mov word [0x7c26fc], cx
mov ecx, dword [str._RAB_]
mov dword [0x7c2b08], edx
movzx edx, word [0x53fcfc]
mov dword [0x7c2f18], ecx
movzx ecx, word [0x53fcf4]
mov word [0x7c2b0c], ax
mov eax, dword [str._XDH_]
mov word [0x7c2f1c], dx
mov edx, dword [str._XGM_]
mov dword [0x7c3328], eax
movzx eax, word [0x53fcec]
mov word [0x7c332c], cx
mov ecx, dword [str._XPM_]
mov dword [0x7c3738], edx
movzx edx, word [0x53fce4]
mov dword [0x7c3b48], ecx
movzx ecx, word [0x53fcdc]
mov word [0x7c373c], ax
mov eax, dword [str._SM9_]
mov word [0x7c3b4c], dx
mov edx, dword [str._KEY_]
add esp, 0xc
mov dword [0x7c3f58], eax
mov word [0x7c3f5c], cx
mov dword [0x7c4368], edx
movzx eax, word [0x53fcd4]
push 0x200
lea ecx, [edi + 0x1a98c]
mov word [0x7c436c], ax
mov byte [0x7c13ac], bl
mov byte [0x7c17bc], bl
mov byte [0x7c1bcc], bl
mov byte [0x7c1fdc], bl
mov byte [0x7c23ec], bl
mov byte [0x7c27fc], bl
mov byte [0x7c2c0c], bl
mov byte [0x7c301c], bl
mov byte [0x7c342c], bl
mov byte [0x7c383c], bl
mov byte [0x7c3c4c], bl
mov byte [0x7c405c], bl
mov byte [0x7c446c], bl
push ecx
mov dword [edi + 0x1a988], 0x11aa22bb
mov ecx, 0x584874
mov dword [esi + 0x1797c], 0x33cc44dd
call fcn.00458aa0
push 0x200
lea edx, [esi + 0x17980]
push edx
mov ecx, 0x584874
call fcn.00458aa0
mov ecx, dword [0x7bf85c]
call fcn.0045a560
mov eax, dword [0x7c109c]
mov ecx, dword [0x7bf85c]
push 0x539408
push 0x7c12a8
push 0x7c11a4
push 0x7c10a0
push ebx
push eax
add ecx, 0x60c
push ecx
mov dword [0x7c4570], ebx
call fcn.004706c0
lea edx, [esp + 0x38]
push edx
push ebx
push ebx
push 0x437090
push ebx
push ebx
call fcn.004f88fc
mov ebp, eax
add esp, 0x34
cmp ebp, ebx
je 0x439250
push 2
push ebp
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [esp + 0x36aec]
mov eax, 1
mov dword [esp + 0x14], eax
mov dword [esp + 0x44ac], eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x20]
push eax
mov dword [esp + 0x14], 6
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x428], edx
mov dword [esp + 0x1480], 0x1000
call dword [0x7c50e8]
add esp, 4
test eax, eax
je 0x439250
mov eax, dword [esp + 0x1480]
cmp eax, ebx
je 0x439250
mov ecx, dword [esp + 0x36aec]
mov dword [edi + 0x20c], ecx
mov dword [esi + 0x20c], ecx
mov ecx, dword [esp + 0x44ac]
mov dword [edi + 0x208], ecx
mov dword [esi + 0x208], ecx
mov dword [edi + 0x204], eax
mov dword [esi + 0x204], eax
lea eax, [esp + 0x149c]
lea edx, [edi + 0x210]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x437873
lea eax, [esp + 0x149c]
mov dword [edi + 0x2210], ebx
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x437890
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x349c]
lea edx, [edi + ebp + 0x210]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x4378b0
lea eax, [esp + 0x349c]
mov dword [edi + 0x2214], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4378d0
sub eax, edx
lea edx, [eax + ebp + 1]
mov dword [edi + 0x2218], edx
lea eax, [esp + 0x149c]
lea edx, [esi + 0x210]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x4378f4
lea eax, [esp + 0x149c]
mov dword [esi + 0x2210], ebx
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x437910
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x249c]
lea edx, [esi + ebp + 0x210]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x437930
lea eax, [esp + 0x249c]
mov dword [esi + 0x2214], ebp
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x437950
sub eax, ecx
lea edx, [eax + ebp + 1]
lea ebp, [edi + 0x200]
push ebp
push edi
mov dword [esi + 0x2218], edx
call fcn.00423120
mov ebp, dword [ebp]
push ebp
push edi
push esi
mov dword [esi + 0x200], ebp
call fcn.004f7b80
mov eax, dword [0x7c4570]
mov ecx, dword [0x7bf85c]
add esp, 0x14
push 0x53fccc
push 3
push eax
add ecx, 0x60c
call fcn.00470a70
mov ecx, dword [0x7bf85c]
mov edx, dword [ecx + 0x62c]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x7c4570]
mov ebp, 1
add eax, ebp
mov dword [0x7c4570], eax
imul eax, eax, 0x410
push 0x539408
lea ecx, [eax + 0x7c12a8]
push ecx
mov ecx, dword [0x7c109c]
lea edx, [eax + 0x7c11a4]
push edx
mov edx, dword [0x7bf85c]
lea eax, [eax + 0x7c10a0]
push eax
push ebx
push ecx
add edx, 0x60c
push edx
call fcn.004706c0
mov ecx, dword [esp + 0x36b10]
lea edx, [esp + 0x2c]
lea eax, [esp + 0x899c]
push edx
mov dword [esp + 0x30], 2
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], eax
mov dword [esp + 0xee38], ebp
mov dword [esp + 0x8da4], ecx
mov dword [esp + 0x9e00], 0x1000
call dword [0x7c50e8]
add esp, 0x20
test eax, eax
je 0x439250
mov eax, dword [esp + 0x9de4]
cmp eax, ebx
je 0x439250
mov ecx, dword [esp + 0x36af0]
mov dword [edi + 0x464c], ecx
mov dword [esi + 0x464c], ecx
mov ecx, dword [esp + 0xee18]
mov dword [edi + 0x4648], ecx
mov dword [esi + 0x4648], ecx
mov dword [edi + 0x4644], eax
mov dword [esi + 0x4644], eax
lea eax, [esp + 0x9e00]
lea edx, [edi + 0x4650]
mov ecx, eax
sub edx, ecx
nop
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, ebp
cmp cl, bl
jne 0x437aa0
lea eax, [esp + 0x9e00]
mov dword [edi + 0x8650], ebx
lea edx, [eax + 1]
jmp 0x437ac0
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x437ac0
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0xae00]
lea edx, [edi + ebp + 0x4650]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x437ae0
lea eax, [esp + 0xae00]
mov dword [edi + 0x8654], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x437b00
sub eax, edx
lea ebp, [eax + ebp + 1]
lea eax, [esp + 0xbe00]
lea edx, [edi + ebp + 0x4650]
mov ecx, eax
sub edx, ecx
nop
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x437b20
lea eax, [esp + 0xbe00]
mov dword [edi + 0x8658], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x437b40
sub eax, edx
lea ebp, [eax + ebp + 1]
lea eax, [esp + 0xde00]
lea edx, [edi + ebp + 0x4650]
mov ecx, eax
sub edx, ecx
nop
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x437b60
lea eax, [esp + 0xde00]
mov dword [edi + 0x865c], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x437b80
sub eax, edx
lea edx, [eax + ebp + 1]
mov dword [edi + 0x8660], edx
lea eax, [esp + 0xae00]
lea edx, [esi + 0x4650]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x437ba4
lea eax, [esp + 0xae00]
mov dword [esi + 0x6650], ebx
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x437bc0
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0xce00]
lea edx, [esi + ebp + 0x4650]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x437be0
lea eax, [esp + 0xce00]
mov dword [esi + 0x6654], ebp
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x437c00
sub eax, ecx
lea edx, [eax + ebp + 1]
lea ebp, [edi + 0x4640]
lea eax, [edi + 0x4440]
push ebp
push eax
mov dword [esi + 0x6658], edx
call fcn.00423120
mov ebp, dword [ebp]
push ebp
lea eax, [edi + 0x4440]
push eax
lea eax, [esi + 0x4440]
push eax
mov dword [esi + 0x4640], ebp
call fcn.004f7b80
mov ecx, dword [0x7c4570]
add esp, 0x14
push 0x53fccc
push 3
push ecx
mov ecx, dword [0x7bf85c]
add ecx, 0x60c
call fcn.00470a70
mov edx, dword [0x7bf85c]
mov eax, dword [edx + 0x62c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x7c4570]
mov ebp, 1
add eax, ebp
mov dword [0x7c4570], eax
imul eax, eax, 0x410
push 0x539408
lea ecx, [eax + 0x7c12a8]
push ecx
mov ecx, dword [0x7c109c]
lea edx, [eax + 0x7c11a4]
push edx
mov edx, dword [0x7bf85c]
lea eax, [eax + 0x7c10a0]
push eax
push ebx
push ecx
add edx, 0x60c
push edx
call fcn.004706c0
mov ecx, dword [esp + 0x36b10]
lea edx, [esp + 0x2c]
lea eax, [esp + 0x2cfb4]
push edx
mov dword [esp + 0x30], 3
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], eax
mov dword [esp + 0x31678], ebp
mov dword [esp + 0x2d3bc], ecx
mov dword [esp + 0x2e444], 0x1000
call dword [0x7c50e8]
add esp, 0x20
test eax, eax
je 0x439250
mov eax, dword [esp + 0x2e428]
cmp eax, ebx
je 0x439250
mov ecx, dword [esp + 0x36af8]
mov dword [edi + 0x8874], ecx
mov dword [esi + 0x686c], ecx
mov ecx, dword [esp + 0x31658]
mov dword [edi + 0x8870], ecx
mov dword [esi + 0x6868], ecx
mov dword [edi + 0x886c], eax
mov dword [esi + 0x6864], eax
lea eax, [esp + 0x30648]
lea edx, [edi + 0x8878]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x437d62
lea eax, [esp + 0x30648]
mov dword [edi + 0x9878], ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x437d80
sub eax, edx
inc eax
mov dword [edi + 0x987c], eax
lea eax, [esp + 0x2e648]
lea edx, [esi + 0x6870]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x437da1
lea eax, [esp + 0x2e648]
mov dword [esi + 0x8870], ebx
lea edx, [eax + 1]
jmp 0x437dc0
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x437dc0
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x2f648]
lea edx, [esi + ebp + 0x6870]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x437de0
lea eax, [esp + 0x2f648]
mov dword [esi + 0x8874], ebp
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x437e00
sub eax, ecx
lea edx, [eax + ebp + 1]
lea ebp, [edi + 0x8868]
lea eax, [edi + 0x8668]
push ebp
push eax
mov dword [esi + 0x8878], edx
call fcn.00423120
mov ebp, dword [ebp]
push ebp
lea eax, [edi + 0x8668]
push eax
lea eax, [esi + 0x6660]
push eax
mov dword [esi + 0x6860], ebp
call fcn.004f7b80
mov ecx, dword [0x7c4570]
add esp, 0x14
push 0x53fccc
push 3
push ecx
mov ecx, dword [0x7bf85c]
add ecx, 0x60c
call fcn.00470a70
mov edx, dword [0x7bf85c]
mov eax, dword [edx + 0x62c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x7c4570]
mov ebp, 1
add eax, ebp
mov dword [0x7c4570], eax
imul eax, eax, 0x410
push 0x539408
lea ecx, [eax + 0x7c12a8]
push ecx
mov ecx, dword [0x7c109c]
lea edx, [eax + 0x7c11a4]
push edx
mov edx, dword [0x7bf85c]
lea eax, [eax + 0x7c10a0]
push eax
push ebx
push ecx
add edx, 0x60c
push edx
call fcn.004706c0
mov dword [esp + 0x30], ebp
mov dword [esp + 0x8998], ebp
mov ebp, dword [esp + 0x36b18]
lea ecx, [esp + 0x2c]
lea eax, [esp + 0x44cc]
push ecx
mov dword [esp + 0x30], 5
mov dword [esp + 0x38], eax
mov dword [esp + 0x48d4], ebp
mov dword [esp + 0x596c], 0x1000
call dword [0x7c50e8]
add esp, 0x20
test eax, eax
je 0x439250
mov eax, dword [esp + 0x5950]
cmp eax, ebx
je 0x439250
mov ecx, dword [esp + 0x897c]
mov dword [edi + 0xbcb0], ebp
mov dword [esi + 0x9ca8], ebp
mov dword [edi + 0xbcac], ecx
mov dword [esi + 0x9ca4], ecx
mov dword [edi + 0xbca8], eax
mov dword [esi + 0x9ca0], eax
lea eax, [esp + 0x596c]
lea edx, [edi + 0xbcb4]
mov ecx, eax
sub edx, ecx
jmp 0x437f60
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x437f60
lea eax, [esp + 0x596c]
mov dword [edi + 0xdcb4], ebx
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x437f80
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x696c]
lea edx, [edi + ebp + 0xbcb4]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x437fa0
lea eax, [esp + 0x696c]
mov dword [edi + 0xdcb8], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x437fc0
sub eax, edx
lea edx, [eax + ebp + 1]
mov dword [edi + 0xdcbc], edx
lea eax, [esp + 0x796c]
lea edx, [esi + 0x9cac]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x437fe4
lea eax, [esp + 0x796c]
mov dword [esi + 0xacac], ebx
lea ebp, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438000
sub eax, ebp
inc eax
mov dword [esi + 0xacb0], eax
lea ebp, [edi + 0xbca4]
lea eax, [edi + 0xbaa4]
push ebp
push eax
call fcn.00423120
mov ebp, dword [ebp]
push ebp
lea eax, [edi + 0xbaa4]
push eax
lea edx, [esi + 0x9a9c]
push edx
mov dword [esi + 0x9c9c], ebp
call fcn.004f7b80
mov eax, dword [0x7c4570]
mov ecx, dword [0x7bf85c]
add esp, 0x14
push 0x53fccc
push 3
push eax
add ecx, 0x60c
call fcn.00470a70
mov ecx, dword [0x7bf85c]
mov edx, dword [ecx + 0x62c]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x7c4570]
mov ebp, 1
add eax, ebp
mov dword [0x7c4570], eax
imul eax, eax, 0x410
push 0x539408
lea ecx, [eax + 0x7c12a8]
push ecx
mov ecx, dword [0x7c109c]
lea edx, [eax + 0x7c11a4]
push edx
mov edx, dword [0x7bf85c]
lea eax, [eax + 0x7c10a0]
push eax
push ebx
push ecx
add edx, 0x60c
push edx
call fcn.004706c0
mov dword [esp + 0x30], ebp
mov dword [esp + 0x16714], ebp
mov ebp, dword [esp + 0x36b1c]
lea ecx, [esp + 0x2c]
lea eax, [esp + 0x12294]
push ecx
mov dword [esp + 0x30], 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x1269c], ebp
mov dword [esp + 0x136e8], 0x1000
call dword [0x7c50e8]
add esp, 0x20
test eax, eax
je 0x439250
mov eax, dword [esp + 0x136cc]
cmp eax, ebx
je 0x439250
mov ecx, dword [esp + 0x166f8]
mov dword [edi + 0x9a90], ebp
mov dword [esi + 0x8a8c], ebp
mov dword [edi + 0x9a8c], ecx
mov dword [esi + 0x8a88], ecx
mov dword [edi + 0x9a88], eax
mov dword [esi + 0x8a84], eax
lea eax, [esp + 0x136e8]
lea edx, [edi + 0x9a94]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x438157
lea eax, [esp + 0x136e8]
mov dword [edi + 0xba94], ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438171
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x146e8]
lea edx, [edi + ebp + 0x9a94]
mov ecx, eax
sub edx, ecx
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x438190
lea eax, [esp + 0x146e8]
mov dword [edi + 0xba98], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4381b0
sub eax, edx
lea edx, [eax + ebp + 1]
mov dword [edi + 0xba9c], edx
lea eax, [esp + 0x156e8]
lea edx, [esi + 0x8a90]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x4381d4
lea eax, [esp + 0x156e8]
mov dword [esi + 0x9a90], ebx
lea ebp, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4381f0
sub eax, ebp
inc eax
mov dword [esi + 0x9a94], eax
lea ebp, [edi + 0x9a84]
lea eax, [edi + 0x9884]
push ebp
push eax
call fcn.00423120
mov ebp, dword [ebp]
push ebp
lea eax, [edi + 0x9884]
push eax
lea edx, [esi + 0x8880]
push edx
mov dword [esi + 0x8a80], ebp
call fcn.004f7b80
mov eax, dword [0x7c4570]
mov ecx, dword [0x7bf85c]
add esp, 0x14
push 0x53fccc
push 3
push eax
add ecx, 0x60c
call fcn.00470a70
mov ecx, dword [0x7bf85c]
mov edx, dword [ecx + 0x62c]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x7c4570]
mov ebp, 1
add eax, ebp
mov dword [0x7c4570], eax
imul eax, eax, 0x410
push 0x539408
lea ecx, [eax + 0x7c12a8]
push ecx
mov ecx, dword [0x7c109c]
lea edx, [eax + 0x7c11a4]
push edx
mov edx, dword [0x7bf85c]
lea eax, [eax + 0x7c10a0]
push eax
push ebx
push ecx
add edx, 0x60c
push edx
call fcn.004706c0
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x16b24], ebp
mov ebp, dword [esp + 0x36b0c]
lea ecx, [esp + 0x2c]
lea eax, [esp + 0x16718]
push ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x16b20], ebp
mov dword [esp + 0x17bb0], 0x1000
call dword [0x7c50e8]
add esp, 0x20
test eax, eax
je 0x439250
mov eax, dword [esp + 0x17b94]
cmp eax, ebx
je 0x439250
mov ecx, dword [esp + 0x16b08]
mov dword [edi + 0x242c], ebp
mov dword [esi + 0x242c], ebp
mov dword [edi + 0x2428], ecx
mov dword [esi + 0x2428], ecx
mov dword [edi + 0x2424], eax
mov dword [esi + 0x2424], eax
lea eax, [esp + 0x17db4]
lea edx, [edi + 0x2430]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x438343
lea eax, [esp + 0x17db4]
mov dword [edi + 0x4430], ebx
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438360
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x19db4]
lea edx, [edi + ebp + 0x2430]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x438380
lea eax, [esp + 0x19db4]
mov dword [edi + 0x4434], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4383a0
sub eax, edx
lea edx, [eax + ebp + 1]
mov dword [edi + 0x4438], edx
lea eax, [esp + 0x17db4]
lea edx, [esi + 0x2430]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x4383c4
lea eax, [esp + 0x17db4]
mov dword [esi + 0x4430], ebx
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4383e0
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x18db4]
lea edx, [esi + ebp + 0x2430]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x438400
lea eax, [esp + 0x18db4]
mov dword [esi + 0x4434], ebp
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x438420
sub eax, ecx
lea edx, [eax + ebp + 1]
lea ebp, [edi + 0x2420]
lea eax, [edi + 0x2220]
push ebp
push eax
mov dword [esi + 0x4438], edx
call fcn.00423120
mov ebp, dword [ebp]
push ebp
lea eax, [edi + 0x2220]
push eax
lea eax, [esi + 0x2220]
push eax
mov dword [esi + 0x2420], ebp
call fcn.004f7b80
mov ecx, dword [0x7c4570]
add esp, 0x14
push 0x53fccc
push 3
push ecx
mov ecx, dword [0x7bf85c]
add ecx, 0x60c
call fcn.00470a70
mov edx, dword [0x7bf85c]
mov eax, dword [edx + 0x62c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x7c4570]
mov ebp, 1
add eax, ebp
mov dword [0x7c4570], eax
imul eax, eax, 0x410
push 0x539408
lea ecx, [eax + 0x7c12a8]
push ecx
mov ecx, dword [0x7c109c]
lea edx, [eax + 0x7c11a4]
push edx
mov edx, dword [0x7bf85c]
lea eax, [eax + 0x7c10a0]
push eax
push ebx
push ecx
add edx, 0x60c
push edx
call fcn.004706c0
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2cfb0], ebp
mov ebp, dword [esp + 0x36b20]
lea ecx, [esp + 0x2c]
lea eax, [esp + 0x27b30]
push ecx
mov dword [esp + 0x30], 7
mov dword [esp + 0x38], eax
mov dword [esp + 0x27f38], ebp
mov dword [esp + 0x28f80], 0x1000
call dword [0x7c50e8]
add esp, 0x20
test eax, eax
je 0x439250
mov eax, dword [esp + 0x28f64]
cmp eax, ebx
je 0x439250
mov ecx, dword [esp + 0x2cf94]
mov dword [edi + 0xded0], ebp
mov dword [esi + 0xaec4], ebp
mov dword [edi + 0xdecc], ecx
mov dword [esi + 0xaec0], ecx
mov dword [edi + 0xdec8], eax
mov dword [esi + 0xaebc], eax
lea eax, [esp + 0x28f80]
lea edx, [edi + 0xded4]
mov ecx, eax
sub edx, ecx
jmp 0x438580
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438580
lea eax, [esp + 0x28f80]
mov dword [edi + 0xfed4], ebx
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4385a0
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x29f80]
lea edx, [edi + ebp + 0xded4]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x4385c0
lea eax, [esp + 0x29f80]
mov dword [edi + 0xfed8], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4385e0
sub eax, edx
lea ebp, [eax + ebp + 1]
lea eax, [esp + 0x2af80]
lea edx, [edi + ebp + 0xded4]
mov ecx, eax
sub edx, ecx
nop
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438600
lea eax, [esp + 0x2af80]
mov dword [edi + 0xfedc], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438620
sub eax, edx
lea edx, [eax + ebp + 1]
mov dword [edi + 0xfee0], edx
lea eax, [esp + 0x2bf80]
lea edx, [esi + 0xaec8]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438644
lea eax, [esp + 0x2bf80]
mov dword [esi + 0xcec8], ebx
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438660
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x28f80]
lea edx, [esi + ebp + 0xaec8]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438680
lea eax, [esp + 0x28f80]
mov dword [esi + 0xcecc], ebp
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x4386a0
sub eax, ecx
lea edx, [eax + ebp + 1]
lea ebp, [edi + 0xdec4]
lea eax, [edi + 0xdcc4]
push ebp
push eax
mov dword [esi + 0xced0], edx
call fcn.00423120
mov ebp, dword [ebp]
push ebp
lea eax, [edi + 0xdcc4]
push eax
lea eax, [esi + 0xacb8]
push eax
mov dword [esi + 0xaeb8], ebp
call fcn.004f7b80
mov ecx, dword [0x7c4570]
add esp, 0x14
push 0x53fccc
push 3
push ecx
mov ecx, dword [0x7bf85c]
add ecx, 0x60c
call fcn.00470a70
mov edx, dword [0x7bf85c]
mov eax, dword [edx + 0x62c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x7c4570]
mov ebp, 1
add eax, ebp
mov dword [0x7c4570], eax
imul eax, eax, 0x410
push 0x539408
lea ecx, [eax + 0x7c12a8]
push ecx
mov ecx, dword [0x7c109c]
lea edx, [eax + 0x7c11a4]
push edx
mov edx, dword [0x7bf85c]
lea eax, [eax + 0x7c10a0]
push eax
push ebx
push ecx
add edx, 0x60c
push edx
call fcn.004706c0
mov dword [esp + 0x30], ebp
mov dword [esp + 0x246d0], ebp
mov ebp, dword [esp + 0x36b24]
lea ecx, [esp + 0x2c]
lea eax, [esp + 0x1f250]
push ecx
mov dword [esp + 0x30], 8
mov dword [esp + 0x38], eax
mov dword [esp + 0x1f658], ebp
mov dword [esp + 0x206a0], 0x1000
call dword [0x7c50e8]
add esp, 0x20
test eax, eax
je 0x439250
mov eax, dword [esp + 0x20684]
cmp eax, ebx
je 0x439250
mov ecx, dword [esp + 0x246b4]
mov dword [edi + 0x100f4], ebp
mov dword [esi + 0xd0e4], ebp
mov dword [edi + 0x100f0], ecx
mov dword [esi + 0xd0e0], ecx
mov dword [edi + 0x100ec], eax
mov dword [esi + 0xd0dc], eax
lea eax, [esp + 0x206a0]
lea edx, [edi + 0x100f8]
mov ecx, eax
sub edx, ecx
jmp 0x438800
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438800
lea eax, [esp + 0x206a0]
mov dword [edi + 0x120f8], ebx
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438820
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x216a0]
lea edx, [edi + ebp + 0x100f8]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438840
lea eax, [esp + 0x216a0]
mov dword [edi + 0x120fc], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438860
sub eax, edx
lea ebp, [eax + ebp + 1]
lea eax, [esp + 0x236a0]
lea edx, [edi + ebp + 0x100f8]
mov ecx, eax
sub edx, ecx
nop
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438880
lea eax, [esp + 0x236a0]
mov dword [edi + 0x12104], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4388a0
sub eax, edx
lea edx, [eax + ebp + 1]
mov dword [edi + 0x12108], edx
lea eax, [esp + 0x206a0]
lea edx, [esi + 0xd0e8]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x4388c4
lea eax, [esp + 0x206a0]
mov dword [esi + 0xf0e8], ebx
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4388e0
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x216a0]
lea edx, [esi + ebp + 0xd0e8]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438900
lea eax, [esp + 0x216a0]
mov dword [esi + 0xf0ec], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438920
sub eax, edx
lea ebp, [eax + ebp + 1]
lea eax, [esp + 0x226a0]
lea edx, [esi + ebp + 0xd0e8]
mov ecx, eax
sub edx, ecx
nop
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438940
lea eax, [esp + 0x226a0]
mov dword [esi + 0xf0f0], ebp
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x438960
sub eax, ecx
lea edx, [eax + ebp + 1]
lea ebp, [edi + 0x100e8]
lea eax, [edi + 0xfee8]
push ebp
push eax
mov dword [esi + 0xf0f8], edx
call fcn.00423120
mov ebp, dword [ebp]
push ebp
lea eax, [edi + 0xfee8]
push eax
lea eax, [esi + 0xced8]
push eax
mov dword [esi + 0xd0d8], ebp
call fcn.004f7b80
mov ecx, dword [0x7c4570]
add esp, 0x14
push 0x53fccc
push 3
push ecx
mov ecx, dword [0x7bf85c]
add ecx, 0x60c
call fcn.00470a70
mov edx, dword [0x7bf85c]
mov eax, dword [edx + 0x62c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x7c4570]
mov ebp, 1
add eax, ebp
mov dword [0x7c4570], eax
imul eax, eax, 0x410
push 0x539408
lea ecx, [eax + 0x7c12a8]
push ecx
mov ecx, dword [0x7c109c]
lea edx, [eax + 0x7c11a4]
push edx
mov edx, dword [0x7bf85c]
lea eax, [eax + 0x7c10a0]
push eax
push ebx
push ecx
add edx, 0x60c
push edx
call fcn.004706c0
mov dword [esp + 0x30], ebp
mov dword [esp + 0x27b2c], ebp
mov ebp, dword [esp + 0x36b28]
lea ecx, [esp + 0x2c]
lea eax, [esp + 0x246d4]
push ecx
mov dword [esp + 0x30], 9
mov dword [esp + 0x38], eax
mov dword [esp + 0x24adc], ebp
mov dword [esp + 0x25b04], 0x1000
call dword [0x7c50e8]
add esp, 0x20
test eax, eax
je 0x439250
mov eax, dword [esp + 0x25ae8]
cmp eax, ebx
je 0x439250
mov ecx, dword [esp + 0x27b10]
mov dword [edi + 0x1231c], ebp
mov dword [esi + 0xf30c], ebp
mov dword [edi + 0x12318], ecx
mov dword [esi + 0xf308], ecx
mov dword [edi + 0x12314], eax
mov dword [esi + 0xf304], eax
lea eax, [esp + 0x25b04]
lea edx, [edi + 0x12320]
mov ecx, eax
sub edx, ecx
jmp 0x438ac0
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438ac0
lea eax, [esp + 0x25b04]
mov dword [edi + 0x14320], ebx
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438ae0
sub eax, edx
inc eax
mov dword [edi + 0x14324], eax
lea eax, [esp + 0x25b04]
lea edx, [esi + 0xf310]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438b01
lea eax, [esp + 0x25b04]
mov dword [esi + 0x11310], ebx
lea edx, [eax + 1]
jmp 0x438b20
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438b20
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x26b04]
lea edx, [esi + ebp + 0xf310]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438b40
lea eax, [esp + 0x26b04]
mov dword [esi + 0x11314], ebp
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x438b60
sub eax, ecx
lea edx, [eax + ebp + 1]
lea ebp, [edi + 0x12310]
lea eax, [edi + 0x12110]
push ebp
push eax
mov dword [esi + 0x11318], edx
call fcn.00423120
mov ebp, dword [ebp]
push ebp
lea eax, [edi + 0x12110]
push eax
lea eax, [esi + 0xf100]
push eax
mov dword [esi + 0xf300], ebp
call fcn.004f7b80
mov ecx, dword [0x7c4570]
add esp, 0x14
push 0x53fccc
push 3
push ecx
mov ecx, dword [0x7bf85c]
add ecx, 0x60c
call fcn.00470a70
mov edx, dword [0x7bf85c]
mov eax, dword [edx + 0x62c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x7c4570]
mov ebp, 1
add eax, ebp
mov dword [0x7c4570], eax
imul eax, eax, 0x410
push 0x539408
lea ecx, [eax + 0x7c12a8]
push ecx
mov ecx, dword [0x7c109c]
lea edx, [eax + 0x7c11a4]
push edx
mov edx, dword [0x7bf85c]
lea eax, [eax + 0x7c10a0]
push eax
push ebx
push ecx
add edx, 0x60c
push edx
call fcn.004706c0
mov dword [esp + 0x30], ebp
mov dword [esp + 0x36af8], ebp
mov ebp, dword [esp + 0x36b2c]
lea ecx, [esp + 0x2c]
lea eax, [esp + 0x31678]
push ecx
mov dword [esp + 0x30], 0xa
mov dword [esp + 0x38], eax
mov dword [esp + 0x31a80], ebp
mov dword [esp + 0x32ac8], 0x1000
call dword [0x7c50e8]
add esp, 0x20
test eax, eax
je 0x439250
mov eax, dword [esp + 0x32aac]
cmp eax, ebx
je 0x439250
mov ecx, dword [esp + 0x36adc]
mov dword [edi + 0x14538], ebp
mov dword [esi + 0x1152c], ebp
mov dword [edi + 0x14534], ecx
mov dword [esi + 0x11528], ecx
mov dword [edi + 0x14530], eax
mov dword [esi + 0x11524], eax
lea eax, [esp + 0x34ac8]
lea edx, [edi + 0x1453c]
mov ecx, eax
sub edx, ecx
jmp 0x438cc0
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438cc0
lea eax, [esp + 0x34ac8]
mov dword [edi + 0x1653c], ebx
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438ce0
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x35ac8]
lea edx, [edi + ebp + 0x1453c]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438d00
lea eax, [esp + 0x35ac8]
mov dword [edi + 0x16540], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438d20
sub eax, edx
lea edx, [eax + ebp + 1]
mov dword [edi + 0x16544], edx
lea eax, [esp + 0x32ac8]
lea edx, [esi + 0x11530]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x438d44
lea eax, [esp + 0x32ac8]
mov dword [esi + 0x13530], ebx
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438d60
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x33ac8]
lea edx, [esi + ebp + 0x11530]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x438d80
lea eax, [esp + 0x33ac8]
mov dword [esi + 0x13534], ebp
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x438da0
sub eax, ecx
lea edx, [eax + ebp + 1]
lea ebp, [edi + 0x1452c]
lea eax, [edi + 0x1432c]
push ebp
push eax
mov dword [esi + 0x13538], edx
call fcn.00423120
mov ebp, dword [ebp]
push ebp
lea eax, [edi + 0x1432c]
push eax
lea eax, [esi + 0x11320]
push eax
mov dword [esi + 0x11520], ebp
call fcn.004f7b80
mov ecx, dword [0x7c4570]
add esp, 0x14
push 0x53fccc
push 3
push ecx
mov ecx, dword [0x7bf85c]
add ecx, 0x60c
call fcn.00470a70
mov edx, dword [0x7bf85c]
mov eax, dword [edx + 0x62c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x7c4570]
mov ebp, 1
add eax, ebp
mov dword [0x7c4570], eax
imul eax, eax, 0x410
push 0x539408
lea ecx, [eax + 0x7c12a8]
push ecx
mov ecx, dword [0x7c109c]
lea edx, [eax + 0x7c11a4]
push edx
mov edx, dword [0x7bf85c]
lea eax, [eax + 0x7c10a0]
push eax
push ebx
push ecx
add edx, 0x60c
push edx
call fcn.004706c0
mov dword [esp + 0x30], ebp
mov dword [esp + 0x12290], ebp
mov ebp, dword [esp + 0x36b30]
lea ecx, [esp + 0x2c]
lea eax, [esp + 0xee38]
push ecx
mov dword [esp + 0x30], 0xb
mov dword [esp + 0x38], eax
mov dword [esp + 0xf240], ebp
mov dword [esp + 0x10268], 0x1000
call dword [0x7c50e8]
add esp, 0x20
test eax, eax
je 0x439250
mov eax, dword [esp + 0x1024c]
cmp eax, ebx
je 0x439250
mov ecx, dword [esp + 0x12274]
mov dword [edi + 0x16758], ebp
mov dword [esi + 0x1374c], ebp
mov dword [edi + 0x16754], ecx
mov dword [esi + 0x13748], ecx
mov dword [edi + 0x16750], eax
mov dword [esi + 0x13744], eax
lea eax, [esp + 0x10268]
lea edx, [edi + 0x1675c]
mov ecx, eax
sub edx, ecx
jmp 0x438f00
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x438f00
lea eax, [esp + 0x10268]
mov dword [edi + 0x1875c], ebx
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438f20
sub eax, edx
inc eax
mov dword [edi + 0x18760], eax
lea eax, [esp + 0x11268]
lea edx, [esi + 0x13750]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x438f41
lea eax, [esp + 0x11268]
mov dword [esi + 0x15750], ebx
lea ebp, [eax + 1]
jmp 0x438f60
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x438f60
sub eax, ebp
inc eax
mov dword [esi + 0x15754], eax
lea ebp, [edi + 0x1674c]
lea eax, [edi + 0x1654c]
push ebp
push eax
call fcn.00423120
mov ebp, dword [ebp]
push ebp
lea eax, [edi + 0x1654c]
push eax
lea edx, [esi + 0x13540]
push edx
mov dword [esi + 0x13740], ebp
call fcn.004f7b80
mov eax, dword [0x7c4570]
mov ecx, dword [0x7bf85c]
add esp, 0x14
push 0x53fccc
push 3
push eax
add ecx, 0x60c
call fcn.00470a70
mov ecx, dword [0x7bf85c]
mov edx, dword [ecx + 0x62c]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x7c4570]
mov ebp, 1
add eax, ebp
mov dword [0x7c4570], eax
imul eax, eax, 0x410
push 0x539408
lea ecx, [eax + 0x7c12a8]
push ecx
mov ecx, dword [0x7c109c]
lea edx, [eax + 0x7c11a4]
push edx
mov edx, dword [0x7bf85c]
lea eax, [eax + 0x7c10a0]
push eax
push ebx
push ecx
add edx, 0x60c
push edx
call fcn.004706c0
mov dword [esp + 0x30], ebp
mov dword [esp + 0x1f24c], ebp
mov ebp, dword [esp + 0x36b34]
lea ecx, [esp + 0x2c]
lea eax, [esp + 0x1ade0]
push ecx
mov dword [esp + 0x30], 0xc
mov dword [esp + 0x38], eax
mov dword [esp + 0x1b1e8], ebp
mov dword [esp + 0x1c220], 0x1000
call dword [0x7c50e8]
add esp, 0x20
test eax, eax
je 0x439250
mov eax, dword [esp + 0x1c204]
cmp eax, ebx
je 0x439250
mov ecx, dword [esp + 0x1f230]
mov dword [edi + 0x18974], ebp
mov dword [esi + 0x15968], ebp
mov dword [edi + 0x18970], ecx
mov dword [esi + 0x15964], ecx
mov dword [edi + 0x1896c], eax
mov dword [esi + 0x15960], eax
lea eax, [esp + 0x1c220]
lea edx, [edi + 0x18978]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x4390b7
lea eax, [esp + 0x1c220]
mov dword [edi + 0x1a978], ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4390d1
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x1e220]
lea edx, [edi + ebp + 0x18978]
mov ecx, eax
sub edx, ecx
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x4390f0
lea eax, [esp + 0x1e220]
mov dword [edi + 0x1a97c], ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x439110
sub eax, edx
lea edx, [eax + ebp + 1]
mov dword [edi + 0x1a980], edx
lea eax, [esp + 0x1d220]
lea edx, [esi + 0x1596c]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x439134
lea eax, [esp + 0x1d220]
mov dword [esi + 0x1796c], ebx
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x439150
sub eax, edx
lea ebp, [eax + 1]
lea eax, [esp + 0x1e220]
lea edx, [esi + ebp + 0x1596c]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x439170
lea eax, [esp + 0x1e220]
mov dword [esi + 0x17970], ebp
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x439190
xor eax, eax
mov ecx, dword [esp + 0x36ae0]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004f6592
add esp, 0x36ad4
ret