Function at 0x4411d0
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Create directory
Get file attributes
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x84ef4d
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1bd4
call fcn.00820f20
mov eax, dword [0x8943b8]
xor eax, esp
mov dword [esp + 0x1bd0], eax
push ebx
push esi
push edi
mov eax, dword [0x8943b8]
xor eax, esp
push eax
lea eax, [esp + 0x1be8]
mov dword fs:[0], eax
mov eax, dword [str.sfjnv]
mov dword [esp + 0x134], eax
xor eax, eax
mov dword [esp + 0x13a], eax
mov dword [esp + 0x13e], eax
mov word [esp + 0x142], ax
movzx eax, word [0x858e2c]
movzx ecx, word [0x858e34]
mov word [esp + 0x148], ax
xor eax, eax
mov dword [esp + 0x14b], eax
mov dword [esp + 0x14f], eax
mov byte [esp + 0x153], al
movzx eax, word [0x858e24]
mov edx, dword [str.nbsjtb]
mov word [esp + 0x158], ax
xor eax, eax
mov dword [esp + 0x15b], eax
mov dword [esp + 0x15f], eax
mov byte [esp + 0x163], al
movzx eax, word [0x858e1c]
mov word [esp + 0x168], ax
xor eax, eax
mov dword [esp + 0x16a], eax
mov dword [esp + 0x16e], eax
mov word [esp + 0x172], ax
movzx eax, word [0x858e14]
mov word [esp + 0x138], cx
movzx ecx, byte [0x858e2e]
mov word [esp + 0x17c], ax
xor eax, eax
mov byte [esp + 0x14a], cl
movzx ecx, byte [0x858e26]
mov dword [esp + 0x144], edx
mov edx, dword [str.tblvzb]
mov dword [esp + 0x17e], eax
mov word [esp + 0x182], ax
mov dword [esp + 0x18a], eax
mov dword [esp + 0x18e], eax
mov word [esp + 0x192], ax
mov eax, dword [str.sfnjmjb]
mov dword [esp + 0x154], edx
mov edx, dword [str.bmjdf]
mov byte [esp + 0x15a], cl
mov ecx, dword [str.qbudipvmj]
mov dword [esp + 0x194], eax
xor eax, eax
mov dword [esp + 0x164], edx
mov edx, dword [0x858e10]
mov dword [esp + 0x174], ecx
mov ecx, dword [str.zpvnv]
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], eax
movzx eax, word [0x858df8]
mov dword [esp + 0x178], edx
movzx edx, word [0x858e00]
mov dword [esp + 0x184], ecx
mov ecx, dword [0x858e08]
mov word [esp + 0x1a8], ax
xor eax, eax
mov dword [esp + 0x198], ecx
movzx ecx, byte [0x858dfa]
mov word [esp + 0x188], dx
mov edx, dword [str.zvzvlp]
mov dword [esp + 0x1ab], eax
mov dword [esp + 0x1af], eax
mov byte [esp + 0x1b3], al
movzx eax, word [0x858df0]
mov dword [esp + 0x1a4], edx
mov edx, dword [str.zvlbsj]
mov byte [esp + 0x1aa], cl
movzx ecx, byte [0x858df2]
xor ebx, ebx
mov word [esp + 0x1b8], ax
xor eax, eax
mov dword [esp + 0x1b4], edx
mov edx, dword [str.tvjlb]
mov byte [esp + 0x1ba], cl
mov dword [esp + 0x1bb], eax
mov dword [esp + 0x1bf], eax
mov byte [esp + 0x1c3], al
movzx eax, word [0x858de8]
mov ecx, dword [str.vepohf]
mov word [esp + 0x1c8], ax
xor eax, eax
mov dword [esp + 0x1ca], eax
mov dword [esp + 0x1ce], eax
mov word [esp + 0x1d2], ax
mov al, byte [0x858de2]
mov byte [esp + 0x1da], al
xor eax, eax
mov dword [esp + 0x1db], eax
mov dword [esp + 0x1df], eax
mov byte [esp + 0x1e3], al
mov dword [esp + 0x1e8], eax
mov dword [esp + 0x1ec], eax
mov dword [esp + 0x1f0], eax
mov dword [esp + 0x1fc], eax
mov dword [esp + 0x200], eax
mov dword [esp + 0x208], eax
mov dword [esp + 0x20c], eax
mov dword [esp + 0x210], eax
mov eax, dword [str.ufotij]
mov dword [esp + 0x214], eax
xor eax, eax
mov dword [esp + 0x21b], eax
mov dword [esp + 0x21f], eax
mov byte [esp + 0x223], al
mov eax, dword [str.tbobf]
mov dword [esp + 0x1d4], ecx
mov ecx, dword [str.lpnbdij]
mov dword [esp + 0x224], eax
xor eax, eax
mov dword [esp + 0x1c4], edx
movzx edx, word [0x858de0]
mov dword [esp + 0x1f4], ecx
movzx ecx, word [0x858dd8]
mov dword [esp + 0x22a], eax
mov dword [esp + 0x22e], eax
mov word [esp + 0x232], ax
movzx eax, word [0x858dc0]
mov word [esp + 0x1d8], dx
mov edx, dword [0x858dc8]
mov word [esp + 0x218], cx
movzx ecx, word [0x858dd0]
mov word [esp + 0x238], ax
xor eax, eax
mov dword [esp + 0x1f8], edx
mov dl, byte [0x858dda]
mov dword [esp + 0x23b], eax
mov dword [esp + 0x23f], eax
mov byte [esp + 0x243], al
movzx eax, word [0x858db8]
mov word [esp + 0x228], cx
movzx ecx, byte [0x858dc2]
mov byte [esp + 0x21a], dl
mov edx, dword [str.dijsop]
mov word [esp + 0x248], ax
xor eax, eax
mov dword [esp + 0x234], edx
mov edx, dword [str.nfjsjo]
mov byte [esp + 0x23a], cl
movzx ecx, byte [0x858dba]
mov dword [esp + 0x24b], eax
mov dword [esp + 0x24f], eax
mov byte [esp + 0x253], al
movzx eax, word [0x858db0]
mov dword [esp + 0x244], edx
mov edx, dword [str.vutvip]
mov byte [esp + 0x24a], cl
movzx ecx, byte [0x858db2]
mov dword [esp + 0x254], edx
mov edx, dword [str.tvxblp]
mov word [esp + 0x258], ax
xor eax, eax
mov dword [esp + 0x1e4], 0x627a62
mov dword [esp + 0x204], 0x766c6a
mov byte [esp + 0x25a], cl
mov dword [esp + 0x25b], eax
mov dword [esp + 0x25f], eax
mov byte [esp + 0x263], al
mov dword [esp + 0x264], edx
movzx eax, word [0x858da8]
movzx ecx, byte [0x858daa]
mov word [esp + 0x268], ax
xor eax, eax
mov byte [esp + 0x26a], cl
mov dword [esp + 0x26b], eax
mov dword [esp + 0x26f], eax
mov byte [esp + 0x273], al
mov dword [esp + 0x28], ebx
lea esi, [esp + 0x134]
mov eax, esi
xor ecx, ecx
lea edi, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x441680
sub eax, edi
je 0x4416af
lea ecx, [ecx]
add byte [esi + ecx], 0xff
mov eax, esi
add ecx, 1
lea edi, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x4416a0
sub eax, edi
cmp ecx, eax
jb 0x441690
mov edi, 0xf
mov eax, esi
mov dword [esp + 0x84], edi
mov dword [esp + 0x80], ebx
mov byte [esp + 0x70], 0
lea ecx, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x4416d0
sub eax, ecx
push eax
push esi
lea ecx, [esp + 0x74]
call fcn.00402200
mov edx, dword [esp + 0x28]
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x3c]
mov dword [esp + 0x1bfc], ebx
mov dword [esp + 0x38], edx
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], 0
call fcn.004020d0
mov ecx, dword [esp + 0x2c]
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x38]
mov dword [esp + 0x54], ecx
push edx
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1bfc], 1
mov dword [esp + 0x74], edi
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], 0
call fcn.004020d0
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x899cfc
mov byte [esp + 0x1bf8], 2
call fcn.00440bb0
mov ebx, 0x10
cmp dword [esp + 0x68], ebx
jb 0x441775
mov edx, dword [esp + 0x54]
push edx
call fcn.0081f6fa
add esp, 4
cmp dword [esp + 0x48], ebx
mov dword [esp + 0x68], edi
mov dword [esp + 0x64], 0
mov byte [esp + 0x54], 0
jb 0x441799
mov eax, dword [esp + 0x34]
push eax
call fcn.0081f6fa
add esp, 4
cmp dword [esp + 0x84], ebx
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], 0
mov byte [esp + 0x34], 0
mov dword [esp + 0x1bf0], 0xffffffff
jb 0x4417cb
mov ecx, dword [esp + 0x70]
push ecx
call fcn.0081f6fa
add esp, 4
mov eax, dword [esp + 0x28]
add eax, 1
add esi, ebx
xor ebx, ebx
cmp eax, 0x14
mov dword [esp + 0x28], eax
jl 0x441673
mov ax, word [0x858da0]
mov cl, byte [0x858da2]
mov edx, dword [str.obnbv]
mov word [esp + 0x128], ax
xor eax, eax
mov dword [esp + 0x12b], eax
mov dword [esp + 0x12f], eax
mov byte [esp + 0x133], al
lea eax, [esp + 0x124]
mov byte [esp + 0x12a], cl
mov dword [esp + 0x124], edx
xor ecx, ecx
lea esi, [eax + 1]
mov edi, edi
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x441830
sub eax, esi
je 0x441864
lea ecx, [ecx]
add byte [esp + ecx + 0x124], 0xff
lea eax, [esp + 0x124]
add ecx, 1
lea esi, [eax + 1]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x441855
sub eax, esi
cmp ecx, eax
jb 0x441840
mov esi, 0xf
lea eax, [esp + 0x124]
mov dword [esp + 0x84], esi
mov dword [esp + 0x80], ebx
mov byte [esp + 0x70], 0
lea ecx, [eax + 1]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x441886
sub eax, ecx
push eax
lea edx, [esp + 0x128]
push edx
lea ecx, [esp + 0x74]
call fcn.00402200
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x74]
mov edi, 3
push eax
lea ecx, [esp + 0x3c]
mov dword [esp + 0x1bfc], edi
mov dword [esp + 0x38], 0x15
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], 0
call fcn.004020d0
mov ecx, dword [esp + 0x2c]
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x38]
mov dword [esp + 0x54], ecx
push edx
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1bfc], 4
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], 0
call fcn.004020d0
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x899cfc
mov byte [esp + 0x1bf8], 5
call fcn.00440bb0
mov ebx, 0x10
cmp dword [esp + 0x68], ebx
jb 0x441937
mov edx, dword [esp + 0x54]
push edx
call fcn.0081f6fa
add esp, 4
cmp dword [esp + 0x48], ebx
mov dword [esp + 0x68], esi
mov dword [esp + 0x64], 0
mov byte [esp + 0x54], 0
jb 0x44195b
mov eax, dword [esp + 0x34]
push eax
call fcn.0081f6fa
add esp, 4
cmp dword [esp + 0x84], ebx
mov dword [esp + 0x48], esi
mov dword [esp + 0x44], 0
mov byte [esp + 0x34], 0
mov dword [esp + 0x1bf0], 0xffffffff
jb 0x44198d
mov ecx, dword [esp + 0x70]
push ecx
call fcn.0081f6fa
add esp, 4
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 0
mov byte [esp + 0x20], 0xa
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 1
mov byte [esp + 0x20], 0xb
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 2
mov byte [esp + 0x20], 0xc
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998b4
mov dword [esp + 0x1c], edi
mov byte [esp + 0x20], 0xd
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 4
mov byte [esp + 0x20], 0xe
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 5
mov byte [esp + 0x20], 0xf
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 6
mov byte [esp + 0x20], bl
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 7
mov byte [esp + 0x20], 0x11
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 8
mov byte [esp + 0x20], 0xa
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
mov edi, 9
push eax
mov ecx, 0x8998b4
mov dword [esp + 0x1c], edi
mov byte [esp + 0x20], 5
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
mov ebx, 0x12
push edx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 0xa
mov byte [esp + 0x20], bl
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 0xb
mov byte [esp + 0x20], 3
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 0xc
mov byte [esp + 0x20], 2
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 0xd
mov byte [esp + 0x20], 4
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 0xe
mov byte [esp + 0x20], 5
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998b4
mov dword [esp + 0x1c], esi
mov byte [esp + 0x20], 0x1f
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 0x10
mov byte [esp + 0x20], 0x1e
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 0x11
mov byte [esp + 0x20], 0x20
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998b4
mov dword [esp + 0x1c], ebx
mov byte [esp + 0x20], 0x22
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 0x13
mov byte [esp + 0x20], 0x1f
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998b4
mov dword [esp + 0x1c], 0x15
mov byte [esp + 0x20], 0x26
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 0
mov byte [esp + 0x20], 0x28
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 1
mov byte [esp + 0x20], 0x29
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 2
mov byte [esp + 0x20], 0xc
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 3
mov byte [esp + 0x20], 0x2a
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 4
mov byte [esp + 0x20], 0x2b
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 5
mov byte [esp + 0x20], 0xe
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 6
mov byte [esp + 0x20], 0x11
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 7
mov byte [esp + 0x20], 0x10
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 8
mov byte [esp + 0x20], bl
call fcn.00457be0
mov dword [esp + 0x14], edi
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998cc
mov byte [esp + 0x20], 0x13
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 0xa
mov byte [esp + 0x20], 0x14
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 0xb
mov byte [esp + 0x20], 0x15
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 0xc
mov byte [esp + 0x20], 0x16
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 0xd
mov byte [esp + 0x20], 4
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 0xe
mov byte [esp + 0x20], 5
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998cc
mov dword [esp + 0x1c], esi
mov byte [esp + 0x20], 0x1e
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 0x10
mov byte [esp + 0x20], 0x1f
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 0x11
mov byte [esp + 0x20], 0x20
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998cc
mov dword [esp + 0x1c], ebx
mov byte [esp + 0x20], 0x21
call fcn.00457be0
mov dword [esp + 0x14], 0x13
mov byte [esp + 0x18], 0x22
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x8998cc
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x8998cc
mov dword [esp + 0x1c], 0x15
mov byte [esp + 0x20], 0x23
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x89885c
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0x64
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 1
mov dword [esp + 0x20], 0x6e
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 2
mov dword [esp + 0x20], 0x78
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x89885c
mov dword [esp + 0x1c], 3
mov dword [esp + 0x20], 0x82
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 4
mov dword [esp + 0x20], 0x8c
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 5
mov dword [esp + 0x20], 0x96
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x89885c
mov dword [esp + 0x1c], 6
mov dword [esp + 0x20], 0xa0
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 7
mov dword [esp + 0x20], 0xaa
call fcn.00457be0
mov dword [esp + 0x14], 8
mov dword [esp + 0x18], 0xb4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x89885c
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x89885c
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], 0xbe
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 0xa
mov dword [esp + 0x20], 0xd2
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 0xb
mov dword [esp + 0x20], 0xdc
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x89885c
mov dword [esp + 0x1c], 0xc
mov dword [esp + 0x20], 0xe6
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 0xd
mov dword [esp + 0x20], 0xf0
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 0xe
mov dword [esp + 0x20], 0xfa
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x89885c
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], 0x104
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 0x10
mov dword [esp + 0x20], 0x10e
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 0x11
mov dword [esp + 0x20], 0x118
call fcn.00457be0
lea edx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 0x122
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x89885c
call fcn.00457be0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 0x13
mov dword [esp + 0x20], 0x12c
call fcn.00457be0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, 0x89885c
mov dword [esp + 0x1c], 0x14
mov dword [esp + 0x20], 0x136
call fcn.00457be0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x89885c
mov dword [esp + 0x1c], 0x15
mov dword [esp + 0x20], 0x140
call fcn.00457be0
mov edx, dword [0x8586dc]
mov ecx, dword [str.data_bgm_op.ogg]
mov eax, dword [0x8586e0]
push 0xf4
mov dword [esp + 0x27c], edx
xor ebx, ebx
mov dword [esp + 0x278], ecx
mov ecx, dword [0x8586e4]
lea edx, [esp + 0x288]
push ebx
push edx
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], ecx
call fcn.008201b0
mov ecx, dword [0x858600]
mov edx, dword [0x858604]
mov eax, dword [str.data_bgm_ta02.ogg]
mov dword [esp + 0x388], ecx
movzx ecx, word [0x85860c]
push 0xf2
mov dword [esp + 0x390], edx
mov dword [esp + 0x388], eax
mov eax, dword [0x858608]
lea edx, [esp + 0x39a]
push ebx
push edx
mov dword [esp + 0x39c], eax
mov word [esp + 0x3a0], cx
call fcn.008201b0
mov ecx, dword [0x85863c]
mov edx, dword [0x858640]
mov eax, dword [str.data_bgm_ta08.ogg]
mov dword [esp + 0x498], ecx
movzx ecx, word [0x858648]
push 0xf2
mov dword [esp + 0x4a0], edx
mov dword [esp + 0x498], eax
mov eax, dword [0x858644]
lea edx, [esp + 0x4aa]
push ebx
push edx
mov dword [esp + 0x4ac], eax
mov word [esp + 0x4b0], cx
call fcn.008201b0
mov eax, dword [str.data_bgm_ta07.ogg]
mov ecx, dword [0x8585d8]
mov edx, dword [0x8585dc]
mov dword [esp + 0x5a4], eax
mov eax, dword [0x8585e0]
mov dword [esp + 0x5a8], ecx
movzx ecx, word [0x8585e4]
mov dword [esp + 0x5ac], edx
mov dword [esp + 0x5b0], eax
push 0xf2
lea edx, [esp + 0x5ba]
push ebx
push edx
mov word [esp + 0x5c0], cx
call fcn.008201b0
mov ecx, dword [0x85858c]
mov eax, dword [str.data_bgm_sr.ogg]
mov edx, dword [0x858590]
push 0xf4
mov dword [esp + 0x6bc], ecx
mov dword [esp + 0x6b8], eax
mov eax, dword [0x858594]
lea ecx, [esp + 0x6c8]
push ebx
push ecx
mov dword [esp + 0x6c8], edx
mov dword [esp + 0x6cc], eax
call fcn.008201b0
mov eax, dword [0x8586b4]
mov ecx, dword [0x8586b8]
mov edx, dword [str.data_bgm_st00.ogg]
mov dword [esp + 0x7c8], eax
movzx eax, word [0x8586c0]
push 0xf2
mov dword [esp + 0x7d0], ecx
mov dword [esp + 0x7c8], edx
mov edx, dword [0x8586bc]
lea ecx, [esp + 0x7da]
push ebx
push ecx
mov dword [esp + 0x7dc], edx
mov word [esp + 0x7e0], ax
call fcn.008201b0
mov eax, dword [0x858678]
mov ecx, dword [0x85867c]
mov edx, dword [str.data_bgm_st01.ogg]
add esp, 0x48
mov dword [esp + 0x890], eax
movzx eax, word [0x858684]
push 0xf2
mov dword [esp + 0x898], ecx
mov dword [esp + 0x890], edx
mov edx, dword [0x858680]
lea ecx, [esp + 0x8a2]
push ebx
push ecx
mov dword [esp + 0x8a4], edx
mov word [esp + 0x8a8], ax
call fcn.008201b0
mov eax, dword [0x858664]
mov ecx, dword [0x858668]
mov edx, dword [str.data_bgm_st02.ogg]
mov dword [esp + 0x9a0], eax
movzx eax, word [0x858670]
push 0xf2
mov dword [esp + 0x9a8], ecx
mov dword [esp + 0x9a0], edx
mov edx, dword [0x85866c]
lea ecx, [esp + 0x9b2]
push ebx
push ecx
mov dword [esp + 0x9b4], edx
mov word [esp + 0x9b8], ax
call fcn.008201b0
mov eax, dword [0x858628]
mov ecx, dword [0x85862c]
mov edx, dword [str.data_bgm_st03.ogg]
mov dword [esp + 0xab0], eax
movzx eax, word [0x858634]
push 0xf2
mov dword [esp + 0xab8], ecx
mov dword [esp + 0xab0], edx
mov edx, dword [0x858630]
lea ecx, [esp + 0xac2]
push ebx
push ecx
mov dword [esp + 0xac4], edx
mov word [esp + 0xac8], ax
call fcn.008201b0
mov edx, dword [str.data_bgm_st04.ogg]
mov eax, dword [0x8585ec]
mov ecx, dword [0x8585f0]
mov dword [esp + 0xbc0], eax
movzx eax, word [0x8585f8]
push 0xf2
mov dword [esp + 0xbc8], ecx
mov dword [esp + 0xbc0], edx
mov edx, dword [0x8585f4]
lea ecx, [esp + 0xbd2]
push ebx
push ecx
mov dword [esp + 0xbd4], edx
mov word [esp + 0xbd8], ax
call fcn.008201b0
mov eax, dword [0x8585c4]
mov ecx, dword [0x8585c8]
mov edx, dword [str.data_bgm_st05.ogg]
mov dword [esp + 0xcd0], eax
movzx eax, word [0x8585d0]
push 0xf2
mov dword [esp + 0xcd8], ecx
mov dword [esp + 0xcd0], edx
mov edx, dword [0x8585cc]
lea ecx, [esp + 0xce2]
push ebx
push ecx
mov dword [esp + 0xce4], edx
mov word [esp + 0xce8], ax
call fcn.008201b0
mov eax, dword [0x8585b0]
mov ecx, dword [0x8585b4]
mov edx, dword [str.data_bgm_st06.ogg]
mov dword [esp + 0xde0], eax
movzx eax, word [0x8585bc]
push 0xf2
mov dword [esp + 0xde8], ecx
mov dword [esp + 0xde0], edx
mov edx, dword [0x8585b8]
lea ecx, [esp + 0xdf2]
push ebx
push ecx
mov dword [esp + 0xdf4], edx
mov word [esp + 0xdf8], ax
call fcn.008201b0
mov eax, dword [0x858578]
mov ecx, dword [0x85857c]
mov edx, dword [str.data_bgm_st10.ogg]
add esp, 0x48
mov dword [esp + 0xea8], eax
movzx eax, word [0x858584]
push 0xf2
mov dword [esp + 0xeb0], ecx
mov dword [esp + 0xea8], edx
mov edx, dword [0x858580]
lea ecx, [esp + 0xeba]
push ebx
push ecx
mov dword [esp + 0xebc], edx
mov word [esp + 0xec0], ax
call fcn.008201b0
mov eax, dword [0x858564]
mov ecx, dword [0x858568]
mov edx, dword [str.data_bgm_st11.ogg]
mov dword [esp + 0xfb8], eax
movzx eax, word [0x858570]
push 0xf2
mov dword [esp + 0xfc0], ecx
mov dword [esp + 0xfb8], edx
mov edx, dword [0x85856c]
lea ecx, [esp + 0xfca]
push ebx
push ecx
mov dword [esp + 0xfcc], edx
mov word [esp + 0xfd0], ax
call fcn.008201b0
mov edx, dword [str.data_bgm_st12.ogg]
mov eax, dword [0x858550]
mov ecx, dword [0x858554]
mov dword [esp + 0x10c4], edx
mov dword [esp + 0x10c8], eax
mov dword [esp + 0x10cc], ecx
movzx eax, word [0x85855c]
mov edx, dword [0x858558]
push 0xf2
lea ecx, [esp + 0x10da]
push ebx
push ecx
mov dword [esp + 0x10dc], edx
mov word [esp + 0x10e0], ax
call fcn.008201b0
mov eax, dword [0x85853c]
mov ecx, dword [0x858540]
mov edx, dword [str.data_bgm_st13.ogg]
mov dword [esp + 0x11d8], eax
movzx eax, word [0x858548]
push 0xf2
mov dword [esp + 0x11e0], ecx
mov dword [esp + 0x11d8], edx
mov edx, dword [0x858544]
lea ecx, [esp + 0x11ea]
push ebx
push ecx
mov dword [esp + 0x11ec], edx
mov word [esp + 0x11f0], ax
call fcn.008201b0
mov eax, dword [0x858528]
mov ecx, dword [0x85852c]
mov edx, dword [str.data_bgm_st14.ogg]
mov dword [esp + 0x12e8], eax
movzx eax, word [0x858534]
push 0xf2
mov dword [esp + 0x12f0], ecx
mov dword [esp + 0x12e8], edx
mov edx, dword [0x858530]
lea ecx, [esp + 0x12fa]
push ebx
push ecx
mov dword [esp + 0x12fc], edx
mov word [esp + 0x1300], ax
call fcn.008201b0
mov eax, dword [0x858514]
mov ecx, dword [0x858518]
mov edx, dword [str.data_bgm_st15.ogg]
mov dword [esp + 0x13f8], eax
movzx eax, word [0x858520]
push 0xf2
mov dword [esp + 0x1400], ecx
mov dword [esp + 0x13f8], edx
mov edx, dword [0x85851c]
lea ecx, [esp + 0x140a]
push ebx
push ecx
mov dword [esp + 0x140c], edx
mov word [esp + 0x1410], ax
call fcn.008201b0
mov eax, dword [0x858500]
mov ecx, dword [0x858504]
mov edx, dword [str.data_bgm_st16.ogg]
add esp, 0x48
mov dword [esp + 0x14c0], eax
movzx eax, word [0x85850c]
push 0xf2
mov dword [esp + 0x14c8], ecx
mov dword [esp + 0x14c0], edx
mov edx, dword [0x858508]
lea ecx, [esp + 0x14d2]
push ebx
push ecx
mov dword [esp + 0x14d4], edx
mov word [esp + 0x14d8], ax
call fcn.008201b0
mov eax, dword [0x8584ec]
mov edx, dword [str.data_bgm_st17.ogg]
mov ecx, dword [0x8584f0]
mov dword [esp + 0x15d0], eax
movzx eax, word [0x8584f8]
mov dword [esp + 0x15cc], edx
mov edx, dword [0x8584f4]
mov dword [esp + 0x15d4], ecx
mov dword [esp + 0x15d8], edx
mov word [esp + 0x15dc], ax
push 0xf2
lea ecx, [esp + 0x15e2]
push ebx
push ecx
call fcn.008201b0
mov eax, dword [0x8584d8]
mov ecx, dword [0x8584dc]
mov edx, dword [str.data_bgm_st18.ogg]
mov dword [esp + 0x16e0], eax
movzx eax, word [0x8584e4]
push 0xf2
mov dword [esp + 0x16e8], ecx
mov dword [esp + 0x16e0], edx
mov edx, dword [0x8584e0]
lea ecx, [esp + 0x16f2]
push ebx
push ecx
mov dword [esp + 0x16f4], edx
mov word [esp + 0x16f8], ax
call fcn.008201b0
mov eax, dword [0x8584c4]
mov ecx, dword [0x8584c8]
mov edx, dword [str.data_bgm_st19.ogg]
mov dword [esp + 0x17f0], eax
movzx eax, word [0x8584d0]
push 0xf2
mov dword [esp + 0x17f8], ecx
mov dword [esp + 0x17f0], edx
mov edx, dword [0x8584cc]
lea ecx, [esp + 0x1802]
push ebx
push ecx
mov dword [esp + 0x1804], edx
mov word [esp + 0x1808], ax
call fcn.008201b0
mov eax, dword [0x8584b0]
mov ecx, dword [0x8584b4]
mov edx, dword [str.data_bgm_st20.ogg]
mov dword [esp + 0x1900], eax
movzx eax, word [0x8584bc]
push 0xf2
mov dword [esp + 0x1908], ecx
mov dword [esp + 0x1900], edx
mov edx, dword [0x8584b8]
lea ecx, [esp + 0x1912]
push ebx
push ecx
mov dword [esp + 0x1914], edx
mov word [esp + 0x1918], ax
call fcn.008201b0
mov eax, dword [0x85849c]
mov ecx, dword [0x8584a0]
mov edx, dword [str.data_bgm_st21.ogg]
mov dword [esp + 0x1a10], eax
movzx eax, word [0x8584a8]
push 0xf2
mov dword [esp + 0x1a18], ecx
mov dword [esp + 0x1a10], edx
mov edx, dword [0x8584a4]
lea ecx, [esp + 0x1a22]
push ebx
push ecx
mov dword [esp + 0x1a24], edx
mov word [esp + 0x1a28], ax
call fcn.008201b0
mov eax, dword [0x858488]
mov ecx, dword [0x85848c]
mov edx, dword [str.data_bgm_st22.ogg]
add esp, 0x48
mov dword [esp + 0x1ad8], eax
movzx eax, word [0x858494]
push 0xf2
mov dword [esp + 0x1ae0], ecx
mov dword [esp + 0x1ad8], edx
mov edx, dword [0x858490]
lea ecx, [esp + 0x1aea]
push ebx
push ecx
mov dword [esp + 0x1aec], edx
mov word [esp + 0x1af0], ax
call fcn.008201b0
add esp, 0xc
lea esi, [esp + 0x274]
lea edi, [ebx + 0x19]
push esi
call fcn.00409c80
add esp, 4
lea edx, [esp + 0x28]
mov dword [esp + 0x28], eax
push edx
lea eax, [esp + 0x20]
push eax
mov ecx, 0x8998c0
call fcn.00430450
add esi, 0x104
sub edi, 1
jne 0x442a34
mov ecx, 0x8998d8
call fcn.0040a910
push 1
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x3b
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x3c
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x3d
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x3e
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x3f
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x40
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x41
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x42
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x43
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x44
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x57
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x58
mov ecx, 0x8998d8
call fcn.0040aac0
push 0x34
lea ecx, [esp + 0x8c]
push ebx
push ecx
call fcn.008201b0
add esp, 0xc
lea edx, [esp + 0x88]
push edx
mov ecx, 0x8986a8
mov byte [esp + 0x8c], 0xff
mov dword [esp + 0x90], 0xc8
mov dword [esp + 0x94], 0xd0
mov dword [esp + 0x98], 0xcb
mov dword [esp + 0x9c], 0xcd
mov dword [esp + 0xa0], 0x2c
mov dword [esp + 0xa4], 0x2d
mov dword [esp + 0xa8], 0x2e
mov dword [esp + 0xac], 0x1e
mov dword [esp + 0xb0], 0x1f
mov dword [esp + 0xb4], 0x20
mov dword [esp + 0xb8], 1
call fcn.0040a160
mov eax, dword [0x89a2b8]
mov ecx, dword [0x89a2b4]
add ecx, eax
test cl, 3
jne 0x442bd8
add eax, 4
shr eax, 2
cmp dword [0x89a2b0], eax
ja 0x442bd8
push 1
mov ecx, 0x89a2a8
call fcn.0044be80
mov eax, dword [0x89a2b8]
mov edx, dword [0x89a2b4]
lea edi, [edx + eax]
mov eax, dword [0x89a2b0]
mov esi, edi
shr esi, 2
cmp eax, esi
ja 0x442bf6
sub esi, eax
mov ecx, dword [0x89a2ac]
cmp dword [ecx + esi*4], ebx
jne 0x442c14
push 0x10
call fcn.0081fbdc
mov edx, dword [0x89a2ac]
add esp, 4
mov dword [edx + esi*4], eax
mov eax, dword [0x89a2ac]
mov ecx, dword [eax + esi*4]
and edi, 3
lea eax, [ecx + edi*4]
cmp eax, ebx
je 0x442c2c
mov dword [eax], 0x8986a8
push 0x34
lea edx, [esp + 0x8c]
push ebx
mov esi, 1
add dword [0x89a2b8], esi
push edx
call fcn.008201b0
mov dword [esp + 0xac], esi
mov esi, 6
add esp, 0xc
lea ecx, [esp + 0xbc]
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa4], 2
mov dword [esp + 0xa8], 3
mov dword [esp + 0xac], 4
mov dword [esp + 0xb0], 5
mov dword [esp + 0xb4], esi
call fcn.0040a0f0
mov dword [esp + 0xbc], vtable.CInputManagerEx.0
mov byte [esp + 0x120], bl
mov word [esp + 0x11c], bx
mov ecx, dword [0x8a02b8]
lea eax, [esp + 0xbc]
push eax
push ecx
mov ecx, 0x899cec
mov dword [esp + 0x1bf8], esi
call fcn.00440c70
lea ecx, [esp + 0xbc]
mov dword [esp + 0x1bf0], 0xffffffff
call fcn.0040a150
xor edi, edi
mov dword [esp + 0x28], edi
jmp 0x442d00
mov esi, dword [0x899cf0]
test esi, esi
je 0x442e17
mov ecx, dword [0x899cf4]
sub ecx, esi
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jae 0x442e17
lea edx, [esp + 0x88]
push edx
lea ecx, [esi + edi]
mov byte [esp + 0x8c], bl
call fcn.0040a160
mov esi, dword [0x899cf0]
test esi, esi
je 0x442d6d
mov ecx, dword [0x899cf4]
sub ecx, esi
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x442d78
call fcn.0081ff70
mov esi, dword [0x899cf0]
mov eax, dword [0x89a2b8]
mov ecx, dword [0x89a2b4]
add esi, edi
add ecx, eax
test cl, 3
mov dword [esp + 0x14], esi
jne 0x442daa
add eax, 4
shr eax, 2
cmp dword [0x89a2b0], eax
ja 0x442daa
push 1
mov ecx, 0x89a2a8
call fcn.0044be80
mov eax, dword [0x89a2b8]
mov edx, dword [0x89a2b4]
lea edi, [edx + eax]
mov eax, dword [0x89a2b0]
mov esi, edi
shr esi, 2
cmp eax, esi
ja 0x442dc8
sub esi, eax
mov ecx, dword [0x89a2ac]
cmp dword [ecx + esi*4], 0
jne 0x442de7
push 0x10
call fcn.0081fbdc
mov edx, dword [0x89a2ac]
add esp, 4
mov dword [edx + esi*4], eax
mov eax, dword [0x89a2ac]
mov ecx, dword [eax + esi*4]
and edi, 3
lea eax, [ecx + edi*4]
test eax, eax
je 0x442dff
mov edx, dword [esp + 0x14]
mov dword [eax], edx
add dword [0x89a2b8], 1
add ebx, 1
add dword [esp + 0x28], 0x68
mov edi, dword [esp + 0x28]
jmp 0x442d00
xor ecx, ecx
mov al, 0xfe
push 0x89a248
mov dword [0x898680], ecx
mov byte [0x898678], al
mov dword [0x898684], ecx
mov byte [0x898679], al
call fcn.00444050
add esp, 4
call fcn.007fb020
call fcn.0043eb00
push 0x60
push 0x60
push 0xff
mov ecx, 0x89867a
call fcn.00438500
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
push str.profile
call esi
cmp eax, 0xffffffff
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
jne 0x442e92
push 0
push str.profile
call edi
test eax, eax
jne 0x442e92
push 0x858d78
push str.Error
call fcn.00409550
add esp, 8
push str.replay
call esi
cmp eax, 0xffffffff
jne 0x442ebd
push 0
push str.replay
call edi
test eax, eax
jne 0x442ebd
push 0x858d5c
push str.Error
call fcn.00409550
add esp, 8
mov ecx, 0x899f60
call fcn.00433330
cmp byte [0x8998b0], 0
je 0x442ee5
mov eax, dword [0x8a018c]
push 0
push 0xd
push 0x104
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
fild dword [0x8998a8]
push ecx
mov ecx, 0x89fe50
fmul qword [0x858c08]
fmul qword [0x858820]
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fstp dword [esp]
call fcn.00403d10
mov ecx, dword [0x8998ac]
push ecx
call fcn.0043e230
add esp, 4
mov ecx, dword [esp + 0x1be8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1bd0]
xor ecx, esp
call fcn.0081fb35
mov esp, ebp
pop ebp
ret