Function at 0x41b550
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4721c7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf5c
mov eax, dword [0x492f50]
push ebx
push ebp
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
mov esi, ecx
push 0
mov dword [esp + 0xf70], eax
mov eax, dword [esi + 0x1fc]
push 0x1032
push eax
mov dword [esp + 0x4c], esi
call edi
test eax, eax
mov dword [esp + 0x44], eax
jg 0x41b5d6
push 0x476ba8
push 0x3ee
mov ecx, esi
call fcn.00460845
mov ecx, eax
call fcn.0046096d
push 0x478724
push 0x3eb
mov ecx, esi
call fcn.00460845
mov ecx, eax
call fcn.0046096d
jmp 0x41d204
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x24], eax
mov dword [esp + 0xf74], 0
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x20], eax
mov byte [esp + 0xf74], 1
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
mov byte [esp + 0xf74], 2
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x30], eax
lea ecx, [esp + 0x2b8]
mov byte [esp + 0xf74], 3
call fcn.00401710
mov eax, dword [esi + 0x1fc]
push 2
push 0xffffffffffffffff
push 0x100c
push eax
call edi
inc eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x80], 0xffffffff
je 0x41cffa
lea esp, [esp]
mov esi, dword [esp + 0x58]
mov ebp, dword [esp + 0x3c]
mov ecx, dword [ebp + 0x1fc]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push 2
dec esi
push esi
push 0x100c
push ecx
call ebx
lea edx, [esp + 0x80]
push edx
inc eax
push esi
mov ecx, ebp
mov dword [esp + 0x60], eax
call fcn.0041a4d0
mov esi, eax
test esi, esi
mov dword [esp + 0x8c], esi
je 0x41c7c8
lea eax, [esp + 0x64]
push eax
mov ecx, esi
call fcn.00401bd0
lea ecx, [esp + 0x5f8]
push ecx
mov ecx, esi
call fcn.00401c10
lea edx, [esp + 0x2b8]
push edx
mov ecx, esi
call fcn.00401da0
push 0x3eb
mov ecx, ebp
call fcn.00460845
mov edi, eax
lea eax, [esp + 0x1c]
push eax
mov ecx, edi
call fcn.0045f2b0
mov ecx, dword [ebp + 0x1fc]
push 0
push 0
push 0x1032
push ecx
call ebx
cmp eax, 1
jne 0x41b749
mov eax, dword [esp + 0x2b8]
test eax, eax
je 0x41b76b
mov edx, dword [esp + 0x1c]
push 0x478724
push edx
call fcn.0044a6f3
add esp, 8
test eax, eax
jne 0x41b76b
push 0x478734
jmp 0x41b764
mov eax, dword [esp + 0x1c]
push 0x478724
push eax
call fcn.0044a6f3
add esp, 8
test eax, eax
je 0x41b76b
push 0x478724
mov ecx, edi
call fcn.0046096d
push 0xc
push 0x478b30
lea ecx, [esp + 0x2c]
call fcn.00403ad0
mov eax, dword [esp + 0x6c]
cmp eax, 0x100
jbe 0x41b7ae
movzx ecx, al
push ecx
movzx ecx, byte [esp + 0x73]
movzx edx, ah
movzx eax, byte [esp + 0x72]
push edx
push eax
push ecx
lea edx, [esp + 0x2c]
push str._d._d._d._d
push edx
call fcn.00403c50
add esp, 0x18
jmp 0x41b7c1
push eax
lea eax, [esp + 0x20]
push str.COM_d
push eax
call fcn.00403c50
add esp, 0xc
mov ecx, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push str.IP_s_r_n
push edx
call fcn.00403c50
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 0xc]
add esp, 0xc
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x24]
push str.__s__r_n
push ecx
call fcn.00403c50
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 0xc]
add esp, 0xc
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.004059c0
mov eax, dword [esp + 0x78]
test eax, eax
mov ebx, dword [esp + 0x44]
jne 0x41b902
cmp ebx, 1
jne 0x41b898
mov eax, dword [esp + 0x70]
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.00419fb0
mov ecx, dword [esp + 0x24]
push ecx
lea edx, [esp + 0x2c]
push 0x478b14
push edx
call fcn.00403c50
mov eax, dword [esp + 0x34]
mov ecx, dword [eax - 0xc]
add esp, 0x14
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov ecx, dword [esp + 0x74]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.00419fb0
mov edx, dword [esp + 0x24]
push edx
lea eax, [esp + 0x2c]
push 0x478b08
push eax
call fcn.00403c50
mov eax, dword [esp + 0x34]
mov ecx, dword [eax - 0xc]
add esp, 0x14
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [esp + 0x68]
movzx ecx, ah
push ecx
movzx ecx, byte [esp + 0x6a]
movzx edx, al
movzx eax, byte [esp + 0x6b]
push edx
push eax
mov eax, dword [esp + 0x70]
push ecx
movzx edx, ah
push edx
movzx eax, al
push eax
lea ecx, [esp + 0x34]
push str._02X__02X__02X__02X__02X__02X
push ecx
call fcn.00403c50
mov edx, dword [esp + 0x3c]
push edx
lea eax, [esp + 0x44]
push str.MAC_s_r_n
push eax
call fcn.00403c50
mov edi, dword [esp + 0x4c]
mov eax, dword [edi - 0xc]
add esp, 0x2c
push eax
push edi
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [edi - 0xc]
push eax
push edi
lea ecx, [esp + 0x38]
call fcn.004059c0
cmp ebx, 1
jne 0x41b92c
mov eax, dword [esp + 0x78]
test eax, eax
mov eax, 0x478af8
jne 0x41b919
mov eax, 0x478af4
push eax
lea ecx, [esp + 0x24]
push 0x478ae4
push ecx
call fcn.00403c50
add esp, 0xc
mov eax, dword [esp + 0x78]
test eax, eax
je 0x41b944
push 0xc
push 0x478ad4
lea ecx, [esp + 0x38]
call fcn.004059c0
cmp ebx, 1
jne 0x41b9d9
push 0xe
push str._r_n_l
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [esp + 0x2bc]
test eax, eax
mov ecx, 0x478af8
jne 0x41b972
mov ecx, 0x478af4
mov eax, dword [esp + 0x2b8]
test eax, eax
mov eax, 0x478abc
jne 0x41b987
mov eax, 0x478ab4
push ecx
push eax
lea edx, [esp + 0x28]
push 0x478a94
push edx
call fcn.00403c50
mov eax, dword [esp + 0x30]
mov ecx, dword [eax - 0xc]
add esp, 0x10
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [esp + 0x2dc]
push eax
lea ecx, [esp + 0x24]
push 0x478a84
push ecx
call fcn.00403c50
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 0xc]
add esp, 0xc
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [esp + 0x2b8]
test eax, eax
mov eax, 0x478abc
jne 0x41b9ee
mov eax, 0x478ab4
mov edx, dword [esp + 0x2d4]
mov ecx, dword [esp + 0x2dc]
push edx
push ecx
push eax
lea edx, [esp + 0x2c]
push 0x478a58
push edx
call fcn.00403c50
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx - 0xc]
add esp, 0x14
push eax
push ecx
lea ecx, [esp + 0x38]
call fcn.004059c0
cmp ebx, 1
jne 0x41bcfe
mov eax, dword [esp + 0x2d8]
test eax, eax
je 0x41ba5c
push eax
lea eax, [esp + 0x24]
push 0x478a44
push eax
call fcn.00403c50
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 0xc]
add esp, 0xc
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov edx, dword [esp + 0x2d4]
lea ecx, [esp + 0x2c0]
push ecx
push edx
lea eax, [esp + 0x28]
push 0x478a30
push eax
call fcn.00403c50
mov eax, dword [esp + 0x30]
mov ecx, dword [eax - 0xc]
add esp, 0x10
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [esp + 0x2b8]
test eax, eax
je 0x41bc83
xor ebx, ebx
xor eax, eax
mov dword [esp + 0x278], ebx
mov ecx, 0xf
lea edi, [esp + 0x27c]
rep stosd dword es:[edi], eax
mov dword [esp + 0x238], ebx
mov ecx, 0xf
lea edi, [esp + 0x23c]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x20]
push 0x478a10
push ecx
mov dword [esp + 0x34], ebx
call fcn.00403c50
add esp, 8
lea edx, [esp + 0x238]
push edx
lea eax, [esp + 0x27c]
push eax
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
call fcn.00401c40
test eax, eax
jne 0x41bc71
cmp dword [esp + 0x2c], ebx
jbe 0x41bc71
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea ebx, [eax + 0x10]
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x2c]
xor edi, edi
test eax, eax
mov byte [esp + 0xf74], 4
jbe 0x41bc3c
lea ebx, [ebx]
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x38], eax
mov byte [esp + 0xf74], 5
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x28], eax
mov ecx, dword [esp + edi*4 + 0x278]
lea eax, [esp + 0x38]
push eax
push ecx
mov byte [esp + 0xf7c], 6
call fcn.00419fb0
mov eax, dword [esp + edi*4 + 0x240]
add esp, 8
sub eax, 0
je 0x41bbb5
dec eax
je 0x41bba9
dec eax
jne 0x41bbc7
push 0x478a00
lea edx, [esp + 0x2c]
push edx
jmp 0x41bbbf
push str.Telnet_l
lea eax, [esp + 0x2c]
push eax
jmp 0x41bbbf
push str.TCPIP__l
lea ecx, [esp + 0x2c]
push ecx
call fcn.00403c50
add esp, 8
mov ebx, dword [esp + 0x38]
mov edx, dword [esp + 0x28]
push ebx
push edx
lea eax, [esp + 0x3c]
push str._s_s_r_n
push eax
call fcn.00419e20
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0xf74], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41bc09
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [ebx - 0x10]
mov byte [esp + 0xf74], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41bc2b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x2c]
inc edi
cmp edi, eax
jb 0x41bb40
mov ebx, dword [esp + 0x34]
push ebx
lea eax, [esp + 0x24]
push 0x4789b8
push eax
call fcn.00403c50
lea eax, [ebx - 0x10]
add esp, 0xc
mov byte [esp + 0xf74], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41bc71
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
lea eax, [esp + 0x2e8]
push eax
lea ecx, [esp + 0x58]
call fcn.00404830
push 0x477190
push 0x477214
lea ecx, [esp + 0x5c]
mov byte [esp + 0xf7c], 7
call fcn.00407550
mov ecx, dword [esp + 0x54]
push ecx
lea edx, [esp + 0x24]
push 0x4789a4
push edx
call fcn.00403c50
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx - 0xc]
add esp, 0xc
push eax
push ecx
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41bcfe
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 0x12
push 0x478990
lea ecx, [esp + 0x2c]
call fcn.004059c0
lea ecx, [esp + 0x160]
call fcn.00411b50
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x64]
lea eax, [esp + 0x160]
push eax
push ecx
push edx
push ecx
mov eax, esp
mov dword [esp + 0x5c], esp
mov edi, 2
push eax
mov ecx, esi
mov byte [esp + 0xf88], 8
mov dword [esp + 0x1d4], edi
call fcn.004035c0
lea ecx, [ebp + 0x24c]
call fcn.00426940
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x28], eax
cmp dword [esp + 0x1c0], edi
mov byte [esp + 0xf74], 9
jne 0x41bdb5
lea eax, [ebp + 0x270]
push eax
lea ecx, [esp + 0x164]
call fcn.00403de0
mov eax, dword [ebp + 0x2cc]
lea ecx, [eax + eax*8]
mov eax, dword [ebp + 0x2d4]
lea edx, [ecx*8 + 0x4914fc]
push edx
push eax
push 0x478984
lea ecx, [esp + 0x34]
push ecx
jmp 0x41bdd9
mov eax, dword [esp + 0x1bc]
mov ecx, dword [esp + 0x1c4]
lea edx, [eax + eax*8]
lea eax, [edx*8 + 0x4914fc]
push eax
push ecx
push 0x478974
lea edx, [esp + 0x34]
push edx
call fcn.00403c50
mov eax, dword [esp + 0x38]
add esp, 0x10
push eax
lea ecx, [esp + 0x20]
push 0x478960
push ecx
call fcn.00403c50
mov eax, dword [esp + 0x28]
mov ecx, dword [eax - 0xc]
add esp, 0xc
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.004059c0
lea ecx, [esp + 0xe4]
call fcn.00436930
mov edx, dword [esp + 0x5fc]
mov eax, dword [esp + 0x5f8]
push 0
push 0x3e8
push edx
push eax
mov byte [esp + 0xf84], 0xa
call fcn.0044ac60
lea ecx, [esp + 0x608]
push ecx
lea ecx, [esp + 0x54]
mov ebp, eax
mov dword [esp + 0xe4], edx
call fcn.00404830
lea edx, [esp + 0x40]
push edx
mov ecx, esi
mov byte [esp + 0xf78], 0xb
call fcn.004035c0
push 3
lea eax, [esp + 0xa0]
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0xf7c], 0xc
call fcn.00403830
mov eax, dword [eax]
push 0x476a5c
push eax
call fcn.0044a6f3
mov ebx, eax
mov eax, dword [esp + 0xa4]
add esp, 8
neg ebx
sbb bl, bl
add eax, 0xfffffff0
inc bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41bece
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test bl, bl
je 0x41bedf
push 0x5f
push 0
lea ecx, [esp + 0x48]
call fcn.00403b70
mov ecx, dword [esp + 0x188]
mov eax, dword [ecx - 0xc]
test eax, eax
jge 0x41bef2
or edi, 0xffffffff
jmp 0x41bf14
push str.__Folder_
push ecx
call fcn.0044ae11
mov ecx, dword [esp + 0x190]
add esp, 8
test eax, eax
jne 0x41bf10
or edi, 0xffffffff
jmp 0x41bf14
sub eax, ecx
mov edi, eax
lea eax, [ecx - 0x10]
push eax
call fcn.004026d0
add eax, 0x10
add esp, 4
mov dword [esp + 0x2c], eax
cmp edi, 0xffffffff
mov byte [esp + 0xf74], 0xd
je 0x41bfe8
dec edi
push edi
push 0
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x194]
call fcn.00407390
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0xf78], 0xe
call fcn.00403d30
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0xd
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41bf8b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 1
lea eax, [esp + 0xac]
push eax
lea ecx, [esp + 0x34]
call fcn.0040b5e0
mov eax, dword [eax]
push 0x477288
push eax
call fcn.0044a6f3
add esp, 8
test eax, eax
mov eax, dword [esp + 0xa8]
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41bfd4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test bl, bl
je 0x41bfe8
push 1
push 0x477288
lea ecx, [esp + 0x34]
call fcn.004059c0
mov eax, dword [esp + 0x170]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x64], esp
mov esi, esp
push eax
call fcn.004026d0
add eax, 0x10
mov dword [esi], eax
push 0
mov byte [esp + 0xf80], 0xf
call fcn.0044ab4d
add esp, 8
push edx
push eax
mov eax, dword [esp + 0x4c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x48], esp
mov esi, esp
push eax
call fcn.004026d0
add eax, 0x10
mov dword [esi], eax
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
mov dword [esp + 0x48], esp
mov esi, esp
push eax
mov byte [esp + 0xf8c], 0x10
call fcn.004026d0
add eax, 0x10
mov dword [esi], eax
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
mov dword [esp + 0x64], esp
mov esi, esp
push eax
mov byte [esp + 0xf90], 0x11
mov dword [esp + 0x68], eax
call fcn.004026d0
add eax, 0x10
add esp, 4
lea ecx, [esp + 0xfc]
mov dword [esi], eax
mov byte [esp + 0xf8c], 0xd
call fcn.00436aa0
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x34], eax
lea eax, [esp + 0x2c0]
push eax
lea ecx, [esp + 0x38]
push 0x477174
push ecx
mov byte [esp + 0xf80], 0x12
call fcn.00403c50
add esp, 0xc
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x3ec]
push eax
lea ecx, [esp + 0x64]
push 0x476970
push ecx
mov byte [esp + 0xf80], 0x13
call fcn.00403c50
add esp, 0xc
push 0
push ecx
lea edx, [esp + 0x3f8]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.00404830
push ecx
lea eax, [esp + 0x4fc]
mov ecx, esp
mov dword [esp + 0xa4], esp
push eax
mov byte [esp + 0xf84], 0x14
call fcn.00404830
mov ebx, dword [esp + 0x6c]
push ecx
lea edi, [ebx - 0x10]
mov dword [esp + 0xb0], esp
mov esi, esp
push edi
mov byte [esp + 0xf88], 0x15
call fcn.004026d0
add eax, 0x10
mov dword [esi], eax
push ecx
mov eax, esp
mov dword [esp + 0x60], esp
push ecx
mov byte [esp + 0xf90], 0x16
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [esp + 0x64], esp
mov esi, esp
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi], eax
mov ecx, esi
call fcn.00403010
push ecx
mov byte [esp + 0xf94], 0x18
mov dword [esp + 0x9c], esp
mov esi, esp
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi], eax
mov ecx, esi
call fcn.00403010
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x614]
mov edx, dword [esp + 0x610]
push 0
push eax
mov eax, dword [esp + 0x410]
push ebp
push ecx
push edx
push eax
push ecx
mov ecx, esp
mov dword [esp + 0xc0], esp
push 2
push ecx
lea ecx, [esp + 0x78]
mov byte [esp + 0xfb8], 0x1a
call fcn.00403830
push ecx
mov byte [esp + 0xfb4], 0x1b
mov edx, esp
mov dword [esp + 0x9c], esp
push 2
push edx
lea ecx, [esp + 0x7c]
call fcn.0040b760
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0x128]
mov byte [esp + 0xfb8], 0x13
call fcn.00437510
mov ecx, dword [eax]
push ecx
lea edx, [esp + 0x20]
push 0x478948
push edx
mov byte [esp + 0xf80], 0x1c
call fcn.00403c50
mov eax, dword [esp + 0xbc]
add eax, 0xfffffff0
add esp, 0xc
mov byte [esp + 0xf74], 0x13
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41c275
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
push 0x477190
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0xc0]
push ecx
call fcn.00411a90
add esp, 0xc
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xf7c], 0x1d
call fcn.004059c0
mov eax, dword [esp + 0xb8]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0x13
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41c2e2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x2b8]
xor ebp, ebp
cmp eax, ebp
jne 0x41c2fa
cmp dword [esp + 0x44], 1
je 0x41d027
cmp dword [esp + 0x44], 1
jg 0x41c6ce
mov eax, dword [esp + 0x2e0]
cmp eax, 0xffffffff
je 0x41c360
cmp eax, ebp
mov ecx, 0x47893c
je 0x41c31f
mov ecx, str._d_KB
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
push eax
push ecx
lea eax, [esp + 0x24]
push eax
call fcn.00403c50
mov ecx, dword [esp + 0x28]
push ecx
lea edx, [esp + 0x30]
push 0x478924
push edx
call fcn.00403c50
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx - 0xc]
add esp, 0x18
push eax
push ecx
lea ecx, [esp + 0x2c]
call fcn.004059c0
push 0xe
push 0x478914
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [esp + 0x5fc]
mov ecx, dword [esp + 0x5f8]
push ebp
push 0x3e8
push eax
push ecx
call fcn.0044ac60
mov dword [esp + 0xd0], edx
push 0x4788f4
lea edx, [esp + 0x98]
push edx
lea ecx, [esp + 0xd4]
mov dword [esp + 0xd4], eax
call fcn.0040c140
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0xf7c], 0x1e
call fcn.004059c0
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0x13
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41c3f3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0xf60]
mov ecx, dword [esp + 0xf64]
push eax
push ecx
lea edx, [esp + 0x24]
push 0x4788d8
push edx
call fcn.00403c50
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 0xc]
add esp, 0x10
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
movzx eax, word [esp + 0xc56]
push eax
lea ecx, [esp + 0xc5c]
push ecx
lea edx, [esp + 0x24]
push 0x4788b0
push edx
call fcn.00403c50
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 0xc]
add esp, 0x10
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
lea eax, [esp + 0x708]
push eax
lea ecx, [esp + 0x20]
push 0x4788a0
push ecx
call fcn.00403c50
mov eax, dword [esp + 0x28]
mov ecx, dword [eax - 0xc]
add esp, 0xc
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
lea edx, [esp + 0x608]
push edx
lea eax, [esp + 0x20]
push 0x478890
push eax
call fcn.00403c50
mov eax, dword [esp + 0x28]
mov ecx, dword [eax - 0xc]
add esp, 0xc
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
lea ecx, [esp + 0xd5c]
push ecx
lea edx, [esp + 0x20]
push 0x478880
push edx
call fcn.00403c50
mov eax, dword [esp + 0x28]
mov ecx, dword [eax - 0xc]
add esp, 0xc
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
xor esi, esi
cmp word [esp + 0x748], bp
jbe 0x41c534
lea ebx, [esp + 0x754]
movzx eax, word [esp + esi*2 + 0x74a]
push ebx
push eax
lea ecx, [esp + 0x24]
push 0x478870
push ecx
call fcn.00403c50
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 0xc]
add esp, 0x10
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
movzx edx, word [esp + 0x748]
inc esi
add ebx, 0x100
cmp esi, edx
jl 0x41c4f3
mov eax, dword [esp + 0x6c]
cmp eax, 0x100
jbe 0x41c567
movzx ecx, al
push ecx
movzx ecx, byte [esp + 0x73]
movzx edx, ah
movzx eax, byte [esp + 0x72]
push edx
push eax
push ecx
lea edx, [esp + 0x2c]
push str._d._d._d._d
push edx
call fcn.00403c50
add esp, 0x18
jmp 0x41c57a
push eax
lea eax, [esp + 0x20]
push str.COM_d
push eax
call fcn.00403c50
add esp, 0xc
mov esi, dword [esp + 0x8c]
cmp dword [esi + 4], ebp
jne 0x41c5b2
mov eax, dword [esp + 0x1c]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41c590
sub eax, edx
cmp eax, 6
jae 0x41c6ce
mov ecx, dword [esp + 0x3c]
cmp dword [ecx + 0x30c], ebp
je 0x41c6ce
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x100]
push eax
mov ecx, esi
mov dword [edx + 0x30c], ebp
call fcn.00402530
cmp eax, ebp
jne 0x41c5d6
mov dword [esi + 4], 1
cmp dword [esi + 4], 1
jne 0x41c6cb
cmp dword [esp + 0x100], ebp
jbe 0x41c6cb
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x100]
cmp eax, 4
mov byte [esp + 0xf74], 0x1f
jbe 0x41c620
mov eax, 4
mov dword [esp + 0x100], eax
push eax
lea eax, [esp + 0x3c]
push 0x478850
push eax
call fcn.00403c50
mov ecx, dword [esp + 0x10c]
add esp, 0xc
xor eax, eax
cmp ecx, ebp
jbe 0x41c695
mov ecx, dword [esp + eax*4 + 0x134]
mov edx, dword [esp + eax*4 + 0x124]
push ecx
mov ecx, dword [esp + eax*4 + 0x118]
push edx
mov edx, dword [esp + eax*4 + 0x10c]
push ecx
push edx
lea esi, [eax + 1]
push esi
lea eax, [esp + 0x30]
push 0x4787e8
push eax
call fcn.00403c50
mov eax, dword [esp + 0x38]
mov ecx, dword [eax - 0xc]
add esp, 0x1c
push ecx
push eax
lea ecx, [esp + 0x40]
call fcn.004059c0
mov ecx, dword [esp + 0x100]
mov eax, esi
cmp eax, ecx
jb 0x41c640
mov esi, dword [esp + 0x38]
mov eax, dword [esi - 0xc]
push eax
push esi
lea ecx, [esp + 0x2c]
call fcn.004059c0
lea eax, [esi - 0x10]
mov byte [esp + 0xf74], 0x13
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41c6ce
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
jmp 0x41c6ce
mov dword [esi + 4], ebp
mov byte [esp + 0xf74], 0x12
lea eax, [edi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41c6ed
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0xd
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41c713
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x4c]
mov byte [esp + 0xf74], 0xc
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41c736
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0xb
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41c75c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0xa
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41c782
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0xe4]
mov byte [esp + 0xf74], 9
call fcn.00411770
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41c7bc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x160]
jmp 0x41cfd7
mov eax, dword [esp + 0x80]
cmp eax, 0xffffffff
je 0x41cfe4
test eax, eax
jl 0x41d134
cmp eax, dword [0x493fb8]
jge 0x41d134
mov ecx, dword [0x493fb4]
mov esi, dword [ecx + eax*4]
test esi, esi
je 0x41cfe4
mov ebx, dword [esp + 0x3c]
push 0x3eb
mov ecx, ebx
call fcn.00460845
mov edi, eax
lea edx, [esp + 0x1c]
push edx
mov ecx, edi
call fcn.0045f2b0
mov eax, dword [ebx + 0x1fc]
push 0
push 0
push 0x1032
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, 1
jne 0x41c85a
mov eax, dword [esi + 0x4c]
test eax, eax
je 0x41c87c
mov ecx, dword [esp + 0x1c]
push 0x478724
push ecx
call fcn.0044a6f3
add esp, 8
test eax, eax
jne 0x41c87c
push 0x478734
jmp 0x41c875
mov edx, dword [esp + 0x1c]
push 0x478724
push edx
call fcn.0044a6f3
add esp, 8
test eax, eax
je 0x41c87c
push 0x478724
mov ecx, edi
call fcn.0046096d
lea eax, [esp + 0x90]
push eax
mov ecx, esi
call fcn.00403590
mov ecx, dword [eax]
push ecx
lea edx, [esp + 0x24]
push str.__s__r_n
push edx
mov byte [esp + 0xf80], 0x20
call fcn.00403c50
mov eax, dword [esp + 0x9c]
add eax, 0xfffffff0
add esp, 0xc
mov byte [esp + 0xf74], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41c8d1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov edi, dword [esp + 0x20]
mov eax, dword [edi - 0xc]
push eax
push edi
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [edi - 0xc]
push eax
push edi
lea ecx, [esp + 0x38]
call fcn.004059c0
lea eax, [esp + 0x20]
push 0x4787d0
push eax
call fcn.00403c50
mov edi, dword [esp + 0x28]
mov eax, dword [edi - 0xc]
add esp, 8
push eax
push edi
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [edi - 0xc]
push eax
push edi
lea ecx, [esp + 0x38]
call fcn.004059c0
mov ebp, dword [esi + 0x10]
xor ebx, ebx
test ebp, ebp
jle 0x41c99a
lea esp, [esp]
test ebx, ebx
jl 0x41d134
cmp ebx, dword [esi + 0x38]
jge 0x41d134
mov ecx, dword [esi + 0x34]
mov eax, dword [esi + 0x10]
lea edx, [ebx*4]
add ecx, edx
cmp ebx, eax
jge 0x41d134
mov eax, dword [esi + 0xc]
mov ecx, dword [ecx]
add eax, edx
mov edx, dword [eax]
push ecx
push edx
lea eax, [esp + 0x28]
push str._s_t_10d_r_n
push eax
call fcn.00403c50
mov edi, dword [esp + 0x30]
mov eax, dword [edi - 0xc]
add esp, 0x10
push eax
push edi
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [edi - 0xc]
push eax
push edi
lea ecx, [esp + 0x38]
call fcn.004059c0
inc ebx
cmp ebx, ebp
jl 0x41c930
push 0xe
push str._r_n_l
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [esi + 0x44]
test eax, eax
mov ecx, 0x478af8
jne 0x41c9bb
mov ecx, 0x478af4
mov eax, dword [esi + 0x4c]
test eax, eax
mov eax, 0x478abc
jne 0x41c9cc
mov eax, 0x478ab4
push ecx
push eax
lea ecx, [esp + 0x28]
push 0x478a94
push ecx
call fcn.00403c50
mov edi, dword [esp + 0x30]
mov eax, dword [edi - 0xc]
add esp, 0x10
push eax
push edi
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov eax, dword [edi - 0xc]
push eax
push edi
lea ecx, [esp + 0x38]
call fcn.004059c0
lea edx, [esp + 0xc8]
push edx
mov ecx, esi
call fcn.004190a0
mov eax, dword [eax]
mov ecx, dword [esi + 0x484]
push eax
push ecx
lea ecx, [esp + 0x28]
push 0x478a30
push ecx
mov byte [esp + 0xf84], 0x21
call fcn.00403c50
mov eax, dword [esp + 0xd8]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0xf74], 3
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41ca5c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x2c]
call fcn.004059c0
push 0x477190
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0xbc]
push ecx
call fcn.00411a90
add esp, 0xc
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xf7c], 0x22
call fcn.004059c0
mov eax, dword [esp + 0xb4]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 3
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41cac9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 0x12
push 0x478990
lea ecx, [esp + 0x2c]
call fcn.004059c0
lea ecx, [esp + 0x1cc]
call fcn.00411b50
lea eax, [esp + 0x1cc]
push eax
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x6c], esp
push ecx
mov ebx, 2
mov ecx, esi
mov byte [esp + 0xf88], 0x23
mov dword [esp + 0x240], ebx
call fcn.00403590
mov edi, dword [esp + 0x4c]
lea ecx, [edi + 0x24c]
call fcn.00426940
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x28], eax
cmp dword [esp + 0x22c], ebx
mov byte [esp + 0xf74], 0x24
jne 0x41cb7e
lea eax, [edi + 0x270]
push eax
lea ecx, [esp + 0x1d0]
call fcn.00403de0
mov eax, dword [edi + 0x2cc]
lea ecx, [eax + eax*8]
mov eax, dword [edi + 0x2d4]
lea edx, [ecx*8 + 0x4914fc]
push edx
push eax
push 0x478984
lea ecx, [esp + 0x34]
push ecx
jmp 0x41cba2
mov eax, dword [esp + 0x228]
mov ecx, dword [esp + 0x230]
lea edx, [eax + eax*8]
lea eax, [edx*8 + 0x4914fc]
push eax
push ecx
push 0x478974
lea edx, [esp + 0x34]
push edx
call fcn.00403c50
mov eax, dword [esp + 0x38]
add esp, 0x10
push eax
lea ecx, [esp + 0x20]
push 0x478960
push ecx
call fcn.00403c50
mov eax, dword [esp + 0x28]
mov ecx, dword [eax - 0xc]
add esp, 0xc
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
lea ecx, [esp + 0x144]
call fcn.00436930
push 0
mov byte [esp + 0xf78], 0x25
call fcn.0044aec3
cdq
add esp, 4
push 0x476974
lea ecx, [esp + 0x8c]
mov ebp, eax
mov dword [esp + 0xdc], edx
call fcn.00404830
lea edx, [esp + 0xac]
push edx
mov ecx, esi
mov byte [esp + 0xf78], 0x26
call fcn.00403590
mov ecx, dword [esp + 0x1f4]
mov eax, dword [ecx - 0xc]
test eax, eax
mov byte [esp + 0xf74], 0x27
jge 0x41cc3e
or esi, 0xffffffff
jmp 0x41cc60
push str.__Folder_
push ecx
call fcn.0044ae11
mov ecx, dword [esp + 0x1fc]
add esp, 8
test eax, eax
jne 0x41cc5c
or esi, 0xffffffff
jmp 0x41cc60
sub eax, ecx
mov esi, eax
lea eax, [ecx - 0x10]
push eax
call fcn.004026d0
add eax, 0x10
add esp, 4
mov dword [esp + 0x2c], eax
cmp esi, 0xffffffff
mov byte [esp + 0xf74], 0x28
je 0x41cd34
dec esi
push esi
push 0
lea eax, [esp + 0xac]
push eax
lea ecx, [esp + 0x200]
call fcn.00407390
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0xf78], 0x29
call fcn.00403d30
mov eax, dword [esp + 0xa4]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0x28
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ccd7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 1
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x34]
call fcn.0040b5e0
mov eax, dword [eax]
push 0x477288
push eax
call fcn.0044a6f3
add esp, 8
test eax, eax
mov eax, dword [esp + 0xc4]
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41cd20
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test bl, bl
je 0x41cd34
push 1
push 0x477288
lea ecx, [esp + 0x34]
call fcn.004059c0
mov eax, dword [esp + 0x1dc]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x60], esp
mov esi, esp
push eax
call fcn.004026d0
add eax, 0x10
add esp, 4
mov dword [esi], eax
mov eax, dword [esp + 0xdc]
mov ebx, dword [esp + 0xb0]
push eax
push ebp
push ecx
add ebx, 0xfffffff0
mov dword [esp + 0x94], esp
mov esi, esp
push ebx
mov byte [esp + 0xf88], 0x2a
call fcn.004026d0
add eax, 0x10
mov dword [esi], eax
mov eax, dword [esp + 0x9c]
add eax, 0xfffffff0
mov dword [esp + 0x90], esp
mov esi, esp
push eax
mov byte [esp + 0xf8c], 0x2b
call fcn.004026d0
add eax, 0x10
mov dword [esi], eax
mov edi, dword [esp + 0x44]
add edi, 0xfffffff0
mov dword [esp + 0x60], esp
mov esi, esp
push edi
mov byte [esp + 0xf90], 0x2c
call fcn.004026d0
add eax, 0x10
add esp, 4
lea ecx, [esp + 0x15c]
mov dword [esi], eax
mov byte [esp + 0xf8c], 0x28
call fcn.00436aa0
push 0
push ecx
mov dword [esp + 0x64], esp
mov esi, esp
call fcn.0045c368
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi], eax
mov ecx, esi
call fcn.00403010
push ecx
mov ecx, esp
mov dword [esp + 0x90], esp
push 0
mov byte [esp + 0xf84], 0x2e
call fcn.00404830
push ecx
mov ecx, esp
mov dword [esp + 0x8c], esp
push 0
mov byte [esp + 0xf88], 0x2f
call fcn.00404830
sub esp, 8
mov eax, esp
mov byte [esp + 0xf8c], 0x30
mov dword [esp + 0x60], esp
mov dword [eax], 0
push ecx
mov ecx, esp
mov dword [esp + 0x64], esp
push 0
mov dword [eax + 4], 0
call fcn.00404830
push ecx
mov ecx, esp
mov dword [esp + 0xc0], esp
push 0
mov byte [esp + 0xf98], 0x31
call fcn.00404830
mov eax, dword [esp + 0xf8]
push 0
push eax
push ebp
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [esp + 0xd4], esp
push 0
mov byte [esp + 0xfb4], 0x32
call fcn.00404830
push ecx
mov ecx, esp
mov dword [esp + 0xcc], esp
push 0
mov byte [esp + 0xfb8], 0x33
call fcn.00404830
lea ecx, [esp + 0xfc]
push ecx
lea ecx, [esp + 0x188]
mov byte [esp + 0xfb8], 0x28
call fcn.00437510
mov edx, dword [eax]
push edx
lea eax, [esp + 0x20]
push 0x478948
push eax
mov byte [esp + 0xf80], 0x34
call fcn.00403c50
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
add esp, 0xc
mov byte [esp + 0xf74], 0x28
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41cf1d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004059c0
mov byte [esp + 0xf74], 0x27
lea eax, [edi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41cf4e
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
mov byte [esp + 0xf74], 0x26
lea eax, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41cf6d
mov ecx, dword [ebx]
mov edx, dword [ecx]
push ebx
call dword [edx + 4]
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0x25
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41cf96
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x144]
mov byte [esp + 0xf74], 0x24
call fcn.00411770
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0x23
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41cfd0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x1cc]
mov byte [esp + 0xf74], 3
call fcn.00411910
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x41b680
mov esi, dword [esp + 0x3c]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x3ee
mov ecx, esi
call fcn.00460845
mov eax, dword [eax + 0x1c]
push 0
push 0
push 0xb
push eax
call edi
cmp dword [esp + 0x44], 1
jne 0x41d139
mov ecx, dword [esp + 0x24]
push ecx
jmp 0x41d13e
lea eax, [ebx - 0x10]
mov byte [esp + 0xf74], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41d049
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0xd
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41d06f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0xc
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41d095
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0xb
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41d0bb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0xa
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41d0e1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0xe4]
mov byte [esp + 0xf74], 9
call fcn.00411770
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41d11b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x160]
mov byte [esp + 0xf74], 3
call fcn.00411910
jmp 0x41cff0
jmp fcn.004594a8
mov edx, dword [esp + 0x30]
push edx
mov ecx, esi
push 0x3ee
call fcn.00460845
mov ecx, eax
call fcn.0046096d
push 0x3ee
mov ecx, esi
call fcn.00460845
mov eax, dword [eax + 0x1c]
push 0
push 1
push 0xb
push eax
call edi
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41d18f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41d1b5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0xf74], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41d1db
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov dword [esp + 0xf74], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41d204
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0xf6c]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0xf68]
call fcn.00449c1e
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xf68
ret