Function at 0x401000
Capabilities:
Contain obfuscated stackstrings
Get graphical window text

Disassembly:
sub esp, 0x144
mov eax, dword [0x405540]
push ebx
push ebp
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
push esi
push edi
push 0x62d2
push 0x6271
push 0x4f30
push eax
call ebp
mov ecx, dword [0x405098]
mov edi, dword [sym.imp.USER32.dll_SetScrollPos]
push 1
push 0x5f
lea edx, [ecx + ecx*4]
xor ebx, ebx
push 0xc7
mov byte [esp + 0x1c], 0xa0
lea eax, [ecx + edx*8]
mov byte [esp + 0x1d], 0x4a
shl eax, 6
sub eax, ecx
mov ecx, dword [0x40546c]
push ecx
mov byte [esp + 0x22], 0xbc
lea eax, [eax + eax*8]
mov byte [esp + 0x23], 8
mov byte [esp + 0x24], pe_nt_image_headers32
mov byte [esp + 0x25], 0xc7
mov byte [esp + 0x26], 0x41
mov byte [esp + 0x27], 0xa5
mov byte [esp + 0x28], 0x27
mov byte [esp + 0x29], 0xd7
mov byte [esp + 0x2a], bl
mov dword [0x40510c], eax
call edi
push 0x74
lea edx, [esp + 0x14]
push 0xa
lea eax, [esp + 0x58]
push edx
push eax
call fcn.00402c50
mov ecx, dword [0x405544]
mov esi, dword [sym.imp.USER32.dll_GetClassWord]
add esp, 0x10
mov byte [0x418dc8], 0x6a
mov byte [0x418dc9], 0xe0
mov byte [0x418dca], 0xeb
push 0x29
push ecx
mov byte [0x418dcb], 0xf7
mov byte [0x418dcc], 0x76
mov byte [0x418dcd], 0x58
mov byte [0x418dce], 0x86
mov byte [0x418dcf], 0x3d
mov byte [0x418dd0], bl
call esi
push 0xa1
push 8
lea edx, [esp + 0x58]
push 0x418dc8
push edx
call fcn.00402de0
mov eax, dword [0x4054d4]
add esp, 0x10
push 0x16ed
push 0xb6
push 0x488a
push eax
call ebp
mov ecx, dword [0x405188]
mov eax, 0xac769185
imul ecx
add edx, ecx
mov dword [0x405148], 0x7490
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [0x405188], edx
mov edx, dword [0x405484]
push 1
push 0x45
push 0x97
push edx
mov byte [esp + 0x20], 0x4b
mov byte [esp + 0x21], 0xc9
mov byte [esp + 0x22], 0x85
mov byte [esp + 0x23], 0x98
mov byte [esp + 0x24], 0xb3
mov byte [esp + 0x25], 0x16
mov byte [esp + 0x26], 0x60
mov byte [esp + 0x27], 0xa1
mov byte [esp + 0x28], 0x93
mov byte [esp + 0x29], 0xf
mov byte [esp + 0x2a], bl
call edi
mov ecx, dword [0x4050ec]
mov eax, 0x691c2007
imul ecx
sar edx, 0xd
mov eax, edx
push 0x6b
shr eax, 0x1f
add edx, eax
lea ecx, [esp + 0x14]
mov dword [0x40517c], edx
push 0xa
lea edx, [esp + 0x58]
push ecx
push edx
call fcn.00402c50
mov eax, dword [0x405414]
mov ebp, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
add esp, 0x10
mov byte [0x418dac], 0xb0
mov byte [0x418dad], 0x8d
mov byte [0x418dae], 0x2e
push 4
push eax
mov byte [0x418daf], 0x39
mov byte [0x418db0], 0xd2
mov byte [0x418db1], bl
call ebp
push 0xb3
push 5
lea ecx, [esp + 0x58]
push 0x418dac
push ecx
call fcn.00402de0
mov edx, dword [0x405424]
add esp, 0x10
push 0xc0
push edx
call esi
mov eax, dword [0x405548]
push 1
push 0x6f
push 0xc0
push eax
mov dword [0x4051f8], 0x6b92
call edi
mov ecx, dword [0x405070]
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov ecx, edx
mov byte [esp + 0x10], 0xf3
shr ecx, 0x1f
add edx, ecx
mov byte [esp + 0x11], 0x79
mov dword [0x405070], edx
mov edx, dword [0x4051c4]
add edx, 0xffffab12
mov byte [esp + 0x12], 0x87
mov dword [0x4050e0], edx
mov byte [esp + 0x13], 0xfb
mov byte [esp + 0x14], 6
mov byte [esp + 0x15], 0xd4
mov byte [esp + 0x16], 0xe6
mov eax, dword [0x4054e4]
push 0x63e3
push 0x1df2
push 0x3fac
push eax
mov byte [esp + 0x27], 4
mov byte [esp + 0x28], 0x6c
mov byte [esp + 0x29], 0xc7
mov byte [esp + 0x2a], bl
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x40557c]
push ebx
push 0xb9
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
push 0xb
lea edx, [esp + 0x14]
push 0xa
lea eax, [esp + 0x58]
push edx
push eax
call fcn.00402c50
mov ecx, dword [0x40502c]
mov edx, dword [0x405524]
add esp, 0x10
add ecx, 0xffffe0e0
mov byte [0x418d88], 0x5b
mov byte [0x418d89], 0x8a
push ebx
push 0xc2
push edx
mov byte [0x418d8a], 0xbe
mov byte [0x418d8b], 0xde
mov byte [0x418d8c], 0xc7
mov byte [0x418d8d], 0x57
mov byte [0x418d8e], 0xf6
mov byte [0x418d8f], 0xed
mov byte [0x418d90], 0x18
mov byte [0x418d91], 0xb6
mov byte [0x418d92], 0x83
mov byte [0x418d93], 8
mov byte [0x418d94], 0x87
mov byte [0x418d95], 0x40
mov byte [0x418d96], 0xba
mov byte [0x418d97], bl
mov dword [0x4050f0], ecx
mov dword [0x4051fc], 0x2c0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
push 0xe8
push 0xf
lea eax, [esp + 0x58]
push 0x418d88
push eax
call fcn.00402de0
mov ecx, dword [0x4054ac]
add esp, 0x10
mov dword [0x40503c], 0x7882
push ebx
push 0xa
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov ecx, dword [0x405220]
mov eax, 0xd5e59a33
imul ecx
add edx, ecx
mov ecx, dword [0x4055b0]
sar edx, 0xe
mov eax, edx
push 1
shr eax, 0x1f
push 0xd3
add edx, eax
push 0x8a
push ecx
mov dword [0x4050c8], edx
call edi
mov byte [esp + 0x10], 0xc4
mov byte [esp + 0x11], 0x84
mov byte [esp + 0x12], 0x5d
mov byte [esp + 0x13], 0x3a
mov byte [esp + 0x14], 0xab
mov eax, dword [0x4051bc]
mov ecx, 0x25ae
cdq
idiv ecx
push 0x48
mov byte [esp + 0x19], 0x88
mov byte [esp + 0x1a], 0xce
mov byte [esp + 0x1b], 0xdf
mov byte [esp + 0x1c], bl
mov dword [0x4051e4], edx
mov edx, dword [0x405470]
push edx
call esi
push 0xd3
lea eax, [esp + 0x14]
push 8
lea ecx, [esp + 0x58]
push eax
push ecx
call fcn.00402c50
mov edx, dword [0x405408]
add esp, 0x10
mov byte [0x418d54], 0xdb
mov byte [0x418d55], 0x2f
push 0xef
push edx
mov byte [0x418d56], 0xee
mov byte [0x418d57], 0xd2
mov byte [0x418d58], 0x6f
mov byte [0x418d59], 0xd8
mov byte [0x418d5a], 0xa0
mov byte [0x418d5b], 0x69
mov byte [0x418d5c], 0x11
mov byte [0x418d5d], 8
mov byte [0x418d5e], 0xe
mov byte [0x418d5f], 0x8c
mov byte [0x418d60], 0x9b
mov byte [0x418d61], 0xc8
mov byte [0x418d62], bl
call esi
push 0xc5
push 0xe
lea eax, [esp + 0x58]
push 0x418d54
push eax
call fcn.00402de0
mov ecx, dword [0x4054f4]
add esp, 0x10
push 0x8f
push ecx
call ebp
mov eax, dword [0x405044]
mov ecx, 0x71c9
cdq
idiv ecx
push ebx
push 0x10
mov dword [0x405154], 0x3cfa
mov byte [esp + 0x18], 3
mov byte [esp + 0x19], 0x5c
mov byte [esp + 0x1a], 0xaa
mov byte [esp + 0x1b], 0x1e
mov byte [esp + 0x1c], 0x5a
mov byte [esp + 0x1d], 0x3b
mov byte [esp + 0x1e], 0xde
mov byte [esp + 0x1f], 0x74
mov byte [esp + 0x20], 0xaf
mov byte [esp + 0x21], 0xd3
mov byte [esp + 0x22], bl
mov dword [0x4051b8], edx
mov edx, dword [0x405454]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
push 2
lea eax, [esp + 0x14]
push 0xa
lea ecx, [esp + 0x58]
push eax
push ecx
call fcn.00402c50
add esp, 0x10
mov edx, dword [0x405598]
push ebx
push 0x3e
push edx
mov byte [0x418de4], 0x4b
mov byte [0x418de5], 0x2b
mov byte [0x418de6], 0x7b
mov byte [0x418de7], 0x69
mov byte [0x418de8], 0xef
mov byte [0x418de9], 0x47
mov byte [0x418dea], 0x3d
mov byte [0x418deb], 0xb
mov byte [0x418dec], 0xe9
mov byte [0x418ded], 0x3b
mov byte [0x418dee], 0x63
mov byte [0x418def], 0x5d
mov byte [0x418df0], 0x76
mov byte [0x418df1], 0xdc
mov byte [0x418df2], 0xd5
mov byte [0x418df3], 0x41
mov byte [0x418df4], 0x24
mov byte [0x418df5], 0xd3
mov byte [0x418df6], 0xd2
mov byte [0x418df7], 0xfe
mov byte [0x418df8], bl
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov eax, dword [0x405444]
push 0x6a0e
push 0x14a0
push 0x1888
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x405114]
push 0x44
push 0x14
lea edx, [esp + 0x58]
add ecx, 0xffffcfa8
push 0x418de4
push edx
mov dword [0x405078], ecx
call fcn.00402de0
mov eax, dword [0x4054c4]
add esp, 0x10
push 0xd7
push eax
call ebp
mov ecx, dword [0x405458]
push 0x165a
push 0x74b
push 0x44c1
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x405134]
mov edx, dword [0x4051e8]
add edx, 0xf07
push 0x4a
lea eax, [ecx + ecx*4]
mov dword [0x4051bc], edx
shl eax, 5
add eax, ecx
mov ecx, dword [0x405484]
push ecx
mov byte [esp + 0x18], 0xe2
lea eax, [eax + eax*4]
mov byte [esp + 0x19], 0x4a
mov byte [esp + 0x1a], 0x33
mov byte [esp + 0x1b], 0x83
lea eax, [eax + eax*8]
mov byte [esp + 0x1c], 0x49
mov dword [str.Ng], eax
mov byte [esp + 0x1d], 0x86
mov byte [esp + 0x1e], 0xbd
mov byte [esp + 0x1f], 0x98
mov byte [esp + 0x20], 0x36
mov byte [esp + 0x21], 0xc4
mov byte [esp + 0x22], 0x4b
mov byte [esp + 0x23], bl
call esi
push 1
push 0xa9
push 0x3f
mov edx, dword [0x4053f4]
push edx
call edi
push 0xa4
lea eax, [esp + 0x14]
push 0xb
lea ecx, [esp + 0x58]
push eax
push ecx
call fcn.00402c50
mov edx, dword [0x40559c]
add esp, 0x10
mov byte [0x418dd4], 0xdc
mov byte [0x418dd5], 0x1e
push 1
push 0x7a
push 0xde
push edx
mov byte [0x418dd6], 0xd3
mov byte [0x418dd7], 0xc
mov byte [0x418dd8], 0xfd
mov byte [0x418dd9], 0x70
mov byte [0x418dda], 0xff
mov byte [0x418ddb], 0xcb
mov byte [0x418ddc], 0xe9
mov byte [0x418ddd], 1
mov byte [0x418dde], 0x7b
mov byte [0x418ddf], 0x94
mov byte [0x418de0], 0x49
mov byte [0x418de1], 0xda
mov byte [0x418de2], bl
call edi
mov eax, dword [0x4054f0]
push 0x38
push eax
call esi
mov ecx, dword [0x4050f8]
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov ecx, edx
push 0x11
shr ecx, 0x1f
add edx, ecx
push 0xe
mov dword [0x4050f8], edx
lea edx, [esp + 0x58]
push 0x418dd4
push edx
call fcn.00402de0
mov eax, dword [0x4050d0]
mov ecx, 0x534c
add eax, 0xffffed22
add esp, 0x10
mov dword [0x405264], eax
mov byte [esp + 0x10], 0x85
cdq
idiv ecx
mov eax, dword [0x405518]
push 1
push 0xca
push 0x81
push eax
mov byte [esp + 0x21], 0x4a
mov byte [esp + 0x22], 0x4e
mov byte [esp + 0x23], 0xf3
mov byte [esp + 0x24], 0xa
mov byte [esp + 0x25], 0xc
mov byte [esp + 0x26], 0x77
mov byte [esp + 0x27], 0x67
mov byte [esp + 0x28], 9
mov byte [esp + 0x29], bl
mov dword [0x405088], edx
mov edx, dword [0x405040]
add edx, 0xffff9474
mov dword [str.b], edx
call edi
push 0x4f
lea ecx, [esp + 0x14]
push 9
push ecx
lea edx, [esp + 0x5c]
push edx
call fcn.00402c50
push 0x59
push 0x12
lea eax, [esp + 0x68]
push 0x418db4
push eax
mov byte [0x418db4], 0x46
mov byte [0x418db5], 0xcd
mov byte [0x418db6], 0x7e
mov byte [0x418db7], 0xf
mov byte [0x418db8], 0x82
mov byte [0x418db9], 1
mov byte [0x418dba], 0x20
mov byte [0x418dbb], 0x8a
mov byte [0x418dbc], 0x44
mov byte [0x418dbd], 0x1c
mov byte [0x418dbe], 0xd2
mov byte [0x418dbf], 0x14
mov byte [0x418dc0], 0x12
mov byte [0x418dc1], 0x96
mov byte [0x418dc2], 0x5e
mov byte [0x418dc3], 0x92
mov byte [0x418dc4], 0xf1
mov byte [0x418dc5], 0x75
mov byte [0x418dc6], bl
mov dword [0x405058], 0x7c29
call fcn.00402de0
mov ecx, dword [0x40545c]
add esp, 0x20
mov dword [0x405098], 0x5629
push 1
push 0xa6
push 0x4f
push ecx
call edi
mov edx, dword [0x4051c4]
mov eax, dword [0x405638]
push 1
push 0xb4
add edx, 0x3cfc
push 0x75
push eax
mov dword [0x405064], edx
call edi
mov eax, dword [0x4051f8]
mov ecx, dword [0x40513c]
mov edx, eax
add ecx, 0xffffbafc
shl edx, 7
add edx, eax
mov dword [0x405290], ecx
push 0xd8
lea ecx, [esp + 0x14]
lea eax, [eax + edx*8]
push 8
lea edx, [esp + 0x58]
push ecx
shl eax, 3
push edx
mov byte [esp + 0x20], 0xbe
mov byte [esp + 0x21], 0x1e
mov byte [esp + 0x22], 0xb
mov byte [esp + 0x23], 0xf4
mov byte [esp + 0x24], 0x23
mov byte [esp + 0x25], 0x79
mov byte [esp + 0x26], 0xf6
mov byte [esp + 0x27], 0x2e
mov byte [esp + 0x28], bl
mov dword [0x405004], eax
call fcn.00402c50
add esp, 0x10
mov byte [0x418d98], 0x1c
mov byte [0x418d99], 0xcc
mov byte [0x418d9a], 0xd
mov byte [0x418d9b], 0xba
mov byte [0x418d9c], 0x1e
mov byte [0x418d9d], 0x8d
mov byte [0x418d9e], 0xdb
mov byte [0x418d9f], 0xab
mov eax, dword [0x4055e8]
push 0xeb3
push 0x14ea
push 0x795e
push eax
mov byte [0x418da0], 0x7c
mov byte [0x418da1], 0xb1
mov byte [0x418da2], 0x38
mov byte [0x418da3], 0x20
mov byte [0x418da4], 5
mov byte [0x418da5], 0x91
mov byte [0x418da6], 0xd7
mov byte [0x418da7], 0xd
mov byte [0x418da8], bl
call dword [sym.imp.USER32.dll_SendMessageA]
push 0xbb
push 0x10
lea ecx, [esp + 0x58]
push 0x418d98
push ecx
call fcn.00402de0
mov eax, dword [0x40517c]
mov ecx, 0x74db
cdq
idiv ecx
add esp, 0x10
push 0x888
push 0x5496
push 0x2a0a
mov dword [0x405074], edx
mov edx, dword [0x4054c0]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [str.q_]
mov ecx, dword [0x40545c]
push 0x6f4f
push 0x240a
add eax, 0xffffea5f
push 0x7121
push ecx
mov dword [0x405020], eax
mov byte [esp + 0x20], 0xc5
mov byte [esp + 0x21], 0x6b
mov byte [esp + 0x22], 0xba
mov byte [esp + 0x23], 0x2e
mov byte [esp + 0x24], 0x42
mov byte [esp + 0x25], 0x65
mov byte [esp + 0x26], 0xac
mov byte [esp + 0x27], 0x1b
mov byte [esp + 0x28], 0x9a
mov byte [esp + 0x29], 0x18
mov byte [esp + 0x2a], 0x4a
mov byte [esp + 0x2b], bl
call dword [sym.imp.USER32.dll_SendMessageA]
push 0xee
lea edx, [esp + 0x14]
push 0xb
lea eax, [esp + 0x58]
push edx
push eax
call fcn.00402c50
push 0x5d
mov byte [0x418d74], 0xc6
mov byte [0x418d75], 0xe5
mov byte [0x418d76], 0x18
mov byte [0x418d77], 0x8d
mov byte [0x418d78], 0xa0
mov byte [0x418d79], 0xcd
mov byte [0x418d7a], 0x69
mov byte [0x418d7b], 0x2b
mov byte [0x418d7c], 0x2b
mov byte [0x418d7d], 0xba
mov byte [0x418d7e], 0xbe
mov byte [0x418d7f], 0xae
mov byte [0x418d80], 0x8e
mov byte [0x418d81], 0x1e
mov byte [0x418d82], 0xb1
mov byte [0x418d83], 0xb4
mov byte [0x418d84], bl
mov dword [0x405070], 0x3b98
push 0x10
lea ecx, [esp + 0x68]
push 0x418d74
push ecx
call fcn.00402de0
mov edx, dword [0x4050e0]
mov ecx, dword [0x40502c]
add edx, 0x719e
mov eax, 0x1948b0fd
mov dword [0x4051d8], edx
imul ecx
sar edx, 4
mov eax, edx
push 0x95
shr eax, 0x1f
add edx, eax
lea ecx, [esp + 0x34]
mov dword [0x40502c], edx
push 9
lea edx, [esp + 0x78]
push ecx
push edx
mov dword [0x4050d8], 0x4fb9
mov byte [esp + 0x40], 0xb4
mov byte [esp + 0x41], 0xa1
mov byte [esp + 0x42], 0xe0
mov byte [esp + 0x43], 0x5d
mov byte [esp + 0x44], 0xf9
mov byte [esp + 0x45], 0x67
mov byte [esp + 0x46], 0xe9
mov byte [esp + 0x47], 8
mov byte [esp + 0x48], 0xf5
mov byte [esp + 0x49], bl
mov dword [str.D3], 0x4b7b
call fcn.00402c50
mov eax, dword [0x4051b8]
push 0xa5
push 0xc
lea ecx, [esp + 0x88]
add eax, 0x633a
push 0x418d44
push ecx
mov byte [0x418d44], 0x7b
mov byte [0x418d45], 0x4b
mov byte [0x418d46], 0xe2
mov byte [0x418d47], 0x20
mov byte [0x418d48], 0xd2
mov byte [0x418d49], 0x61
mov byte [0x418d4a], 0x58
mov byte [0x418d4b], 0xc7
mov byte [0x418d4c], 7
mov byte [0x418d4d], 0xff
mov byte [0x418d4e], 0x87
mov byte [0x418d4f], 0xc7
mov byte [0x418d50], bl
mov dword [0x4051c4], eax
call fcn.00402de0
mov edx, dword [0x4054cc]
add esp, 0x40
push ebx
push 0x77
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov eax, dword [0x4051b8]
mov ecx, dword [0x40557c]
push 1
push 0xa3
add eax, 0x2210
push 0x63
push ecx
mov dword [0x4050f4], eax
call edi
mov edx, dword [0x405464]
push 0x54
push edx
call ebp
mov byte [esp + 0x10], 0xd
mov byte [esp + 0x11], 0xb0
mov byte [esp + 0x12], 0xa1
mov byte [esp + 0x13], 0x38
mov byte [esp + 0x14], 0x9d
mov byte [esp + 0x15], 0xa4
mov eax, dword [0x405574]
push ebx
push 0x86
push eax
mov byte [esp + 0x22], pe_nt_image_headers32
mov byte [esp + 0x23], 0xd8
mov byte [esp + 0x24], 0xca
mov byte [esp + 0x25], bl
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov ecx, dword [0x405510]
push 0xb8
push ecx
call ebp
push 0xa5
lea edx, [esp + 0x14]
push 9
lea eax, [esp + 0x58]
push edx
push eax
call fcn.00402c50
mov ecx, dword [0x405508]
add esp, 0x10
mov byte [0x418d28], 0xd0
mov byte [0x418d29], 0x60
push ebx
push 0x16
push ecx
mov byte [0x418d2a], 0xcb
mov byte [0x418d2b], 0x62
mov byte [0x418d2c], 0x74
mov byte [0x418d2d], 0x6e
mov byte [0x418d2e], 0x26
mov byte [0x418d2f], 0x1f
mov byte [0x418d30], 0xf0
mov byte [0x418d31], 0x80
mov byte [0x418d32], 0xfa
mov byte [0x418d33], 3
mov byte [0x418d34], 0xb8
mov byte [0x418d35], bl
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov edx, dword [0x4054b4]
push 0x7705
push 0x2d7f
push 0x66ac
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x405408]
push ebx
push 0x16
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
push 0xed
push 0xd
lea ecx, [esp + 0x58]
push 0x418d28
push ecx
call fcn.00402de0
mov edx, dword [0x4055bc]
add esp, 0x10
push 0x7d
push edx
call esi
mov eax, dword [0x405658]
push 0x65
push eax
call ebp
mov ecx, dword [0x40509c]
mov eax, 0x92492493
imul ecx
add edx, ecx
mov eax, 0x75ded953
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x4050cc]
mov dword [0x40509c], edx
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
mov ecx, dword [0x40518c]
add edx, eax
mov dword [0x4050cc], edx
mov edx, dword [0x405568]
add ecx, 0xffffb726
push 0x7d
push edx
mov dword [0x405114], ecx
mov byte [esp + 0x18], 0xcc
mov byte [esp + 0x19], 0xc1
mov byte [esp + 0x1a], 0x16
mov byte [esp + 0x1b], 0x1b
mov byte [esp + 0x1c], 0x54
mov byte [esp + 0x1d], 0x9e
mov byte [esp + 0x1e], 0x16
mov byte [esp + 0x1f], 0xaa
mov byte [esp + 0x20], 0xe7
mov byte [esp + 0x21], bl
call ebp
push 0x39
lea eax, [esp + 0x14]
push 9
lea ecx, [esp + 0x58]
push eax
push ecx
call fcn.00402c50
mov edx, dword [0x405404]
add esp, 0x10
mov byte [0x418d0c], 0x9d
mov byte [0x418d0d], 0x60
push 0xc6
push edx
mov byte [0x418d0e], 0xbe
mov byte [0x418d0f], 0xf6
mov byte [0x418d10], 0x52
mov byte [0x418d11], 2
mov byte [0x418d12], 5
mov byte [0x418d13], 0xf0
mov byte [0x418d14], 0x91
mov byte [0x418d15], 0x4a
mov byte [0x418d16], 0xbc
mov byte [0x418d17], 0x38
mov byte [0x418d18], 0xd9
mov byte [0x418d19], 0x9f
mov byte [0x418d1a], bl
mov dword [0x405020], 0x2535
call ebp
push 0x7d
push 0xe
lea eax, [esp + 0x58]
push 0x418d0c
push eax
call fcn.00402de0
mov ecx, dword [0x405434]
add esp, 0x10
push 0x28e5
push 0x1fe4
push 0x7a1e
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [0x405444]
push 0x40
push edx
mov dword [0x405174], 0x28a8
call esi
mov eax, dword [0x405480]
push 0xb5
push eax
call esi
mov byte [esp + 0x10], 0x5b
mov byte [esp + 0x11], 0xea
mov byte [esp + 0x12], 0xf
mov byte [esp + 0x13], 0xe
mov byte [esp + 0x14], 0x3f
mov byte [esp + 0x15], 0x1f
mov byte [esp + 0x16], 0x50
mov byte [esp + 0x17], 0x57
mov byte [esp + 0x18], 0x71
mov byte [esp + 0x19], 0x6d
mov byte [esp + 0x1a], bl
push 1
mov ecx, dword [0x405508]
push 0x24
push 0xf5
push ecx
call edi
push 0x66
lea edx, [esp + 0x14]
push 0xa
lea eax, [esp + 0x58]
push edx
push eax
call fcn.00402c50
mov ecx, dword [0x40505c]
mov edx, dword [0x405544]
add esp, 0x10
add ecx, 0xffffa50d
mov byte [0x418ce8], 0x8d
mov byte [0x418ce9], 0xc7
push 0x13
push edx
mov byte [0x418cea], 0x24
mov byte [0x418ceb], 0xb7
mov byte [0x418cec], 0xf9
mov byte [0x418ced], 0x95
mov byte [0x418cee], 0x72
mov byte [0x418cef], 0x42
mov byte [0x418cf0], 0x1a
mov byte [0x418cf1], 0x88
mov byte [0x418cf2], 7
mov byte [0x418cf3], 0xaf
mov byte [0x418cf4], bl
mov dword [0x40526c], ecx
call esi
mov eax, dword [0x405144]
mov ecx, 0x2c03
cdq
idiv ecx
push 0x49
push 0xc
push 0x418ce8
mov dword [0x40509c], edx
lea edx, [esp + 0x5c]
push edx
call fcn.00402de0
mov eax, dword [0x405584]
add esp, 0x10
push 0x95
push eax
call ebp
mov ecx, dword [0x4052e4]
mov eax, 0xb92143fb
imul ecx
add edx, ecx
mov eax, 0x38e38e39
sar edx, 7
mov ecx, edx
push 1
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x4050f4]
mov dword [0x4052e4], edx
imul ecx
mov ecx, dword [0x4055bc]
push 0xb4
sar edx, 2
mov eax, edx
push 0x27
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x4050f4], edx
call edi
mov byte [esp + 0x10], 0x5e
mov byte [esp + 0x11], 0xd5
mov byte [esp + 0x12], 0xc2
mov byte [esp + 0x13], 0x3a
mov byte [esp + 0x14], 0x1e
mov byte [esp + 0x15], 0xf3
mov byte [esp + 0x16], 0x30
mov byte [esp + 0x17], 0x44
mov byte [esp + 0x18], 0x66
mov edx, dword [0x405448]
push 0x24
push edx
mov byte [esp + 0x21], bl
call esi
push 0xb1
lea eax, [esp + 0x14]
push 9
lea ecx, [esp + 0x58]
push eax
push ecx
call fcn.00402c50
mov eax, dword [0x4051fc]
mov ecx, 0x149b
cdq
idiv ecx
mov eax, dword [section..data]
add esp, 0x10
mov byte [0x418ccc], 0xb1
mov byte [0x418ccd], 0x5f
push 0xc0
mov byte [0x418cce], 4
mov byte [0x418ccf], 0x48
mov byte [0x418cd0], 0xf3
mov byte [0x418cd1], 0x1e
mov byte [0x418cd2], 0x1f
mov byte [0x418cd3], 0xe5
mov byte [0x418cd4], 0x67
mov byte [0x418cd5], 0xa5
mov byte [0x418cd6], 0x44
mov byte [0x418cd7], 0xde
mov byte [0x418cd8], bl
mov dword [0x40529c], edx
lea edx, [eax + eax*8]
lea ecx, [eax + edx*4]
mov edx, dword [0x405580]
push edx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
shl ecx, 1
sub ecx, eax
shl ecx, 3
mov dword [str.T73f], ecx
call ebp
push ebx
push 0xc
lea eax, [esp + 0x58]
push 0x418ccc
push eax
call fcn.00402de0
mov ecx, dword [0x405538]
add esp, 0x10
push 0x78
push ecx
call ebp
mov edx, dword [0x405560]
push ebx
push 0x16
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov eax, dword [0x405640]
push 0xef
push eax
call esi
mov ecx, dword [0x405104]
mov eax, 0x4325c53f
imul ecx
sar edx, 5
mov ecx, edx
mov byte [esp + 0x10], 0xb9
shr ecx, 0x1f
add edx, ecx
mov byte [esp + 0x11], 0x67
mov dword [0x405104], edx
mov byte [esp + 0x12], 0xb6
mov byte [esp + 0x13], 0xc2
mov byte [esp + 0x14], 0xa7
mov byte [esp + 0x15], 0x59
mov byte [esp + 0x16], 0xf2
mov byte [esp + 0x17], 0x1b
mov byte [esp + 0x18], 0x60
mov edx, dword [0x40566c]
push 0x3b02
push 0x65ac
push 0x3975
push edx
mov byte [esp + 0x29], 0xb7
mov byte [esp + 0x2a], bl
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [section..data]
mov eax, 0x5254e78f
imul ecx
sar edx, 6
mov eax, edx
push 0xe9
shr eax, 0x1f
add edx, eax
lea ecx, [esp + 0x14]
mov dword [section..data], edx
push 0xa
lea edx, [esp + 0x58]
push ecx
push edx
call fcn.00402c50
mov ecx, dword [0x405040]
mov eax, 0x84210843
imul ecx
add edx, ecx
mov ecx, dword [0x40520c]
sar edx, 5
mov eax, edx
push 0x28
shr eax, 0x1f
add edx, eax
push 0xe
mov dword [0x405040], edx
lea edx, [esp + 0x68]
add ecx, 0xffffbc4f
push 0x418d64
push edx
mov byte [0x418d64], 0x85
mov byte [0x418d65], 0x84
mov byte [0x418d66], 0x1d
mov byte [0x418d67], 0xec
mov byte [0x418d68], 0x98
mov byte [0x418d69], 0xf8
mov byte [0x418d6a], 0xb3
mov byte [0x418d6b], 0xac
mov byte [0x418d6c], 0x31
mov byte [0x418d6d], 0xc5
mov byte [0x418d6e], 0x4c
mov byte [0x418d6f], 0x95
mov byte [0x418d70], 0x17
mov byte [0x418d71], 0xbf
mov byte [0x418d72], bl
mov dword [0x405068], ecx
mov dword [0x4050ec], 0x4d97
call fcn.00402de0
mov eax, dword [0x40546c]
add esp, 0x20
push 0x60
push eax
call esi
mov ecx, dword [0x4050dc]
mov edx, dword [0x4054f0]
add ecx, 0x6533
push 0xb0
push edx
mov dword [0x405234], ecx
call ebp
mov eax, dword [0x405668]
push 0x3c33
push 0x1b4a
push 0x4b4c
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x4052e8]
mov eax, 0xa6f87fd7
imul ecx
add edx, ecx
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
push 0x73
mov dword [0x405224], edx
mov edx, dword [0x4054ec]
push edx
mov byte [esp + 0x18], 0xef
mov byte [esp + 0x19], 0xe7
mov byte [esp + 0x1a], 0x5e
mov byte [esp + 0x1b], 0xa8
mov byte [esp + 0x1c], 4
mov byte [esp + 0x1d], 0xc7
mov byte [esp + 0x1e], 3
mov byte [esp + 0x1f], 0x61
mov byte [esp + 0x20], 0x62
mov byte [esp + 0x21], bl
call esi
push 0xca
lea eax, [esp + 0x14]
push 9
lea ecx, [esp + 0x58]
push eax
push ecx
call fcn.00402c50
mov edx, dword [0x4055e4]
add esp, 0x10
mov byte [0x418d38], 0xe0
mov byte [0x418d39], 0x1c
push 1
push 0x29
push 0xab
push edx
mov byte [0x418d3a], 0x42
mov byte [0x418d3b], 0xe7
mov byte [0x418d3c], 0x92
mov byte [0x418d3d], 0x91
mov byte [0x418d3e], 0x70
mov byte [0x418d3f], 0x53
mov byte [0x418d40], 0x2b
mov byte [0x418d41], bl
call edi
mov eax, dword [0x405464]
push 1
push 0x8a
push 0xa8
push eax
call edi
push 0xd1
push 9
lea ecx, [esp + 0x58]
push 0x418d38
push ecx
call fcn.00402de0
mov eax, dword [0x4051c0]
mov ecx, 0x22b7
cdq
idiv ecx
add esp, 0x10
push 0xcc
mov dword [0x4052dc], edx
mov edx, dword [0x405510]
push edx
call esi
mov eax, dword [0x405540]
push 0x7a
push eax
call esi
mov ecx, dword [0x405614]
push 0x42
mov byte [esp + 0x14], 0x67
mov byte [esp + 0x15], 0x4b
mov byte [esp + 0x16], 0xb5
mov byte [esp + 0x17], 0xb0
mov byte [esp + 0x18], 0x3a
mov byte [esp + 0x19], 0xf9
mov byte [esp + 0x1a], 0x19
mov byte [esp + 0x1b], 0xd3
mov byte [esp + 0x1c], 0xe2
mov byte [esp + 0x1d], 0xd7
mov byte [esp + 0x1e], bl
push ecx
call esi
push 0x12
lea edx, [esp + 0x14]
push 0xa
lea eax, [esp + 0x58]
push edx
push eax
call fcn.00402c50
mov ecx, dword [0x405604]
add esp, 0x10
mov byte [0x418d1c], 0x25
mov byte [0x418d1d], 0x93
push 1
push 0x35
push 0xde
push ecx
mov byte [0x418d1e], 0x79
mov byte [0x418d1f], 0x98
mov byte [0x418d20], 0xea
mov byte [0x418d21], 0xba
mov byte [0x418d22], 0xe8
mov byte [0x418d23], 0x36
mov byte [0x418d24], bl
call edi
push 0x36
push 8
lea edx, [esp + 0x58]
push 0x418d1c
push edx
mov dword [0x4051cc], 0x1048
call fcn.00402de0
mov eax, dword [0x4051e4]
add esp, 0x10
lea ecx, [eax + eax*4]
push 0xe4
lea edx, [eax + ecx*8]
lea ecx, [eax + edx*8]
lea edx, [eax + ecx*4]
mov eax, dword [0x40555c]
shl edx, 3
push eax
mov dword [0x40516c], edx
call ebp
mov ecx, dword [0x405638]
push 0xfc
push ecx
call esi
mov edx, dword [0x4056a0]
push 1
push 0x78
push 0x15
push edx
mov byte [esp + 0x20], 0xa
mov byte [esp + 0x21], 0xf6
mov byte [esp + 0x22], 0x3a
mov byte [esp + 0x23], 0x78
mov byte [esp + 0x24], 0x9e
mov byte [esp + 0x25], 0xaf
mov byte [esp + 0x26], 0xa4
mov byte [esp + 0x27], 0x31
mov byte [esp + 0x28], 0x72
mov byte [esp + 0x29], 0x67
mov byte [esp + 0x2a], 0x3d
mov byte [esp + 0x2b], bl
call edi
push 0xeb
lea eax, [esp + 0x14]
push 0xb
lea ecx, [esp + 0x58]
push eax
push ecx
mov dword [0x40516c], 0x652
call fcn.00402c50
mov byte [0x418cf8], 0xb3
mov byte [0x418cf9], 0x15
mov byte [0x418cfa], 0x24
mov byte [0x418cfb], 0x83
mov byte [0x418cfc], 0x78
mov byte [0x418cfd], 0x3c
mov byte [0x418cfe], 0xc0
mov byte [0x418cff], 0x80
mov ecx, dword [0x405164]
mov eax, 0x84210843
imul ecx
add edx, ecx
push 0xd1
sar edx, 6
mov eax, edx
push 0x12
shr eax, 0x1f
lea ecx, [esp + 0x68]
add edx, eax
push 0x418cf8
push ecx
mov byte [0x418d00], 0xab
mov byte [0x418d01], 0x95
mov byte [0x418d02], 0xfb
mov byte [0x418d03], 0xa0
mov byte [0x418d04], 0x67
mov byte [0x418d05], 0xdb
mov byte [0x418d06], 0x90
mov byte [0x418d07], 0xed
mov byte [0x418d08], 0x12
mov byte [0x418d09], 0x85
mov byte [0x418d0a], bl
mov dword [0x405164], edx
mov dword [0x405334], 0x2d60
call fcn.00402de0
mov edx, dword [0x40565c]
add esp, 0x20
push 1
push 0x6b
push 0x56
push edx
call edi
mov eax, dword [0x4052c8]
mov ecx, 0x1c86
add eax, 0x3d89
push 0x434c
mov dword [0x405020], eax
mov eax, dword [0x405058]
cdq
idiv ecx
push 0x2369
push 0x4b44
mov byte [esp + 0x1c], 0xcd
mov byte [esp + 0x1d], 0xbf
mov byte [esp + 0x1e], 0x75
mov byte [esp + 0x1f], 0x21
mov byte [esp + 0x20], 0x14
mov byte [esp + 0x21], 0x2e
mov byte [esp + 0x22], 0xe2
mov byte [esp + 0x23], 0xf1
mov byte [esp + 0x24], bl
mov dword [0x405278], edx
mov edx, dword [0x405410]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x61
lea eax, [esp + 0x14]
push 8
lea ecx, [esp + 0x58]
push eax
push ecx
call fcn.00402c50
mov edx, dword [0x4056b4]
add esp, 0x10
mov byte [0x418cdc], 0x1a
mov byte [0x418cdd], 0xdf
push ebx
push 0xe
push edx
mov byte [0x418cde], 0x41
mov byte [0x418cdf], 0x7c
mov byte [0x418ce0], 0xcb
mov byte [0x418ce1], 0x1b
mov byte [0x418ce2], 0xf2
mov byte [0x418ce3], 0x70
mov byte [0x418ce4], 0xfd
mov byte [0x418ce5], bl
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
push 0x3d
push 9
lea eax, [esp + 0x58]
push 0x418cdc
push eax
call fcn.00402de0
mov ecx, dword [0x405034]
mov edx, dword [0x405464]
add esp, 0x10
add ecx, 0x4590
mov dword [0x40512c], ecx
push ebx
push 0xe9
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov ecx, dword [0x4050d4]
mov edx, dword [0x4055e8]
push ebx
push 0x84
lea eax, [ecx + ecx*4]
push edx
shl eax, 4
sub eax, ecx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*8]
shl ecx, 1
mov dword [0x405210], ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov ecx, dword [str.JvfG_bi]
mov eax, 0x22b63cbf
imul ecx
sar edx, 4
mov eax, edx
push ebx
shr eax, 0x1f
add edx, eax
mov eax, dword [0x40527c]
mov ecx, eax
mov dword [str.JvfG_bi], edx
shl ecx, 5
sub ecx, eax
push 0xb2
mov byte [esp + 0x18], 0x2f
mov byte [esp + 0x19], 0xe
lea ecx, [ecx + ecx*8]
mov byte [esp + 0x1a], 0xe
shl ecx, 1
sub ecx, eax
mov byte [esp + 0x1b], 0x2d
mov byte [esp + 0x1c], 0x70
mov byte [esp + 0x1d], 0xd5
lea edx, [eax + ecx*4]
mov ecx, dword [0x4055e8]
push ecx
mov byte [esp + 0x22], 0xab
lea eax, [eax + edx*4]
mov byte [esp + 0x23], 0x76
mov byte [esp + 0x24], 0xae
mov byte [esp + 0x25], bl
mov dword [0x4050d8], eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
push 0xdf
lea edx, [esp + 0x14]
push 9
lea eax, [esp + 0x58]
push edx
push eax
call fcn.00402c50
mov ecx, dword [0x405658]
add esp, 0x10
mov byte [0x418cc8], 0x84
mov byte [0x418cc9], 4
push 0xdb
push ecx
mov byte [0x418cca], 0x32
mov byte [0x418ccb], bl
call ebp
mov edx, dword [0x4050a0]
push 2
add edx, 0x3a50
push 3
mov dword [str.2z], edx
lea eax, [esp + 0x58]
push 0x418cc8
push eax
call fcn.00402de0
mov ecx, dword [0x4056a8]
add esp, 0x10
push 0xa6
push ecx
call esi
mov edx, dword [0x405394]
mov eax, dword [0x405638]
add edx, 0x1213
push 0x18
push eax
mov dword [0x4052d8], edx
mov byte [esp + 0x18], 0x8a
mov byte [esp + 0x19], 0x92
mov byte [esp + 0x1a], 0x59
mov byte [esp + 0x1b], 0x35
mov byte [esp + 0x1c], 0x80
mov byte [esp + 0x1d], 0x43
mov byte [esp + 0x1e], 0xee
mov byte [esp + 0x1f], 0x9b
mov byte [esp + 0x20], bl
call ebp
push 0x53
lea ecx, [esp + 0x14]
push 8
lea edx, [esp + 0x58]
push ecx
push edx
call fcn.00402c50
mov ecx, dword [0x405024]
mov eax, 0x7e07e07f
imul ecx
mov ecx, dword [0x405484]
add esp, 0x10
sar edx, 5
mov eax, edx
push 0x5eaf
shr eax, 0x1f
push 0x4c00
add edx, eax
push 0x6ebc
push ecx
mov byte [0x418cc0], 0x93
mov byte [0x418cc1], 0x24
mov byte [0x418cc2], 0x48
mov byte [0x418cc3], 0x66
mov byte [0x418cc4], bl
mov dword [0x405024], edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x1e
push 4
lea edx, [esp + 0x58]
push 0x418cc0
push edx
call fcn.00402de0
mov ecx, dword [0x4051d8]
mov eax, 0x9a4b097f
imul ecx
add edx, ecx
mov ecx, dword [0x405218]
sar edx, 0xd
mov eax, edx
add esp, 0x10
shr eax, 0x1f
add edx, eax
mov eax, 0xa8a2b4fd
mov dword [0x405250], edx
imul ecx
add edx, ecx
mov byte [esp + 0x10], 0x42
sar edx, 0xb
mov ecx, edx
mov byte [esp + 0x11], 0x1e
shr ecx, 0x1f
add edx, ecx
mov byte [esp + 0x12], 0x4e
mov dword [0x4050e0], edx
mov byte [esp + 0x13], 0x37
mov edx, dword [0x405628]
push 0xe1
push edx
mov byte [esp + 0x1c], 0xdc
mov byte [esp + 0x1d], 0xd8
mov byte [esp + 0x1e], 0x9e
mov byte [esp + 0x1f], 0x96
mov byte [esp + 0x20], 0xf8
mov byte [esp + 0x21], 0x12
mov byte [esp + 0x22], 0xb8
mov byte [esp + 0x23], bl
call ebp
mov ecx, dword [0x405280]
mov eax, 0x95568003
imul ecx
add edx, ecx
push 0xd1
sar edx, 0xe
mov eax, edx
lea ecx, [esp + 0x14]
shr eax, 0x1f
add edx, eax
push 0xb
mov dword [str.JvfG_bi], edx
lea edx, [esp + 0x58]
push ecx
push edx
call fcn.00402c50
mov eax, dword [0x405700]
add esp, 0x10
mov byte [0x418cb8], 0x10
mov byte [0x418cb9], 0x17
push 0x9f
push eax
mov byte [0x418cba], 0x40
mov byte [0x418cbb], 0x1a
mov byte [0x418cbc], 0xc3
mov byte [0x418cbd], bl
call esi
mov ecx, dword [0x405660]
push 0x29
push ecx
call ebp
push 0xdd
push 5
lea edx, [esp + 0x58]
push 0x418cb8
push edx
call fcn.00402de0
mov ecx, dword [0x4053a0]
mov eax, 0x78787879
imul ecx
mov ecx, dword [0x405454]
add esp, 0x10
sar edx, 3
mov eax, edx
push 0xaa
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x4053a0], edx
call esi
mov edx, dword [0x405698]
push 0x7d2a
push 0x4d8e
push 0xbab
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov byte [esp + 0x10], 0xe
mov byte [esp + 0x11], 0x50
mov byte [esp + 0x12], 0x8c
mov byte [esp + 0x13], 0xab
mov byte [esp + 0x14], 0x78
mov byte [esp + 0x15], 0x44
mov byte [esp + 0x16], 0x37
mov byte [esp + 0x17], 0x8a
mov byte [esp + 0x18], 0x29
mov byte [esp + 0x19], 0x78
mov byte [esp + 0x1a], 0xb8
mov byte [esp + 0x1b], bl
push 1
mov eax, dword [0x405634]
push pe_nt_image_headers32
push 0xc6
push eax
call edi
mov ecx, dword [0x4052e4]
push 0x76
lea edx, [esp + 0x14]
push 0xb
lea eax, [esp + 0x58]
add ecx, 0xffff8ad8
push edx
push eax
mov dword [0x405398], ecx
call fcn.00402c50
mov ecx, dword [0x405344]
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov ecx, edx
push 0x3c
shr ecx, 0x1f
add edx, ecx
push 3
mov dword [0x405344], edx
lea edx, [esp + 0x68]
push 0x418cb4
push edx
mov byte [0x418cb4], 0x8f
mov byte [0x418cb5], 0x57
mov byte [0x418cb6], 0xf0
mov byte [0x418cb7], bl
call fcn.00402de0
mov eax, dword [0x4050f4]
add esp, 0x20
add eax, 0xffffae12
pop edi
pop esi
mov dword [0x4053d8], eax
pop ebp
mov eax, 3
pop ebx
add esp, 0x144
ret