Function at 0x438a37
Capabilities:
Contain obfuscated stackstrings
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x446e49
mov eax, dword fs:[0]
push eax
sub esp, 0x438
mov eax, dword [0x4602c0]
xor eax, esp
mov dword [esp + 0x430], eax
push ebx
push esi
push edi
mov eax, dword [0x4602c0]
xor eax, esp
push eax
lea eax, [esp + 0x448]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0x3c], esi
mov byte [esp + 0x258], bl
mov dword [esp + 0x450], ebx
mov byte [esp + 0x234], bl
push 7
pop eax
xor ecx, ecx
mov dword [esp + 0x1d4], eax
mov dword [esp + 0x1d0], ebx
mov word [esp + 0x1c0], cx
mov dword [esp + 0x1f0], eax
xor eax, eax
mov dword [esp + 0x1ec], ebx
mov word [esp + 0x1dc], ax
mov byte [esp + 0x450], 3
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebx
call edi
push 1
mov dword [esp + 0x20], eax
call edi
push 0x48
mov dword [esp + 0x4c], eax
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x10], eax
mov byte [esp + 0x450], 4
cmp eax, ebx
je 0x438b1c
push 0x65
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
push eax
push 0x10
push dword [esp + 0x18]
xor edi, edi
call fcn.0043065e
jmp 0x438b1e
xor eax, eax
mov byte [esp + 0x450], 3
mov dword [0x469434], eax
xor eax, eax
lea edi, [esp + 0x10]
stosb byte es:[edi], al
push dword [esp + 0x10]
lea eax, [esp + 0x178]
push str.checks2
call fcn.00409480
lea eax, [esp + 0x174]
push eax
lea edi, [esp + 0x44]
mov ecx, esi
mov byte [esp + 0x454], 5
call fcn.0040934e
push eax
lea ecx, [esp + 0x25c]
mov byte [esp + 0x454], 6
call fcn.0040a6c2
cmp byte [esp + 0x40], bl
je 0x438b81
mov byte [esp + 0x40], bl
push ebx
push 1
lea esi, [esp + 0x17c]
mov byte [esp + 0x458], 3
call fcn.0040115a
movzx eax, byte [esp + 0x258]
neg eax
sbb eax, eax
test eax, method.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.virtual_52
je 0x438bcb
mov eax, dword [esp + 0x278]
add eax, 9
cmp eax, ebx
je 0x438bbe
add eax, 0xfffffff7
jmp 0x438bc0
xor eax, eax
mov eax, dword [eax + 0xc]
imul eax, eax, 0xf
add eax, 0x14
jmp 0x438bcd
xor eax, eax
add dword [0x469464], eax
add eax, 0xf1
mov dword [esp + 0x34], eax
xor eax, eax
lea edi, [esp + 0x10]
stosb byte es:[edi], al
push dword [esp + 0x10]
lea eax, [esp + 0x178]
push 0x4519cc
call fcn.00409480
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x178]
push eax
mov byte [esp + 0x458], 7
call fcn.004096b4
push ebx
push 1
lea esi, [esp + 0x17c]
mov dword [esp + 0x30], eax
mov byte [esp + 0x458], 3
call fcn.0040115a
push 0x461f2c
lea eax, [esp + 0x50]
push 0x4519d8
push eax
call fcn.004032fc
add esp, 0xc
push 0x4519d4
push eax
lea eax, [esp + 0x11c]
push eax
mov byte [esp + 0x45c], 8
call fcn.0040326b
add esp, 0xc
mov byte [esp + 0x450], 9
cmp dword [eax + 0x18], 8
jb 0x438c79
mov eax, dword [eax + 4]
jmp 0x438c7c
add eax, 4
mov esi, dword [0x469460]
mov edi, dword [esp + 0x28]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x48]
sub eax, esi
sub eax, edi
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x10], eax
push 0x10000
lea eax, [ecx - 0x19d]
add esi, edi
push esi
mov esi, dword [0x469434]
cdq
push 0x19d
sub eax, edx
mov ecx, eax
mov eax, dword [esp + 0x1c]
push 0xca0000
push dword [esp + 0x28]
sar ecx, 1
call fcn.004304a9
push ebx
push 1
lea esi, [esp + 0x11c]
mov dword [0x469374], eax
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x54]
mov byte [esp + 0x458], 3
call fcn.0040115a
mov eax, dword [0x469434]
push 0x43507c
push 0x10
call fcn.0043046b
mov eax, dword [0x469434]
push 0x435421
push 0x111
call fcn.0043046b
push 0x48
mov dword [0x4692f8], edi
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0xa
cmp eax, ebx
je 0x438d4b
push ebx
push ebx
push eax
mov edi, str.msctls_progress32
call fcn.0043065e
jmp 0x438d4d
xor eax, eax
mov byte [esp + 0x450], 3
mov ecx, eax
mov dword [0x46936c], eax
call fcn.00430264
mov esi, dword [0x46936c]
push ebx
push 0xd
push 0x188
push 0x10000001
push ebx
push 0x5e
pop eax
push 0xb
pop ecx
call fcn.004304a9
push 0x10000000
push ebx
push 0x401
push eax
mov dword [0x469370], eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x48
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0xb
cmp eax, ebx
je 0x438dc2
push ebx
push ebx
push eax
mov edi, str.STATIC
call fcn.0043065e
mov dword [esp + 0x18], eax
jmp 0x438dc6
mov dword [esp + 0x18], ebx
mov byte [esp + 0x450], 3
mov esi, dword [esp + 0x18]
mov ecx, esi
call fcn.00430264
push ebx
push 0x37
push 0xf4
push 0x10000000
push ebx
push 0x17
xor eax, eax
pop ecx
call fcn.004304a9
mov esi, 0x42c
push esi
mov dword [0x469328], eax
call fcn.0041c19a
pop ecx
push esi
mov edi, eax
push ebx
push edi
mov dword [0x469334], edi
call fcn.00420670
xor eax, eax
inc eax
add esp, 0xc
mov word [edi + 0xc], ax
push 8
pop eax
mov word [edi + 0xe], ax
lea eax, [edi + 0x28]
mov dword [edi], 0x28
mov dword [edi + 4], 0xf4
mov dword [edi + 8], 0x37
mov dword [edi + 0x10], ebx
call fcn.00430bcc
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
mov ecx, eax
shr ecx, 8
movzx edx, al
movzx ecx, cl
shr eax, 0x10
shl edx, 8
add ecx, edx
movzx eax, al
shl ecx, 8
add ecx, eax
mov eax, dword [0x469334]
mov esi, 0x5bbd0
push esi
mov dword [eax + 0x28], ecx
call fcn.0041a4fc
pop ecx
push esi
mov edi, eax
push ebx
push edi
mov dword [0x469330], edi
call fcn.00420670
add esp, 0xc
mov esi, 0x461df2
push 0x20
push ebx
push edi
push 0x1d
pop ecx
push 2
pop eax
mov edx, 0x450550
call fcn.00430b92
add esp, 0xc
push 0x18
push 0xd8
push edi
push 0x1f
pop ecx
xor eax, eax
mov edx, 0x450260
call fcn.00430b92
mov dl, byte [esi - 2]
add esp, 0xc
cmp dl, bl
je 0x438ee5
movzx eax, byte [esi]
movzx ecx, byte [esi + 1]
movzx edx, dl
push eax
movzx eax, byte [esi - 1]
push edx
mov edx, dword [esi + 2]
push edi
call fcn.00430b92
add esp, 0xc
add esi, 8
add edi, 0x346c
cmp esi, 0x461ed2
jl 0x438e91
mov eax, dword [esp + 0x18]
push 0x434dcf
push 0xf
mov dword [0x46932c], ebx
call fcn.0043046b
push 0x434da6
push 0x8c
push 1
push dword [0x469328]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x48
mov dword [0x469324], eax
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0xc
cmp eax, ebx
je 0x438f50
push ebx
push ebx
push eax
mov edi, str.BUTTON
call fcn.0043065e
jmp 0x438f52
xor eax, eax
mov byte [esp + 0x450], 3
mov ecx, eax
mov dword [0x469310], eax
call fcn.00430264
mov esi, dword [0x469310]
push ebx
push 0x17
push 0x4b
push 0x18010001
mov eax, 0xca
push 0x451750
lea ecx, [eax - 0x32]
call fcn.004304a9
mov eax, dword [0x469310]
push 0x48
mov dword [eax + 0x2c], 0x15
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0xd
cmp eax, ebx
je 0x438fbb
push ebx
push ebx
push eax
mov edi, str.BUTTON
call fcn.0043065e
jmp 0x438fbd
xor eax, eax
mov byte [esp + 0x450], 3
mov ecx, eax
mov dword [0x46930c], eax
call fcn.00430264
mov esi, dword [0x46930c]
push ebx
push 0x17
push 0x56
push 0x18010000
mov eax, 0xca
push 0x451a20
lea ecx, [eax + 0x20]
call fcn.004304a9
mov eax, dword [0x46930c]
push 0x48
mov dword [eax + 0x2c], 0x16
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0xe
cmp eax, ebx
je 0x439026
push ebx
push ebx
push eax
mov edi, str.BUTTON
call fcn.0043065e
jmp 0x439028
xor eax, eax
mov byte [esp + 0x450], 3
mov ecx, eax
mov dword [0x469308], eax
call fcn.00430264
mov esi, dword [0x469308]
push ebx
push 0x17
push 0x4b
push 0x10000000
mov eax, 0xca
push 0x4517b4
lea ecx, [eax + 0x7d]
call fcn.004304a9
mov eax, dword [0x469308]
push 0x48
mov dword [eax + 0x2c], 0xa
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0xf
cmp eax, ebx
je 0x439091
push ebx
push ebx
push eax
mov edi, str.STATIC
call fcn.0043065e
jmp 0x439093
xor eax, eax
mov byte [esp + 0x450], 3
mov ecx, eax
mov dword [0x469320], eax
call fcn.00430264
mov esi, dword [0x469320]
push ebx
push 0xe
push 0x101
push 0x10000000
push 0x44df68
push 0x6f
pop eax
lea ecx, [eax + 0x23]
call fcn.004304a9
push 0x48
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0x10
cmp eax, ebx
je 0x4390f1
push ebx
push ebx
push eax
mov edi, str.STATIC
call fcn.0043065e
jmp 0x4390f3
xor eax, eax
mov byte [esp + 0x450], 3
mov ecx, eax
mov dword [0x46931c], eax
call fcn.00430264
mov esi, dword [0x46931c]
push ebx
push 0xe
push 0x101
push 0x10000000
mov eax, 0x8f
push 0x44df68
lea ecx, [eax + 3]
call fcn.004304a9
push 0x48
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0x11
cmp eax, ebx
je 0x439153
push ebx
push ebx
push eax
mov edi, str.STATIC
call fcn.0043065e
jmp 0x439155
xor eax, eax
mov byte [esp + 0x450], 3
mov ecx, eax
mov dword [0x469314], eax
call fcn.00430264
mov esi, dword [0x469314]
push ebx
push 0xe
push 0x101
push 0x10000000
push 0x44df68
push 0x7f
pop eax
lea ecx, [eax + 0x13]
call fcn.004304a9
push 0x48
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0x12
cmp eax, ebx
je 0x4391b3
push ebx
push ebx
push eax
mov edi, str.BUTTON
call fcn.0043065e
jmp 0x4391b5
xor eax, eax
mov byte [esp + 0x450], 3
mov ecx, eax
mov dword [0x469300], eax
call fcn.00430264
movzx eax, byte [esp + 0x258]
mov esi, dword [0x469300]
neg eax
sbb eax, eax
and eax, method.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.virtual_52
push ebx
neg eax
push 0xe
sbb eax, eax
push 0x188
and eax, 0x8000000
or eax, 0x10000003
push eax
push 0x451a40
push 0xb
mov eax, 0xa4
pop ecx
call fcn.004304a9
push 0x48
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0x13
cmp eax, ebx
je 0x439230
push ebx
push ebx
push eax
mov edi, str.STATIC
call fcn.0043065e
jmp 0x439232
xor eax, eax
mov byte [esp + 0x450], 3
mov ecx, eax
mov dword [0x469304], eax
call fcn.00430264
mov esi, dword [0x469304]
push ebx
push 0xe
push 0x188
push 0x10000000
push 0x451aa4
push 0x3e
pop eax
push 0xb
pop ecx
call fcn.004304a9
push 0x48
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0x14
cmp eax, ebx
je 0x439292
push ebx
push ebx
push eax
mov edi, str.STATIC
call fcn.0043065e
mov esi, eax
jmp 0x439294
xor esi, esi
mov ecx, esi
mov byte [esp + 0x450], 3
call fcn.00430264
cmp dword [0x461ddc], 0xc
jne 0x4392b3
mov eax, 0x451ac0
jmp 0x4392c6
cmp dword [0x461f98], 8
mov eax, dword [0x461f84]
jae 0x4392c6
mov eax, 0x461f84
push ebx
push 0xe
push 0x188
push 0x10008000
push eax
push 0x4e
pop eax
push 0xb
pop ecx
call fcn.004304a9
push 0x48
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0x15
cmp eax, ebx
je 0x439308
push ebx
push ebx
push eax
mov edi, str.STATIC
call fcn.0043065e
mov esi, eax
jmp 0x43930a
xor esi, esi
mov ecx, esi
mov byte [esp + 0x450], 3
call fcn.00430264
push ebx
push 0xe
push 0x7d
push 0x10000002
push 0x451ae0
push 0x6f
pop eax
push 0xb
pop ecx
call fcn.004304a9
push 0x48
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0x16
cmp eax, ebx
je 0x43935c
push ebx
push ebx
push eax
mov edi, str.STATIC
call fcn.0043065e
mov esi, eax
jmp 0x43935e
xor esi, esi
mov ecx, esi
mov byte [esp + 0x450], 3
call fcn.00430264
push ebx
push 0xe
push 0x7d
push 0x10000002
push 0x451b08
push 0xb
mov eax, 0x8f
pop ecx
call fcn.004304a9
push 0x48
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0x17
cmp eax, ebx
je 0x4393b2
push ebx
push ebx
push eax
mov edi, str.STATIC
call fcn.0043065e
mov esi, eax
jmp 0x4393b4
xor esi, esi
mov ecx, esi
mov byte [esp + 0x450], 3
call fcn.00430264
push ebx
push 0xe
push 0x7d
push 0x10000002
push 0x451b2c
push 0x7f
pop eax
push 0xb
pop ecx
call fcn.004304a9
cmp dword [0x461eec], ebx
je 0x43949d
push 0x34
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x10], eax
mov byte [esp + 0x450], 0x18
cmp eax, ebx
je 0x439432
mov edi, dword [0x469460]
push 0x19d
push dword [esp + 0x2c]
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x44], esp
push 0x461ed8
call fcn.004010aa
push dword [esp + 0x34]
mov edx, edi
mov ecx, ebx
call fcn.004419bb
jmp 0x439434
xor eax, eax
mov byte [esp + 0x450], 3
mov edx, dword [eax]
push ebx
mov ecx, eax
mov dword [0x46945c], eax
call dword [edx + 0x24]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, dword [0x469434]
push 0x434f68
push 0x201
call fcn.0043046b
mov eax, dword [0x469434]
push 0x434d5c
push 0x200
call fcn.0043046b
mov eax, dword [0x469434]
push 0x434d4d
push 0xa0
call fcn.0043046b
mov eax, dword [0x469434]
push 0x434d3b
push 0x20
call fcn.0043046b
xor eax, eax
lea edi, [esp + 0x10]
stosb byte es:[edi], al
push dword [esp + 0x10]
lea eax, [esp + 0x178]
push str.expand2
call fcn.00409480
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x174]
push eax
lea edi, [esp + 0x44]
mov byte [esp + 0x454], 0x19
call fcn.0040934e
push eax
lea ecx, [esp + 0x238]
mov byte [esp + 0x454], 0x1a
call fcn.0040a6c2
cmp byte [esp + 0x40], bl
je 0x4394f5
mov byte [esp + 0x40], bl
push ebx
push 1
lea esi, [esp + 0x17c]
mov byte [esp + 0x458], 3
call fcn.0040115a
movzx eax, byte [esp + 0x234]
neg eax
sbb eax, eax
test eax, method.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.virtual_52
je 0x439965
lea eax, [esp + 0x19c]
push eax
call fcn.004091b1
lea eax, [esp + 0x214]
push eax
mov byte [esp + 0x454], 0x1b
call fcn.004091b1
mov byte [esp + 0x450], 0x1c
mov eax, dword [0x469434]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x34], eax
xor eax, eax
lea edi, [esp + 0x10]
stosb byte es:[edi], al
push dword [esp + 0x10]
lea eax, [esp + 0x178]
push 0x451700
call fcn.00409480
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x178]
push eax
lea ecx, [esp + 0x240]
mov byte [esp + 0x458], 0x1d
call fcn.004096b4
push ebx
push 1
lea esi, [esp + 0x17c]
mov dword [0x469448], eax
mov byte [esp + 0x458], 0x1c
call fcn.0040115a
xor eax, eax
lea edi, [esp + 0x10]
stosb byte es:[edi], al
push dword [esp + 0x10]
lea eax, [esp + 0x178]
push str.normal
call fcn.00409480
lea edx, [esp + 0x174]
lea ecx, [esp + 0x238]
mov byte [esp + 0x450], 0x1e
call fcn.0040927a
push eax
lea edi, [esp + 0x1a0]
call fcn.0040922c
push ebx
push 1
lea esi, [esp + 0x17c]
mov byte [esp + 0x458], 0x1c
call fcn.0040115a
xor eax, eax
lea edi, [esp + 0x10]
stosb byte es:[edi], al
push dword [esp + 0x10]
lea eax, [esp + 0x178]
push str.expand
call fcn.00409480
lea edx, [esp + 0x174]
lea ecx, [esp + 0x238]
mov byte [esp + 0x450], 0x1f
call fcn.0040927a
push eax
lea edi, [esp + 0x218]
call fcn.0040922c
push ebx
push 1
lea esi, [esp + 0x17c]
mov byte [esp + 0x458], 0x1c
call fcn.0040115a
mov eax, edi
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x10]
lea eax, [esp + 0x1c]
mov byte [esp + 0x17], 1
call fcn.004096f1
mov eax, dword [esp + 0x230]
add eax, 9
cmp eax, ebx
je 0x439693
add eax, 0xfffffff7
jmp 0x439695
xor eax, eax
mov eax, dword [eax + 4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x10]
je 0x4397cd
add eax, 0x1c
push eax
lea ecx, [esp + 0x1f8]
call fcn.00409166
push str.BUTTON
lea eax, [esp + 0x1c0]
push eax
mov byte [esp + 0x458], 0x20
call fcn.00401f7a
push 0x44df68
lea eax, [esp + 0x1dc]
push eax
mov dword [esp + 0x20], 0x14a
mov dword [esp + 0x30], 0xe
mov dword [esp + 0x40], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], ebx
call fcn.00401f7a
lea eax, [esp + 0x1f4]
mov dword [esp + 0x24], eax
mov byte [esp + 0x20], 1
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x1f0]
lea edx, [esp + 0x1d4]
mov byte [esp + 0x468], 0x21
call fcn.0043851e
add esp, 0x18
mov edi, eax
mov byte [esp + 0x450], 0x20
mov dword [esp + 0x18], edi
cmp byte [esp + 0x20], bl
je 0x439766
mov byte [esp + 0x20], bl
cmp byte [esp + 0x17], bl
je 0x43977d
mov dword [0x469454], edi
mov dword [edi + 0x2c], 0x21
mov byte [esp + 0x17], bl
lea ebx, [esp + 0x18]
mov esi, 0x469508
call fcn.00401f10
test dword [esp + 0x2c], 0x400
je 0x4397a8
mov edi, dword [edi + 4]
push 0
push 1
push 0xf1
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x1f4]
push eax
mov byte [esp + 0x454], 0x1c
call fcn.004091f4
lea eax, [esp + 0x1c]
call fcn.00409c11
xor ebx, ebx
jmp 0x43969c
lea eax, [esp + 0x19c]
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x10]
lea eax, [esp + 0x1c]
mov byte [esp + 0x17], 1
call fcn.004096f1
mov eax, dword [esp + 0x1b8]
add eax, 9
cmp eax, ebx
je 0x4397fd
add eax, 0xfffffff7
jmp 0x4397ff
xor eax, eax
mov eax, dword [eax + 4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x10]
je 0x43993b
add eax, 0x1c
push eax
lea ecx, [esp + 0x1f8]
call fcn.00409166
push str.BUTTON
lea eax, [esp + 0x1c0]
push eax
mov byte [esp + 0x458], 0x22
call fcn.00401f7a
push 0x44df68
lea eax, [esp + 0x1dc]
push eax
mov dword [esp + 0x20], 0x14a
mov dword [esp + 0x30], 0xe
mov dword [esp + 0x40], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], 0x10000000
call fcn.00401f7a
lea eax, [esp + 0x1f4]
mov dword [esp + 0x24], eax
mov byte [esp + 0x20], 1
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x1f0]
lea edx, [esp + 0x1d4]
mov byte [esp + 0x468], 0x23
call fcn.0043851e
add esp, 0x18
mov edi, eax
mov byte [esp + 0x450], 0x22
mov dword [esp + 0x18], edi
cmp byte [esp + 0x20], bl
je 0x4398d4
mov byte [esp + 0x20], bl
cmp byte [esp + 0x17], bl
je 0x4398eb
mov dword [0x469458], edi
mov dword [edi + 0x2c], 0x20
mov byte [esp + 0x17], bl
lea ebx, [esp + 0x18]
mov esi, 0x4694f0
call fcn.00401f10
test dword [esp + 0x2c], 0x400
je 0x439916
mov edi, dword [edi + 4]
push 0
push 1
push 0xf1
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x1f4]
push eax
mov byte [esp + 0x454], 0x1c
call fcn.004091f4
lea eax, [esp + 0x1c]
call fcn.00409c11
xor ebx, ebx
jmp 0x439806
lea eax, [esp + 0x214]
push eax
mov byte [esp + 0x454], 0x1b
call fcn.004091f4
lea eax, [esp + 0x19c]
push eax
mov byte [esp + 0x454], 3
call fcn.004091f4
xor eax, eax
lea edi, [esp + 0x10]
stosb byte es:[edi], al
push dword [esp + 0x10]
lea eax, [esp + 0x178]
push str.elements2
call fcn.00409480
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x174]
push eax
lea edi, [esp + 0x44]
mov byte [esp + 0x454], 0x24
call fcn.0040934e
push eax
lea ecx, [esp + 0x238]
mov byte [esp + 0x454], 0x25
call fcn.0040a6c2
cmp byte [esp + 0x40], bl
je 0x4399bd
mov byte [esp + 0x40], bl
push ebx
push 1
lea esi, [esp + 0x17c]
mov byte [esp + 0x458], 3
call fcn.0040115a
movzx eax, byte [esp + 0x234]
neg eax
sbb eax, eax
mov edi, method.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.virtual_52
test edi, eax
je 0x439afe
lea eax, [esp + 0x238]
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x10]
lea eax, [esp + 0x1c]
call fcn.004096f1
mov eax, dword [esp + 0x254]
add eax, 9
cmp eax, ebx
je 0x439a18
add eax, 0xfffffff7
jmp 0x439a1a
xor eax, eax
mov esi, dword [eax + 4]
mov eax, dword [esp + 0x1c]
cmp eax, esi
je 0x439afe
add eax, 0x1c
push eax
lea ecx, [esp + 0x1f8]
call fcn.00409166
push str.STATIC
lea eax, [esp + 0x1c0]
push eax
mov byte [esp + 0x458], 0x26
call fcn.00401f7a
push 0x44df68
lea eax, [esp + 0x1dc]
push eax
mov dword [esp + 0x20], 0x14a
mov dword [esp + 0x30], 0xe
mov dword [esp + 0x40], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], 0x10000000
call fcn.00401f7a
lea eax, [esp + 0x1f4]
mov dword [esp + 0x24], eax
mov byte [esp + 0x20], 1
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x1f0]
lea edx, [esp + 0x1d4]
mov byte [esp + 0x468], 0x27
call fcn.0043851e
add esp, 0x18
cmp byte [esp + 0x20], bl
je 0x439adb
mov byte [esp + 0x20], bl
lea eax, [esp + 0x1f4]
push eax
mov byte [esp + 0x454], 3
call fcn.004091f4
lea eax, [esp + 0x1c]
call fcn.00409c11
jmp 0x439a1d
movzx eax, byte [esp + 0x258]
neg eax
sbb eax, eax
test edi, eax
je 0x43a71d
push 0x48
call fcn.0041b8c3
pop ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x450], 0x28
cmp eax, ebx
je 0x439b3b
push ebx
push ebx
push eax
mov edi, str.STATIC
call fcn.0043065e
mov esi, eax
jmp 0x439b3d
xor esi, esi
mov ecx, esi
mov byte [esp + 0x450], 3
call fcn.00430264
push ebx
push 2
push 0x1a3
push 0x10000010
push 0x44df68
mov eax, 0xee
xor ecx, ecx
call fcn.004304a9
mov byte [esp + 0x2d4], bl
lea eax, [esp + 0x25c]
mov byte [esp + 0x450], 0x29
mov dword [esp + 0x34], eax
lea ecx, [esp + 0x34]
lea eax, [esp + 0x10]
call fcn.004096f1
mov eax, dword [esp + 0x278]
add eax, 9
cmp eax, ebx
je 0x439ba4
add eax, 0xfffffff7
jmp 0x439ba6
xor eax, eax
mov eax, dword [eax + 4]
mov dword [esp + 0xe4], eax
mov dword [esp + 0x3c], 0xfb
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0xe4]
je 0x43a71d
add eax, 0x1c
push eax
lea ecx, [esp + 0x1f8]
call fcn.00409166
lea eax, [esp + 0x2b4]
push eax
mov byte [esp + 0x454], 0x2a
call fcn.004091b1
xor eax, eax
mov byte [esp + 0x450], 0x2b
lea edi, [esp + 0xc4]
stosb byte es:[edi], al
push dword [esp + 0xc4]
lea eax, [esp + 0x94]
push 0x451984
call fcn.00409480
lea edx, [esp + 0x90]
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x450], 0x2c
call fcn.0040927a
push eax
lea edi, [esp + 0x2b8]
call fcn.0040922c
push ebx
push 1
lea esi, [esp + 0x98]
mov byte [esp + 0x458], 0x2b
call fcn.0040115a
push str.BUTTON
lea eax, [esp + 0x1c0]
push eax
call fcn.00401f7a
push 0xd
pop eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x30], eax
push 0x44df68
lea eax, [esp + 0x1dc]
push eax
mov dword [esp + 0x40], 0xb
mov dword [esp + 0x34], 3
call fcn.00401f7a
lea eax, [esp + 0x1f4]
mov dword [esp + 0x44], eax
mov byte [esp + 0x40], 1
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x1f0]
lea edx, [esp + 0x1d4]
mov byte [esp + 0x468], 0x2d
call fcn.0043851e
add esp, 0x18
mov byte [esp + 0x450], 0x2b
mov esi, eax
cmp byte [esp + 0x40], bl
je 0x439cfe
mov byte [esp + 0x40], bl
mov eax, dword [esi + 4]
push ebx
push 1
push 0xf1
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea edi, [esp + 0xf0]
call fcn.00407a6c
add dword [esp + 0x3c], 0xf
mov byte [esp + 0x450], 0x2e
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x2c]
shr eax, 0x1c
and al, 1
mov byte [esp + 0x10d], al
mov dword [esp + 0x110], ecx
cmp al, bl
jne 0x439d5a
cmp dword [0x469448], ebx
jne 0x439d63
push 1
mov eax, esi
call fcn.004302d2
lea eax, [esp + 0x2b4]
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x1c]
lea eax, [esp + 0x34]
call fcn.004096f1
mov eax, dword [esp + 0x2d0]
add eax, 9
cmp eax, ebx
je 0x439d8e
add eax, 0xfffffff7
jmp 0x439d90
xor eax, eax
mov eax, dword [eax + 4]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x34]
cmp eax, dword [esp + 0x18]
je 0x43a6c7
add eax, 0x1c
push eax
lea ecx, [esp + 0x1a0]
call fcn.00409166
sub esp, 0x1c
mov byte [esp + 0x46c], 0x2f
mov ebx, esp
mov dword [esp + 0x38], esp
call fcn.0043345c
lea ecx, [esp + 0x2b4]
call fcn.00431dbf
add esp, 0x1c
push str.9fe8oiOEygu
lea eax, [esp + 0x29c]
push eax
lea eax, [esp + 0x98]
push eax
mov byte [esp + 0x45c], 0x30
call fcn.00407179
add esp, 0xc
lea ecx, [esp + 0x4c]
push ecx
mov ecx, eax
mov byte [esp + 0x454], 0x31
call fcn.00433776
pop ecx
push eax
lea eax, [esp + 0x29c]
push eax
lea eax, [esp + 0x284]
push eax
mov byte [esp + 0x45c], 0x32
call fcn.004071d2
add esp, 0xc
push 0
push 1
lea ecx, [esp + 0x54]
call fcn.00401722
push 0
push 1
lea ecx, [esp + 0x98]
mov byte [esp + 0x458], 0x35
call fcn.00401722
lea eax, [esp + 0x334]
push eax
call fcn.00407aa2
push 0x44df68
lea esi, [esp + 0x50]
mov byte [esp + 0x454], 0x36
call fcn.004018f6
xor eax, eax
mov byte [esp + 0x450], 0x37
lea edi, [esp + 0xcc]
stosb byte es:[edi], al
push dword [esp + 0xcc]
lea eax, [esp + 0x6c]
push str.lanr
call fcn.00409480
mov eax, esi
push eax
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x45c], 0x38
call fcn.004094a6
mov byte [esp + 0x450], 0x39
push 0xffffffffffffffff
lea ecx, [esp + 0x338]
push ecx
xor ebx, ebx
call fcn.004010d2
push ebx
push 1
lea esi, [esp + 0x98]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x70]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x54]
mov byte [esp + 0x458], 0x36
call fcn.0040115a
cmp dword [esp + 0x348], ebx
je 0x43a678
push 0x44df68
lea esi, [esp + 0x50]
call fcn.004018f6
xor eax, eax
mov byte [esp + 0x450], 0x3a
lea edi, [esp + 0xd4]
stosb byte es:[edi], al
push dword [esp + 0xd4]
lea eax, [esp + 0x6c]
push 0x451998
call fcn.00409480
mov eax, esi
push eax
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x45c], 0x3b
call fcn.004094a6
push 0xffffffffffffffff
lea ecx, [esp + 0x354]
push ecx
mov byte [esp + 0x458], 0x3c
call fcn.004010d2
xor edi, edi
push edi
push 1
lea esi, [esp + 0x98]
call fcn.0040115a
push edi
push 1
lea esi, [esp + 0x70]
call fcn.0040115a
push edi
push 1
lea esi, [esp + 0x54]
mov byte [esp + 0x458], 0x36
call fcn.0040115a
push 0x44df68
lea esi, [esp + 0x50]
call fcn.004018f6
xor eax, eax
mov byte [esp + 0x450], 0x3d
lea edi, [esp + 0xdc]
stosb byte es:[edi], al
push dword [esp + 0xdc]
lea eax, [esp + 0x6c]
push 0x45199c
call fcn.00409480
mov eax, esi
push eax
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x45c], 0x3e
call fcn.004094a6
push 0xffffffffffffffff
lea ecx, [esp + 0x370]
push ecx
mov byte [esp + 0x458], 0x3f
call fcn.004010d2
xor edi, edi
push edi
push 1
lea esi, [esp + 0x98]
call fcn.0040115a
push edi
push 1
lea esi, [esp + 0x70]
call fcn.0040115a
mov byte [esp + 0x450], 0x36
push edi
push 1
lea esi, [esp + 0x54]
call fcn.0040115a
push 0x44df68
lea esi, [esp + 0x50]
call fcn.004018f6
xor eax, eax
mov byte [esp + 0x450], 0x40
lea edi, [esp + 0xb8]
stosb byte es:[edi], al
push dword [esp + 0xb8]
lea eax, [esp + 0x6c]
push 0x4519a0
call fcn.00409480
mov eax, esi
push eax
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x45c], 0x41
call fcn.004094a6
or edi, 0xffffffff
push edi
lea ecx, [esp + 0x38c]
push ecx
mov byte [esp + 0x458], 0x42
call fcn.004010d2
push ebx
push 1
lea esi, [esp + 0x98]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x70]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x54]
mov byte [esp + 0x458], 0x36
call fcn.0040115a
cmp dword [esp + 0x380], ebx
je 0x43a151
xor edi, edi
lea eax, [esp + 0x36c]
call fcn.0040192d
cmp word [eax], 0x3f
push 0xffffffffffffffff
jne 0x43a140
lea eax, [esp + 0x370]
push eax
inc ebx
lea esi, [esp + 0x98]
call fcn.004019c2
mov byte [esp + 0x450], 0x43
push 0xffffffffffffffff
jmp 0x43a1a7
lea eax, [esp + 0x3a8]
push eax
lea eax, [esp + 0x374]
jmp 0x43a180
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x338]
mov dword [esp + 0x20], 0x2f
call fcn.0040204e
push edi
cmp eax, edi
jne 0x43a187
lea eax, [esp + 0x3a8]
push eax
xor ebx, ebx
lea eax, [esp + 0x33c]
call fcn.004010d2
jmp 0x43a1cd
lea ebx, [eax + 1]
lea eax, [esp + 0x338]
push eax
lea esi, [esp + 0x98]
call fcn.004019c2
mov byte [esp + 0x450], 0x44
push edi
lea ecx, [esp + 0x3a8]
push ecx
xor ebx, ebx
call fcn.004010d2
push ebx
push 1
lea esi, [esp + 0x98]
mov byte [esp + 0x458], 0x36
call fcn.0040115a
push 0x44df68
lea esi, [esp + 0x50]
call fcn.004018f6
xor eax, eax
mov byte [esp + 0x450], 0x45
lea edi, [esp + 0xc0]
stosb byte es:[edi], al
push dword [esp + 0xc0]
lea eax, [esp + 0x6c]
push 0x4519a4
call fcn.00409480
mov eax, esi
push eax
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x45c], 0x46
call fcn.004094a6
push 0xffffffffffffffff
lea ecx, [esp + 0x41c]
push ecx
xor ebx, ebx
mov byte [esp + 0x458], 0x47
call fcn.004010d2
xor edi, edi
push ebx
inc edi
push edi
lea esi, [esp + 0x98]
call fcn.0040115a
push ebx
push edi
lea esi, [esp + 0x70]
call fcn.0040115a
push ebx
push edi
lea esi, [esp + 0x54]
mov byte [esp + 0x458], 0x36
call fcn.0040115a
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x284]
push eax
lea ecx, [esp + 0x3cc]
call fcn.0040150a
lea edx, [esp + 0x27c]
lea ecx, [esp + 0x90]
call fcn.0043f9c7
lea ecx, [esp + 0x3dc]
push ecx
mov byte [esp + 0x454], 0x48
call fcn.00401918
push ebx
push edi
lea esi, [esp + 0x98]
call fcn.0040115a
mov byte [esp + 0x174], bl
mov byte [esp + 0x450], 0x49
or dword [esp + 0x1c], 0xffffffff
xor eax, eax
lea edi, [esp + 0xe0]
stosb byte es:[edi], al
push dword [esp + 0xe0]
lea eax, [esp + 0x6c]
push 0x451704
call fcn.00409480
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x1a4]
mov byte [esp + 0x458], 0x4a
call fcn.004097a4
push ebx
push 1
lea esi, [esp + 0x70]
mov dword [esp + 0x404], eax
mov byte [esp + 0x458], 0x49
call fcn.0040115a
xor eax, eax
lea edi, [esp + 0xc8]
stosb byte es:[edi], al
push dword [esp + 0xc8]
lea eax, [esp + 0x6c]
push 0x451708
call fcn.00409480
lea eax, [esp + 0x68]
push eax
lea edi, [esp + 0xec]
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x454], 0x4b
call fcn.004093a2
push eax
lea ecx, [esp + 0x178]
mov byte [esp + 0x454], 0x4c
call fcn.0040a6c2
cmp byte [esp + 0xe8], bl
je 0x43a38b
mov byte [esp + 0xe8], bl
push ebx
push 1
lea esi, [esp + 0x70]
mov byte [esp + 0x458], 0x49
call fcn.0040115a
movzx eax, byte [esp + 0x174]
neg eax
sbb eax, eax
test eax, method.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.virtual_52
je 0x43a650
lea eax, [esp + 0x178]
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x1c]
lea eax, [esp + 0x48]
call fcn.004096f1
lea ecx, [esp + 0x1c]
lea eax, [esp + 0xd8]
call fcn.004096da
mov eax, dword [esp + 0x48]
cmp eax, dword [esp + 0xd8]
je 0x43a650
add eax, 0x1c
push eax
lea ecx, [esp + 0x218]
call fcn.00409166
lea edi, [esp + 0x2dc]
call fcn.00407bac
push 0x44df68
lea esi, [esp + 0x50]
mov byte [esp + 0x454], 0x4e
call fcn.004018f6
xor eax, eax
mov byte [esp + 0x450], 0x4f
lea edi, [esp + 0xd0]
stosb byte es:[edi], al
push dword [esp + 0xd0]
lea eax, [esp + 0x6c]
push 0x44e138
call fcn.00409480
mov eax, esi
push eax
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x220]
mov byte [esp + 0x45c], 0x50
call fcn.004094a6
lea ecx, [esp + 0x2dc]
push ecx
mov byte [esp + 0x454], 0x51
call fcn.00401918
push ebx
push 1
lea esi, [esp + 0x98]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x70]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x54]
mov byte [esp + 0x458], 0x4e
call fcn.0040115a
cmp dword [esp + 0x2f0], ebx
je 0x43a621
push 0x44df68
lea esi, [esp + 0x50]
call fcn.004018f6
xor eax, eax
mov byte [esp + 0x450], 0x52
lea edi, [esp + 0xbc]
stosb byte es:[edi], al
push dword [esp + 0xbc]
lea eax, [esp + 0x6c]
push str.type
call fcn.00409480
mov eax, esi
push eax
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x220]
mov byte [esp + 0x45c], 0x53
call fcn.004094a6
lea ecx, [esp + 0x2f8]
push ecx
mov byte [esp + 0x454], 0x54
call fcn.00401918
push ebx
push 1
lea esi, [esp + 0x98]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x70]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x54]
mov byte [esp + 0x458], 0x4e
call fcn.0040115a
cmp dword [esp + 0x30c], ebx
je 0x43a621
push 0x44df68
lea esi, [esp + 0x118]
call fcn.004018f6
xor eax, eax
mov byte [esp + 0x450], 0x55
lea edi, [esp + 0x20]
stosb byte es:[edi], al
push dword [esp + 0x20]
lea eax, [esp + 0x134]
push str.command
call fcn.00409480
mov eax, esi
push eax
lea eax, [esp + 0x134]
push eax
lea eax, [esp + 0x160]
push eax
lea ecx, [esp + 0x220]
mov byte [esp + 0x45c], 0x56
call fcn.004094a6
lea ecx, [esp + 0x314]
push ecx
mov byte [esp + 0x454], 0x57
call fcn.00401918
push ebx
push 1
lea esi, [esp + 0x160]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x138]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x11c]
mov byte [esp + 0x458], 0x4e
call fcn.0040115a
lea eax, [esp + 0x2dc]
push eax
lea eax, [esp + 0x404]
call fcn.00407c26
lea edi, [esp + 0x2dc]
call fcn.00407bc8
lea eax, [esp + 0x214]
push eax
mov byte [esp + 0x454], 0x49
call fcn.004091f4
lea eax, [esp + 0x48]
call fcn.00409c11
jmp 0x43a3de
lea eax, [esp + 0x334]
push eax
lea eax, [esp + 0xf8]
call fcn.00407d5b
lea esi, [esp + 0x174]
mov byte [esp + 0x450], 0x36
call fcn.0040808c
lea edi, [esp + 0x334]
call fcn.00407b31
push ebx
push 1
lea ecx, [esp + 0x284]
call fcn.00401722
push ebx
push 1
lea ecx, [esp + 0x2a0]
call fcn.00401722
lea eax, [esp + 0x19c]
push eax
mov byte [esp + 0x454], 0x2e
call fcn.004091f4
lea eax, [esp + 0x34]
call fcn.00409c11
xor ebx, ebx
jmp 0x439d97
lea eax, [esp + 0xf0]
push eax
mov eax, 0x4694a8
call fcn.00407e35
lea eax, [esp + 0xf0]
call fcn.00407a57
lea eax, [esp + 0x2b4]
push eax
mov byte [esp + 0x454], 0x2a
call fcn.004091f4
lea eax, [esp + 0x1f4]
push eax
mov byte [esp + 0x454], 0x29
call fcn.004091f4
lea eax, [esp + 0x10]
call fcn.00409c11
jmp 0x439bb8
push ebx
push 1
lea esi, [esp + 0x1e0]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x1c4]
call fcn.0040115a
lea esi, [esp + 0x234]
mov byte [esp + 0x450], bl
call fcn.0040808c
or dword [esp + 0x450], 0xffffffff
lea esi, [esp + 0x258]
call fcn.0040808c
mov ecx, dword [esp + 0x448]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x430]
xor ecx, esp
call fcn.0041b811
mov esp, ebp
pop ebp
ret