Function at 0x428730
Capabilities:
Contain obfuscated stackstrings
Get graphical window text
Parse credit card information
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b8eec
mov eax, dword fs:[0]
push eax
sub esp, 0x3a0
mov eax, dword [0x587614]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x320], ebx
mov esi, dword [0x58cfd8]
push ecx
mov ecx, esp
push 0x4d9c3c
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
lea ecx, [esi + 0x890]
call fcn.00425000
push str.CMYK
lea ecx, [ebp - 0x374]
mov dword [ebp - 0x390], eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.ALL_WHITE
lea ecx, [ebp - 0x370]
mov dword [ebp - 4], 0
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push 0x4d9cb8
lea ecx, [ebp - 0x36c]
mov dword [ebp - 4], 1
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.CMYKWW
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KCLcMLmY
lea ecx, [ebp - 0x364]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KCWMWY
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 4
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YKLcLmMC
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 5
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YKWWMC
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 6
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.ALL_WHITE
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 7
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KCMYWW
lea ecx, [ebp - 0x34c]
mov byte [ebp - 4], 8
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 9
push dword [sym.imp.mfc140u.dll_Ordinal_296]
push 1
push 4
push eax
call fcn.004b678f
push str.YMCKWW
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKLcLmWW
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0xb
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.CLkRYMK
lea ecx, [ebp - 0x35c]
mov byte [ebp - 4], 0xc
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x358]
mov byte [ebp - 4], 0xd
push dword [sym.imp.mfc140u.dll_Ordinal_296]
push 1
push 4
push eax
call fcn.004b678f
push str.mKpKCYMLk
lea ecx, [ebp - 0x398]
mov byte [ebp - 4], 0xe
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0xf
push dword [sym.imp.mfc140u.dll_Ordinal_296]
push 1
push 4
push eax
call fcn.004b678f
push str.CMYKLcLmLk
lea ecx, [ebp - 0x37c]
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.CMYKWWW
lea ecx, [ebp - 0x378]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKxRBx
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKWWWW
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x13
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKKCMY
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x14
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.WWWWKCMY
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x15
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.ALL_WHITE
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YWWWWCMK
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x17
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.LLkLmLcLkKCMY
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x18
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.WWWWKCMY
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x19
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKKCMY
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x1a
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x88]
push str.WLmLcWKCMY
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.ALL_WHITE
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKWWWW
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x1d
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YWWWWCMK
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KCMYWWWW
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x1f
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKLcLmLkLLk
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x20
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMKROxxC
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x21
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKWWWW
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x22
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKKCMY
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x23
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKLcLmWW
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.WWWWKCMY
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x25
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YWWWWCMK
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x26
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KCMYLkLcLmLLk
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KCMYWWWW
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KCMYKCMY
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x29
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KCMYWLcLmW
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x2a
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YLmLcMCLLkLkxK
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x2b
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YWWMCWWK
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2c
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YYMMCCKK
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YLmLcMCWWK
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.ALL_WHITE
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x2f
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KCMYWWWW
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 0x30
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KCMYcmWW
lea ecx, [ebp - 0x324]
mov byte [ebp - 4], 0x31
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKWWWW
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x32
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKLcLmWW
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x33
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.ALL_WHITE
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x34
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKWW
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 0x35
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x380]
mov byte [ebp - 4], 0x36
push dword [sym.imp.mfc140u.dll_Ordinal_296]
push 1
push 4
push eax
call fcn.004b678f
push str.KCMYcmWW
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], 0x37
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.CMYKWWWW
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.CYLcKxMLkLLkLm
lea ecx, [ebp - 0x344]
mov byte [ebp - 4], 0x39
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.mKCMYpKLcLmLk
lea ecx, [ebp - 0x334]
mov byte [ebp - 4], 0x3a
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
mov byte [ebp - 4], 0x3b
push str.mKxLkLLkCMLcLmY
lea ecx, [ebp - 0xe4]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KWWCMWWY
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x3c
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.WWWWKCMY
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x3d
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KKCCMMYY
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x3e
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKKCMY
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x3f
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.KWWCMLcLmY
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x40
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.ALL_WHITE
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x41
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.GrLLkYLcLmOrKMLkCx
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x42
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.WWWWWWMYCK
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x43
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.CKYCMMMYCK
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x44
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.WxxWWWMYCK
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x45
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x46
push dword [sym.imp.mfc140u.dll_Ordinal_296]
push 1
push 4
push eax
call fcn.004b678f
push str.COrYLcKxMLkGrLLkLm
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x47
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.CWYWKMWWWW
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x48
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.CMYCKMKCYM
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x49
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x54]
push str.CWYWKMxWxW
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x4b
push dword [sym.imp.mfc140u.dll_Ordinal_296]
push 1
push 4
push eax
call fcn.004b678f
push str.YMCKWWWWVV
lea ecx, [ebp - 0x38c]
mov byte [ebp - 4], 0x4c
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.YMCKLcLmWWVV
lea ecx, [ebp - 0x388]
mov byte [ebp - 4], 0x4d
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
push str.mKpKLkLLkCMLcLmYV
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0x4e
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
mov eax, dword [ebx + 0x750]
mov esi, 2
push 0
push 0
push 0x14b
push dword [ebx + 0x6f0]
mov byte [ebp - 4], 0x4f
mov dword [ebp - 0x338], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x58cfd8]
push dword [eax + 0x894]
call fcn.00473090
push eax
call fcn.004189e0
mov ecx, dword [0x58cfd8]
mov ebx, eax
push dword [ecx + 0x894]
call fcn.00473030
mov ecx, dword [ebp - 0x390]
lea edi, [ebp - 0x374]
add esp, 0xc
cmp ecx, 4
jne 0x428e86
lea esi, [ecx - 3]
cmp eax, 0x61
jne 0x429178
lea esi, [ecx - 2]
jmp 0x429178
cmp ecx, 6
jne 0x428f51
lea edi, [ebp - 0x36c]
cmp eax, 0x3f
je 0x428f46
cmp eax, 0x25
je 0x428f46
cmp eax, 0x50
je 0x428f39
cmp eax, 0x52
je 0x428f39
cmp eax, 0x5d
je 0x428f39
cmp eax, 0x3afc
je 0x428ed3
cmp eax, 0x3bc9
je 0x428ed3
cmp eax, 0x3bcb
jne 0x428ee3
mov esi, 1
lea edi, [ebp - 0x34c]
jmp 0x429178
cmp eax, 0x3c2b
je 0x428efd
cmp eax, 0x3c2c
je 0x428efd
cmp eax, 0x3c2d
jne 0x428f08
mov esi, 1
lea edi, [ebp - 0x354]
jmp 0x429178
cmp eax, 0x64
jne 0x428f1b
lea esi, [eax - 0x63]
lea edi, [ebp - 0x35c]
jmp 0x429178
cmp eax, 0x67
je 0x428f29
cmp eax, 0x68
jne 0x429178
mov esi, 1
lea edi, [ebp - 0x398]
jmp 0x429178
mov esi, 3
lea edi, [ebp - 0x38]
jmp 0x429178
lea edi, [ebp - 0x364]
jmp 0x429178
cmp ecx, 7
jne 0x428f61
lea edi, [ebp - 0x37c]
jmp 0x429178
cmp ecx, 8
jne 0x429147
cmp eax, 0x43
jne 0x428f8e
cmp dword [0x58d210], 0
lea edi, [ebp - 0xac]
mov esi, 5
mov eax, 6
cmovne esi, eax
jmp 0x429178
cmp eax, 0x51
jne 0x428fa1
lea esi, [eax - 0x4a]
lea edi, [ebp - 0xc8]
jmp 0x429178
cmp eax, 0x47
jne 0x428fc5
cmp dword [0x58d210], 0
lea edi, [ebp - 0x94]
mov esi, 6
mov eax, 8
cmovne esi, eax
jmp 0x429178
cmp eax, 0x58
jne 0x428fd5
lea esi, [eax - 0x54]
lea edi, [ebp - 0x74]
jmp 0x429178
cmp eax, 0x4a
je 0x42913a
cmp eax, 0x60
je 0x42913a
cmp eax, 0x4e
je 0x429130
cmp eax, 0x5f
je 0x429130
cmp eax, 0x57
je 0x429123
cmp eax, 0x5e
je 0x429123
cmp eax, 0x6a
je 0x429123
cmp eax, 0x3bc4
je 0x429058
cmp eax, 0x3bc7
je 0x429058
cmp eax, 0x3bc8
je 0x429058
cmp eax, 0x3bc5
je 0x42911e
cmp eax, 0x3bc6
je 0x42911e
cmp eax, 0x3bca
jne 0x429051
lea edi, [ebp - 0x328]
jmp 0x429178
cmp eax, 0x3bcb
jne 0x429068
mov esi, 1
lea edi, [ebp - 0x328]
jmp 0x429178
cmp eax, 0x3bcc
jne 0x42907f
mov esi, 1
lea edi, [ebp - 0x33c]
jmp 0x429178
cmp eax, 0x3bcd
jne 0x4290be
mov ecx, ebx
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x429090
sub ecx, edx
cmp ecx, 0xb
jb 0x4290c5
push 0xb
push str.pcl_DMP_JET
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
add esp, 0xc
test eax, eax
jne 0x4290c5
lea edi, [ebp - 0x38c]
jmp 0x429178
cmp eax, 0x3bce
jne 0x4290d0
lea edi, [ebp - 0x328]
jmp 0x429178
cmp eax, 0x3c28
jne 0x4290e7
mov esi, 1
lea edi, [ebp - 0x384]
jmp 0x429178
cmp eax, 0x3c2e
jne 0x4290fe
mov esi, 1
lea edi, [ebp - 0x340]
jmp 0x429178
cmp eax, 0x66
jne 0x42910e
lea esi, [eax - 0x65]
lea edi, [ebp - 0x344]
jmp 0x429178
cmp eax, 0x69
jne 0x429130
lea esi, [eax - 0x68]
lea edi, [ebp - 0x334]
jmp 0x429178
lea edi, [ebp - 0x2c]
jmp 0x429178
mov esi, 7
lea edi, [ebp - 0xe4]
jmp 0x429178
mov esi, 4
lea edi, [ebp - 0x20]
jmp 0x429178
mov esi, 4
lea edi, [ebp - 0x94]
jmp 0x429178
cmp ecx, 0xa
jne 0x429178
lea esi, [ecx - 6]
cmp eax, 0x59
je 0x429175
cmp eax, 0x62
je 0x429175
cmp eax, 0x5a
je 0x429170
cmp eax, 0x63
je 0x429170
cmp eax, 0x65
jne 0x429178
lea edi, [ebp - 0x330]
jmp 0x429178
lea edi, [ebp - 0x60]
jmp 0x429178
lea edi, [ebp - 0x4c]
call fcn.0043f0d0
test eax, eax
mov ecx, 1
cmovne esi, ecx
xor ebx, ebx
test esi, esi
jle 0x4291b1
nop dword [eax]
push dword [edi + ebx*4]
mov eax, dword [ebp - 0x320]
push 0
push 0x143
push dword [eax + 0x6f0]
call dword [sym.imp.USER32.dll_SendMessageW]
inc ebx
cmp ebx, esi
jl 0x429190
mov eax, dword [0x58cfd8]
push dword [eax + 0x894]
call fcn.00473090
add esp, 4
lea ecx, [ebp - 0x31c]
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_296]
push esi
mov byte [ebp - 4], 0x50
call fcn.00466030
push eax
lea eax, [ebp - 0x32c]
push eax
call fcn.0048ca20
push dword [ebp - 0x32c]
lea eax, [ebp - 0x31c]
mov byte [ebp - 4], 0x51
push 0x58cfe8
push str._sInkChannels_s_
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__18]
add esp, 0x1c
lea ecx, [ebp - 0x3ac]
call sub.mfc140u.dll_CStringArray::CStringArray
push 0x4d9c98
lea eax, [ebp - 0x31c]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x318]
push eax
call fcn.00428470
add esp, 0xc
lea eax, [ebp - 0x314]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [ebp - 0x318]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::GetBuffer]
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wfindfirst64i32]
add esp, 8
lea ecx, [ebp - 0x318]
mov esi, eax
push 0xffffffffffffffff
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::ReleaseBuffer]
mov edi, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wfindnext64i32]
nop
cmp esi, 0xffffffff
je 0x4292c2
lea eax, [ebp - 0x2f0]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x429280
sub eax, edx
xor ecx, ecx
sar eax, 1
mov word [ebp + eax*2 - 0x2f8], cx
lea eax, [ebp - 0x2f0]
push eax
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x3ac]
call sub.mfc140u.dll_CStringArray::SetAtGrow_1
lea eax, [ebp - 0x314]
push eax
push esi
call edi
add esp, 8
test eax, eax
je 0x429270
push esi
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__findclose]
lea eax, [ebp - 0x3ac]
push 0
push eax
call fcn.00492250
mov eax, dword [ebp - 0x3a4]
add esp, 0xc
mov ebx, dword [ebp - 0x320]
xor esi, esi
test eax, eax
jle 0x429327
nop dword [eax]
test esi, esi
js 0x429645
cmp esi, eax
jge 0x429645
mov eax, dword [ebp - 0x3a8]
push dword [eax + esi*4]
push 0
push 0x143
push dword [ebx + 0x6f0]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x3a4]
inc esi
cmp esi, eax
jl 0x4292f0
lea ecx, [ebp - 0x318]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x3ac]
call fcn.004b525c
lea ecx, [ebp - 0x32c]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 0x4f
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x146
push dword [ebx + 0x6f0]
call esi
mov ecx, dword [ebp - 0x338]
xor edx, edx
cmp eax, ecx
push edx
cmovle ecx, edx
push ecx
push 0x14e
push dword [ebx + 0x6f0]
call esi
mov ecx, ebx
call fcn.00429c80
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x330]
mov byte [ebp - 4], 0x4e
push 1
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x38c]
mov byte [ebp - 4], 0x4c
push 2
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x47
push 5
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x42
push 5
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0x3b
push 7
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x334]
mov byte [ebp - 4], 0x3a
push 1
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x344]
mov byte [ebp - 4], 0x39
push 1
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x340]
mov byte [ebp - 4], 0x38
push 1
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x33c]
mov byte [ebp - 4], 0x37
push 1
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x384]
mov byte [ebp - 4], 0x35
push 2
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x32
push 3
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x328]
mov byte [ebp - 4], 0x30
push 2
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x2b
push 5
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x27
push 4
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x20
push 7
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x18
push 8
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 0x12
push 6
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x37c]
mov byte [ebp - 4], 0x10
push 2
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x398]
mov byte [ebp - 4], 0xe
push 2
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov byte [ebp - 4], 0xc
push 2
push 4
lea eax, [ebp - 0x35c]
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0xa
push 2
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x34c]
mov byte [ebp - 4], 8
push 2
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 5
push 3
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x364]
mov byte [ebp - 4], 3
push 2
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 1
push 2
push 4
push eax
call fcn.004b5e39
push dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x374]
mov dword [ebp - 4], 0xffffffff
push 2
push 4
push eax
call fcn.004b5e39
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b61c2
mov esp, ebp
pop ebp
ret
call sub.mfc140u.dll_AfxThrowInvalidArgException
int3