Function at 0x416a30
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
push edi
push 7
push dword [0x75d8b8]
mov ebx, ecx
push 0x691d44
push 0x98
push 0x1f6
call dword [0x64ea60]
push eax
mov dword [ebx], eax
call dword [0x64ea5c]
push 0
push 0
push 0
push 0
push dword [ebx]
mov dword [0x75d6f8], eax
call dword [0x64ea58]
push dword [ebx]
call dword [0x64ea54]
push 0xff
push 0x82604d
push 2
push eax
call dword [0x64ea50]
push dword [ebx]
push 0x96
push 0x1f4
push 1
push 1
call dword [0x64ea4c]
mov edi, eax
push 0
push edi
call dword [0x64ea48]
push 0xff
push 0xffffff
push edi
call dword [0x64ea44]
push edi
push 0x5a
push 0x1cc
push 0x14
push 0x14
call dword [0x64ea40]
mov esi, eax
push 1
push esi
call dword [0x64ea3c]
push 1
push esi
call dword [0x64ea38]
push 1
push esi
call dword [0x64ea34]
push 0
push esi
call dword [0x64ea30]
push 0
push 0xa
push str.Microsoft_YaHei
call dword [0x64ea80]
push eax
push esi
call dword [0x64eb14]
mov edx, 0x1402
lea ecx, [ebp - 0x20]
call fcn.004475d0
cmp dword [eax + 0x14], 8
jb 0x416b27
mov eax, dword [eax]
push eax
push esi
call dword [0x64eac8]
mov edx, dword [ebp - 0xc]
cmp edx, 8
jb 0x416b69
mov ecx, dword [ebp - 0x20]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x416b5f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416dc9
push edx
push ecx
call fcn.005b978b
add esp, 8
push edi
push 5
push 0x1cc
push 0x7d
push 0x14
call dword [0x64eacc]
push 1
push eax
mov dword [ebx + 4], eax
call dword [0x64ead0]
push 0x64
push dword [ebx + 4]
call dword [0x64ead4]
push 5
push dword [ebx + 4]
call dword [0x64ead8]
push 0x32
push dword [ebx + 4]
call dword [0x64eadc]
push 0
push 0
push dword [ebx + 4]
call dword [0x64eae0]
push 0
push dword [ebx + 4]
call dword [0x64eae4]
mov edi, dword [0x64ea34]
push 1
push dword [ebx + 4]
call edi
push 0
push dword [ebx + 4]
call dword [0x64ea48]
push 0xff
push 0xc0c0c0
push dword [ebx + 4]
call dword [0x64ea44]
push dword [ebx + 4]
call dword [0x64eae8]
mov esi, eax
push 1
push esi
call edi
push 0
push esi
call dword [0x64eaec]
push esi
call dword [0x64eaf0]
push 0xff
push 0x8000
push 1
push eax
call dword [0x64ea50]
mov eax, dword [ebx]
push 0xc
mov dword [ebp - 4], eax
call fcn.00488d56
mov edi, eax
add esp, 4
mov dword [ebp - 8], edi
test edi, edi
je 0x416c56
xorps xmm0, xmm0
movq qword [edi], xmm0
mov dword [edi + 8], 0
mov dword [edi], vtable.bind_event_cpp__int__class_Dlg_Decrypt__unsigned_char____cdecl_Dlg_Decrypt::__int__unsigned_int__long_int__int___.0
mov dword [edi + 4], ebx
mov dword [edi + 8], 0x416dd0
jmp 0x416c58
xor edi, edi
push 0x114
call fcn.00488d56
mov esi, eax
add esp, 4
mov dword [ebp - 8], esi
test esi, esi
je 0x416ca4
push str.Dlg_Decrypt::OnWndTimer
lea eax, [esi + 0x10]
mov dword [esi], vtable.xc_event.0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
push 0x104
mov byte [eax], 0
push eax
mov dword [esi + 4], 0
call fcn.005fdd1e
add esp, 0xc
jmp 0x416ca6
xor esi, esi
mov dword [esi + 8], edi
mov edi, dword [ebp - 4]
push edi
call dword [0x64ebf0]
push esi
push 0x113
push edi
test eax, eax
je 0x416cc6
call dword [0x64ebec]
jmp 0x416ccc
call dword [0x64ebe8]
test eax, eax
jne 0x416cd6
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, dword [ebx]
push 0xc
mov dword [ebp - 4], eax
call fcn.00488d56
mov edi, eax
add esp, 4
mov dword [ebp - 8], edi
test edi, edi
je 0x416d0e
xorps xmm0, xmm0
movq qword [edi], xmm0
mov dword [edi + 8], 0
mov dword [edi], vtable.bind_event_cpp__int__class_Dlg_Decrypt__unsigned_char____cdecl_Dlg_Decrypt::__int__unsigned_int__unsigned_int__long_int__int___.0
mov dword [edi + 4], ebx
mov dword [edi + 8], 0x416e20
jmp 0x416d10
xor edi, edi
push 0x114
call fcn.00488d56
mov esi, eax
add esp, 4
mov dword [ebp - 8], esi
test esi, esi
je 0x416d5c
push str.Dlg_Decrypt::OnWndProc
lea eax, [esi + 0x10]
mov dword [esi], vtable.xc_event.0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
push 0x104
mov byte [eax], 0
push eax
mov dword [esi + 4], 0
call fcn.005fdd1e
add esp, 0xc
jmp 0x416d5e
xor esi, esi
mov dword [esi + 8], edi
mov edi, dword [ebp - 4]
push edi
call dword [0x64ebf0]
push esi
push 0x7002
push edi
test eax, eax
je 0x416d7e
call dword [0x64ebec]
jmp 0x416d84
call dword [0x64ebe8]
test eax, eax
jne 0x416d8e
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
push 0xa
push 0xc8
push dword [ebx]
call dword [0x64eaf4]
push 0
push 0
push ebx
push 0x416e90
push 0
push 0
call fcn.005fdc83
add esp, 0x18
push eax
call dword [0x64e450]
push dword [ebx]
call dword [0x64eaf8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.005f9639
int3