Function at 0x419629
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3484
push edi
lea edi, [ebp - 0x3484]
push 1
call dword [ebx + 0x44]
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x4197bb
push eax
push edi
call fcn.0041c036
cmp eax, 1
jne 0x419672
mov dword [edi], 0x41c437
jmp 0x4196a3
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x4197b9
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea edx, [ecx + 4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
add esp, 0x18
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x4197b9
lea edx, [ebp - 0x2f18]
push edx
lea edx, [ebp - 0x2f68]
push edx
lea edx, [ebp - 0x2fb8]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x4197b9
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x2fb8]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x2f68]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x4197fb
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x41b482
mov dword [ebp - 0x2ec8], 0
cmp dword [esi + 0x270], 0x736f6224
jne 0x4198b2
cmp dword [esi + 0x274], 0x355f6863
jne 0x4198b2
cmp dword [esi + 0x278], 0x4224315f
jne 0x4198b2
cmp dword [esi + 0x27c], 0x6863736f
jne 0x4198b2
cmp dword [esi + 0x280], 0x32505420
jne 0x4198b2
cmp dword [esi + 0x284], 0x4d20302e
jne 0x4198b2
cmp dword [esi + 0x288], 0x29442845
jne 0x4198b2
cmp dword [esi + 0x28c], 0x452f3731
jne 0x4198b2
cmp dword [esi + 0x290], 0x37314344
jne 0x4198b2
cmp dword [esi + 0x294], 0x6e757428
jne 0x4198b2
cmp dword [esi + 0x298], 0x43202965
jne 0x4198b2
cmp word [esi + 0x29c], 0x4e41
jne 0x4198b2
cmp byte [esi + 0x29e], 0
je 0x419972
cmp dword [esi + 0x270], 0x736f6224
jne 0x41a64d
cmp dword [esi + 0x274], 0x355f6863
jne 0x41a64d
cmp dword [esi + 0x278], 0x4224325f
jne 0x41a64d
cmp dword [esi + 0x27c], 0x6863736f
jne 0x41a64d
cmp dword [esi + 0x280], 0x32505420
jne 0x41a64d
cmp dword [esi + 0x284], 0x4d20302e
jne 0x41a64d
cmp dword [esi + 0x288], 0x29442845
jne 0x41a64d
cmp dword [esi + 0x28c], 0x452f3731
jne 0x41a64d
cmp dword [esi + 0x290], 0x37314344
jne 0x41a64d
cmp dword [esi + 0x294], 0x6f747328
jne 0x41a64d
cmp dword [esi + 0x298], 0x20296b63
jne 0x41a64d
cmp dword [esi + 0x29c], 0x4e4143
jne 0x41a64d
push 0
mov dword [ebp - 0x1d9e], esp
push 0
mov dword [ebp - 0x1d9a], esp
push 0
mov dword [ebp - 0x1d96], esp
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x4199b2
cmp eax, 0xe
je 0x4199b2
cmp eax, 0x1a
je 0x4199b2
cmp eax, 0x17
je 0x4199b2
cmp eax, 0x18
je 0x4199b2
cmp eax, 0x1d
jne 0x41a644
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x4199e0
mov dword [ebp - 0x2ec8], 1
jmp 0x41a62e
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x419a08
mov dword [ebp - 0x2ec8], 1
cmp dword [ebp - 0x2ec8], 0
jne 0x41a613
mov dword [ebp - 0x1d92], 0
push 0
push 0
push 0
push 0x40
push 0
push 5
push 0x1020000
push 0
push 4
push 0
push 0x40
push 0
push 5
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 5
push 1
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x5c
mov eax, dword [ebp - 0x1d9e]
mov dword [eax], 0
mov eax, dword [ebp - 0x1d9a]
mov dword [eax], 0
mov eax, dword [ebp - 0x1d96]
mov dword [eax], 0
push 0
push 0
push 0
push 0
push 0
push 5
push 1
push 0
push 0
mov dword [ebp - 0x19c2], esp
push 0x10300
push 0x1000c001
push 0x20000
push 0
push 0xb
push 0
push 0
push 0
push 5
push 0
push 0
mov dword [ebp - 0x19be], esp
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 4
push 0
push 0
push 0
push 5
push 0xffffffffffffffff
push 0
push 4
push 0
push 0
push 0
push 5
push 1
push 1
push 0
mov dword [ebp - 0x19ba], esp
mov dword [ebp - 0x2ec0], 0xf
push 0
push dword [ebp - 0x19be]
push 0xe
call dword [edi]
cmp eax, 0xffffffff
jne 0x419b1b
mov dword [ebp - 0x2ec8], 1
jmp 0x419c5c
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0x1d8e], eax
add dword [ebp - 0x1d8e], 0xfa
lea eax, [ebp - 0x2ebc]
push eax
push dword [ebp - 0x19c2]
push 0xf
call dword [edi]
cmp eax, 0xffffffff
jne 0x419b58
xor eax, eax
mov dword [ebp - 0x2ec8], 1
jmp 0x419c5c
cmp eax, 0
jne 0x419bf5
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x1d8e]
jae 0x419b79
push 2
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x419b31
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2ec0]
jne 0x419afb
mov dword [ebp - 0x2ec8], 1
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2ebc]
mov edx, esp
cmp eax, 0xffffffff
jne 0x419bdf
xor eax, eax
jmp 0x419be9
cmp eax, 0x20
jbe 0x419be9
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0041beda
jmp 0x419c5c
test byte [ebp - 0x2eb7], 0xf
je 0x419c21
push 0x3e8
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec dword [ebp - 0x2ec0]
jne 0x419afb
mov dword [ebp - 0x2ec8], 1
jmp 0x419c5c
movzx eax, byte [ebp - 0x2eb6]
mov ah, byte [ebp - 0x2eb5]
mov dword [ebp - 0x1d86], eax
mov edx, dword [ebp - 0x19ba]
mov byte [edx + 0x42], ah
mov byte [edx + 0x43], al
shr eax, 0x10
mov byte [edx + 0x40], ah
mov byte [edx + 0x41], al
movzx eax, byte [ebp - 0x2eb4]
mov ah, byte [ebp - 0x2eb3]
mov dword [ebp - 0x1d8a], eax
add esp, 0x5c
add esp, 0x2c
add esp, 0x24
cmp dword [ebp - 0x2ec8], 0
jne 0x419cbd
push 0
push dword [ebp - 0x19ba]
push 4
call dword [edi]
push 0xf
call dword [sym.imp.KERNEL32.DLL_Sleep]
push dword [ebp - 0x1d9e]
push dword [ebp - 0x1d86]
push dword [ebp - 0x1d8a]
call fcn.0041b6c8
cmp eax, 0xffffffff
jne 0x419cac
xor eax, eax
mov dword [ebp - 0x2ec8], 1
jmp 0x419cbd
cmp eax, 4
jae 0x419cbd
xor eax, eax
mov dword [ebp - 0x2ec8], 1
cmp dword [ebp - 0x1d92], 0
jne 0x419f62
cmp dword [ebp - 0x2ec8], 0
jne 0x419f62
push 0x9b1a
mov dword [ebp - 0x19b6], esp
push 0x14
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea eax, [ebp - 0x2ebc]
push eax
push 0x1020
push dword [ebp - 0x1d96]
push dword [ebp - 0x19b6]
push 2
push dword [ebp - 0x1d9a]
push dword [ebp - 0x1d9e]
push dword [ebp - 0x1d8a]
call fcn.0041b847
add esp, 4
cmp eax, 0
jne 0x419d9e
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2ebc]
mov edx, esp
cmp eax, 0xffffffff
jne 0x419d6b
xor eax, eax
jmp 0x419d75
cmp eax, 0x20
jbe 0x419d75
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0041beda
mov dword [ebp - 0x2ec8], 1
push 1
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
jmp 0x419f62
cmp eax, 0xffffffff
jne 0x419dc2
mov dword [ebp - 0x2ec8], 1
push 1
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
jmp 0x419f62
cmp byte [ebp - 0x2ebc], 0x5a
jne 0x419f62
cmp eax, 0x1c
jbe 0x419e06
sub eax, 0x1c
lea ecx, [ebp - 0x1b82]
push eax
push ecx
lea ecx, [ebp - 0x2ea0]
lea edx, [ebp - 0x1b82]
mov byte [ebp + eax - 0x1b82], 0
push eax
push ecx
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
call fcn.0041be46
jmp 0x419e0d
mov byte [ebp - 0x1b82], 0
lea eax, [ebp - 0x2eba]
lea ecx, [ebp - 0x1d82]
push 0xb
push eax
push ecx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov byte [ebp - 0x1d77], 0
lea eax, [ebp - 0x1d82]
push 0xb
push eax
call fcn.0041be46
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x419e4f
cmp eax, 0x1a
jne 0x419f62
lea ecx, [ebp - 0x1d82]
push 0
push 0xa0d7325
push 0x203a244e
push 0x505f4944
push 0x55415756
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
lea eax, [ebp - 0x2eae]
lea ecx, [ebp - 0x1c82]
push 4
push eax
push ecx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov byte [ebp - 0x1c7e], 0
lea eax, [ebp - 0x1c82]
push 4
push eax
call fcn.0041be46
lea ecx, [ebp - 0x1c82]
push 0xa
push 0xd732520
push 0x3a244e4f
push 0x49535245
push 0x565f5753
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
cmp byte [ebp - 0x1b82], 0
je 0x419f62
lea ecx, [ebp - 0x1b82]
push 0xa
push 0xd732520
push 0x3a244e4f
push 0x49545049
push 0x52435345
push 0x445f4d45
push 0x54535953
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x419f76
cmp eax, 0x1a
jne 0x41a308
cmp dword [ebp - 0x2ec8], 0
jne 0x41a105
push 0x14
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x9a1a
mov dword [ebp - 0x19b2], esp
lea eax, [ebp - 0x2ebc]
push eax
push 0x1020
push dword [ebp - 0x1d96]
push dword [ebp - 0x19b2]
push 2
push dword [ebp - 0x1d9a]
push dword [ebp - 0x1d9e]
push dword [ebp - 0x1d8a]
call fcn.0041b847
add esp, 4
cmp eax, 0
jne 0x41a03a
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2ebc]
mov edx, esp
cmp eax, 0xffffffff
jne 0x41a017
xor eax, eax
jmp 0x41a021
cmp eax, 0x20
jbe 0x41a021
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0041beda
mov dword [ebp - 0x2ec8], 1
jmp 0x41a105
cmp eax, 0xffffffff
jne 0x41a04e
mov dword [ebp - 0x2ec8], 1
jmp 0x41a105
cmp byte [ebp - 0x2ebc], 0x5a
jne 0x41a105
push 0xa0d
push 0x58322e25
push 0x2058322e
push 0x25205832
push 0x2e252058
push 0x322e2520
push 0x58322e25
push 0x2058322e
push 0x25205832
push 0x2e252058
push 0x322e2520
push 0x3a24474e
push 0x49444f43
push 0x24202445
push 0x4d495424
movzx eax, byte [ebp - 0x2ea7]
push eax
movzx eax, byte [ebp - 0x2ea8]
push eax
movzx eax, byte [ebp - 0x2ea9]
push eax
movzx eax, byte [ebp - 0x2eaa]
push eax
movzx eax, byte [ebp - 0x2eab]
push eax
movzx eax, byte [ebp - 0x2eac]
push eax
movzx eax, byte [ebp - 0x2ead]
push eax
movzx eax, byte [ebp - 0x2eae]
push eax
lea eax, [esp + 0x20]
push eax
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x64
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2ec8], 0
jne 0x41a23a
push 0x14
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x9c1a
mov dword [ebp - 0x19ae], esp
lea eax, [ebp - 0x2ebc]
push eax
push 0x1020
push dword [ebp - 0x1d96]
push dword [ebp - 0x19ae]
push 2
push dword [ebp - 0x1d9a]
push dword [ebp - 0x1d9e]
push dword [ebp - 0x1d8a]
call fcn.0041b847
add esp, 4
cmp eax, 0
jne 0x41a1c6
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2ebc]
mov edx, esp
cmp eax, 0xffffffff
jne 0x41a1a6
xor eax, eax
jmp 0x41a1b0
cmp eax, 0x20
jbe 0x41a1b0
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0041beda
mov dword [ebp - 0x2ec8], 1
jmp 0x41a23a
cmp eax, 0xffffffff
jne 0x41a1d7
mov dword [ebp - 0x2ec8], 1
jmp 0x41a23a
cmp byte [ebp - 0x2ebc], 0x5a
jne 0x41a23a
movzx eax, byte [ebp - 0x2eb9]
mov ah, byte [ebp - 0x2eba]
push 0xa0d
push 0x6425203a
push 0x24524554
push 0x4e554f43
push 0x5f474e49
push 0x4d4d4152
push 0x474f5250
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2ec8], 0
jne 0x41a308
push 0x901a
mov dword [ebp - 0x19aa], esp
push 0x14
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea eax, [ebp - 0x2ebc]
push eax
push 0x1020
push dword [ebp - 0x1d96]
push dword [ebp - 0x19aa]
push 2
push dword [ebp - 0x1d9a]
push dword [ebp - 0x1d9e]
push dword [ebp - 0x1d8a]
call fcn.0041b847
add esp, 4
cmp eax, 0
jne 0x41a29f
mov dword [ebp - 0x2ec8], 1
jmp 0x41a308
cmp eax, 0xffffffff
jne 0x41a2b0
mov dword [ebp - 0x2ec8], 1
jmp 0x41a308
cmp byte [ebp - 0x2ebc], 0x5a
jne 0x41a308
sub eax, 2
lea ecx, [ebp - 0x2eba]
push eax
push ecx
call fcn.0041be46
lea ecx, [ebp - 0x2eba]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x41a4bf
cmp dword [ebp - 0x2ec8], 0
jne 0x41a4bf
mov dword [ebp - 0x1a82], 0x3236
mov dword [ebp - 0x1a42], 0x676156
cmp dword [esi + 0x270], 0x736f6224
jne 0x41a3dc
cmp dword [esi + 0x274], 0x355f6863
jne 0x41a3dc
cmp dword [esi + 0x278], 0x4224315f
jne 0x41a3dc
cmp dword [esi + 0x27c], 0x6863736f
jne 0x41a3dc
cmp dword [esi + 0x280], 0x32505420
jne 0x41a3dc
cmp dword [esi + 0x284], 0x4d20302e
jne 0x41a3dc
cmp dword [esi + 0x288], 0x29442845
jne 0x41a3dc
cmp dword [esi + 0x28c], 0x452f3731
jne 0x41a3dc
cmp dword [esi + 0x290], 0x37314344
jne 0x41a3dc
cmp dword [esi + 0x294], 0x6e757428
jne 0x41a3dc
cmp dword [esi + 0x298], 0x43202965
jne 0x41a3dc
cmp word [esi + 0x29c], 0x4e41
jne 0x41a3dc
cmp byte [esi + 0x29e], 0
je 0x41a478
cmp dword [esi + 0x270], 0x736f6224
jne 0x41a496
cmp dword [esi + 0x274], 0x355f6863
jne 0x41a496
cmp dword [esi + 0x278], 0x4224325f
jne 0x41a496
cmp dword [esi + 0x27c], 0x6863736f
jne 0x41a496
cmp dword [esi + 0x280], 0x32505420
jne 0x41a496
cmp dword [esi + 0x284], 0x4d20302e
jne 0x41a496
cmp dword [esi + 0x288], 0x29442845
jne 0x41a496
cmp dword [esi + 0x28c], 0x452f3731
jne 0x41a496
cmp dword [esi + 0x290], 0x37314344
jne 0x41a496
cmp dword [esi + 0x294], 0x6f747328
jne 0x41a496
cmp dword [esi + 0x298], 0x20296b63
jne 0x41a496
cmp dword [esi + 0x29c], 0x4e4143
jne 0x41a496
mov dword [ebp - 0x1a02], 0x5f676176
mov dword [ebp - 0x19fe], 0x30327074
mov dword [ebp - 0x19fa], 0
push 1
push 0
push 0
lea edx, [esi + 0x6c]
push edx
lea edx, [ebp - 0x1a02]
push edx
lea edx, [ebp - 0x1a42]
push edx
lea edx, [ebp - 0x1a82]
push edx
lea edx, [ebp - 0x1d82]
push edx
call dword [ebx + 0x70]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x41a4dd
cmp eax, 0xe
je 0x41a4dd
cmp eax, 0x1a
je 0x41a4dd
cmp eax, 0x1d
jne 0x41a613
cmp dword [ebp - 0x2ec8], 0
jne 0x41a613
cmp dword [ebp - 0x1d92], 0
jne 0x41a613
cmp byte [0x401003], 8
je 0x41a53e
push 0xa0d24
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2ec8], 1
jmp 0x41a613
mov eax, dword [0x4182ce]
mov dword [ebp - 0x19a6], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0x19a2], eax
push dword [ebp - 0x19a6]
push dword [ebp - 0x19a2]
push 0x172d2
push section..code
call dword [ebx + 0x4c]
mov dword [ebp - 0x199e], 0
mov edx, dword [ebp - 0x199e]
cmp edx, dword [ebp - 0x19a6]
jae 0x41a5b9
add edx, dword [ebp - 0x19a2]
xor ecx, ecx
cmp cl, byte [edx]
jae 0x41a5a9
mov al, byte [ebp + ecx - 0x1d82]
cmp al, 0
je 0x41a5a9
cmp byte [edx + ecx + 1], al
jne 0x41a5a9
inc ecx
jmp 0x41a591
cmp cl, byte [edx]
je 0x41a5b9
add dword [ebp - 0x199e], 0x105
jmp 0x41a57b
mov edx, dword [ebp - 0x199e]
cmp edx, dword [ebp - 0x19a6]
jb 0x41a607
push 0xa0d
push 0x24554345
push 0x5f444554
push 0x524f5050
push 0x55534e55
push 0x5f524f52
push 0x52452420
push 0x24454d49
push 0x54240a0d
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x2ec8], 1
jmp 0x41a607
push dword [ebp - 0x19a2]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
push dword [ebp - 0x1d8a]
call fcn.0041b7c5
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
add esp, 4
add esp, 4
add esp, 4
cmp dword [esi + 0x270], 0x736f6224
jne 0x41a6f5
cmp dword [esi + 0x274], 0x355f6863
jne 0x41a6f5
cmp dword [esi + 0x278], 0x4224335f
jne 0x41a6f5
cmp dword [esi + 0x27c], 0x6863736f
jne 0x41a6f5
cmp dword [esi + 0x280], 0x50574b20
jne 0x41a6f5
cmp dword [esi + 0x284], 0x30303032
jne 0x41a6f5
cmp dword [esi + 0x288], 0x28454d20
jne 0x41a6f5
cmp dword [esi + 0x28c], 0x37312944
jne 0x41a6f5
cmp dword [esi + 0x290], 0x4344452f
jne 0x41a6f5
cmp dword [esi + 0x294], 0x74283731
jne 0x41a6f5
cmp dword [esi + 0x298], 0x29656e75
jne 0x41a6f5
cmp dword [esi + 0x29c], 0x6c2d4b20
jne 0x41a6f5
cmp dword [esi + 0x2a0], 0x656e69
je 0x41a7d2
cmp dword [esi + 0x270], 0x736f6224
jne 0x41b1d6
cmp dword [esi + 0x274], 0x355f6863
jne 0x41b1d6
cmp dword [esi + 0x278], 0x4224345f
jne 0x41b1d6
cmp dword [esi + 0x27c], 0x6863736f
jne 0x41b1d6
cmp dword [esi + 0x280], 0x50574b20
jne 0x41b1d6
cmp dword [esi + 0x284], 0x30303032
jne 0x41b1d6
cmp dword [esi + 0x288], 0x28454d20
jne 0x41b1d6
cmp dword [esi + 0x28c], 0x37312944
jne 0x41b1d6
cmp dword [esi + 0x290], 0x4344452f
jne 0x41b1d6
cmp dword [esi + 0x294], 0x73283731
jne 0x41b1d6
cmp dword [esi + 0x298], 0x6b636f74
jne 0x41b1d6
cmp dword [esi + 0x29c], 0x2d4b2029
jne 0x41b1d6
cmp dword [esi + 0x2a0], 0x656e696c
jne 0x41b1d6
cmp byte [esi + 0x2a4], 0
jne 0x41b1d6
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x41a7fa
cmp eax, 0xe
je 0x41a7fa
cmp eax, 0x1a
je 0x41a7fa
cmp eax, 0x17
je 0x41a7fa
cmp eax, 0x18
je 0x41a7fa
cmp eax, 0x1d
jne 0x41b1d6
push 0x28a0
push 0x1000
push 3
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x41a828
mov dword [ebp - 0x2ec8], 1
jmp 0x41b1d6
push 0x28a0
push 1
push 0
push 0xc
push 0x96
push 0xa
push 0x28
push 7
push 0x1e
push 0x11
push 0
push 0x21
push 0
push 3
push 0
push 7
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x44
cmp eax, 0xffffffff
jne 0x41a86b
mov dword [ebp - 0x2ec8], 1
cmp dword [ebp - 0x2ec8], 0
jne 0x41b1c0
push 0
push 0
push 0
push 0
push 0
push 3
push 0
push 0
push 0x20000
push 0
push 0
push 0
push 0x30000
push 0
push 2
push 0
push 0
push 0
push 3
push 1
push 1
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x58
cmp eax, 0xffffffff
jne 0x41a8ca
mov dword [ebp - 0x2ec8], 1
jmp 0x41b1c0
mov byte [ebp - 0x1d82], 0
mov byte [ebp - 0x1c82], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x41a900
cmp eax, 0xe
je 0x41a900
cmp eax, 0x1a
je 0x41a900
cmp eax, 0x17
je 0x41a900
cmp eax, 0x18
je 0x41a900
cmp eax, 0x1d
jne 0x41b1b0
cmp dword [ebp - 0x2ec8], 0
jne 0x41a93c
push 0
push 0
push 0x1000001
push 0
push 1
push 0
mov dword [ebp - 0x661], esp
push 0
push dword [ebp - 0x661]
push 0xc
call dword [edi]
add esp, 0x18
cmp eax, 0xffffffff
jne 0x41a93c
mov dword [ebp - 0x2ec8], 1
cmp dword [ebp - 0x2ec8], 0
jne 0x41aaad
push 0x9b1a02
lea eax, [ebp - 0x2ebc]
push esp
push 3
push eax
push 0x7d0
push 0x1f4
push 0
push 3
push 0
call fcn.0041b4ab
cmp eax, 0
je 0x41a977
cmp eax, 0xffffffff
jne 0x41a986
mov dword [ebp - 0x2ec8], 1
jmp 0x41aaad
cmp byte [ebp - 0x2ebb], 0x5a
jne 0x41a994
cmp eax, 0x13
jae 0x41aa09
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2ebc]
mov edx, esp
cmp eax, 0xffffffff
jne 0x41a9e6
xor eax, eax
jmp 0x41a9f0
cmp eax, 0x20
jbe 0x41a9f0
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0041beda
mov dword [ebp - 0x2ec8], 1
jmp 0x41aaad
sub eax, 3
xor ecx, ecx
cmp ecx, 0xc
jae 0x41aa28
cmp ecx, eax
jae 0x41aa28
mov dl, byte [ebp + ecx - 0x2eb9]
mov byte [ebp + ecx - 0x1d82], dl
inc ecx
jmp 0x41aa0e
mov byte [ebp + ecx - 0x1d82], 0
sub eax, 0x1e
xor ecx, ecx
cmp ecx, 0x20
jae 0x41aa4f
cmp ecx, eax
jae 0x41aa4f
mov dl, byte [ebp + ecx - 0x2e9f]
mov byte [ebp + ecx - 0x1b82], dl
inc ecx
jmp 0x41aa35
mov byte [ebp + ecx - 0x1b82], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x41aa67
cmp eax, 0x1a
jne 0x41aaad
lea ecx, [ebp - 0x1d82]
push 0
push 0xa0d7325
push 0x203a244e
push 0x505f4944
push 0x55415756
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2ec8], 0
jne 0x41ab25
push 0x9a1a02
lea eax, [ebp - 0x2ebc]
push esp
push 3
push eax
push 0x7d0
push 0x1f4
push 0
push 3
push 0
call fcn.0041b4ab
cmp eax, 0
je 0x41aae4
cmp eax, 0xffffffff
jne 0x41aaf0
mov dword [ebp - 0x2ec8], 1
jmp 0x41ab25
cmp byte [ebp - 0x2ebb], 0x5a
jne 0x41ab25
cmp eax, 0xd
jb 0x41ab25
sub eax, 9
xor ecx, ecx
cmp ecx, 4
jae 0x41ab1d
cmp ecx, eax
jae 0x41ab1d
mov dl, byte [ebp + ecx - 0x2eb3]
mov byte [ebp + ecx - 0x1c82], dl
inc ecx
jmp 0x41ab03
mov byte [ebp + ecx - 0x1c82], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x41ab39
cmp eax, 0x1a
jne 0x41ada0
cmp dword [ebp - 0x2ec8], 0
jne 0x41acea
lea ecx, [ebp - 0x1c82]
push 0xa
push 0xd732520
push 0x3a244e4f
push 0x49535245
push 0x565f5753
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
lea ecx, [ebp - 0x1b82]
push 0xa
push 0xd732520
push 0x3a244e4f
push 0x49545049
push 0x52435345
push 0x445f4d45
push 0x54535953
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
push 0x9c1a02
lea eax, [ebp - 0x2ebc]
push esp
push 3
push eax
push 0x7d0
push 0x1f4
push 0
push 3
push 0
call fcn.0041b4ab
cmp eax, 0
je 0x41ac0a
cmp eax, 0xffffffff
jne 0x41ac19
mov dword [ebp - 0x2ec8], 1
jmp 0x41acea
cmp byte [ebp - 0x2ebb], 0x5a
je 0x41ac94
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2ebc]
mov edx, esp
cmp eax, 0xffffffff
jne 0x41ac74
xor eax, eax
jmp 0x41ac7e
cmp eax, 0x20
jbe 0x41ac7e
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0041beda
mov dword [ebp - 0x2ec8], 1
jmp 0x41acea
movzx eax, word [ebp - 0x2eb9]
xchg ah, al
push 0xa0d
push 0x6425203a
push 0x24524554
push 0x4e554f43
push 0x5f474e49
push 0x4d4d4152
push 0x474f5250
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x30
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2ec8], 0
jne 0x41ada0
push 0x901a02
lea eax, [ebp - 0x2ebc]
push esp
push 3
push eax
push 0x7d0
push 0x1f4
push 0
push 3
push 0
call fcn.0041b4ab
cmp eax, 0
je 0x41ad25
cmp eax, 0xffffffff
jne 0x41ad31
mov dword [ebp - 0x2ec8], 1
jmp 0x41ada0
cmp byte [ebp - 0x2ebb], 0x5a
jne 0x41ada0
sub eax, 3
xor ecx, ecx
cmp ecx, 0x11
jae 0x41ad59
cmp ecx, eax
jae 0x41ad59
mov dl, byte [ebp + ecx - 0x2eb9]
mov byte [ebp + ecx - 0x65d], dl
inc ecx
jmp 0x41ad3f
mov byte [ebp + ecx - 0x65d], 0
lea ecx, [ebp - 0x65d]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x33c8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x33c8]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x41af78
cmp dword [ebp - 0x2ec8], 0
jne 0x41af78
mov dword [ebp - 0x1a82], 0x3236
mov dword [ebp - 0x1a42], 0x676156
cmp dword [esi + 0x270], 0x736f6224
jne 0x41ae78
cmp dword [esi + 0x274], 0x355f6863
jne 0x41ae78
cmp dword [esi + 0x278], 0x4224335f
jne 0x41ae78
cmp dword [esi + 0x27c], 0x6863736f
jne 0x41ae78
cmp dword [esi + 0x280], 0x50574b20
jne 0x41ae78
cmp dword [esi + 0x284], 0x30303032
jne 0x41ae78
cmp dword [esi + 0x288], 0x28454d20
jne 0x41ae78
cmp dword [esi + 0x28c], 0x37312944
jne 0x41ae78
cmp dword [esi + 0x290], 0x4344452f
jne 0x41ae78
cmp dword [esi + 0x294], 0x74283731
jne 0x41ae78
cmp dword [esi + 0x298], 0x29656e75
jne 0x41ae78
cmp dword [esi + 0x29c], 0x6c2d4b20
jne 0x41ae78
cmp dword [esi + 0x2a0], 0x656e69
je 0x41af31
cmp dword [esi + 0x270], 0x736f6224
jne 0x41af4f
cmp dword [esi + 0x274], 0x355f6863
jne 0x41af4f
cmp dword [esi + 0x278], 0x4224345f
jne 0x41af4f
cmp dword [esi + 0x27c], 0x6863736f
jne 0x41af4f
cmp dword [esi + 0x280], 0x50574b20
jne 0x41af4f
cmp dword [esi + 0x284], 0x30303032
jne 0x41af4f
cmp dword [esi + 0x288], 0x28454d20
jne 0x41af4f
cmp dword [esi + 0x28c], 0x37312944
jne 0x41af4f
cmp dword [esi + 0x290], 0x4344452f
jne 0x41af4f
cmp dword [esi + 0x294], 0x73283731
jne 0x41af4f
cmp dword [esi + 0x298], 0x6b636f74
jne 0x41af4f
cmp dword [esi + 0x29c], 0x2d4b2029
jne 0x41af4f
cmp dword [esi + 0x2a0], 0x656e696c
jne 0x41af4f
cmp byte [esi + 0x2a4], 0
jne 0x41af4f
mov dword [ebp - 0x1a02], 0x5f676176
mov dword [ebp - 0x19fe], 0x6e696c6b
mov dword [ebp - 0x19fa], 0x65
push 1
push 0
push 0
lea edx, [esi + 0x6c]
push edx
lea edx, [ebp - 0x1a02]
push edx
lea edx, [ebp - 0x1a42]
push edx
lea edx, [ebp - 0x1a82]
push edx
lea edx, [ebp - 0x1d82]
push edx
call dword [ebx + 0x70]
cmp dword [ebp - 0x2ec8], 0
jne 0x41b0a1
cmp byte [0x401003], 8
je 0x41afcc
push 0xa0d24
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x20
mov dword [ebp - 0x2ec8], 1
jmp 0x41b0a1
mov eax, dword [0x4182ce]
mov dword [ebp - 0x19a6], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0x19a2], eax
push dword [ebp - 0x19a6]
push dword [ebp - 0x19a2]
push 0x172d2
push section..code
call dword [ebx + 0x4c]
mov dword [ebp - 0x199e], 0
mov edx, dword [ebp - 0x199e]
cmp edx, dword [ebp - 0x19a6]
jae 0x41b047
add edx, dword [ebp - 0x19a2]
xor ecx, ecx
cmp cl, byte [edx]
jae 0x41b037
mov al, byte [ebp + ecx - 0x1d82]
cmp al, 0
je 0x41b037
cmp byte [edx + ecx + 1], al
jne 0x41b037
inc ecx
jmp 0x41b01f
cmp cl, byte [edx]
je 0x41b047
add dword [ebp - 0x199e], 0x105
jmp 0x41b009
mov edx, dword [ebp - 0x199e]
cmp edx, dword [ebp - 0x19a6]
jb 0x41b095
push 0xa0d
push 0x24554345
push 0x5f444554
push 0x524f5050
push 0x55534e55
push 0x5f524f52
push 0x52452420
push 0x24454d49
push 0x54240a0d
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0x2ec8], 1
jmp 0x41b095
push dword [ebp - 0x19a2]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x41b0ac
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x17
jne 0x41b0b7
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x18
jne 0x41b0c2
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x41b0e5
cmp eax, 0xe
je 0x41b0e5
cmp eax, 0x17
je 0x41b0e5
cmp eax, 0x18
je 0x41b0e5
cmp eax, 0x1d
jne 0x41b1a5
cmp dword [ebp - 0x2ec8], 0
jne 0x41b1a5
push 0x8201
lea eax, [ebp - 0x2ebc]
push esp
push 2
push eax
push 0x7d0
push 0x1f4
push 0
push 3
push 0
call fcn.0041b4ab
cmp eax, 0
je 0x41b120
cmp eax, 0xffffffff
jne 0x41b12c
mov dword [ebp - 0x2ec8], 1
jmp 0x41b1a5
cmp byte [ebp - 0x2ebb], 0xc2
je 0x41b1a5
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2ebc]
mov edx, esp
cmp eax, 0xffffffff
jne 0x41b187
xor eax, eax
jmp 0x41b191
cmp eax, 0x20
jbe 0x41b191
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.0041beda
mov dword [ebp - 0x2ec8], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x1d
jne 0x41b1b0
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [esi + 0x270], 0x736f6224
jne 0x41b27a
cmp dword [esi + 0x274], 0x355f6863
jne 0x41b27a
cmp dword [esi + 0x278], 0x4224315f
jne 0x41b27a
cmp dword [esi + 0x27c], 0x6863736f
jne 0x41b27a
cmp dword [esi + 0x280], 0x32505420
jne 0x41b27a
cmp dword [esi + 0x284], 0x4d20302e
jne 0x41b27a
cmp dword [esi + 0x288], 0x29442845
jne 0x41b27a
cmp dword [esi + 0x28c], 0x452f3731
jne 0x41b27a
cmp dword [esi + 0x290], 0x37314344
jne 0x41b27a
cmp dword [esi + 0x294], 0x6e757428
jne 0x41b27a
cmp dword [esi + 0x298], 0x43202965
jne 0x41b27a
cmp word [esi + 0x29c], 0x4e41
jne 0x41b27a
cmp byte [esi + 0x29e], 0
je 0x41b46f
cmp dword [esi + 0x270], 0x736f6224
jne 0x41b312
cmp dword [esi + 0x274], 0x355f6863
jne 0x41b312
cmp dword [esi + 0x278], 0x4224325f
jne 0x41b312
cmp dword [esi + 0x27c], 0x6863736f
jne 0x41b312
cmp dword [esi + 0x280], 0x32505420
jne 0x41b312
cmp dword [esi + 0x284], 0x4d20302e
jne 0x41b312
cmp dword [esi + 0x288], 0x29442845
jne 0x41b312
cmp dword [esi + 0x28c], 0x452f3731
jne 0x41b312
cmp dword [esi + 0x290], 0x37314344
jne 0x41b312
cmp dword [esi + 0x294], 0x6f747328
jne 0x41b312
cmp dword [esi + 0x298], 0x20296b63
jne 0x41b312
cmp dword [esi + 0x29c], 0x4e4143
je 0x41b46f
cmp dword [esi + 0x270], 0x736f6224
jne 0x41b3ba
cmp dword [esi + 0x274], 0x355f6863
jne 0x41b3ba
cmp dword [esi + 0x278], 0x4224335f
jne 0x41b3ba
cmp dword [esi + 0x27c], 0x6863736f
jne 0x41b3ba
cmp dword [esi + 0x280], 0x50574b20
jne 0x41b3ba
cmp dword [esi + 0x284], 0x30303032
jne 0x41b3ba
cmp dword [esi + 0x288], 0x28454d20
jne 0x41b3ba
cmp dword [esi + 0x28c], 0x37312944
jne 0x41b3ba
cmp dword [esi + 0x290], 0x4344452f
jne 0x41b3ba
cmp dword [esi + 0x294], 0x74283731
jne 0x41b3ba
cmp dword [esi + 0x298], 0x29656e75
jne 0x41b3ba
cmp dword [esi + 0x29c], 0x6c2d4b20
jne 0x41b3ba
cmp dword [esi + 0x2a0], 0x656e69
je 0x41b46f
cmp dword [esi + 0x270], 0x736f6224
jne 0x41b47a
cmp dword [esi + 0x274], 0x355f6863
jne 0x41b47a
cmp dword [esi + 0x278], 0x4224345f
jne 0x41b47a
cmp dword [esi + 0x27c], 0x6863736f
jne 0x41b47a
cmp dword [esi + 0x280], 0x50574b20
jne 0x41b47a
cmp dword [esi + 0x284], 0x30303032
jne 0x41b47a
cmp dword [esi + 0x288], 0x28454d20
jne 0x41b47a
cmp dword [esi + 0x28c], 0x37312944
jne 0x41b47a
cmp dword [esi + 0x290], 0x4344452f
jne 0x41b47a
cmp dword [esi + 0x294], 0x73283731
jne 0x41b47a
cmp dword [esi + 0x298], 0x6b636f74
jne 0x41b47a
cmp dword [esi + 0x29c], 0x2d4b2029
jne 0x41b47a
cmp dword [esi + 0x2a0], 0x656e696c
jne 0x41b47a
cmp byte [esi + 0x2a4], 0
jne 0x41b47a
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xd
jne 0x41b47a
push 0
push 0
push 3
call dword [edi]
push 0
mov dword [ebp - 5], esp
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8