Function at 0x4055a0
Capabilities:
Check for time delay via gettickcount
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52b4a7
mov eax, dword fs:[0]
push eax
sub esp, 0x518
mov eax, dword [0x592884]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4e4], ecx
mov esi, dword [ebp + 8]
push 0x563218
push esi
call fcn.00412f10
push 0x563218
push esi
call fcn.00412f90
add esp, 0x10
mov dword [ebp - 0x90], 0
xor eax, eax
mov dword [ebp - 0x8c], 0
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 7
push 1
push 0x563224
mov word [ebp - 0xa0], ax
call fcn.0040e3c0
push 0x14
push 0x563228
lea ecx, [ebp - 0xa0]
mov dword [ebp - 4], 0
call fcn.0040e7f0
cmp dword [ebp - 0x8c], 8
lea eax, [ebp - 0xa0]
mov ecx, esi
cmovae eax, dword [ebp - 0xa0]
cmp dword [esi + 0x14], 8
jb 0x405669
mov ecx, dword [esi]
push dword [ebp - 0x90]
push eax
push 0
push dword [esi + 0x10]
push ecx
call fcn.0040ec40
add esp, 0x14
cmp eax, 0xffffffff
je 0x4056ad
push 1
call fcn.004cb660
cmp dword [ebp - 0x8c], 8
lea eax, [ebp - 0xa0]
push 0x561f98
cmovae eax, dword [ebp - 0xa0]
push eax
push esi
call fcn.00412e20
add esp, 0x10
mov dword [ebp - 0x50c], 0
mov dword [ebp - 0x508], 0
mov dword [ebp - 0x504], 0
lea eax, [ebp - 0x50c]
mov byte [ebp - 4], 1
push eax
push 0x20
push esi
call fcn.004173d0
mov edi, dword [ebp - 0x50c]
add esp, 0xc
cmp edi, dword [ebp - 0x508]
je 0x4058f2
add edi, 0x18
mov dword [ebp - 0x4e8], edi
cmp dword [edi - 4], 8
lea eax, [edi - 0x18]
mov esi, dword [edi - 8]
mov edx, SysReAllocString
mov dword [ebp - 0x60], 0
mov ecx, eax
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x4dc], eax
mov dword [ebp - 0x4d0], eax
jb 0x405731
mov ecx, dword [eax]
mov dword [ebp - 0x4d0], ecx
cmp esi, 8
jae 0x405749
movups xmm0, xmmword [ecx]
mov dword [ebp - 0x5c], 7
movups xmmword [ebp - 0x70], xmm0
jmp 0x4057d3
mov eax, esi
or eax, 7
cmp eax, 0x7ffffffe
cmova eax, edx
mov dword [ebp - 0x4d4], eax
inc eax
lea ecx, [eax + eax]
cmp eax, 0x7fffffff
jbe 0x40576c
or ecx, 0xffffffff
jmp 0x405774
cmp ecx, 0x1000
jb 0x40579d
lea eax, [ecx + 0x23]
cmp eax, ecx
mov ecx, 0xffffffff
cmovbe eax, ecx
push eax
call fcn.004f6f66
add esp, 4
test eax, eax
je 0x4079b8
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
jmp 0x4057b0
test ecx, ecx
je 0x4057ae
push ecx
call fcn.004f6f66
add esp, 4
mov ecx, eax
jmp 0x4057b0
xor ecx, ecx
lea eax, [esi*2 + 2]
mov dword [ebp - 0x70], ecx
push eax
push dword [ebp - 0x4d0]
push ecx
call fcn.004f9680
mov eax, dword [ebp - 0x4d4]
add esp, 0xc
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], esi
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 2
push 0x563218
push eax
call fcn.00412f10
lea eax, [ebp - 0x70]
push 0x563218
push eax
call fcn.00412f90
add esp, 0x10
cmp dword [ebp - 0x60], 0
jne 0x405884
mov eax, dword [ebp - 0x508]
mov esi, edi
mov dword [ebp - 0x4d4], eax
cmp edi, eax
je 0x405873
mov ecx, dword [ebp - 0x4dc]
sub ecx, edi
mov dword [ebp - 0x4dc], ecx
lea edi, [ecx + esi]
cmp edi, esi
je 0x405860
mov ecx, edi
call fcn.0040e350
movups xmm0, xmmword [esi]
mov ecx, dword [ebp - 0x4dc]
xor eax, eax
movups xmmword [edi], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov eax, dword [ebp - 0x4d4]
add esi, 0x18
cmp esi, eax
jne 0x405823
mov eax, dword [ebp - 0x508]
mov edi, dword [ebp - 0x4e8]
lea ecx, [eax - 0x18]
call fcn.0040e350
sub dword [ebp - 0x508], 0x18
jmp 0x40588d
add edi, 0x18
mov dword [ebp - 0x4e8], edi
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x4058cb
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4058c1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4079b8
push edx
push ecx
call fcn.004f7230
add esp, 8
xor eax, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
lea eax, [edi - 0x18]
mov byte [ebp - 4], 1
cmp eax, dword [ebp - 0x508]
jne 0x4056fc
mov byte [ebp - 4], 7
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
mov byte [ebp - 4], 9
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x50c]
mov edx, dword [ebp - 0x508]
cmp ecx, edx
je 0x40794b
lea eax, [ebp - 0x28]
cmp eax, ecx
je 0x405974
cmp dword [ecx + 0x14], 8
mov eax, ecx
jb 0x40595c
mov eax, dword [ecx]
push dword [ecx + 0x10]
lea ecx, [ebp - 0x28]
push eax
call fcn.0040e3c0
mov edx, dword [ebp - 0x508]
mov ecx, dword [ebp - 0x50c]
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jbe 0x4059b2
add ecx, 0x18
lea eax, [ebp - 0x88]
cmp eax, ecx
je 0x4059b2
cmp dword [ecx + 0x14], 8
mov eax, ecx
jb 0x4059a3
mov eax, dword [ecx]
push dword [ecx + 0x10]
lea ecx, [ebp - 0x88]
push eax
call fcn.0040e3c0
lea ecx, [ebp - 0x524]
call fcn.004c5ef0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0x17
call fcn.004c93e0
lea ecx, [ebp - 0x524]
mov byte [ebp - 0x4f0], al
call fcn.004c91f0
lea ecx, [ebp - 0x524]
mov byte [ebp - 0x44], al
call fcn.004c9100
mov esi, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edi, dword [ebp - 0x28]
cmp esi, 8
mov edx, dword [ebp - 0x18]
cmovae ecx, edi
mov byte [ebp - 0x4f8], al
cmp edx, 8
jne 0x405a46
mov dword [ebp - 0x4d0], edx
mov dword [ebp - 0x4dc], str._install
nop dword [eax + eax]
mov esi, dword [ebp - 0x4dc]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x405a46
add dword [ebp - 0x4dc], 2
add ecx, 2
sub dword [ebp - 0x4d0], 1
jne 0x405a20
jmp 0x405a98
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xb
jne 0x405c9f
mov dword [ebp - 0x4d0], edx
mov dword [ebp - 0x4dc], str._installPdf
nop dword [eax + eax]
mov esi, dword [ebp - 0x4dc]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x405c9f
add dword [ebp - 0x4dc], 2
add ecx, 2
sub dword [ebp - 0x4d0], 1
jne 0x405a70
lea eax, [ebp - 0x51c]
mov byte [ebp - 0x4dc], 0
push eax
lea eax, [ebp - 0x514]
mov byte [ebp - 0x510], 0
push eax
lea eax, [ebp - 0x518]
mov byte [ebp - 0x4e0], 0
push eax
lea eax, [ebp - 0x4ec]
mov byte [ebp - 0x4e4], 0
push eax
lea eax, [ebp - 0x4e4]
mov byte [ebp - 0x4ec], 0
push eax
lea eax, [ebp - 0x4e0]
mov byte [ebp - 0x518], 0
push eax
lea eax, [ebp - 0x510]
mov byte [ebp - 0x514], 0
push eax
lea eax, [ebp - 0x4dc]
mov byte [ebp - 0x51c], 0
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00408310
lea ecx, [ebp - 0x4e8]
call fcn.004db3c0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
cmovae ecx, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 8
jne 0x405b5c
mov esi, 8
mov edx, str._install
nop
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x405b5c
add ecx, 2
add edx, 2
sub esi, 1
jne 0x405b40
mov byte [ebp - 0x4d0], 1
jmp 0x405b63
mov byte [ebp - 0x4d0], 0
mov esi, dword [ebp - 0x4dc]
lea ecx, [ebp - 0x4e8]
push 0
push 0
push 0
push 0
push dword [ebp - 0x4d0]
push dword [ebp - 0x4e0]
push dword [ebp - 0x510]
push 0
push esi
call fcn.004de050
push esi
call fcn.004dff00
add esp, 4
push 1
call fcn.004e0e30
mov ecx, eax
call fcn.004e0b00
push dword [ebp - 0x514]
push dword [ebp - 0x518]
push dword [ebp - 0x4e4]
push esi
call fcn.004083c0
call fcn.004dfef0
call fcn.004dfed0
call fcn.004dfee0
cmp byte [ebp - 0x4e4], 0
je 0x405bfb
call fcn.004d8f80
test al, al
jne 0x405bfb
push dword [ebp - 0x51c]
lea ecx, [ebp - 0x4e8]
push dword [ebp - 0x4ec]
push esi
call fcn.004de630
jmp 0x405c17
cmp byte [ebp - 0x4dc], 0
je 0x405c17
call fcn.004d91b0
test al, al
je 0x405c17
call fcn.004dfe20
call fcn.004dfd50
call fcn.004e0e30
push 1
push dword [eax]
call fcn.0044ac00
mov ecx, eax
call fcn.0044bcd0
call fcn.004e0e30
mov esi, dword [eax]
cmp byte [esi], 0
je 0x405c51
call fcn.0044ac00
push esi
mov ecx, eax
call fcn.0044b0e0
push 0
mov ecx, esi
call fcn.0043f820
mov byte [esi], 0
lea ecx, [ebp - 0x4d4]
call fcn.004cfce0
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x19
call fcn.004cff20
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x18
call fcn.004cfea0
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x17
call fcn.004db570
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xa
jne 0x405d33
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4dc], str._uninstall
mov esi, dword [ebp - 0x4dc]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x405d33
add dword [ebp - 0x4dc], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x405cc1
lea ecx, [ebp - 0x4d4]
call fcn.004db3c0
mov byte [ebp - 4], 0x1a
call fcn.004dfef0
call fcn.004dfed0
call fcn.004dfee0
lea ecx, [ebp - 0x4d4]
call fcn.004e0050
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x17
call fcn.004db570
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xa
jne 0x405d77
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4dc], str._overwrite
mov esi, dword [ebp - 0x4dc]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x405d77
add dword [ebp - 0x4dc], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x405d51
jmp 0x405dc8
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xd
jne 0x406091
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4dc], str._overwritePdf
nop dword [eax]
mov esi, dword [ebp - 0x4dc]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406091
add dword [ebp - 0x4dc], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x405da0
lea eax, [ebp - 0x518]
mov byte [ebp - 0x4e0], 0
push eax
lea eax, [ebp - 0x4d4]
mov byte [ebp - 0x51c], 0
push eax
lea eax, [ebp - 0x4e8]
mov byte [ebp - 0x4ec], 0
push eax
lea eax, [ebp - 0x514]
mov byte [ebp - 0x4dc], 0
push eax
lea eax, [ebp - 0x4dc]
mov byte [ebp - 0x514], 0
push eax
lea eax, [ebp - 0x4ec]
mov byte [ebp - 0x4e8], 0
push eax
lea eax, [ebp - 0x51c]
mov byte [ebp - 0x4d4], 0
push eax
lea eax, [ebp - 0x4e0]
mov byte [ebp - 0x518], 0
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00408310
lea ecx, [ebp - 0x4e4]
call fcn.004db3c0
mov byte [ebp - 4], 0x1b
cmp byte [ebp - 0x4e8], 0
mov esi, dword [ebp - 0x4e0]
jne 0x405e65
push esi
jmp 0x405e78
call fcn.004d8f80
test al, al
jne 0x405e76
cmp byte [ebp - 0x4dc], al
je 0x405e80
push 1
call fcn.004dff00
add esp, 4
push 1
call fcn.004e0e30
mov ecx, eax
call fcn.004e0b00
push dword [ebp - 0x4d4]
push dword [ebp - 0x4e8]
push dword [ebp - 0x4dc]
push esi
call fcn.004083c0
call fcn.004d90c0
mov byte [ebp - 0x4d6], al
call fcn.004d9110
mov byte [ebp - 0x4d5], al
call fcn.004dfef0
call fcn.004dfed0
call fcn.004dfee0
cmp byte [ebp - 0x4e8], 0
jne 0x405ee1
cmp byte [ebp - 0x4e0], 0
je 0x405ee1
xor al, al
jmp 0x405ee3
mov al, 1
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x4d0], al
cmovae ecx, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 0xa
jne 0x405f20
mov esi, 0xa
mov edx, str._overwrite
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x405f20
add ecx, 2
add edx, 2
sub esi, 1
jne 0x405f04
mov byte [ebp - 0x4d4], 1
jmp 0x405f27
mov byte [ebp - 0x4d4], 0
push dword [ebp - 0x4f8]
mov al, byte [ebp - 0x4d0]
lea ecx, [ebp - 0x4e4]
push dword [ebp - 0x44]
xor al, 1
push dword [ebp - 0x4f0]
movzx eax, al
push 1
push dword [ebp - 0x4d4]
push dword [ebp - 0x4ec]
push dword [ebp - 0x51c]
push dword [ebp - 0x4d0]
push eax
call fcn.004de050
mov al, byte [ebp - 0x4e0]
test al, al
jne 0x405f84
push 0
lea ecx, [ebp - 0x4e4]
call fcn.004df820
mov al, byte [ebp - 0x4e0]
cmp byte [ebp - 0x4e8], 0
jne 0x405f98
mov byte [ebp - 0x4d0], 0
test al, al
je 0x405f9f
mov byte [ebp - 0x4d0], 1
cmp byte [ebp - 0x4dc], 0
je 0x405fd0
call fcn.004d8f80
test al, al
jne 0x405fd0
push dword [ebp - 0x518]
lea ecx, [ebp - 0x4e4]
push dword [ebp - 0x514]
push dword [ebp - 0x4d0]
call fcn.004de630
jmp 0x406009
call fcn.004d91b0
cmp byte [ebp - 0x4d0], 0
je 0x405fe9
test al, al
je 0x406009
call fcn.004dfe20
jmp 0x406004
test al, al
je 0x406009
cmp byte [ebp - 0x4d6], 0
je 0x405ffb
call fcn.004dfe20
cmp byte [ebp - 0x4d5], 0
je 0x406009
call fcn.004dfd50
call fcn.004e0e30
push 1
push dword [eax]
call fcn.0044ac00
mov ecx, eax
call fcn.0044bcd0
call fcn.004e0e30
mov esi, dword [eax]
cmp byte [esi], 0
je 0x406043
call fcn.0044ac00
push esi
mov ecx, eax
call fcn.0044b0e0
push 0
mov ecx, esi
call fcn.0043f820
mov byte [esi], 0
lea ecx, [ebp - 0x510]
call fcn.004cfce0
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0x1c
call fcn.004cff20
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0x1b
call fcn.004cfea0
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 0x17
call fcn.004db570
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xb
jne 0x4062ff
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._statistics
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x4062ff
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x4060b3
push 0
lea ecx, [ebp - 0x4d6]
call fcn.004d2200
push 0
mov byte [ebp - 4], 0x1d
call fcn.004e0e30
mov ecx, eax
call fcn.004e0b00
push 0
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004203e0
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x40]
call fcn.004175b0
mov esi, dword [ebp - 0x4c]
xor ecx, ecx
mov dword [ebp - 0x4d0], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x48]
add esp, 0x10
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x406236
xor edi, edi
cmp dword [esi + edi + 0x10], 0
lea eax, [esi + edi]
je 0x40620b
push 0
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041fed0
add esp, 0xc
push eax
mov byte [ebp - 4], 0x20
call fcn.004e0e30
mov ecx, eax
call fcn.004e0ef0
test al, al
sete al
mov byte [ebp - 0x4d5], al
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x4061de
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4061ce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4079b8
push edx
push ecx
call fcn.004f7230
mov al, byte [ebp - 0x4d5]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], cx
mov byte [ebp - 4], 0x1f
test al, al
je 0x406208
mov eax, dword [ebp - 0x4c]
add eax, edi
push eax
call fcn.00405440
add esp, 4
mov esi, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x48]
mov eax, 0x2aaaaaab
inc dword [ebp - 0x4d0]
sub ecx, esi
imul ecx
add edi, 0x18
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x4d0], eax
jb 0x406161
call fcn.004e0e30
mov esi, dword [eax]
cmp byte [esi], 0
je 0x40625b
call fcn.0044ac00
push esi
mov ecx, eax
call fcn.0044b0e0
push 0
mov ecx, esi
call fcn.0043f820
mov byte [esi], 0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x4062ce
mov edx, dword [ebp - 0x48]
push ecx
call fcn.0040ed60
mov ecx, dword [ebp - 0x44]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x4c]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x4062af
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4079b8
push ecx
push esi
call fcn.004f7230
add esp, 8
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x25
call fcn.0040e1a0
lea ecx, [ebp - 0x4d6]
mov byte [ebp - 4], 0x17
call fcn.004d2220
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0x15
jne 0x406505
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._recorderRealtimeStat
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406505
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406321
push 0
call fcn.004e0e30
mov ecx, eax
call fcn.004e0b00
mov dword [ebp - 0x500], 0
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 0x4f8], 0
lea eax, [ebp - 0x500]
mov byte [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x88]
push 0x3b
push eax
call fcn.004173d0
mov eax, dword [ebp - 0x4fc]
add esp, 0xc
mov esi, dword [ebp - 0x500]
mov dword [ebp - 0x4f0], eax
cmp esi, eax
je 0x4064bb
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x70]
call fcn.0040e0d0
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x2a
push 0x563218
push eax
call fcn.00413010
add esp, 8
cmp dword [ebp - 0x60], 0
jne 0x4063e5
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2b
call fcn.0040e350
jmp 0x4064a8
push 0
push 0x563310
lea ecx, [ebp - 0x70]
call fcn.0040def0
cmp eax, 0xffffffff
jne 0x40640a
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2f
call fcn.0040e350
jmp 0x4064a8
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x70]
push 0x23
push eax
call fcn.004173d0
add esp, 0xc
lea ecx, [ebp - 0x4c]
call fcn.0040dcd0
cmp eax, 2
jne 0x406490
mov edi, dword [ebp - 0x4c]
cmp dword [edi + 0x10], 0
je 0x406490
cmp dword [edi + 0x28], 0
lea eax, [edi + 0x18]
je 0x406490
cmp dword [eax + 0x14], 8
jb 0x40645c
mov eax, dword [eax]
push 0
push eax
call fcn.00412af0
add esp, 8
push edx
push eax
push edi
call fcn.004e0e30
mov ecx, eax
call fcn.004e0a20
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x2a
call fcn.0040e2b0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x38
call fcn.0040e350
jmp 0x4064a8
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x2a
call fcn.0040e2b0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x34
call fcn.0040e350
add esi, 0x18
mov byte [ebp - 4], 0x29
cmp esi, dword [ebp - 0x4f0]
jne 0x4063b0
call fcn.004e0e30
mov esi, dword [eax]
cmp byte [esi], 0
je 0x4064e0
call fcn.0044ac00
push esi
mov ecx, eax
call fcn.0044b0e0
push 0
mov ecx, esi
call fcn.0043f820
mov byte [esi], 0
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x17
call fcn.0040e2b0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xd
jne 0x406586
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], 0x563314
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406586
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406523
lea ecx, [ebp - 0x4d4]
call fcn.004db3c0
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x3c
call fcn.004df700
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x17
call fcn.004db570
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 5
jne 0x4065e3
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._exit
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x4065e3
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x4065a4
call fcn.00407ef0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xc
jne 0x40670b
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._showFeature
nop word [eax + eax]
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x40670b
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406610
push 0x60
call fcn.004f6f66
add esp, 4
mov dword [ebp - 0x4f0], eax
mov ecx, eax
mov byte [ebp - 4], 0x3d
call fcn.00487bc0
push eax
lea ecx, [ebp - 0x4f0]
mov byte [ebp - 4], 0x17
call fcn.0040ea90
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x3e
push eax
call fcn.004cbee0
add esp, 4
mov byte [ebp - 4], 0x3f
mov esi, dword [ebp - 0x4f0]
test esi, esi
je 0x4066d6
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x44], esp
push eax
call fcn.0040e0d0
mov byte [ebp - 4], 0x40
mov ecx, esi
mov byte [ebp - 4], 0x3f
call fcn.004884c0
test al, al
jne 0x4066d6
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x41
call fcn.0040e350
mov byte [ebp - 4], 0x45
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 4]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x524]
xor esi, esi
mov byte [ebp - 4], 0xa
call fcn.004c6070
jmp 0x40794d
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x52
call fcn.0040e350
mov byte [ebp - 4], 0x56
test esi, esi
je 0x4066f1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x524]
xor esi, esi
mov byte [ebp - 4], 0xa
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xd
jne 0x406925
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._skinselected
nop dword [eax]
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406925
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406730
push str.WindowState.ini
lea ecx, [ebp - 0x58]
call fcn.0040e070
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x57
push eax
call fcn.004cbf60
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x58
push ecx
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004185d0
add esp, 0x10
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x5b
call fcn.0040e350
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x60
call fcn.0040e350
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x5f
call fcn.00433b30
cmp dword [ebp - 0x78], 0
je 0x406886
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
push 0
cmovae eax, dword [ebp - 0x88]
push eax
call fcn.00412af0
push 0x60
mov dword [ebp - 0x4d4], eax
call fcn.004f6f66
add esp, 0xc
mov dword [ebp - 0x4f0], eax
mov ecx, eax
mov byte [ebp - 4], 0x74
call fcn.00487bc0
push eax
lea ecx, [ebp - 0x4f0]
mov byte [ebp - 4], 0x5f
call fcn.0040ea90
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x75
push eax
call fcn.004cbee0
add esp, 4
mov byte [ebp - 4], 0x76
mov esi, dword [ebp - 0x4f0]
test esi, esi
je 0x406847
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x44], esp
push eax
call fcn.0040e0d0
mov byte [ebp - 4], 0x77
mov ecx, esi
mov byte [ebp - 4], 0x76
call fcn.004884c0
test al, al
je 0x40686b
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x34]
call eax
mov edi, eax
mov dword [ebp - 0x44], edi
test edi, edi
je 0x40685f
mov edx, dword [edi]
mov ecx, edi
call dword [edx]
mov byte [ebp - 4], 0x8d
test edi, edi
jne 0x4068ac
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x8f
call fcn.0040e350
mov byte [ebp - 4], 0x93
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 4]
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x94
call fcn.0040e350
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x524]
xor esi, esi
mov byte [ebp - 4], 0xa
call fcn.004c6070
jmp 0x40794d
cmp dword [ebp - 0x4d4], 0
mov ecx, edi
mov edx, dword [edi]
setne al
movzx eax, al
push eax
call dword [edx + 0x4c]
mov ecx, dword [ebp - 0x4d4]
mov eax, dword [edi]
neg ecx
sbb ecx, ecx
and ecx, 3
push ecx
mov ecx, edi
call dword [eax + 0x3c]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
mov byte [ebp - 4], 0xa4
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 4]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa5
call fcn.0040e350
mov byte [ebp - 4], 0xa9
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 4]
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xaa
call fcn.0040e350
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x524]
xor esi, esi
mov byte [ebp - 4], 0xa
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xb
jne 0x4069ad
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._installReg
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x4069ad
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406943
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x11c]
call fcn.004d48c0
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0xae
call fcn.004d6200
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x17
call fcn.004d4c10
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 5
jne 0x406a3a
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str.__fix
nop
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406a3a
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x4069d0
lea ecx, [ebp - 0x4d4]
call fcn.004db3c0
lea eax, [ebp - 0x50c]
mov byte [ebp - 4], 0xaf
push eax
lea ecx, [ebp - 0x4d4]
call fcn.004dd6e0
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x17
call fcn.004db570
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xb
jne 0x406b05
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._checkAssoc
nop dword [eax]
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406b05
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406a60
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
lea ecx, [ebp - 0x4ec]
mov edi, eax
call fcn.004db3c0
push 0
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0xb0
call fcn.004df2f0
mov byte [ebp - 0x4d4], al
call esi
sub eax, edi
push eax
push dword [ebp - 0x4d4]
push 0
call fcn.004079f0
xor eax, eax
lea ecx, [ebp - 0x4ec]
cmp byte [ebp - 0x4d4], al
mov byte [ebp - 4], 0x17
sete al
add eax, 0x100
mov dword [ebp - 0x4e0], eax
call fcn.004db570
mov esi, dword [ebp - 0x4e0]
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0x1b
jne 0x406b98
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._checkAssocPDFAndSafeCenter
nop word [eax + eax]
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406b98
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406b30
mov esi, 0x300
call fcn.004d2f70
test al, al
mov ecx, 0x301
cmove esi, ecx
call fcn.004d8f80
test al, al
je 0x406b7e
call fcn.004d87d0
test al, al
jne 0x40793a
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
or esi, 0x301
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0x23
jne 0x406c71
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._repairAssocPDFAndSafeCenterProtect
nop word [eax + eax]
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406c71
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406bc0
call fcn.004d97a0
call fcn.004d9800
call fcn.004d8b80
test al, al
je 0x406c2b
call fcn.004d3570
push 0x563450
lea ecx, [ebp - 0x40]
call fcn.0040e070
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xc9
push eax
call fcn.004d96e0
add esp, 4
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xca
call fcn.0040e350
jmp 0x406c59
call fcn.004d3580
push 0x563450
lea ecx, [ebp - 0x40]
call fcn.0040e070
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xce
push eax
call fcn.004d9680
add esp, 4
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xcf
call fcn.0040e350
push 1
mov byte [ebp - 4], 0x17
call fcn.004dff00
add esp, 4
call fcn.004d2f70
jmp 0x406da3
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0x23
jne 0x406ce2
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._checkAssocPDFAndImageAndSafeCenter
nop
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406ce2
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406c90
call fcn.004d2dc0
xor ecx, ecx
mov byte [ebp - 4], 0xa
test al, al
sete cl
add ecx, 0x304
mov dword [ebp - 0x4e0], ecx
mov esi, ecx
lea ecx, [ebp - 0x524]
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0x2b
jne 0x406dcc
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._repairAssocPDFAndImageAndSafeCenterProtect
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406dcc
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406d04
call fcn.004d97a0
call fcn.004d9800
call fcn.004d3440
push 1
call fcn.004dff00
add esp, 4
call fcn.004d8b80
lea ecx, [ebp - 0x40]
push 0x563450
test al, al
je 0x406d79
call fcn.0040e070
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xeb
push eax
call fcn.004d96e0
add esp, 4
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xec
call fcn.0040e350
jmp 0x406d9a
call fcn.0040e070
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xf0
push eax
call fcn.004d9680
add esp, 4
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xf1
call fcn.0040e350
mov byte [ebp - 4], 0x17
call fcn.004d2dc0
movzx ecx, al
neg ecx
mov byte [ebp - 4], 0xa
sbb ecx, ecx
add ecx, 0x203
mov dword [ebp - 0x4e0], ecx
mov esi, ecx
lea ecx, [ebp - 0x524]
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0x23
jne 0x406e39
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._removeAssocPDFAndSafeCenterProtect
nop word [eax + eax]
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406e39
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406df0
call fcn.004d97a0
call fcn.004d9800
call fcn.004d3020
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
cmp esi, 8
lea ecx, [ebp - 0x28]
push 0xc
cmovae ecx, edi
push str._repairAssoc
call fcn.0040f5c0
add esp, 8
test al, al
je 0x406edc
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
lea ecx, [ebp - 0x4ec]
mov edi, eax
call fcn.004db3c0
push 0
lea ecx, [ebp - 0x4ec]
mov dword [ebp - 4], 0x10d
call fcn.004df820
mov byte [ebp - 0x4d4], al
call esi
sub eax, edi
push eax
push dword [ebp - 0x4d4]
push 1
call fcn.004079f0
xor eax, eax
lea ecx, [ebp - 0x4ec]
cmp byte [ebp - 0x4d4], al
mov dword [ebp - 4], 0x17
sete al
add eax, 0x200
mov dword [ebp - 0x4e0], eax
call fcn.004db570
mov esi, dword [ebp - 0x4e0]
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
call fcn.004c6070
jmp 0x40794d
push 0
push str.__third_party_invoker
lea ecx, [ebp - 0x28]
call fcn.0040def0
cmp eax, 0xffffffff
jne 0x407938
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 8
cmovae ecx, edi
push str.__rescue
call fcn.0040f5c0
add esp, 8
test al, al
jne 0x407938
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 8
cmovae ecx, edi
push str.__fixdir
call fcn.0040f5c0
add esp, 8
test al, al
je 0x406f92
lea ecx, [ebp - 0x6c]
call fcn.004c9c80
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x11a
push eax
call fcn.004cbf60
add esp, 4
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x6c]
call fcn.004ca170
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
call fcn.0040e350
lea ecx, [ebp - 0x6c]
mov dword [ebp - 4], 0x17
call fcn.004045d0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0x10
cmovae ecx, edi
push str._check_thumbnail
call fcn.0040f5c0
add esp, 8
test al, al
je 0x406fcc
call fcn.00408ae0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0x13
cmovae ecx, edi
push str._check_pdfconverter
call fcn.0040f5c0
add esp, 8
test al, al
je 0x407052
push str.RCImage_Loader_B290ED24_1295_4B55_A6A7_5EBD321F473B
lea ecx, [ebp - 0x40]
call fcn.0040e070
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x120
mov ecx, dword [ebp - 0x4e4]
push eax
call fcn.0040db70
mov byte [ebp - 0x4d5], al
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x121
call fcn.0040e350
cmp byte [ebp - 0x4d5], 0
mov dword [ebp - 4], 0x17
jne 0x407938
call fcn.00409fd0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0xa
cmovae ecx, edi
push str._check_ocr
call fcn.0040f5c0
add esp, 8
test al, al
je 0x4070d8
push str.RCImage_Loader_30ACBBAC_1110_4D9D_AFC4_9F8E2C410ACE
lea ecx, [ebp - 0x40]
call fcn.0040e070
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x131
mov ecx, dword [ebp - 0x4e4]
push eax
call fcn.0040db70
mov byte [ebp - 0x4d5], al
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x132
call fcn.0040e350
cmp byte [ebp - 0x4d5], 0
mov dword [ebp - 4], 0x17
jne 0x407938
call fcn.0040abe0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0x13
cmovae ecx, edi
push str._check_imagematting
call fcn.0040f5c0
add esp, 8
test al, al
je 0x40715e
push str.RCImage_Loader_A16EA45B_592E_4940_AEAC_C2135A7EE6E3
lea ecx, [ebp - 0x40]
call fcn.0040e070
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x142
mov ecx, dword [ebp - 0x4e4]
push eax
call fcn.0040db70
mov byte [ebp - 0x4d5], al
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x143
call fcn.0040e350
cmp byte [ebp - 0x4d5], 0
mov dword [ebp - 4], 0x17
jne 0x407938
call fcn.0040b610
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0x12
cmovae ecx, edi
push str._check_picdesigner
call fcn.0040f5c0
add esp, 8
test al, al
je 0x4071e4
push str.RCImage_Loader_ADD4CDBF_1ECC_449C_ADAC_F2720261E925
lea ecx, [ebp - 0x40]
call fcn.0040e070
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x153
mov ecx, dword [ebp - 0x4e4]
push eax
call fcn.0040db70
mov byte [ebp - 0x4d5], al
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x154
call fcn.0040e350
cmp byte [ebp - 0x4d5], 0
mov dword [ebp - 4], 0x17
jne 0x407938
call fcn.0040cc30
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c6070
jmp 0x40794d
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0xd
cmovae ecx, edi
push str._page_protect
call fcn.0040f5c0
add esp, 8
test al, al
je 0x407317
lea ecx, [ebp - 0x48]
call fcn.004d2480
push 0
lea ecx, [ebp - 0x4d6]
mov dword [ebp - 4], 0x164
call fcn.004d2200
push str.B7E10F94_83E9_448D_8CA3_504EA5C60EC5
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x65
call fcn.0040e070
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x66
push eax
lea ecx, [ebp - 0x4f4]
call fcn.00417070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x69
call fcn.0040e350
mov byte [ebp - 4], 0x68
cmp dword [ebp - 0x4f4], 0
je 0x40726d
cmp byte [ebp - 0x4ef], 0
jne 0x4072f1
call fcn.004d16b0
test al, al
je 0x4072a5
push str.aq_07
lea ecx, [ebp - 0x40]
call fcn.0040e1f0
push 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x79
push 3
push eax
call fcn.004054f0
add esp, 0xc
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x40]
call fcn.0040e1a0
jmp 0x4072f1
lea ecx, [ebp - 0x88]
call fcn.0040df90
push 0
push eax
call fcn.00412af0
add esp, 8
test eax, eax
je 0x4072f1
push eax
lea ecx, [ebp - 0x320]
call fcn.004e1600
push ecx
mov byte [ebp - 4], 0x92
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x320]
call fcn.0040ddd0
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 0x68
call fcn.004e1700
lea ecx, [ebp - 0x4f4]
mov byte [ebp - 4], 0x65
call fcn.004170d0
lea ecx, [ebp - 0x4d6]
mov byte [ebp - 4], 0x64
call fcn.004d2220
lea ecx, [ebp - 0x48]
jmp 0x40792c
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0xb
cmovae ecx, edi
push str._page_guide
call fcn.0040f5c0
add esp, 8
test al, al
je 0x407537
lea ecx, [ebp - 0x48]
call fcn.004d2480
push str.B7E10F94_83E9_448D_8CA3_504EA5C60EC5
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x193
call fcn.0040e070
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x94
push eax
lea ecx, [ebp - 0x4f4]
call fcn.00417070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x97
call fcn.0040e350
mov byte [ebp - 4], 0x96
cmp dword [ebp - 0x4f4], 0
je 0x40738f
cmp byte [ebp - 0x4ef], 0
jne 0x407520
lea ecx, [ebp - 0x500]
call fcn.004d0170
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0xa7
call fcn.004d0ac0
test al, al
je 0x407511
lea eax, [ebp - 0x4d0]
push eax
lea ecx, [ebp - 0x500]
call fcn.004d0220
test al, al
je 0x407511
push 1
call fcn.004e0e30
mov ecx, eax
call fcn.004e0b00
mov eax, dword [ebp - 0x4d0]
add eax, 0xfffffffe
cmp eax, 8
ja case.0x40741f.3
movzx eax, byte [eax + 0x4079c8]
jmp dword [eax*4 + 0x4079c0]
call fcn.004d16b0
test al, al
je 0x4074c2
mov eax, dword [ebp - 0x4d0]
add eax, 0xfffffffe
cmp eax, 8
ja case.0x40741f.3
movzx eax, byte [eax + 0x4079e4]
jmp dword [eax*4 + 0x4079d4]
push str.aq_10
lea ecx, [ebp - 0x40]
call fcn.0040e1f0
push 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xc0
push 4
push eax
call fcn.004e0e30
mov ecx, eax
call fcn.004e1080
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa7
call fcn.0040e1a0
jmp case.0x40741f.3
push str.aq_17
lea ecx, [ebp - 0x40]
call fcn.0040e1f0
push 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xc1
push 4
push eax
call fcn.004e0e30
mov ecx, eax
call fcn.004e1080
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa7
call fcn.0040e1a0
jmp case.0x40741f.3
push str.aq_19
lea ecx, [ebp - 0x40]
call fcn.0040e1f0
push 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xc2
push 4
push eax
call fcn.004e0e30
mov ecx, eax
call fcn.004e1080
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa7
call fcn.0040e1a0
jmp case.0x40741f.3
push dword [ebp - 0x4d0]
lea ecx, [ebp - 0x434]
call fcn.004cdf90
push ecx
mov byte [ebp - 4], 0xc3
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x434]
call fcn.0040ddd0
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 0xa7
call fcn.004ce130
call fcn.004e0e30
mov ecx, eax
call fcn.00436130
call fcn.004e0e30
mov ecx, eax
call fcn.004e1120
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x96
call fcn.004d01d0
lea ecx, [ebp - 0x4f4]
mov byte [ebp - 4], 0x93
call fcn.004170d0
lea ecx, [ebp - 0x48]
jmp 0x40792c
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0xb
cmovae ecx, edi
push str._assoc_lock
call fcn.0040f5c0
add esp, 8
test al, al
je 0x40774f
lea ecx, [ebp - 0x4fc]
call fcn.004d2480
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x1c4
call fcn.004e23d0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xc5
call fcn.004e2c70
test al, al
je 0x40773e
lea eax, [ebp - 0x4f0]
push eax
lea ecx, [ebp - 0x64]
call fcn.004d0220
test al, al
je 0x40773e
push 1
call fcn.004e0e30
mov ecx, eax
call fcn.004e0b00
mov eax, dword [ebp - 0x4f0]
sub eax, 2
je 0x40767f
sub eax, 1
jne 0x407726
push str.B7E10F94_83E9_448D_8CA3_504EA5C60EC5
lea ecx, [ebp - 0x40]
call fcn.0040e070
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xf3
push eax
lea ecx, [ebp - 0x48]
call fcn.00417070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xf6
call fcn.0040e350
mov byte [ebp - 4], 0xf5
cmp dword [ebp - 0x48], 0
je 0x40761b
cmp byte [ebp - 0x43], 0
je 0x40761b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc5
call fcn.004170d0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xc4
call fcn.004e2430
jmp 0x407926
push str.aq_13
lea ecx, [ebp - 0x40]
call fcn.0040e1f0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x206
push eax
call fcn.004e0e30
mov ecx, eax
call fcn.004e0980
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x1f5
call fcn.0040e1a0
lea ecx, [ebp - 0x4cc]
call fcn.004d9ad0
push ecx
mov dword [ebp - 4], 0x207
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.0040ddd0
mov dword [ebp - 4], 0x1f5
jmp 0x40770f
push str.B7E10F94_83E9_448D_8CA3_504EA5C60EC5
lea ecx, [ebp - 0x40]
call fcn.0040e070
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xde
push eax
lea ecx, [ebp - 0x48]
call fcn.00417070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xe1
call fcn.0040e350
mov byte [ebp - 4], 0xe0
cmp dword [ebp - 0x48], 0
je 0x4076bc
cmp byte [ebp - 0x43], 0
jne 0x4075fe
push str.aq_13
lea ecx, [ebp - 0x40]
call fcn.0040e1f0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xf1
push eax
call fcn.004e0e30
mov ecx, eax
call fcn.004e0980
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xe0
call fcn.0040e1a0
lea ecx, [ebp - 0x4cc]
call fcn.004d9ad0
push ecx
mov byte [ebp - 4], 0xf2
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.0040ddd0
mov byte [ebp - 4], 0xe0
lea ecx, [ebp - 0x4cc]
call fcn.004d9c70
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc5
call fcn.004170d0
call fcn.004e0e30
mov ecx, eax
call fcn.00436130
call fcn.004e0e30
mov ecx, eax
call fcn.004e1120
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xc4
call fcn.004e2430
jmp 0x407926
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0x14
cmovae ecx, edi
push str._page_plugin_protect
call fcn.0040f5c0
add esp, 8
test al, al
je 0x407938
lea ecx, [ebp - 0x50c]
call fcn.0040dcd0
cmp eax, 3
jne 0x407938
call fcn.004d16b0
test al, al
jne 0x407938
lea ecx, [ebp - 0x4fc]
call fcn.004d2480
push 0
lea ecx, [ebp - 0x4d6]
mov dword [ebp - 4], 0x220
call fcn.004d2200
push str.D5165921_8CFE_4F51_80DC_8BC87A25FD80
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x21
call fcn.0040e070
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x48]
call fcn.00417070
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x25
call fcn.0040e350
mov byte [ebp - 4], 0x24
cmp dword [ebp - 0x48], 0
je 0x4077f3
cmp byte [ebp - 0x43], 0
jne 0x40790b
push 0x561f98
lea ecx, [ebp - 0x40]
call fcn.0040e070
push 0x561f98
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x35
call fcn.0040e070
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 0x50c]
add eax, 0x18
push eax
call fcn.0040e000
mov eax, dword [ebp - 0x50c]
lea ecx, [ebp - 0x70]
add eax, 0x30
push eax
call fcn.0040e000
lea ecx, [ebp - 0x40]
call fcn.0040df90
push 0
push eax
call fcn.00412af0
mov esi, eax
add esp, 8
test esi, esi
jne 0x407873
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x37
call fcn.0040e350
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x3b
call fcn.0040e350
mov byte [ebp - 4], 0x24
jmp 0x40790b
push str.u128
lea ecx, [ebp - 0xb8]
call fcn.0040e1f0
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x4b
push eax
call fcn.00405440
add esp, 4
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0xb8]
call fcn.0040e1a0
sub esp, 0x18
lea eax, [ebp - 0x70]
mov ecx, esp
mov dword [ebp - 0x4f0], esp
push eax
call fcn.0040e0d0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x3b0]
push esi
mov byte [ebp - 4], 0x36
call fcn.004d0e90
push ecx
mov byte [ebp - 4], 0x4d
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x3b0]
call fcn.0040ddd0
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 0x36
call fcn.004d0ff0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x4e
call fcn.0040e350
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x52
call fcn.0040e350
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x21
call fcn.004170d0
lea ecx, [ebp - 0x4d6]
mov byte [ebp - 4], 0x20
call fcn.004d2220
lea ecx, [ebp - 0x4fc]
mov dword [ebp - 4], 0x17
call fcn.004d25d0
xor esi, esi
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
call fcn.004c6070
jmp 0x40794d
xor esi, esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0x256
call fcn.0040e350
lea ecx, [ebp - 0x88]
mov dword [ebp - 4], 0x25a
call fcn.0040e350
lea ecx, [ebp - 0x50c]
mov dword [ebp - 4], 0
call fcn.0040e2b0
lea ecx, [ebp - 0xa0]
mov dword [ebp - 4], 0x25e
call fcn.0040e350
mov dword [ebp - 4], 0xffffffff
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f6f55
mov esp, ebp
pop ebp
ret 4
call fcn.004fbb09
nop dword [eax]
stc
jae 4225539
add cl, bh
je 0x407a07
add byte [eax], al
add dword [eax], eax
add dword [eax], eax
add dword [eax], eax
add dword [eax], eax
nop dword [eax]
je 0x407a17
add byte [esp + esi*2 + 0x40], bl
add byte [edi - 0x6ffbf8c], cl
je 0x407a23
add byte [eax], al
add eax, dword [ecx]
add eax, dword [edx]
add eax, dword [eax]
add eax, dword [edx]
int3
mov eax, dword fs:[0x592884]
pop ecx
add byte [ebx], dh
lds ecx, [ecx + 0x5653f045]
add byte [eax], al
add byte [ebx + 0x5d8a0875], cl
or al, 0x85
div byte [ecx + ecx - 0x7d]
inc byte [ecx]
or dword [ebx - 0x7af0fe02], eax
jae 0x407a2f
add byte [eax], al