Function at 0x4a33f0
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings
Enumerate gui resources

Disassembly:
sub esp, 0x508
mov eax, str.Q_Dir___Document
test eax, eax
push ebx
push ebp
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
jne 0x4a340d
xor eax, eax
jmp 0x4a3414
push str.Q_Dir___Document
call edi
push str.Q_Dir___Document
push eax
mov ecx, 0x4edfd8
call fcn.00401630
mov ecx, str..qdr
test ecx, ecx
jne 0x4a3431
xor eax, eax
jmp 0x4a3438
push str..qdr
call edi
push str..qdr
push eax
mov ecx, 0x4edfd4
call fcn.00401630
mov edx, dword [0x4d9540]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [esp + 0x20]
mov dword [esp + 0x14], edx
test eax, eax
mov byte [esp + 0x20], 0x4d
mov byte [esp + 0x21], 0x65
mov byte [esp + 0x22], 0x69
mov byte [esp + 0x23], 0x6e
mov byte [esp + 0x24], 0x50
mov byte [esp + 0x25], 0x6c
mov byte [esp + 0x26], 0x61
mov byte [esp + 0x27], 0x74
mov byte [esp + 0x28], 0x7a
mov byte [esp + 0x29], 0
je 0x4a349d
lea ecx, [esp + 0x20]
push ecx
call ebx
mov esi, eax
jmp 0x4a349f
xor esi, esi
push esi
lea ecx, [esp + 0x18]
call fcn.00401420
test eax, eax
je 0x4a34cc
mov eax, dword [esp + 0x14]
inc esi
lea edx, [esp + 0x20]
push esi
push edx
push eax
call fcn.004011c0
add esp, 0xc
lea ecx, [esp + 0x14]
push 0xffffffffffffffff
call fcn.00401970
mov ecx, dword [0x4d9540]
lea edx, [esp + 0x20]
test edx, edx
mov dword [esp + 0x18], ecx
mov byte [esp + 0x20], 0x38
mov byte [esp + 0x21], 0x2e
mov byte [esp + 0x22], 0x32
mov byte [esp + 0x23], 0x35
mov byte [esp + 0x24], 0
je 0x4a3502
lea eax, [esp + 0x20]
push eax
call ebx
mov esi, eax
jmp 0x4a3504
xor esi, esi
push esi
lea ecx, [esp + 0x1c]
call fcn.00401420
test eax, eax
je 0x4a3531
mov edx, dword [esp + 0x18]
inc esi
lea ecx, [esp + 0x20]
push esi
push ecx
push edx
call fcn.004011c0
add esp, 0xc
lea ecx, [esp + 0x18]
push 0xffffffffffffffff
call fcn.00401970
lea eax, [esp + 0x70]
push eax
push str.8_33_0_0
call fcn.004a3380
lea ecx, [esp + 0x78]
add esp, 8
test ecx, ecx
je 0x4a3556
lea edx, [esp + 0x70]
push edx
call ebx
mov esi, eax
jmp 0x4a3558
xor esi, esi
push esi
lea ecx, [esp + 0x1c]
call fcn.00401420
test eax, eax
je 0x4a3585
mov ecx, dword [esp + 0x18]
inc esi
lea eax, [esp + 0x70]
push esi
push eax
push ecx
call fcn.004011c0
add esp, 0xc
lea ecx, [esp + 0x18]
push 0xffffffffffffffff
call fcn.00401970
mov ecx, dword [0x4ecbf4]
mov eax, dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
cmp ecx, eax
je 0x4a35e2
mov edx, dword [ecx - 0xc]
test edx, edx
jge 0x4a35ad
mov edx, dword [0x4d9544]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x4a35b4
mov ecx, dword [eax - 0xc]
test ecx, ecx
jge 0x4a35c5
mov edx, dword [eax - 8]
push eax
push edx
mov ecx, 0x4ecbf4
call fcn.00401630
jmp 0x4a35de
mov ecx, 0x4ecbf4
call fcn.0040e950
mov eax, dword [esp + 0x14]
mov dword [0x4ecbf4], eax
add eax, 0xfffffff4
push eax
call esi
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4ecbec]
cmp ecx, eax
je 0x4a3635
mov edx, dword [ecx - 0xc]
test edx, edx
jge 0x4a3600
mov edx, dword [0x4d9544]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x4a3607
mov ecx, dword [eax - 0xc]
test ecx, ecx
jge 0x4a3618
push eax
mov eax, dword [eax - 8]
push eax
mov ecx, 0x4ecbec
call fcn.00401630
jmp 0x4a3631
mov ecx, 0x4ecbec
call fcn.0040e950
mov eax, dword [esp + 0x14]
mov dword [0x4ecbec], eax
add eax, 0xfffffff4
push eax
call esi
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4ecd48]
cmp ecx, eax
je 0x4a3684
mov edx, dword [ecx - 0xc]
test edx, edx
jge 0x4a3653
mov edx, dword [0x4d9544]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x4a365a
mov ecx, dword [eax - 0xc]
test ecx, ecx
jge 0x4a366b
mov ecx, dword [eax - 8]
push eax
push ecx
mov ecx, 0x4ecd48
call fcn.00401630
jmp 0x4a3684
mov ecx, 0x4ecd48
call fcn.0040e950
mov eax, dword [esp + 0x14]
mov dword [0x4ecd48], eax
add eax, 0xfffffff4
push eax
call esi
mov eax, dword [0x4ecd40]
mov ecx, dword [esp + 0x18]
cmp eax, ecx
je 0x4a36db
mov edx, dword [eax - 0xc]
test edx, edx
jge 0x4a36a5
mov edx, dword [0x4d9544]
add eax, 0xfffffff4
cmp eax, edx
jne 0x4a36ac
mov eax, dword [ecx - 0xc]
test eax, eax
jge 0x4a36bd
mov edx, dword [ecx - 8]
push ecx
push edx
mov ecx, 0x4ecd40
call fcn.00401630
jmp 0x4a36d6
mov ecx, 0x4ecd40
call fcn.0040e950
mov eax, dword [esp + 0x18]
mov dword [0x4ecd40], eax
add eax, 0xfffffff4
push eax
call esi
mov eax, dword [0x4ecd40]
mov ecx, dword [0x4ecd3c]
cmp ecx, eax
je 0x4a372b
mov edx, dword [ecx - 0xc]
test edx, edx
jge 0x4a36f9
mov edx, dword [0x4d9544]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x4a3700
mov ecx, dword [eax - 0xc]
test ecx, ecx
jge 0x4a3711
push eax
mov eax, dword [eax - 8]
push eax
mov ecx, 0x4ecd3c
call fcn.00401630
jmp 0x4a372b
mov ecx, 0x4ecd3c
call fcn.0040e950
mov eax, dword [0x4ecd40]
mov dword [0x4ecd3c], eax
add eax, 0xfffffff4
push eax
call esi
mov ebp, dword [esp + 0x51c]
push ebp
call edi
cmp eax, 5
jle 0x4a385d
push ebp
call edi
cmp eax, 0x209
jge 0x4a385d
test ebp, ebp
jne 0x4a3754
xor eax, eax
jmp 0x4a3757
push ebp
call edi
push ebp
push eax
mov ecx, 0x4edfc8
call fcn.00401630
call fcn.004487e0
test eax, eax
je 0x4a37e0
mov eax, dword [esp + 0x18]
mov edx, dword [0x4d9544]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4a379d
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4a379d
mov edx, dword [esp + 0x18]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x14]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4a3f46
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4a3f46
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x508
ret
call fcn.00496cd0
test eax, eax
je 0x4a385d
mov eax, dword [esp + 0x18]
mov edx, dword [0x4d9544]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4a381a
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4a381a
mov edx, dword [esp + 0x18]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x14]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4a3f46
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4a3f46
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x508
ret
test ebp, ebp
je 0x4a39fd
push ebp
call edi
mov ebx, eax
mov eax, dword [0x4d9540]
mov ecx, str.AutoStart2017_IZASSHJ
mov dword [esp + 0x10], eax
test ecx, ecx
je 0x4a38cf
mov edx, ecx
shr edx, 0x10
jne 0x4a3894
xor eax, eax
mov ax, cx
lea ecx, [esp + 0x10]
push eax
call fcn.0040ff70
jmp 0x4a38cf
push str.AutoStart2017_IZASSHJ
call edi
mov esi, eax
test esi, esi
je 0x4a38cf
push esi
lea ecx, [esp + 0x14]
call fcn.004012f0
test eax, eax
je 0x4a38cf
mov edi, dword [esp + 0x10]
lea ecx, [esi + esi]
mov edx, ecx
mov esi, str.AutoStart2017_IZASSHJ
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov eax, dword [esp + 0x10]
cmp ebx, dword [eax - 8]
jne 0x4a3995
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x4a3995
push 1
call fcn.00456580
mov eax, dword [esp + 0x14]
mov edx, dword [0x4d9544]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
add esp, 4
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4a3927
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4a3927
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x18]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4a3952
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4a3952
mov edx, dword [esp + 0x18]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x14]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4a3f46
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4a3f46
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x508
ret
mov eax, dword [esp + 0x10]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4a39c4
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x4a39c4
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
push ebp
call edi
push ebp
push eax
mov ecx, 0x4edfc8
call fcn.00401630
mov eax, dword [0x4d9540]
mov ecx, str.RegisterAdminKey4_EEETWETRFSD
test ecx, ecx
mov dword [esp + 0x1c], eax
je 0x4a3a36
mov edx, ecx
shr edx, 0x10
jne 0x4a3a01
xor eax, eax
mov ax, cx
lea ecx, [esp + 0x1c]
push eax
call fcn.0040ff70
jmp 0x4a3a36
xor eax, eax
jmp 0x4a39c7
push str.RegisterAdminKey4_EEETWETRFSD
call edi
mov esi, eax
test esi, esi
je 0x4a3a36
push esi
lea ecx, [esp + 0x20]
call fcn.004012f0
test eax, eax
je 0x4a3a36
mov edi, dword [esp + 0x1c]
lea ecx, [esi + esi]
mov edx, ecx
mov esi, str.RegisterAdminKey4_EEETWETRFSD
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x4edfc8]
mov ecx, dword [eax - 8]
test ecx, ecx
jl 0x4a3c0f
mov ecx, dword [esp + 0x1c]
push ecx
push eax
call fcn.004c546f
add esp, 8
test eax, eax
je 0x4a3c0f
mov ecx, dword [0x4edfc8]
sub eax, ecx
sar eax, 1
test eax, eax
jl 0x4a3c0f
mov edx, dword [ecx - 0xc]
lea ebx, [ecx - 0xc]
xor eax, eax
cmp edx, 1
jg 0x4a3a82
mov edx, dword [ecx - 4]
test edx, edx
jge 0x4a3acd
mov ebp, dword [ecx - 8]
test ebp, ebp
jle 0x4a3a8b
mov eax, ebp
push eax
mov ecx, 0x4edfc8
call fcn.004012f0
test eax, eax
jne 0x4a3a9e
xor ecx, ecx
jmp 0x4a3acd
mov edi, dword [0x4edfc8]
lea ecx, [ebp + ebp + 2]
mov edx, ecx
lea esi, [ebx + 0xc]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x4edfc8]
mov dword [eax - 8], ebp
call fcn.00401350
mov ecx, dword [0x4edfc8]
mov edx, dword [esp + 0x1c]
mov eax, dword [edx - 8]
lea esi, [ecx + eax*2]
mov ecx, dword [0x4d9540]
test esi, esi
mov dword [esp + 0x10], ecx
je 0x4a3b2e
mov edx, esi
shr edx, 0x10
jne 0x4a3afe
and esi, 0xffff
lea ecx, [esp + 0x10]
push esi
call fcn.0040ff70
jmp 0x4a3b2e
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
test edi, edi
je 0x4a3b2e
push edi
lea ecx, [esp + 0x14]
call fcn.004012f0
test eax, eax
je 0x4a3b2e
lea ecx, [edi + edi]
mov edi, dword [esp + 0x10]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x10]
push 1
push ecx
call fcn.004c553e
add esp, 4
push eax
call fcn.004108c0
mov ecx, dword [0x4d9544]
mov edi, eax
mov eax, dword [esp + 0x18]
add esp, 8
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x4a3b7b
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4a3b81
mov eax, dword [esp + 0x10]
add eax, 0xfffffff4
push eax
call fcn.004c5432
add esp, 4
jmp 0x4a3b81
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
mov eax, dword [esp + 0x1c]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4a3bac
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4a3bac
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x18]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4a3bd7
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4a3bd7
mov edx, dword [esp + 0x18]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x14]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4a3c02
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4a3c02
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x508
ret
lea ecx, [esp + 0x3c]
call fcn.004650f0
lea ecx, [esp + 0x48]
call fcn.004650f0
mov eax, dword [0x4e3a24]
mov dword [esp + 0x38], 0x4d4be8
add eax, 0x1c
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [esp + 0x38]
push ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [0x4ee068]
push eax
call fcn.004a4d20
mov edx, dword [0x4e3a24]
add edx, 0x1c
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ecx
mov ecx, esp
push 0x4edfc8
call fcn.00401200
call fcn.0040afd0
add esp, 4
test eax, eax
je 0x4a3c97
push 1
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [esp + 0x48]
call fcn.004a5050
lea ecx, [esp + 0x3c]
call fcn.004a5050
jmp 0x4a3f2b
mov ecx, 0x4ee224
call fcn.00482280
mov eax, dword [0x4ea4e8]
mov ecx, dword [0x4ecbf4]
push 0xffffffffffffffff
push 0xffffffffffffffff
push eax
push 0x4ea4f0
push ecx
call fcn.00480e80
add esp, 0x14
mov dword [0x4ea4e8], eax
test eax, eax
je 0x4a3ccd
call fcn.004a3340
push 0
push 0x4dfa30
mov ecx, 0x4edfc8
call fcn.00401a30
test eax, eax
jne 0x4a3d4f
mov eax, dword [0x4edfc8]
mov edx, dword [0x4d9540]
push 0x23
push 1
lea ecx, [esp + 0x18]
push eax
push ecx
mov dword [esp + 0x20], edx
call fcn.004b4910
add esp, 0x10
test eax, eax
je 0x4a3d46
push 0x4dfa2c
lea ecx, [esp + 0x38]
call fcn.004014f0
lea edx, [esp + 0x10]
lea eax, [esp + 0x34]
push edx
lea ecx, [esp + 0x24]
push eax
push ecx
call fcn.0040f0a0
push eax
mov ecx, 0x4ee0c0
call fcn.0040ec90
lea ecx, [esp + 0x20]
call fcn.004014c0
lea ecx, [esp + 0x34]
call fcn.004014c0
lea ecx, [esp + 0x10]
call fcn.004014c0
lea ecx, [esp + 0x84]
call fcn.0045ca50
push str.GUID__31
lea ecx, [esp + 0x38]
call fcn.004014f0
lea edx, [esp + 0x34]
lea ecx, [esp + 0x10]
push edx
push 0x4ecbec
call fcn.00401200
push eax
lea eax, [esp + 0x28]
push eax
call fcn.0040f0a0
mov eax, dword [eax]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
lea ecx, [esp + 0x20]
mov dword [0x4ee0b0], eax
call fcn.004014c0
lea ecx, [esp + 0x10]
call fcn.004014c0
lea ecx, [esp + 0x34]
call fcn.004014c0
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, 0xb7
je 0x4a3dce
call esi
cmp eax, 5
je 0x4a3dce
xor bl, bl
jmp 0x4a3dd0
mov bl, 1
push 0x4dfa1c
lea ecx, [esp + 0x24]
call fcn.004014f0
push eax
lea ecx, [esp + 0x30]
push 0x4ecbec
push ecx
call fcn.0040f0a0
lea ecx, [esp + 0x20]
call fcn.004014c0
push 0x4d9844
lea ecx, [esp + 0x34]
call fcn.0040ea20
push 0
push 0x4dcd1c
mov ecx, 0x4edfc8
call fcn.00401a30
test eax, eax
jne 0x4a3e4c
push 0x4edfc8
lea ecx, [esp + 0x14]
call fcn.00401200
lea edx, [esp + 0x10]
push edx
call fcn.00455f20
add esp, 4
lea ecx, [esp + 0x10]
test eax, eax
je 0x4a3e47
call fcn.004014c0
jmp 0x4a4044
call fcn.004014c0
test bl, bl
je 0x4a3fa4
mov eax, dword [0x4ea79c]
push 0xffffffffffffffff
push 0xffffffffffffffff
push eax
push str.default_new_tab
push 0x4d9844
call fcn.00480e80
add esp, 0x14
mov dword [0x4ea79c], eax
test eax, eax
je 0x4a3f56
push 0
push 0x4dcd1c
mov ecx, 0x4edfc8
call fcn.00401a30
test eax, eax
jne 0x4a3f56
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], eax
push ecx
push 0x4a30a0
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a3f56
mov edx, dword [0x4edfc8]
mov ecx, 0x4edfc8
mov eax, dword [edx - 8]
mov dword [esp + 0x20], 0x2774
lea eax, [eax + eax + 2]
push eax
mov dword [esp + 0x28], eax
call fcn.0040f900
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x20]
push ecx
push 0
push 0x4a
push edx
mov dword [esp + 0x38], eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0x2774
jne 0x4a3f56
push 0xaffe
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [esp + 0x30]
call fcn.004014c0
lea ecx, [esp + 0x2c]
call fcn.004014c0
lea ecx, [esp + 0x84]
call fcn.004a4110
lea ecx, [esp + 0x38]
call fcn.004a3260
lea ecx, [esp + 0x1c]
call fcn.004014c0
lea ecx, [esp + 0x18]
call fcn.004014c0
lea ecx, [esp + 0x14]
call fcn.004014c0
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x508
ret
mov eax, dword [0x4ecbf8]
test eax, eax
je 0x4a3f83
mov eax, dword [0x4ee0b4]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
push 0xffffffffffffffff
push 0xffffffffffffffff
push eax
push ecx
push edx
call fcn.00480e80
add esp, 0x14
inc eax
mov dword [0x4ee0b4], eax
jmp 0x4a3fa9
push 0
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
push eax
call fcn.00401200
mov ecx, 0x4ee224
call fcn.00481590
inc eax
mov dword [0x4ee0b4], eax
jmp 0x4a3fa9
mov eax, dword [0x4ee0b4]
mov ecx, dword [0x4ecbf8]
test ecx, ecx
je 0x4a3fca
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
push 0
push eax
push ecx
push edx
call fcn.00480e00
add esp, 0x10
jmp 0x4a3fe2
push eax
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
push eax
call fcn.00401200
mov ecx, 0x4ee224
call fcn.00481720
call fcn.0040bc00
test eax, eax
jne 0x4a3ff8
push 0xaffe
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x4a4044
mov ecx, dword [0x4ecd48]
push 0
push 1
push 0x4da040
push ecx
call fcn.00480e00
add esp, 0x10
push 0
push 0
push 0
push 0
push 0
push ecx
mov ecx, esp
push 0
call fcn.0047b330
push 0
lea ecx, [esp + 0xa0]
call fcn.004a4dd0
test eax, eax
jne 0x4a4093
push eax
push eax
push str.Main_window_creation_failed__n
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esp + 0x30]
call fcn.004014c0
lea ecx, [esp + 0x2c]
call fcn.004014c0
lea ecx, [esp + 0x84]
call fcn.004a4110
lea ecx, [esp + 0x38]
call fcn.004a3260
lea ecx, [esp + 0x1c]
call fcn.004014c0
lea ecx, [esp + 0x18]
call fcn.004014c0
lea ecx, [esp + 0x14]
call fcn.004014c0
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x508
ret
lea ecx, [esp + 0x38]
call fcn.004a32a0
mov ecx, 0x4edfe0
mov esi, eax
call fcn.004a3160
mov edx, dword [0x4ee0b0]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x30]
call fcn.004014c0
lea ecx, [esp + 0x2c]
call fcn.004014c0
lea ecx, [esp + 0x84]
call fcn.004a4110
lea ecx, [esp + 0x38]
call fcn.004a3260
lea ecx, [esp + 0x1c]
call fcn.004014c0
lea ecx, [esp + 0x18]
call fcn.004014c0
lea ecx, [esp + 0x14]
call fcn.004014c0
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x508
ret