Function at 0x49c740
Capabilities:
Get graphical window text
Parse pe header
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x572d00
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x41bf0
call fcn.005374e0
mov dword [ebp - 0x419e8], ecx
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_LockWindowUpdate]
lea ecx, [ebp - 0x410e0]
call fcn.004e70a0
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.0050151c
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x1a34]
add eax, 0x440
mov dword [ebp - 0x4166c], eax
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x4166c]
call fcn.0043c920
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x1a34]
add edx, 0x47c
mov dword [ebp - 0x41670], edx
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x41670]
call fcn.0043c920
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x5c
call fcn.0054bf2a
push 1
push 1
push 0xff
push 0x10
push 0x10
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x5c
call fcn.0054bf73
push 0xffffff
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_SetBkColor]
mov dword [ebp - 0x41678], 1
mov edx, dword [ebp - 0x419e8]
add edx, 0x5c
mov dword [ebp - 0x41674], edx
cmp dword [ebp - 0x41674], 0
jne 0x49c857
mov dword [ebp - 0x419ec], 0
jmp 0x49c866
mov eax, dword [ebp - 0x41674]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x419ec], ecx
mov edx, dword [ebp - 0x419ec]
push edx
mov eax, dword [ebp - 0x41678]
push eax
push 0x1003
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
call fcn.0054bf40
lea eax, [ebp - 0x68]
mov dword [ebp - 0x4167c], eax
mov ecx, dword [ebp - 0x4167c]
mov edx, dword [0x5be480]
mov dword [ecx], edx
lea eax, [ebp - 0x64]
mov dword [ebp - 0x41680], eax
mov ecx, dword [ebp - 0x41680]
mov edx, dword [0x5be480]
mov dword [ecx], edx
lea eax, [ebp - 0x60]
mov dword [ebp - 0x41684], eax
mov ecx, dword [ebp - 0x41684]
mov edx, dword [0x5be480]
mov dword [ecx], edx
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x41688], eax
mov ecx, dword [ebp - 0x41688]
mov edx, dword [0x5be480]
mov dword [ecx], edx
lea eax, [ebp - 0x54]
mov dword [ebp - 0x4168c], eax
mov ecx, dword [ebp - 0x4168c]
mov edx, dword [0x5be480]
mov dword [ecx], edx
mov byte [ebp - 4], 1
push 0x5b5864
lea ecx, [ebp - 0x50]
call fcn.0054d39c
mov byte [ebp - 4], 2
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41518], esp
lea eax, [ebp - 0x50]
push eax
call fcn.0054d095
mov dword [ebp - 0x419f0], eax
push SysReAllocStringLen
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x419f4], eax
cmp dword [ebp - 0x419f4], 0
je 0x49cf33
lea ecx, [ebp - 0x41100]
call fcn.0054c3ab
mov byte [ebp - 4], 3
mov ecx, dword [0x5be480]
mov dword [ebp - 0x410ec], ecx
mov byte [ebp - 4], 4
lea edx, [ebp - 0x41100]
push edx
lea ecx, [ebp - 0x410e0]
call fcn.004e9b9e
test eax, eax
je 0x49cf15
mov eax, dword [ebp - 0x410f8]
mov dword [ebp - 0x41104], eax
mov dword [ebp - 0x41108], 0
jmp 0x49c9b9
mov ecx, dword [ebp - 0x41108]
add ecx, 1
mov dword [ebp - 0x41108], ecx
mov edx, dword [ebp - 0x41108]
cmp edx, dword [ebp - 0x41104]
jge 0x49cf15
mov eax, dword [ebp - 0x41108]
push eax
lea ecx, [ebp - 0x4110c]
push ecx
lea ecx, [ebp - 0x41100]
call fcn.00419890
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x4110c]
mov eax, dword [edx - 8]
mov dword [ebp - 0x41690], eax
cmp dword [ebp - 0x41690], 0
je 0x49cf01
push ecx
mov ecx, esp
mov dword [ebp - 0x4151c], esp
push 0x5b58c0
call fcn.0054d39c
mov dword [ebp - 0x419f8], eax
mov ecx, dword [ebp - 0x419f8]
mov dword [ebp - 0x419fc], ecx
mov byte [ebp - 4], 6
push ecx
mov ecx, esp
mov dword [ebp - 0x41520], esp
lea edx, [ebp - 0x4110c]
push edx
call fcn.0054d095
mov dword [ebp - 0x41a00], eax
lea eax, [ebp - 0x41110]
push eax
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 5
call fcn.00425c70
mov dword [ebp - 0x41a04], eax
mov byte [ebp - 4], 7
push 0x5b58c8
mov ecx, dword [ebp - 0x41110]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41694], eax
xor edx, edx
cmp dword [ebp - 0x41694], 0
setne dl
and edx, 0xff
test edx, edx
je 0x49cef2
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x50]
push eax
push 0x5b58d0
push 0x5b58f4
lea ecx, [ebp - 0x410ec]
push ecx
call fcn.0054ab7c
add esp, 0x10
lea edx, [ebp - 0x410ec]
push edx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5900
lea ecx, [ebp - 0x410ec]
push ecx
call fcn.0054ab7c
add esp, 0xc
lea edx, [ebp - 0x410ec]
push edx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
lea eax, [ebp - 0x4110c]
push eax
lea ecx, [ebp - 0x60]
call fcn.0054d46f
lea ecx, [ebp - 0x41110]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0054d46f
mov dword [ebp - 0x58], 1
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x41524], esp
mov dword [ebp - 0x41698], edx
mov eax, dword [ebp - 0x41698]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x41698]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 8
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x41698]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x41698]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x41698]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x41698]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x41698]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x41698]
mov dword [ebp - 0x41a08], eax
mov ecx, dword [ebp - 0x419e8]
mov ecx, dword [ecx + 0x1a34]
add ecx, 0x440
call fcn.0045ada0
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4169c], eax
push 0x5c354c
mov ecx, dword [ebp - 0x4169c]
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500d13
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x416a0], eax
push 1
push 0
mov ecx, dword [ebp - 0x416a0]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00501976
lea edx, [ebp - 0x41110]
push edx
lea ecx, [ebp - 0x41114]
call fcn.0054d095
mov byte [ebp - 4], 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x41528], esp
lea eax, [ebp - 0x41114]
push eax
call fcn.0054d095
mov dword [ebp - 0x41a0c], eax
lea ecx, [ebp - 0x4152c]
push ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
call fcn.004bcc00
mov dword [ebp - 0x41a10], eax
mov eax, dword [ebp - 0x41a10]
mov dword [ebp - 0x41a14], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x41a14]
push ecx
lea ecx, [ebp - 0x41114]
call fcn.0054d46f
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x4152c]
call fcn.0054d328
push 0
mov edx, dword [ebp - 0x41114]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x416a4], eax
mov eax, dword [ebp - 0x416a4]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x416a8], eax
cmp dword [ebp - 0x416a8], 0xffffffff
jne 0x49cd60
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x416ac], eax
call fcn.0055f60b
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x416b0], ecx
push 0x1a2
mov edx, dword [ebp - 0x416b0]
push edx
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x416b4], eax
mov eax, dword [ebp - 0x416b4]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x416b8], eax
mov edx, dword [ebp - 0x4110c]
push edx
push 1
mov eax, dword [ebp - 0x416b8]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x416bc], eax
mov eax, dword [ebp - 0x4110c]
push eax
push 1
mov ecx, dword [ebp - 0x416bc]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x416c0], eax
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x416c4], eax
mov eax, dword [ebp - 0x416c0]
sub eax, 1
push eax
push 1
mov ecx, dword [ebp - 0x416c4]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500f1a
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x416c8], eax
mov ecx, dword [ebp - 0x41110]
push ecx
push 2
mov edx, dword [ebp - 0x416c8]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x416cc], eax
mov edx, dword [ebp - 0x41110]
push edx
push 2
mov eax, dword [ebp - 0x416cc]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41114]
call fcn.0054d328
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x41110]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4110c]
call fcn.0054d328
jmp 0x49c9aa
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x410ec]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41100]
call fcn.0054c3de
push 0x5b5908
lea ecx, [ebp - 0x50]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41530], esp
lea edx, [ebp - 0x50]
push edx
call fcn.0054d095
mov dword [ebp - 0x41a18], eax
push SysReAllocStringLen
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x41a1c], eax
cmp dword [ebp - 0x41a1c], 0
je 0x49d558
lea ecx, [ebp - 0x4112c]
call fcn.0054c3ab
mov byte [ebp - 4], 0xe
mov eax, dword [0x5be480]
mov dword [ebp - 0x41118], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4112c]
push ecx
lea ecx, [ebp - 0x410e0]
call fcn.004e9b9e
test eax, eax
je 0x49d53a
mov edx, dword [ebp - 0x41124]
mov dword [ebp - 0x41130], edx
mov dword [ebp - 0x41134], 0
jmp 0x49cfde
mov eax, dword [ebp - 0x41134]
add eax, 1
mov dword [ebp - 0x41134], eax
mov ecx, dword [ebp - 0x41134]
cmp ecx, dword [ebp - 0x41130]
jge 0x49d53a
mov edx, dword [ebp - 0x41134]
push edx
lea eax, [ebp - 0x41138]
push eax
lea ecx, [ebp - 0x4112c]
call fcn.00419890
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x41138]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x416d0], edx
cmp dword [ebp - 0x416d0], 0
je 0x49d526
push ecx
mov ecx, esp
mov dword [ebp - 0x41534], esp
push 0x5b596c
call fcn.0054d39c
mov dword [ebp - 0x41a20], eax
mov eax, dword [ebp - 0x41a20]
mov dword [ebp - 0x41a24], eax
mov byte [ebp - 4], 0x11
push ecx
mov ecx, esp
mov dword [ebp - 0x41538], esp
lea edx, [ebp - 0x41138]
push edx
call fcn.0054d095
mov dword [ebp - 0x41a28], eax
lea eax, [ebp - 0x4113c]
push eax
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 0x10
call fcn.00425c70
mov dword [ebp - 0x41a2c], eax
mov byte [ebp - 4], 0x12
push 0x5b5974
mov ecx, dword [ebp - 0x4113c]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x416d4], eax
xor edx, edx
cmp dword [ebp - 0x416d4], 0
setne dl
and edx, 0xff
test edx, edx
je 0x49d517
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x50]
push eax
push 0x5b597c
push 0x5b59a0
lea ecx, [ebp - 0x41118]
push ecx
call fcn.0054ab7c
add esp, 0x10
lea edx, [ebp - 0x41118]
push edx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
mov eax, dword [ebp - 0x50]
push eax
push 0x5b59ac
lea ecx, [ebp - 0x41118]
push ecx
call fcn.0054ab7c
add esp, 0xc
lea edx, [ebp - 0x41118]
push edx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
lea eax, [ebp - 0x41138]
push eax
lea ecx, [ebp - 0x60]
call fcn.0054d46f
lea ecx, [ebp - 0x4113c]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0054d46f
mov dword [ebp - 0x58], 1
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x4153c], esp
mov dword [ebp - 0x416d8], edx
mov eax, dword [ebp - 0x416d8]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x416d8]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x416d8]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x416d8]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x416d8]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x416d8]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x416d8]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x416d8]
mov dword [ebp - 0x41a30], eax
mov ecx, dword [ebp - 0x419e8]
mov ecx, dword [ecx + 0x1a34]
add ecx, 0x440
call fcn.0045ada0
lea edx, [ebp - 0x4113c]
push edx
lea ecx, [ebp - 0x41140]
call fcn.0054d095
mov byte [ebp - 4], 0x17
push ecx
mov ecx, esp
mov dword [ebp - 0x41540], esp
lea eax, [ebp - 0x41140]
push eax
call fcn.0054d095
mov dword [ebp - 0x41a34], eax
lea ecx, [ebp - 0x41544]
push ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
call fcn.004bcc00
mov dword [ebp - 0x41a38], eax
mov eax, dword [ebp - 0x41a38]
mov dword [ebp - 0x41a3c], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x41a3c]
push ecx
lea ecx, [ebp - 0x41140]
call fcn.0054d46f
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x41544]
call fcn.0054d328
push 0
mov edx, dword [ebp - 0x41140]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x416dc], eax
mov eax, dword [ebp - 0x416dc]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x416e0], eax
cmp dword [ebp - 0x416e0], 0xffffffff
jne 0x49d305
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x416e4], eax
call fcn.0055f60b
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x416e8], ecx
push 0x1a2
mov edx, dword [ebp - 0x416e8]
push edx
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x416ec], eax
mov eax, dword [ebp - 0x416ec]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x416f0], eax
push 0x5c3550
mov edx, dword [ebp - 0x416f0]
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500d13
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x416f4], eax
push 1
push 0
mov edx, dword [ebp - 0x416f4]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00501976
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x416f8], eax
mov edx, dword [ebp - 0x41138]
push edx
push 1
mov eax, dword [ebp - 0x416f8]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x416fc], eax
mov eax, dword [ebp - 0x41138]
push eax
push 1
mov ecx, dword [ebp - 0x416fc]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41700], eax
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41704], eax
mov eax, dword [ebp - 0x41700]
sub eax, 1
push eax
push 1
mov ecx, dword [ebp - 0x41704]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500f1a
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41708], eax
mov ecx, dword [ebp - 0x4113c]
push ecx
push 2
mov edx, dword [ebp - 0x41708]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4170c], eax
mov edx, dword [ebp - 0x4113c]
push edx
push 2
mov eax, dword [ebp - 0x4170c]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41140]
call fcn.0054d328
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x4113c]
call fcn.0054d328
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41138]
call fcn.0054d328
jmp 0x49cfcf
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x41118]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4112c]
call fcn.0054c3de
push 0x5b59b4
lea ecx, [ebp - 0x50]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41548], esp
lea edx, [ebp - 0x50]
push edx
call fcn.0054d095
mov dword [ebp - 0x41a40], eax
push SysReAllocStringLen
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x41a44], eax
cmp dword [ebp - 0x41a44], 0
je 0x49db7d
lea ecx, [ebp - 0x41158]
call fcn.0054c3ab
mov byte [ebp - 4], 0x19
mov eax, dword [0x5be480]
mov dword [ebp - 0x41144], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x41158]
push ecx
lea ecx, [ebp - 0x410e0]
call fcn.004e9b9e
test eax, eax
je 0x49db5f
mov edx, dword [ebp - 0x41150]
mov dword [ebp - 0x4115c], edx
mov dword [ebp - 0x41160], 0
jmp 0x49d603
mov eax, dword [ebp - 0x41160]
add eax, 1
mov dword [ebp - 0x41160], eax
mov ecx, dword [ebp - 0x41160]
cmp ecx, dword [ebp - 0x4115c]
jge 0x49db5f
mov edx, dword [ebp - 0x41160]
push edx
lea eax, [ebp - 0x41164]
push eax
lea ecx, [ebp - 0x41158]
call fcn.00419890
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x41164]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x41710], edx
cmp dword [ebp - 0x41710], 0
je 0x49db4b
push ecx
mov ecx, esp
mov dword [ebp - 0x4154c], esp
push 0x5b5a20
call fcn.0054d39c
mov dword [ebp - 0x41a48], eax
mov eax, dword [ebp - 0x41a48]
mov dword [ebp - 0x41a4c], eax
mov byte [ebp - 4], 0x1c
push ecx
mov ecx, esp
mov dword [ebp - 0x41550], esp
lea edx, [ebp - 0x41164]
push edx
call fcn.0054d095
mov dword [ebp - 0x41a50], eax
lea eax, [ebp - 0x41168]
push eax
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 0x1b
call fcn.00425c70
mov dword [ebp - 0x41a54], eax
mov byte [ebp - 4], 0x1d
push 0x5b5a28
mov ecx, dword [ebp - 0x41168]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41714], eax
xor edx, edx
cmp dword [ebp - 0x41714], 0
setne dl
and edx, 0xff
test edx, edx
je 0x49db3c
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5a30
push 0x5b5a54
lea ecx, [ebp - 0x41144]
push ecx
call fcn.0054ab7c
add esp, 0x10
lea edx, [ebp - 0x41144]
push edx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5a60
lea ecx, [ebp - 0x41144]
push ecx
call fcn.0054ab7c
add esp, 0xc
lea edx, [ebp - 0x41144]
push edx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
lea eax, [ebp - 0x41164]
push eax
lea ecx, [ebp - 0x60]
call fcn.0054d46f
lea ecx, [ebp - 0x41168]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0054d46f
mov dword [ebp - 0x58], 1
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x41554], esp
mov dword [ebp - 0x41718], edx
mov eax, dword [ebp - 0x41718]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x41718]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x41718]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x41718]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x20
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x41718]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x41718]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x41718]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x41718]
mov dword [ebp - 0x41a58], eax
mov ecx, dword [ebp - 0x419e8]
mov ecx, dword [ecx + 0x1a34]
add ecx, 0x440
call fcn.0045ada0
lea edx, [ebp - 0x41168]
push edx
lea ecx, [ebp - 0x4116c]
call fcn.0054d095
mov byte [ebp - 4], 0x22
push ecx
mov ecx, esp
mov dword [ebp - 0x41558], esp
lea eax, [ebp - 0x4116c]
push eax
call fcn.0054d095
mov dword [ebp - 0x41a5c], eax
lea ecx, [ebp - 0x4155c]
push ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
call fcn.004bcc00
mov dword [ebp - 0x41a60], eax
mov eax, dword [ebp - 0x41a60]
mov dword [ebp - 0x41a64], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x41a64]
push ecx
lea ecx, [ebp - 0x4116c]
call fcn.0054d46f
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4155c]
call fcn.0054d328
push 0
mov edx, dword [ebp - 0x4116c]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x4171c], eax
mov eax, dword [ebp - 0x4171c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x41720], eax
cmp dword [ebp - 0x41720], 0xffffffff
jne 0x49d92a
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x41724], eax
call fcn.0055f60b
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x41728], ecx
push 0x1a2
mov edx, dword [ebp - 0x41728]
push edx
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x4172c], eax
mov eax, dword [ebp - 0x4172c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41730], eax
push 0x5c3554
mov edx, dword [ebp - 0x41730]
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500d13
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41734], eax
push 1
push 0
mov edx, dword [ebp - 0x41734]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00501976
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41738], eax
mov edx, dword [ebp - 0x41164]
push edx
push 1
mov eax, dword [ebp - 0x41738]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4173c], eax
mov eax, dword [ebp - 0x41164]
push eax
push 1
mov ecx, dword [ebp - 0x4173c]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41740], eax
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41744], eax
mov eax, dword [ebp - 0x41740]
sub eax, 1
push eax
push 1
mov ecx, dword [ebp - 0x41744]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500f1a
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41748], eax
mov ecx, dword [ebp - 0x41168]
push ecx
push 2
mov edx, dword [ebp - 0x41748]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4174c], eax
mov edx, dword [ebp - 0x41168]
push edx
push 2
mov eax, dword [ebp - 0x4174c]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x4116c]
call fcn.0054d328
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x41168]
call fcn.0054d328
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x41164]
call fcn.0054d328
jmp 0x49d5f4
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x41144]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41158]
call fcn.0054c3de
push 0x5b5a68
lea ecx, [ebp - 0x50]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41560], esp
lea edx, [ebp - 0x50]
push edx
call fcn.0054d095
mov dword [ebp - 0x41a68], eax
push SysReAllocStringLen
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x41a6c], eax
cmp dword [ebp - 0x41a6c], 0
je 0x49e1a2
lea ecx, [ebp - 0x41184]
call fcn.0054c3ab
mov byte [ebp - 4], 0x24
mov eax, dword [0x5be480]
mov dword [ebp - 0x41170], eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x41184]
push ecx
lea ecx, [ebp - 0x410e0]
call fcn.004e9b9e
test eax, eax
je 0x49e184
mov edx, dword [ebp - 0x4117c]
mov dword [ebp - 0x41188], edx
mov dword [ebp - 0x4118c], 0
jmp 0x49dc28
mov eax, dword [ebp - 0x4118c]
add eax, 1
mov dword [ebp - 0x4118c], eax
mov ecx, dword [ebp - 0x4118c]
cmp ecx, dword [ebp - 0x41188]
jge 0x49e184
mov edx, dword [ebp - 0x4118c]
push edx
lea eax, [ebp - 0x41190]
push eax
lea ecx, [ebp - 0x41184]
call fcn.00419890
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x41190]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x41750], edx
cmp dword [ebp - 0x41750], 0
je 0x49e170
push ecx
mov ecx, esp
mov dword [ebp - 0x41564], esp
push 0x5b5adc
call fcn.0054d39c
mov dword [ebp - 0x41a70], eax
mov eax, dword [ebp - 0x41a70]
mov dword [ebp - 0x41a74], eax
mov byte [ebp - 4], 0x27
push ecx
mov ecx, esp
mov dword [ebp - 0x41568], esp
lea edx, [ebp - 0x41190]
push edx
call fcn.0054d095
mov dword [ebp - 0x41a78], eax
lea eax, [ebp - 0x41194]
push eax
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 0x26
call fcn.00425c70
mov dword [ebp - 0x41a7c], eax
mov byte [ebp - 4], 0x28
push 0x5b5ae4
mov ecx, dword [ebp - 0x41194]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41754], eax
xor edx, edx
cmp dword [ebp - 0x41754], 0
setne dl
and edx, 0xff
test edx, edx
je 0x49e161
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5aec
push 0x5b5b10
lea ecx, [ebp - 0x41170]
push ecx
call fcn.0054ab7c
add esp, 0x10
lea edx, [ebp - 0x41170]
push edx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5b1c
lea ecx, [ebp - 0x41170]
push ecx
call fcn.0054ab7c
add esp, 0xc
lea edx, [ebp - 0x41170]
push edx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
lea eax, [ebp - 0x41190]
push eax
lea ecx, [ebp - 0x60]
call fcn.0054d46f
lea ecx, [ebp - 0x41194]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0054d46f
mov dword [ebp - 0x58], 1
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x4156c], esp
mov dword [ebp - 0x41758], edx
mov eax, dword [ebp - 0x41758]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x41758]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x41758]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x41758]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x2b
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x41758]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x41758]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x41758]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x41758]
mov dword [ebp - 0x41a80], eax
mov ecx, dword [ebp - 0x419e8]
mov ecx, dword [ecx + 0x1a34]
add ecx, 0x440
call fcn.0045ada0
lea edx, [ebp - 0x41194]
push edx
lea ecx, [ebp - 0x41198]
call fcn.0054d095
mov byte [ebp - 4], 0x2d
push ecx
mov ecx, esp
mov dword [ebp - 0x41570], esp
lea eax, [ebp - 0x41198]
push eax
call fcn.0054d095
mov dword [ebp - 0x41a84], eax
lea ecx, [ebp - 0x41574]
push ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
call fcn.004bcc00
mov dword [ebp - 0x41a88], eax
mov eax, dword [ebp - 0x41a88]
mov dword [ebp - 0x41a8c], eax
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x41a8c]
push ecx
lea ecx, [ebp - 0x41198]
call fcn.0054d46f
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x41574]
call fcn.0054d328
push 0
mov edx, dword [ebp - 0x41198]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x4175c], eax
mov eax, dword [ebp - 0x4175c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x41760], eax
cmp dword [ebp - 0x41760], 0xffffffff
jne 0x49df4f
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x41764], eax
call fcn.0055f60b
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x41768], ecx
push 0x1a2
mov edx, dword [ebp - 0x41768]
push edx
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x4176c], eax
mov eax, dword [ebp - 0x4176c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41770], eax
push 0x5c3558
mov edx, dword [ebp - 0x41770]
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500d13
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41774], eax
push 1
push 0
mov edx, dword [ebp - 0x41774]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00501976
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41778], eax
mov edx, dword [ebp - 0x41190]
push edx
push 1
mov eax, dword [ebp - 0x41778]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4177c], eax
mov eax, dword [ebp - 0x41190]
push eax
push 1
mov ecx, dword [ebp - 0x4177c]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41780], eax
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41784], eax
mov eax, dword [ebp - 0x41780]
sub eax, 1
push eax
push 1
mov ecx, dword [ebp - 0x41784]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500f1a
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41788], eax
mov ecx, dword [ebp - 0x41194]
push ecx
push 2
mov edx, dword [ebp - 0x41788]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4178c], eax
mov edx, dword [ebp - 0x41194]
push edx
push 2
mov eax, dword [ebp - 0x4178c]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x41198]
call fcn.0054d328
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x41194]
call fcn.0054d328
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x41190]
call fcn.0054d328
jmp 0x49dc19
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x41170]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41184]
call fcn.0054c3de
push 0x5b5b24
lea ecx, [ebp - 0x50]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41578], esp
lea edx, [ebp - 0x50]
push edx
call fcn.0054d095
mov dword [ebp - 0x41a90], eax
push SysReAllocStringLen
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x41a94], eax
cmp dword [ebp - 0x41a94], 0
je 0x49e7c7
lea ecx, [ebp - 0x411b0]
call fcn.0054c3ab
mov byte [ebp - 4], 0x2f
mov eax, dword [0x5be480]
mov dword [ebp - 0x4119c], eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x411b0]
push ecx
lea ecx, [ebp - 0x410e0]
call fcn.004e9b9e
test eax, eax
je 0x49e7a9
mov edx, dword [ebp - 0x411a8]
mov dword [ebp - 0x411b4], edx
mov dword [ebp - 0x411b8], 0
jmp 0x49e24d
mov eax, dword [ebp - 0x411b8]
add eax, 1
mov dword [ebp - 0x411b8], eax
mov ecx, dword [ebp - 0x411b8]
cmp ecx, dword [ebp - 0x411b4]
jge 0x49e7a9
mov edx, dword [ebp - 0x411b8]
push edx
lea eax, [ebp - 0x411bc]
push eax
lea ecx, [ebp - 0x411b0]
call fcn.00419890
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x411bc]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x41790], edx
cmp dword [ebp - 0x41790], 0
je 0x49e795
push ecx
mov ecx, esp
mov dword [ebp - 0x4157c], esp
push 0x5b5ba4
call fcn.0054d39c
mov dword [ebp - 0x41a98], eax
mov eax, dword [ebp - 0x41a98]
mov dword [ebp - 0x41a9c], eax
mov byte [ebp - 4], 0x32
push ecx
mov ecx, esp
mov dword [ebp - 0x41580], esp
lea edx, [ebp - 0x411bc]
push edx
call fcn.0054d095
mov dword [ebp - 0x41aa0], eax
lea eax, [ebp - 0x411c0]
push eax
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 0x31
call fcn.00425c70
mov dword [ebp - 0x41aa4], eax
mov byte [ebp - 4], 0x33
push 0x5b5bac
mov ecx, dword [ebp - 0x411c0]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41794], eax
xor edx, edx
cmp dword [ebp - 0x41794], 0
setne dl
and edx, 0xff
test edx, edx
je 0x49e786
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5bb4
push 0x5b5bd8
lea ecx, [ebp - 0x4119c]
push ecx
call fcn.0054ab7c
add esp, 0x10
lea edx, [ebp - 0x4119c]
push edx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5be4
lea ecx, [ebp - 0x4119c]
push ecx
call fcn.0054ab7c
add esp, 0xc
lea edx, [ebp - 0x4119c]
push edx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
lea eax, [ebp - 0x411bc]
push eax
lea ecx, [ebp - 0x60]
call fcn.0054d46f
lea ecx, [ebp - 0x411c0]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0054d46f
mov dword [ebp - 0x58], 1
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x41584], esp
mov dword [ebp - 0x41798], edx
mov eax, dword [ebp - 0x41798]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x41798]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x41798]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x41798]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x36
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x41798]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x41798]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x41798]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x33
mov eax, dword [ebp - 0x41798]
mov dword [ebp - 0x41aa8], eax
mov ecx, dword [ebp - 0x419e8]
mov ecx, dword [ecx + 0x1a34]
add ecx, 0x440
call fcn.0045ada0
lea edx, [ebp - 0x411c0]
push edx
lea ecx, [ebp - 0x411c4]
call fcn.0054d095
mov byte [ebp - 4], 0x38
push ecx
mov ecx, esp
mov dword [ebp - 0x41588], esp
lea eax, [ebp - 0x411c4]
push eax
call fcn.0054d095
mov dword [ebp - 0x41aac], eax
lea ecx, [ebp - 0x4158c]
push ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
call fcn.004bcc00
mov dword [ebp - 0x41ab0], eax
mov eax, dword [ebp - 0x41ab0]
mov dword [ebp - 0x41ab4], eax
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x41ab4]
push ecx
lea ecx, [ebp - 0x411c4]
call fcn.0054d46f
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x4158c]
call fcn.0054d328
push 0
mov edx, dword [ebp - 0x411c4]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x4179c], eax
mov eax, dword [ebp - 0x4179c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x417a0], eax
cmp dword [ebp - 0x417a0], 0xffffffff
jne 0x49e574
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x417a4], eax
call fcn.0055f60b
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x417a8], ecx
push 0x1a2
mov edx, dword [ebp - 0x417a8]
push edx
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x417ac], eax
mov eax, dword [ebp - 0x417ac]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x417b0], eax
push 0x5c355c
mov edx, dword [ebp - 0x417b0]
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500d13
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x417b4], eax
push 1
push 0
mov edx, dword [ebp - 0x417b4]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00501976
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x417b8], eax
mov edx, dword [ebp - 0x411bc]
push edx
push 1
mov eax, dword [ebp - 0x417b8]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x417bc], eax
mov eax, dword [ebp - 0x411bc]
push eax
push 1
mov ecx, dword [ebp - 0x417bc]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x417c0], eax
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x417c4], eax
mov eax, dword [ebp - 0x417c0]
sub eax, 1
push eax
push 1
mov ecx, dword [ebp - 0x417c4]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500f1a
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x417c8], eax
mov ecx, dword [ebp - 0x411c0]
push ecx
push 2
mov edx, dword [ebp - 0x417c8]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x417cc], eax
mov edx, dword [ebp - 0x411c0]
push edx
push 2
mov eax, dword [ebp - 0x417cc]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x411c4]
call fcn.0054d328
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x411c0]
call fcn.0054d328
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x411bc]
call fcn.0054d328
jmp 0x49e23e
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x4119c]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x411b0]
call fcn.0054c3de
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
lea ecx, [ebp - 0x50]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41590], esp
lea edx, [ebp - 0x50]
push edx
call fcn.0054d095
mov dword [ebp - 0x41ab8], eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x41abc], eax
cmp dword [ebp - 0x41abc], 0
je 0x49edec
lea ecx, [ebp - 0x411dc]
call fcn.0054c3ab
mov byte [ebp - 4], 0x3a
mov eax, dword [0x5be480]
mov dword [ebp - 0x411c8], eax
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x411dc]
push ecx
lea ecx, [ebp - 0x410e0]
call fcn.004e9b9e
test eax, eax
je 0x49edce
mov edx, dword [ebp - 0x411d4]
mov dword [ebp - 0x411e0], edx
mov dword [ebp - 0x411e4], 0
jmp 0x49e872
mov eax, dword [ebp - 0x411e4]
add eax, 1
mov dword [ebp - 0x411e4], eax
mov ecx, dword [ebp - 0x411e4]
cmp ecx, dword [ebp - 0x411e0]
jge 0x49edce
mov edx, dword [ebp - 0x411e4]
push edx
lea eax, [ebp - 0x411e8]
push eax
lea ecx, [ebp - 0x411dc]
call fcn.00419890
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x411e8]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x417d0], edx
cmp dword [ebp - 0x417d0], 0
je 0x49edba
push ecx
mov ecx, esp
mov dword [ebp - 0x41594], esp
push 0x5b5c48
call fcn.0054d39c
mov dword [ebp - 0x41ac0], eax
mov eax, dword [ebp - 0x41ac0]
mov dword [ebp - 0x41ac4], eax
mov byte [ebp - 4], 0x3d
push ecx
mov ecx, esp
mov dword [ebp - 0x41598], esp
lea edx, [ebp - 0x411e8]
push edx
call fcn.0054d095
mov dword [ebp - 0x41ac8], eax
lea eax, [ebp - 0x411ec]
push eax
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 0x3c
call fcn.00425c70
mov dword [ebp - 0x41acc], eax
mov byte [ebp - 4], 0x3e
push 0x5b5c50
mov ecx, dword [ebp - 0x411ec]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x417d4], eax
xor edx, edx
cmp dword [ebp - 0x417d4], 0
setne dl
and edx, 0xff
test edx, edx
je 0x49edab
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5c58
push 0x5b5c80
lea ecx, [ebp - 0x411c8]
push ecx
call fcn.0054ab7c
add esp, 0x10
lea edx, [ebp - 0x411c8]
push edx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5c8c
lea ecx, [ebp - 0x411c8]
push ecx
call fcn.0054ab7c
add esp, 0xc
lea edx, [ebp - 0x411c8]
push edx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
lea eax, [ebp - 0x411e8]
push eax
lea ecx, [ebp - 0x60]
call fcn.0054d46f
lea ecx, [ebp - 0x411ec]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0054d46f
mov dword [ebp - 0x58], 1
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x4159c], esp
mov dword [ebp - 0x417d8], edx
mov eax, dword [ebp - 0x417d8]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x417d8]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x417d8]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x417d8]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x41
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x417d8]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0x417d8]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x417d8]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x417d8]
mov dword [ebp - 0x41ad0], eax
mov ecx, dword [ebp - 0x419e8]
mov ecx, dword [ecx + 0x1a34]
add ecx, 0x440
call fcn.0045ada0
lea edx, [ebp - 0x411ec]
push edx
lea ecx, [ebp - 0x411f0]
call fcn.0054d095
mov byte [ebp - 4], 0x43
push ecx
mov ecx, esp
mov dword [ebp - 0x415a0], esp
lea eax, [ebp - 0x411f0]
push eax
call fcn.0054d095
mov dword [ebp - 0x41ad4], eax
lea ecx, [ebp - 0x415a4]
push ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
call fcn.004bcc00
mov dword [ebp - 0x41ad8], eax
mov eax, dword [ebp - 0x41ad8]
mov dword [ebp - 0x41adc], eax
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x41adc]
push ecx
lea ecx, [ebp - 0x411f0]
call fcn.0054d46f
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x415a4]
call fcn.0054d328
push 0
mov edx, dword [ebp - 0x411f0]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x417dc], eax
mov eax, dword [ebp - 0x417dc]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x417e0], eax
cmp dword [ebp - 0x417e0], 0xffffffff
jne 0x49eb99
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x417e4], eax
call fcn.0055f60b
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x417e8], ecx
push 0x1a2
mov edx, dword [ebp - 0x417e8]
push edx
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x417ec], eax
mov eax, dword [ebp - 0x417ec]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x417f0], eax
push 0x5c3560
mov edx, dword [ebp - 0x417f0]
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500d13
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x417f4], eax
push 1
push 0
mov edx, dword [ebp - 0x417f4]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00501976
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x417f8], eax
mov edx, dword [ebp - 0x411e8]
push edx
push 1
mov eax, dword [ebp - 0x417f8]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x417fc], eax
mov eax, dword [ebp - 0x411e8]
push eax
push 1
mov ecx, dword [ebp - 0x417fc]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41800], eax
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41804], eax
mov eax, dword [ebp - 0x41800]
sub eax, 1
push eax
push 1
mov ecx, dword [ebp - 0x41804]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500f1a
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41808], eax
mov ecx, dword [ebp - 0x411ec]
push ecx
push 2
mov edx, dword [ebp - 0x41808]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4180c], eax
mov edx, dword [ebp - 0x411ec]
push edx
push 2
mov eax, dword [ebp - 0x4180c]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x411f0]
call fcn.0054d328
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x411ec]
call fcn.0054d328
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x411e8]
call fcn.0054d328
jmp 0x49e863
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x411c8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x411dc]
call fcn.0054c3de
push str.SOFTWAREMicrosoftWindowsCurrentVersionRunOnce
lea ecx, [ebp - 0x50]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x415a8], esp
lea edx, [ebp - 0x50]
push edx
call fcn.0054d095
mov dword [ebp - 0x41ae0], eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x41ae4], eax
cmp dword [ebp - 0x41ae4], 0
je 0x49f411
lea ecx, [ebp - 0x41208]
call fcn.0054c3ab
mov byte [ebp - 4], 0x45
mov eax, dword [0x5be480]
mov dword [ebp - 0x411f4], eax
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x41208]
push ecx
lea ecx, [ebp - 0x410e0]
call fcn.004e9b9e
test eax, eax
je 0x49f3f3
mov edx, dword [ebp - 0x41200]
mov dword [ebp - 0x4120c], edx
mov dword [ebp - 0x41210], 0
jmp 0x49ee97
mov eax, dword [ebp - 0x41210]
add eax, 1
mov dword [ebp - 0x41210], eax
mov ecx, dword [ebp - 0x41210]
cmp ecx, dword [ebp - 0x4120c]
jge 0x49f3f3
mov edx, dword [ebp - 0x41210]
push edx
lea eax, [ebp - 0x41214]
push eax
lea ecx, [ebp - 0x41208]
call fcn.00419890
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x41214]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x41810], edx
cmp dword [ebp - 0x41810], 0
je 0x49f3df
push ecx
mov ecx, esp
mov dword [ebp - 0x415ac], esp
push 0x5b5cf8
call fcn.0054d39c
mov dword [ebp - 0x41ae8], eax
mov eax, dword [ebp - 0x41ae8]
mov dword [ebp - 0x41aec], eax
mov byte [ebp - 4], 0x48
push ecx
mov ecx, esp
mov dword [ebp - 0x415b0], esp
lea edx, [ebp - 0x41214]
push edx
call fcn.0054d095
mov dword [ebp - 0x41af0], eax
lea eax, [ebp - 0x41218]
push eax
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 0x47
call fcn.00425c70
mov dword [ebp - 0x41af4], eax
mov byte [ebp - 4], 0x49
push 0x5b5d00
mov ecx, dword [ebp - 0x41218]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41814], eax
xor edx, edx
cmp dword [ebp - 0x41814], 0
setne dl
and edx, 0xff
test edx, edx
je 0x49f3d0
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5d08
push 0x5b5d30
lea ecx, [ebp - 0x411f4]
push ecx
call fcn.0054ab7c
add esp, 0x10
lea edx, [ebp - 0x411f4]
push edx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5d3c
lea ecx, [ebp - 0x411f4]
push ecx
call fcn.0054ab7c
add esp, 0xc
lea edx, [ebp - 0x411f4]
push edx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
lea eax, [ebp - 0x41214]
push eax
lea ecx, [ebp - 0x60]
call fcn.0054d46f
lea ecx, [ebp - 0x41218]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0054d46f
mov dword [ebp - 0x58], 1
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x415b4], esp
mov dword [ebp - 0x41818], edx
mov eax, dword [ebp - 0x41818]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x41818]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x4a
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x41818]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x41818]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x4c
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x41818]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x4d
mov eax, dword [ebp - 0x41818]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x41818]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x49
mov eax, dword [ebp - 0x41818]
mov dword [ebp - 0x41af8], eax
mov ecx, dword [ebp - 0x419e8]
mov ecx, dword [ecx + 0x1a34]
add ecx, 0x440
call fcn.0045ada0
lea edx, [ebp - 0x41218]
push edx
lea ecx, [ebp - 0x4121c]
call fcn.0054d095
mov byte [ebp - 4], 0x4e
push ecx
mov ecx, esp
mov dword [ebp - 0x415b8], esp
lea eax, [ebp - 0x4121c]
push eax
call fcn.0054d095
mov dword [ebp - 0x41afc], eax
lea ecx, [ebp - 0x415bc]
push ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
call fcn.004bcc00
mov dword [ebp - 0x41b00], eax
mov eax, dword [ebp - 0x41b00]
mov dword [ebp - 0x41b04], eax
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x41b04]
push ecx
lea ecx, [ebp - 0x4121c]
call fcn.0054d46f
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x415bc]
call fcn.0054d328
push 0
mov edx, dword [ebp - 0x4121c]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x4181c], eax
mov eax, dword [ebp - 0x4181c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x41820], eax
cmp dword [ebp - 0x41820], 0xffffffff
jne 0x49f1be
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x41824], eax
call fcn.0055f60b
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x41828], ecx
push 0x1a2
mov edx, dword [ebp - 0x41828]
push edx
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x4182c], eax
mov eax, dword [ebp - 0x4182c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41830], eax
push 0x5c3564
mov edx, dword [ebp - 0x41830]
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500d13
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41834], eax
push 1
push 0
mov edx, dword [ebp - 0x41834]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00501976
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41838], eax
mov edx, dword [ebp - 0x41214]
push edx
push 1
mov eax, dword [ebp - 0x41838]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4183c], eax
mov eax, dword [ebp - 0x41214]
push eax
push 1
mov ecx, dword [ebp - 0x4183c]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41840], eax
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41844], eax
mov eax, dword [ebp - 0x41840]
sub eax, 1
push eax
push 1
mov ecx, dword [ebp - 0x41844]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500f1a
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41848], eax
mov ecx, dword [ebp - 0x41218]
push ecx
push 2
mov edx, dword [ebp - 0x41848]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4184c], eax
mov edx, dword [ebp - 0x41218]
push edx
push 2
mov eax, dword [ebp - 0x4184c]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x4121c]
call fcn.0054d328
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x41218]
call fcn.0054d328
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x41214]
call fcn.0054d328
jmp 0x49ee88
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x411f4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41208]
call fcn.0054c3de
push str.SOFTWAREMicrosoftWindowsCurrentVersionRunOnceEx
lea ecx, [ebp - 0x50]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x415c0], esp
lea edx, [ebp - 0x50]
push edx
call fcn.0054d095
mov dword [ebp - 0x41b08], eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x41b0c], eax
cmp dword [ebp - 0x41b0c], 0
je 0x49fa36
lea ecx, [ebp - 0x41234]
call fcn.0054c3ab
mov byte [ebp - 4], 0x50
mov eax, dword [0x5be480]
mov dword [ebp - 0x41220], eax
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x41234]
push ecx
lea ecx, [ebp - 0x410e0]
call fcn.004e9b9e
test eax, eax
je 0x49fa18
mov edx, dword [ebp - 0x4122c]
mov dword [ebp - 0x41238], edx
mov dword [ebp - 0x4123c], 0
jmp 0x49f4bc
mov eax, dword [ebp - 0x4123c]
add eax, 1
mov dword [ebp - 0x4123c], eax
mov ecx, dword [ebp - 0x4123c]
cmp ecx, dword [ebp - 0x41238]
jge 0x49fa18
mov edx, dword [ebp - 0x4123c]
push edx
lea eax, [ebp - 0x41240]
push eax
lea ecx, [ebp - 0x41234]
call fcn.00419890
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0x41240]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x41850], edx
cmp dword [ebp - 0x41850], 0
je 0x49fa04
push ecx
mov ecx, esp
mov dword [ebp - 0x415c4], esp
push 0x5b5dac
call fcn.0054d39c
mov dword [ebp - 0x41b10], eax
mov eax, dword [ebp - 0x41b10]
mov dword [ebp - 0x41b14], eax
mov byte [ebp - 4], 0x53
push ecx
mov ecx, esp
mov dword [ebp - 0x415c8], esp
lea edx, [ebp - 0x41240]
push edx
call fcn.0054d095
mov dword [ebp - 0x41b18], eax
lea eax, [ebp - 0x41244]
push eax
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 0x52
call fcn.00425c70
mov dword [ebp - 0x41b1c], eax
mov byte [ebp - 4], 0x54
push 0x5b5db4
mov ecx, dword [ebp - 0x41244]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41854], eax
xor edx, edx
cmp dword [ebp - 0x41854], 0
setne dl
and edx, 0xff
test edx, edx
je 0x49f9f5
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5dbc
push 0x5b5de4
lea ecx, [ebp - 0x41220]
push ecx
call fcn.0054ab7c
add esp, 0x10
lea edx, [ebp - 0x41220]
push edx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5df0
lea ecx, [ebp - 0x41220]
push ecx
call fcn.0054ab7c
add esp, 0xc
lea edx, [ebp - 0x41220]
push edx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
lea eax, [ebp - 0x41240]
push eax
lea ecx, [ebp - 0x60]
call fcn.0054d46f
lea ecx, [ebp - 0x41244]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0054d46f
mov dword [ebp - 0x58], 1
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x415cc], esp
mov dword [ebp - 0x41858], edx
mov eax, dword [ebp - 0x41858]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x41858]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x55
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x41858]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x41858]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x57
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x41858]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x58
mov eax, dword [ebp - 0x41858]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x41858]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x54
mov eax, dword [ebp - 0x41858]
mov dword [ebp - 0x41b20], eax
mov ecx, dword [ebp - 0x419e8]
mov ecx, dword [ecx + 0x1a34]
add ecx, 0x440
call fcn.0045ada0
lea edx, [ebp - 0x41244]
push edx
lea ecx, [ebp - 0x41248]
call fcn.0054d095
mov byte [ebp - 4], 0x59
push ecx
mov ecx, esp
mov dword [ebp - 0x415d0], esp
lea eax, [ebp - 0x41248]
push eax
call fcn.0054d095
mov dword [ebp - 0x41b24], eax
lea ecx, [ebp - 0x415d4]
push ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
call fcn.004bcc00
mov dword [ebp - 0x41b28], eax
mov eax, dword [ebp - 0x41b28]
mov dword [ebp - 0x41b2c], eax
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x41b2c]
push ecx
lea ecx, [ebp - 0x41248]
call fcn.0054d46f
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x415d4]
call fcn.0054d328
push 0
mov edx, dword [ebp - 0x41248]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x4185c], eax
mov eax, dword [ebp - 0x4185c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x41860], eax
cmp dword [ebp - 0x41860], 0xffffffff
jne 0x49f7e3
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x41864], eax
call fcn.0055f60b
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x41868], ecx
push 0x1a2
mov edx, dword [ebp - 0x41868]
push edx
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x4186c], eax
mov eax, dword [ebp - 0x4186c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41870], eax
push 0x5c3568
mov edx, dword [ebp - 0x41870]
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500d13
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41874], eax
push 1
push 0
mov edx, dword [ebp - 0x41874]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00501976
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41878], eax
mov edx, dword [ebp - 0x41240]
push edx
push 1
mov eax, dword [ebp - 0x41878]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4187c], eax
mov eax, dword [ebp - 0x41240]
push eax
push 1
mov ecx, dword [ebp - 0x4187c]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41880], eax
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41884], eax
mov eax, dword [ebp - 0x41880]
sub eax, 1
push eax
push 1
mov ecx, dword [ebp - 0x41884]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500f1a
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41888], eax
mov ecx, dword [ebp - 0x41244]
push ecx
push 2
mov edx, dword [ebp - 0x41888]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4188c], eax
mov edx, dword [ebp - 0x41244]
push edx
push 2
mov eax, dword [ebp - 0x4188c]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x41248]
call fcn.0054d328
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x41244]
call fcn.0054d328
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x41240]
call fcn.0054d328
jmp 0x49f4ad
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x41220]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41234]
call fcn.0054c3de
push str.SOFTWAREMicrosoftWindowsCurrentVersionRunServices
lea ecx, [ebp - 0x50]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x415d8], esp
lea edx, [ebp - 0x50]
push edx
call fcn.0054d095
mov dword [ebp - 0x41b30], eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x41b34], eax
cmp dword [ebp - 0x41b34], 0
je 0x4a005b
lea ecx, [ebp - 0x41260]
call fcn.0054c3ab
mov byte [ebp - 4], 0x5b
mov eax, dword [0x5be480]
mov dword [ebp - 0x4124c], eax
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x41260]
push ecx
lea ecx, [ebp - 0x410e0]
call fcn.004e9b9e
test eax, eax
je 0x4a003d
mov edx, dword [ebp - 0x41258]
mov dword [ebp - 0x41264], edx
mov dword [ebp - 0x41268], 0
jmp 0x49fae1
mov eax, dword [ebp - 0x41268]
add eax, 1
mov dword [ebp - 0x41268], eax
mov ecx, dword [ebp - 0x41268]
cmp ecx, dword [ebp - 0x41264]
jge 0x4a003d
mov edx, dword [ebp - 0x41268]
push edx
lea eax, [ebp - 0x4126c]
push eax
lea ecx, [ebp - 0x41260]
call fcn.00419890
mov byte [ebp - 4], 0x5d
mov ecx, dword [ebp - 0x4126c]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x41890], edx
cmp dword [ebp - 0x41890], 0
je 0x4a0029
push ecx
mov ecx, esp
mov dword [ebp - 0x415dc], esp
push 0x5b5e64
call fcn.0054d39c
mov dword [ebp - 0x41b38], eax
mov eax, dword [ebp - 0x41b38]
mov dword [ebp - 0x41b3c], eax
mov byte [ebp - 4], 0x5e
push ecx
mov ecx, esp
mov dword [ebp - 0x415e0], esp
lea edx, [ebp - 0x4126c]
push edx
call fcn.0054d095
mov dword [ebp - 0x41b40], eax
lea eax, [ebp - 0x41270]
push eax
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 0x5d
call fcn.00425c70
mov dword [ebp - 0x41b44], eax
mov byte [ebp - 4], 0x5f
push 0x5b5e6c
mov ecx, dword [ebp - 0x41270]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41894], eax
xor edx, edx
cmp dword [ebp - 0x41894], 0
setne dl
and edx, 0xff
test edx, edx
je 0x4a001a
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5e74
push 0x5b5e9c
lea ecx, [ebp - 0x4124c]
push ecx
call fcn.0054ab7c
add esp, 0x10
lea edx, [ebp - 0x4124c]
push edx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5ea8
lea ecx, [ebp - 0x4124c]
push ecx
call fcn.0054ab7c
add esp, 0xc
lea edx, [ebp - 0x4124c]
push edx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
lea eax, [ebp - 0x4126c]
push eax
lea ecx, [ebp - 0x60]
call fcn.0054d46f
lea ecx, [ebp - 0x41270]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0054d46f
mov dword [ebp - 0x58], 1
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x415e4], esp
mov dword [ebp - 0x41898], edx
mov eax, dword [ebp - 0x41898]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x41898]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x60
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x41898]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x41898]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x62
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x41898]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x63
mov eax, dword [ebp - 0x41898]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x41898]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x5f
mov eax, dword [ebp - 0x41898]
mov dword [ebp - 0x41b48], eax
mov ecx, dword [ebp - 0x419e8]
mov ecx, dword [ecx + 0x1a34]
add ecx, 0x440
call fcn.0045ada0
lea edx, [ebp - 0x41270]
push edx
lea ecx, [ebp - 0x41274]
call fcn.0054d095
mov byte [ebp - 4], 0x64
push ecx
mov ecx, esp
mov dword [ebp - 0x415e8], esp
lea eax, [ebp - 0x41274]
push eax
call fcn.0054d095
mov dword [ebp - 0x41b4c], eax
lea ecx, [ebp - 0x415ec]
push ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
call fcn.004bcc00
mov dword [ebp - 0x41b50], eax
mov eax, dword [ebp - 0x41b50]
mov dword [ebp - 0x41b54], eax
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x41b54]
push ecx
lea ecx, [ebp - 0x41274]
call fcn.0054d46f
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x415ec]
call fcn.0054d328
push 0
mov edx, dword [ebp - 0x41274]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x4189c], eax
mov eax, dword [ebp - 0x4189c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x418a0], eax
cmp dword [ebp - 0x418a0], 0xffffffff
jne 0x49fe08
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x418a4], eax
call fcn.0055f60b
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x418a8], ecx
push 0x1a2
mov edx, dword [ebp - 0x418a8]
push edx
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x418ac], eax
mov eax, dword [ebp - 0x418ac]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x418b0], eax
push 0x5c356c
mov edx, dword [ebp - 0x418b0]
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500d13
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x418b4], eax
push 1
push 0
mov edx, dword [ebp - 0x418b4]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00501976
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x418b8], eax
mov edx, dword [ebp - 0x4126c]
push edx
push 1
mov eax, dword [ebp - 0x418b8]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x418bc], eax
mov eax, dword [ebp - 0x4126c]
push eax
push 1
mov ecx, dword [ebp - 0x418bc]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x418c0], eax
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x418c4], eax
mov eax, dword [ebp - 0x418c0]
sub eax, 1
push eax
push 1
mov ecx, dword [ebp - 0x418c4]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500f1a
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x418c8], eax
mov ecx, dword [ebp - 0x41270]
push ecx
push 2
mov edx, dword [ebp - 0x418c8]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x418cc], eax
mov edx, dword [ebp - 0x41270]
push edx
push 2
mov eax, dword [ebp - 0x418cc]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x41274]
call fcn.0054d328
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x41270]
call fcn.0054d328
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x4126c]
call fcn.0054d328
jmp 0x49fad2
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x4124c]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41260]
call fcn.0054c3de
push str.SOFTWAREMicrosoftWindowsCurrentVersionRunServicesOnce
lea ecx, [ebp - 0x50]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x415f0], esp
lea edx, [ebp - 0x50]
push edx
call fcn.0054d095
mov dword [ebp - 0x41b58], eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x41b5c], eax
cmp dword [ebp - 0x41b5c], 0
je 0x4a0680
lea ecx, [ebp - 0x4128c]
call fcn.0054c3ab
mov byte [ebp - 4], 0x66
mov eax, dword [0x5be480]
mov dword [ebp - 0x41278], eax
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x4128c]
push ecx
lea ecx, [ebp - 0x410e0]
call fcn.004e9b9e
test eax, eax
je 0x4a0662
mov edx, dword [ebp - 0x41284]
mov dword [ebp - 0x41290], edx
mov dword [ebp - 0x41294], 0
jmp 0x4a0106
mov eax, dword [ebp - 0x41294]
add eax, 1
mov dword [ebp - 0x41294], eax
mov ecx, dword [ebp - 0x41294]
cmp ecx, dword [ebp - 0x41290]
jge 0x4a0662
mov edx, dword [ebp - 0x41294]
push edx
lea eax, [ebp - 0x41298]
push eax
lea ecx, [ebp - 0x4128c]
call fcn.00419890
mov byte [ebp - 4], 0x68
mov ecx, dword [ebp - 0x41298]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x418d0], edx
cmp dword [ebp - 0x418d0], 0
je 0x4a064e
push ecx
mov ecx, esp
mov dword [ebp - 0x415f4], esp
push 0x5b5f24
call fcn.0054d39c
mov dword [ebp - 0x41b60], eax
mov eax, dword [ebp - 0x41b60]
mov dword [ebp - 0x41b64], eax
mov byte [ebp - 4], 0x69
push ecx
mov ecx, esp
mov dword [ebp - 0x415f8], esp
lea edx, [ebp - 0x41298]
push edx
call fcn.0054d095
mov dword [ebp - 0x41b68], eax
lea eax, [ebp - 0x4129c]
push eax
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 0x68
call fcn.00425c70
mov dword [ebp - 0x41b6c], eax
mov byte [ebp - 4], 0x6a
push 0x5b5f2c
mov ecx, dword [ebp - 0x4129c]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x418d4], eax
xor edx, edx
cmp dword [ebp - 0x418d4], 0
setne dl
and edx, 0xff
test edx, edx
je 0x4a063f
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5f34
push 0x5b5f5c
lea ecx, [ebp - 0x41278]
push ecx
call fcn.0054ab7c
add esp, 0x10
lea edx, [ebp - 0x41278]
push edx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
mov eax, dword [ebp - 0x50]
push eax
push 0x5b5f68
lea ecx, [ebp - 0x41278]
push ecx
call fcn.0054ab7c
add esp, 0xc
lea edx, [ebp - 0x41278]
push edx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
lea eax, [ebp - 0x41298]
push eax
lea ecx, [ebp - 0x60]
call fcn.0054d46f
lea ecx, [ebp - 0x4129c]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0054d46f
mov dword [ebp - 0x58], 1
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x415fc], esp
mov dword [ebp - 0x418d8], edx
mov eax, dword [ebp - 0x418d8]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x418d8]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x6b
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x418d8]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x418d8]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x6d
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x418d8]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x6e
mov eax, dword [ebp - 0x418d8]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x418d8]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x6a
mov eax, dword [ebp - 0x418d8]
mov dword [ebp - 0x41b70], eax
mov ecx, dword [ebp - 0x419e8]
mov ecx, dword [ecx + 0x1a34]
add ecx, 0x440
call fcn.0045ada0
lea edx, [ebp - 0x4129c]
push edx
lea ecx, [ebp - 0x412a0]
call fcn.0054d095
mov byte [ebp - 4], 0x6f
push ecx
mov ecx, esp
mov dword [ebp - 0x41600], esp
lea eax, [ebp - 0x412a0]
push eax
call fcn.0054d095
mov dword [ebp - 0x41b74], eax
lea ecx, [ebp - 0x41604]
push ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
call fcn.004bcc00
mov dword [ebp - 0x41b78], eax
mov eax, dword [ebp - 0x41b78]
mov dword [ebp - 0x41b7c], eax
mov byte [ebp - 4], 0x70
mov ecx, dword [ebp - 0x41b7c]
push ecx
lea ecx, [ebp - 0x412a0]
call fcn.0054d46f
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x41604]
call fcn.0054d328
push 0
mov edx, dword [ebp - 0x412a0]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x418dc], eax
mov eax, dword [ebp - 0x418dc]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x418e0], eax
cmp dword [ebp - 0x418e0], 0xffffffff
jne 0x4a042d
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x418e4], eax
call fcn.0055f60b
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x418e8], ecx
push 0x1a2
mov edx, dword [ebp - 0x418e8]
push edx
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x418ec], eax
mov eax, dword [ebp - 0x418ec]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x418f0], eax
push 0x5c3570
mov edx, dword [ebp - 0x418f0]
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500d13
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x418f4], eax
push 1
push 0
mov edx, dword [ebp - 0x418f4]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00501976
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x418f8], eax
mov edx, dword [ebp - 0x41298]
push edx
push 1
mov eax, dword [ebp - 0x418f8]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x418fc], eax
mov eax, dword [ebp - 0x41298]
push eax
push 1
mov ecx, dword [ebp - 0x418fc]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41900], eax
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41904], eax
mov eax, dword [ebp - 0x41900]
sub eax, 1
push eax
push 1
mov ecx, dword [ebp - 0x41904]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500f1a
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41908], eax
mov ecx, dword [ebp - 0x4129c]
push ecx
push 2
mov edx, dword [ebp - 0x41908]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4190c], eax
mov edx, dword [ebp - 0x4129c]
push edx
push 2
mov eax, dword [ebp - 0x4190c]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x412a0]
call fcn.0054d328
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x4129c]
call fcn.0054d328
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x41298]
call fcn.0054d328
jmp 0x4a00f7
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x41278]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4128c]
call fcn.0054c3de
push str.SOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorerRun
lea ecx, [ebp - 0x50]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41608], esp
lea edx, [ebp - 0x50]
push edx
call fcn.0054d095
mov dword [ebp - 0x41b80], eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x41b84], eax
cmp dword [ebp - 0x41b84], 0
je 0x4a0ca5
lea ecx, [ebp - 0x412b8]
call fcn.0054c3ab
mov byte [ebp - 4], 0x71
mov eax, dword [0x5be480]
mov dword [ebp - 0x412a4], eax
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x412b8]
push ecx
lea ecx, [ebp - 0x410e0]
call fcn.004e9b9e
test eax, eax
je 0x4a0c87
mov edx, dword [ebp - 0x412b0]
mov dword [ebp - 0x412bc], edx
mov dword [ebp - 0x412c0], 0
jmp 0x4a072b
mov eax, dword [ebp - 0x412c0]
add eax, 1
mov dword [ebp - 0x412c0], eax
mov ecx, dword [ebp - 0x412c0]
cmp ecx, dword [ebp - 0x412bc]
jge 0x4a0c87
mov edx, dword [ebp - 0x412c0]
push edx
lea eax, [ebp - 0x412c4]
push eax
lea ecx, [ebp - 0x412b8]
call fcn.00419890
mov byte [ebp - 4], 0x73
mov ecx, dword [ebp - 0x412c4]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x41910], edx
cmp dword [ebp - 0x41910], 0
je 0x4a0c73
push ecx
mov ecx, esp
mov dword [ebp - 0x4160c], esp
push 0x5b5ff0
call fcn.0054d39c
mov dword [ebp - 0x41b88], eax
mov eax, dword [ebp - 0x41b88]
mov dword [ebp - 0x41b8c], eax
mov byte [ebp - 4], 0x74
push ecx
mov ecx, esp
mov dword [ebp - 0x41610], esp
lea edx, [ebp - 0x412c4]
push edx
call fcn.0054d095
mov dword [ebp - 0x41b90], eax
lea eax, [ebp - 0x412c8]
push eax
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 0x73
call fcn.00425c70
mov dword [ebp - 0x41b94], eax
mov byte [ebp - 4], 0x75
push 0x5b5ff8
mov ecx, dword [ebp - 0x412c8]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41914], eax
xor edx, edx
cmp dword [ebp - 0x41914], 0
setne dl
and edx, 0xff
test edx, edx
je 0x4a0c64
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x50]
push eax
push 0x5b6000
push str._s_s
lea ecx, [ebp - 0x412a4]
push ecx
call fcn.0054ab7c
add esp, 0x10
lea edx, [ebp - 0x412a4]
push edx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
mov eax, dword [ebp - 0x50]
push eax
push 0x5b6034
lea ecx, [ebp - 0x412a4]
push ecx
call fcn.0054ab7c
add esp, 0xc
lea edx, [ebp - 0x412a4]
push edx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
lea eax, [ebp - 0x412c4]
push eax
lea ecx, [ebp - 0x60]
call fcn.0054d46f
lea ecx, [ebp - 0x412c8]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0054d46f
mov dword [ebp - 0x58], 1
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x41614], esp
mov dword [ebp - 0x41918], edx
mov eax, dword [ebp - 0x41918]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x41918]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x76
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x41918]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x41918]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x78
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x41918]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x79
mov eax, dword [ebp - 0x41918]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x41918]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x75
mov eax, dword [ebp - 0x41918]
mov dword [ebp - 0x41b98], eax
mov ecx, dword [ebp - 0x419e8]
mov ecx, dword [ecx + 0x1a34]
add ecx, 0x440
call fcn.0045ada0
lea edx, [ebp - 0x412c8]
push edx
lea ecx, [ebp - 0x412cc]
call fcn.0054d095
mov byte [ebp - 4], 0x7a
push ecx
mov ecx, esp
mov dword [ebp - 0x41618], esp
lea eax, [ebp - 0x412cc]
push eax
call fcn.0054d095
mov dword [ebp - 0x41b9c], eax
lea ecx, [ebp - 0x4161c]
push ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
call fcn.004bcc00
mov dword [ebp - 0x41ba0], eax
mov eax, dword [ebp - 0x41ba0]
mov dword [ebp - 0x41ba4], eax
mov byte [ebp - 4], 0x7b
mov ecx, dword [ebp - 0x41ba4]
push ecx
lea ecx, [ebp - 0x412cc]
call fcn.0054d46f
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x4161c]
call fcn.0054d328
push 0
mov edx, dword [ebp - 0x412cc]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x4191c], eax
mov eax, dword [ebp - 0x4191c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x41920], eax
cmp dword [ebp - 0x41920], 0xffffffff
jne 0x4a0a52
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x41924], eax
call fcn.0055f60b
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x41928], ecx
push 0x1a2
mov edx, dword [ebp - 0x41928]
push edx
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x4192c], eax
mov eax, dword [ebp - 0x4192c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41930], eax
push 0x5c3574
mov edx, dword [ebp - 0x41930]
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500d13
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41934], eax
push 1
push 0
mov edx, dword [ebp - 0x41934]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00501976
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41938], eax
mov edx, dword [ebp - 0x412c4]
push edx
push 1
mov eax, dword [ebp - 0x41938]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4193c], eax
mov eax, dword [ebp - 0x412c4]
push eax
push 1
mov ecx, dword [ebp - 0x4193c]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41940], eax
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41944], eax
mov eax, dword [ebp - 0x41940]
sub eax, 1
push eax
push 1
mov ecx, dword [ebp - 0x41944]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500f1a
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x41948], eax
mov ecx, dword [ebp - 0x412c8]
push ecx
push 2
mov edx, dword [ebp - 0x41948]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4194c], eax
mov edx, dword [ebp - 0x412c8]
push edx
push 2
mov eax, dword [ebp - 0x4194c]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x412cc]
call fcn.0054d328
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x412c8]
call fcn.0054d328
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x412c4]
call fcn.0054d328
jmp 0x4a071c
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x412a4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x412b8]
call fcn.0054c3de
lea ecx, [ebp - 0x28]
call fcn.0054c3ab
mov byte [ebp - 4], 0x7c
mov ecx, dword [0x5be480]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 0x7d
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders
lea ecx, [ebp - 0x14]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41620], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x41ba8], eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x41bac], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x41624], esp
push 0x5b60c0
call fcn.0054d39c
mov dword [ebp - 0x41bb0], eax
mov eax, dword [ebp - 0x41bb0]
mov dword [ebp - 0x41bb4], eax
mov byte [ebp - 4], 0x7e
push ecx
mov ecx, esp
mov dword [ebp - 0x41628], esp
push str.Common_Startup
call fcn.0054d39c
mov dword [ebp - 0x41bb8], eax
lea ecx, [ebp - 0x4c]
push ecx
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 0x7d
call fcn.00425c70
mov dword [ebp - 0x41bbc], eax
mov byte [ebp - 4], 0x7f
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx - 8]
mov dword [ebp - 0x41950], eax
cmp dword [ebp - 0x41950], 0
je 0x4a0d88
push 0x5b60e8
mov ecx, dword [ebp - 0x4c]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41954], eax
push 0x5c
lea ecx, [ebp - 0x4c]
call fcn.0054a7e6
cmp eax, 1
je 0x4a0da4
push 0x5b60f0
lea ecx, [ebp - 0x4c]
call fcn.0054d719
lea ecx, [ebp - 0x48]
call fcn.0052f086
mov byte [ebp - 4], 0x80
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x10]
call fcn.0054d095
mov byte [ebp - 4], 0x81
mov ecx, dword [0x5be480]
mov dword [ebp - 0x2c], ecx
mov byte [ebp - 4], 0x82
push 0x5b60f4
lea ecx, [ebp - 0x41630]
call fcn.0054d3f1
mov byte [ebp - 4], 0x83
push 1
lea edx, [ebp - 0x41634]
push edx
lea ecx, [ebp - 0x10]
call fcn.0054a6f2
mov dword [ebp - 0x41960], eax
mov eax, dword [ebp - 0x41630]
mov dword [ebp - 0x41958], eax
mov ecx, dword [ebp - 0x41958]
push ecx
mov edx, dword [ebp - 0x41960]
mov eax, dword [edx]
push eax
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x4195c], eax
xor ecx, ecx
cmp dword [ebp - 0x4195c], 0
setne cl
mov byte [ebp - 0x4162c], cl
lea ecx, [ebp - 0x41634]
call fcn.0054d328
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x41630]
call fcn.0054d328
mov edx, dword [ebp - 0x4162c]
and edx, 0xff
test edx, edx
je 0x4a0e6b
push 0x5b60f8
lea ecx, [ebp - 0x10]
call fcn.0054d719
push 0x5b60fc
lea ecx, [ebp - 0x10]
call fcn.0054d719
push 0
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0x48]
call fcn.0052f14b
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x4a1056
lea ecx, [ebp - 0x48]
call fcn.0052f371
mov dword [ebp - 0x70], eax
push 0x10
lea ecx, [ebp - 0x48]
mov edx, dword [ebp - 0x48]
call dword [edx + 0x38]
mov dword [ebp - 0x41964], eax
cmp dword [ebp - 0x41964], 0
jne 0x4a1051
lea ecx, [ebp - 0x48]
call fcn.0052f334
test eax, eax
jne 0x4a1051
lea eax, [ebp - 0x412d8]
push eax
lea ecx, [ebp - 0x48]
call fcn.0052f440
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x412e0]
push ecx
lea ecx, [ebp - 0x48]
call fcn.0052f56c
mov byte [ebp - 4], 0x85
mov edx, dword [0x5be480]
mov dword [ebp - 0x412d4], edx
mov byte [ebp - 4], 0x86
lea eax, [ebp - 0x412e0]
push eax
lea ecx, [ebp - 0x412d0]
call fcn.0054d095
mov byte [ebp - 4], 0x87
push 0x2e
lea ecx, [ebp - 0x412d0]
call fcn.0054a7e6
mov dword [ebp - 0x412dc], eax
cmp dword [ebp - 0x412dc], 0xffffffff
je 0x4a1015
mov ecx, dword [0x5be480]
mov dword [ebp - 0x412e4], ecx
mov byte [ebp - 4], 0x88
mov edx, dword [ebp - 0x412d0]
mov eax, dword [edx - 8]
mov dword [ebp - 0x41968], eax
mov ecx, dword [ebp - 0x41968]
sub ecx, dword [ebp - 0x412dc]
push ecx
lea edx, [ebp - 0x41638]
push edx
lea ecx, [ebp - 0x412d0]
call fcn.0054a6f2
mov dword [ebp - 0x41bc0], eax
mov eax, dword [ebp - 0x41bc0]
mov dword [ebp - 0x41bc4], eax
mov byte [ebp - 4], 0x89
mov ecx, dword [ebp - 0x41bc4]
push ecx
lea ecx, [ebp - 0x412e4]
call fcn.0054d46f
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x41638]
call fcn.0054d328
lea ecx, [ebp - 0x412e4]
call fcn.0054d877
push 0x5b6104
mov edx, dword [ebp - 0x412e4]
push edx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x4196c], eax
xor eax, eax
cmp dword [ebp - 0x4196c], 0
sete al
and eax, 0xff
test eax, eax
je 0x4a1006
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x41970], ecx
lea edx, [ebp - 0x412d8]
push edx
mov eax, dword [ebp - 0x41970]
push eax
lea ecx, [ebp - 0x28]
call fcn.0054c5b3
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x412e4]
call fcn.0054d328
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x412d0]
call fcn.0054d328
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x412d4]
call fcn.0054d328
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x412e0]
call fcn.0054d328
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x412d8]
call fcn.0054d328
jmp 0x4a0e89
lea ecx, [ebp - 0x48]
call fcn.0052f101
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x4163c], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x41bc8], eax
push SysReAllocStringLen
lea ecx, [ebp - 0x410e0]
call fcn.004e75e4
mov dword [ebp - 0x41bcc], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x41640], esp
push 0x5b6110
call fcn.0054d39c
mov dword [ebp - 0x41bd0], eax
mov eax, dword [ebp - 0x41bd0]
mov dword [ebp - 0x41bd4], eax
mov byte [ebp - 4], 0x8a
push ecx
mov ecx, esp
mov dword [ebp - 0x41644], esp
push 0x5b6118
call fcn.0054d39c
mov dword [ebp - 0x41bd8], eax
lea ecx, [ebp - 0x410e8]
push ecx
lea ecx, [ebp - 0x410e0]
mov byte [ebp - 4], 0x82
call fcn.00425c70
mov dword [ebp - 0x41bdc], eax
mov byte [ebp - 4], 0x8b
mov edx, dword [ebp - 0x410e8]
mov eax, dword [edx - 8]
mov dword [ebp - 0x41974], eax
cmp dword [ebp - 0x41974], 0
je 0x4a1124
push 0x5b6128
mov ecx, dword [ebp - 0x410e8]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41978], eax
push 0x5c
lea ecx, [ebp - 0x410e8]
call fcn.0054a7e6
cmp eax, 1
je 0x4a1146
push 0x5b6130
lea ecx, [ebp - 0x410e8]
call fcn.0054d719
lea eax, [ebp - 0x410e8]
push eax
lea ecx, [ebp - 0x10]
call fcn.0054d46f
push 0x5b6134
lea ecx, [ebp - 0x4164c]
call fcn.0054d3f1
mov byte [ebp - 4], 0x8c
push 1
lea ecx, [ebp - 0x41650]
push ecx
lea ecx, [ebp - 0x10]
call fcn.0054a6f2
mov dword [ebp - 0x41984], eax
mov edx, dword [ebp - 0x4164c]
mov dword [ebp - 0x4197c], edx
mov eax, dword [ebp - 0x4197c]
push eax
mov ecx, dword [ebp - 0x41984]
mov edx, dword [ecx]
push edx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41980], eax
xor eax, eax
cmp dword [ebp - 0x41980], 0
setne al
mov byte [ebp - 0x41648], al
lea ecx, [ebp - 0x41650]
call fcn.0054d328
mov byte [ebp - 4], 0x8b
lea ecx, [ebp - 0x4164c]
call fcn.0054d328
mov ecx, dword [ebp - 0x41648]
and ecx, 0xff
test ecx, ecx
je 0x4a11f3
push 0x5b6138
lea ecx, [ebp - 0x10]
call fcn.0054d719
push 0x5b613c
lea ecx, [ebp - 0x10]
call fcn.0054d719
push 0
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0x48]
call fcn.0052f14b
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x4a13de
lea ecx, [ebp - 0x48]
call fcn.0052f371
mov dword [ebp - 0x70], eax
push 0x10
lea ecx, [ebp - 0x48]
mov eax, dword [ebp - 0x48]
call dword [eax + 0x38]
mov dword [ebp - 0x41988], eax
cmp dword [ebp - 0x41988], 0
jne 0x4a13d9
lea ecx, [ebp - 0x48]
call fcn.0052f334
test eax, eax
jne 0x4a13d9
lea ecx, [ebp - 0x412f0]
push ecx
lea ecx, [ebp - 0x48]
call fcn.0052f440
mov byte [ebp - 4], 0x8d
lea edx, [ebp - 0x412f8]
push edx
lea ecx, [ebp - 0x48]
call fcn.0052f56c
mov byte [ebp - 4], 0x8e
mov eax, dword [0x5be480]
mov dword [ebp - 0x412ec], eax
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x412f8]
push ecx
lea ecx, [ebp - 0x412e8]
call fcn.0054d095
mov byte [ebp - 4], 0x90
push 0x2e
lea ecx, [ebp - 0x412e8]
call fcn.0054a7e6
mov dword [ebp - 0x412f4], eax
cmp dword [ebp - 0x412f4], 0xffffffff
je 0x4a139d
mov edx, dword [0x5be480]
mov dword [ebp - 0x412fc], edx
mov byte [ebp - 4], 0x91
mov eax, dword [ebp - 0x412e8]
mov ecx, dword [eax - 8]
mov dword [ebp - 0x4198c], ecx
mov edx, dword [ebp - 0x4198c]
sub edx, dword [ebp - 0x412f4]
push edx
lea eax, [ebp - 0x41654]
push eax
lea ecx, [ebp - 0x412e8]
call fcn.0054a6f2
mov dword [ebp - 0x41be0], eax
mov ecx, dword [ebp - 0x41be0]
mov dword [ebp - 0x41be4], ecx
mov byte [ebp - 4], 0x92
mov edx, dword [ebp - 0x41be4]
push edx
lea ecx, [ebp - 0x412fc]
call fcn.0054d46f
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0x41654]
call fcn.0054d328
lea ecx, [ebp - 0x412fc]
call fcn.0054d877
push 0x5b6144
mov eax, dword [ebp - 0x412fc]
push eax
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41990], eax
xor ecx, ecx
cmp dword [ebp - 0x41990], 0
sete cl
and ecx, 0xff
test ecx, ecx
je 0x4a138e
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x41994], edx
lea eax, [ebp - 0x412f0]
push eax
mov ecx, dword [ebp - 0x41994]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0054c5b3
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x412fc]
call fcn.0054d328
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x412e8]
call fcn.0054d328
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x412ec]
call fcn.0054d328
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x412f8]
call fcn.0054d328
mov byte [ebp - 4], 0x8b
lea ecx, [ebp - 0x412f0]
call fcn.0054d328
jmp 0x4a1211
lea ecx, [ebp - 0x48]
call fcn.0052f101
mov dword [ebp - 0x410e4], 0
jmp 0x4a1401
mov edx, dword [ebp - 0x410e4]
add edx, 1
mov dword [ebp - 0x410e4], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x41998], eax
mov ecx, dword [ebp - 0x410e4]
cmp ecx, dword [ebp - 0x41998]
jge 0x4a1973
mov edx, dword [0x5be480]
mov dword [ebp - 0x41514], edx
mov byte [ebp - 4], 0x93
mov eax, dword [0x5be480]
mov dword [ebp - 0x4150c], eax
mov byte [ebp - 4], 0x94
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x410e4]
lea eax, [ecx + edx*4]
push eax
lea ecx, [ebp - 0x41514]
call fcn.0054d46f
mov dword [ebp - 0x6c], 1
lea ecx, [ebp - 0x41514]
push ecx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
lea edx, [ebp - 0x41514]
push edx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
push 0x5c3578
lea ecx, [ebp - 0x60]
call fcn.0054d4bf
push 0x5c357c
lea ecx, [ebp - 0x5c]
call fcn.0054d4bf
mov dword [ebp - 0x58], 1
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x41658], esp
mov dword [ebp - 0x4199c], eax
mov ecx, dword [ebp - 0x4199c]
mov edx, dword [ebp - 0x6c]
mov dword [ecx], edx
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x4199c]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0x64]
push ecx
mov ecx, dword [ebp - 0x4199c]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x96
lea edx, [ebp - 0x60]
push edx
mov ecx, dword [ebp - 0x4199c]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x97
lea eax, [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x4199c]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x98
mov ecx, dword [ebp - 0x4199c]
mov edx, dword [ebp - 0x58]
mov dword [ecx + 0x14], edx
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x4199c]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x94
mov ecx, dword [ebp - 0x4199c]
mov dword [ebp - 0x41be8], ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
add ecx, 0x440
call fcn.0045ada0
lea eax, [ebp - 0x41514]
push eax
lea ecx, [ebp - 0x41508]
call fcn.004b244a
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0x41504]
push ecx
mov edx, dword [ebp - 0x41514]
push edx
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x1a34]
call fcn.004bce11
lea ecx, [ebp - 0x41504]
push ecx
lea ecx, [ebp - 0x4150c]
call fcn.0054d4bf
lea edx, [ebp - 0x4150c]
push edx
lea ecx, [ebp - 0x41510]
call fcn.0054d095
mov byte [ebp - 4], 0x9a
push ecx
mov ecx, esp
mov dword [ebp - 0x4165c], esp
lea eax, [ebp - 0x41510]
push eax
call fcn.0054d095
mov dword [ebp - 0x41bec], eax
lea ecx, [ebp - 0x41660]
push ecx
mov edx, dword [ebp - 0x419e8]
mov ecx, dword [edx + 0x1a34]
call fcn.004bcc00
mov dword [ebp - 0x41bf0], eax
mov eax, dword [ebp - 0x41bf0]
mov dword [ebp - 0x41bf4], eax
mov byte [ebp - 4], 0x9b
mov ecx, dword [ebp - 0x41bf4]
push ecx
lea ecx, [ebp - 0x41510]
call fcn.0054d46f
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x41660]
call fcn.0054d328
push 0
mov edx, dword [ebp - 0x41510]
push edx
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x419a0], eax
mov eax, dword [ebp - 0x419a0]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x419a4], eax
cmp dword [ebp - 0x419a4], 0xffffffff
jne 0x4a16a5
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x419a8], eax
call fcn.0055f60b
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x419ac], ecx
push 0x1a2
mov edx, dword [ebp - 0x419ac]
push edx
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x419b0], eax
mov eax, dword [ebp - 0x419b0]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x419b4], eax
push 0x5c3580
mov edx, dword [ebp - 0x419b4]
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500d13
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x419b8], eax
push 1
push 0
mov edx, dword [ebp - 0x419b8]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00501976
lea eax, [ebp - 0x41664]
push eax
lea ecx, [ebp - 0x41508]
call fcn.004b2ede
mov dword [ebp - 0x41bf8], eax
mov ecx, dword [ebp - 0x41bf8]
mov dword [ebp - 0x419bc], ecx
mov byte [ebp - 4], 0x9c
mov edx, dword [ebp - 0x419bc]
mov eax, dword [edx]
mov dword [ebp - 0x419c0], eax
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x419c4], eax
mov eax, dword [ebp - 0x419c0]
push eax
push 1
mov ecx, dword [ebp - 0x419c4]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x41664]
call fcn.0054d328
lea edx, [ebp - 0x41668]
push edx
lea ecx, [ebp - 0x41508]
call fcn.004b2ede
mov dword [ebp - 0x41bfc], eax
mov eax, dword [ebp - 0x41bfc]
mov dword [ebp - 0x419c8], eax
mov byte [ebp - 4], 0x9d
mov ecx, dword [ebp - 0x419c8]
mov edx, dword [ecx]
mov dword [ebp - 0x419cc], edx
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x419d0], eax
mov edx, dword [ebp - 0x419cc]
push edx
push 1
mov eax, dword [ebp - 0x419d0]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x41668]
call fcn.0054d328
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x419d4], eax
push 0
push 0
push 0x1004
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x419d8], eax
mov edx, dword [ebp - 0x419d4]
sub edx, 1
push edx
push 1
mov eax, dword [ebp - 0x419d8]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500f1a
push 0
push 0
push 0x1004
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x419dc], eax
mov eax, dword [ebp - 0x4150c]
push eax
push 2
mov ecx, dword [ebp - 0x419dc]
sub ecx, 1
push ecx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00500fb4
push 0
push 0
push 0x1004
mov edx, dword [ebp - 0x419e8]
mov eax, dword [edx + 0x17dc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x419e0], eax
mov ecx, dword [ebp - 0x4150c]
push ecx
push 2
mov edx, dword [ebp - 0x419e0]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x419e8]
add ecx, 0x17c0
call fcn.00502d34
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0x41510]
call fcn.0054d328
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x41508]
call fcn.0054d328
mov byte [ebp - 4], 0x93
lea ecx, [ebp - 0x4150c]
call fcn.0054d328
mov byte [ebp - 4], 0x8b
lea ecx, [ebp - 0x41514]
call fcn.0054d328
jmp 0x4a13f2
mov dword [ebp - 0x419e4], 1
push 0
mov eax, dword [ebp - 0x419e4]
push eax
push 0xb
mov ecx, dword [ebp - 0x419e8]
mov edx, dword [ecx + 0x17dc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x419e8]
mov ecx, dword [eax + 0x17dc]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0
call dword [sym.imp.USER32.dll_LockWindowUpdate]
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x410e8]
call fcn.0054d328
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x2c]
call fcn.0054d328
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x10]
call fcn.0054d328
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x48]
call fcn.0052f0c5
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x4c]
call fcn.0054d328
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x14]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
call fcn.0054c3de
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.0054d328
mov byte [ebp - 4], 0xa1
lea ecx, [ebp - 0x54]
call fcn.0054d328
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0x5c]
call fcn.0054d328
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x60]
call fcn.0054d328
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x64]
call fcn.0054d328
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.0054d328
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x410e0]
call fcn.004e71cb
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret