Function at 0x4c8e51
Capabilities:
Check os version
Contain obfuscated stackstrings
Get system information on windows
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x59c
push edi
mov dword [ebp - 0x59c], ecx
mov dword [ebp - 0x168], 0
mov ecx, 0x46
xor eax, eax
lea edi, [ebp - 0x164]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x598], 0
mov byte [ebp - 0x594], 0x43
mov byte [ebp - 0x593], 0x48
mov byte [ebp - 0x592], 0x73
mov byte [ebp - 0x591], 0x4d
mov byte [ebp - 0x590], 0x6f
mov byte [ebp - 0x58f], 0x6e
mov byte [ebp - 0x58e], 0x69
mov byte [ebp - 0x58d], 0x74
mov byte [ebp - 0x58c], 0x6f
mov byte [ebp - 0x58b], 0x72
mov byte [ebp - 0x58a], 0x3a
mov byte [ebp - 0x589], 0x3a
mov byte [ebp - 0x588], 0x47
mov byte [ebp - 0x587], 0x65
mov byte [ebp - 0x586], 0x74
mov byte [ebp - 0x585], 0x4f
mov byte [ebp - 0x584], 0x53
mov byte [ebp - 0x583], 0x49
mov byte [ebp - 0x582], 0x6e
mov byte [ebp - 0x581], 0x66
mov byte [ebp - 0x580], 0x6f
mov byte [ebp - 0x57f], 0x72
mov byte [ebp - 0x57e], 0x6d
mov byte [ebp - 0x57d], 0x61
mov byte [ebp - 0x57c], 0x74
mov byte [ebp - 0x57b], 0x69
mov byte [ebp - 0x57a], 0x6f
mov byte [ebp - 0x579], 0x6e
mov byte [ebp - 0x578], 0
mov byte [ebp - 0x2a0], 0x57
mov byte [ebp - 0x29f], 0x69
mov byte [ebp - 0x29e], 0x6e
mov byte [ebp - 0x29d], 0x64
mov byte [ebp - 0x29c], 0x6f
mov byte [ebp - 0x29b], 0x77
mov byte [ebp - 0x29a], 0x73
mov byte [ebp - 0x299], 0x20
mov byte [ebp - 0x298], 0x56
mov byte [ebp - 0x297], 0x69
mov byte [ebp - 0x296], 0x73
mov byte [ebp - 0x295], 0x74
mov byte [ebp - 0x294], 0x61
mov byte [ebp - 0x293], 0
mov byte [ebp - 0x574], 0x57
mov byte [ebp - 0x573], 0x69
mov byte [ebp - 0x572], 0x6e
mov byte [ebp - 0x571], 0x64
mov byte [ebp - 0x570], 0x6f
mov byte [ebp - 0x56f], 0x77
mov byte [ebp - 0x56e], 0x73
mov byte [ebp - 0x56d], 0x20
mov byte [ebp - 0x56c], 0x53
mov byte [ebp - 0x56b], 0x65
mov byte [ebp - 0x56a], 0x72
mov byte [ebp - 0x569], 0x76
mov byte [ebp - 0x568], 0x65
mov byte [ebp - 0x567], 0x72
mov byte [ebp - 0x566], 0x20
mov byte [ebp - 0x565], 0x32
mov byte [ebp - 0x564], 0x30
mov byte [ebp - 0x563], 0x30
mov byte [ebp - 0x562], 0x38
mov byte [ebp - 0x561], 0
mov byte [ebp - 0x2d0], 0x57
mov byte [ebp - 0x2cf], 0x69
mov byte [ebp - 0x2ce], 0x6e
mov byte [ebp - 0x2cd], 0x64
mov byte [ebp - 0x2cc], 0x6f
mov byte [ebp - 0x2cb], 0x77
mov byte [ebp - 0x2ca], 0x73
mov byte [ebp - 0x2c9], 0x20
mov byte [ebp - 0x2c8], 0x37
mov byte [ebp - 0x2c7], 0
mov byte [ebp - 0x30], 0x57
mov byte [ebp - 0x2f], 0x69
mov byte [ebp - 0x2e], 0x6e
mov byte [ebp - 0x2d], 0x64
mov byte [ebp - 0x2c], 0x6f
mov byte [ebp - 0x2b], 0x77
mov byte [ebp - 0x2a], 0x73
mov byte [ebp - 0x29], 0x20
mov byte [ebp - 0x28], 0x53
mov byte [ebp - 0x27], 0x65
mov byte [ebp - 0x26], 0x72
mov byte [ebp - 0x25], 0x76
mov byte [ebp - 0x24], 0x65
mov byte [ebp - 0x23], 0x72
mov byte [ebp - 0x22], 0x20
mov byte [ebp - 0x21], 0x32
mov byte [ebp - 0x20], 0x30
mov byte [ebp - 0x1f], 0x30
mov byte [ebp - 0x1e], 0x38
mov byte [ebp - 0x1d], 0x20
mov byte [ebp - 0x1c], 0x52
mov byte [ebp - 0x1b], 0x32
mov byte [ebp - 0x1a], 0
mov byte [ebp - 0x4e4], 0x57
mov byte [ebp - 0x4e3], 0x69
mov byte [ebp - 0x4e2], 0x6e
mov byte [ebp - 0x4e1], 0x64
mov byte [ebp - 0x4e0], 0x6f
mov byte [ebp - 0x4df], 0x77
mov byte [ebp - 0x4de], 0x73
mov byte [ebp - 0x4dd], 0x20
mov byte [ebp - 0x4dc], 0x38
mov byte [ebp - 0x4db], 0
mov byte [ebp - 0x530], 0x57
mov byte [ebp - 0x52f], 0x69
mov byte [ebp - 0x52e], 0x6e
mov byte [ebp - 0x52d], 0x64
mov byte [ebp - 0x52c], 0x6f
mov byte [ebp - 0x52b], 0x77
mov byte [ebp - 0x52a], 0x73
mov byte [ebp - 0x529], 0x20
mov byte [ebp - 0x528], 0x53
mov byte [ebp - 0x527], 0x65
mov byte [ebp - 0x526], 0x72
mov byte [ebp - 0x525], 0x76
mov byte [ebp - 0x524], 0x65
mov byte [ebp - 0x523], 0x72
mov byte [ebp - 0x522], 0x20
mov byte [ebp - 0x521], 0x32
mov byte [ebp - 0x520], 0x30
mov byte [ebp - 0x51f], 0x31
mov byte [ebp - 0x51e], 0x32
mov byte [ebp - 0x51d], 0
mov byte [ebp - 0x188], 0x57
mov byte [ebp - 0x187], 0x69
mov byte [ebp - 0x186], 0x6e
mov byte [ebp - 0x185], 0x64
mov byte [ebp - 0x184], 0x6f
mov byte [ebp - 0x183], 0x77
mov byte [ebp - 0x182], 0x73
mov byte [ebp - 0x181], 0x20
mov byte [ebp - 0x180], 0x38
mov byte [ebp - 0x17f], 0x2e
mov byte [ebp - 0x17e], 0x31
mov byte [ebp - 0x17d], 0
mov byte [ebp - 0x290], 0x57
mov byte [ebp - 0x28f], 0x69
mov byte [ebp - 0x28e], 0x6e
mov byte [ebp - 0x28d], 0x64
mov byte [ebp - 0x28c], 0x6f
mov byte [ebp - 0x28b], 0x77
mov byte [ebp - 0x28a], 0x73
mov byte [ebp - 0x289], 0x20
mov byte [ebp - 0x288], 0x38
mov byte [ebp - 0x287], 0x2e
mov byte [ebp - 0x286], 0x31
mov byte [ebp - 0x285], 0x20
mov byte [ebp - 0x284], 0x6c
mov byte [ebp - 0x283], 0x61
mov byte [ebp - 0x282], 0x74
mov byte [ebp - 0x281], 0x65
mov byte [ebp - 0x280], 0x72
mov byte [ebp - 0x27f], 0
mov byte [ebp - 0x27c], 0x57
mov byte [ebp - 0x27b], 0x69
mov byte [ebp - 0x27a], 0x6e
mov byte [ebp - 0x279], 0x64
mov byte [ebp - 0x278], 0x6f
mov byte [ebp - 0x277], 0x77
mov byte [ebp - 0x276], 0x73
mov byte [ebp - 0x275], 0x20
mov byte [ebp - 0x274], 0x31
mov byte [ebp - 0x273], 0x30
mov byte [ebp - 0x272], 0
mov byte [ebp - 0x2c4], 0x57
mov byte [ebp - 0x2c3], 0x69
mov byte [ebp - 0x2c2], 0x6e
mov byte [ebp - 0x2c1], 0x64
mov byte [ebp - 0x2c0], 0x6f
mov byte [ebp - 0x2bf], 0x77
mov byte [ebp - 0x2be], 0x73
mov byte [ebp - 0x2bd], 0x20
mov byte [ebp - 0x2bc], 0x31
mov byte [ebp - 0x2bb], 0x30
mov byte [ebp - 0x2ba], 0x20
mov byte [ebp - 0x2b9], 0x6c
mov byte [ebp - 0x2b8], 0x61
mov byte [ebp - 0x2b7], 0x74
mov byte [ebp - 0x2b6], 0x65
mov byte [ebp - 0x2b5], 0x72
mov byte [ebp - 0x2b4], 0
mov byte [ebp - 0x18], 0x57
mov byte [ebp - 0x17], 0x69
mov byte [ebp - 0x16], 0x6e
mov byte [ebp - 0x15], 0x64
mov byte [ebp - 0x14], 0x6f
mov byte [ebp - 0x13], 0x77
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0x11], 0x20
mov byte [ebp - 0x10], 0x53
mov byte [ebp - 0xf], 0x65
mov byte [ebp - 0xe], 0x72
mov byte [ebp - 0xd], 0x76
mov byte [ebp - 0xc], 0x65
mov byte [ebp - 0xb], 0x72
mov byte [ebp - 0xa], 0x20
mov byte [ebp - 9], 0x32
mov byte [ebp - 8], 0x30
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x32
mov byte [ebp - 5], 0x20
mov byte [ebp - 4], 0x52
mov byte [ebp - 3], 0x32
mov byte [ebp - 2], 0
mov byte [ebp - 0x26c], 0x57
mov byte [ebp - 0x26b], 0x69
mov byte [ebp - 0x26a], 0x6e
mov byte [ebp - 0x269], 0x64
mov byte [ebp - 0x268], 0x6f
mov byte [ebp - 0x267], 0x77
mov byte [ebp - 0x266], 0x73
mov byte [ebp - 0x265], 0x20
mov byte [ebp - 0x264], 0x53
mov byte [ebp - 0x263], 0x65
mov byte [ebp - 0x262], 0x72
mov byte [ebp - 0x261], 0x76
mov byte [ebp - 0x260], 0x65
mov byte [ebp - 0x25f], 0x72
mov byte [ebp - 0x25e], 0x20
mov byte [ebp - 0x25d], 0x32
mov byte [ebp - 0x25c], 0x30
mov byte [ebp - 0x25b], 0x30
mov byte [ebp - 0x25a], 0x33
mov byte [ebp - 0x259], 0x20
mov byte [ebp - 0x258], 0x52
mov byte [ebp - 0x257], 0x32
mov byte [ebp - 0x256], 0
mov byte [ebp - 0x4c], 0x57
mov byte [ebp - 0x4b], 0x69
mov byte [ebp - 0x4a], 0x6e
mov byte [ebp - 0x49], 0x64
mov byte [ebp - 0x48], 0x6f
mov byte [ebp - 0x47], 0x77
mov byte [ebp - 0x46], 0x73
mov byte [ebp - 0x45], 0x20
mov byte [ebp - 0x44], 0x53
mov byte [ebp - 0x43], 0x74
mov byte [ebp - 0x42], 0x6f
mov byte [ebp - 0x41], 0x72
mov byte [ebp - 0x40], 0x61
mov byte [ebp - 0x3f], 0x67
mov byte [ebp - 0x3e], 0x65
mov byte [ebp - 0x3d], 0x20
mov byte [ebp - 0x3c], 0x53
mov byte [ebp - 0x3b], 0x65
mov byte [ebp - 0x3a], 0x72
mov byte [ebp - 0x39], 0x76
mov byte [ebp - 0x38], 0x65
mov byte [ebp - 0x37], 0x72
mov byte [ebp - 0x36], 0x20
mov byte [ebp - 0x35], 0x32
mov byte [ebp - 0x34], 0x30
mov byte [ebp - 0x33], 0x30
mov byte [ebp - 0x32], 0x33
mov byte [ebp - 0x31], 0
mov byte [ebp - 0x51c], 0x57
mov byte [ebp - 0x51b], 0x69
mov byte [ebp - 0x51a], 0x6e
mov byte [ebp - 0x519], 0x64
mov byte [ebp - 0x518], 0x6f
mov byte [ebp - 0x517], 0x77
mov byte [ebp - 0x516], 0x73
mov byte [ebp - 0x515], 0x20
mov byte [ebp - 0x514], 0x48
mov byte [ebp - 0x513], 0x6f
mov byte [ebp - 0x512], 0x6d
mov byte [ebp - 0x511], 0x65
mov byte [ebp - 0x510], 0x20
mov byte [ebp - 0x50f], 0x53
mov byte [ebp - 0x50e], 0x65
mov byte [ebp - 0x50d], 0x72
mov byte [ebp - 0x50c], 0x76
mov byte [ebp - 0x50b], 0x65
mov byte [ebp - 0x50a], 0x72
mov byte [ebp - 0x509], 0
mov byte [ebp - 0x254], 0x57
mov byte [ebp - 0x253], 0x69
mov byte [ebp - 0x252], 0x6e
mov byte [ebp - 0x251], 0x64
mov byte [ebp - 0x250], 0x6f
mov byte [ebp - 0x24f], 0x77
mov byte [ebp - 0x24e], 0x73
mov byte [ebp - 0x24d], 0x20
mov byte [ebp - 0x24c], 0x58
mov byte [ebp - 0x24b], 0x50
mov byte [ebp - 0x24a], 0x20
mov byte [ebp - 0x249], 0x50
mov byte [ebp - 0x248], 0x72
mov byte [ebp - 0x247], 0x6f
mov byte [ebp - 0x246], 0x66
mov byte [ebp - 0x245], 0x65
mov byte [ebp - 0x244], 0x73
mov byte [ebp - 0x243], 0x73
mov byte [ebp - 0x242], 0x69
mov byte [ebp - 0x241], 0x6f
mov byte [ebp - 0x240], 0x6e
mov byte [ebp - 0x23f], 0x61
mov byte [ebp - 0x23e], 0x6c
mov byte [ebp - 0x23d], 0x20
mov byte [ebp - 0x23c], 0x78
mov byte [ebp - 0x23b], 0x36
mov byte [ebp - 0x23a], 0x34
mov byte [ebp - 0x239], 0x20
mov byte [ebp - 0x238], 0x45
mov byte [ebp - 0x237], 0x64
mov byte [ebp - 0x236], 0x69
mov byte [ebp - 0x235], 0x74
mov byte [ebp - 0x234], 0x69
mov byte [ebp - 0x233], 0x6f
mov byte [ebp - 0x232], 0x6e
mov byte [ebp - 0x231], 0
mov byte [ebp - 0x17c], 0x57
mov byte [ebp - 0x17b], 0x69
mov byte [ebp - 0x17a], 0x6e
mov byte [ebp - 0x179], 0x64
mov byte [ebp - 0x178], 0x6f
mov byte [ebp - 0x177], 0x77
mov byte [ebp - 0x176], 0x73
mov byte [ebp - 0x175], 0x20
mov byte [ebp - 0x174], 0x53
mov byte [ebp - 0x173], 0x65
mov byte [ebp - 0x172], 0x72
mov byte [ebp - 0x171], 0x76
mov byte [ebp - 0x170], 0x65
mov byte [ebp - 0x16f], 0x72
mov byte [ebp - 0x16e], 0x20
mov byte [ebp - 0x16d], 0x32
mov byte [ebp - 0x16c], 0x30
mov byte [ebp - 0x16b], 0x30
mov byte [ebp - 0x16a], 0x33
mov byte [ebp - 0x169], 0
mov byte [ebp - 0x230], 0x57
mov byte [ebp - 0x22f], 0x69
mov byte [ebp - 0x22e], 0x6e
mov byte [ebp - 0x22d], 0x64
mov byte [ebp - 0x22c], 0x6f
mov byte [ebp - 0x22b], 0x77
mov byte [ebp - 0x22a], 0x73
mov byte [ebp - 0x229], 0x20
mov byte [ebp - 0x228], 0x58
mov byte [ebp - 0x227], 0x50
mov byte [ebp - 0x226], 0
mov byte [ebp - 0x508], 0x57
mov byte [ebp - 0x507], 0x69
mov byte [ebp - 0x506], 0x6e
mov byte [ebp - 0x505], 0x64
mov byte [ebp - 0x504], 0x6f
mov byte [ebp - 0x503], 0x77
mov byte [ebp - 0x502], 0x73
mov byte [ebp - 0x501], 0x20
mov byte [ebp - 0x500], 0x32
mov byte [ebp - 0x4ff], 0x30
mov byte [ebp - 0x4fe], 0x30
mov byte [ebp - 0x4fd], 0x30
mov byte [ebp - 0x4fc], 0
mov byte [ebp - 0x560], 0x57
mov byte [ebp - 0x55f], 0x69
mov byte [ebp - 0x55e], 0x6e
mov byte [ebp - 0x55d], 0x64
mov byte [ebp - 0x55c], 0x6f
mov byte [ebp - 0x55b], 0x77
mov byte [ebp - 0x55a], 0x73
mov byte [ebp - 0x559], 0x20
mov byte [ebp - 0x558], 0x39
mov byte [ebp - 0x557], 0x38
mov byte [ebp - 0x556], 0
mov byte [ebp - 0x2b0], 0x57
mov byte [ebp - 0x2af], 0x69
mov byte [ebp - 0x2ae], 0x6e
mov byte [ebp - 0x2ad], 0x64
mov byte [ebp - 0x2ac], 0x6f
mov byte [ebp - 0x2ab], 0x77
mov byte [ebp - 0x2aa], 0x73
mov byte [ebp - 0x2a9], 0x20
mov byte [ebp - 0x2a8], 0x39
mov byte [ebp - 0x2a7], 0x38
mov byte [ebp - 0x2a6], 0x20
mov byte [ebp - 0x2a5], 0x53
mov byte [ebp - 0x2a4], 0x45
mov byte [ebp - 0x2a3], 0
mov byte [ebp - 0x4f8], 0x57
mov byte [ebp - 0x4f7], 0x69
mov byte [ebp - 0x4f6], 0x6e
mov byte [ebp - 0x4f5], 0x64
mov byte [ebp - 0x4f4], 0x6f
mov byte [ebp - 0x4f3], 0x77
mov byte [ebp - 0x4f2], 0x73
mov byte [ebp - 0x4f1], 0x20
mov byte [ebp - 0x4f0], 0x4d
mov byte [ebp - 0x4ef], 0x45
mov byte [ebp - 0x4ee], 0
push 0x9c
push 0
lea eax, [ebp - 0x224]
push eax
call fcn.00486aa0
add esp, 0xc
mov dword [ebp - 0x224], 0x9c
lea ecx, [ebp - 0x224]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0
je 0x4c98ca
mov dword [ebp - 0x224], 0x94
lea edx, [ebp - 0x224]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x4c98ca
xor eax, eax
jmp 0x4c9f02
push 0x24
push 0
lea eax, [ebp - 0x554]
push eax
call fcn.00486aa0
add esp, 0xc
push str.GetNativeSystemInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
je 0x4c9912
lea ecx, [ebp - 0x554]
push ecx
call dword [ebp - 0x270]
jmp 0x4c991f
lea edx, [ebp - 0x554]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov byte [ebp - 0x4d8], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x4d7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
cmp dword [ebp - 0x214], 2
jne 0x4c9d79
cmp dword [ebp - 0x220], 4
jbe 0x4c9d79
mov dword [ebp - 0x168], 0x11c
push str.RtlGetVersion
push str.Ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0
je 0x4c99b7
lea eax, [ebp - 0x168]
push eax
call dword [ebp - 0x598]
test eax, eax
jne 0x4c99b7
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x220], ecx
mov edx, dword [ebp - 0x160]
mov dword [ebp - 0x21c], edx
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x220], 6
jne 0x4c9b93
cmp dword [ebp - 0x21c], 0
jne 0x4c9a25
mov ecx, dword [ebp - 0x18a]
and ecx, 0xff
cmp ecx, 1
jne 0x4c9a00
lea edx, [ebp - 0x2a0]
push edx
push 0x509670
push 0x104
lea eax, [ebp - 0x4d8]
push eax
call fcn.004be590
add esp, 0x10
jmp 0x4c9a20
lea ecx, [ebp - 0x574]
push ecx
push 0x509674
push 0x104
lea edx, [ebp - 0x4d8]
push edx
call fcn.004be590
add esp, 0x10
jmp 0x4c9b8e
cmp dword [ebp - 0x21c], 1
jne 0x4c9a82
mov eax, dword [ebp - 0x18a]
and eax, 0xff
cmp eax, 1
jne 0x4c9a60
lea ecx, [ebp - 0x2d0]
push ecx
push 0x509678
push 0x104
lea edx, [ebp - 0x4d8]
push edx
call fcn.004be590
add esp, 0x10
jmp 0x4c9a7d
lea eax, [ebp - 0x30]
push eax
push 0x50967c
push 0x104
lea ecx, [ebp - 0x4d8]
push ecx
call fcn.004be590
add esp, 0x10
jmp 0x4c9b8e
cmp dword [ebp - 0x21c], 2
jne 0x4c9aec
cmp dword [ebp - 0x4ec], 0
je 0x4c9ac7
mov edx, dword [ebp - 0x18a]
and edx, 0xff
cmp edx, 1
jne 0x4c9ac7
lea eax, [ebp - 0x4e4]
push eax
push 0x509680
push 0x104
lea ecx, [ebp - 0x4d8]
push ecx
call fcn.004be590
add esp, 0x10
jmp 0x4c9ae7
lea edx, [ebp - 0x530]
push edx
push 0x509684
push 0x104
lea eax, [ebp - 0x4d8]
push eax
call fcn.004be590
add esp, 0x10
jmp 0x4c9b8e
cmp dword [ebp - 0x21c], 3
jne 0x4c9b8e
cmp dword [ebp - 0x4ec], 0
je 0x4c9b71
mov ecx, dword [ebp - 0x18a]
and ecx, 0xff
cmp ecx, 1
jne 0x4c9b71
cmp dword [ebp - 0x4ec], 0
je 0x4c9b4f
mov edx, dword [ebp - 0x18a]
and edx, 0xff
cmp edx, 1
jne 0x4c9b4f
lea eax, [ebp - 0x188]
push eax
push 0x509688
push 0x104
lea ecx, [ebp - 0x4d8]
push ecx
call fcn.004be590
add esp, 0x10
jmp 0x4c9b6f
lea edx, [ebp - 0x290]
push edx
push 0x50968c
push 0x104
lea eax, [ebp - 0x4d8]
push eax
call fcn.004be590
add esp, 0x10
jmp 0x4c9b8e
lea ecx, [ebp - 0x18]
push ecx
push 0x509690
push 0x104
lea edx, [ebp - 0x4d8]
push edx
call fcn.004be590
add esp, 0x10
jmp 0x4c9d74
cmp dword [ebp - 0x220], 0xa
jne 0x4c9bfc
cmp dword [ebp - 0x21c], 0
jne 0x4c9bf7
mov eax, dword [ebp - 0x18a]
and eax, 0xff
cmp eax, 1
jne 0x4c9bd7
lea ecx, [ebp - 0x27c]
push ecx
push 0x509694
push 0x104
lea edx, [ebp - 0x4d8]
push edx
call fcn.004be590
add esp, 0x10
jmp 0x4c9bf7
lea eax, [ebp - 0x2c4]
push eax
push 0x509698
push 0x104
lea ecx, [ebp - 0x4d8]
push ecx
call fcn.004be590
add esp, 0x10
jmp 0x4c9d74
cmp dword [ebp - 0x220], 5
jne 0x4c9d74
cmp dword [ebp - 0x21c], 2
jne 0x4c9d20
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x4c9c47
lea edx, [ebp - 0x26c]
push edx
push 0x50969c
push 0x104
lea eax, [ebp - 0x4d8]
push eax
call fcn.004be590
add esp, 0x10
jmp 0x4c9d1e
mov ecx, dword [ebp - 0x18c]
and ecx, 0xffff
and ecx, 0x2000
test ecx, ecx
je 0x4c9c82
lea edx, [ebp - 0x17c]
push edx
push 0x5096a0
push 0x104
lea eax, [ebp - 0x4d8]
push eax
call fcn.004be590
add esp, 0x10
jmp 0x4c9d1e
mov ecx, dword [ebp - 0x18c]
and ecx, 0xffff
and ecx, 0x8000
test ecx, ecx
je 0x4c9cba
lea edx, [ebp - 0x51c]
push edx
push 0x5096a4
push 0x104
lea eax, [ebp - 0x4d8]
push eax
call fcn.004be590
add esp, 0x10
jmp 0x4c9d1e
mov ecx, dword [ebp - 0x18a]
and ecx, 0xff
cmp ecx, 1
jne 0x4c9cfe
mov edx, dword [ebp - 0x554]
and edx, 0xffff
cmp edx, 9
jne 0x4c9cfe
lea eax, [ebp - 0x230]
push eax
push 0x5096a8
push 0x104
lea ecx, [ebp - 0x4d8]
push ecx
call fcn.004be590
add esp, 0x10
jmp 0x4c9d1e
lea edx, [ebp - 0x17c]
push edx
push 0x5096ac
push 0x104
lea eax, [ebp - 0x4d8]
push eax
call fcn.004be590
add esp, 0x10
jmp 0x4c9d74
cmp dword [ebp - 0x21c], 1
jne 0x4c9d4b
lea ecx, [ebp - 0x230]
push ecx
push 0x5096b0
push 0x104
lea edx, [ebp - 0x4d8]
push edx
call fcn.004be590
add esp, 0x10
jmp 0x4c9d74
cmp dword [ebp - 0x21c], 0
jne 0x4c9d74
lea eax, [ebp - 0x508]
push eax
push 0x5096b4
push 0x104
lea ecx, [ebp - 0x4d8]
push ecx
call fcn.004be590
add esp, 0x10
jmp 0x4c9e13
cmp dword [ebp - 0x214], 1
jne 0x4c9e13
cmp dword [ebp - 0x220], 4
jne 0x4c9e13
cmp dword [ebp - 0x21c], 0x5a
jae 0x4c9dea
lea edx, [ebp - 0x560]
push edx
push 0x5096b8
push 0x104
lea eax, [ebp - 0x4d8]
push eax
call fcn.004be590
add esp, 0x10
movsx ecx, byte [ebp - 0x20f]
cmp ecx, 0x41
jne 0x4c9de8
lea edx, [ebp - 0x2b0]
push edx
push 0x5096bc
push 0x104
lea eax, [ebp - 0x4d8]
push eax
call fcn.004be590
add esp, 0x10
jmp 0x4c9e13
cmp dword [ebp - 0x21c], 0x5a
jne 0x4c9e13
lea ecx, [ebp - 0x4f8]
push ecx
push 0x5096c0
push 0x104
lea edx, [ebp - 0x4d8]
push edx
call fcn.004be590
add esp, 0x10
push 0x104
push 0
lea eax, [ebp - 0x3d4]
push eax
call fcn.00486aa0
add esp, 0xc
mov ecx, dword [ebp - 0x4ec]
mov dword [ebp - 0x3d0], ecx
mov edx, dword [ebp - 0x220]
mov dword [ebp - 0x368], edx
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x364], eax
mov ecx, dword [ebp - 0x218]
mov dword [ebp - 0x360], ecx
mov edx, dword [ebp - 0x214]
mov dword [ebp - 0x35c], edx
movsx eax, byte [ebp - 0x210]
test eax, eax
je 0x4c9e90
lea ecx, [ebp - 0x210]
push ecx
push 0x5096c4
push 0x80
lea edx, [ebp - 0x358]
push edx
call fcn.004be590
add esp, 0x10
movzx ax, byte [ebp - 0x18a]
mov word [ebp - 0x2d8], ax
mov cx, word [ebp - 0x18c]
mov word [ebp - 0x2d6], cx
mov dx, word [ebp - 0x554]
mov word [ebp - 0x2d4], dx
movsx eax, byte [ebp - 0x4d8]
test eax, eax
je 0x4c9ee5
lea ecx, [ebp - 0x4d8]
push ecx
push 0x5096c8
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x3cc]
push eax
call fcn.004be590
add esp, 0x10
push 0x104
lea ecx, [ebp - 0x3d4]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.00485c00
add esp, 0xc
mov eax, 1
pop edi
mov esp, ebp
pop ebp
ret 0xc