Function at 0x406980
Capabilities:
Clear windows event logs
Delete file
Get session user name
Set console window title

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4366e5
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x445040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0x440ac4
mov dword [ebp - 0x214], 0
push 0
mov dword [ebp - 0x13c], 0
call fcn.00418358
push str.color_06
call fcn.0041e011
add esp, 0xc
mov dword [ebp - 0x1a8], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1a4], 0
lea ecx, [ebp - 0x1b8]
movups xmmword [ebp - 0x1b8], xmm0
push 0
push 0x43ff39
call fcn.0040ce40
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1a0]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x190], 0
push 0x43ff39
movups xmmword [ebp - 0x1a0], xmm0
mov dword [ebp - 0x18c], 0
call fcn.0040ce40
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x188]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x178], 0
push 0x43ff39
movups xmmword [ebp - 0x188], xmm0
mov dword [ebp - 0x174], 0
call fcn.0040ce40
push 0xc
mov byte [ebp - 4], 2
call fcn.00413745
add esp, 4
mov edi, eax
mov dword [ebp - 0x214], edi
xorps xmm0, xmm0
push edi
push 0xf003f
push 0
movq qword [edi], xmm0
push str.SOFTWAREWOW6432NodeUKRAINEGTA:_GLAB3Common
mov dword [edi + 8], 0
push 0x80000002
mov dword [edi], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x406ac3
mov byte [edi + 4], 1
sub esp, 8
mov byte [edi + 8], 1
lea eax, [ebp - 0x158]
mov ecx, edi
push eax
call fcn.0040fb40
mov byte [ebp - 4], 3
lea eax, [ebp - 0x158]
cmp dword [ebp - 0x144], 0xf
lea ecx, [ebp - 0x188]
push dword [ebp - 0x148]
cmova eax, dword [ebp - 0x158]
push eax
call fcn.0040a4c0
cmp dword [ebp - 0x148], 5
jbe 0x406d85
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x254], 0
push str.game
lea ecx, [ebp - 0x264]
mov dword [ebp - 0x250], 0
movups xmmword [ebp - 0x264], xmm0
call fcn.0040ce40
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x24c]
call fcn.00408cd0
cmp dword [ebp - 0x250], 0xf
lea ecx, [ebp - 0x264]
mov eax, dword [ebp - 0x23c]
lea edx, [ebp - 0x24c]
cmova ecx, dword [ebp - 0x264]
cmp dword [ebp - 0x238], 0xf
mov esi, dword [ebp - 0x254]
cmova edx, dword [ebp - 0x24c]
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x118], edx
mov dword [ebp - 0x210], eax
cmp esi, eax
ja 0x406cda
test esi, esi
jne 0x406bb8
xor edi, edi
jmp 0x406c82
movsx ecx, byte [ecx]
sub eax, esi
inc eax
mov dword [ebp - 0x234], ecx
add eax, edx
mov dword [ebp - 0x230], eax
sub eax, edx
push eax
push ecx
push edx
call fcn.004155e0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x406cd4
mov edx, dword [ebp - 0x134]
mov ecx, edi
sub esi, 4
jb 0x406c01
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x406c06
add ecx, 4
add edx, 4
sub esi, 4
jae 0x406bf0
cmp esi, 0xfffffffc
je 0x406c3a
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x406c33
cmp esi, 0xfffffffd
je 0x406c3a
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x406c33
cmp esi, 0xfffffffe
je 0x406c3a
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x406c33
cmp esi, 0xffffffff
je 0x406c3a
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x406c3a
sbb eax, eax
or eax, 1
jmp 0x406c3c
xor eax, eax
test eax, eax
je 0x406c6b
mov eax, dword [ebp - 0x230]
inc edi
sub eax, edi
push eax
push dword [ebp - 0x234]
push edi
call fcn.004155e0
mov esi, dword [ebp - 0x254]
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x406be3
jmp 0x406cd4
sub edi, dword [ebp - 0x118]
cmp edi, 0xffffffff
je 0x406cd4
mov esi, dword [ebp - 0x254]
mov eax, dword [ebp - 0x210]
cmp eax, edi
jb 0x40837d
sub eax, edi
lea edx, [ebp - 0x24c]
cmp eax, esi
cmovb esi, eax
cmp dword [ebp - 0x238], 0xf
mov eax, dword [ebp - 0x210]
cmova edx, dword [ebp - 0x24c]
sub eax, esi
mov ecx, eax
mov dword [ebp - 0x210], eax
add edx, edi
sub ecx, edi
inc ecx
push ecx
lea eax, [edx + esi]
push eax
push edx
call fcn.00414f00
mov eax, dword [ebp - 0x210]
add esp, 0xc
mov dword [ebp - 0x23c], eax
mov edi, dword [ebp - 0x214]
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.00408b10
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x238]
cmp ecx, 0xf
jbe 0x406d2a
mov edx, dword [ebp - 0x24c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406d20
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408382
push ecx
push edx
call fcn.0041377a
add esp, 8
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0xf
mov byte [ebp - 0x24c], 0
cmp eax, 0xf
jbe 0x406d85
mov edx, dword [ebp - 0x264]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x406d7b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408382
push ecx
push edx
call fcn.0041377a
add esp, 8
cmp dword [ebp - 0x1a4], 0xf
lea eax, [ebp - 0x1b8]
push dword [ebp - 0x1a8]
cmova eax, dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1a0]
push eax
call fcn.0040a4c0
mov eax, dword [edi]
test eax, eax
je 0x406db8
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0xc
push edi
call fcn.0041377a
mov byte [ebp - 4], 2
add esp, 8
mov ecx, dword [ebp - 0x144]
cmp ecx, 0xf
jbe 0x406e01
mov edx, dword [ebp - 0x158]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406df7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408449
push ecx
push edx
call fcn.0041377a
add esp, 8
lea ecx, [ebp - 0x1b8]
call fcn.00405370
push str.Project__Nirmata__V6_by_DroidZero__t.me_ugta_cheats
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call fcn.004066d0
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x1fc], 0
push str.SOFTWARELUA3NG1N3
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x1f8], 0
movups xmmword [ebp - 0x20c], xmm0
call fcn.0040ce40
lea edx, [ebp - 0x20c]
mov byte [ebp - 4], 6
call fcn.00405e10
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x406e99
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406e8f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408387
push ecx
push edx
call fcn.0041377a
add esp, 8
push 0x15
xorps xmm0, xmm0
mov dword [ebp - 0x1fc], 0
push str.SOFTWARESU53RS500F3R
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x1f8], 0
movups xmmword [ebp - 0x20c], xmm0
call fcn.0040ce40
lea edx, [ebp - 0x20c]
mov byte [ebp - 4], 7
call fcn.00405e10
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x406f16
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406f0c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40838c
push ecx
push edx
call fcn.0041377a
add esp, 8
push 0x11
xorps xmm0, xmm0
mov dword [ebp - 0x1fc], 0
push str.SOFTWAREC3RB3RUS
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x1f8], 0
movups xmmword [ebp - 0x20c], xmm0
call fcn.0040ce40
lea edx, [ebp - 0x20c]
mov byte [ebp - 4], 8
call fcn.00405e10
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x406f93
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406f89
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408391
push ecx
push edx
call fcn.0041377a
add esp, 8
push 0x14
xorps xmm0, xmm0
mov dword [ebp - 0x1d8], 0
push str.C:WindowsPrefetch_
lea ecx, [ebp - 0x1e8]
mov dword [ebp - 0x1d4], 0
movups xmmword [ebp - 0x1e8], xmm0
call fcn.0040ce40
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 9
call fcn.00404b90
lea eax, [ebp - 0x118]
mov dword [ebp - 0x118], pe_nt_image_headers32
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x160], 0
xorps xmm0, xmm0
mov dword [ebp - 0x15c], 0
movups xmmword [ebp - 0x170], xmm0
test eax, eax
je 0x407033
lea ecx, [ebp - 0x114]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407020
sub ecx, edx
lea eax, [ebp - 0x114]
push ecx
push eax
jmp 0x40703a
push 0
push 0x43ff39
lea ecx, [ebp - 0x170]
call fcn.0040ce40
mov edi, 0x7fffffff
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x160]
mov eax, edi
sub eax, ecx
cmp eax, 9
jb 0x408396
cmp dword [ebp - 0x15c], 0xf
lea eax, [ebp - 0x170]
push ecx
cmova eax, dword [ebp - 0x170]
push eax
push 9
push str.C:Users_
push ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x158]
call fcn.0040f0e0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x144]
mov eax, edx
mov ecx, dword [ebp - 0x148]
sub eax, ecx
push 0x2a
push str.AppDataRoamingMicrosoftWindowsRecent_
cmp eax, 0x2a
jb 0x4070e0
cmp edx, 0xf
lea esi, [ebp - 0x158]
lea eax, [ecx + 0x2a]
cmova esi, dword [ebp - 0x158]
add esi, ecx
mov dword [ebp - 0x148], eax
push esi
call fcn.00414f00
add esp, 0xc
mov byte [esi + 0x2a], 0
lea eax, [ebp - 0x158]
jmp 0x4070f3
push dword [ebp - 0x118]
lea ecx, [ebp - 0x158]
push 0x2a
call fcn.0040dbf0
mov dword [ebp - 0x1c0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1d0], xmm0
mov dword [ebp - 0x1bc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1d0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x144]
cmp ecx, 0xf
jbe 0x407177
mov edx, dword [ebp - 0x158]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40716d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40839b
push ecx
push edx
call fcn.0041377a
add esp, 8
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
call fcn.00404b90
push 0x3b
xorps xmm0, xmm0
mov dword [ebp - 0x1fc], 0
push str.SoftwareMicrosoftWindowsCurrentVersionSearchRecentApps
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x1f8], 0
movups xmmword [ebp - 0x20c], xmm0
call fcn.0040ce40
lea edx, [ebp - 0x20c]
mov byte [ebp - 4], 0xe
call fcn.00405e10
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x40721a
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407210
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4083a0
push ecx
push edx
call fcn.0041377a
add esp, 8
push 0x6a
xorps xmm0, xmm0
mov dword [ebp - 0x1fc], 0
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerUserAssistCEBFF5CD_ACE2_4F4F_9178_9926F41749EACount
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x1f8], 0
movups xmmword [ebp - 0x20c], xmm0
call fcn.0040ce40
lea edx, [ebp - 0x20c]
mov byte [ebp - 4], 0xf
call fcn.00405e10
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x407297
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40728d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4083a5
push ecx
push edx
call fcn.0041377a
add esp, 8
push 0x6a
xorps xmm0, xmm0
mov dword [ebp - 0x1fc], 0
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerUserAssistF4E57C4B_2036_45F0_A9AB_443BCFE33D9FCount
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x1f8], 0
movups xmmword [ebp - 0x20c], xmm0
call fcn.0040ce40
lea edx, [ebp - 0x20c]
mov byte [ebp - 4], 0x10
call fcn.00405e10
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x407314
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40730a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4083aa
push ecx
push edx
call fcn.0041377a
add esp, 8
call fcn.00405130
call fcn.004051a0
call fcn.004050c0
call fcn.00405210
call fcn.00405300
call fcn.004061a0
push 0
push 0
push str.Application
push 0
call dword [sym.imp.wevtapi.dll_EvtClearLog]
test eax, eax
jne 0x407364
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
push eax
push str.Application
push 0x4402d8
call fcn.00401200
add esp, 0xc
jmp 0x40737c
push str.Application
push 0x440348
call fcn.00401200
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
add esp, 8
push 0
push 0
push str.System
push 0
call dword [sym.imp.wevtapi.dll_EvtClearLog]
test eax, eax
jne 0x4073a8
call esi
push eax
push str.System
push 0x4402d8
call fcn.00401200
add esp, 0xc
jmp 0x4073ba
push str.System
push 0x440348
call fcn.00401200
add esp, 8
push 0
push 0
push str.Security
push 0
call dword [sym.imp.wevtapi.dll_EvtClearLog]
test eax, eax
jne 0x4073e6
call esi
push eax
push str.Security
push 0x4402d8
call fcn.00401200
add esp, 0xc
jmp 0x4073f8
push str.Security
push 0x440348
call fcn.00401200
add esp, 8
push 0xc
call fcn.00413745
add esp, 4
mov esi, eax
xorps xmm0, xmm0
mov dword [ebp - 0x234], esi
push esi
push 0xf003f
push 0
movq qword [esi], xmm0
push str.SOFTWAREWOW6432NodeUKRAINEGTA:_GLAB3Common
mov dword [esi + 8], 0
push 0x80000002
mov dword [esi], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40743e
mov byte [esi + 4], 1
sub esp, 8
mov byte [esi + 8], 1
lea eax, [ebp - 0x130]
mov dword [ebp - 0x230], esi
mov ecx, esi
push eax
call fcn.0040fb40
mov byte [ebp - 4], 0x11
mov eax, edi
mov ecx, dword [ebp - 0x120]
sub eax, ecx
cmp eax, 0xe
jb 0x4083af
cmp dword [ebp - 0x11c], 0xf
lea eax, [ebp - 0x130]
push 0xe
cmova eax, dword [ebp - 0x130]
push str.DumpedScripts
push ecx
push eax
push ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x22c]
call fcn.0040f0e0
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x22c]
mov byte [ebp - 0x118], 0
lea ecx, [ebp - 0x20c]
push dword [ebp - 0x118]
call fcn.0040f3d0
add esp, 4
lea ecx, [ebp - 0x20c]
mov byte [ebp - 4], 0x13
call fcn.00404b00
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 7
jbe 0x407517
mov edx, dword [ebp - 0x20c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40750d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4083b4
push ecx
push edx
call fcn.0041377a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x218]
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1f8], 7
mov word [ebp - 0x20c], ax
cmp ecx, 0xf
jbe 0x407572
mov edx, dword [ebp - 0x22c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407568
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4083b4
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x120]
mov eax, edi
sub eax, ecx
cmp eax, 0xa
jb 0x4083b9
cmp dword [ebp - 0x11c], 0xf
lea eax, [ebp - 0x130]
push 0xa
cmova eax, dword [ebp - 0x130]
push str.imgui.ini
push ecx
push eax
push ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x20c]
call fcn.0040f0e0
cmp dword [ebp - 0x1f8], 0xf
lea eax, [ebp - 0x20c]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmova eax, dword [ebp - 0x20c]
push eax
call esi
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x40760b
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407601
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4083be
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x120]
mov eax, edi
sub eax, ecx
cmp eax, 6
jb 0x4083c3
cmp dword [ebp - 0x11c], 0xf
lea eax, [ebp - 0x130]
push 6
cmova eax, dword [ebp - 0x130]
push str.LE.db
push ecx
push eax
push ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x20c]
call fcn.0040f0e0
cmp dword [ebp - 0x1f8], 0xf
lea eax, [ebp - 0x20c]
cmova eax, dword [ebp - 0x20c]
push eax
call esi
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x40769e
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407694
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4083c8
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x120]
mov eax, edi
sub eax, ecx
cmp eax, 0xc
jb 0x4083cd
cmp dword [ebp - 0x11c], 0xf
lea eax, [ebp - 0x130]
push 0xc
cmova eax, dword [ebp - 0x130]
push str.cropped.bmp
push ecx
push eax
push ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x20c]
call fcn.0040f0e0
cmp dword [ebp - 0x1f8], 0xf
lea eax, [ebp - 0x20c]
cmova eax, dword [ebp - 0x20c]
push eax
call esi
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x407731
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407727
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4083d2
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x120]
mov eax, edi
sub eax, ecx
cmp eax, 0xa
jb 0x4083d7
cmp dword [ebp - 0x11c], 0xf
lea eax, [ebp - 0x130]
push 0xa
cmova eax, dword [ebp - 0x130]
push str.Alert.wav
push ecx
push eax
push ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x20c]
call fcn.0040f0e0
cmp dword [ebp - 0x1f8], 0xf
lea eax, [ebp - 0x20c]
cmova eax, dword [ebp - 0x20c]
push eax
call esi
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x4077c4
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4077ba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4083dc
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x120]
mov eax, edi
sub eax, ecx
cmp eax, 0xe
jb 0x4083e1
cmp dword [ebp - 0x11c], 0xf
lea eax, [ebp - 0x130]
push 0xe
cmova eax, dword [ebp - 0x130]
push str.AdminWarn.wav
push ecx
push eax
push ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x20c]
call fcn.0040f0e0
cmp dword [ebp - 0x1f8], 0xf
lea eax, [ebp - 0x20c]
cmova eax, dword [ebp - 0x20c]
push eax
call esi
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x407857
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40784d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4083e6
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x120]
mov eax, edi
sub eax, ecx
cmp eax, 0xd
jb 0x4083eb
cmp dword [ebp - 0x11c], 0xf
lea eax, [ebp - 0x130]
push 0xd
cmova eax, dword [ebp - 0x130]
push str.AlertSys.wav
push ecx
push eax
push ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x20c]
call fcn.0040f0e0
cmp dword [ebp - 0x1f8], 0xf
lea eax, [ebp - 0x20c]
cmova eax, dword [ebp - 0x20c]
push eax
call esi
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x4078ea
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4078e0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4083f0
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x120]
mov eax, edi
sub eax, ecx
cmp eax, 0xa
jb 0x4083f5
cmp dword [ebp - 0x11c], 0xf
lea eax, [ebp - 0x130]
push 0xa
cmova eax, dword [ebp - 0x130]
push str._start.wav
push ecx
push eax
push ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x20c]
call fcn.0040f0e0
cmp dword [ebp - 0x1f8], 0xf
lea eax, [ebp - 0x20c]
cmova eax, dword [ebp - 0x20c]
push eax
call esi
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x40797d
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407973
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4083fa
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x120]
mov eax, edi
sub eax, ecx
cmp eax, 8
jb 0x4083ff
cmp dword [ebp - 0x11c], 0xf
lea eax, [ebp - 0x130]
push 8
cmova eax, dword [ebp - 0x130]
push str.end.wav
push ecx
push eax
push ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x20c]
call fcn.0040f0e0
cmp dword [ebp - 0x1f8], 0xf
lea eax, [ebp - 0x20c]
cmova eax, dword [ebp - 0x20c]
push eax
call esi
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x407a10
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407a06
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408404
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x120]
mov eax, edi
sub eax, ecx
cmp eax, 0xc
jb 0x408409
cmp dword [ebp - 0x11c], 0xf
lea eax, [ebp - 0x130]
push 0xc
cmova eax, dword [ebp - 0x130]
push str._texture.jpg
push ecx
push eax
push ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x20c]
call fcn.0040f0e0
cmp dword [ebp - 0x1f8], 0xf
lea eax, [ebp - 0x20c]
cmova eax, dword [ebp - 0x20c]
push eax
call esi
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x407aa3
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407a99
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40840e
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x120]
sub edi, ecx
cmp edi, 0xb
jb 0x408413
cmp dword [ebp - 0x11c], 0xf
lea eax, [ebp - 0x130]
push 0xb
cmova eax, dword [ebp - 0x130]
push str.Shrift.otf
push ecx
push eax
push ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x20c]
call fcn.0040f0e0
cmp dword [ebp - 0x1f8], 0xf
lea eax, [ebp - 0x20c]
cmova eax, dword [ebp - 0x20c]
push eax
call esi
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0xf
jbe 0x407b34
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407b2a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408418
push ecx
push edx
call fcn.0041377a
add esp, 8
push 0x440cb0
call fcn.00401270
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0x130]
mov byte [ebp - 0x118], 0
lea ecx, [ebp - 0x22c]
push dword [ebp - 0x118]
call fcn.0040f3d0
add esp, 8
mov eax, 0xf9f2071
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x22c]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x214], eax
call fcn.004046f0
test al, al
je 0x407bd6
mov byte [ebp - 0x118], 0
lea edx, [ebp - 0x130]
push dword [ebp - 0x118]
lea ecx, [ebp - 0x20c]
call fcn.0040f3d0
add esp, 4
mov eax, 0xf9f2073
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x214], eax
call fcn.00404770
mov byte [ebp - 0x1f1], 1
test al, al
jne 0x407bdd
mov byte [ebp - 0x1f1], 0
mov dword [ebp - 4], 0x15
mov eax, dword [ebp - 0x210]
test al, 2
je 0x407c5a
mov ecx, dword [ebp - 0x1f8]
and eax, 0xfffffffd
mov dword [ebp - 0x210], eax
cmp ecx, 7
jbe 0x407c3d
mov edx, dword [ebp - 0x20c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x407c2d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40841d
push ecx
push edx
call fcn.0041377a
mov eax, dword [ebp - 0x210]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1f8], 7
mov word [ebp - 0x20c], cx
mov dword [ebp - 4], 0x14
test al, 1
je 0x407cae
mov ecx, dword [ebp - 0x218]
and eax, 0xfffffffe
mov dword [ebp - 0x210], eax
cmp ecx, 7
jbe 0x407cae
mov edx, dword [ebp - 0x22c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x407ca4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40841d
push ecx
push edx
call fcn.0041377a
add esp, 8
cmp byte [ebp - 0x1f1], 0
je 0x408079
mov byte [ebp - 0x118], 0
lea edx, [ebp - 0x130]
push dword [ebp - 0x118]
lea ecx, [ebp - 0x22c]
call fcn.0040f3d0
add esp, 4
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
push ecx
lea edx, [ebp - 0x22c]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x138]
call fcn.0040b970
add esp, 4
test eax, eax
jne 0x408422
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x218]
cmp ecx, 7
jbe 0x407d55
mov edx, dword [ebp - 0x22c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x407d4b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408435
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x134]
xorps xmm0, xmm0
movlpd qword [ebp - 0x140], xmm0
test ecx, ecx
je 0x407d6e
lock inc dword [ecx + 4]
mov edi, dword [ebp - 0x138]
mov esi, ecx
mov dword [ebp - 0x140], edi
mov dword [ebp - 0x13c], esi
test ecx, ecx
je 0x407d8a
lock inc dword [ecx + 4]
movlpd qword [ebp - 0x1f0], xmm0
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 0
test ecx, ecx
je 0x407dcf
or eax, 0xffffffff
lock xadd dword [ecx + 4], eax
jne 0x407dcf
mov eax, dword [ecx]
call dword [eax]
or ecx, 0xffffffff
mov eax, ecx
mov ecx, dword [ebp - 0x134]
lock xadd dword [ecx + 8], eax
jne 0x407dcf
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1c
test edi, edi
je 0x408023
mov ecx, edi
call fcn.00404060
test al, al
je 0x407e63
mov byte [ebp - 0x118], 0
lea ecx, [ebp - 0x20c]
push dword [ebp - 0x118]
call fcn.0040fa70
add esp, 4
mov byte [ebp - 4], 0x1d
lea ecx, [edi + 0x20]
mov eax, dword [ebp - 0x210]
or eax, 4
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x214], eax
lea eax, [ebp - 0x22c]
push eax
call fcn.00403420
or dword [ebp - 0x210], 8
lea ecx, [ebp - 0x20c]
mov esi, dword [ebp - 0x1f8]
mov edx, eax
push dword [ebp - 0x1fc]
cmp esi, 7
cmova ecx, dword [ebp - 0x20c]
push ecx
mov ecx, edx
call fcn.00403250
test eax, eax
jne 0x407e69
mov byte [ebp - 0x1f1], 1
jmp 0x407e70
mov esi, dword [ebp - 0x1f8]
mov byte [ebp - 0x1f1], 0
mov eax, dword [ebp - 0x210]
test al, 8
je 0x407eec
mov ecx, dword [ebp - 0x218]
and eax, 0xfffffff7
mov dword [ebp - 0x210], eax
cmp ecx, 7
jbe 0x407ecf
mov edx, dword [ebp - 0x22c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x407eb9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40843a
push ecx
push edx
call fcn.0041377a
mov esi, dword [ebp - 0x1f8]
add esp, 8
mov eax, dword [ebp - 0x210]
xor ecx, ecx
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 7
mov word [ebp - 0x22c], cx
mov dword [ebp - 4], 0x1c
test al, 4
je 0x407f3a
and eax, 0xfffffffb
mov dword [ebp - 0x210], eax
cmp esi, 7
jbe 0x407f3a
mov ecx, dword [ebp - 0x20c]
lea esi, [esi*2 + 2]
mov eax, ecx
cmp esi, 0x1000
jb 0x407f30
mov ecx, dword [eax - 4]
add esi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40843a
push esi
push ecx
call fcn.0041377a
add esp, 8
cmp byte [ebp - 0x1f1], 0
je 0x408007
lea ecx, [edi + 0x20]
call fcn.00404810
mov edx, 0x440cd4
mov ecx, 0x4462f8
call fcn.0040bb80
mov esi, eax
lea eax, [ebp - 0x22c]
push ecx
push eax
lea ecx, [edi + 0x20]
call fcn.0040b7d0
mov byte [ebp - 4], 0x1e
mov ecx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x407f7e
mov ecx, dword [eax]
mov eax, dword [eax + 0x10]
lea edx, [ebp - 0x270]
mov dword [ebp - 0x270], ecx
mov ecx, esi
mov dword [ebp - 0x26c], eax
mov word [ebp - 0x268], 0x5c22
call fcn.0040f410
mov byte [ebp - 4], 0x1c
mov esi, eax
mov ecx, dword [ebp - 0x218]
cmp ecx, 0xf
jbe 0x407fe3
mov edx, dword [ebp - 0x22c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407fd9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40843f
push ecx
push edx
call fcn.0041377a
add esp, 8
push esi
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 0xf
mov byte [ebp - 0x22c], 0
call fcn.0040be30
add esp, 4
lea ecx, [ebp - 0x140]
call fcn.00404630
mov esi, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x140]
jmp 0x407dd3
or edi, 0xffffffff
test esi, esi
je 0x408049
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x408049
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x408049
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov esi, dword [ebp - 0x134]
test esi, esi
je 0x408091
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x408091
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x408091
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov esi, dword [ebp - 0x234]
jmp 0x4080c7
mov edx, 0x440ce4
mov ecx, 0x4462f8
call fcn.0040bb80
push eax
call fcn.0040be30
add esp, 4
mov esi, dword [ebp - 0x234]
jmp 0x4080c7
mov dword [ebp - 4], 0x11
test esi, esi
je 0x4080ea
mov eax, dword [esi]
test eax, eax
je 0x4080df
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0xc
push esi
call fcn.0041377a
add esp, 8
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x11c]
cmp ecx, 0xf
jbe 0x408128
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40811e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408444
push ecx
push edx
call fcn.0041377a
add esp, 8
call fcn.00405280
mov edx, str.RecentDocs
test al, al
jne 0x40813b
mov edx, 0x440d3c
mov ecx, 0x4462f8
call fcn.0040bb80
push eax
call fcn.0040be30
cmp dword [ebp - 0x174], 0xf
lea ecx, [ebp - 0x188]
cmova ecx, dword [ebp - 0x188]
call fcn.004063b0
cmp dword [ebp - 0x18c], 0xf
lea ecx, [ebp - 0x1a0]
cmova ecx, dword [ebp - 0x1a0]
call fcn.004063b0
push 0x440d64
call fcn.00401270
push str.pause
call fcn.0041e011
mov ecx, dword [ebp - 0x1bc]
add esp, 0xc
cmp ecx, 0xf
jbe 0x4081ce
mov edx, dword [ebp - 0x1d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4081c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408449
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 0xf
mov byte [ebp - 0x1d0], 0
cmp ecx, 0xf
jbe 0x408223
mov edx, dword [ebp - 0x170]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x408219
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408449
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x1d4]
cmp ecx, 0xf
jbe 0x40825d
mov edx, dword [ebp - 0x1e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x408253
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408449
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 0xf
mov byte [ebp - 0x1e8], 0
cmp ecx, 0xf
jbe 0x4082b2
mov edx, dword [ebp - 0x188]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4082a8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408449
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
cmp ecx, 0xf
jbe 0x408307
mov edx, dword [ebp - 0x1a0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4082fd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408449
push ecx
push edx
call fcn.0041377a
add esp, 8
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
cmp ecx, 0xf
jbe 0x40835c
mov edx, dword [ebp - 0x1b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x408352
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408449
push ecx
push edx
call fcn.0041377a
add esp, 8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00413732
mov esp, ebp
pop ebp
ret
call fcn.0040b5f0
call fcn.0041efa6
call fcn.0041efa6
call fcn.0041efa6
call fcn.0041efa6
call fcn.004014e0
call fcn.0041efa6
call fcn.0041efa6
call fcn.0041efa6
call fcn.0041efa6
call fcn.004014e0
call fcn.0041efa6
call fcn.004014e0
call fcn.0041efa6
call fcn.004014e0
call fcn.0041efa6
call fcn.004014e0
call fcn.0041efa6
call fcn.004014e0
call fcn.0041efa6
call fcn.004014e0
call fcn.0041efa6
call fcn.004014e0
call fcn.0041efa6
call fcn.004014e0
call fcn.0041efa6
call fcn.004014e0
call fcn.0041efa6
call fcn.004014e0
call fcn.0041efa6
call fcn.004014e0
call fcn.0041efa6
call fcn.0041efa6
lea ecx, [ebp - 0x22c]
mov edx, eax
push ecx
mov ecx, str.directory_iterator::directory_iterator
call fcn.00403f50
call fcn.0041efa6
call fcn.0041efa6
call fcn.0041efa6
call fcn.0041efa6
call fcn.0041efa6
int3