Function at 0x4cf4b0
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6545f4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4ec
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x60], esi
mov dword [ebp - 4], 0
wait
cmp dword [esi + 0x2d4], 0
jne 0x4cf4fe
xor eax, eax
wait
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
mov eax, dword [esi + 0x334]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0x7f02
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
push 0xfffffffffffffff4
mov ecx, dword [esi + 4]
push ecx
call dword [sym.imp.USER32.dll_SetClassLongW]
lea ecx, [esi + 0x2e4]
call fcn.00526880
mov edx, dword [esi + 0x28]
mov dword [ebp - 0x80], edx
mov al, byte [esi + 0x24]
mov byte [ebp - 0xb8], al
lea ebx, [esi + 0x26c]
mov ecx, ebx
call fcn.004b9330
push 0
lea ecx, [esi + 0x288]
push ecx
lea edx, [esi + 0x278]
push edx
lea ecx, [esi + 0x50]
call fcn.005b0d20
push eax
mov ecx, dword [esi + 0x2d4]
call fcn.00413dd0
mov dword [ebp - 0x84], eax
mov ecx, 0x700724
mov eax, dword [0x700724]
mov edx, dword [eax + 0xc]
call edx
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
lea eax, [ebp - 0x28]
push eax
call fcn.005bd6c0
lea ecx, [ebp - 0xa4]
push ecx
push 0x6750f0
mov edx, dword [ebp - 0x28]
push edx
call fcn.005bd3d0
add esp, 0x10
push 0x104
push 0x104
lea ecx, [ebp - 0x1c]
call fcn.00401640
push eax
push str.LogsDir
mov eax, dword [ebp - 0x28]
push eax
call fcn.005bd4f0
add esp, 0x10
lea ecx, [ebp - 0x1c]
test eax, eax
jne 0x4cf642
push 0x104
call fcn.00401640
push eax
push 1
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x4cf620
push str.SHGetFolderPathW__0__0x001a__0__SHGFP_TYPE_DEFAULT__strSysDir.GetBuffer__260__
push eax
lea ecx, [ebp - 0xe4]
call fcn.0040de50
push 0x6ba4dc
lea ecx, [ebp - 0xe4]
push ecx
call fcn.0060fb01
push 0xffffffffffffffff
lea ecx, [ebp - 0x1c]
call fcn.004048d0
push 0x674e9c
push str._sData_
lea edx, [ebp - 0x1c]
push edx
call fcn.00414990
add esp, 0xc
jmp 0x4cf656
push 0xffffffffffffffff
call fcn.004048d0
push str.Data_
lea ecx, [ebp - 0x1c]
call fcn.004017a0
mov eax, dword [esi + 0x2d4]
add eax, 0x10
push eax
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x14]
push edx
call fcn.00428b00
mov byte [ebp - 4], 3
push 0x66ea40
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00428bb0
mov byte [ebp - 4], 4
push str.FilespyLog
push eax
lea ecx, [ebp - 0x18]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 5
push 0x66f150
push eax
lea edx, [ebp - 0x30]
push edx
call fcn.00428bb0
mov byte [ebp - 4], 6
push 0x674f08
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00428bb0
add esp, 0x3c
mov byte [ebp - 4], 7
mov eax, dword [eax]
lea ecx, [ebp - 0x4f8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
mov dword [ebp - 0x20], edi
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c]
call fcn.004014a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.004014a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x18]
call fcn.004014a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x24]
call fcn.004014a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call fcn.004014a0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp edi, 0xffffffff
je 0x4d01f6
lea ecx, [ebp - 0xcc]
call fcn.00432c80
mov byte [ebp - 4], 8
mov ecx, ebx
call fcn.004b9330
mov bl, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x4cc]
push ecx
mov ecx, esi
call fcn.004f2360
test al, al
je 0x4cf894
lea edx, [esi + 0x288]
push edx
lea ecx, [ebp - 0x44]
call fcn.00425550
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004255a0
mov ecx, eax
call fcn.00425710
test al, al
je 0x4cf894
lea ecx, [esi + 0x278]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00425550
push eax
lea edx, [ebp - 0x8c]
push edx
lea ecx, [ebp - 0xac]
call fcn.004255a0
mov ecx, eax
call fcn.004256b0
test al, al
je 0x4cf894
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x54]
call fcn.004255a0
fld qword [eax]
fstp qword [ebp - 0x94]
mov ecx, dword [esi + 0x2d4]
add ecx, 0x10
push ecx
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x14]
push eax
call fcn.00428b00
mov byte [ebp - 4], 9
push 0x66ea40
push eax
lea ecx, [ebp - 0x24]
push ecx
call fcn.00428bb0
mov byte [ebp - 4], 0xa
push str.FilespyLog
push eax
lea edx, [ebp - 0x18]
push edx
call fcn.00428bb0
mov byte [ebp - 4], 0xb
push 0x66ea40
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00428bb0
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x4cc]
push ecx
push eax
lea edx, [ebp - 0x2c]
push edx
call fcn.00428bb0
add esp, 0x3c
mov edi, eax
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0xcc]
call fcn.004315b0
push edi
mov ecx, eax
call fcn.004078d0
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x2c]
call fcn.004014a0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x30]
call fcn.004014a0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x18]
call fcn.004014a0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x24]
call fcn.004014a0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x14]
call fcn.004014a0
lea ecx, [ebp - 0x4f8]
push ecx
mov edi, dword [ebp - 0x20]
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4cf738
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0xc8]
mov ebx, dword [edx]
mov dword [ebp - 0x4c], ebx
cmp ebx, dword [ebp - 0xc8]
je 0x4cfb22
mov eax, dword [ebp - 0xa4]
push eax
lea ecx, [ebx + 0x18]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x78]
push ecx
call fcn.005c0e30
lea edi, [esi + 0x270]
push 0x66f16a
push edi
call fcn.0040b580
add esp, 0x14
test al, al
je 0x4cfa5c
mov ecx, edi
call fcn.004644a0
push eax
lea ecx, [ebp - 0x18]
call fcn.00401450
mov byte [ebp - 4], 0x10
xor edi, edi
mov dword [ebp - 0xa0], edi
mov ecx, dword [ebp - 0x74]
sub ecx, dword [ebp - 0x78]
mov eax, 0x38e38e39
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jae 0x4cfa26
push edi
lea ecx, [ebp - 0x78]
call fcn.004ccf80
push eax
lea ecx, [ebp - 0x2a8]
call fcn.004cdf70
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x280], 8
mov eax, dword [ebp - 0x294]
jae 0x4cf98b
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x14]
call fcn.0040bea0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x14]
call fcn.004644a0
push 0
mov ecx, dword [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x14]
call fcn.004144e0
cmp eax, 0xffffffff
je 0x4cfa05
mov ecx, dword [esi + 0x2d4]
add ecx, 0x14
mov edx, dword [ecx]
cmp dword [edx - 0xc], 0
jle 0x4cf9f6
call fcn.004014f0
push eax
lea ecx, [ebp - 0x25c]
call fcn.00439540
test eax, eax
jne 0x4cf9ed
push 0x6751bc
lea ecx, [ebp - 0x25c]
call fcn.00439540
test eax, eax
je 0x4cfa05
lea eax, [ebp - 0x2a8]
push eax
jmp 0x4cf9fd
lea ecx, [ebp - 0x2a8]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.004cf420
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x14]
call fcn.004014a0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x2a8]
call fcn.004cd430
inc edi
jmp 0x4cf938
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x18]
call fcn.004014a0
cmp byte [ebx + 0x21], 0
jne 0x4cf8e1
mov ecx, dword [ebx + 8]
cmp byte [ecx + 0x21], 0
jne 0x4cfb06
mov dword [ebp - 0x7c], ecx
mov eax, dword [ecx]
cmp byte [eax + 0x21], 0
jne 0x4cfaff
mov ecx, eax
jmp 0x4cfa49
xor edi, edi
mov dword [ebp - 0xbc], edi
mov ecx, dword [ebp - 0x74]
sub ecx, dword [ebp - 0x78]
mov eax, 0x38e38e39
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jae 0x4cfa32
push edi
lea ecx, [ebp - 0x78]
call fcn.004ccf80
push eax
lea ecx, [ebp - 0x174]
call fcn.004cdf70
mov byte [ebp - 4], 0x13
mov ecx, dword [esi + 0x2d4]
add ecx, 0x14
mov edx, dword [ecx]
cmp dword [edx - 0xc], 0
jle 0x4cfadb
call fcn.004014f0
push eax
lea ecx, [ebp - 0x128]
call fcn.00439540
test eax, eax
je 0x4cfad2
push str.SYSTEM
lea ecx, [ebp - 0x128]
call fcn.00439540
test eax, eax
jne 0x4cfaea
lea eax, [ebp - 0x174]
push eax
jmp 0x4cfae2
lea ecx, [ebp - 0x174]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.004cf420
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x174]
call fcn.004cd430
inc edi
jmp 0x4cfa5e
mov ebx, ecx
jmp 0x4cf8de
mov eax, dword [ebx + 4]
cmp byte [eax + 0x21], 0
jne 0x4cfb1b
cmp ebx, dword [eax + 8]
jne 0x4cfb1b
mov ebx, eax
mov dword [ebp - 0x4c], ebx
jmp 0x4cfb06
mov ebx, eax
jmp 0x4cf8de
lea edx, [ebp - 0x28]
push edx
call fcn.005bd6c0
lea eax, [ebp - 0x34]
push eax
push str.ItemsPerPage
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.005bd460
add esp, 0x10
test eax, eax
jne 0x4cfb5c
push 0x1f4
push str.ItemsPerPage
mov edx, dword [ebp - 0x28]
push edx
call fcn.005bd4b0
add esp, 0xc
jmp 0x4cfb63
mov ebx, dword [ebp - 0x34]
test ebx, ebx
jne 0x4cfb6b
mov ebx, 0x1f4
mov dword [ebp - 0x34], ebx
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp - 0x5c]
mov eax, 0x38e38e39
imul ecx
sar edx, 5
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, edi
xor edx, edx
div ebx
mov ecx, edx
mov eax, edi
sub eax, ecx
xor edx, edx
div ebx
mov ebx, eax
mov dword [ebp - 0x9c], ebx
test ecx, ecx
je 0x4cfba5
inc ebx
mov dword [ebp - 0x9c], ebx
lea ecx, [esi + 0x2e4]
push ebx
call fcn.00527030
cmp byte [esi + 0x32c], 0
je 0x4cfbdc
lea eax, [ebx - 1]
mov ecx, dword [ebp - 0x34]
imul eax, ecx
mov dword [ebp - 0x30], eax
mov eax, ebx
imul eax, ecx
mov dword [ebp - 0x14], eax
push ebx
lea ecx, [esi + 0x2e4]
call fcn.00527170
jmp 0x4cfbfe
lea ecx, [esi + 0x2e4]
call fcn.00526870
mov ecx, dword [ebp - 0x34]
imul eax, ecx
mov dword [ebp - 0x30], eax
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x14], eax
mov byte [esi + 0x32c], 1
cmp dword [ebp - 0x14], edi
jb 0x4cfc07
dec edi
mov dword [ebp - 0x14], edi
lea ecx, [esi + 4]
call fcn.004a1380
mov ecx, dword [esi + 0x338]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
push 0
push 0
push 0x20
push 0x32
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
call ebx
push eax
push 0x31
call ebx
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [esi + 0x338], eax
push 5
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
mov edx, dword [esi + 0x338]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_SetBkColor]
push 5
call fcn.004af6f0
mov ecx, eax
call fcn.005bffa0
push eax
push 0xffffffffffffffff
mov eax, dword [esi + 0x338]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 1
mov ecx, dword [esi + 0x338]
push ecx
lea edx, [ebp - 0x64]
push edx
lea ecx, [esi + 4]
call fcn.00417dc0
mov dword [ebp - 0x48], 0
mov edi, dword [ebp - 0x5c]
mov dword [ebp - 0x98], edi
cmp edi, dword [ebp - 0x58]
je 0x4d01cf
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x30]
jl 0x4d01c0
cmp eax, dword [ebp - 0x14]
jg 0x4d01c0
inc eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [edi + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea edx, [ebp - 0xb4]
push edx
lea eax, [ebp - 0x94]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov ecx, 0x700724
mov edx, dword [0x700724]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x15
movzx ecx, word [ebp - 0xb4]
push ecx
movzx edx, word [ebp - 0xb2]
push edx
movzx eax, word [ebp - 0xae]
push eax
push str._0.2u._0.2u._0.2u
lea ecx, [ebp - 0x18]
push ecx
call fcn.00405ab0
add esp, 0x14
lea ecx, [esi + 4]
mov edx, dword [ebp - 0x18]
push edx
push SysReAllocString
call fcn.004a1820
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x2c], 0
lea ebx, [edi + 0x30]
cmp dword [ebx + 0x14], 8
jb 0x4cfd4d
mov eax, dword [ebx]
jmp 0x4cfd4f
mov eax, ebx
push eax
mov ecx, dword [esi + 0x2d4]
call fcn.004122c0
test eax, eax
je 0x4cfd72
push eax
push 0xffffffffffffffff
mov eax, dword [esi + 0x338]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x218], 0
push 0x30
push 0
lea ecx, [ebp - 0x214]
push ecx
call fcn.006100a0
add esp, 0xc
mov dword [ebp - 0x218], 2
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1fc], eax
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [esi + 4]
call fcn.004a12f0
mov ecx, 0x700724
mov edx, dword [0x700724]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 0x17
movzx ecx, word [ebp - 0xa8]
push ecx
movzx edx, word [ebp - 0xaa]
push edx
movzx eax, word [ebp - 0xac]
push eax
push str._0.2u:_0.2u:_0.2u
lea ecx, [ebp - 0x24]
push ecx
call fcn.00405ab0
add esp, 0x14
mov edx, dword [ebp - 0x24]
push edx
push 1
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [esi + 4]
call fcn.00417050
cmp dword [ebx + 0x14], 8
jb 0x4cfe1b
mov ebx, dword [ebx]
push ebx
push 2
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [esi + 4]
call fcn.00417050
lea eax, [edi + 0x4c]
cmp dword [eax + 0x14], 8
jb 0x4cfe35
mov eax, dword [eax]
push eax
push 3
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [esi + 4]
call fcn.00417050
lea eax, [edi + 0x14]
cmp dword [eax + 0x14], 8
jb 0x4cfe4f
mov eax, dword [eax]
push eax
push 4
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [esi + 4]
call fcn.00417050
mov ecx, 0x700724
mov edx, dword [0x700724]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x19
mov ecx, 0x700724
mov edx, dword [0x700724]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x1b
push 0x80
lea ecx, [ebp - 0x1e4]
push ecx
push 0xf1
mov edx, dword [0x716738]
push edx
mov ebx, dword [sym.imp.USER32.dll_LoadStringW]
call ebx
mov eax, dword [edi + 0x10]
cmp eax, 9
ja case.0x4cfec6.6
jmp dword [eax*4 + 0x4d02f8]
push 0x80
lea eax, [ebp - 0x1e4]
push eax
push 0x2c26
mov ecx, dword [0x716738]
push ecx
call ebx
lea edx, [ebp - 0x1e4]
push edx
lea ecx, [ebp - 0x40]
call fcn.00403420
push 0x80
cmp byte [edi + 0x8c], 0
je 0x4cff19
lea eax, [ebp - 0x1e4]
push eax
push 0xfa
mov ecx, dword [0x716738]
push ecx
jmp 0x4cff2b
lea edx, [ebp - 0x1e4]
push edx
push 0xf9
mov eax, dword [0x716738]
push eax
call ebx
lea ecx, [ebp - 0x1e4]
push ecx
lea ecx, [ebp - 0x38]
call fcn.00403420
cmp dword [edi + 0x10], 9
jne case.0x4cfec6.6
push 0x80
lea edx, [ebp - 0x1e4]
push edx
push 0x2c34
mov eax, dword [0x716738]
push eax
call ebx
lea ecx, [ebp - 0x1e4]
push ecx
lea ecx, [ebp - 0x38]
call fcn.00401b50
jmp case.0x4cfec6.6
push 0x80
lea edx, [ebp - 0x1e4]
push edx
push 0x2c24
mov eax, dword [0x716738]
push eax
call ebx
lea ecx, [ebp - 0x1e4]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00403420
jmp case.0x4cfec6.6
push 0x80
lea edx, [ebp - 0x1e4]
push edx
push 0x2c28
mov eax, dword [0x716738]
push eax
call ebx
lea ecx, [ebp - 0x1e4]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00403420
jmp case.0x4cfec6.6
push 0x80
lea edx, [ebp - 0x1e4]
push edx
push 0x2c27
mov eax, dword [0x716738]
push eax
call ebx
lea ecx, [ebp - 0x1e4]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00403420
push 0x80
cmp dword [edi + 0x10], 4
jne 0x4d0028
lea edx, [ebp - 0x1e4]
push edx
push 0x2c2b
mov eax, dword [0x716738]
push eax
call ebx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x38]
call fcn.00403420
jmp case.0x4cfec6.6
lea ecx, [ebp - 0x1e4]
push ecx
push 0x2c2c
mov edx, dword [0x716738]
push edx
call ebx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x38]
call fcn.00403420
jmp case.0x4cfec6.6
push 0x80
lea ecx, [ebp - 0x1e4]
push ecx
push 0x2c2a
mov edx, dword [0x716738]
push edx
call ebx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x40]
call fcn.00403420
push 0x80
lea ecx, [ebp - 0x1e4]
push ecx
push 0x2c2f
mov edx, dword [0x716738]
push edx
call ebx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x38]
call fcn.00403420
lea eax, [edi + 0x68]
cmp dword [eax + 0x14], 8
jb 0x4d00ae
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x88]
call fcn.0040bea0
mov byte [ebp - 4], 0x1c
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0x38]
call fcn.00401710
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x88]
jmp 0x4d015c
push 0x80
lea ecx, [ebp - 0x1e4]
push ecx
push 0x2c29
mov edx, dword [0x716738]
push edx
call ebx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x40]
call fcn.00403420
push 0x80
lea ecx, [ebp - 0x1e4]
push ecx
push 0x2c30
mov edx, dword [0x716738]
push edx
call ebx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x38]
call fcn.00403420
lea eax, [edi + 0x68]
cmp dword [eax + 0x14], 8
jb 0x4d0139
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x64]
call fcn.0040bea0
mov byte [ebp - 4], 0x1d
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0x38]
call fcn.00401710
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x64]
call fcn.004014a0
mov ecx, dword [ebp - 0x40]
push ecx
push 5
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [esi + 4]
call fcn.00417050
mov eax, dword [ebp - 0x38]
push eax
push 6
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [esi + 4]
call fcn.00417050
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x38]
call fcn.004014a0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x40]
call fcn.004014a0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x24]
call fcn.004014a0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x18]
call fcn.004014a0
add edi, 0x90
jmp 0x4cfc91
inc eax
mov dword [ebp - 0x48], eax
add edi, 0x90
jmp 0x4cfc91
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x78]
call fcn.004cf350
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x5c]
call fcn.004cf350
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xcc]
call fcn.00432c20
mov edx, dword [ebp - 0xb8]
push edx
mov eax, dword [ebp - 0x80]
push eax
lea ecx, [esi + 0x24]
call fcn.004f8850
lea ecx, [esi + 0x2e4]
call fcn.00526890
lea ecx, [esi + 0x2e4]
call fcn.00526920
mov ecx, dword [ebp - 0x28]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
push 0xfffffffffffffff4
mov edx, dword [esi + 4]
push edx
call dword [sym.imp.USER32.dll_SetClassLongW]
push 1
mov eax, dword [esi + 0x334]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.004014a0
mov eax, dword [ebp - 0x84]
wait
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret