Function at 0x440590
Capabilities:
Contain obfuscated stackstrings
Hide graphical window
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b53a9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xeb0
cmp byte [0x6c5540], 0
push esi
push edi
mov dword [ebp - 0x3c], 0
jne 0x442aed
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov dword [ebp - 0xb4], ecx
mov eax, dword [0x6d6a78]
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov esi, dword [sym.imp.USER32.dll_PeekMessageW]
cmp eax, dword [ecx + 4]
jg 0x442b00
lea ecx, [ebp - 0x120]
call fcn.00436910
push 0x6d6a80
lea edx, [ebp - 0x120]
lea ecx, [ebp - 0x548]
call fcn.0044cd30
add esp, 4
fild qword [eax]
fmul dword [0x5f4504]
fld1
fxch st(1)
fcompi st(1)
fstp st(0)
jbe 0x440784
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x11c]
push 0
mov dword [0x6d6a80], eax
mov dword [0x6d6a84], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.USER32.dll_GetGuiResources]
mov dword [ebp - 0x48], eax
cmp eax, 0x3e8
jle 0x440784
mov edx, dword [0x6c5498]
cmp eax, edx
jle 0x440784
mov ecx, eax
sub ecx, edx
cmp ecx, 0x3e8
jle 0x440784
push str.count
lea ecx, [ebp - 0x598]
mov dword [0x6c5498], eax
call fcn.004471f0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x598]
fild dword [ebp - 0x48]
sub esp, 8
lea ecx, [ebp - 0x838]
fstp qword [esp]
push eax
call fcn.004d2c00
lea ecx, [ebp - 0x838]
mov byte [ebp - 4], 1
push ecx
lea eax, [ebp - 0x7f8]
push eax
push ecx
lea ecx, [ebp - 0x41c]
call fcn.004456c0
push str.GUI_objects_
lea ecx, [ebp - 0x580]
mov byte [ebp - 4], 2
call fcn.004471f0
push str.gui_objs
lea ecx, [ebp - 0x568]
mov byte [ebp - 4], 3
call fcn.004471f0
lea eax, [ebp - 0x41c]
mov byte [ebp - 4], 4
push eax
push 0x5d3
lea eax, [ebp - 0x580]
xor ecx, ecx
push 0x5def08
push eax
lea edx, [ebp - 0x568]
call fcn.004d4b60
add esp, 0x10
lea ecx, [ebp - 0x568]
call fcn.004470b0
lea ecx, [ebp - 0x580]
call fcn.004470b0
lea ecx, [ebp - 0x41c]
call fcn.00449240
push fcn.00438e00
push 1
push 0x40
lea eax, [ebp - 0x838]
mov byte [ebp - 4], 0
push eax
call fcn.00583d37
lea ecx, [ebp - 0x598]
mov dword [ebp - 4], 0xffffffff
call fcn.004470b0
lea ecx, [ebp - 0x550]
call fcn.00436910
push 1
push 0
push 0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [0x6d2224], eax
lea eax, [ebp - 0x468]
push 0
push eax
mov dword [0x6d2220], ecx
call esi
test eax, eax
je 0x4407e8
cmp byte [0x6c5540], 0
jne 0x4407e8
lea eax, [ebp - 0x468]
push eax
call edi
lea eax, [ebp - 0x468]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x468]
push eax
call esi
test eax, eax
jne 0x4407b4
mov ecx, dword [0x6d41f8]
mov eax, dword [ecx]
mov dword [ebp - 0x48], eax
cmp eax, ecx
je 0x440812
mov ecx, dword [eax + 0x14]
mov eax, dword [ecx]
call dword [eax + 0x4c]
lea ecx, [ebp - 0x48]
call fcn.0044b810
mov eax, dword [ebp - 0x48]
cmp eax, dword [0x6d41f8]
jne 0x4407f7
mov eax, dword [0x6d393c]
test eax, eax
je 0x440829
cmp byte [eax], 0x6d
mov eax, dword [0x6d393c]
jne 0x440829
mov dl, 1
jmp 0x44082b
xor dl, dl
mov byte [ebp - 0x1e], dl
test eax, eax
je 0x440840
cmp byte [eax], 0x73
mov eax, dword [0x6d393c]
jne 0x440840
mov cl, 1
jmp 0x440842
xor cl, cl
mov byte [ebp - 0x11], cl
test dl, dl
jne 0x44084d
test cl, cl
je 0x440858
mov byte [eax], 0
test dl, dl
jne 0x440865
test cl, cl
jne 0x440865
cmp byte [0x6c54cb], 0
je 0x440a5f
cmp byte [0x6c54cc], 0
je 0x440891
mov esi, dword [0x6c5544]
test esi, esi
je 0x440891
push ecx
mov ecx, dword [esi + 0x50]
call fcn.0053cdf0
mov dword [eax + 0x30], 1
push dword [esi + 0x10]
call dword [sym.imp.USER32.dll_DrawMenuBar]
push 0x30c
lea eax, [ebp - 0xcac]
push 0
push eax
call fcn.00585a40
add esp, 0xc
lea eax, [ebp - 0x99c]
push 0x98
push 0
push eax
call fcn.00585a40
mov ecx, dword [ebp - 0xb4]
add esp, 0xc
mov eax, dword [0x6c54d0]
mov dword [ebp - 0xcbc], eax
mov eax, dword [0x6d638c]
mov dword [ebp - 0xcc0], 0x3bc
mov dword [ebp - 0x9a0], 4
mov dword [ebp - 0xcb8], 1
mov dword [ebp - 0xcb4], 0x87
mov dword [ebp - 0xcb0], 0x8000
cmp eax, dword [ecx + 4]
jg 0x442b36
call fcn.00531180
cmp dword [eax + 0x14], 0x10
jb 0x44091e
mov eax, dword [eax]
push str.tray_tip
push eax
mov ecx, 0x6d6384
call fcn.0052fc30
lea edx, [ebp - 0xca8]
sub edx, eax
jmp 0x440940
movzx ecx, word [eax]
lea eax, [eax + 2]
mov word [edx + eax - 2], cx
test cx, cx
jne 0x440940
push 0
push 0x10
push 0x10
push 1
push 0x7b
push dword [0x6c54b0]
call dword [sym.imp.USER32.dll_LoadImageW]
mov esi, dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [ebp - 0xcac], eax
lea eax, [ebp - 0xcc0]
push eax
push 0
call esi
lea eax, [ebp - 0xcc0]
push eax
push 4
call esi
cmp byte [0x6c54cb], 0
mov byte [0x6c54cd], 0
jne 0x4409f7
cmp byte [ebp - 0x1e], 0
jne 0x4409f7
cmp byte [ebp - 0x11], 0
je 0x440a5f
cmp byte [0x6c5543], 0
jne 0x440a5f
push 0xe0
call fcn.005838a8
add esp, 4
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 4], 7
mov ecx, dword [0x6c5544]
test ecx, ecx
je 0x4409de
mov ecx, dword [ecx + 0x10]
jmp 0x4409e0
xor ecx, ecx
push ecx
push dword [0x6c54b0]
mov ecx, eax
call fcn.0049d940
mov dword [ebp - 4], 0xffffffff
jmp 0x440a5f
mov eax, dword [0x6c5544]
test eax, eax
jne 0x440a3f
push 0x178
call fcn.005838a8
add esp, 4
mov dword [ebp - 0x3d8], eax
push 0x6aced4
push str.MainWindow
push 0
mov dword [ebp - 4], 6
mov ecx, eax
push dword [0x6c54b0]
call fcn.00490670
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x6c5544]
push 9
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x6c5544]
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov byte [0x6c54cb], 0
mov eax, dword [0x6c54b8]
test eax, eax
jg 0x440a75
cmp dword [0x6c54bc], 0
jg 0x440a75
xor cl, cl
jmp 0x440a77
mov cl, 1
mov byte [0x6c54b4], cl
test eax, eax
jle 0x440b3e
mov cl, byte [0x6c554b]
test cl, cl
jne 0x440adf
push 0x2b4
call fcn.005838a8
mov edi, eax
add esp, 4
mov dword [ebp - 0x3dc], edi
push 0
mov dword [ebp - 4], 8
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
sub esp, 8
mov esi, eax
mov ecx, esp
push 0x6d375c
call fcn.004455d0
push ecx
push esi
mov ecx, edi
call fcn.004a3bf0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x6c54b8]
mov cl, byte [0x6c554b]
test eax, eax
jle 0x440b3e
test cl, cl
je 0x440b3e
cmp byte [0x6c554e], 0
je 0x440b3e
cmp byte [0x6c554d], 0
jne 0x440b3e
push 0x18c
call fcn.005838a8
mov edi, eax
add esp, 4
mov dword [ebp - 0x124], edi
push 0
mov dword [ebp - 4], 9
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
sub esp, 8
mov esi, eax
mov ecx, esp
push 0x6d375c
call fcn.004455d0
push ecx
push esi
mov ecx, edi
call fcn.004a5250
mov dword [ebp - 4], 0xffffffff
push 0x6d2260
lea ecx, [ebp - 0x6a8]
call fcn.00436910
mov edx, eax
lea ecx, [ebp - 0x6b0]
call fcn.0044cd30
add esp, 4
fild qword [eax]
fmul dword [0x5f4504]
fld dword [0x5f45ec]
fxch st(1)
fcompi st(1)
fstp st(0)
jbe 0x440ba7
cmp byte [0x6c5533], 0
je 0x440ba7
mov ecx, dword [0x6c5544]
test ecx, ecx
je 0x440b8c
call fcn.004918a0
lea ecx, [ebp - 0x470]
call fcn.00436910
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [0x6d2260], ecx
mov dword [0x6d2264], eax
cmp dword [0x6c54a8], 0
jg 0x440d42
mov eax, dword [0x618c0c]
cmp dword [eax], 0
jg 0x440be4
lea ecx, [ebp - 0x478]
call fcn.00436910
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [0x6d225c], eax
mov eax, dword [0x618c0c]
mov dword [0x6d2258], ecx
mov dword [eax], 1
push 0x6d2258
lea ecx, [ebp - 0x480]
call fcn.00436910
mov edx, eax
lea ecx, [ebp - 0x488]
call fcn.0044cd30
add esp, 4
fild qword [eax]
fmul dword [0x5f4504]
fld dword [0x5f4768]
fcompi st(1)
fstp st(0)
jb 0x440c69
mov edx, dword [0x618c0c]
cmp dword [edx], 5
jle 0x440c69
mov eax, dword [0x6acf1c]
lea ecx, [eax + eax*4]
mov eax, dword [0x6c54ac]
lea eax, [eax + ecx*2]
mov dword [0x6c54a8], eax
lea ecx, [ebp - 0x490]
mov dword [0x6c54ac], eax
mov dword [edx], 0
call fcn.00436910
inc dword [0x6acf1c]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [0x6d2258], ecx
mov dword [0x6d225c], eax
jmp 0x440d80
push 0x6d2258
lea ecx, [ebp - 0x498]
call fcn.00436910
mov edx, eax
lea ecx, [ebp - 0x4a0]
call fcn.0044cd30
add esp, 4
fild qword [eax]
fmul dword [0x5f4504]
fld dword [0x5f4768]
fxch st(1)
fcompi st(1)
fstp st(0)
jbe 0x440cb0
cmp dword [0x6c54a8], 0
jg 0x440cb0
lea ecx, [ebp - 0x4a8]
jmp 0x440d20
push 0x6d2258
lea ecx, [ebp - 0x4b0]
call fcn.00436910
mov edx, eax
lea ecx, [ebp - 0x4b8]
call fcn.0044cd30
mov ecx, dword [0x6acf1c]
add esp, 4
shl ecx, 4
sub ecx, dword [0x6acf1c]
fild qword [eax]
shl ecx, 2
mov dword [ebp - 0x1c], ecx
fmul dword [0x5f4504]
fild dword [ebp - 0x1c]
fxch st(1)
fcompi st(1)
fstp st(0)
jb 0x440d80
mov eax, dword [0x618c0c]
cmp dword [eax], 4
jg 0x440d80
mov dword [0x6acf1c], 1
lea ecx, [ebp - 0x4c0]
mov dword [0x6c54ac], 0
call fcn.00436910
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [0x6d225c], eax
mov eax, dword [0x618c0c]
mov dword [0x6d2258], ecx
mov dword [eax], 0
jmp 0x440d80
push 0x6d2258
lea ecx, [ebp - 0x4c8]
call fcn.00436910
mov edx, eax
lea ecx, [ebp - 0x4d0]
call fcn.0044cd30
mov ecx, dword [0x6c54ac]
add esp, 4
fild qword [eax]
fmul dword [0x5f4504]
fstp dword [ebp - 0x1c]
cvttss2si eax, dword [ebp - 0x1c]
sub ecx, eax
mov dword [0x6c54a8], ecx
call fcn.005201a0
push 0
add eax, 0x1b0
push eax
lea eax, [ebp - 0x7f8]
push eax
call fcn.0044c6e0
or dword [ebp - 0x3c], 1
mov ecx, dword [eax + 4]
mov esi, dword [eax + 0x14]
mov edi, dword [eax + 0x18]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x210], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20c], ecx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x208], ecx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x204], ecx
xor ecx, ecx
mov word [eax + 4], cx
lea ecx, [ebp - 0x7f4]
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 7
call fcn.00449550
mov dword [ebp - 4], 0xa
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2bc], eax
xor eax, eax
mov dword [ebp - 0x2b8], esi
mov dword [ebp - 0x2b4], edi
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 7
mov word [ebp - 0x210], ax
lea eax, [ebp - 0x434]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x2c8]
call fcn.00547b87
mov edi, dword [ebp - 0x3c]
or edi, 2
mov dword [ebp - 0x3c], edi
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x434]
cmp dword [ebp - 0x420], 8
mov dword [ebp - 0x1f8], 0
cmovae edx, dword [ebp - 0x434]
mov ecx, edx
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1e4], 7
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x440ea0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x1f8]
call fcn.004496e0
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 0xb
call fcn.00449550
lea ecx, [ebp - 0x1f8]
call fcn.004f09a0
mov ecx, dword [ebp - 0x1e4]
test eax, eax
setg byte [0x6c54a6]
cmp ecx, 8
jb 0x440f1f
mov edx, dword [ebp - 0x1f8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x440f15
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442b82
push ecx
push edx
call fcn.00583877
add esp, 8
xor eax, eax
mov dword [ebp - 0x1e8], 0
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 0x1e4], 7
mov word [ebp - 0x1f8], ax
call fcn.00449550
mov dword [ebp - 4], 0xffffffff
xor eax, eax
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 7
mov word [ebp - 0x210], ax
call fcn.005201a0
push 0
add eax, 0x1c0
push eax
lea eax, [ebp - 0x4d8]
push eax
call fcn.0044c810
mov al, byte [eax + 4]
test al, al
je 0x4410b5
cmp dword [0x6c54bc], 0
jg 0x4410b5
cmp byte [0x6c54a6], 0
je 0x4410b5
mov al, byte [0x6c54a7]
cmp al, byte [0x6c54b4]
je 0x4410b5
lea ecx, [ebp - 0x5c8]
call fcn.00458b00
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x5b0]
mov edx, dword [0x6c553c]
call fcn.00436850
mov byte [ebp - 4], 0xe
call fcn.005201a0
sub esp, 0x18
mov esi, eax
mov ecx, esp
mov dword [ebp - 0x40], esp
push 0x5dd63c
call fcn.00437a30
lea eax, [ebp - 0x7dc]
mov byte [ebp - 4], 0xf
push eax
mov ecx, esi
call fcn.004380b0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xb8], esp
push eax
call fcn.00437a90
sub esp, 0x18
mov byte [ebp - 4], 0x11
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x5dd63c
call fcn.00446ee0
sub esp, 0x18
mov byte [ebp - 4], 0x12
mov ecx, esp
mov dword [ebp - 0x44], esp
push 0x5dd63c
call fcn.00446ee0
sub esp, 0x18
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x5c8]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.00446f20
sub esp, 0x18
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x5b0]
mov ecx, esp
push eax
call fcn.00446f20
mov edx, 0x32
mov byte [ebp - 4], 0x15
lea ecx, [edx - 0x1e]
call fcn.004e7120
add esp, 0x90
lea ecx, [ebp - 0x7dc]
call fcn.00449550
lea ecx, [ebp - 0x5b0]
call fcn.00449550
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 4], 0xffffffff
call fcn.00449550
call fcn.0043b390
mov al, byte [0x6c54b4]
test al, al
je 0x4411cb
push 0x6c54b6
push 0x6c54bc
mov edx, 0x6c54b8
mov ecx, 0x6d375c
call fcn.00453570
add esp, 8
test al, al
je 0x4411c6
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 4], 0x16
lea eax, [ebp - 0x1c]
push dword [ebp - 0x124]
lea ecx, [ebp - 0xc4]
mov byte [ebp - 0x1d], 0x46
push eax
lea eax, [ebp - 0x1d]
push eax
push 0
call fcn.004708c0
push 0xd
xor eax, eax
mov dword [ebp - 0x388], 0
push str.fromInterface
lea ecx, [ebp - 0x388]
mov dword [ebp - 0x378], 0
mov dword [ebp - 0x374], 7
mov word [ebp - 0x388], ax
call fcn.004496e0
lea edx, [ebp - 0x388]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xe0]
call fcn.00517900
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
sub edx, ecx
push edx
push ecx
mov ecx, eax
call fcn.00517af0
lea ecx, [ebp - 0xe0]
call fcn.00517a20
lea ecx, [ebp - 0x388]
call fcn.00449550
dec dword [0x6c54b8]
lea ecx, [ebp - 0xc4]
mov dword [ebp - 4], 0xffffffff
call fcn.0043b340
mov al, byte [0x6c54b4]
mov byte [0x6c54a7], al
test al, al
jne 0x4411f3
movzx eax, byte [0x6c54b6]
xor ecx, ecx
cmp byte [0x6c554f], cl
push 0x64
cmove eax, ecx
mov byte [0x6c54b6], al
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x6d23bc], 0
jne 0x441276
push 8
call fcn.005838a8
mov esi, eax
add esp, 4
mov dword [ebp - 0x3e0], esi
push 4
mov dword [ebp - 4], 0x19
call fcn.005838a8
or edi, 4
mov dword [ebp - 0xe4], eax
add esp, 4
mov dword [ebp - 0x3c], edi
mov dword [eax], 0x459e10
lea edi, [esi + 4]
mov byte [ebp - 4], 0x1a
push edi
push 0
push eax
push 0x450bf0
push 0
push 0
call fcn.00597fc8
add esp, 0x18
mov dword [esi], eax
test eax, eax
je 0x442b87
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xe4], 0
mov dword [0x6d23bc], esi
push 0xb
xor eax, eax
mov dword [ebp - 0x1bc], 0
push str.toInterface
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 7
mov word [ebp - 0x1bc], ax
call fcn.004496e0
lea edx, [ebp - 0x1bc]
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x8c]
call fcn.00517900
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x1a8]
cmp ecx, 8
jb 0x44130b
mov edx, dword [ebp - 0x1bc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x441301
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442b82
push ecx
push edx
call fcn.00583877
add esp, 8
xor eax, eax
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 7
mov word [ebp - 0x1bc], ax
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x8c]
call fcn.00517bf0
test al, al
je 0x442ab7
xor ecx, ecx
xor edi, edi
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], ecx
mov byte [ebp - 4], 0x1f
mov esi, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x18], eax
test esi, esi
je 0x441385
push esi
lea ecx, [ebp - 0x2c]
call fcn.00467cb0
push esi
push dword [ebp - 0x18]
push dword [ebp - 0x2c]
call fcn.005854c0
mov edi, dword [ebp - 0x28]
add esp, 0xc
mov ecx, dword [ebp - 0x30]
mov byte [ebp - 4], 0x20
mov esi, dword [ebp - 0x2c]
mov al, byte [esi + ecx]
mov byte [ebp - 0x11], al
mov byte [ebp - 0x51], al
lea eax, [esi + 1]
cmp esi, eax
je 0x4413b1
sub edi, eax
push edi
push eax
push esi
call fcn.005854c0
mov ecx, dword [ebp - 0x30]
add esp, 0xc
add edi, esi
mov dword [ebp - 0x28], edi
movsx eax, byte [ebp - 0x11]
add eax, 0xffffffbf
cmp eax, 0x34
ja case.0x4413c8.66
movzx eax, byte [eax + 0x442bdc]
jmp dword [eax*4 + 0x442b9c]
push 4
lea eax, [ebp - 0x3e4]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 4
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 2
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
mov esi, dword [0x6d375c]
mov ecx, 0x6d375c
push dword [esi + 4]
push 0x6d375c
call fcn.0044dd40
mov dword [esi + 4], esi
mov dword [esi], esi
mov dword [esi + 8], esi
mov esi, dword [0x6d375c]
mov dword [0x6d3760], 0
mov dword [ebp - 0x12c], 0x6d375c
mov byte [ebp - 4], 0x21
push 0x2c
mov dword [ebp - 0x128], 0
call fcn.005838a8
mov edi, eax
add esp, 4
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x128], edi
add edi, 0x10
mov byte [ebp - 4], 0x22
push 0xc
push str.minutesSpent
mov ecx, edi
mov dword [edi], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
call fcn.00449cf0
mov ax, word [ebp - 0xe8]
mov word [edi + 0x18], ax
mov eax, dword [ebp - 0x1c]
mov dword [eax], esi
mov dword [eax + 4], esi
mov dword [eax + 8], esi
mov word [eax + 0xc], 0
push edi
lea eax, [ebp - 0x7c4]
mov byte [ebp - 4], 0x23
push eax
call fcn.00451050
push edi
mov ecx, dword [eax + 4]
push dword [eax + 8]
mov esi, dword [eax]
mov dword [ebp - 0x34], ecx
call fcn.004510d0
test al, al
je 0x441594
mov byte [ebp - 4], 0x20
mov edi, dword [ebp - 0x1c]
lea edx, [edi + 0x10]
call fcn.00450d30
push 0x2c
push edi
call fcn.00583877
add esp, 8
jmp 0x4415c4
cmp dword [0x6d3760], 0x5d1745d
je 0x442b94
mov byte [ebp - 4], 0x20
mov ecx, 0x6d375c
mov edi, dword [ebp - 0x1c]
push edi
push dword [ebp - 0x34]
mov dword [ebp - 0x128], 0
push esi
call fcn.00450330
movzx eax, word [ebp - 0x58]
mov word [ebp - 0x274], ax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x4e0]
mov dword [ebp - 0x278], str.partnCount
push eax
call fcn.0044d890
movzx eax, word [ebp - 0x5c]
mov word [ebp - 0x22c], ax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x4e8]
mov dword [ebp - 0x230], str.partnCountLimWarn
push eax
call fcn.0044d890
movzx eax, word [ebp - 0x60]
mov word [ebp - 0x23c], ax
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x4f0]
mov dword [ebp - 0x240], str.partnCountSuspWarn
push eax
call fcn.0044d890
movzx eax, word [ebp - 0x64]
mov word [ebp - 0x234], ax
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x4f8]
mov dword [ebp - 0x238], str.partnCountLim
push eax
call fcn.0044d890
movzx eax, word [ebp - 0x68]
mov word [ebp - 0x25c], ax
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x500]
mov dword [ebp - 0x260], str.timeLimWarn
push eax
call fcn.0044d890
movzx eax, word [ebp - 0x6c]
mov word [ebp - 0x24c], ax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x508]
mov dword [ebp - 0x250], str.timeLimSuspWarn
push eax
call fcn.0044d890
movzx eax, word [ebp - 0x70]
mov word [ebp - 0x244], ax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x510]
mov dword [ebp - 0x248], str.timeLim
push eax
call fcn.0044d890
movzx eax, word [ebp - 0x74]
mov word [ebp - 0x26c], ax
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x518]
mov dword [ebp - 0x270], str.prlSesLimOut
push eax
call fcn.0044d890
movzx eax, word [ebp - 0x78]
mov word [ebp - 0x28c], ax
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x520]
mov dword [ebp - 0x290], str.prlSesLimIn
push eax
call fcn.0044d890
movzx eax, word [ebp - 0x7c]
mov word [ebp - 0x254], ax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x528]
mov dword [ebp - 0x258], str.fileTransfer
push eax
call fcn.0044d890
mov dword [ebp - 0x280], str.msg1Interval
movzx eax, word [ebp - 0x80]
mov word [ebp - 0x27c], ax
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x530]
push eax
call fcn.0044d890
movzx eax, word [ebp - 0x84]
mov word [ebp - 0x284], ax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x538]
mov dword [ebp - 0x288], str.showPPAfterSession
push eax
call fcn.0044d890
movzx eax, word [ebp - 0x88]
mov word [ebp - 0x294], ax
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x540]
mov dword [ebp - 0x298], str.autoUpdate
push eax
call fcn.0044d890
jmp case.0x4413c8.66
sub esp, 0x18
mov ecx, esp
push str.https:__ulm.aeroadmin.com_
call fcn.00446ee0
xor cl, cl
call fcn.00439170
add esp, 0x18
cmp eax, 3
je 0x441812
cmp eax, 2
je 0x441812
mov edi, dword [ebp - 0x18]
cmp eax, 4
jne 0x442a3b
mov byte [0x6c5540], 1
jmp 0x442a3b
call fcn.005201a0
push str.download
mov ecx, eax
call fcn.0051b0c0
mov ecx, eax
call fcn.00446cf0
mov ecx, eax
call fcn.004404f0
jmp case.0x4413c8.66
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1a4]
push 8
mov dword [ebp - 0x1a4], 0
push str.SA_CLOSE
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0xf
mov byte [ebp - 0x1a4], 0
call fcn.00449cf0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x358]
push 4
mov dword [ebp - 0x358], 0
push str.main
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 0xf
mov byte [ebp - 0x358], 0
call fcn.00449cf0
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 0x26
push eax
push 0x762
lea eax, [ebp - 0x1a4]
xor ecx, ecx
push 0x5def08
push eax
lea edx, [ebp - 0x358]
call fcn.004d4b60
add esp, 0x10
lea ecx, [ebp - 0x358]
call fcn.004470b0
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x190]
cmp ecx, 0x10
jb 0x44193f
mov edx, dword [ebp - 0x1a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x441935
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442b82
push ecx
push edx
call fcn.00583877
add esp, 8
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0xf
mov byte [ebp - 0x1a4], 0
mov byte [ebp - 4], 0x20
call fcn.00449240
mov byte [0x6c5540], 1
cmp byte [0x6c54cc], 0
je 0x441a42
push 0x6d21f0
lea ecx, [ebp - 0xec]
call fcn.00446c60
push 0x73
mov byte [ebp - 4], 0x27
call fcn.00453170
push dword [ebp - 0xec]
call fcn.00571f79
add esp, 4
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1c4], 0
mov dword [ebp - 0x1c0], 0
push str.Removing_service
lea ecx, [ebp - 0x5f8]
mov byte [ebp - 4], 0x28
call fcn.004471f0
push str.main
lea ecx, [ebp - 0x5e0]
mov byte [ebp - 4], 0x29
call fcn.004471f0
lea eax, [ebp - 0x1c8]
mov byte [ebp - 4], 0x2a
push eax
push 0x76a
lea eax, [ebp - 0x5f8]
xor ecx, ecx
push 0x5def08
push eax
lea edx, [ebp - 0x5e0]
call fcn.004d4b60
add esp, 0x10
lea ecx, [ebp - 0x5e0]
call fcn.004470b0
lea ecx, [ebp - 0x5f8]
call fcn.004470b0
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x20
call fcn.00449240
call fcn.004563f0
mov edi, dword [ebp - 0x50]
jmp 0x442a3b
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x3b8]
push 0x1b
mov dword [ebp - 0x3b8], 0
push str.MSG_CONTROL_ELEVATE_DO_EXIT
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x3a4], 0xf
mov byte [ebp - 0x3b8], 0
call fcn.00449cf0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x3a0]
push 4
mov dword [ebp - 0x3a0], 0
push str.main
mov dword [ebp - 0x390], 0
mov dword [ebp - 0x38c], 0xf
mov byte [ebp - 0x3a0], 0
call fcn.00449cf0
lea eax, [ebp - 0x1d4]
mov byte [ebp - 4], 0x2d
push eax
push 0x772
lea eax, [ebp - 0x3b8]
xor ecx, ecx
push 0x5def08
push eax
lea edx, [ebp - 0x3a0]
call fcn.004d4b60
add esp, 0x10
lea ecx, [ebp - 0x3a0]
call fcn.004470b0
lea ecx, [ebp - 0x3b8]
call fcn.004470b0
lea ecx, [ebp - 0x1d4]
call fcn.00449240
mov byte [0x6c5540], 1
jmp case.0x4413c8.66
xor eax, eax
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x2cc], 7
mov word [ebp - 0x2e0], ax
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], 0xf
mov byte [ebp - 0x3d0], al
lea edx, [ebp - 0x2e0]
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x30]
call fcn.005182e0
lea edx, [ebp - 0x3d0]
mov ecx, eax
call fcn.00518230
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0xf0]
push eax
call fcn.00445430
mov eax, dword [ebp - 0xf0]
cmp eax, dword [0x6d3764]
je 0x441bd2
mov edi, dword [eax + 0x28]
lea ecx, [ebp - 0x3d0]
mov eax, dword [edi]
mov esi, dword [eax + 0x50]
call fcn.00447000
push eax
mov ecx, edi
call esi
lea ecx, [ebp - 0x3d0]
call fcn.004470b0
lea ecx, [ebp - 0x2e0]
jmp 0x442a33
mov edx, 0x6aced4
lea ecx, [ebp - 0x30]
call fcn.005182e0
mov ecx, dword [0x6c5544]
test ecx, ecx
je case.0x4413c8.66
push 0x6aced4
call fcn.00491700
jmp case.0x4413c8.66
mov eax, dword [0x6c5544]
test eax, eax
je 0x441c36
push 9
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x6c5544]
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x441c6f
push 0x178
call fcn.005838a8
mov esi, eax
add esp, 4
mov dword [ebp - 0x40c], esi
push 0
mov byte [ebp - 4], 0x30
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x6aced4
push str.MainWindow
push 0
push eax
mov ecx, esi
call fcn.00490670
mov byte [ebp - 4], 0x20
push 4
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
push 0xd0
call fcn.005838a8
add esp, 4
cmp dword [ebp - 0xf4], 0
jle 0x441cc6
mov dword [ebp - 0x3e8], eax
push str.btn_cancel
push str.btn_ok
mov byte [ebp - 4], 0x31
push str.update_request
push ecx
mov ecx, dword [0x6c5544]
push ecx
push dword [ecx + 0x10]
mov ecx, eax
call fcn.00497cd0
jmp case.0x4413c8.66
mov dword [ebp - 0x410], eax
push 0
push str.btn_update_noneed_ok
mov byte [ebp - 4], 0x32
push str.update_noneed
jmp 0x441caf
mov esi, dword [ebp - 0x2c]
mov eax, dword [esi + ecx]
mov dword [0x6c5534], eax
lea eax, [esi + 4]
cmp esi, eax
je 0x441d03
sub edi, eax
push edi
push eax
push esi
call fcn.005854c0
lea eax, [edi + esi]
add esp, 0xc
mov dword [ebp - 0x28], eax
push 4
push 0x6c5538
lea ecx, [ebp - 0x30]
call fcn.00517f80
mov eax, dword [0x6c5538]
mov dword [0x6c54b8], eax
jmp case.0x4413c8.66
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
lea edx, [ebp - 0xdc]
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x30]
call fcn.00518230
cmp dword [ebp - 0xc8], 0x10
lea esi, [ebp - 0xdc]
lea ecx, [ebp - 0x770]
cmovae esi, dword [ebp - 0xdc]
push esi
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x441d83
mov eax, dword [eax]
push 0x11
push str.mw_statbar_online
mov ecx, eax
call fcn.00457de0
add esp, 8
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x770]
call fcn.004470b0
movzx ecx, byte [0x6c5532]
mov eax, 1
cmp byte [ebp - 0x11], 0
push esi
cmovne ecx, eax
mov byte [0x6c5532], cl
lea ecx, [ebp - 0x788]
call fcn.004471f0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x441dd2
mov eax, dword [eax]
push 0x15
push str.mw_statbar_connclient
mov ecx, eax
call fcn.00457de0
add esp, 8
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x788]
call fcn.004470b0
movzx ecx, byte [0x6c5532]
xor eax, eax
cmp byte [ebp - 0x11], al
cmovne ecx, eax
mov byte [0x6c5532], cl
mov ecx, esi
lea edx, [ecx + 1]
jmp 0x441e10
mov al, byte [ecx]
inc ecx
test al, al
jne 0x441e10
sub ecx, edx
push ecx
push esi
mov ecx, 0x6ad010
call fcn.00449cf0
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0xc8]
cmp ecx, 0x10
jb 0x441e63
mov edx, dword [ebp - 0xdc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x441e59
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442b82
push ecx
push edx
call fcn.00583877
add esp, 8
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
jmp case.0x4413c8.66
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0xf
mov byte [ebp - 0x18c], 0
push 4
lea eax, [ebp - 0xf8]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x30]
call fcn.00517f80
lea edx, [ebp - 0x18c]
lea ecx, [ebp - 0x30]
call fcn.00518230
mov edx, dword [ebp - 0xf8]
lea ecx, [ebp - 0x610]
call fcn.00436850
lea eax, [ebp - 0x610]
mov byte [ebp - 4], 0x35
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.00445430
mov eax, dword [ebp - 0xfc]
cmp eax, dword [0x6d3764]
je 0x441f19
mov edi, dword [eax + 0x28]
lea ecx, [ebp - 0x18c]
mov eax, dword [edi]
mov esi, dword [eax + 0x50]
call fcn.00447000
push eax
mov ecx, edi
call esi
lea ecx, [ebp - 0x610]
call fcn.00449550
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x178]
cmp ecx, 0x10
jb 0x441f62
mov edx, dword [ebp - 0x18c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x441f58
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442b82
push ecx
push edx
call fcn.00583877
add esp, 8
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0xf
mov byte [ebp - 0x18c], 0
jmp case.0x4413c8.66
lea edx, [ebp - 0x100]
lea ecx, [ebp - 0x30]
call fcn.0044c6a0
cmp byte [0x6c54c8], 0
mov edi, dword [ebp - 0x100]
mov dword [0x6c553c], edi
je case.0x4413c8.66
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0
push str.Save_ID_to_file
lea ecx, [ebp - 0x640]
mov byte [ebp - 4], 0x36
call fcn.004471f0
push str.main
lea ecx, [ebp - 0x628]
mov byte [ebp - 4], 0x37
call fcn.004471f0
lea eax, [ebp - 0x21c]
mov byte [ebp - 4], 0x38
push eax
push 0x7d4
lea eax, [ebp - 0x640]
xor ecx, ecx
push 0x5def08
push eax
lea edx, [ebp - 0x628]
call fcn.004d4b60
add esp, 0x10
lea ecx, [ebp - 0x628]
call fcn.004470b0
lea ecx, [ebp - 0x640]
call fcn.004470b0
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x20
call fcn.00449240
push 0x104
lea eax, [ebp - 0xec0]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0xec0]
push 0x5c
push eax
call fcn.005851fe
xor ecx, ecx
add esp, 8
mov word [eax + 2], cx
lea ecx, [ebp - 0xec0]
add ecx, 0xfffffffe
jmp 0x442080
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x442080
mov eax, dword [str.id.txt]
push 0
mov dword [ecx], eax
mov eax, dword [0x5de780]
push 0x80
mov dword [ecx + 4], eax
mov eax, dword [0x5de784]
push 2
mov dword [ecx + 8], eax
mov ax, word [0x5de788]
push 0
push 0
mov word [ecx + 0xc], ax
lea eax, [ebp - 0xec0]
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x44213b
push 0
lea eax, [ebp - 0x108]
mov dword [ebp - 0x104], 0xfeff
push eax
push 2
lea eax, [ebp - 0x104]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, edi
lea ecx, [ebp - 0x44c]
call fcn.00436850
mov eax, dword [ebp - 0x43c]
lea ecx, [ebp - 0x44c]
lea edx, [eax + eax]
call fcn.00446cf0
push 0
lea ecx, [ebp - 0x108]
push ecx
push edx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x44c]
jmp 0x442a33
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1d8], 0
push str.Cant_create_open_file_id.txt
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], 0x39
call fcn.004471f0
push str.idtxt_open
lea ecx, [ebp - 0x658]
mov byte [ebp - 4], 0x3a
call fcn.004471f0
lea eax, [ebp - 0x1e0]
mov byte [ebp - 4], 0x3b
push eax
push 0x7ec
lea eax, [ebp - 0x670]
mov ecx, 2
push 0x5def08
push eax
lea edx, [ebp - 0x658]
call fcn.004d4b60
add esp, 0x10
lea ecx, [ebp - 0x658]
call fcn.004470b0
lea ecx, [ebp - 0x670]
call fcn.004470b0
lea ecx, [ebp - 0x1e0]
call fcn.00449240
jmp case.0x4413c8.66
xor eax, eax
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x29c], 7
mov word [ebp - 0x2b0], ax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], 7
mov word [ebp - 0xb0], ax
mov dword [ebp - 0x98], 0x1010101
mov dword [ebp - 0x94], 0x100
mov word [ebp - 0x90], ax
mov byte [ebp - 0x8e], 1
lea edx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x30]
call fcn.005182e0
lea edx, [ebp - 0xb0]
mov ecx, eax
call fcn.00437d60
lea edx, [ebp - 0x35]
mov ecx, eax
call fcn.0044d810
push 2
mov dword [ebp - 0x144], 0
lea ecx, [ebp - 0x144]
push 0x5de7b8
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
call fcn.00449cf0
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [ebp - 0x758]
call fcn.00447260
lea edx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x740]
call fcn.004e9040
fldz
fstp qword [ebp - 0x728]
mov byte [ebp - 0x720], 0
xor ecx, ecx
mov byte [ebp - 4], 0x40
cmp byte [ebp - 0x8e], cl
mov eax, 0x200
mov edx, 0x100
cmovne ecx, eax
xor eax, eax
cmp byte [ebp - 0x8f], al
cmovne eax, edx
mov edx, 0x80
or ecx, eax
xor eax, eax
cmp byte [ebp - 0x90], al
cmovne eax, edx
mov edx, 0x40
or ecx, eax
xor eax, eax
cmp byte [ebp - 0x91], al
cmovne eax, edx
mov edx, 0x20
or ecx, eax
xor eax, eax
cmp byte [ebp - 0x92], al
cmovne eax, edx
mov edx, 0x10
or ecx, eax
xor eax, eax
cmp byte [ebp - 0x93], al
cmovne eax, edx
mov edx, 8
or ecx, eax
xor eax, eax
cmp byte [ebp - 0x94], al
cmovne eax, edx
mov dword [ebp - 0x15c], 0
or ecx, eax
mov dword [ebp - 0x14c], 0
xor eax, eax
mov dword [ebp - 0x148], 0xf
cmp byte [ebp - 0x95], al
mov edx, 4
push 6
cmovne eax, edx
mov byte [ebp - 0x15c], 0
or ecx, eax
mov edx, 2
xor eax, eax
cmp byte [ebp - 0x96], al
push str.rights
cmovne eax, edx
or ecx, eax
xor eax, eax
cmp byte [ebp - 0x97], al
setne al
or ecx, eax
xor eax, eax
add ecx, ecx
cmp byte [ebp - 0x98], al
setne al
or ecx, eax
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x15c]
fild dword [ebp - 0x34]
fstp qword [ebp - 0x268]
call fcn.00449cf0
lea eax, [ebp - 0x15c]
mov byte [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0x718]
call fcn.00447260
fld qword [ebp - 0x268]
mov dword [ebp - 0x700], 0
fstp qword [ebp - 0x6e8]
mov dword [ebp - 0x6f0], 0
mov dword [ebp - 0x6ec], 0xf
mov byte [ebp - 0x700], 0
mov byte [ebp - 0x6e0], 0
lea ecx, [ebp - 0x758]
mov byte [ebp - 4], 0x43
push ecx
lea eax, [ebp - 0x6d8]
push eax
push ecx
lea ecx, [ebp - 0x3fc]
call fcn.004456c0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x2f8]
push 0x11
mov dword [ebp - 0x2f8], 0
push str.Admin_wnd:___
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x2e4], 0xf
mov byte [ebp - 0x2f8], 0
call fcn.00449cf0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x174]
push 4
mov dword [ebp - 0x174], 0
push str.main
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0xf
mov byte [ebp - 0x174], 0
call fcn.00449cf0
lea eax, [ebp - 0x3fc]
mov byte [ebp - 4], 0x46
push eax
push 0x806
push 0x5def08
lea eax, [ebp - 0x2f8]
xor ecx, ecx
push eax
lea edx, [ebp - 0x174]
call fcn.004d4b60
mov byte [ebp - 4], 0x45
add esp, 0x10
mov ecx, dword [ebp - 0x160]
cmp ecx, 0x10
jb 0x442525
mov edx, dword [ebp - 0x174]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44251b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442b82
push ecx
push edx
call fcn.00583877
add esp, 8
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0xf
mov byte [ebp - 0x174], 0
call fcn.004470b0
lea ecx, [ebp - 0x3fc]
call fcn.00449240
push fcn.00438e00
push 2
push 0x40
lea eax, [ebp - 0x758]
mov byte [ebp - 4], 0x42
push eax
call fcn.00583d37
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x148]
cmp ecx, 0x10
jb 0x4425ad
mov edx, dword [ebp - 0x15c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4425a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442b82
push ecx
push edx
call fcn.00583877
add esp, 8
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 0xf
mov byte [ebp - 0x15c], 0
cmp ecx, 0x10
jb 0x442606
mov edx, dword [ebp - 0x144]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4425fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442b82
push ecx
push edx
call fcn.00583877
add esp, 8
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x134], 0
push eax
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x130], 0xf
push eax
mov byte [ebp - 0x144], 0
call fcn.00445430
mov eax, dword [ebp - 0x10c]
cmp eax, dword [0x6d3764]
je 0x442862
mov esi, dword [eax + 0x28]
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0x40], esi
lea edi, [esi + 0xb0]
mov ecx, edi
mov dword [ebp - 0x34], edi
call fcn.00442c40
cmp byte [ebp - 0x35], 0
mov ecx, 0x5dd63c
mov eax, 0x5de7d8
cmove eax, ecx
lea ecx, [ebp - 0x110]
push ecx
mov dword [ebp - 0x110], eax
lea eax, [esi + 0x98]
push eax
push ecx
push edi
lea ecx, [ebp - 0x900]
mov dword [ebp - 0x44], eax
call fcn.0044d9e0
lea ecx, [ebp - 0x900]
mov byte [ebp - 4], 0x47
call fcn.00446650
push eax
push dword [esi + 0x10]
call dword [sym.imp.USER32.dll_SetWindowTextW]
call fcn.005201a0
mov ecx, eax
call fcn.004381b0
test al, al
je 0x44281c
lea ecx, [ebp - 0x6a0]
call fcn.00458b00
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x688]
mov edx, dword [0x6c553c]
call fcn.00436850
mov byte [ebp - 4], 0x49
cmp dword [esi + 0xc0], 0
jbe 0x442802
cmp byte [0x6c54a6], 0
jne 0x442802
call fcn.005201a0
mov esi, eax
call fcn.005201a0
mov edi, eax
call fcn.005201a0
mov ecx, eax
call fcn.004381f0
mov dword [ebp - 0x1c], eax
call fcn.005201a0
mov ecx, eax
call fcn.004381d0
call fcn.00584520
mov dword [ebp - 0xb8], eax
mov ecx, esi
lea eax, [ebp - 0x7b8]
push eax
call fcn.00438130
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x404], esp
push eax
call fcn.00437a90
lea eax, [ebp - 0x7a0]
mov byte [ebp - 4], 0x4b
push eax
mov ecx, edi
call fcn.004380b0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x408], esp
push eax
call fcn.00437a90
sub esp, 0x18
mov byte [ebp - 4], 0x4d
mov ecx, esp
mov dword [ebp - 0x3ec], esp
push dword [ebp - 0x34]
call fcn.00446f20
sub esp, 0x18
mov byte [ebp - 4], 0x4e
mov ecx, esp
mov dword [ebp - 0x34], esp
push dword [ebp - 0x44]
call fcn.00446f20
sub esp, 0x18
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x6a0]
mov dword [ebp - 0x44], esp
mov ecx, esp
push eax
call fcn.00446f20
sub esp, 0x18
mov byte [ebp - 4], 0x50
lea eax, [ebp - 0x688]
mov ecx, esp
push eax
call fcn.00446f20
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xb8]
mov byte [ebp - 4], 0x51
call fcn.004e7120
add esp, 0x90
lea ecx, [ebp - 0x7a0]
call fcn.00449550
lea ecx, [ebp - 0x7b8]
call fcn.00449550
mov esi, dword [ebp - 0x40]
lea ecx, [ebp - 0x688]
call fcn.00449550
lea ecx, [ebp - 0x6a0]
mov byte [ebp - 4], 0x47
call fcn.00449550
inc dword [0x6c54bc]
mov edx, 0x6c54b8
push 0x6c54b6
push 0x6c54bc
mov ecx, 0x6d375c
call fcn.00453570
dec dword [0x6c54bc]
add esp, 8
test al, al
je 0x442857
push 0
push 0
push 0x10
push dword [esi + 0x10]
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x900]
call fcn.00442cc0
lea ecx, [ebp - 0xb0]
call fcn.00449550
lea ecx, [ebp - 0x2b0]
jmp 0x442a33
lea ecx, [ebp - 0x6d4]
call fcn.00437dd0
xor eax, eax
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x314], 7
mov word [ebp - 0x328], ax
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], 7
mov word [ebp - 0x310], ax
lea edx, [ebp - 0x328]
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x30]
call fcn.005182e0
lea edx, [ebp - 0x310]
mov ecx, eax
call fcn.005182e0
lea edx, [ebp - 0x6d4]
mov ecx, eax
call fcn.00437d60
push 0x130
call fcn.005838a8
mov edi, eax
add esp, 4
mov dword [ebp - 0x400], edi
mov byte [ebp - 4], 0x55
mov esi, dword [0x6c5544]
test esi, esi
je 0x44291b
mov esi, dword [esi + 0x10]
jmp 0x44291d
xor esi, esi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea ecx, [ebp - 0x6d4]
push ecx
lea ecx, [ebp - 0x310]
push ecx
lea ecx, [ebp - 0x328]
push ecx
push esi
push eax
mov ecx, edi
call fcn.00498470
lea ecx, [ebp - 0x310]
call fcn.00449550
lea ecx, [ebp - 0x328]
call fcn.00449550
lea ecx, [ebp - 0x6d4]
jmp 0x442a33
xor eax, eax
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 7
mov word [ebp - 0x370], ax
lea edx, [ebp - 0x370]
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x30]
call fcn.005182e0
lea edx, [ebp - 0x114]
mov ecx, eax
call fcn.0044c6a0
push 0x114
call fcn.005838a8
mov esi, eax
add esp, 4
mov dword [ebp - 0x3f0], esi
push 0
mov byte [ebp - 4], 0x57
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push dword [ebp - 0x114]
lea ecx, [ebp - 0x370]
push ecx
push ecx
push eax
mov ecx, esi
call fcn.00499860
lea ecx, [ebp - 0x370]
jmp 0x442a33
xor eax, eax
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x330], 0
mov dword [ebp - 0x32c], 7
mov word [ebp - 0x340], ax
lea edx, [ebp - 0x340]
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x30]
call fcn.005182e0
lea ecx, [ebp - 0x340]
call fcn.004991a0
lea ecx, [ebp - 0x340]
call fcn.00449550
mov edi, dword [ebp - 0x18]
mov byte [ebp - 4], 0x1e
mov esi, dword [ebp - 0x2c]
test esi, esi
je 0x442a88
mov ecx, dword [ebp - 0x24]
mov eax, esi
sub ecx, esi
cmp ecx, 0x1000
jb 0x442a69
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442b82
push ecx
push esi
call fcn.00583877
add esp, 8
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
test edi, edi
je 0x442a95
push edi
call fcn.005838d8
add esp, 4
mov dword [ebp - 0x50], 0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x8c]
call fcn.00517bf0
test al, al
jne 0x441346
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x442ac7
push eax
call fcn.005838d8
add esp, 4
lea ecx, [ebp - 0x8c]
mov dword [ebp - 4], 0xffffffff
call fcn.00517a20
cmp byte [0x6c5540], 0
jne 0x442aed
mov ecx, dword [ebp - 0xb4]
jmp 0x4405e6
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x6d6a78
call fcn.00583a10
add esp, 4
cmp dword [0x6d6a78], 0xffffffff
jne 0x440603
mov ecx, 0x6d6a80
call fcn.00436910
push 0x6d6a78
call fcn.005839c6
add esp, 4
jmp 0x440603
push 0x6d638c
call fcn.00583a10
add esp, 4
cmp dword [0x6d638c], 0xffffffff
jne 0x440911
mov dword [ebp - 4], 5
call fcn.0052f330
push 0x5c7fa0
call fcn.00583d22
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x6d638c
call fcn.005839c6
add esp, 4
jmp 0x440911
call fcn.00591c98
push 6
mov dword [edi], 0
call fcn.00570e74
call fcn.00436a40
lea ecx, [ecx]
sub dword fs:[eax + eax + 0x36], eax
sbb byte [eax + eax - 24], al
sbb eax, dword [eax + eax + 0x37]
sbb eax, dword [eax + eax - 0x7d]
push ds
inc esp
add bh, cl
adc eax, dword [eax + eax - 0x29]
pop ss
inc esp
add dh, dl
and dword [eax + eax - 0x17], eax
sub dword [eax + eax + 0x4a], eax
sbb al, byte [eax + eax - 0x7e]
pop ds
inc esp
add dh, bl
sbb al, 0x44
add byte [eax + 0x28], bh
inc esp
add byte [ecx], ah
sbb eax, 0x1c120044
inc esp
add byte [eax], bh
sub al, byte [eax + eax]
invalid