Function at 0x4938f3
Capabilities:
Contain obfuscated stackstrings
Read file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x22078]
mov eax, 0x22078
call fcn.006222c0
push 0xffffffffffffffff
push 0x64e2ab
mov eax, dword fs:[0]
push eax
sub esp, 0xbc8
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp + 0x22074], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x24], esi
mov ebx, dword [ebp + 0x22084]
mov dword [ebp - 0x14], ebx
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], eax
wait
mov edx, dword [ebp + 0x22080]
cmp edx, 3
jb case.0x490260.5292
lea edi, [edx - 0x8049]
cmp edi, 0x95
ja 0x48d8de
cmp edx, 0x8049
jne 0x48d821
cmp word [0x75dd2c], 9
je case.0x490260.5292
movzx eax, word [0x75dd2c]
push eax
mov ecx, 0x75dcf0
call fcn.004e6730
cmp eax, edi
je case.0x490260.5292
mov esi, dword [ebp + 0x22080]
push 1
cmp esi, 0x8049
jne 0x48d84f
push 9
jmp 0x48d864
lea ecx, [esi - 0x8049]
push ecx
mov ecx, 0x75dcf0
call fcn.004e6770
movzx edx, ax
push edx
mov ecx, 0x75dcf0
call fcn.004f36e0
mov byte [ebp - 4], 1
wait
push 0
push esi
mov eax, dword [0x75dd10]
add eax, 0x8049
push eax
push 0x8049
mov ecx, dword [0x75dd18]
call fcn.004361a0
wait
mov dword [ebp - 4], 0
push 0x50004
push 0x678d88
mov ecx, dword [0x75ef30]
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.00473680
add esp, 0x10
cmp eax, 6
jne case.0x490260.5292
mov ecx, dword [ebp - 0x24]
call fcn.00488240
mov eax, 1
wait
jmp 0x4983e5
lea ecx, [edx - 0x2735]
cmp ecx, 0xc6
ja 0x48d927
mov ecx, dword [0x75e260]
cmp ecx, eax
je 0x48d91c
lea eax, [edx - 0x2734]
cmp eax, dword [ecx + 0x1c]
jge 0x48d91c
push eax
add ecx, 0x14
call fcn.0045ee00
push 0
mov edx, dword [eax]
mov eax, dword [edx + 0x84]
push eax
mov ecx, esi
call fcn.00465020
mov eax, 1
wait
jmp 0x4983e5
lea eax, [edx - 0x2807]
cmp eax, 0xc7
ja 0x48d967
mov ecx, dword [0x75e260]
test ecx, ecx
je 0x48d95c
cmp eax, dword [ecx + 0x1c]
jge 0x48d95c
push eax
add ecx, 0x14
call fcn.0045ee00
mov ecx, dword [eax]
mov edx, dword [ecx + 0x84]
push edx
mov ecx, esi
call fcn.00470130
mov eax, 1
wait
jmp 0x4983e5
lea eax, [edx - 0x28d2]
cmp eax, 0xc7
ja 0x48d9a9
mov ecx, dword [0x75e260]
test ecx, ecx
je 0x48d99e
cmp eax, dword [ecx + 0x1c]
jge 0x48d99e
push eax
add ecx, 0x14
call fcn.0045ee00
push 1
mov eax, dword [eax]
mov ecx, dword [eax + 0x84]
push ecx
mov ecx, esi
call fcn.0047e570
mov eax, 1
wait
jmp 0x4983e5
lea eax, [edx - 0x82e6]
cmp eax, 0xf9
ja 0x48d9f6
cmp edx, 0x82e6
jne 0x48d9c8
mov dword [esi + 0x808], 1
cmp byte [0x75db0d], 0
je 0x48d9db
mov dword [esi + 0x80c], 1
mov ecx, edx
add ecx, 0xffff7d1a
push ecx
mov ecx, esi
call fcn.00470b10
mov eax, 1
wait
jmp 0x4983e5
cmp edx, 0x144d
ja 0x490236
je 0x4901d2
lea eax, [edx - 0x1392]
cmp eax, 0xb7
ja case.0x490260.5199
movzx eax, byte [eax + 0x4984b4]
jmp dword [eax*4 + 0x49840c]
lea ecx, [ebp - 0x50]
push ecx
push 0
push 0
push 0
push str.LastUrlCmdLine
mov edx, dword [0x75dbe4]
push edx
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
call ebx
test eax, eax
jne case.0x490260.5292
lea ecx, [ebp - 0xf8]
call fcn.004024f0
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x50]
push eax
lea ecx, [ebp - 0xf8]
call fcn.00402840
lea ecx, [ebp - 0x50]
push ecx
push eax
push 0
push 0
push str.LastUrlCmdLine
mov edx, dword [0x75dbe4]
push edx
call ebx
test eax, eax
jne 0x48dd14
lea ecx, [ebp + 0x1fce4]
call fcn.004011c0
mov ebx, 4
mov byte [ebp - 4], bl
lea ecx, [ebp + 0x1fcd8]
call fcn.004011c0
mov byte [ebp - 4], 5
lea eax, [ebp - 0x50]
push eax
push 0
push 0
push 0
push str.LastDirCmdLineW
mov ecx, dword [0x75dbe4]
push ecx
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
call edi
test eax, eax
jne 0x48db24
mov eax, dword [ebp - 0x50]
inc eax
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.005f4e47
add esp, 4
mov esi, eax
test esi, esi
je 0x48db21
lea eax, [ebp - 0x50]
push eax
push esi
push 0
push 0
push str.LastDirCmdLineW
mov ecx, dword [0x75dbe4]
push ecx
call edi
test eax, eax
jne 0x48db18
push esi
lea ecx, [ebp + 0x1fcd8]
call fcn.004017e0
push esi
call fcn.005f4e52
add esp, 4
mov esi, dword [ebp - 0x24]
lea edx, [ebp - 0x50]
push edx
push 0
push 0
push 0
push str.LastFileCmdLineW
mov eax, dword [0x75dbe4]
push eax
call edi
test eax, eax
jne 0x48db95
mov eax, dword [ebp - 0x50]
inc eax
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.005f4e47
add esp, 4
mov esi, eax
test esi, esi
je 0x48db92
lea eax, [ebp - 0x50]
push eax
push esi
push 0
push 0
push str.LastFileCmdLineW
mov ecx, dword [0x75dbe4]
push ecx
call edi
test eax, eax
jne 0x48db89
push esi
lea ecx, [ebp + 0x1fce4]
call fcn.004017e0
push esi
call fcn.005f4e52
add esp, 4
mov esi, dword [ebp - 0x24]
push str.LastUrlCmdLine
mov edx, dword [0x75dbe4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push str.LastDirCmdLineW
mov eax, dword [0x75dbe4]
push eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
call edi
push str.LastFileCmdLineW
mov ecx, dword [0x75dbe4]
push ecx
call edi
test byte [ebp - 0x14], 2
je 0x48dbd5
mov edx, dword [esi + 0x74]
mov byte [edx + 0x4c], 1
cmp dword [ebp + 0x1fcec], 0
je 0x48dbf0
mov ecx, dword [ebp + 0x1fce4]
test ecx, ecx
jne 0x48dbf2
lea ecx, [ebp + 0x1fce8]
jmp 0x48dbf2
xor ecx, ecx
cmp dword [ebp + 0x1fce0], 0
je 0x48dc0d
mov edi, dword [ebp + 0x1fcd8]
test edi, edi
jne 0x48dc0f
lea edi, [ebp + 0x1fcdc]
jmp 0x48dc0f
xor edi, edi
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x14]
mov edx, eax
shr edx, 2
and dl, 1
movzx edx, dl
push edx
push ecx
push edi
and al, 1
movzx eax, al
push eax
push 0
mov ecx, dword [ebp - 0xf8]
push ecx
push 1
mov ecx, esi
call fcn.00488a10
lea edx, [ebp - 0x2c0]
push edx
call fcn.0043c830
lea ecx, [ebp - 0x2c0]
call fcn.0043bfd0
sub eax, 0x76c
lea esi, [eax + eax*2]
add esi, esi
add esi, esi
lea ecx, [ebp - 0x2c0]
call fcn.0043c000
add eax, esi
mov esi, eax
shl esi, 4
sub esi, eax
add esi, esi
lea ecx, [ebp - 0x2c0]
call fcn.0043c030
add eax, esi
cmp eax, dword [0x75e238]
je 0x48dcf7
mov dword [0x75e238], eax
call fcn.00412020
test eax, eax
je 0x48dcf7
push 0x67bab4
call fcn.00410c30
add esp, 4
test eax, eax
je 0x48dcf7
push 0
push 0
push 0
push 0
push 0
push 0x43fd70
call fcn.006005d0
mov byte [ebp - 4], bl
lea ecx, [ebp + 0x1fcd8]
call fcn.00401210
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x1fce4]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf8]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
lea eax, [ebp - 0x338]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, esi
call fcn.004544b0
push 0
mov ecx, dword [esi + 0x20]
push ecx
push 0
mov edx, dword [ebp - 0x334]
push edx
mov eax, dword [ebp - 0x338]
push eax
push 2
mov ecx, dword [esi + 0x228]
push ecx
call dword [sym.imp.USER32.dll_TrackPopupMenu]
push 0
push 0
push 0x400
mov ecx, esi
call fcn.0042ec10
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.0045fe20
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.00457cb0
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.0045f710
mov edi, eax
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edx, dword [eax]
mov byte [edx + 0x376], 0
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
push 1
mov ecx, dword [eax]
call fcn.005c7e50
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov ecx, dword [eax]
call fcn.005c1100
mov eax, 1
wait
jmp 0x4983e5
push 8
call fcn.005f4e18
add esp, 4
mov dword [eax + 4], ebx
mov dword [eax], esi
push 0
push 0
push 0
push 0
push eax
push 0x47d0b0
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
lea ecx, [esi + 0x5d0]
call fcn.004c8010
mov eax, 1
wait
jmp 0x4983e5
push ebx
lea ecx, [esi + 0x2b8]
call fcn.004539d0
xor edi, edi
mov dword [esi + 0x17d8], edi
cmp edi, dword [esi + 0x2ac]
jge 0x48de77
lea ecx, [esi + 0x2a4]
push edi
call fcn.0045ee00
cmp dword [eax], ebx
jne 0x48de92
push 1
push edi
lea ecx, [esi + 0x2a4]
call fcn.0060761a
push 0
push 0xc8
push 0x14
mov ecx, esi
call fcn.00425160
mov eax, 1
wait
jmp 0x4983e5
inc edi
jmp 0x48de51
push 0
push 0
push ebx
mov ecx, esi
call fcn.004779a0
mov eax, 1
wait
jmp 0x4983e5
push 0
push 1
push ebx
mov ecx, esi
call fcn.004779a0
mov eax, 1
wait
jmp 0x4983e5
cmp dword [esi + 0x1a8], 0
je 0x4917be
cmp dword [esi + 0x116c], 0
jne 0x48df2d
push 0x2d68
call fcn.005f4e18
add esp, 4
mov dword [ebp - 0x424], eax
mov byte [ebp - 4], 0x33
test eax, eax
je 0x48df17
mov ecx, dword [esi + 0x1b0]
push ecx
mov ecx, eax
call fcn.004f79c0
mov byte [ebp - 4], 0
mov dword [esi + 0x116c], eax
mov eax, 1
wait
jmp 0x4983e5
xor eax, eax
mov byte [ebp - 4], al
mov dword [esi + 0x116c], eax
mov eax, 1
wait
jmp 0x4983e5
mov edx, dword [esi + 0x1b0]
push edx
mov ecx, dword [esi + 0x116c]
call fcn.004f7600
mov eax, 1
wait
jmp 0x4983e5
lea ecx, [ebp - 0x13c]
call fcn.004024f0
mov byte [ebp - 4], 0x35
push ebx
mov eax, dword [0x75ece4]
push eax
lea ecx, [ebp - 0x13c]
push ecx
call fcn.00402f60
add esp, 0xc
push 0x10004
push 0x6828e8
mov edx, dword [ebp - 0x13c]
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.00473680
add esp, 0x10
cmp eax, 6
jne 0x48df9b
mov ecx, esi
call fcn.00487bd0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x13c]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.00487c90
mov eax, 1
wait
jmp 0x4983e5
mov ecx, dword [esi + 0x117c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x60]
call edx
mov ecx, dword [esi + 0x117c]
test ecx, ecx
je 0x48dfe8
mov eax, dword [ecx]
push 1
mov edx, dword [eax + 4]
call edx
mov dword [esi + 0x117c], 0
mov eax, 1
wait
jmp 0x4983e5
cmp dword [esi + 0x1a8], 0
je 0x4917be
cmp dword [esi + 0x116c], 0
jne 0x48e050
push 0x2d68
call fcn.005f4e18
add esp, 4
mov dword [ebp - 0x400], eax
mov byte [ebp - 4], 0x38
test eax, eax
je 0x48e03e
mov ecx, dword [esi + 0x1b0]
push ecx
mov ecx, eax
call fcn.004f79c0
jmp 0x48e040
xor eax, eax
mov dword [ebp - 0x2dc], eax
mov byte [ebp - 4], 0
mov dword [esi + 0x116c], eax
mov edi, ebx
mov dword [ebp - 0x1a0], edi
mov edx, dword [ebx + 0xc]
push edx
mov eax, dword [ebx + 8]
push eax
mov ecx, dword [esi + 0x116c]
call fcn.0045a060
cmp edx, dword [esi + 0x1bc]
jl 0x4917be
jg 0x48e085
cmp eax, dword [esi + 0x1b8]
jbe 0x4917be
cmp dword [ebx], 0
je 0x48e0bb
xor ebx, ebx
mov dword [ebp - 0x32c], ebx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 0x24]
mov dword [ebp - 0x3c0], ecx
cmp ebx, ecx
jge 0x48e0f3
push ebx
lea ecx, [eax + 0x1c]
call fcn.0045ee00
mov ecx, dword [eax]
cmp ecx, dword [edi]
je case.0x490260.5292
inc ebx
jmp 0x48e08c
cmp dword [ebx + 4], 0
je 0x48e0f3
xor edi, edi
mov dword [ebp - 0x314], edi
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 0x38]
mov dword [ebp - 0x3cc], ecx
cmp edi, ecx
jge 0x48e0f3
push edi
lea ecx, [eax + 0x30]
call fcn.0045ee00
mov edx, dword [eax]
cmp edx, dword [ebx + 4]
je case.0x490260.5292
inc edi
jmp 0x48e0c3
mov ebx, dword [esi + 0x116c]
mov ecx, dword [ebx + 0x2d54]
mov dword [ebp - 0x3e0], ecx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x3fc], ecx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, eax
shl edx, 4
sub edx, eax
add edx, edx
add edx, edx
sub ecx, edx
mov dword [ebp - 0x240], ecx
mov ebx, dword [ebx + 0x2d50]
mov ecx, ebx
mov dword [ebp - 0x404], ecx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x418], ecx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, eax
shl edx, 4
sub edx, eax
add edx, edx
add edx, edx
sub ecx, edx
mov dword [ebp - 0x1c8], ecx
cmp dword [esi + 0x1b4], 0
je 0x48e379
mov eax, dword [ebp - 0x1a0]
add eax, 0x10
cmp dword [eax], 0xfffffffb
je 0x48e379
mov cl, byte [esi + 0x1178]
test cl, cl
jne 0x48e4c4
cmp dword [eax], 1
je case.0x490260.5292
mov byte [esi + 0x1178], 1
lea ecx, [ebp - 0x10c]
call fcn.004024f0
mov byte [ebp - 4], 0x39
mov ecx, dword [esi + 0x116c]
mov eax, dword [ecx + 0x2d60]
mov dword [ebp - 0x3bc], eax
mov ecx, dword [ecx + 0x2d64]
mov dword [ebp - 0x3b8], ecx
add eax, 0x80000
adc ecx, 0
push 0
push 0x100000
push ecx
push eax
call fcn.00624b70
push eax
mov edx, dword [ebp - 0x1c8]
push edx
mov eax, dword [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x240]
push ecx
mov edx, dword [ebp - 0x25c]
push edx
mov eax, dword [0x75ef34]
push eax
lea ecx, [ebp - 0x10c]
push ecx
call fcn.00402f60
add esp, 0x1c
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x420], esp
lea edx, [ebp - 0x10c]
push edx
call fcn.004027e0
mov byte [ebp - 4], 0x3a
push 2
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x9dc]
call fcn.0052fca0
mov ebx, 0x3b
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x3c
wait
lea ecx, [ebp - 0x9dc]
call fcn.005f6e33
cmp eax, 1
je 0x48e34a
mov eax, dword [esi + 0x234]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2d8], ecx
xor edi, edi
lea ebx, [edi + 1]
mov dword [ebp - 0x300], edi
cmp edi, dword [ebp - 0x2d8]
jge 0x48e2fb
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edx, dword [eax]
cmp dword [edx + 0x954], ebx
jne 0x48e2f7
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
mov ecx, dword [eax + 0x4f8]
push ecx
mov ecx, dword [esi + 0x116c]
add ecx, 0x1c
call fcn.0045ee20
add edi, ebx
jmp 0x48e2b0
mov edx, dword [ebp - 0x1a0]
mov eax, dword [edx + 4]
test eax, eax
je 0x48e317
push eax
mov ecx, dword [esi + 0x116c]
add ecx, 0x30
call fcn.0045ee20
mov byte [esi + 0x1178], 0
mov dword [ebp - 0x428], ebx
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x9dc]
call fcn.00462050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10c]
call fcn.00402560
mov eax, ebx
wait
jmp 0x4983e5
wait
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0x24]
mov byte [eax + 0x1178], 0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x9dc]
call fcn.00462050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10c]
call fcn.00402560
mov esi, dword [ebp - 0x24]
xor ebx, ebx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x134], ebx
mov ecx, dword [esi + 0x234]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x2fc], edx
jmp 0x48e3a0
cmp ebx, dword [ebp - 0x2fc]
jge 0x48e4d5
push ebx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
cmp dword [eax + 0x954], 1
jne 0x48e4b1
mov edi, dword [ebp - 0x1a0]
cmp dword [edi + 0x10], 0xfffffffb
jne 0x48e3ef
push ebx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov ecx, dword [eax]
mov edx, dword [edi]
cmp edx, dword [ecx + 0x4f8]
je 0x48e4b1
push ebx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edi, dword [eax]
add edi, 0x508
push ebx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
mov ecx, dword [eax + 0x504]
cmp ecx, dword [edi + 4]
jl 0x48e467
jg 0x48e428
mov edx, dword [eax + 0x500]
cmp edx, dword [edi]
jbe 0x48e467
push ebx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edi, dword [eax]
add edi, 0x508
push ebx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
mov ecx, dword [eax + 0x500]
sub ecx, dword [edi]
mov edx, dword [eax + 0x504]
sbb edx, dword [edi + 4]
add dword [ebp - 0x138], ecx
adc dword [ebp - 0x134], edx
push ebx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov ecx, dword [eax]
call fcn.005c1550
push ebx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
cmp dword [eax + 8], 0
jne 0x48e4b1
push ebx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov ecx, dword [eax]
mov edx, dword [ecx + 0x4f8]
push edx
mov ecx, dword [esi + 0x116c]
add ecx, 8
call fcn.0045ee20
inc ebx
jmp 0x48e3a0
mov dword [eax], 0xffffffff
mov eax, 1
wait
jmp 0x4983e5
mov eax, dword [esi + 0x1bc]
push eax
mov ecx, dword [esi + 0x1b8]
push ecx
mov edx, dword [ebp - 0x134]
push edx
mov eax, dword [ebp - 0x138]
push eax
lea ecx, [ebp - 0x440]
push ecx
mov ecx, dword [esi + 0x116c]
call fcn.004f7690
lea edi, [esi + 0x1c0]
mov edx, dword [eax]
mov dword [edi], edx
mov eax, dword [eax + 4]
mov dword [edi + 4], eax
mov dword [esi + 0x1c8], 1
lea ecx, [ebp - 0x350]
push ecx
call fcn.0043c830
lea ecx, [ebp - 0x350]
call fcn.00453850
mov ebx, eax
shl ebx, 4
sub ebx, eax
add ebx, ebx
add ebx, ebx
lea ecx, [ebp - 0x350]
call fcn.00453880
add eax, ebx
mov dword [ebp - 0x2cc], eax
mov ecx, edi
call fcn.00453850
mov ebx, eax
shl ebx, 4
sub ebx, eax
add ebx, ebx
add ebx, ebx
mov ecx, edi
call fcn.00453880
add eax, ebx
mov dword [ebp - 0x2d0], eax
mov byte [ebp - 0x3d], 0
mov dword [ebp - 0x158], 0
mov ebx, dword [ebp - 0x158]
jmp 0x48e590
mov eax, dword [0x75e260]
cmp ebx, dword [eax + 0x1c]
jge 0x48e629
push ebx
lea ecx, [eax + 0x14]
call fcn.0045ee00
mov edi, dword [eax]
cmp dword [edi + 0x1c], 0
je 0x48e61d
push 1
mov edx, dword [edi + 0x84]
push edx
mov ecx, esi
call fcn.0047e570
lea ecx, [edi + 0x58]
call fcn.00453850
mov ebx, eax
shl ebx, 4
sub ebx, eax
add ebx, ebx
add ebx, ebx
lea ecx, [edi + 0x58]
call fcn.00453880
add eax, ebx
cmp byte [edi + 0x46], 0
je 0x48e60c
cmp eax, dword [ebp - 0x2d0]
jg 0x48e60c
cmp eax, dword [ebp - 0x2cc]
jl 0x48e60c
mov dword [edi + 0x20], 0
mov byte [ebp - 0x3d], 1
mov ebx, dword [ebp - 0x158]
inc ebx
mov dword [ebp - 0x158], ebx
jmp 0x48e590
mov dword [edi + 0x20], 1
mov byte [ebp - 0x3d], 1
mov ebx, dword [ebp - 0x158]
inc ebx
mov dword [ebp - 0x158], ebx
jmp 0x48e590
xor ebx, ebx
mov dword [ebp - 0x244], ebx
cmp ebx, dword [esi + 0x2ac]
jge 0x48e680
push ebx
lea ecx, [esi + 0x2a4]
call fcn.0045ee00
mov edi, dword [eax]
push 0
push 0x141e
push 0x111
mov eax, dword [edi + 0x20]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x48e67d
mov dword [ebp - 0x244], 1
mov ecx, dword [edi + 0xab0]
push ecx
lea ecx, [esi + 0x2cc]
call fcn.0045ee20
inc ebx
jmp 0x48e631
cmp dword [esi + 0x117c], 0
jne 0x4917be
mov edx, dword [esi + 0x116c]
cmp dword [edx + 0x10], 0
jne 0x48e6ac
cmp dword [ebp - 0x244], 0
jne 0x48e6ac
cmp byte [ebp - 0x3d], 0
je 0x4917be
lea ecx, [ebp - 0x1a8]
call fcn.004024f0
mov byte [ebp - 4], 0x3e
mov eax, dword [esi + 0x116c]
mov edi, dword [eax + 0x2d60]
mov ebx, dword [eax + 0x2d64]
mov eax, dword [0x75ef38]
mov dword [ebp - 0x324], eax
lea ecx, [esi + 0x1c0]
call fcn.00453880
push eax
lea ecx, [esi + 0x1c0]
call fcn.00453850
push eax
mov ecx, dword [ebp - 0x1c8]
push ecx
mov edx, dword [ebp - 0x160]
push edx
add edi, 0x80000
adc ebx, 0
push 0
push 0x100000
push ebx
push edi
call fcn.00624b70
push eax
mov eax, dword [ebp - 0x1c8]
push eax
mov ecx, dword [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x240]
push edx
mov eax, dword [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 0x324]
push ecx
lea edx, [ebp - 0x1a8]
push edx
call fcn.00402f60
add esp, 0x2c
push 0x7c
call fcn.00426ce0
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x3f
test eax, eax
je 0x48e770
push 0
mov ecx, dword [ebp - 0x1a8]
push ecx
mov edx, dword [esi + 0x20]
push edx
mov ecx, eax
call fcn.004f8420
jmp 0x48e772
xor eax, eax
mov byte [ebp - 4], 0x3e
mov dword [esi + 0x117c], eax
mov edi, dword [eax]
add edi, 0x13c
call fcn.00411530
push eax
push 0xc2
mov ecx, dword [esi + 0x117c]
mov eax, dword [edi]
call eax
push 5
mov ecx, dword [esi + 0x117c]
call fcn.005f5caa
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1a8]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
push ebx
push 1
mov ecx, esi
call fcn.00476a40
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.00481120
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebx + 8]
push ecx
mov edx, dword [ebx + 4]
push edx
mov eax, dword [ebx]
push eax
push 0
mov ecx, esi
call fcn.0047f8b0
mov eax, 1
wait
jmp 0x4983e5
mov ecx, esi
call fcn.004846f0
mov eax, 1
wait
jmp 0x4983e5
xor edi, edi
jmp 0x48e830
mov ecx, dword [esi + 0x234]
cmp edi, dword [ecx + 8]
jge 0x494637
push edi
call fcn.004cf7d0
mov ecx, dword [eax]
mov edx, dword [ecx + 0x4f8]
cmp edx, dword [ebx]
jne 0x48e86c
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
mov dword [ebx], eax
mov eax, 1
wait
jmp 0x4983e5
inc edi
jmp 0x48e830
push 0
push 0x8029
mov eax, dword [esi + 0x200]
push eax
mov ebx, dword [sym.imp.USER32.dll_CheckMenuItem]
call ebx
push 0
push 0x8029
mov ecx, dword [esi + 0x204]
push ecx
call ebx
mov eax, 1
wait
jmp 0x4983e5
mov dword [ebp - 0x570], 1
mov dword [ebp - 0x568], ebx
lea edx, [ebp - 0x570]
push edx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov edi, eax
test edi, edi
jl 0x4917be
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl 0x4917be
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
add eax, 0x64
push eax
push edi
push 7
mov ecx, esi
call fcn.0045c880
mov eax, dword [esi + 0x294]
cmp eax, 0x13
je 0x48e913
cmp eax, 0x12
jne 0x4917be
push eax
mov ecx, esi
call fcn.00456c40
mov eax, 1
wait
jmp 0x4983e5
mov dword [ebp - 0x500], 1
mov dword [ebp - 0x4f8], ebx
lea ecx, [ebp - 0x500]
push ecx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov edi, eax
test edi, edi
jl 0x4917be
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl 0x4917be
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edx, dword [eax]
mov eax, dword [edx + 0x38]
push eax
push edi
push 0xa
mov ecx, esi
call fcn.0045c880
mov eax, 1
wait
jmp 0x4983e5
mov dword [ebp - 0x518], 1
mov dword [ebp - 0x510], ebx
lea ecx, [ebp - 0x518]
push ecx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov ebx, eax
test ebx, ebx
jl 0x4917be
lea edi, [esi + 0x5d0]
mov ecx, edi
call fcn.004546a0
mov dword [ebp - 0x2d4], eax
cmp ebx, eax
jl 0x4917be
mov ecx, edi
call fcn.00438290
mov edx, dword [ebp - 0x2d4]
lea eax, [eax + edx + 2]
cmp ebx, eax
jge 0x4917be
lea ecx, [ebp - 0x540]
push ecx
push 0
push 2
push ebx
mov ecx, edi
call fcn.0060143d
push 1
lea edx, [ebp - 0x540]
push edx
mov ecx, edi
call fcn.0042e510
mov ecx, esi
call fcn.00458530
mov eax, 1
wait
jmp 0x4983e5
mov dword [ebp - 0x530], 1
mov dword [ebp - 0x528], ebx
lea eax, [ebp - 0x530]
push eax
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov ebx, eax
test ebx, ebx
jl 0x4917be
lea edi, [esi + 0x508]
mov ecx, edi
call fcn.00454770
cmp eax, dword [esi + 0x56c]
jne 0x48ea8b
push ebx
lea ecx, [esi + 0x5d0]
call fcn.004545f0
mov eax, 1
wait
jmp 0x4983e5
test eax, eax
je 0x48ea9f
push eax
mov ecx, edi
call fcn.00454750
cmp eax, dword [esi + 0x56c]
je 0x48ea74
add esi, 0x5d0
mov ecx, esi
call fcn.004546a0
mov edi, eax
cmp ebx, edi
jl 0x4917be
mov ecx, esi
call fcn.00438290
lea ecx, [eax + edi + 2]
cmp ebx, ecx
jge 0x4917be
lea edx, [ebp - 0x580]
push edx
push 0
push 2
push ebx
mov ecx, esi
call fcn.0060143d
push 1
lea eax, [ebp - 0x580]
push eax
mov ecx, esi
call fcn.0042e510
mov eax, 1
wait
jmp 0x4983e5
mov ecx, esi
call fcn.00470220
mov eax, 1
wait
jmp 0x4983e5
push 1
push 1
mov ecx, esi
call fcn.0047e570
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl 0x4917be
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edi, dword [eax]
cmp dword [edi + 0x60], 0
je 0x48eb48
mov eax, dword [edi + 0x60]
jmp 0x48eb4d
mov eax, 0x67997c
push eax
lea ecx, [ebp - 0x27c]
call fcn.004030a0
mov byte [ebp - 4], 0x7a
mov ecx, dword [ebp - 0x27c]
push ecx
mov ecx, edi
call fcn.005b6eb0
mov dword [ebp - 0x5c8], 1
mov dword [ebp - 0x5c0], ebx
lea edx, [ebp - 0x5c8]
push edx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov ebx, eax
test ebx, ebx
jl 0x48ebfb
lea ecx, [ebp + 0x1fc90]
call fcn.004011c0
mov byte [ebp - 4], 0x7b
movzx eax, byte [edi + 0x362]
neg eax
sbb eax, eax
and eax, 0xfde9
push eax
mov ecx, dword [edi + 0x60]
push ecx
lea ecx, [ebp + 0x1fc90]
call fcn.00401970
mov eax, dword [ebp + 0x1fc90]
test eax, eax
jne 0x48ebd9
lea eax, [ebp + 0x1fc94]
push eax
push ebx
push 8
mov edx, dword [esi + 0x5f0]
push edx
call fcn.00453bd0
add esp, 0x10
mov byte [ebp - 4], 0x7a
lea ecx, [ebp + 0x1fc90]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x27c]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
mov eax, dword [0x75f79c]
push eax
push 0x800f
push 0
push 0x800f
mov ecx, dword [esi + 0x200]
push ecx
call fcn.0045bf90
mov edx, dword [0x75f79c]
push edx
push 0x2719
push 0
push 0x2719
mov eax, dword [esi + 0x204]
push eax
call fcn.0045bf90
add esp, 0x28
push 0
push 0x14bb
push 0x111
mov ecx, esi
call fcn.0042ec10
mov eax, 1
wait
jmp 0x4983e5
mov eax, dword [0x75e280]
test eax, eax
je 0x48eca1
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48eca1
push ebx
mov ecx, dword [ebp + 0x22080]
push ecx
push 0x111
mov edx, dword [0x75e280]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
test ebx, ebx
je case.0x490260.5292
mov eax, dword [ebx]
push eax
mov ecx, esi
call fcn.0045f710
mov edi, eax
test edi, edi
jl 0x48edcc
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov ecx, dword [ebx + 8]
mov dword [eax + 8], ecx
mov edx, dword [ebx + 0xc]
mov dword [eax + 0xc], edx
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edi, dword [eax]
test edi, edi
je 0x48edcc
mov eax, dword [edi + 0x500]
or eax, dword [edi + 0x504]
je 0x48ed01
mov ecx, dword [ebx + 8]
or ecx, dword [ebx + 0xc]
jne 0x48ed1c
cmp dword [edi + 0x354], 0x20
je 0x48ed1c
mov edx, dword [ebx + 8]
mov dword [edi + 0x500], edx
mov eax, dword [ebx + 0xc]
mov dword [edi + 0x504], eax
cmp dword [edi + 0x504], 0
jl 0x48ed90
jg 0x48ed30
cmp dword [edi + 0x500], 0
jbe 0x48ed90
lea ecx, [ebp - 0x1e8]
call fcn.004024f0
mov byte [ebp - 4], 0x80
push 0
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [edi + 0x20]
call fcn.005928c0
cmp byte [edi + 0x372], 0
mov eax, 0x67997c
jne 0x48ed61
mov eax, dword [edi + 0x38]
mov edx, dword [edi + 0x504]
push edx
mov ecx, dword [edi + 0x500]
push ecx
push eax
mov edx, dword [ebp - 0x1e8]
push edx
mov ecx, 0x75e2e0
call fcn.004f6580
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1e8]
call fcn.00402560
mov eax, dword [ebx]
cmp dword [esi + 0x17f8], eax
je 0x48edcc
cdq
mov ecx, 5
idiv ecx
test edx, edx
jne 0x48edcc
cmp dword [edi + 0x3c8], 0x5d0
jle 0x48edcc
mov eax, dword [ebx]
mov dword [esi + 0x17f8], eax
push edx
push 0x150f
push 0x111
mov ecx, esi
call fcn.0042ec10
mov dword [ebp - 0x5e0], 1
mov edx, dword [ebx]
mov dword [ebp - 0x5d8], edx
lea eax, [ebp - 0x5e0]
push eax
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov edi, eax
test edi, edi
jl 0x4917be
lea ecx, [ebp - 0x170]
call fcn.004024f0
mov byte [ebp - 4], 0x81
mov dword [ebp - 0xbc], vtable.StringConvertor.0
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x170]
push ecx
mov edx, dword [ebx + 0xc]
push edx
mov eax, dword [ebx + 8]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0043f860
mov ecx, dword [0x75dd28]
push ecx
mov edx, dword [ebp - 0x170]
push edx
push edi
push 3
mov ecx, esi
call fcn.0045c770
mov byte [ebp - 4], 0x81
mov dword [ebp - 0xbc], vtable.StringConvertor.0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x170]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
mov eax, dword [0x75e280]
test eax, eax
je 0x48eea6
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48eea6
push ebx
mov eax, dword [ebp + 0x22080]
push eax
push 0x111
mov ecx, dword [0x75e280]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], eax
mov dword [ebp - 0x388], 1
mov edx, dword [ebx]
mov dword [ebp - 0x380], edx
lea eax, [ebp - 0x388]
push eax
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov edi, eax
mov dword [ebp - 0x28], edi
mov byte [ebp - 0x15], 0
test edi, edi
jge 0x48eff6
mov ecx, dword [ebx]
push ecx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl 0x48efe7
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov ecx, dword [eax]
cmp dword [ecx + 0x350], 0
je 0x48efe7
mov eax, dword [ecx + 0x34c]
mov ebx, 4
cmp eax, ebx
je 0x48ef65
mov edx, dword [ecx + 0x354]
cmp edx, 0x40
je 0x48ef65
cmp eax, 8
je 0x48ef65
cmp edx, 0x800
je 0x48ef65
cmp eax, 0x40
jne 0x48efec
mov eax, dword [ecx + 0x350]
cmp byte [eax + 0x359], 0
je 0x48efec
cmp dword [eax + 0x954], 3
jne 0x48efec
xor eax, eax
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x370], 1
mov edx, dword [ecx + 0x350]
mov eax, dword [edx + 0x4f8]
mov dword [ebp - 0x368], eax
lea ecx, [ebp - 0x370]
push ecx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov edi, eax
mov dword [ebp - 0x28], edi
mov byte [ebp - 0x15], 1
jmp 0x48efec
mov ebx, 4
test edi, edi
jl 0x4917be
jmp 0x48effb
mov ebx, 4
lea ecx, [ebp - 0x20]
call fcn.004024f0
mov byte [ebp - 4], 0x85
mov dword [ebp - method.StringConvertor.virtual_0], vtable.StringConvertor.0
mov byte [ebp - 4], 0x86
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x10]
cdq
push edx
push eax
lea ecx, [ebp - 0x254]
call fcn.0043f860
lea ecx, [ebp - 0xa0]
call fcn.004024f0
mov byte [ebp - 4], 0x87
mov ecx, dword [0x75f0d4]
push ecx
mov edx, dword [ebp - 0x20]
push edx
push 0x686368
lea eax, [ebp - 0xa0]
push eax
call fcn.00402f60
add esp, 0x10
mov dword [ebp - 0xb4], 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
push edx
mov ecx, esi
call fcn.0045f710
mov edi, eax
mov dword [ebp - 0x3c8], edi
test edi, edi
jl 0x48f4b2
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov ecx, dword [eax + 8]
mov dword [ebp - 0x58], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x10]
cdq
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], edx
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
cmp dword [eax + 0x950], 0
je 0x48f4b2
mov ecx, dword [ebp - 0x58]
or ecx, dword [ebp - 0x54]
jne 0x48f0f7
cmp byte [ebp - 0x15], cl
je 0x48f0f7
mov edi, eax
mov eax, dword [edi + 0x950]
mov edx, dword [eax + 0x1c0]
mov dword [ebp - 0x58], edx
mov eax, dword [eax + 0x1c4]
mov dword [ebp - 0x54], eax
jmp 0x48f0fd
mov edi, dword [ebp - 0xb4]
mov ecx, dword [edi + 0x950]
mov eax, dword [ecx + 0x24]
cdq
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], edx
mov byte [ebp - 4], 0x88
wait
mov ecx, dword [edi + 0x950]
call fcn.005b4060
test al, al
je 0x48f14d
mov edx, dword [0x75f0d4]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [0x75f460]
push ecx
push 0x68635c
lea edx, [ebp - 0xa0]
push edx
call fcn.00402f60
add esp, 0x14
mov eax, dword [edi + 0x44]
cmp eax, ebx
je 0x48f166
cmp eax, 5
je 0x48f166
cmp dword [edi + 0x354], 0
je 0x48f493
fldz
fcomp qword [edi + 0x3d8]
fnstsw ax
test ah, 5
jp 0x48f3bf
mov eax, dword [edi + 0x950]
fld qword [eax + 0x190]
fmul qword [0x6828a0]
fdiv qword [edi + 0x3d8]
fstp dword [ebp - 0x228]
push 8
lea ecx, [ebp + 0x21a70]
push ecx
push 0xe
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test eax, eax
jne 0x48f1bd
mov edx, 0x2c
mov word [ebp + 0x21a70], dx
fld dword [ebp - 0x228]
fld st(0)
call fcn.00622df0
mov dword [ebp - 0xbc], eax
fisub dword [ebp - 0xbc]
fmul qword [0x6828a0]
call fcn.00622df0
push eax
lea eax, [ebp + 0x21a70]
push eax
mov ecx, dword [ebp - 0xbc]
push ecx
push 0x686350
lea edx, [ebp - 0x20]
push edx
call fcn.00402f60
add esp, 0x14
fld dword [ebp - 0x228]
fcomp qword [0x686348]
fnstsw ax
test ah, 5
jp 0x48f27c
cmp byte [ebp - 0x15], 0
je 0x48f272
lea ecx, [ebp - 0x1d0]
call fcn.004024f0
mov byte [ebp - 4], 0x89
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [0x75f4ac]
push ecx
push str._s:_s
lea edx, [ebp - 0x1d0]
push edx
call fcn.00402f60
add esp, 0x10
mov eax, dword [0x75dd28]
push eax
mov ecx, dword [ebp - 0x1d0]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push ebx
mov ecx, esi
call fcn.0045c770
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x1d0]
call fcn.00402560
jmp 0x48f28d
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
jmp 0x48f285
push 0x67997c
mov edx, dword [ebp - 0x28]
push edx
push ebx
mov ecx, esi
call fcn.0045c880
mov ecx, dword [edi + 0x950]
fld qword [ecx + 0x190]
fldz
fcompp
fnstsw ax
test ah, 5
jp 0x48f493
mov eax, dword [ecx + 0x1c8]
mov edx, dword [ecx + 0x1cc]
test edx, edx
jl 0x48f493
jg 0x48f2c8
mov edi, eax
test edi, edi
jbe 0x48f493
fld qword [ecx + 0x190]
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], edx
mov eax, dword [ebp - 0xb4]
fdivr qword [eax + 0x3d8]
fsub qword [0x6828e0]
fild qword [ebp - 0x398]
fmulp st(1)
fidiv dword [ecx + 0x24]
call fcn.00622e26
mov edi, vtable.StringConvertor.0
mov dword [ebp - 0x230], edi
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x20]
push ecx
push edx
push eax
lea ecx, [ebp - 0x230]
call fcn.0043fa40
cmp byte [ebp - 0x15], 0
je 0x48f390
lea ecx, [ebp - 0x180]
call fcn.004024f0
mov byte [ebp - 4], 0x8b
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [0x75f4ac]
push eax
push str._s:_s
lea ecx, [ebp - 0x180]
push ecx
call fcn.00402f60
add esp, 0x10
mov edx, dword [0x75dd28]
push edx
mov eax, dword [ebp - 0x180]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
push 5
mov ecx, esi
call fcn.0045c770
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x180]
call fcn.00402560
mov byte [ebp - 4], 0x88
mov dword [ebp - 0x230], edi
wait
mov dword [ebp - 4], 0x87
jmp 0x48f4b2
mov edx, dword [0x75dd28]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
push 5
mov ecx, esi
call fcn.0045c770
mov byte [ebp - 4], 0x88
mov dword [ebp - 0x230], edi
wait
mov dword [ebp - 4], 0x87
jmp 0x48f4b2
mov edx, dword [edi + 0x950]
fld qword [edx + 0x190]
call fcn.00622e26
test edx, edx
jl 0x48f493
jg 0x48f3e2
test eax, eax
jb 0x48f493
mov edi, vtable.StringConvertor.0
mov dword [ebp - 0x238], edi
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x20]
push ecx
push edx
push eax
lea ecx, [ebp - 0x238]
call fcn.0043fa40
cmp byte [ebp - 0x15], 0
je 0x48f472
lea ecx, [ebp - 0x1b8]
call fcn.004024f0
mov byte [ebp - 4], 0x8d
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [0x75f4ac]
push eax
push str._s:_s
lea ecx, [ebp - 0x1b8]
push ecx
call fcn.00402f60
add esp, 0x10
mov edx, dword [0x75dd28]
push edx
mov eax, dword [ebp - 0x1b8]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
push ebx
mov ecx, esi
call fcn.0045c770
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x1b8]
call fcn.00402560
mov byte [ebp - 4], 0x88
mov dword [ebp - 0x238], edi
wait
mov dword [ebp - 4], 0x87
jmp 0x48f4b2
mov edx, dword [0x75dd28]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
push ebx
mov ecx, esi
call fcn.0045c770
mov byte [ebp - 4], 0x88
mov dword [ebp - 0x238], edi
wait
mov dword [ebp - 4], 0x87
jmp 0x48f4b2
mov edi, dword [ebp - 0x54]
cmp byte [ebp - 0x15], 0
je 0x48f517
lea ecx, [ebp - 0x118]
call fcn.004024f0
mov byte [ebp - 4], 0x8f
mov edx, dword [ebp - 0xa0]
push edx
mov eax, dword [0x75f4ac]
push eax
push str._s:_s
lea ecx, [ebp - 0x118]
push ecx
call fcn.00402f60
add esp, 0x10
mov edx, dword [0x75dd28]
push edx
mov eax, dword [ebp - 0x118]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
push 6
mov ecx, esi
call fcn.0045c770
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x118]
call fcn.00402560
jmp 0x48f532
mov edx, dword [0x75dd28]
push edx
mov eax, dword [ebp - 0xa0]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
push 6
mov ecx, esi
call fcn.0045c770
mov edx, dword [ebp - 0x58]
or edx, edi
jne 0x48f579
mov eax, dword [ebp - 0xb4]
cmp dword [eax + 0x354], edx
je 0x48f68a
mov ecx, dword [eax + 0x110]
mov eax, dword [eax + 0x114]
test eax, eax
jl 0x48f68a
jg 0x48f569
test ecx, ecx
jbe 0x48f68a
mov dword [ebp - 0x58], ecx
mov edi, eax
mov dword [ebp - 0x54], edi
or ecx, edi
je 0x48f68a
mov eax, dword [ebp - 0x14]
fild qword [eax + 8]
fmul qword [0x6828a0]
fild qword [ebp - 0x58]
fdivp st(1)
fstp dword [ebp - 0xac]
fld dword [ebp - 0xac]
fcomp qword [0x686348]
fnstsw ax
test ah, 5
jp 0x48f679
push 8
lea ecx, [ebp + 0x21a78]
push ecx
push 0xe
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test eax, eax
jne 0x48f5cd
mov edx, 0x2c
mov word [ebp + 0x21a78], dx
fld dword [ebp - 0xac]
fld st(0)
call fcn.00622df0
mov dword [ebp - 0xac], eax
fisub dword [ebp - 0xac]
fmul qword [0x6828a0]
call fcn.00622df0
push eax
lea eax, [ebp + 0x21a78]
push eax
mov ecx, dword [ebp - 0xac]
push ecx
push 0x686350
lea edx, [ebp - 0x20]
push edx
call fcn.00402f60
add esp, 0x14
cmp byte [ebp - 0x15], 0
je 0x48f66f
lea ecx, [ebp - 0x11c]
call fcn.004024f0
mov byte [ebp - 4], 0x90
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [0x75f4ac]
push ecx
push str._s:_s
lea edx, [ebp - 0x11c]
push edx
call fcn.00402f60
add esp, 0x10
mov eax, dword [0x75dd28]
push eax
mov ecx, dword [ebp - 0x11c]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push ebx
mov ecx, esi
call fcn.0045c770
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x11c]
call fcn.00402560
jmp 0x48f68a
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
jmp 0x48f682
push 0x67997c
mov edx, dword [ebp - 0x28]
push edx
push ebx
mov ecx, esi
call fcn.0045c880
cmp dword [ebp - 0x88], 0
jl 0x48f796
jg 0x48f6a6
cmp dword [ebp - 0x8c], 0xa
jbe 0x48f796
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 8]
mov ecx, dword [eax + 0xc]
cmp edi, ecx
jl 0x48f796
jg 0x48f6c2
cmp dword [ebp - 0x58], edx
jb 0x48f796
mov eax, dword [ebp - 0x58]
or eax, edi
je 0x48f796
mov eax, dword [ebp - 0x58]
sub eax, edx
sbb edi, ecx
mov ecx, dword [ebp - 0x88]
push ecx
mov edx, dword [ebp - 0x8c]
push edx
push edi
push eax
call fcn.00624b70
mov edi, vtable.StringConvertor.0
mov dword [ebp - 0x248], edi
mov bl, 0x91
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x20]
push ecx
push edx
push eax
lea ecx, [ebp - 0x248]
call fcn.0043fa40
cmp byte [ebp - 0x15], 0
je 0x48f772
lea ecx, [ebp - 0x124]
call fcn.004024f0
mov byte [ebp - 4], 0x92
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [0x75f4ac]
push eax
push str._s:_s
lea ecx, [ebp - 0x124]
push ecx
call fcn.00402f60
add esp, 0x10
mov edx, dword [0x75dd28]
push edx
mov eax, dword [ebp - 0x124]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
push 5
mov ecx, esi
call fcn.0045c770
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x124]
call fcn.00402560
mov byte [ebp - 4], 0x87
mov dword [ebp - 0x248], edi
jmp 0x48f79b
mov edx, dword [0x75dd28]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
push 5
mov ecx, esi
call fcn.0045c770
mov byte [ebp - 4], 0x87
mov dword [ebp - 0x248], edi
jmp 0x48f79b
mov edi, vtable.StringConvertor.0
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0xa0]
call fcn.00402560
mov byte [ebp - 4], 0x85
mov dword [ebp - 0x254], edi
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl 0x4917be
cmp byte [esi + 0xcce], 0
je 0x4917be
lea edx, [esi + 0xac6]
push edx
lea ecx, [esi + 0x838]
call fcn.00532b40
mov eax, 1
wait
jmp 0x4983e5
cmp dword [0x75e6ac], 0
jne case.0x490260.5292
push 0
push 0
push 0
push 0
push ebx
push 0x45b0f0
call fcn.006005d0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x48f830
cmp dword [0x75e6ac], 0
jne case.0x490260.5292
push 0x32
call esi
jmp 0x48f830
mov eax, dword [0x75e6ac]
test eax, eax
je 0x4917be
push ebx
push 0x1438
push 0x111
mov eax, dword [eax + 0x20]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
wait
jmp 0x4983e5
mov eax, dword [0x75e6ac]
test eax, eax
je 0x4917be
push ebx
push 0x143e
push 0x111
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
wait
jmp 0x4983e5
cmp dword [0x75e6ac], 0
je case.0x490260.5292
mov byte [ebp - 4], 0x93
wait
xor esi, esi
push esi
push esi
push 0x10
mov edx, dword [0x75e6ac]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov dword [0x75e6ac], esi
wait
mov dword [ebp - 4], esi
lea eax, [esi + 1]
wait
jmp 0x4983e5
lea ecx, [esi + 0x508]
mov edx, dword [esi + 0x568]
push edx
call fcn.00454730
mov edi, eax
lea esp, [esp]
test edi, edi
je 0x48f930
push edi
lea ecx, [esi + 0x508]
call fcn.0060116d
cmp eax, ebx
je case.0x490260.5292
push 1
push edi
lea ecx, [esi + 0x508]
call fcn.00454710
mov edi, eax
mov dword [ebp - 0x41c], edi
jmp 0x48f900
mov edi, dword [0x75dc70]
dec edi
test edi, edi
jl 0x4917be
push edi
mov ecx, 0x75dc68
call fcn.004ce870
cmp dword [eax], ebx
jne 0x48f936
push edi
mov ecx, 0x75dc68
call fcn.004ce870
add eax, 4
mov ebx, dword [eax]
push edi
mov ecx, 0x75dc68
call fcn.004ce870
lea edi, [esi + 0x508]
mov eax, dword [eax]
push eax
push 0xffff0002
mov ecx, dword [esi + 0x568]
push ecx
push 0x17
push 0x16
push ebx
mov ecx, edi
call fcn.004546c0
push eax
mov ecx, edi
call fcn.004548a0
mov eax, 1
wait
jmp 0x4983e5
mov eax, dword [0x75e280]
test eax, eax
je 0x48f9ca
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48f9ca
push ebx
mov edx, dword [ebp + 0x22080]
push edx
push 0x111
mov eax, dword [0x75e280]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
xor edi, edi
mov dword [ebp - 0x12c], edi
mov ecx, dword [esi + 0x234]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x304], edx
cmp edi, dword [ebp - 0x304]
jge 0x48fa0a
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
cmp dword [eax + 0x954], 1
jne 0x48fa7b
inc dword [ebp - 0x12c]
cmp dword [ebp - 0x12c], 0
jne 0x48fa81
lea edi, [esi + 0x1258]
push 0
push 0x8017
mov ecx, edi
call fcn.004544d0
push 0
push 0x8018
mov ecx, edi
call fcn.004544d0
push 1
push 0x271b
mov ecx, dword [esi + 0x204]
push ecx
mov edi, dword [sym.imp.USER32.dll_EnableMenuItem]
call edi
push 1
push 0x8006
mov edx, dword [esi + 0x200]
push edx
call edi
push 1
push 0x800b
mov eax, dword [esi + 0x200]
push eax
call edi
push 1
push 0x800a
mov ecx, dword [esi + 0x200]
push ecx
jmp 0x48fab7
inc edi
jmp 0x48f9e1
push 1
push 0x8018
lea ecx, [esi + 0x1258]
call fcn.004544d0
push 0
push 0x800b
mov edx, dword [esi + 0x200]
push edx
mov edi, dword [sym.imp.USER32.dll_EnableMenuItem]
call edi
push 0
push 0x800a
mov eax, dword [esi + 0x200]
push eax
call edi
lea edi, [esi + 0x508]
mov ecx, edi
call fcn.00454770
push eax
mov ecx, edi
call fcn.004cb130
cmp dword [ebx + 4], 3
jne 0x48fb9c
cmp eax, 2
jne 0x48fb59
mov ecx, dword [ebx]
push ecx
mov ecx, esi
call fcn.0045f710
mov dword [ebp - 0x168], eax
test eax, eax
jl 0x48fb9c
mov dword [ebp - 0x558], 1
mov edx, dword [ebx]
mov dword [ebp - 0x550], edx
lea edi, [esi + 0x5d0]
push 0xffffffffffffffff
lea eax, [ebp - 0x558]
push eax
mov ecx, edi
call fcn.004387c0
test eax, eax
jge 0x48fb9c
mov ecx, dword [ebp - 0x168]
push ecx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
push 1
push 1
mov edx, dword [eax]
push edx
mov ecx, edi
call fcn.004c9dc0
mov eax, dword [esi + 0x294]
test eax, eax
je 0x48fb9c
push eax
mov ecx, esi
call fcn.00456c40
jmp 0x48fb9c
cmp eax, 1
jne 0x48fb9c
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebx]
mov dword [ebp - 0x5a8], eax
lea ecx, [ebp - 0x5b0]
push ecx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
test eax, eax
jl 0x48fb9c
push 0
push eax
push 0x1008
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov dword [ebp - 0x4a0], 1
mov edx, dword [ebx]
mov dword [ebp - 0x498], edx
lea eax, [ebp - 0x4a0]
push eax
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov edi, eax
push 0
push 0
push 0x1042
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
cmp eax, edi
jne 0x48fc07
push 0
push 0
push 0x1032
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
test eax, eax
je 0x48fc07
mov ecx, dword [ebx]
push ecx
mov edx, dword [ebx + 4]
push edx
mov ecx, esi
call fcn.00455ba0
mov eax, dword [ebx + 4]
cmp eax, 7
ja case.0x490260.5292
jmp dword [eax*4 + 0x49856c]
mov eax, dword [0x75dd28]
push eax
push str.Dwnl_audio
push edi
push 4
mov ecx, esi
call fcn.0045c770
push 0x67997c
push edi
push 5
mov ecx, esi
call fcn.0045c880
push 0x67997c
push edi
push 6
mov ecx, esi
call fcn.0045c880
mov eax, 1
wait
jmp 0x4983e5
test edi, edi
jl 0x48fc92
mov ecx, dword [0x75dd28]
push ecx
mov edx, dword [0x75ef3c]
push edx
push edi
push 4
mov ecx, esi
call fcn.0045c770
push 0x67997c
push edi
push 5
mov ecx, esi
call fcn.0045c880
push 0x67997c
push edi
push 6
mov ecx, esi
call fcn.0045c880
mov eax, dword [ebx]
push eax
mov ecx, esi
call fcn.0045f710
test eax, eax
jl 0x48fd35
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edi, dword [eax]
cmp byte [esi + 0xa84], 0
je 0x48fcd3
cmp dword [edi + 0x5c], 0
je 0x48fcd3
lea ecx, [esi + 0x87c]
push ecx
lea ecx, [esi + 0x838]
call fcn.00532b40
mov eax, dword [edi + 0x4fc]
test eax, eax
je 0x48fcec
mov edx, dword [ebx]
push edx
push eax
mov ecx, dword [0x75e260]
call fcn.005191b0
cmp dword [edi + 8], 0
je 0x48fd0d
push 0
push 0x3e8
push 0xe
mov ecx, esi
call fcn.00425160
test eax, eax
je 0x48fd0d
mov byte [esi + 0x26e], 1
cmp dword [edi + 0x4f8], 0
je 0x48fd35
cmp dword [edi + 0x3c4], 0x592
jle 0x48fd35
push 0
push 0x14b7
push 0x111
mov ecx, esi
call fcn.0042ec10
mov eax, dword [esi + 0x1174]
cmp eax, dword [ebx]
jne 0x48fd54
mov ecx, dword [esi + 0x198]
call fcn.004393a0
mov dword [esi + 0x1174], 0xffffffff
mov ecx, dword [esi + 0x1170]
cmp ecx, dword [ebx]
jne 0x48fd65
mov ecx, esi
call fcn.00487790
cmp dword [esi + 0x116c], 0
je 0x4917be
mov edx, dword [ebx]
push edx
mov ecx, dword [esi + 0x116c]
call fcn.004f7930
mov eax, dword [ebx]
push eax
mov ecx, dword [esi + 0x116c]
call fcn.004f78f0
mov eax, 1
wait
jmp 0x4983e5
test edi, edi
jl 0x4917be
mov ecx, dword [0x75dd28]
push ecx
mov edx, dword [0x75ef40]
push edx
push edi
push 4
mov ecx, esi
call fcn.0045c770
push 0x67997c
push edi
push 5
mov ecx, esi
call fcn.0045c880
push 0x67997c
push edi
push 6
mov ecx, esi
call fcn.0045c880
mov eax, 1
wait
jmp 0x4983e5
test edi, edi
jl 0x4917be
mov eax, dword [0x75dd28]
push eax
mov ecx, dword [0x75ef44]
push ecx
push edi
push 4
mov ecx, esi
call fcn.0045c770
push 0x67997c
push edi
push 6
mov ecx, esi
call fcn.0045c880
mov eax, 1
wait
jmp 0x4983e5
cmp dword [esi + 0x116c], 0
je 0x48fe32
mov edx, dword [ebx]
push edx
mov ecx, dword [esi + 0x116c]
call fcn.004f78f0
mov ecx, dword [esi + 0x234]
mov eax, dword [ecx + 8]
cmp eax, 1
jle 0x4917be
add eax, 0xfffffffe
push eax
call fcn.004cf7d0
mov eax, dword [eax]
mov edi, 0x5b4
cmp dword [eax + 0x3c8], edi
jg 0x48fe85
mov ecx, dword [esi + 0x234]
mov eax, dword [ecx + 8]
cmp eax, 2
jle 0x4917be
add eax, 0xfffffffd
push eax
call fcn.004cf7d0
mov eax, dword [eax]
cmp dword [eax + 0x3c8], edi
jle 0x4917be
push 0
push 0x14e1
push 0x111
mov ecx, esi
call fcn.0042ec10
mov eax, 1
wait
jmp 0x4983e5
test edi, edi
jl case.0x48fc13.0
push 0x67997c
push edi
push 6
mov ecx, esi
call fcn.0045c880
mov eax, dword [ebx]
push eax
mov ecx, esi
call fcn.0045f710
test eax, eax
jl 0x4901a9
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
mov dword [ebp - 0x140], eax
mov ecx, dword [eax + 0x508]
mov dword [ebp - 0x8c], ecx
mov edx, dword [eax + 0x50c]
mov dword [ebp - 0x88], edx
or ecx, edx
jne 0x48ff8e
test edi, edi
jl 0x4901a9
mov ecx, eax
mov eax, dword [ecx + 0xacc]
cmp eax, 0x7565
jne 0x48ff2f
mov edx, dword [0x75dd28]
push edx
mov eax, dword [0x75f26c]
push eax
push edi
push 4
mov ecx, esi
call fcn.0045c770
jmp 0x4901a9
cmp eax, 0x7573
jne 0x48ff4e
push str.Not_modified
push 4
push edi
lea ecx, [esi + 0x5d0]
call fcn.0060100a
jmp 0x4901a9
cmp eax, 0x7540
je 0x48ff76
test eax, eax
je 0x48ff76
mov ecx, dword [0x75dd28]
push ecx
mov edx, dword [0x75f274]
push edx
push edi
push 4
mov ecx, esi
call fcn.0045c770
jmp 0x4901a9
push 0x67997c
push 4
push edi
lea ecx, [esi + 0x5d0]
call fcn.0060100a
jmp 0x4901a9
mov ecx, dword [eax + 0x500]
mov edx, dword [eax + 0x504]
mov ebx, ecx
or ebx, edx
je 0x48ffa4
mov eax, edx
jmp 0x48ffb0
mov ecx, dword [eax + 0x110]
mov eax, dword [eax + 0x114]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x29c], ecx
test eax, eax
jl 0x4900ac
jg 0x48ffce
test ecx, ecx
jbe 0x4900ac
cmp dword [ebp - 0x88], 0
jl 0x490097
jg 0x48ffea
cmp dword [ebp - 0x8c], 0
jbe 0x490097
fild qword [ebp - 0x8c]
fmul qword [0x6828a0]
fild qword [ebp - 0x29c]
fdivp st(1)
fstp dword [ebp - 0x98]
push 8
lea eax, [ebp + 0x21a68]
push eax
push 0xe
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test eax, eax
jne 0x49002a
mov ecx, 0x2c
mov word [ebp + 0x21a68], cx
fld dword [ebp - 0x98]
fld st(0)
call fcn.00622df0
mov ebx, eax
mov dword [ebp - 0x168], ebx
fisub dword [ebp - 0x168]
fmul qword [0x6828a0]
call fcn.00622df0
push eax
lea edx, [ebp + 0x21a68]
push edx
push ebx
push 0x686350
lea eax, [ebp + 0x217e8]
push eax
call fcn.00623a6b
add esp, 0x14
test edi, edi
jl 0x4901a9
fld dword [ebp - 0x98]
fcomp qword [0x686348]
fnstsw ax
test ah, 5
jp 0x49009f
lea ecx, [ebp + 0x217e8]
push ecx
push edi
push 4
jmp 0x4901a2
test edi, edi
jl 0x4901a9
push 0x67997c
push edi
push 4
jmp 0x4901a2
mov ecx, dword [ebp - 0x140]
mov eax, dword [ecx + 0x44]
mov ebx, 4
cmp eax, ebx
je 0x4900d0
cmp eax, 5
je 0x4900d0
cmp dword [ecx + 0x354], 0
je 0x490197
fldz
fcomp qword [ecx + 0x3d8]
fnstsw ax
test ah, 5
jp 0x490197
test edi, edi
jl 0x4901a9
push 8
lea edx, [ebp + 0x21a60]
push edx
push 0xe
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test eax, eax
jne 0x490111
mov eax, 0x2c
mov word [ebp + 0x21a60], ax
fldz
mov ecx, dword [ebp - 0x140]
fcomp qword [ecx + 0x518]
fnstsw ax
test ah, 5
jp 0x49019b
fld qword [ecx + 0x518]
fld qword [0x6828a0]
fmul st(1), st(0)
fxch st(1)
fdiv qword [ecx + 0x3d8]
fld qword [0x686348]
fcomp st(1)
fnstsw ax
test ah, 0x41
jne 0x490191
fld st(0)
call fcn.00622df0
mov dword [ebp - 0x98], eax
fisub dword [ebp - 0x98]
fmulp st(1)
call fcn.00622df0
push eax
lea ecx, [ebp + 0x21a60]
push ecx
mov edx, dword [ebp - 0x98]
push edx
push 0x686350
lea eax, [ebp + 0x21828]
push eax
call fcn.00623a6b
add esp, 0x14
lea ecx, [ebp + 0x21828]
push ecx
jmp 0x4901a0
fstp st(0)
fstp st(0)
jmp 0x49019b
test edi, edi
jl 0x4901a9
push 0x67997c
push edi
push ebx
mov ecx, esi
call fcn.0045c880
cmp dword [esi + 0x116c], 0
je 0x4917be
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
mov ecx, dword [esi + 0x116c]
call fcn.004f7930
mov eax, 1
wait
jmp 0x4983e5
mov eax, dword [esi + 0x294]
test eax, eax
je 0x4901e4
push eax
mov ecx, esi
call fcn.00456c40
test ebx, ebx
jl 0x4917be
mov dword [ebp - 0x598], 1
mov dword [ebp - 0x590], ebx
lea ecx, [ebp - 0x598]
push ecx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
test eax, eax
jl 0x4917be
push 1
push eax
lea ecx, [esi + 0x5d0]
call fcn.00454680
mov eax, 1
wait
jmp 0x4983e5
cmp edx, 0x2721
ja 0x49837d
je 0x49834f
lea eax, [edx - 0x144e]
cmp eax, 0xc7
ja case.0x490260.5199
movzx eax, byte [eax + 0x498728]
jmp dword [eax*4 + 0x49858c]
push ebx
lea ecx, [esi + 0x508]
call fcn.004cb030
mov eax, 1
wait
jmp 0x4983e5
push 0
push ebx
mov ecx, esi
call fcn.00465020
mov eax, 1
wait
jmp 0x4983e5
mov edi, vtable.CProtection.0
mov dword [ebp - 0x264], edi
mov byte [ebp - 4], 6
mov byte [ebp + 0x21f70], 0xe1
mov byte [ebp + 0x21f71], 0x43
mov byte [ebp + 0x21f72], 0x2f
mov byte [ebp + 0x21f73], 7
mov byte [ebp + 0x21f74], 0xd3
mov byte [ebp + 0x21f75], 0x85
mov byte [ebp + 0x21f76], 0x34
mov byte [ebp + 0x21f77], 0x5b
mov byte [ebp + 0x21f78], 0xa7
mov byte [ebp + 0x21f79], 0
mov byte [ebp + 0x21f7a], 0xa1
mov byte [ebp + 0x21f7b], 0xd5
mov byte [ebp + 0x21f7c], 0xbb
mov byte [ebp + 0x21f7d], 0xf5
mov byte [ebp + 0x21f7e], 0x99
mov byte [ebp + 0x21f7f], 0xdc
mov byte [ebp + 0x21f80], 0xc4
mov byte [ebp + 0x21f81], 0x6c
mov byte [ebp + 0x21f82], 0x22
mov al, 0x84
mov byte [ebp + 0x21f83], al
mov byte [ebp + 0x21f84], 0x12
mov byte [ebp + 0x21f85], 0x17
mov byte [ebp + 0x21f86], 0x38
mov byte [ebp + 0x21f87], 0x7e
mov byte [ebp + 0x21f88], 2
mov byte [ebp + 0x21f89], 7
mov byte [ebp + 0x21f8a], 0xbd
mov byte [ebp + 0x21f8b], 0x91
mov byte [ebp + 0x21f8c], 0xa0
mov byte [ebp + 0x21f8d], 0xae
mov byte [ebp + 0x21f8e], al
mov byte [ebp + 0x21f8f], 0xc9
mov byte [ebp + 0x21f90], 0x90
mov byte [ebp + 0x21f91], 0xf9
mov byte [ebp + 0x21f92], 0x21
mov byte [ebp + 0x21f93], 0x52
mov byte [ebp + 0x21f94], 0xac
mov byte [ebp + 0x21f95], 0x14
mov byte [ebp + 0x21f96], 0xd0
mov byte [ebp + 0x21f97], 0xfc
mov byte [ebp + 0x21f98], 0xf6
mov byte [ebp + 0x21f99], 0x67
mov byte [ebp + 0x21f9a], 0x9a
mov byte [ebp + 0x21f9b], 0x8c
mov byte [ebp + 0x21f9c], 0x5e
mov byte [ebp + 0x21f9d], 0xfa
mov byte [ebp + 0x21f9e], 0x22
mov byte [ebp + 0x21f9f], 0x93
mov byte [ebp + 0x21fa0], 0
push 9
push str.506938841
push 0x30
lea ecx, [ebp + 0x21f70]
push ecx
lea ecx, [ebp - 0x264]
call fcn.00448e40
push 1
push 0
push 0
lea edx, [ebp + 0x21f70]
push edx
push 0x678dbc
call fcn.00411530
mov eax, dword [eax + 0x20]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [ebp - 4], 0
mov dword [ebp - 0x264], edi
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.00470e00
mov eax, 1
wait
jmp 0x4983e5
mov ecx, dword [str.__tdp_kceh_]
mov dword [ebp + 0x21a80], ecx
mov edx, dword [0x686318]
mov dword [ebp + 0x21a84], edx
mov eax, dword [0x68631c]
mov dword [ebp + 0x21a88], eax
lea eax, [ebp + 0x21a80]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x490490
sub eax, edx
xor ecx, ecx
jmp 0x4904a0
cmp ecx, eax
jge 0x4904b9
mov edx, eax
sub edx, ecx
mov dl, byte [ebp + edx + 0x21a7f]
mov byte [ebp + ecx + 0x21a8c], dl
inc ecx
jmp 0x4904a0
mov byte [ebp + 0x21a8c], 0x43
mov byte [ebp + 0x21a91], 0x55
mov byte [ebp + 0x21a96], 0x4d
mov byte [ebp + 0x21a95], 0x56
mov byte [ebp + 0x21a97], 0
mov dword [ebp - 0x31c], 0x10
lea eax, [ebp - 0x31c]
push eax
lea ecx, [ebp + 0x21a38]
push ecx
xor edi, edi
push edi
push edi
lea edx, [ebp + 0x21a8c]
push edx
mov eax, dword [0x75dbe4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4906f7
lea eax, [ebp + 0x21a38]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x490520
sub eax, edx
cmp eax, 2
jne 0x4906f7
lea ecx, [ebp + 0x1fd2c]
call fcn.004011c0
mov byte [ebp - 4], 7
mov eax, dword [0x75dc58]
cmp eax, edi
jne 0x49054f
mov eax, 0x75dc5c
push edi
push str.IDMGrHlp.exe
push eax
push 0x678de0
lea ecx, [ebp + 0x1fd2c]
call fcn.00402310
mov eax, dword [ebp + 0x1fd2c]
cmp eax, edi
jne 0x490576
lea eax, [ebp + 0x1fd30]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4906e8
mov dword [ebp - 0x26c], edi
mov dword [ebp - 0x274], edi
mov dword [ebp - 0x2e4], edi
mov eax, dword [ebp + 0x1fd2c]
cmp eax, edi
jne 0x4905a8
lea eax, [ebp + 0x1fd30]
lea ecx, [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x274]
push edx
lea ecx, [ebp - 0x26c]
push ecx
push eax
call fcn.004ce040
add esp, 0x10
test eax, eax
je 0x4905e8
mov eax, dword [ebp - 0x26c]
cmp eax, 6
jl 0x4906e8
jne 0x4905e8
cmp dword [ebp - 0x274], 0x11
jl 0x4906e8
push 0x44
push edi
lea edx, [ebp - 0x624]
push edx
call fcn.00621270
add esp, 0xc
mov dword [ebp - 0x624], 0x44
mov dword [ebp - 0x5f8], 0x81
xor eax, eax
mov word [ebp - 0x5f4], ax
lea ecx, [ebp - 0x154]
call fcn.004024f0
mov byte [ebp - 4], 8
mov eax, dword [esi + 0x20]
cdq
push edx
push eax
mov ecx, dword [esi + 0x17dc]
push ecx
push str.___s___ch__ld__w__I64d
lea edx, [ebp - 0x154]
push edx
call fcn.00402f60
add esp, 0x14
inc dword [esi + 0x17dc]
lea ecx, [ebp + 0x1fc60]
call fcn.004011c0
mov byte [ebp - 4], 9
mov eax, dword [ebp + 0x1fd2c]
cmp eax, edi
jne 0x49066c
lea eax, [ebp + 0x1fd30]
push edi
push eax
mov eax, dword [ebp - 0x154]
push eax
lea ecx, [ebp + 0x1fc60]
call fcn.004021a0
mov eax, dword [ebp + 0x1fc60]
cmp eax, edi
jne 0x490690
lea eax, [ebp + 0x1fc64]
lea ecx, [ebp - 0x438]
push ecx
lea edx, [ebp - 0x624]
push edx
push edi
push edi
push 0x30
push 1
push edi
push edi
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, edi
je 0x4906ca
mov eax, dword [ebp - 0x434]
push eax
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
mov ecx, dword [ebp - 0x438]
push ecx
call esi
mov byte [ebp - 4], 8
lea ecx, [ebp + 0x1fc60]
call fcn.00401210
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x154]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x1fd2c]
call fcn.00401210
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.00481810
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.0045ec30
mov eax, 1
wait
jmp 0x4983e5
mov dword [ebp - 0x30c], 4
lea edx, [ebp - 0x30c]
push edx
lea eax, [ebp - 0x3c4]
push eax
push 0
push 0
push str.bVP9Ch
mov ecx, dword [0x75dbe4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x490765
push ebx
push 0
call fcn.0047af60
add esp, 8
mov eax, 1
wait
jmp 0x4983e5
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x2ec], edx
mov ebx, 4
push ebx
lea eax, [ebp - 0x2ec]
push eax
push ebx
push 0
push str.nExpDt
mov ecx, dword [0x75dbe4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea eax, [ebx - 3]
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.00458030
mov eax, 1
wait
jmp 0x4983e5
mov edi, vtable.CProtection.0
mov dword [ebp - 0x1f8], edi
mov byte [ebp - 4], 0xa
mov byte [ebp + 0x21f34], 0xe1
mov byte [ebp + 0x21f35], 0x43
mov byte [ebp + 0x21f36], 0x2f
mov byte [ebp + 0x21f37], 7
mov byte [ebp + 0x21f38], 0xd3
mov byte [ebp + 0x21f39], 0x85
mov bl, 0x34
mov byte [ebp + 0x21f3a], bl
mov byte [ebp + 0x21f3b], 0x5b
mov byte [ebp + 0x21f3c], 0xa7
mov byte [ebp + 0x21f3d], 0
mov byte [ebp + 0x21f3e], 0xa1
mov byte [ebp + 0x21f3f], 0xd5
mov byte [ebp + 0x21f40], 0xbb
mov byte [ebp + 0x21f41], 0xf5
mov byte [ebp + 0x21f42], 0x99
mov byte [ebp + 0x21f43], 0xdc
mov dl, 0xc4
mov byte [ebp + 0x21f44], dl
mov byte [ebp + 0x21f45], 0x6c
mov byte [ebp + 0x21f46], 0x22
mov al, 0x84
mov byte [ebp + 0x21f47], al
mov byte [ebp + 0x21f48], 0x12
mov byte [ebp + 0x21f49], 0x17
mov byte [ebp + 0x21f4a], 0x38
mov byte [ebp + 0x21f4b], 0x7e
mov byte [ebp + 0x21f4c], 2
mov byte [ebp + 0x21f4d], 7
mov byte [ebp + 0x21f4e], 0xbd
mov byte [ebp + 0x21f4f], 0x91
mov byte [ebp + 0x21f50], 0xa0
mov byte [ebp + 0x21f51], 0xae
mov byte [ebp + 0x21f52], al
mov cl, 0xc9
mov byte [ebp + 0x21f53], cl
mov byte [ebp + 0x21f54], 0x99
mov byte [ebp + 0x21f55], 0xb2
mov byte [ebp + 0x21f56], cl
mov byte [ebp + 0x21f57], bl
mov byte [ebp + 0x21f58], 1
mov byte [ebp + 0x21f59], 0x36
mov byte [ebp + 0x21f5a], 0xda
mov byte [ebp + 0x21f5b], 0xb6
mov byte [ebp + 0x21f5c], 0xee
mov byte [ebp + 0x21f5d], 0xda
mov byte [ebp + 0x21f5e], al
mov byte [ebp + 0x21f5f], 0xe7
mov byte [ebp + 0x21f60], 0x59
mov byte [ebp + 0x21f61], 0x22
mov byte [ebp + 0x21f62], 0x9f
mov byte [ebp + 0x21f63], 0xea
mov byte [ebp + 0x21f64], dl
mov byte [ebp + 0x21f65], 0xd1
mov byte [ebp + 0x21f66], 0x74
mov byte [ebp + 0x21f67], 0x17
mov byte [ebp + 0x21f68], 0xa5
mov byte [ebp + 0x21f69], 0x56
mov byte [ebp + 0x21f6a], 0x76
mov byte [ebp + 0x21f6b], 0x78
mov byte [ebp + 0x21f6c], 0
push 9
push str.506938841
push 0x38
lea edx, [ebp + 0x21f34]
push edx
lea ecx, [ebp - 0x1f8]
call fcn.00448e40
inc dword [esi + 0x29c]
push 1
push 0
push 0
lea eax, [ebp + 0x21f34]
push eax
push 0x678dbc
call fcn.00411530
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [ebp - 4], 0
mov dword [ebp - 0x1f8], edi
mov eax, 1
wait
jmp 0x4983e5
test ebx, ebx
je 0x4909b6
mov ecx, ebx
call fcn.005c1100
mov eax, 1
wait
jmp 0x4983e5
test bl, 1
je 0x490a22
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x75f5d8
call fcn.004027e0
mov byte [ebp - 4], 0xb
push 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xbd4]
call fcn.0052fca0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xbd4]
call fcn.005f6e33
cmp eax, 1
jne 0x490a13
mov ecx, esi
call fcn.004846f0
mov ecx, dword [esi + 0x198]
call fcn.004393a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xbd4]
call fcn.00462050
mov ebx, 4
test byte [ebp - 0x14], bl
je 0x490ad8
mov ecx, esi
call fcn.004846f0
push 0
mov ecx, esi
call fcn.005f5caa
mov eax, dword [0x75e280]
test eax, eax
je 0x490a67
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x490a67
push 0
push 0
push 0x10
mov edx, dword [0x75e280]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x75f5dc
call fcn.004027e0
mov byte [ebp - 4], 0xd
push 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x7f0]
call fcn.0052fca0
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x14]
mov ecx, eax
and ecx, 8
mov dword [ebp - 0x77c], ecx
test al, 0x10
je 0x490aae
mov dword [ebp - 0x778], 0x14
test byte [ebp - 0x14], 0x20
je 0x490abe
mov dword [ebp - 0x778], 0x24
lea ecx, [ebp - 0x7f0]
call fcn.005f6e33
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x7f0]
call fcn.00462050
test byte [ebp - 0x14], 2
je 0x490bc6
mov byte [ebp - 0x32], 0
mov dword [ebp - 0x44], 0
lea ecx, [ecx]
mov ecx, dword [esi + 0x234]
mov edx, dword [ebp - 0x44]
cmp edx, dword [ecx + 8]
jge 0x490b5e
mov eax, edx
push eax
call fcn.004cf7d0
mov edi, dword [eax]
cmp dword [edi + 0x954], 1
jne 0x490b24
cmp dword [edi + 8], 0
je 0x490b20
mov ecx, edi
call fcn.005c1550
jmp 0x490b24
mov byte [ebp - 0x32], 1
xor ecx, ecx
cmp dword [edi + 8], ecx
je 0x490b59
mov dword [edi + 8], ecx
cmp dword [edi + 0x34c], ecx
jne 0x490b48
mov eax, dword [edi + 0x354]
cmp eax, 0x40
je 0x490b48
cmp eax, 0x800
jne 0x490b59
cmp dword [edi + 0x340], ecx
je 0x490b59
mov edx, dword [edi + 0x340]
mov dword [edx + 8], ecx
inc dword [ebp - 0x44]
jmp 0x490af0
cmp byte [ebp - 0x32], 0
jne 0x490b76
mov ecx, esi
call fcn.00487790
mov eax, 1
wait
jmp 0x4983e5
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x75f5d4
call fcn.004027e0
mov byte [ebp - 4], 0xf
push ebx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xad8]
call fcn.0052fca0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xad8]
call fcn.005f6e33
cmp eax, 1
jne 0x490bb7
mov ecx, esi
call fcn.00487790
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xad8]
call fcn.00462050
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.0045f710
mov ebx, eax
test ebx, ebx
jl case.0x490260.5292
push ebx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edi, dword [eax]
push ebx
mov ecx, dword [esi + 0x234]
call fcn.0043c850
cmp dword [edi + 0x958], 0
je 0x490c1c
push edi
mov ecx, 0x75e360
call fcn.00438670
mov eax, 1
wait
jmp 0x4983e5
mov byte [ebp - 4], 0x11
wait
push 1
mov ecx, edi
call fcn.004212d0
wait
mov dword [ebp - 4], 0
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl case.0x490260.5292
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov esi, dword [eax]
test esi, esi
je case.0x490260.5292
lea ecx, [ebp + 0x1fc78]
call fcn.004011c0
mov byte [ebp - 4], 0x13
mov eax, dword [0x75dd28]
push eax
mov ecx, dword [0x75f4dc]
push ecx
lea ecx, [ebp + 0x1fc30]
call fcn.0045eea0
mov byte [ebp - 4], 0x14
lea edx, [ebp + 0x1fc78]
push edx
mov ecx, esi
call fcn.005b9000
mov eax, dword [ebp + 0x1fc78]
test eax, eax
mov ecx, eax
jne 0x490cbb
lea ecx, [ebp + 0x1fc7c]
mov eax, dword [ebp + 0x1fc30]
test eax, eax
jne 0x490ccb
lea eax, [ebp + 0x1fc34]
push 0x50000
push ecx
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.00473ae0
add esp, 0x10
mov byte [ebp - 4], 0x13
lea ecx, [ebp + 0x1fc30]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x1fc78]
call fcn.00401210
mov eax, 1
wait
jmp 0x4983e5
mov eax, dword [esi + 0x358]
test eax, eax
je case.0x490260.5292
push eax
mov ecx, esi
call fcn.0045f710
mov dword [ebp - 0x38], eax
test eax, eax
jl case.0x490260.5292
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
test eax, eax
je case.0x490260.5292
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl case.0x490260.5292
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edi, dword [eax]
mov dword [ebp - 0x15c], edi
test edi, edi
je case.0x490260.5292
mov dword [ebp - 0x284], 1
mov ebx, dword [ebp - 0x14]
mov eax, dword [edi + 0x3c]
push eax
mov ecx, dword [ebx + 0x3c]
push ecx
mov edx, dword [edi + 0x20]
push edx
mov eax, dword [ebx + 0x20]
push eax
mov ecx, 0x75e330
call fcn.004343a0
mov eax, dword [edi + 0x13c]
mov ecx, dword [ebx + 0x13c]
mov edx, dword [ebx + 0x138]
push eax
push ecx
mov eax, dword [edi + 0x138]
push eax
push edx
mov ecx, 0x75e340
call fcn.004347d0
mov eax, dword [edi + 0x16c]
mov ecx, dword [ebx + 0x16c]
mov edx, dword [ebx + 0xe8]
push eax
push ecx
mov eax, dword [edi + 0xe8]
push eax
push edx
mov ecx, 0x75e350
call fcn.004347d0
cmp byte [esi + 0x17d4], 0
jne 0x4910bb
cmp dword [ebx + 0x50c], 0
jg 0x4910bb
jl 0x490e0c
cmp dword [ebx + 0x508], 0
ja 0x4910bb
cmp dword [ebx + 0x34c], 0
jne 0x490e21
cmp dword [ebx + 0x354], 0x800
jne 0x490e2e
cmp dword [ebx + 0x340], 0
jne 0x4910bb
lea esi, [ebx + 0x54]
mov ecx, esi
call fcn.004011e0
lea edx, [eax + 2]
jmp 0x490e40
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x490e40
sub eax, edx
sar eax, 1
je 0x490e60
mov ecx, esi
call fcn.004011e0
push eax
mov ecx, edi
call fcn.005be330
cmp dword [ebx + 0x60], 0
je 0x490e71
mov ecx, dword [ebx + 0x60]
push ecx
mov ecx, edi
call fcn.005b6eb0
mov edx, dword [ebx + 0x4fc]
mov dword [edi + 0x4fc], edx
mov eax, dword [ebx + 0x334]
mov dword [edi + 0x334], eax
mov cl, byte [ebx + 0x36b]
mov byte [edi + 0x36b], cl
lea ecx, [ebx + 0x94]
lea edx, [edi + 0x94]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x490ea1
mov dl, byte [ebx + 0x1b3]
mov byte [edi + 0x1b3], dl
mov al, byte [ebx + 0x36c]
mov byte [edi + 0x36c], al
mov ecx, dword [0x75e260]
test ecx, ecx
je 0x490efd
cmp dword [edi + 0x4fc], 1
je 0x490efd
push 1
mov edx, dword [edi + 0x4f8]
push edx
call fcn.00519170
mov eax, dword [edi + 0x4f8]
push eax
mov ecx, dword [edi + 0x4fc]
push ecx
mov ecx, dword [0x75e260]
call fcn.00519120
push 0
push 0
mov edx, dword [edi + 0x4f8]
push edx
lea ecx, [edi + 0x20]
call fcn.005d29e0
mov byte [ebp - 4], 0x15
wait
mov byte [ebp - 4], 0x16
wait
mov ecx, ebx
call fcn.005be430
wait
mov dword [ebp - 4], 0x15
jmp 0x490f3e
mov ebx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x4d0], 1
mov eax, dword [esi + 0x4f8]
mov dword [ebp - 0x4c8], eax
lea ecx, [ebp - 0x4d0]
push ecx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [ebx + 0x1fc]
call fcn.004015a0
test eax, eax
jl 0x490f8a
push 0
push eax
push 0x1008
mov ecx, dword [ebx + 0x1fc]
call fcn.004015a0
mov ecx, dword [0x75e260]
test ecx, ecx
je 0x490fa2
push 0
mov edx, dword [esi + 0x4f8]
push edx
call fcn.00519170
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebx + 0x234]
call fcn.0043c850
cmp dword [esi + 0x958], 0
je 0x490fcf
push esi
mov ecx, 0x75e360
call fcn.00438670
wait
mov dword [ebp - 4], 0
jmp 0x49101f
mov byte [ebp - 4], 0x18
wait
push 1
mov ecx, esi
call fcn.004212d0
wait
mov dword [ebp - 4], 0x15
wait
mov dword [ebp - 4], 0
jmp 0x49101f
mov esi, dword [ebp - 0x24]
lea ebx, [esi + 0x5d0]
push 1
push 1
push edi
mov ecx, ebx
call fcn.004c9dc0
mov ecx, dword [esi + 0x20]
push ecx
mov ecx, edi
call fcn.005b74c0
mov ecx, edi
call fcn.005c1100
mov eax, dword [esi + 0x294]
test eax, eax
je 0x491058
push eax
mov ecx, esi
call fcn.00456c40
mov dword [ebp - 0x458], 1
mov edx, dword [edi + 0x4f8]
mov dword [ebp - 0x450], edx
lea eax, [ebp - 0x458]
push eax
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
xor edi, edi
cmp eax, edi
jl 0x491097
push 1
push eax
mov ecx, ebx
call fcn.00454680
mov dword [esi + 0x358], edi
push 0x67997c
lea ecx, [esi + 0x35c]
call fcn.0054f750
mov dword [ebp - 0x284], edi
mov esi, dword [ebp - 0x24]
jmp 0x49163e
mov eax, dword [edi + 0x44]
mov ebx, 4
cmp eax, ebx
je 0x491481
cmp eax, 5
je 0x491481
cmp dword [edi + 0x38], 0
je 0x4910fa
mov edx, dword [edi + 0x38]
mov eax, edx
lea ecx, [eax + 1]
mov dword [ebp - 0x38], ecx
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4910e5
sub eax, dword [ebp - 0x38]
je 0x4910fa
push edx
mov ecx, dword [ebp - 0x14]
call fcn.005b7c50
lea ecx, [ebp - 0x70]
call fcn.004024f0
mov byte [ebp - 4], 0x1b
push 0
lea edx, [ebp - 0x70]
push edx
lea ecx, [edi + 0x20]
call fcn.005928c0
lea ecx, [ebp + 0x15b50]
call fcn.0054c120
mov byte [ebp - 4], 0x1c
mov eax, dword [edi + 0x18c]
push eax
mov ecx, dword [ebp - 0x70]
push ecx
lea ecx, [ebp + 0x15b50]
call fcn.0054d9b0
test eax, eax
jne 0x491163
mov byte [ebp - 4], 0x1b
lea ecx, [ebp + 0x15b50]
call fcn.0054c160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x70]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
push 1
mov edx, dword [ebp - 0x14]
push edx
lea ecx, [ebp + 0x15b50]
call fcn.0054d060
test eax, eax
jne 0x49113d
mov eax, dword [edi + 0x30]
push eax
mov ecx, dword [edi + 0x2c]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.005b75f0
mov edx, dword [edi + 0x3c]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x20
call fcn.004536e0
mov eax, dword [edi + 0x1b8]
test eax, eax
je 0x491213
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4911a8
sub eax, edx
je 0x4911dd
mov eax, dword [edi + 0x1b8]
push eax
push 0x678ea8
mov ecx, dword [ebp - 0x14]
add ecx, 0x1b8
push ecx
call fcn.00402f60
add esp, 0xc
mov edx, dword [ebp - 0x14]
mov byte [edx + 0x1b5], 1
jmp 0x491213
cmp byte [edi + 0x1b5], 0
je 0x491213
cmp byte [edi + 0x367], 0
je 0x491213
push 0x67997c
mov ecx, dword [ebp - 0x14]
add ecx, 0x1b8
call fcn.0054f750
mov eax, dword [ebp - 0x14]
mov byte [eax + 0x1b5], 1
mov byte [eax + 0x367], 1
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x34c], 0
jne 0x49122f
cmp dword [eax + 0x354], 0x800
jne 0x49145e
cmp dword [eax + 0x340], 0
je 0x49145e
lea ecx, [ebp + 0xada8]
call fcn.0054c120
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x9c]
call fcn.004024f0
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x34c], ebx
jne 0x491287
mov eax, dword [edi + 0x33c]
push 1
lea ecx, [ebp - 0x9c]
push ecx
push 0x67e840
push eax
call fcn.0046f6c0
add esp, 0x10
mov ebx, dword [ebp - 0x14]
jmp 0x4912ef
cmp dword [edi + 0x34c], 8
jne 0x4912c8
mov eax, dword [edi + 0xf0]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4912a0
sub eax, edx
je 0x4912c8
mov edx, dword [edi + 0xf0]
push edx
push 0x678ea8
lea eax, [ebp - 0x9c]
push eax
call fcn.00402f60
mov ebx, dword [ebp - 0x14]
jmp 0x4912ec
mov ebx, dword [ebp - 0x14]
cmp dword [ebx + 0x354], 0x800
jne 0x4912ef
mov ecx, dword [ebp - 0x70]
push ecx
push 0x678ea8
lea edx, [ebp - 0x9c]
push edx
call fcn.00402f60
add esp, 0xc
mov eax, dword [edi + 0x18c]
push eax
mov ecx, dword [ebp - 0x9c]
push ecx
lea ecx, [ebp + 0xada8]
call fcn.0054d9b0
test eax, eax
je 0x49143e
push 1
mov edx, dword [ebx + 0x340]
push edx
lea ecx, [ebp + 0xada8]
call fcn.0054d060
test eax, eax
jne 0x49143e
mov eax, dword [ebx + 0x340]
mov dword [ebp - 0x60], eax
cmp dword [edi + 0x38], 0
je 0x49135b
mov edx, dword [edi + 0x38]
mov eax, edx
lea ecx, [eax + 1]
mov dword [ebp - 0x38], ecx
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x491346
sub eax, dword [ebp - 0x38]
je 0x49135b
push edx
mov ecx, dword [ebp - 0x60]
call fcn.005b7c50
mov ecx, dword [ebp - 0x60]
add ecx, 0x20
mov dword [ebp - 0x38], ecx
mov edx, dword [edi + 0x3c]
push edx
call fcn.004536e0
mov eax, dword [edi + 0x3c0]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x491376
sub eax, edx
je 0x49139f
mov eax, dword [edi + 0x3c0]
push eax
push 0x678ea8
mov ecx, dword [ebp - 0x60]
add ecx, 0x3c0
push ecx
call fcn.00402f60
add esp, 0xc
mov eax, dword [edi + 0x3b4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4913a8
sub eax, edx
je 0x4913d0
mov edx, dword [edi + 0x3b4]
push edx
push 0x678ea8
mov eax, dword [ebp - 0x60]
add eax, 0x3b4
push eax
call fcn.00402f60
add esp, 0xc
mov eax, dword [edi + 0x3b8]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4913e0
sub eax, edx
je 0x491409
mov ecx, dword [edi + 0x3b8]
push ecx
push 0x678ea8
mov edx, dword [ebp - 0x60]
add edx, 0x3b8
push edx
call fcn.00402f60
add esp, 0xc
mov eax, dword [ebx + 0x354]
cmp eax, 0x10
je 0x49141b
cmp eax, 0x800
jne 0x49142c
mov byte [ebx + 0x1b2], 1
mov eax, dword [ebp - 0x60]
mov byte [eax + 0x1b2], 1
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + 0x4f8]
push edx
mov ecx, dword [ebp - 0x38]
call fcn.005d0770
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x9c]
call fcn.00402560
mov byte [ebp - 4], 0x1c
lea ecx, [ebp + 0xada8]
call fcn.0054c160
jmp 0x491461
mov ebx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp + 0x15b50]
call fcn.0054c160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x70]
call fcn.00402560
jmp 0x49153d
mov eax, dword [edi + 0x20]
push eax
mov ebx, dword [ebp - 0x14]
lea ecx, [ebx + 0x20]
call fcn.00453760
mov eax, dword [edi + 0x34]
mov dword [ebx + 0x34], eax
mov ecx, dword [edi + 0x3d0]
push ecx
push 0x678ea8
lea edx, [ebx + 0x3d0]
push edx
call fcn.00402f60
add esp, 0xc
cmp dword [edi + 0x24], 0
je 0x4914d7
mov edx, dword [edi + 0x24]
mov eax, edx
lea ecx, [eax + 1]
mov dword [ebp - 0x38], ecx
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4914c2
sub eax, dword [ebp - 0x38]
je 0x4914d7
push edx
lea ecx, [ebx + 0x20]
call fcn.004537d0
mov eax, dword [edi + 0x1bc]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4914e0
sub eax, edx
je 0x491506
mov edx, dword [edi + 0x1bc]
push edx
push 0x678ea8
lea eax, [ebx + 0x1bc]
push eax
call fcn.00402f60
add esp, 0xc
cmp dword [edi + 0x38], 0
je 0x49152c
mov edx, dword [edi + 0x38]
mov eax, edx
lea ecx, [eax + 1]
mov dword [ebp - 0x38], ecx
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x491517
sub eax, dword [ebp - 0x38]
je 0x49152c
push edx
lea ecx, [ebx + 0x20]
call fcn.00453660
push 0
mov edx, dword [edi + 0x28]
push edx
lea ecx, [ebx + 0x20]
call fcn.00426be0
mov ebx, dword [ebp - 0x14]
push 0
call fcn.00624331
mov dword [ebx + 0x160], eax
mov eax, dword [edi + 0x3bc]
mov dword [ebx + 0x3bc], eax
mov eax, dword [edi + 0x3b8]
mov ecx, dword [edi + 0x3b4]
mov edx, dword [edi + 0x138]
push eax
push ecx
mov eax, dword [edi + 0x178]
push eax
mov eax, dword [edi + 0x174]
push eax
mov eax, dword [edi + 0x170]
push eax
mov eax, dword [edi + 0x16c]
push eax
mov eax, dword [edi + 0x168]
push eax
mov eax, dword [edi + 0xe8]
push eax
mov eax, dword [edi + 0x144]
push eax
mov eax, dword [edi + 0x140]
push eax
mov eax, dword [edi + 0x13c]
push eax
push edx
push ebx
call fcn.00466960
add esp, 0x38
mov eax, dword [edi + 0x3c0]
lea ecx, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4915c0
sub eax, ecx
je 0x4915e6
mov ecx, dword [edi + 0x3c0]
push ecx
push 0x678ea8
lea edx, [ebx + 0x3c0]
push edx
call fcn.00402f60
add esp, 0xc
mov eax, dword [ebx + 0x4f8]
push eax
lea ecx, [ebx + 0x20]
call fcn.005d0770
mov dword [esi + 0x358], 0
push 0x67997c
lea ecx, [esi + 0x35c]
call fcn.0054f750
cmp byte [esi + 0x17d4], 0
je 0x491626
mov ecx, dword [ebx + 0x4f8]
push ecx
push 0x1468
jmp 0x491632
mov edx, dword [ebx + 0x4f8]
push edx
push 0x1431
push 0x111
mov ecx, esi
call fcn.0042ec10
cmp dword [esi + 0x17d0], 0
je 0x49167b
mov eax, dword [esi + 0x17d0]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x491671
push 0
push 0
push 0x10
mov edx, dword [esi + 0x17d0]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [esi + 0x17d0], 0
mov eax, dword [ebp - 0x284]
wait
jmp 0x4983e5
test ebx, ebx
je case.0x490260.5292
mov ecx, dword [ebx + 0x20]
push ecx
lea ecx, [ebp - 0x84]
call fcn.004030a0
mov byte [ebp - 4], 0x1f
lea edx, [ebp - 0x84]
push edx
mov eax, dword [ebx + 0x20]
push eax
call fcn.0047d130
mov ecx, dword [ebp - 0x84]
push ecx
call fcn.00453f40
add esp, 0xc
mov esi, eax
cmp esi, 3
je 0x4916f0
push 3
mov edx, dword [ebp - 0x84]
push edx
call fcn.00453fd0
add esp, 8
test esi, esi
je 0x4916f0
push 0
push 0
push 0
push 0
push ebx
push 0x484090
call fcn.006005d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x84]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
test ebx, ebx
je case.0x490260.5292
mov eax, dword [ebx + 0x20]
push eax
lea ecx, [ebp - 0x64]
call fcn.004030a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x64]
push ecx
mov edx, dword [ebx + 0x20]
push edx
call fcn.0047d130
mov eax, dword [ebp - 0x64]
push eax
call fcn.00453f40
add esp, 0xc
cmp eax, 3
je 0x4917b2
test eax, eax
jne 0x4917d8
lea ecx, [ebp - 0x108]
call fcn.004024f0
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x64]
push ecx
mov edx, dword [0x75f7c4]
push edx
lea eax, [ebp - 0x108]
push eax
call fcn.00402f60
add esp, 0xc
push 0x50001
mov ecx, dword [0x75f734]
push ecx
mov edx, dword [ebp - 0x108]
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.00473680
add esp, 0x10
cmp eax, 1
je 0x4917c9
push ebx
mov ecx, 0x75e360
call fcn.00438670
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x108]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x64]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x108]
call fcn.00402560
push 2
mov eax, dword [ebp - 0x64]
push eax
call fcn.00453fd0
add esp, 8
push 0
push 0
push 0
push 0
push ebx
push 0x484050
call fcn.006005d0
jmp 0x4917b2
cmp edx, 0x14cd
jne 0x4918ee
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl case.0x490260.5292
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov esi, dword [eax]
test esi, esi
je case.0x490260.5292
test dword [esi + 0x17c], 0x100000
jne 0x4918f8
mov edx, dword [esi + 0x148]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x491848
sub eax, edi
je 0x4918f8
push 0x5c
push edx
call fcn.00623330
add esp, 8
mov ebx, eax
test ebx, ebx
je 0x49186b
inc ebx
jmp 0x491871
mov ebx, dword [esi + 0x148]
push 0xb
push str.firefox.exe
push ebx
call fcn.006282cf
add esp, 0xc
test eax, eax
je 0x4918c1
push 0xa
push str.chrome.exe
push ebx
call fcn.006255fd
add esp, 0xc
test eax, eax
je 0x4918c1
push 0xa
push str.msedge.exe
push ebx
call fcn.006255fd
add esp, 0xc
test eax, eax
je 0x4918c1
push 0x13
push str.MicrosoftEdgeCP.exe
push ebx
call fcn.006255fd
add esp, 0xc
test eax, eax
jne 0x4918f8
mov eax, dword [esi + 0x4f8]
cmp dword [0x752e3c], eax
je case.0x490260.5292
mov dword [0x752e3c], eax
push 0xc
push esi
call fcn.0043fe50
add esp, 8
mov eax, 1
wait
jmp 0x4983e5
mov esi, ebx
test ebx, ebx
je case.0x490260.5292
push 0
call fcn.0046db30
add esp, 4
test eax, eax
je 0x491962
push 0x50030
mov ecx, dword [0x75f308]
push ecx
mov edx, dword [0x75f770]
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.00473680
add esp, 0x10
push 0
push 0
push 0
push 0
push 0
push fcn.0047ce40
call fcn.006005d0
cmp dword [ebp + 0x22080], 0x14de
jne 0x4917be
push esi
mov ecx, 0x75e360
call fcn.00438670
mov eax, 1
wait
jmp 0x4983e5
mov eax, dword [esi + 0x17c]
test eax, 0x1000000
je 0x491973
test al, 8
jne 0x49193c
lea ecx, [ebp - 0x7c]
call fcn.004024f0
mov byte [ebp - 4], 0x22
mov eax, dword [esi + 0x20]
push eax
lea ecx, [ebp - 0x80]
call fcn.004030a0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x80]
push ecx
mov edx, dword [esi + 0x20]
push edx
call fcn.0047d130
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [0x75f738]
push ecx
lea edx, [ebp - 0x7c]
push edx
call fcn.00402f60
add esp, 0x14
cmp dword [ebp + 0x22080], 0x14de
jne 0x491add
lea ecx, [ebp - 0xec]
call fcn.004024f0
mov byte [ebp - 4], 0x24
lea edx, [esi + 0x150]
mov eax, dword [edx]
lea edi, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4919e0
sub eax, edi
je 0x4919f9
push edx
lea ecx, [ebp - 0xec]
call fcn.00405990
jmp 0x491a21
mov edx, dword [esi + 0x134]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x491a04
sub eax, edi
je 0x491a21
lea eax, [ebp - 0xec]
push eax
push edx
mov ecx, 0x75dca0
call fcn.00430e80
lea ecx, [ebp - 0x16c]
call fcn.004024f0
mov bl, 0x25
mov byte [ebp - 4], bl
mov edi, dword [ebp - 0xec]
mov eax, edi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x491a40
sub eax, edx
mov eax, edi
jne 0x491a50
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [0x75f3c4]
push ecx
lea edx, [ebp - 0x16c]
push edx
call fcn.00402f60
add esp, 0xc
lea ecx, [ebp - 0x164]
call fcn.004024f0
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0x16c]
push ecx
push str._s_r_n_r_n_s
lea edx, [ebp - 0x164]
push edx
call fcn.00402f60
mov eax, dword [ebp - 0x164]
push eax
push 0x678ea8
lea ecx, [ebp - 0x7c]
push ecx
call fcn.00402f60
add esp, 0x1c
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x164]
call fcn.00402560
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x16c]
call fcn.00402560
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xec]
call fcn.00402560
mov eax, 0x678d88
jmp 0x491ae2
mov eax, dword [0x75f734]
push 0x50001
push eax
mov edx, dword [ebp - 0x7c]
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.00473680
add esp, 0x10
cmp eax, 1
je 0x491b3a
cmp dword [ebp + 0x22080], 0x14de
jne 0x491b17
push esi
mov ecx, 0x75e360
call fcn.00438670
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x80]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x7c]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
push 1
mov eax, dword [ebp - 0x80]
push eax
call fcn.00453fd0
add esp, 8
push 0
push 0
push 0
push 0
push esi
cmp dword [ebp + 0x22080], 0x14de
jne 0x491b69
push 0x484010
call fcn.006005d0
jmp 0x491b17
push 0x484000
call fcn.006005d0
jmp 0x491b17
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl case.0x490260.5292
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov ebx, dword [eax]
test ebx, ebx
je case.0x490260.5292
lea ecx, [ebp + 0x1fd38]
call fcn.004011c0
mov byte [ebp - 4], 0x27
lea ecx, [ebp + 0x1fd38]
push ecx
mov ecx, ebx
call fcn.005b9000
cmp dword [esi + 0x358], 0
jle 0x491c9d
cmp dword [ebp + 0x22080], 0x1469
jne 0x491c09
push 0
mov edx, dword [0x75f4d0]
push edx
mov eax, dword [0x75f4d4]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.00473680
add esp, 0x10
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x1fd38]
call fcn.00401210
mov eax, 1
wait
jmp 0x4983e5
cmp dword [ebx + 0xc8], 0
je 0x491c83
mov ebx, dword [ebx + 0xc8]
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x491c21
sub eax, edx
je 0x491c83
push ebx
lea ecx, [ebp + 0x1fc00]
call fcn.004070a0
mov byte [ebp - 4], 0x28
mov eax, dword [ebp + 0x1fd38]
test eax, eax
mov ecx, eax
jne 0x491c4e
lea ecx, [ebp + 0x1fd3c]
mov eax, dword [ebp + 0x1fc00]
test eax, eax
jne 0x491c5e
lea eax, [ebp + 0x1fc04]
push 0x50030
push ecx
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.00473ae0
add esp, 0x10
mov byte [ebp - 4], 0x27
lea ecx, [ebp + 0x1fc00]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x1fd38]
call fcn.00401210
mov eax, 1
wait
jmp 0x4983e5
mov ecx, dword [ebx + 0x4f8]
mov dword [esi + 0x358], ecx
cmp dword [ebp + 0x22080], 0x1469
jne 0x491cc4
mov edx, dword [ebx + 0x4f8]
push edx
lea ecx, [ebx + 0x20]
call fcn.005d0ee0
lea edi, [esi + 0x35c]
mov dword [ebp - 0x44], edi
push 0x67997c
mov ecx, edi
call fcn.0054f750
mov eax, dword [ebx + 0x138]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x491ce2
sub eax, edx
je 0x491d07
mov eax, dword [ebx + 0x138]
push eax
push 0x678ea8
push edi
call fcn.00402f60
add esp, 0xc
jmp 0x491ddd
cmp byte [ebx + 0x1a6], 0
je 0x491d36
cmp byte [ebx + 0x1a7], 0
je 0x491d36
cmp dword [ebx + 0x38], 0
je 0x491d36
mov ecx, dword [ebx + 0x38]
push ecx
push 0x678ea8
push edi
call fcn.00402f60
add esp, 0xc
jmp 0x491ddd
cmp byte [ebx + 0x35f], 0
je 0x491d47
push 0
push edi
jmp 0x491dd5
cmp byte [ebx + 0x1a9], 0
je 0x491d82
mov eax, dword [ebx + 0xe8]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x491d60
sub eax, edx
je 0x491d82
mov edx, dword [ebx + 0xe8]
push edx
push 0x678ea8
push edi
call fcn.00402f60
add esp, 0xc
jmp 0x491ddd
mov eax, dword [ebx + 0x17c]
test al, 0x40
jne 0x491ddd
test eax, 0x100
jne 0x491ddd
cmp dword [ebx + 0x38], 0
je 0x491dcf
cmp byte [ebx + 0x372], 0
jne 0x491dcf
mov edx, dword [ebx + 0x38]
mov eax, edx
lea edi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x491db0
sub eax, edi
je 0x491dcf
push edx
push 0x678ea8
mov eax, dword [ebp - 0x44]
push eax
call fcn.00402f60
add esp, 0xc
jmp 0x491ddd
push 0
mov ecx, dword [ebp - 0x44]
push ecx
lea ecx, [ebx + 0x20]
call fcn.005928c0
lea ecx, [ebp + 0x1fd08]
call fcn.004011c0
mov byte [ebp - 4], 0x29
cmp dword [ebp + 0x22080], 0x1469
jne 0x491e1c
mov edx, dword [0x75dd28]
push edx
mov eax, dword [0x75f4d8]
push eax
lea ecx, [ebp + 0x1fd08]
call fcn.00401970
mov byte [esi + 0x17d4], 1
jmp 0x491f23
mov ecx, dword [0x75dd28]
push ecx
mov edx, dword [0x75f4bc]
push edx
lea ecx, [ebp + 0x1fc18]
call fcn.0045eea0
mov byte [ebp - 4], 0x2a
mov eax, dword [0x75dd28]
push eax
mov ecx, dword [0x75f4c4]
push ecx
lea ecx, [ebp + 0x1fc24]
call fcn.0045eea0
mov byte [ebp - 4], 0x2b
mov eax, dword [ebx + 0x138]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x491e60
sub eax, edx
mov eax, 0x75f4d8
jne 0x491e75
mov eax, 0x75f4e0
mov eax, dword [eax]
mov edx, dword [0x75dd28]
push edx
push eax
lea ecx, [ebp + 0x1fc0c]
call fcn.0045eea0
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp + 0x1fc0c]
test eax, eax
jne 0x491e9e
lea eax, [ebp + 0x1fc10]
mov dword [ebp - 0x28c], eax
mov edx, dword [ebp + 0x1fc24]
test edx, edx
jne 0x491eb4
lea edx, [ebp + 0x1fc28]
mov ecx, dword [ebp + 0x1fd38]
test ecx, ecx
jne 0x491ec4
lea ecx, [ebp + 0x1fd3c]
mov eax, dword [ebp + 0x1fc18]
test eax, eax
jne 0x491ed4
lea eax, [ebp + 0x1fc1c]
push 0
push dword [ebp - 0x28c]
push edx
push ecx
push eax
push str._s_r_n_s_r_n_s_r_n_r_n_s
lea ecx, [ebp + 0x1fd08]
call fcn.0043c2c0
mov byte [esi + 0x17d4], 0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp + 0x1fc0c]
call fcn.00401210
mov byte [ebp - 4], 0x2a
lea ecx, [ebp + 0x1fc24]
call fcn.00401210
mov byte [ebp - 4], 0x29
lea ecx, [ebp + 0x1fc18]
call fcn.00401210
mov ecx, dword [ebp + 0x1fd38]
test ecx, ecx
jne 0x491f33
lea ecx, [ebp + 0x1fd3c]
mov eax, dword [ebp + 0x1fd08]
test eax, eax
jne 0x491f43
lea eax, [ebp + 0x1fd0c]
push 1
push ecx
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.00473ae0
add esp, 0x10
cmp eax, 1
je 0x491f81
mov dword [esi + 0x358], 0
push 0x67997c
mov ecx, dword [ebp - 0x44]
call fcn.0054f750
mov byte [ebp - 4], 0x27
lea ecx, [ebp + 0x1fd08]
jmp 0x491c7e
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx]
mov eax, edx
lea edi, [eax + 1]
jmp 0x491f90
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x491f90
sub eax, edi
je 0x491fab
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.004b4570
add esp, 8
lea ecx, [ebp + 0x1fca8]
call fcn.004011c0
mov byte [ebp - 4], 0x2d
lea edx, [ebp + 0x1fca8]
push edx
mov ecx, ebx
call fcn.005b9000
push 0x94
call fcn.00426ce0
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x2e
test eax, eax
je 0x491ffd
mov ecx, dword [ebp + 0x1fca8]
test ecx, ecx
jne 0x491fed
lea ecx, [ebp + 0x1fcac]
push 0
push ecx
mov ecx, dword [esi + 0x20]
push ecx
mov ecx, eax
call fcn.004fc060
jmp 0x491fff
xor eax, eax
mov byte [ebp - 4], 0x2d
mov dword [esi + 0x17d0], eax
test eax, eax
je 0x492037
mov edi, dword [eax]
add edi, 0x13c
call fcn.00411530
push eax
push 0x158
mov ecx, dword [esi + 0x17d0]
mov edx, dword [edi]
call edx
push 5
mov ecx, dword [esi + 0x17d0]
call fcn.005f5caa
mov byte [ebp - 4], 0x29
lea ecx, [ebp + 0x1fca8]
call fcn.00401210
mov byte [ebp - 4], 0x27
lea ecx, [ebp + 0x1fd08]
jmp 0x491c7e
xor edi, edi
mov dword [esi + 0x358], edi
push 0x67997c
lea ecx, [esi + 0x35c]
call fcn.0054f750
mov dword [esi + 0x17d0], edi
lea eax, [edi + 1]
wait
jmp 0x4983e5
push 0
push 0x2c308
push 0x23
mov ecx, esi
call fcn.00425160
test eax, eax
je 0x4917be
mov byte [esi + 0x27b], 1
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push ebx
push 0x46ce00
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.00467b70
mov eax, 1
wait
jmp 0x4983e5
lea ecx, [ebp - 0x3b4]
call fcn.00459a30
mov byte [ebp - 4], 0x2f
xor ebx, ebx
mov dword [ebp - 0xcc], ebx
mov edi, dword [sym.imp.USER32.dll_IsWindow]
mov ecx, dword [esi + 0x234]
cmp ebx, dword [ecx + 8]
jge 0x49214b
push ebx
call fcn.004cf7d0
mov eax, dword [eax]
cmp dword [eax + 0x18], 0
je 0x492142
push ebx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov ecx, dword [eax]
mov edx, dword [ecx + 0x18]
push edx
call edi
test eax, eax
je 0x492142
push ebx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
push ecx
lea ecx, [ebp - 0x3b4]
call fcn.0045ee20
inc ebx
mov dword [ebp - 0xcc], ebx
jmp 0x4920f4
xor ebx, ebx
mov dword [ebp - 0xcc], ebx
cmp ebx, dword [ebp - 0x3ac]
jge 0x4921a8
mov byte [ebp - 4], 0x30
wait
push ebx
lea ecx, [ebp - 0x3b4]
call fcn.0045ee00
push 0
push 0x145f
push 0x111
mov edx, dword [eax]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
wait
mov dword [ebp - 4], 0x2f
inc ebx
mov esi, dword [ebp - 0x24]
jmp 0x49214d
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x3b4]
call fcn.004115f0
cmp dword [ebp + 0x22080], 0x145d
jne 0x4921d3
push 0
push 0xc8
push 0x17
mov ecx, esi
call fcn.00425160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3b4]
call fcn.00459a50
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0x15f90
push 0x2d
mov ecx, esi
call fcn.00425160
test eax, eax
je 0x4917be
mov byte [esi + 0x27e], 1
mov eax, 1
wait
jmp 0x4983e5
push 0
push 2
push ebx
mov ecx, esi
call fcn.004779a0
mov eax, 1
wait
jmp 0x4983e5
push 0
push 5
push ebx
mov ecx, esi
call fcn.004779a0
mov eax, 1
wait
jmp 0x4983e5
mov ebx, 4
mov dword [ebp - 0x2f4], ebx
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 0
push 0
push str.DntShMsgOnCNTOOHtml4
mov edx, dword [0x75dbe4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x492281
cmp dword [ebp - 0x174], 1
je 0x4922e1
push 0
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x8e0]
call fcn.00434c50
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x8e0]
call fcn.005f6e33
cmp eax, 1
jne 0x4922d2
cmp byte [ebp - 0x818], 0
je 0x4922d2
mov dword [ebp - 0x174], eax
push ebx
lea ecx, [ebp - 0x174]
push ecx
push ebx
push 0
push str.DntShMsgOnCNTOOHtml4
mov edx, dword [0x75dbe4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8e0]
call fcn.00434d20
mov eax, dword [ebp - 0x14]
push eax
call fcn.005f4e52
add esp, 4
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push 0
push 0x47bff0
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
call fcn.004aa800
mov ecx, dword [0x75e398]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push 0
push 0x46e9b0
call fcn.006005d0
push 0
push 0x1b7740
push 0x29
mov ecx, esi
call fcn.00425160
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0x15f90
push 0x2e
mov ecx, esi
call fcn.00425160
mov eax, 1
wait
jmp 0x4983e5
mov edi, vtable.CProtection.0
mov dword [ebp - 0x17c], edi
mov byte [ebp - 4], 0x34
mov byte [ebp + 0x21c60], 0xa9
mov byte [ebp + 0x21c61], 0x9e
mov byte [ebp + 0x21c62], 0xbc
mov byte [ebp + 0x21c63], 0xfe
mov byte [ebp + 0x21c64], 0x7b
mov byte [ebp + 0x21c65], 0x71
mov bl, 0x69
mov byte [ebp + 0x21c66], bl
mov byte [ebp + 0x21c67], 0x21
mov byte [ebp + 0x21c68], pe_nt_image_headers32
mov byte [ebp + 0x21c69], 0xd9
mov byte [ebp + 0x21c6a], 0x76
mov byte [ebp + 0x21c6b], 0xcd
mov byte [ebp + 0x21c6c], 0xd1
mov byte [ebp + 0x21c6d], 0x22
mov byte [ebp + 0x21c6e], 0x61
mov byte [ebp + 0x21c6f], 0xae
mov byte [ebp + 0x21c70], 0xe5
mov byte [ebp + 0x21c71], 0x79
mov byte [ebp + 0x21c72], 0x87
mov byte [ebp + 0x21c73], 0x88
mov byte [ebp + 0x21c74], 0x11
mov byte [ebp + 0x21c75], 0xea
mov byte [ebp + 0x21c76], 0xe7
mov byte [ebp + 0x21c77], 0xee
mov byte [ebp + 0x21c78], 0xd6
mov byte [ebp + 0x21c79], 0xbe
mov byte [ebp + 0x21c7a], 0x1e
mov cl, 0xf6
mov byte [ebp + 0x21c7b], cl
mov byte [ebp + 0x21c7c], 0x23
mov byte [ebp + 0x21c7d], 0xd2
mov dl, 0xa8
mov byte [ebp + 0x21c7e], dl
mov byte [ebp + 0x21c7f], 0x3a
mov byte [ebp + 0x21c80], 0xf1
mov al, 0xc3
mov byte [ebp + 0x21c81], al
mov byte [ebp + 0x21c82], 0x9d
mov byte [ebp + 0x21c83], 0x6a
mov byte [ebp + 0x21c84], 0xdd
mov byte [ebp + 0x21c85], 0xc2
mov byte [ebp + 0x21c86], 0xda
mov byte [ebp + 0x21c87], 0x82
mov byte [ebp + 0x21c88], 0x71
mov byte [ebp + 0x21c89], 0x11
mov byte [ebp + 0x21c8a], 0xdf
mov byte [ebp + 0x21c8b], 0x66
mov byte [ebp + 0x21c8c], 0x4a
mov byte [ebp + 0x21c8d], 0x99
mov byte [ebp + 0x21c8e], 0xb6
mov byte [ebp + 0x21c8f], 0x23
mov byte [ebp + 0x21c90], 0x31
mov byte [ebp + 0x21c91], dl
mov byte [ebp + 0x21c92], 0x1d
mov byte [ebp + 0x21c93], 0x77
mov byte [ebp + 0x21c94], 0x1a
mov byte [ebp + 0x21c95], 0x3b
mov byte [ebp + 0x21c96], 0x4c
mov byte [ebp + 0x21c97], 0xb
mov byte [ebp + 0x21c98], 0x7b
mov byte [ebp + 0x21c99], 0x4f
mov byte [ebp + 0x21c9a], 0x32
mov byte [ebp + 0x21c9b], 0x51
mov byte [ebp + 0x21c9c], 0x55
mov byte [ebp + 0x21c9d], 0x1f
mov byte [ebp + 0x21c9e], 0xb8
mov byte [ebp + 0x21c9f], cl
mov byte [ebp + 0x21ca0], 0x24
mov byte [ebp + 0x21ca1], 0x59
mov cl, 0x75
mov byte [ebp + 0x21ca2], cl
mov byte [ebp + 0x21ca3], 0xd4
mov byte [ebp + 0x21ca4], 0xaa
mov byte [ebp + 0x21ca5], 0x90
mov byte [ebp + 0x21ca6], 0x7d
mov byte [ebp + 0x21ca7], 0x5b
mov byte [ebp + 0x21ca8], 0xd9
mov byte [ebp + 0x21ca9], 0x57
mov byte [ebp + 0x21caa], 0
mov byte [ebp + 0x21cab], pe_nt_image_headers32
mov byte [ebp + 0x21cac], 0x9b
mov byte [ebp + 0x21cad], 0x46
mov byte [ebp + 0x21cae], 0x9a
mov byte [ebp + 0x21caf], 0xa7
mov byte [ebp + 0x21cb0], 0x33
mov byte [ebp + 0x21cb1], 0xf
mov byte [ebp + 0x21cb2], 0xb9
mov byte [ebp + 0x21cb3], 0x70
mov byte [ebp + 0x21cb4], 0xcd
mov byte [ebp + 0x21cb5], 0x13
mov byte [ebp + 0x21cb6], 0xa2
mov byte [ebp + 0x21cb7], al
mov byte [ebp + 0x21cb8], 0xc
mov byte [ebp + 0x21cb9], 0xfb
mov byte [ebp + 0x21cba], 0x26
mov byte [ebp + 0x21cbb], 0xb1
mov byte [ebp + 0x21cbc], 0x92
mov byte [ebp + 0x21cbd], 0x6e
mov al, 0xa5
mov byte [ebp + 0x21cbe], al
mov byte [ebp + 0x21cbf], 0x3a
mov byte [ebp + 0x21cc0], 0xa7
mov byte [ebp + 0x21cc1], dl
mov byte [ebp + 0x21cc2], 0xca
mov byte [ebp + 0x21cc3], 0x8e
mov byte [ebp + 0x21cc4], 0xd8
mov byte [ebp + 0x21cc5], 0xa9
mov byte [ebp + 0x21cc6], 0x3f
mov byte [ebp + 0x21cc7], 0x42
mov byte [ebp + 0x21cc8], 0xab
mov byte [ebp + 0x21cc9], 0x35
mov byte [ebp + 0x21cca], 0xed
mov byte [ebp + 0x21ccb], 0xa2
mov byte [ebp + 0x21ccc], 0xf8
mov byte [ebp + 0x21ccd], 0x86
mov byte [ebp + 0x21cce], 0x13
mov byte [ebp + 0x21ccf], 0x60
mov byte [ebp + 0x21cd0], 0xea
mov byte [ebp + 0x21cd1], 0x4f
mov byte [ebp + 0x21cd2], 0xde
mov byte [ebp + 0x21cd3], 0xde
mov byte [ebp + 0x21cd4], 0x21
mov byte [ebp + 0x21cd5], 0x8c
mov byte [ebp + 0x21cd6], 0x91
mov byte [ebp + 0x21cd7], 0x88
mov byte [ebp + 0x21cd8], 0x95
mov byte [ebp + 0x21cd9], 0xc9
mov byte [ebp + 0x21cda], 0xb
mov byte [ebp + 0x21cdb], 0x63
mov byte [ebp + 0x21cdc], 0xaa
mov byte [ebp + 0x21cdd], 0xec
mov byte [ebp + 0x21cde], 0xf9
mov byte [ebp + 0x21cdf], 0x27
mov byte [ebp + 0x21ce0], 0x50
mov byte [ebp + 0x21ce1], 0x85
mov byte [ebp + 0x21ce2], 0xb4
mov byte [ebp + 0x21ce3], 0x62
mov byte [ebp + 0x21ce4], 0xec
mov byte [ebp + 0x21ce5], 0x87
mov byte [ebp + 0x21ce6], 0x5a
mov byte [ebp + 0x21ce7], 0xca
mov byte [ebp + 0x21ce8], 0x4e
mov byte [ebp + 0x21ce9], 0x6e
mov byte [ebp + 0x21cea], 0xa1
mov byte [ebp + 0x21ceb], 0xdb
mov byte [ebp + 0x21cec], 8
mov byte [ebp + 0x21ced], 0x23
mov byte [ebp + 0x21cee], 0xc0
mov byte [ebp + 0x21cef], 0x1f
mov byte [ebp + 0x21cf0], 0x4a
mov byte [ebp + 0x21cf1], 0xbb
mov byte [ebp + 0x21cf2], 0xf5
mov byte [ebp + 0x21cf3], 0xbc
mov byte [ebp + 0x21cf4], 0x6a
mov byte [ebp + 0x21cf5], 0xbb
mov dl, 0x98
mov byte [ebp + 0x21cf6], dl
mov byte [ebp + 0x21cf7], 0x4a
mov byte [ebp + 0x21cf8], 0xb
mov byte [ebp + 0x21cf9], 0x85
mov byte [ebp + 0x21cfa], 0x3c
mov byte [ebp + 0x21cfb], 0x5f
mov byte [ebp + 0x21cfc], 0
mov byte [ebp + 0x21cfd], 0x52
mov byte [ebp + 0x21cfe], 0xb1
mov byte [ebp + 0x21cff], 0x88
mov byte [ebp + 0x21d00], 0x66
mov byte [ebp + 0x21d01], 0xd9
mov byte [ebp + 0x21d02], 0xb8
mov byte [ebp + 0x21d03], 0xff
mov byte [ebp + 0x21d04], 0xb0
mov byte [ebp + 0x21d05], 0x31
mov byte [ebp + 0x21d06], 0xf2
mov byte [ebp + 0x21d07], 0x71
mov byte [ebp + 0x21d08], 0xb1
mov byte [ebp + 0x21d09], 8
mov byte [ebp + 0x21d0a], 0x31
mov byte [ebp + 0x21d0b], 0xb0
mov byte [ebp + 0x21d0c], 0x36
mov byte [ebp + 0x21d0d], 0x38
mov byte [ebp + 0x21d0e], 0xec
mov byte [ebp + 0x21d0f], 0x30
mov byte [ebp + 0x21d10], 0xa0
mov byte [ebp + 0x21d11], 0x33
mov byte [ebp + 0x21d12], 0x4d
mov byte [ebp + 0x21d13], 0xde
mov byte [ebp + 0x21d14], 0x4c
mov byte [ebp + 0x21d15], 0x50
mov byte [ebp + 0x21d16], 0x74
mov byte [ebp + 0x21d17], 0x52
mov byte [ebp + 0x21d18], 0x9b
mov byte [ebp + 0x21d19], 0x74
mov byte [ebp + 0x21d1a], 0x5b
mov byte [ebp + 0x21d1b], 0xb3
mov byte [ebp + 0x21d1c], 0x13
mov byte [ebp + 0x21d1d], 0x5f
mov byte [ebp + 0x21d1e], 2
mov byte [ebp + 0x21d1f], 0xe0
mov byte [ebp + 0x21d20], dl
mov byte [ebp + 0x21d21], 0xe6
mov byte [ebp + 0x21d22], al
mov byte [ebp + 0x21d23], 0x49
mov byte [ebp + 0x21d24], 0xca
mov byte [ebp + 0x21d25], 0xd3
mov byte [ebp + 0x21d26], 0xbb
mov byte [ebp + 0x21d27], 0x99
mov byte [ebp + 0x21d28], 0x49
mov byte [ebp + 0x21d29], 0x47
mov byte [ebp + 0x21d2a], 0x93
mov byte [ebp + 0x21d2b], al
mov byte [ebp + 0x21d2c], 0x76
mov byte [ebp + 0x21d2d], 0x64
mov byte [ebp + 0x21d2e], 0xe2
mov byte [ebp + 0x21d2f], al
mov byte [ebp + 0x21d30], 0xcf
mov byte [ebp + 0x21d31], cl
mov byte [ebp + 0x21d32], 0xaa
mov byte [ebp + 0x21d33], cl
mov byte [ebp + 0x21d34], 0x64
mov byte [ebp + 0x21d35], 0xb3
mov byte [ebp + 0x21d36], 0xda
mov byte [ebp + 0x21d37], 0xaf
mov byte [ebp + 0x21d38], 0xf4
mov byte [ebp + 0x21d39], dl
mov byte [ebp + 0x21d3a], 0x53
mov byte [ebp + 0x21d3b], 0x8d
mov byte [ebp + 0x21d3c], 0x6d
mov byte [ebp + 0x21d3d], 3
mov byte [ebp + 0x21d3e], 0x43
mov byte [ebp + 0x21d3f], 0xcc
mov byte [ebp + 0x21d40], 0
push 9
push str.506938841
push 0xe0
lea edx, [ebp + 0x21c60]
push edx
lea ecx, [ebp - 0x17c]
call fcn.00448e40
mov byte [ebp + 0x22008], 0xa9
mov byte [ebp + 0x22009], 0x9e
mov byte [ebp + 0x2200a], 0xbc
mov byte [ebp + 0x2200b], 0xfe
mov byte [ebp + 0x2200c], 0x7b
mov byte [ebp + 0x2200d], 0x71
mov byte [ebp + 0x2200e], bl
mov byte [ebp + 0x2200f], 0x21
mov byte [ebp + 0x22010], pe_nt_image_headers32
mov byte [ebp + 0x22011], 0xd9
mov byte [ebp + 0x22012], 0x76
mov byte [ebp + 0x22013], 0xcd
mov byte [ebp + 0x22014], 0xd1
mov byte [ebp + 0x22015], 0x22
mov byte [ebp + 0x22016], 0x61
mov byte [ebp + 0x22017], 0xae
mov byte [ebp + 0x22018], 0xe5
mov byte [ebp + 0x22019], 0x79
mov byte [ebp + 0x2201a], 0x87
mov byte [ebp + 0x2201b], 0x88
mov byte [ebp + 0x2201c], 0x11
mov byte [ebp + 0x2201d], 0xea
mov byte [ebp + 0x2201e], 0xe7
mov byte [ebp + 0x2201f], 0xee
mov byte [ebp + 0x22020], 0x3f
mov byte [ebp + 0x22021], 0x58
mov byte [ebp + 0x22022], 0x7b
mov byte [ebp + 0x22023], 0xe9
mov byte [ebp + 0x22024], 0xc0
mov byte [ebp + 0x22025], 0x16
mov byte [ebp + 0x22026], 0xc5
mov byte [ebp + 0x22027], 0xd0
mov byte [ebp + 0x22028], 0
lea eax, [ebp + 0x22008]
lea ecx, [eax + 1]
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x492ac0
sub eax, ecx
push 9
push str.506938841
push eax
lea eax, [ebp + 0x22008]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00448e40
push 0x30
lea ecx, [ebp + 0x22008]
push ecx
lea edx, [ebp + 0x21c60]
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.00473680
add esp, 0x10
push 0
push 0x1470
push 0x111
mov ecx, esi
call fcn.0042ec10
mov byte [ebp - 4], 0
mov dword [ebp - 0x17c], edi
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push ebx
push 0x473540
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
lea ecx, [ebp - 0x184]
call fcn.004024f0
mov byte [ebp - 4], 0x36
push ebx
mov eax, dword [0x75f514]
push eax
lea ecx, [ebp - 0x184]
push ecx
call fcn.00402f60
add esp, 0xc
push 0x10030
push 0x6828e8
mov edx, dword [ebp - 0x184]
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.00473680
add esp, 0x10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x184]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
mov edi, vtable.CProtection.0
mov dword [ebp - 0x294], edi
mov byte [ebp - 4], 0x37
mov byte [ebp + 0x21ee8], 0xa9
mov byte [ebp + 0x21ee9], 0x9e
mov byte [ebp + 0x21eea], 0xbc
mov byte [ebp + 0x21eeb], 0xfe
mov byte [ebp + 0x21eec], 0x7b
mov byte [ebp + 0x21eed], 0x71
mov byte [ebp + 0x21eee], 0x69
mov byte [ebp + 0x21eef], 0x21
mov byte [ebp + 0x21ef0], pe_nt_image_headers32
mov byte [ebp + 0x21ef1], 0xd9
mov byte [ebp + 0x21ef2], 0x76
mov byte [ebp + 0x21ef3], 0xcd
mov byte [ebp + 0x21ef4], 0xd1
mov byte [ebp + 0x21ef5], 0x22
mov byte [ebp + 0x21ef6], 0x61
mov byte [ebp + 0x21ef7], 0xae
mov byte [ebp + 0x21ef8], 0xe5
mov byte [ebp + 0x21ef9], 0x79
mov byte [ebp + 0x21efa], 0x87
mov byte [ebp + 0x21efb], 0x88
mov byte [ebp + 0x21efc], 0x11
mov byte [ebp + 0x21efd], 0xea
mov byte [ebp + 0x21efe], 0xe7
mov byte [ebp + 0x21eff], 0xee
mov byte [ebp + 0x21f00], 0xd6
mov byte [ebp + 0x21f01], 0xbe
mov byte [ebp + 0x21f02], 0x1e
mov cl, 0xf6
mov byte [ebp + 0x21f03], cl
mov byte [ebp + 0x21f04], 0x23
mov byte [ebp + 0x21f05], 0xd2
mov dl, 0xa8
mov byte [ebp + 0x21f06], dl
mov byte [ebp + 0x21f07], 0x3a
mov byte [ebp + 0x21f08], 0xf1
mov byte [ebp + 0x21f09], 0xc3
mov byte [ebp + 0x21f0a], 0x9d
mov byte [ebp + 0x21f0b], 0x6a
mov byte [ebp + 0x21f0c], 0xdd
mov byte [ebp + 0x21f0d], 0xc2
mov byte [ebp + 0x21f0e], 0xda
mov byte [ebp + 0x21f0f], 0x82
mov byte [ebp + 0x21f10], 0x71
mov byte [ebp + 0x21f11], 0x11
mov byte [ebp + 0x21f12], 0xdf
mov byte [ebp + 0x21f13], 0x66
mov byte [ebp + 0x21f14], 0x4a
mov byte [ebp + 0x21f15], 0x99
mov byte [ebp + 0x21f16], 0xb6
mov byte [ebp + 0x21f17], 0x23
mov byte [ebp + 0x21f18], 0x31
mov byte [ebp + 0x21f19], dl
mov byte [ebp + 0x21f1a], 0x1d
mov byte [ebp + 0x21f1b], 0x77
mov byte [ebp + 0x21f1c], 0x1a
mov byte [ebp + 0x21f1d], 0x3b
mov byte [ebp + 0x21f1e], 0x4c
mov byte [ebp + 0x21f1f], 0xb
mov byte [ebp + 0x21f20], 0x7b
mov byte [ebp + 0x21f21], 0x4f
mov byte [ebp + 0x21f22], 0x32
mov byte [ebp + 0x21f23], 0x51
mov byte [ebp + 0x21f24], 0x55
mov byte [ebp + 0x21f25], 0x1f
mov byte [ebp + 0x21f26], 0xb8
mov byte [ebp + 0x21f27], cl
mov byte [ebp + 0x21f28], 0x24
mov byte [ebp + 0x21f29], 0x59
mov byte [ebp + 0x21f2a], 0x75
mov byte [ebp + 0x21f2b], 0xd4
mov byte [ebp + 0x21f2c], 0xaa
mov byte [ebp + 0x21f2d], 0x90
mov byte [ebp + 0x21f2e], 0x7d
mov byte [ebp + 0x21f2f], 0x5b
mov byte [ebp + 0x21f30], 0
push 9
push str.506938841
push 0x48
lea eax, [ebp + 0x21ee8]
push eax
lea ecx, [ebp - 0x294]
call fcn.00448e40
mov ebx, 0x78
sub ebx, dword [esi + 0x29c]
imul ebx, ebx, 0x2710
push 0x11030
push 0x752e5c
lea ecx, [ebp + 0x21ee8]
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.00473680
add esp, 0x10
cmp dword [esi + 0x29c], 0
jne 0x492e1d
push 0
push 0x148b
push 0x111
mov ecx, esi
call fcn.0042ec10
inc dword [esi + 0x29c]
cmp ebx, 0x7530
ja 0x492e30
mov ebx, 0x7530
push 0
push ebx
push 0x1c
mov ecx, esi
call fcn.00425160
mov byte [ebp - 4], 0
mov dword [ebp - 0x294], edi
mov eax, 1
wait
jmp 0x4983e5
lea edx, [ebp - 0x340]
push edx
call fcn.0043c830
lea ecx, [ebp - 0x340]
call fcn.00453850
cmp eax, dword [0x75e234]
je 0x4917be
lea ecx, [ebp - 0x340]
call fcn.00453850
mov dword [0x75e234], eax
call fcn.00470fc0
mov eax, 1
wait
jmp 0x4983e5
lea eax, [ebp - 0x2a4]
push eax
call fcn.0043c830
lea ecx, [ebp - 0x2a4]
call fcn.0043bfd0
lea eax, [eax + eax*2]
lea edi, [eax*4 - 0x5911]
lea ecx, [ebp - 0x2a4]
call fcn.0043c000
add eax, edi
cmp eax, 0x592
jle 0x4917be
lea ecx, [ebp - 0x2a4]
call fcn.00453850
cmp eax, dword [esi + 0x19c8]
je 0x4917be
lea ecx, [ebp - 0x2a4]
call fcn.00453850
mov dword [esi + 0x19c8], eax
mov ecx, esi
call fcn.0047a240
mov eax, 1
wait
jmp 0x4983e5
lea ecx, [ebp - 0x2ac]
push ecx
call fcn.0043c830
lea ecx, [ebp - 0x2ac]
call fcn.0043bfd0
lea eax, [eax + eax*2]
lea edi, [eax*4 - 0x5911]
lea ecx, [ebp - 0x2ac]
call fcn.0043c000
add eax, edi
cmp eax, 0x590
jle 0x4917be
lea ecx, [ebp - 0x2ac]
call fcn.0043c030
cmp eax, dword [esi + 0x19c4]
je 0x4917be
lea ecx, [ebp - 0x2ac]
call fcn.0043c030
mov dword [esi + 0x19c4], eax
mov ecx, esi
call fcn.00471a40
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push ebx
push 0x47b1f0
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
push 0
lea ecx, [ebp - 0x6f4]
call fcn.0051f970
mov byte [ebp - 4], 0x40
mov edx, dword [esi + 0x198]
mov dword [ebp - 0x680], edx
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x678], eax
lea ecx, [ebp - 0x6f4]
call fcn.005f6e33
mov ebx, eax
test ebx, ebx
je 0x492fed
mov ecx, dword [ebp - 0x634]
push ecx
push 0
push ebx
call fcn.0044a770
add esp, 0xc
cmp ebx, 4
je 0x492fed
mov ecx, esi
call fcn.00487790
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6f4]
call fcn.00402610
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push 0
push 0x46e1d0
jmp 0x492343
push ebx
mov ecx, esi
call fcn.0046a510
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push ebx
push 0x473f70
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0x186a0
push 0x28
mov ecx, esi
call fcn.00425160
mov eax, 1
wait
jmp 0x4983e5
mov ecx, esi
call fcn.0046ab40
push 0
push 0x1f4
push 0x2a
mov ecx, esi
call fcn.00425160
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push 0
push 0x474a10
jmp 0x492343
lea edx, [ebp - 0x348]
push edx
call fcn.0043c830
lea ecx, [ebp - 0x348]
call fcn.00453850
cmp eax, dword [esi + 0x19cc]
je 0x4917be
lea ecx, [ebp - 0x348]
call fcn.00453850
mov dword [esi + 0x19cc], eax
call fcn.00471500
mov eax, 1
wait
jmp 0x4983e5
call fcn.00455470
test eax, eax
je 0x4930ef
call fcn.00455170
call fcn.0046fdb0
mov eax, 1
wait
jmp 0x4983e5
mov byte [ebp + 0x21fa4], 0x4e
mov byte [ebp + 0x21fa5], 0x52
mov byte [ebp + 0x21fa6], 0x5b
mov byte [ebp + 0x21fa7], 0x49
mov byte [ebp + 0x21fa8], 0x4a
mov byte [ebp + 0x21fa9], 0x5c
mov byte [ebp + 0x21faa], 0x4f
mov byte [ebp + 0x21fab], 0x58
mov byte [ebp + 0x21fac], 0x41
mov byte [ebp + 0x21fad], 0x54
mov byte [ebp + 0x21fae], 0x73
mov bl, 0x69
mov byte [ebp + 0x21faf], bl
mov byte [ebp + 0x21fb0], 0x78
mov byte [ebp + 0x21fb1], 0x6f
mov byte [ebp + 0x21fb2], 0x73
mov byte [ebp + 0x21fb3], 0x78
mov byte [ebp + 0x21fb4], bl
mov al, 0x3d
mov byte [ebp + 0x21fb5], al
mov byte [ebp + 0x21fb6], 0x59
mov byte [ebp + 0x21fb7], 0x72
mov byte [ebp + 0x21fb8], 0x6a
mov byte [ebp + 0x21fb9], 0x73
mov byte [ebp + 0x21fba], 0x71
mov byte [ebp + 0x21fbb], 0x72
mov byte [ebp + 0x21fbc], 0x7c
mov byte [ebp + 0x21fbd], 0x79
mov byte [ebp + 0x21fbe], al
mov byte [ebp + 0x21fbf], 0x50
mov byte [ebp + 0x21fc0], 0x7c
mov byte [ebp + 0x21fc1], 0x73
mov byte [ebp + 0x21fc2], 0x7c
mov byte [ebp + 0x21fc3], 0x7a
mov byte [ebp + 0x21fc4], 0x78
mov byte [ebp + 0x21fc5], 0x6f
mov byte [ebp + 0x21fc6], 0
lea eax, [ebp + 0x21fa4]
push eax
call fcn.00453b40
mov byte [ebp + 0x2206c], 0x4e
mov byte [ebp + 0x2206d], 0x78
mov byte [ebp + 0x2206e], 0x6f
mov byte [ebp + 0x2206f], 0x74
mov byte [ebp + 0x22070], 0x7c
mov byte [ebp + 0x22071], 0x71
mov byte [ebp + 0x22072], 0
lea ecx, [ebp + 0x2206c]
push ecx
call fcn.00453b40
add esp, 8
mov byte [ebp + 0x2199c], 0
mov byte [ebp + 0x219d0], 0
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x214], 0x32
lea edx, [ebp - 0x290]
push edx
push 1
push esi
lea eax, [ebp + 0x21fa4]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4932b8
lea ecx, [ebp - 0x214]
push ecx
lea edx, [ebp + 0x2199c]
push edx
push eax
push eax
lea eax, [ebp + 0x2206c]
push eax
mov ecx, dword [ebp - 0x290]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4932ab
mov esi, 1
mov ebx, esi
mov edx, dword [ebp - 0x290]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp + 0x219d0]
push ecx
push 0
push 0
lea edx, [ebp + 0x2206c]
push edx
mov eax, dword [0x75dbe4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x493307
inc esi
test ebx, ebx
je 0x493307
lea ecx, [ebp + 0x219d0]
push ecx
lea edx, [ebp + 0x2199c]
push edx
call fcn.006226ae
add esp, 8
test eax, eax
jne 0x493307
dec esi
mov byte [ebp + 0x219d0], al
cmp esi, 2
jne 0x493334
lea eax, [ebp + 0x219d0]
push eax
lea ecx, [ebp + 0x2199c]
push ecx
push 0x6862c8
mov edx, dword [ebp - 0x14]
push edx
call fcn.00402f60
add esp, 0x10
lea eax, [esi - 1]
wait
jmp 0x4983e5
test ebx, ebx
je 0x49335b
lea eax, [ebp + 0x2199c]
push eax
push 0x678ea8
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.00402f60
add esp, 0xc
mov eax, 1
wait
jmp 0x4983e5
lea edx, [ebp + 0x219d0]
push edx
push 0x678ea8
mov eax, dword [ebp - 0x14]
push eax
call fcn.00402f60
add esp, 0xc
mov eax, 1
wait
jmp 0x4983e5
call fcn.00453d10
test eax, eax
jne 0x4917be
push eax
push 0x14bf
push 0x111
mov ecx, esi
call fcn.0042ec10
mov eax, 1
wait
jmp 0x4983e5
mov ecx, esi
call fcn.004760a0
mov eax, 1
wait
jmp 0x4983e5
mov ecx, dword [0x75ddbc]
push ecx
push 0x678ea8
push ebx
call fcn.00402f60
add esp, 0xc
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push ebx
push 0x460e70
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
lea ecx, [ebp - 0x18c]
call fcn.004024f0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xdc]
call fcn.004024f0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x21c]
call fcn.004024f0
mov byte [ebp - 4], 0x43
lea edx, [ebp - 0x21c]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x18c]
push ecx
call fcn.00468f20
add esp, 0xc
test eax, eax
je 0x4934ec
mov edx, dword [ebp - 0x18c]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x493455
sub eax, edi
je 0x4934ec
mov dword [ebp - 0x258], 0
lea eax, [ebp - 0x258]
push eax
push 0x20019
push 0
push edx
mov ecx, dword [0x75dbac]
neg ecx
sbb ecx, ecx
add ecx, 0x80000002
push ecx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4934ec
mov edx, dword [ebp - 0x258]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0xdc]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4934b0
sub eax, edx
inc eax
push eax
call fcn.005f4e47
add esp, 4
test eax, eax
je 0x4934ec
mov edx, dword [ebp - 0xdc]
mov edi, eax
nop
mov cl, byte [edx]
mov byte [edi], cl
inc edx
inc edi
test cl, cl
jne 0x4934d0
push eax
push 0x14ce
push 0x111
mov ecx, esi
call fcn.0042ec10
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x21c]
call fcn.00402560
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xdc]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18c]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
push 0x752ff8
lea ecx, [ebp - 0x1b4]
call fcn.004030a0
mov byte [ebp - 4], 0x44
mov eax, dword [ebp - 0x1b4]
push eax
call fcn.00453b70
add esp, 4
push str.lgjld
lea ecx, [ebp - 0x1ac]
call fcn.004030a0
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x1ac]
push ecx
call fcn.00453b70
add esp, 4
push 0x753034
lea ecx, [ebp - 0x104]
call fcn.00402fc0
mov byte [ebp - 4], 0x46
mov edx, dword [ebp - 0x104]
push edx
call fcn.00453b70
add esp, 4
lea ecx, [ebp + 0x1e1a0]
call fcn.005b9780
mov byte [ebp - 4], 0x47
push 0xffffffffffffffff
mov eax, dword [ebp - 0x1ac]
push eax
push 0x67e070
mov ecx, dword [ebp - 0x1b4]
push ecx
push 2
lea ecx, [ebp + 0x1e1a0]
call fcn.005b74f0
lea edx, [ebp + 0x1e1a0]
push edx
call fcn.004b3c50
add esp, 4
push 0
push 0
lea ecx, [ebp + 0x1e1a0]
call fcn.005b75f0
push 0x67e82c
lea ecx, [ebp + 0x1e290]
call fcn.0054f750
mov byte [ebp + 0x1e4fd], 1
mov byte [ebp + 0x1e50d], 1
mov dword [ebp + 0x1e1a4], 4
mov dword [ebp + 0x1e1a0], 0
mov byte [ebp + 0x1e333], 0
mov dword [ebp - 0x194], 0x14b4
mov eax, dword [ebx]
lea edi, [ebp + 0x218e8]
mov cl, byte [eax]
mov byte [edi], cl
inc eax
inc edi
test cl, cl
jne 0x493627
lea eax, [ebp + 0x218e8]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x493638
mov cx, word [0x67b29c]
mov word [eax], cx
mov dl, byte [0x67b29e]
mov byte [eax + 2], dl
lea ecx, [ebp - 0x1a4]
call fcn.004024f0
mov byte [ebp - 4], 0x48
mov eax, dword [ebp - 0x194]
add eax, 0x4b
mov dword [ebp - 0x194], eax
lea ecx, [ebp - 0x1a4]
push ecx
push eax
push 0x111
mov ecx, esi
call fcn.004015a0
mov eax, dword [ebp - 0x1a4]
mov esi, eax
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x493690
sub eax, esi
lea edi, [ebp + 0x218e8]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4936a0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp + 0x218e8]
dec eax
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4936c0
mov dx, word [0x67b29c]
mov word [eax], dx
mov cl, byte [0x67b29e]
mov byte [eax + 2], cl
mov esi, dword [ebp - 0x194]
sub esi, 0x4b
mov byte [ebp + 0x1e355], 1
lea edx, [ebp + 0x218e8]
push edx
mov eax, dword [ebp - 0x104]
push eax
push str._s:_s
lea ecx, [ebp + 0x1e358]
push ecx
call fcn.00402f60
add esp, 0x10
push 1
lea ecx, [ebp + 0x1e1a0]
call fcn.005c7e50
lea ebx, [ebx]
mov eax, dword [ebp + 0x1eaf4]
cmp eax, 3
je 0x49373b
test eax, eax
je 0x49373b
push 0x64
call fcn.00426db0
add esp, 4
jmp 0x493720
cmp dword [ebp + 0x1ec6c], 0
je 0x4937cb
add esi, 0x10
push 0
push esi
push 0x111
mov edx, dword [0x75e284]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
push 0x7d0
call fcn.00426db0
mov byte [ebp + 0x1e355], 1
lea eax, [ebp + 0x218e8]
push eax
mov ecx, dword [ebp - 0x104]
push ecx
push str._s:_s
lea edx, [ebp + 0x1e358]
push edx
call fcn.00402f60
add esp, 0x14
mov byte [ebp + 0x1e375], 1
push 1
lea ecx, [ebp + 0x1e1a0]
call fcn.005c7e50
jmp 0x4937b0
mov eax, dword [ebp + 0x1eaf4]
cmp eax, 3
je 0x4937cb
test eax, eax
je 0x4937cb
push 0x64
call fcn.00426db0
add esp, 4
jmp 0x4937b0
mov dword [ebp - 0x278], 0
cmp dword [ebp + 0x1ec6c], 0
jne 0x493877
cmp eax, 3
jne 0x493877
push 0x684f54
mov eax, dword [ebp + 0x1e1f0]
push eax
call fcn.0062385d
add esp, 8
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x493877
mov ecx, eax
push ecx
call fcn.006280c7
push eax
call fcn.00625e8a
mov edi, eax
lea edx, [edi + 1]
push edx
call fcn.005f4e47
add esp, 0xc
mov esi, eax
test esi, esi
je 0x493868
mov eax, dword [ebp - 0x19c]
push eax
push edi
push 1
push esi
call fcn.00625b7c
add esp, 0x10
cmp edi, eax
jne 0x49385f
mov byte [esi + edi], 0
push esi
push 0x678ea8
push ebx
call fcn.00402f60
add esp, 0xc
mov dword [ebp - 0x278], 1
push esi
call fcn.005f4e52
add esp, 4
mov ecx, dword [ebp - 0x19c]
push ecx
call fcn.00623537
add esp, 4
mov edx, dword [ebp + 0x1e1f0]
push edx
call fcn.006246f3
add esp, 4
lea ecx, [ebp + 0x1e1a0]
call fcn.005be430
lea ecx, [ebp + 0x1e1a0]
call fcn.005ba8c0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1a4]
call fcn.00402560
mov byte [ebp - 4], 0x46
lea ecx, [ebp + 0x1e1a0]
call fcn.005b9980
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x104]
call fcn.00402560
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x1ac]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1b4]
call fcn.00402560
mov eax, dword [ebp - 0x278]
wait
jmp 0x4983e5
mov esi, dword [ebx]
mov dword [ebp - 0x1bc], esi
mov byte [ebp + 0x21fc8], 0x6e
mov byte [ebp + 0x21fc9], 0x6d
mov byte [ebp + 0x21fca], 0x78
mov byte [ebp + 0x21fcb], 0x78
mov byte [ebp + 0x21fcc], 0x79
mov bl, 0x69
mov byte [ebp + 0x21fcd], bl
mov byte [ebp + 0x21fce], 0x78
mov byte [ebp + 0x21fcf], 0x6e
mov byte [ebp + 0x21fd0], bl
mov byte [ebp + 0x21fd1], 0x33
mov byte [ebp + 0x21fd2], 0x74
mov byte [ebp + 0x21fd3], 0x73
mov byte [ebp + 0x21fd4], bl
mov byte [ebp + 0x21fd5], 0x78
mov byte [ebp + 0x21fd6], 0x6f
mov byte [ebp + 0x21fd7], 0x73
mov byte [ebp + 0x21fd8], 0x78
mov byte [ebp + 0x21fd9], bl
mov byte [ebp + 0x21fda], 0x79
mov byte [ebp + 0x21fdb], 0x72
mov byte [ebp + 0x21fdc], 0x6a
mov byte [ebp + 0x21fdd], 0x73
mov byte [ebp + 0x21fde], 0x71
mov byte [ebp + 0x21fdf], 0x72
mov byte [ebp + 0x21fe0], 0x7c
mov byte [ebp + 0x21fe1], 0x79
mov byte [ebp + 0x21fe2], 0x70
mov byte [ebp + 0x21fe3], 0x7c
mov byte [ebp + 0x21fe4], 0x73
mov byte [ebp + 0x21fe5], 0x7c
mov byte [ebp + 0x21fe6], 0x7a
mov byte [ebp + 0x21fe7], 0x78
mov byte [ebp + 0x21fe8], 0x6f
mov byte [ebp + 0x21fe9], 0x33
mov byte [ebp + 0x21fea], 0x7e
mov byte [ebp + 0x21feb], 0x72
mov byte [ebp + 0x21fec], 0x70
mov byte [ebp + 0x21fed], 0
lea eax, [ebp + 0x21fc8]
push eax
call fcn.00453b40
mov byte [ebp + 0x2205c], 0x7e
mov cl, 0x75
mov byte [ebp + 0x2205d], cl
mov byte [ebp + 0x2205e], 0x78
mov byte [ebp + 0x2205f], 0x7e
mov byte [ebp + 0x22060], 0x76
mov byte [ebp + 0x22061], 0x6e
mov byte [ebp + 0x22062], 0x6d
mov byte [ebp + 0x22063], 0x78
mov byte [ebp + 0x22064], 0x78
mov byte [ebp + 0x22065], 0x79
mov byte [ebp + 0x22066], 0x33
mov byte [ebp + 0x22067], cl
mov byte [ebp + 0x22068], bl
mov byte [ebp + 0x22069], 0x70
mov byte [ebp + 0x2206a], 0x71
mov byte [ebp + 0x2206b], 0
lea ecx, [ebp + 0x2205c]
push ecx
call fcn.00453b40
mov byte [ebp + 0x21ff0], 0x54
mov byte [ebp + 0x21ff1], 0x59
mov byte [ebp + 0x21ff2], 0x50
mov byte [ebp + 0x21ff3], 0x30
mov byte [ebp + 0x21ff4], 0x59
mov byte [ebp + 0x21ff5], 0x7c
mov byte [ebp + 0x21ff6], bl
mov byte [ebp + 0x21ff7], 0x7c
mov byte [ebp + 0x21ff8], 0x49
mov byte [ebp + 0x21ff9], 0x64
mov byte [ebp + 0x21ffa], 0x6d
mov byte [ebp + 0x21ffb], 0x78
mov byte [ebp + 0x21ffc], 0x30
mov byte [ebp + 0x21ffd], 0x6e
mov byte [ebp + 0x21ffe], 0x6d
mov byte [ebp + 0x21fff], 0x78
mov byte [ebp + 0x22000], 0x78
mov byte [ebp + 0x22001], 0x79
mov byte [ebp + 0x22002], bl
mov byte [ebp + 0x22003], 0x78
mov byte [ebp + 0x22004], 0x6e
mov byte [ebp + 0x22005], bl
mov byte [ebp + 0x22006], 0x27
mov byte [ebp + 0x22007], 0
lea edx, [ebp + 0x21ff0]
push edx
call fcn.00453b40
add esp, 0xc
lea ecx, [ebp + 0x1eed0]
call fcn.005b9780
mov byte [ebp - 4], 0x49
push 0xffffffffffffffff
lea eax, [ebp + 0x2205c]
push eax
push 0x67e070
lea ecx, [ebp + 0x21fc8]
push ecx
push 1
lea ecx, [ebp + 0x1eed0]
call fcn.005b74f0
lea edx, [ebp + 0x1eed0]
push edx
call fcn.004b3c50
add esp, 4
push 0
push 0
lea ecx, [ebp + 0x1eed0]
call fcn.005b75f0
push 0x67e82c
lea ecx, [ebp + 0x1efc0]
call fcn.0054f750
mov byte [ebp + 0x1f22d], 1
mov byte [ebp + 0x1f23d], 1
mov dword [ebp + 0x1eed4], 4
mov dword [ebp + 0x1eed0], 0
mov byte [ebp + 0x1f063], 0
mov eax, esi
dec eax
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x493bd0
mov cx, word [0x67b29c]
mov word [eax], cx
mov dl, byte [0x67b29e]
mov byte [eax + 2], dl
mov eax, dword [0x75dda8]
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x493bf2
sub eax, ecx
mov edx, ecx
mov edi, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x493c00
mov ecx, eax
mov esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x1bc]
mov eax, esi
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x493c21
mov cx, word [0x67b29c]
mov word [eax], cx
mov dl, byte [0x67b29e]
mov byte [eax + 2], dl
mov edi, dword [ebp - 0x14]
push edi
push 0x14d1
push 0x111
mov ecx, dword [ebp - 0x24]
call fcn.004015a0
lea ecx, [ebp]
call fcn.0057f130
mov byte [ebp - 4], 0x4a
xor ebx, ebx
mov dword [ebp - 0x200], ebx
mov dword [ebp - 0x204], ebx
lea eax, [ebp - 0x204]
push eax
mov ecx, dword [edi + 4]
push ecx
push esi
lea ecx, [ebp]
call fcn.0057bb90
test eax, eax
je 0x493cbb
mov eax, dword [ebp - 0x204]
cmp eax, ebx
je 0x493cbb
cmp dword [ebp - 0x200], ebx
je 0x493cbb
mov byte [ebp + 0x1f085], 1
push eax
lea edx, [ebp + 0x21ff0]
push edx
push 0x678de0
lea eax, [ebp + 0x1f088]
push eax
call fcn.00402f60
add esp, 0x10
jmp 0x493ccb
mov ecx, dword [edi + 4]
push ecx
push esi
lea ecx, [ebp + 0x1eef0]
call fcn.005cc280
mov eax, dword [ebp - 0x204]
cmp eax, ebx
je 0x493cde
push eax
call fcn.006220cc
add esp, 4
push 1
lea ecx, [ebp + 0x1eed0]
call fcn.005c7e50
jmp 0x493cf0
mov eax, dword [ebp + 0x1f824]
cmp eax, 3
je 0x493d0b
cmp eax, ebx
je 0x493d0b
push 0x64
call fcn.00426db0
add esp, 4
jmp 0x493cf0
cmp dword [ebp + 0x1f99c], ebx
je 0x493d9d
mov byte [ebp + 0x1f0a5], 1
push 1
lea ecx, [ebp + 0x1eed0]
call fcn.005c7e50
jmp 0x493d30
mov eax, dword [ebp + 0x1f824]
cmp eax, 3
je 0x493d4b
cmp eax, ebx
je 0x493d4b
push 0x64
call fcn.00426db0
add esp, 4
jmp 0x493d30
cmp dword [ebp + 0x1f99c], ebx
je 0x493d9d
push 0xffffffffffffffff
lea edx, [ebp + 0x2205c]
push edx
push 0x67e070
lea eax, [ebp + 0x21fc8]
push eax
push 2
lea ecx, [ebp + 0x1eed0]
call fcn.005b74f0
push 1
lea ecx, [ebp + 0x1eed0]
call fcn.005c7e50
mov eax, dword [ebp + 0x1f824]
cmp eax, 3
je 0x493d9d
cmp eax, ebx
je 0x493d9d
push 0x64
call fcn.00426db0
add esp, 4
jmp 0x493d82
mov dword [ebp - 0x224], ebx
cmp dword [ebp + 0x1f99c], ebx
jne 0x493e55
cmp eax, 3
jne 0x493e55
push 0x684f54
mov ecx, dword [ebp + 0x1ef20]
push ecx
call fcn.0062385d
add esp, 8
mov ebx, eax
test ebx, ebx
je 0x493e55
push ebx
call fcn.006280c7
push eax
call fcn.00625e8a
mov esi, eax
lea edx, [esi + 1]
push edx
call fcn.005f4e47
add esp, 0xc
mov edi, eax
test edi, edi
je 0x493e4c
push ebx
push esi
push 1
push edi
call fcn.00625b7c
add esp, 0x10
cmp esi, eax
jne 0x493e43
cmp esi, 0x80
jae 0x493e43
push 0x80
push 0
mov eax, dword [ebp - 0x1bc]
push eax
call fcn.00621270
push esi
push edi
mov ecx, dword [ebp - 0x1bc]
push ecx
call fcn.00622730
add esp, 0x18
mov edx, dword [ebp - 0x14]
mov dword [edx + 4], esi
mov dword [ebp - 0x224], 1
push edi
call fcn.005f4e52
add esp, 4
push ebx
call fcn.00623537
add esp, 4
mov eax, dword [ebp + 0x1ef20]
push eax
call fcn.006246f3
add esp, 4
lea ecx, [ebp + 0x1eed0]
call fcn.005be430
lea ecx, [ebp + 0x1eed0]
call fcn.005ba8c0
mov byte [ebp - 4], 0x49
lea ecx, [ebp]
call fcn.005dbc90
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x1eed0]
call fcn.005b9980
mov eax, dword [ebp - 0x224]
wait
jmp 0x4983e5
mov dword [ebp - 0x288], 0
lea ecx, [ebp - 0x3c]
call fcn.004024f0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x22c]
call fcn.004024f0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x260]
call fcn.004024f0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x260]
push ecx
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x3c]
push eax
call fcn.00468f20
add esp, 0xc
test eax, eax
je 0x494220
mov eax, dword [ebp - 0x3c]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x493f00
sub eax, edx
je 0x494220
mov dword [ebp - 0x4c], 0
lea ecx, [ebp - 0x414]
call fcn.0051cc30
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x3dc]
call fcn.0051cc30
mov byte [ebp - 4], 0x4f
push 0
lea ecx, [ebp - 0x4c]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
mov edx, dword [ebp - 0x3c]
push edx
mov eax, dword [0x75dbac]
neg eax
sbb eax, eax
add eax, 0x80000002
push eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
call edi
mov esi, eax
mov dword [ebp - 0xa4], esi
test esi, esi
je 0x494154
cmp esi, 2
je 0x494057
lea ecx, [ebp - 0xe4]
call fcn.004024f0
mov byte [ebp - 4], 0x50
cmp dword [0x75dbac], 0
mov eax, str.CURRENT_USER
jne 0x493f9d
mov eax, str.MACHINE
mov ecx, dword [ebp - 0x3c]
push ecx
push eax
push 0x67bc94
lea edx, [ebp - 0xe4]
push edx
call fcn.00402f60
add esp, 0x10
mov eax, dword [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x414]
call fcn.0051cd20
test eax, eax
je 0x493ffc
push 0
lea ecx, [ebp - 0x4c]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
mov edx, dword [ebp - 0x3c]
push edx
mov eax, dword [0x75dbac]
neg eax
sbb eax, eax
add eax, 0x80000002
push eax
call edi
mov esi, eax
mov dword [ebp - 0xa4], esi
test esi, esi
je 0x494048
mov ecx, dword [ebp - 0xe4]
push ecx
lea ecx, [ebp - 0x414]
call fcn.0051cdf0
test eax, eax
je 0x494048
push 0
lea edx, [ebp - 0x4c]
push edx
push 0
push 0xf003f
push 0
push 0
push 0
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [0x75dbac]
neg ecx
sbb ecx, ecx
add ecx, 0x80000002
push ecx
call edi
mov esi, eax
mov dword [ebp - 0xa4], esi
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0xe4]
call fcn.00402560
test esi, esi
je 0x494154
cmp dword [0x75dbac], 0
jne 0x49414c
push 0
lea edx, [ebp - 0x4c]
push edx
push 0
push 0xf003f
push 0
push 0
push 0
mov eax, dword [ebp - 0x3c]
push eax
push 0x80000001
call edi
mov esi, eax
mov dword [ebp - 0xa4], esi
test esi, esi
je 0x494154
lea ecx, [ebp - 0xfc]
call fcn.004024f0
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x3c]
push ecx
push str.CURRENT_USER_s
lea edx, [ebp - 0xfc]
push edx
call fcn.00402f60
add esp, 0xc
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x3dc]
call fcn.0051cd20
test eax, eax
je 0x4940fd
push 0
lea ecx, [ebp - 0x4c]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
mov edx, dword [ebp - 0x3c]
push edx
push 0x80000001
call edi
mov esi, eax
mov dword [ebp - 0xa4], esi
test esi, esi
je 0x49413d
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x3dc]
call fcn.0051cdf0
test eax, eax
je 0x49413d
push 0
lea ecx, [ebp - 0x4c]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
mov edx, dword [ebp - 0x3c]
push edx
push 0x80000001
call edi
mov esi, eax
mov dword [ebp - 0xa4], esi
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0xfc]
call fcn.00402560
test esi, esi
jne 0x494202
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x494202
test ebx, ebx
je 0x4941ef
lea ecx, [ebp + 0x126c8]
call fcn.0057f130
mov byte [ebp - 4], 0x52
xor esi, esi
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x250], esi
lea eax, [ebp - 0x250]
push eax
mov ecx, dword [ebx + 4]
push ecx
mov edx, dword [ebx]
push edx
lea ecx, [ebp + 0x126c8]
call fcn.0057bb90
test eax, eax
je 0x4941cb
mov eax, dword [ebp - 0x24c]
push eax
mov ecx, dword [ebp - 0x250]
push ecx
push 1
push esi
push esi
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x4941cb
mov dword [ebp - 0x288], 1
mov eax, dword [ebp - 0x250]
cmp eax, esi
je 0x4941de
push eax
call fcn.006220cc
add esp, 4
mov byte [ebp - 4], 0x4f
lea ecx, [ebp + 0x126c8]
call fcn.005dbc90
jmp 0x4941f8
push 0
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x3dc]
call fcn.0051cc90
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x414]
call fcn.0051cc90
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x260]
call fcn.00402560
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x22c]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3c]
call fcn.00402560
mov eax, dword [ebp - 0x288]
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push 0
push 0x47c040
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push 0
push 0x482a70
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
call fcn.00453d10
test eax, eax
jne 0x4917be
cmp dword [esi + 0x1e4], eax
je 0x4917be
push eax
mov ecx, dword [esi + 0x1e4]
mov edx, dword [ecx]
push edx
push 0x111
mov ecx, esi
call fcn.0042ec10
mov eax, 1
wait
jmp 0x4983e5
call fcn.0045b4a0
test eax, eax
jne 0x4917be
cmp dword [esi + 0x1ec], eax
je 0x4917be
push eax
mov eax, dword [esi + 0x1ec]
mov ecx, dword [eax]
push ecx
push 0x111
mov ecx, esi
call fcn.0042ec10
mov eax, 1
wait
jmp 0x4983e5
lea edx, [ebp - 0x2b8]
push edx
call fcn.00521d90
add esp, 4
test eax, eax
je 0x49432e
mov eax, dword [ebp - 0x2b8]
mov dword [ebx], eax
mov eax, 1
wait
jmp 0x4983e5
mov dword [ebx], 0x200000
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.00477200
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.00470130
mov eax, 1
wait
jmp 0x4983e5
push 1
push ebx
mov ecx, esi
call fcn.0047e570
mov eax, 1
wait
jmp 0x4983e5
mov byte [ebp + 0x22044], 0x71
mov byte [ebp + 0x22045], 0x70
mov byte [ebp + 0x22046], 0x4a
mov byte [ebp + 0x22047], 0x2d
mov byte [ebp + 0x22048], 0x2f
mov byte [ebp + 0x22049], 0x76
mov byte [ebp + 0x2204a], 0x77
mov byte [ebp + 0x2204b], 0x50
mov byte [ebp + 0x2204c], 0x29
mov byte [ebp + 0x2204d], 0x2d
mov byte [ebp + 0x2204e], 0x2d
mov byte [ebp + 0x2204f], 0x2f
mov byte [ebp + 0x22050], 0x5b
mov byte [ebp + 0x22051], 0x5c
mov byte [ebp + 0x22052], 0x73
mov byte [ebp + 0x22053], 0x67
mov byte [ebp + 0x22054], 0x6a
mov byte [ebp + 0x22055], 0x6a
mov byte [ebp + 0x22056], 0x6e
mov byte [ebp + 0x22057], 0x5c
mov byte [ebp + 0x22058], 0x2c
mov byte [ebp + 0x22059], 0
lea edx, [ebp + 0x22044]
push edx
call fcn.00453b40
add esp, 4
mov edi, vtable.CProtection.0
mov dword [ebp - 0x234], edi
mov byte [ebp - 4], 0x53
lea eax, [ebp + 0x22044]
lea edx, [eax + 1]
jmp 0x494440
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x494440
sub eax, edx
push eax
lea eax, [ebp + 0x22044]
push eax
mov ecx, dword [ebx + 4]
push ecx
mov edx, dword [ebx]
push edx
lea ecx, [ebp - 0x234]
call fcn.00448e40
mov byte [ebp - 4], 0
mov dword [ebp - 0x234], edi
mov eax, 1
wait
jmp 0x4983e5
mov byte [ebp + 0x2202c], 0x71
mov byte [ebp + 0x2202d], 0x70
mov byte [ebp + 0x2202e], 0x4a
mov byte [ebp + 0x2202f], 0x2d
mov byte [ebp + 0x22030], 0x2f
mov byte [ebp + 0x22031], 0x76
mov byte [ebp + 0x22032], 0x77
mov byte [ebp + 0x22033], 0x50
mov byte [ebp + 0x22034], 0x29
mov byte [ebp + 0x22035], 0x2d
mov byte [ebp + 0x22036], 0x2d
mov byte [ebp + 0x22037], 0x2f
mov byte [ebp + 0x22038], 0x5b
mov byte [ebp + 0x22039], 0x5c
mov byte [ebp + 0x2203a], 0x73
mov byte [ebp + 0x2203b], 0x67
mov byte [ebp + 0x2203c], 0x6a
mov byte [ebp + 0x2203d], 0x6a
mov byte [ebp + 0x2203e], 0x6e
mov byte [ebp + 0x2203f], 0x5c
mov byte [ebp + 0x22040], 0x2c
mov byte [ebp + 0x22041], 0
lea eax, [ebp + 0x2202c]
push eax
call fcn.00453b40
add esp, 4
mov edi, vtable.CProtection.0
mov dword [ebp - 0x268], edi
mov byte [ebp - 4], 0x54
lea eax, [ebp + 0x2202c]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x494540
sub eax, edx
push eax
lea ecx, [ebp + 0x2202c]
push ecx
mov edx, dword [ebx + 4]
push edx
mov eax, dword [ebx]
push eax
lea ecx, [ebp - 0x268]
call fcn.00448d60
mov byte [ebp - 4], 0
mov dword [ebp - 0x268], edi
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl case.0x490260.5292
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov ebx, dword [eax]
mov eax, dword [ebx + 0xec]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4945a0
sub eax, edx
jne 0x4945cf
cmp dword [ebx + 0xdc], eax
je case.0x490260.5292
mov eax, dword [ebx + 0xdc]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4945c0
sub eax, edx
je case.0x490260.5292
mov byte [ebp - 0x59], 0
mov byte [ebp - 0x31], 0
lea ecx, [ebp - 0x1c4]
call fcn.004024f0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x31]
push ecx
lea edx, [ebp - 0x59]
push edx
lea eax, [ebp - 0x1c4]
push eax
push str..testingext
mov ecx, dword [ebx + 0xdc]
push ecx
mov ecx, esi
call fcn.004667d0
cmp byte [ebp - 0x31], 0
je 0x494628
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c4]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c4]
call fcn.00402560
xor eax, eax
wait
jmp 0x4983e5
mov dword [ebp - 0x23c], 0
push 0
lea edx, [ebp - 0x23c]
push edx
push 0
push 0xf003f
push 0
push 0
push 0
push ebx
mov eax, dword [0x75dbac]
neg eax
sbb eax, eax
add eax, 0x80000002
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x49468a
mov eax, dword [ebp - 0x23c]
test eax, eax
je 0x49468a
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
call fcn.005f4e52
add esp, 4
mov eax, 1
wait
jmp 0x4983e5
mov ecx, dword [esi + 0x234]
mov edi, dword [ecx + 8]
dec edi
test edi, edi
jl 0x4917be
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edx, dword [eax]
cmp dword [edx + 0x340], 0
je 0x4946a7
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
mov ecx, dword [eax + 0x340]
cmp dword [ecx + 0x4f8], ebx
jne 0x4946a7
push edi
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edx, dword [eax]
mov eax, dword [edx + 0x4f8]
push eax
push 0x14d5
push 0x111
mov ecx, esi
call fcn.0042ec10
mov eax, 1
wait
jmp 0x4983e5
test ebx, ebx
je case.0x490260.5292
lea ecx, [ebp - 0x74]
call fcn.004024f0
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x74]
push ecx
mov edx, dword [ebp + 0x22080]
inc edx
push edx
push 0x111
mov ecx, esi
call fcn.004015a0
xor edi, edi
mov dword [ebp - 0x2c], edi
mov eax, dword [ebx]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x494750
sub eax, edx
mov dword [ebp - 0x2c8], edi
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0x2c4], edi
lea esi, [eax + 1]
push esi
call fcn.005f4e47
mov dword [ebp - 0xc8], eax
push esi
call fcn.005f4e47
add esp, 8
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xc8], edi
je 0x4962a4
cmp eax, edi
je 0x4962a4
xor esi, esi
mov dword [ebp - 0x2c], esi
lea ecx, [ebp - 0x90]
call fcn.004024f0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0xb0]
call fcn.004024f0
mov byte [ebp - 4], 0x58
mov dword [ebp - 0x1d4], 1
push edi
lea ecx, [ebp - 0x74]
call fcn.00404050
cmp al, 0x7b
jne 0x49483a
mov eax, dword [ebp - 0x74]
inc eax
push eax
push 0x678ea8
lea ecx, [ebp - 0x90]
push ecx
call fcn.00402f60
push 0x5f
mov edx, dword [ebp - 0x90]
push edx
call fcn.00622170
add esp, 0x14
cmp eax, edi
je 0x49483a
mov byte [eax], 0
inc eax
push eax
push 0x678ea8
lea eax, [ebp - 0xb0]
push eax
call fcn.00402f60
push 0x7d
mov ecx, dword [ebp - 0xb0]
push ecx
call fcn.00622170
add esp, 0x14
cmp eax, edi
je 0x49483a
mov byte [eax], 0
mov dword [ebp - 0x1d4], 2
mov ebx, dword [ebx]
mov edx, dword [ebp - 0xd0]
push edx
lea eax, [ebp - 0x2c4]
push eax
lea ecx, [ebp - 0xc4]
push ecx
mov edx, dword [ebp - 0xc8]
push edx
lea eax, [ebp - 0x2c8]
push eax
push str._ld__s_r_n_ld__ld__s
push ebx
call fcn.0062257e
add esp, 0x1c
cmp eax, 5
jne 0x49626b
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 0x2b4], edi
mov dword [ebp - 0x1cc], edi
lea ecx, [ebp - 0x1cc]
push ecx
lea edx, [ebp - 0x2b4]
push edx
mov eax, dword [ebp - 0xc8]
push eax
call fcn.0057bd10
add esp, 0xc
mov ebx, 4
test eax, eax
je 0x4955c1
mov byte [ebp + 0x21a9c], bl
mov byte [ebp + 0x21a9d], bl
mov byte [ebp + 0x21a9e], bl
mov byte [ebp + 0x21a9f], bl
mov byte [ebp + 0x21aa0], bl
mov byte [ebp + 0x21aa1], 0x6b
mov byte [ebp + 0x21aa2], 0x6c
mov byte [ebp + 0x21aa3], 0x6e
mov byte [ebp + 0x21aa4], 0x60
mov byte [ebp + 0x21aa5], 0x67
mov byte [ebp + 0x21aa6], 9
mov byte [ebp + 0x21aa7], 0x79
mov byte [ebp + 0x21aa8], 0x7c
mov byte [ebp + 0x21aa9], 0x6b
mov byte [ebp + 0x21aaa], 0x65
mov byte [ebp + 0x21aab], 0x60
mov byte [ebp + 0x21aac], 0x6a
mov byte [ebp + 0x21aad], 9
mov byte [ebp + 0x21aae], 0x62
mov byte [ebp + 0x21aaf], 0x6c
mov byte [ebp + 0x21ab0], 0x70
mov byte [ebp + 0x21ab1], bl
mov byte [ebp + 0x21ab2], bl
mov byte [ebp + 0x21ab3], bl
mov byte [ebp + 0x21ab4], bl
mov byte [ebp + 0x21ab5], bl
mov byte [ebp + 0x21ab6], 0x23
mov byte [ebp + 0x21ab7], 0x64
mov byte [ebp + 0x21ab8], 0x60
mov byte [ebp + 0x21ab9], 0x60
mov byte [ebp + 0x21aba], 0x6b
mov byte [ebp + 0x21abb], 0x60
mov byte [ebp + 0x21abc], 0x6d
mov byte [ebp + 0x21abd], 0x68
mov byte [ebp + 0x21abe], 0x67
mov byte [ebp + 0x21abf], 0x6b
mov byte [ebp + 0x21ac0], 0x4e
mov byte [ebp + 0x21ac1], 0x42
mov byte [ebp + 0x21ac2], 0x58
mov byte [ebp + 0x21ac3], 0x41
mov byte [ebp + 0x21ac4], 0x42
mov byte [ebp + 0x21ac5], 0x40
mov byte [ebp + 0x21ac6], 0x6e
mov byte [ebp + 0x21ac7], 0x10
mov byte [ebp + 0x21ac8], 0x5e
mov byte [ebp + 0x21ac9], 0x19
mov byte [ebp + 0x21aca], 0x6b
mov byte [ebp + 0x21acb], 0x68
mov byte [ebp + 0x21acc], 0x78
mov byte [ebp + 0x21acd], 0x6c
mov byte [ebp + 0x21ace], 0x6f
mov byte [ebp + 0x21acf], 0x68
mov byte [ebp + 0x21ad0], 0x68
mov byte [ebp + 0x21ad1], 0x66
mov byte [ebp + 0x21ad2], 0x6a
mov byte [ebp + 0x21ad3], 0x68
mov byte [ebp + 0x21ad4], 0x78
mov byte [ebp + 0x21ad5], 0x19
mov byte [ebp + 0x21ad6], 0x68
mov byte [ebp + 0x21ad7], 0x64
mov byte [ebp + 0x21ad8], 0x60
mov byte [ebp + 0x21ad9], 0x60
mov byte [ebp + 0x21ada], 0x6b
mov byte [ebp + 0x21adb], 0x6a
mov byte [ebp + 0x21adc], 0x68
mov byte [ebp + 0x21add], 0x62
mov byte [ebp + 0x21ade], 0x6a
mov byte [ebp + 0x21adf], 0x68
mov byte [ebp + 0x21ae0], 0x78
mov byte [ebp + 0x21ae1], 0x6c
mov byte [ebp + 0x21ae2], 0x68
mov byte [ebp + 0x21ae3], 0x51
mov byte [ebp + 0x21ae4], 0x4e
mov byte [ebp + 0x21ae5], 0x4a
mov byte [ebp + 0x21ae6], 0x1e
mov byte [ebp + 0x21ae7], 0x59
mov byte [ebp + 0x21ae8], 0x4b
mov byte [ebp + 0x21ae9], 0x65
mov byte [ebp + 0x21aea], 0x1b
mov byte [ebp + 0x21aeb], 0x67
mov byte [ebp + 0x21aec], 0x7e
mov byte [ebp + 0x21aed], 0x63
mov byte [ebp + 0x21aee], 0x5a
mov byte [ebp + 0x21aef], 0x6e
mov byte [ebp + 0x21af0], 0x67
mov byte [ebp + 0x21af1], 0x19
mov byte [ebp + 0x21af2], 0x6d
mov byte [ebp + 0x21af3], 0x18
mov byte [ebp + 0x21af4], 0x1c
mov byte [ebp + 0x21af5], 0x4e
mov byte [ebp + 0x21af6], 0x62
mov byte [ebp + 0x21af7], 0x23
mov byte [ebp + 0x21af8], 0x4e
mov byte [ebp + 0x21af9], 0x78
mov byte [ebp + 0x21afa], 0x43
mov byte [ebp + 0x21afb], 0x51
mov byte [ebp + 0x21afc], 0x71
mov byte [ebp + 0x21afd], 0x5e
mov byte [ebp + 0x21afe], 0x68
mov byte [ebp + 0x21aff], 0x1f
mov byte [ebp + 0x21b00], 0x1d
mov byte [ebp + 0x21b01], 0x67
mov byte [ebp + 0x21b02], 0x45
mov byte [ebp + 0x21b03], 0x47
mov byte [ebp + 0x21b04], 0x4c
mov byte [ebp + 0x21b05], 0x63
mov byte [ebp + 0x21b06], 0x7b
mov byte [ebp + 0x21b07], 0x70
mov byte [ebp + 0x21b08], 0x40
mov byte [ebp + 0x21b09], 2
mov byte [ebp + 0x21b0a], 0x79
mov byte [ebp + 0x21b0b], 0x1c
mov byte [ebp + 0x21b0c], 0x5e
mov byte [ebp + 0x21b0d], 0x50
mov byte [ebp + 0x21b0e], 0x43
mov byte [ebp + 0x21b0f], 0x5c
mov byte [ebp + 0x21b10], 0x4b
mov byte [ebp + 0x21b11], 0x66
mov byte [ebp + 0x21b12], 0x67
mov byte [ebp + 0x21b13], 0x43
mov byte [ebp + 0x21b14], 0x1f
mov byte [ebp + 0x21b15], 0x48
mov byte [ebp + 0x21b16], 0x5b
mov byte [ebp + 0x21b17], 0x5e
mov byte [ebp + 0x21b18], 0x40
mov byte [ebp + 0x21b19], 0x5d
mov byte [ebp + 0x21b1a], 0x44
mov byte [ebp + 0x21b1b], 0x7a
mov byte [ebp + 0x21b1c], 0x45
mov byte [ebp + 0x21b1d], 0x6a
mov byte [ebp + 0x21b1e], 0x11
mov byte [ebp + 0x21b1f], 0x48
mov byte [ebp + 0x21b20], 0x46
mov byte [ebp + 0x21b21], 0x4c
mov byte [ebp + 0x21b22], 0x7a
mov byte [ebp + 0x21b23], 0x4e
mov byte [ebp + 0x21b24], 0x5d
mov byte [ebp + 0x21b25], 0x46
mov byte [ebp + 0x21b26], 0x18
mov byte [ebp + 0x21b27], 0x19
mov byte [ebp + 0x21b28], 0x53
mov byte [ebp + 0x21b29], 0x62
mov byte [ebp + 0x21b2a], 0x1b
mov byte [ebp + 0x21b2b], 0x44
mov byte [ebp + 0x21b2c], 0x73
mov byte [ebp + 0x21b2d], 0x6a
mov byte [ebp + 0x21b2e], 0x60
mov byte [ebp + 0x21b2f], 0x7b
mov byte [ebp + 0x21b30], 0x4d
mov byte [ebp + 0x21b31], 0x4a
mov byte [ebp + 0x21b32], 0x10
mov byte [ebp + 0x21b33], 0x4e
mov byte [ebp + 0x21b34], 0x11
mov byte [ebp + 0x21b35], 0x10
mov byte [ebp + 0x21b36], 0x5b
mov byte [ebp + 0x21b37], 0x7b
mov byte [ebp + 0x21b38], 0x23
mov byte [ebp + 0x21b39], 0x5a
mov byte [ebp + 0x21b3a], 0x11
mov byte [ebp + 0x21b3b], 0x4b
mov byte [ebp + 0x21b3c], 0x6a
mov byte [ebp + 0x21b3d], 0x47
mov byte [ebp + 0x21b3e], 0x6d
mov byte [ebp + 0x21b3f], 0x62
mov byte [ebp + 0x21b40], 0x7d
mov byte [ebp + 0x21b41], 0x50
mov byte [ebp + 0x21b42], 0x43
mov byte [ebp + 0x21b43], 0x78
mov byte [ebp + 0x21b44], 0x70
mov byte [ebp + 0x21b45], 0x70
mov byte [ebp + 0x21b46], 6
mov byte [ebp + 0x21b47], 0x65
mov byte [ebp + 0x21b48], 0x18
mov byte [ebp + 0x21b49], 0x4e
mov byte [ebp + 0x21b4a], 0x6e
mov byte [ebp + 0x21b4b], 0x68
mov byte [ebp + 0x21b4c], 0x6c
mov byte [ebp + 0x21b4d], 0x7c
mov byte [ebp + 0x21b4e], 0x19
mov byte [ebp + 0x21b4f], 0x66
mov byte [ebp + 0x21b50], 0x42
mov byte [ebp + 0x21b51], 0x64
mov byte [ebp + 0x21b52], 0x45
mov byte [ebp + 0x21b53], 0x78
mov byte [ebp + 0x21b54], 0x1d
mov byte [ebp + 0x21b55], 0x79
mov byte [ebp + 0x21b56], 0x6d
mov byte [ebp + 0x21b57], 0x67
mov byte [ebp + 0x21b58], 6
mov byte [ebp + 0x21b59], 0x5f
mov byte [ebp + 0x21b5a], 0x1d
mov byte [ebp + 0x21b5b], 0x42
mov byte [ebp + 0x21b5c], 0x6b
mov byte [ebp + 0x21b5d], 0x61
mov byte [ebp + 0x21b5e], 0x6a
mov byte [ebp + 0x21b5f], 0x62
mov byte [ebp + 0x21b60], 0x19
mov byte [ebp + 0x21b61], 0x45
mov byte [ebp + 0x21b62], 0x4d
mov byte [ebp + 0x21b63], 0x70
mov byte [ebp + 0x21b64], 0x5e
mov byte [ebp + 0x21b65], 0x45
mov byte [ebp + 0x21b66], 0x7d
mov byte [ebp + 0x21b67], 0x1f
mov byte [ebp + 0x21b68], 0x68
mov byte [ebp + 0x21b69], 0x4d
mov byte [ebp + 0x21b6a], 0x58
mov byte [ebp + 0x21b6b], 0x45
mov byte [ebp + 0x21b6c], 0x65
mov byte [ebp + 0x21b6d], 0x19
mov byte [ebp + 0x21b6e], 0x6a
mov byte [ebp + 0x21b6f], 0x50
mov byte [ebp + 0x21b70], 0x59
mov byte [ebp + 0x21b71], 0x5f
mov byte [ebp + 0x21b72], 0x4d
mov byte [ebp + 0x21b73], 0x51
mov byte [ebp + 0x21b74], 0x65
mov byte [ebp + 0x21b75], 0x46
mov byte [ebp + 0x21b76], 0x67
mov byte [ebp + 0x21b77], 0x1b
mov byte [ebp + 0x21b78], 0x68
mov byte [ebp + 0x21b79], 0x23
mov byte [ebp + 0x21b7a], 0x4e
mov byte [ebp + 0x21b7b], 0x7d
mov byte [ebp + 0x21b7c], 0x64
mov byte [ebp + 0x21b7d], 0x4f
mov byte [ebp + 0x21b7e], 0x5b
mov byte [ebp + 0x21b7f], 0x64
mov byte [ebp + 0x21b80], 0x4d
mov byte [ebp + 0x21b81], 0x7b
mov byte [ebp + 0x21b82], 0x7b
mov byte [ebp + 0x21b83], 0x68
mov byte [ebp + 0x21b84], 2
mov byte [ebp + 0x21b85], 0x42
mov byte [ebp + 0x21b86], 0x7e
mov byte [ebp + 0x21b87], 0x42
mov byte [ebp + 0x21b88], 0x1b
mov byte [ebp + 0x21b89], 0x6b
mov byte [ebp + 0x21b8a], 0x7b
mov byte [ebp + 0x21b8b], 0x53
mov byte [ebp + 0x21b8c], 0x1f
mov byte [ebp + 0x21b8d], 0x63
mov byte [ebp + 0x21b8e], 0x5b
mov byte [ebp + 0x21b8f], 0x70
mov byte [ebp + 0x21b90], 0x5c
mov byte [ebp + 0x21b91], 0x5f
mov byte [ebp + 0x21b92], 0x79
mov byte [ebp + 0x21b93], 0x6b
mov byte [ebp + 0x21b94], 0x7a
mov byte [ebp + 0x21b95], 0x7b
mov byte [ebp + 0x21b96], 0x7a
mov byte [ebp + 0x21b97], 0x7d
mov byte [ebp + 0x21b98], 0x64
mov byte [ebp + 0x21b99], 0x7c
mov byte [ebp + 0x21b9a], 0x58
mov byte [ebp + 0x21b9b], 0x6e
mov byte [ebp + 0x21b9c], 0x6a
mov byte [ebp + 0x21b9d], 0x7a
mov byte [ebp + 0x21b9e], 0x70
mov byte [ebp + 0x21b9f], 0x1d
mov byte [ebp + 0x21ba0], 0x45
mov byte [ebp + 0x21ba1], 0x4e
mov byte [ebp + 0x21ba2], 0x1c
mov byte [ebp + 0x21ba3], 0x41
mov byte [ebp + 0x21ba4], 0x60
mov byte [ebp + 0x21ba5], 0x18
mov byte [ebp + 0x21ba6], 0x59
mov byte [ebp + 0x21ba7], 0x4c
mov byte [ebp + 0x21ba8], 0x4a
mov byte [ebp + 0x21ba9], 0x5f
mov byte [ebp + 0x21baa], 0x5c
mov byte [ebp + 0x21bab], 0x4e
mov byte [ebp + 0x21bac], 0x1d
mov byte [ebp + 0x21bad], 0x4e
mov byte [ebp + 0x21bae], 0x6b
mov byte [ebp + 0x21baf], 0x47
mov byte [ebp + 0x21bb0], 0x7b
mov byte [ebp + 0x21bb1], 0x7a
mov byte [ebp + 0x21bb2], 0x53
mov byte [ebp + 0x21bb3], 0x67
mov byte [ebp + 0x21bb4], 0x44
mov byte [ebp + 0x21bb5], 0x1b
mov byte [ebp + 0x21bb6], 0x7c
mov byte [ebp + 0x21bb7], 2
mov byte [ebp + 0x21bb8], 0x1c
mov byte [ebp + 0x21bb9], 0x5e
mov byte [ebp + 0x21bba], 0x23
mov byte [ebp + 0x21bbb], 0x6e
mov byte [ebp + 0x21bbc], 0x40
mov byte [ebp + 0x21bbd], 2
mov byte [ebp + 0x21bbe], 0x1b
mov byte [ebp + 0x21bbf], 0x4f
mov byte [ebp + 0x21bc0], 0x65
mov byte [ebp + 0x21bc1], 0x7e
mov byte [ebp + 0x21bc2], 0x43
mov byte [ebp + 0x21bc3], 0x7a
mov byte [ebp + 0x21bc4], 0x58
mov byte [ebp + 0x21bc5], 0x62
mov byte [ebp + 0x21bc6], 0x18
mov byte [ebp + 0x21bc7], 0x10
mov byte [ebp + 0x21bc8], 0x1d
mov byte [ebp + 0x21bc9], 0x68
mov byte [ebp + 0x21bca], 0x50
mov byte [ebp + 0x21bcb], 0x63
mov byte [ebp + 0x21bcc], 0x58
mov byte [ebp + 0x21bcd], 0x51
mov byte [ebp + 0x21bce], 0x46
mov byte [ebp + 0x21bcf], 0x5f
mov byte [ebp + 0x21bd0], 0x71
mov byte [ebp + 0x21bd1], 0x4b
mov byte [ebp + 0x21bd2], 0x73
mov byte [ebp + 0x21bd3], 0x43
mov byte [ebp + 0x21bd4], 0x6d
mov byte [ebp + 0x21bd5], 0x61
mov byte [ebp + 0x21bd6], 0x18
mov byte [ebp + 0x21bd7], 0x67
mov byte [ebp + 0x21bd8], 0x6e
mov byte [ebp + 0x21bd9], 0x1d
mov byte [ebp + 0x21bda], 0x7f
mov byte [ebp + 0x21bdb], 0x51
mov byte [ebp + 0x21bdc], 0x41
mov byte [ebp + 0x21bdd], 0x7c
mov byte [ebp + 0x21bde], 0x70
mov byte [ebp + 0x21bdf], 0x5a
mov byte [ebp + 0x21be0], 0x68
mov byte [ebp + 0x21be1], 0x45
mov byte [ebp + 0x21be2], 0x66
mov byte [ebp + 0x21be3], 0x79
mov byte [ebp + 0x21be4], 0x41
mov byte [ebp + 0x21be5], 0x46
mov byte [ebp + 0x21be6], 0x40
mov byte [ebp + 0x21be7], 0x7d
mov byte [ebp + 0x21be8], 0x1e
mov byte [ebp + 0x21be9], 0x7f
mov byte [ebp + 0x21bea], 0x6b
mov byte [ebp + 0x21beb], 0x65
mov byte [ebp + 0x21bec], 0x1e
mov byte [ebp + 0x21bed], 6
mov byte [ebp + 0x21bee], 0x58
mov byte [ebp + 0x21bef], 0x7c
mov byte [ebp + 0x21bf0], 0x48
mov byte [ebp + 0x21bf1], 0x48
mov byte [ebp + 0x21bf2], 0x1f
mov byte [ebp + 0x21bf3], 0x44
mov byte [ebp + 0x21bf4], 0x6d
mov byte [ebp + 0x21bf5], 0x5e
mov byte [ebp + 0x21bf6], 0x4f
mov byte [ebp + 0x21bf7], 0x7e
mov byte [ebp + 0x21bf8], 0x4d
mov byte [ebp + 0x21bf9], 0x1c
mov byte [ebp + 0x21bfa], 0x5c
mov byte [ebp + 0x21bfb], 0x23
mov byte [ebp + 0x21bfc], 0x44
mov byte [ebp + 0x21bfd], 0x4a
mov byte [ebp + 0x21bfe], 0x59
mov byte [ebp + 0x21bff], 0x5f
mov byte [ebp + 0x21c00], 2
mov byte [ebp + 0x21c01], 0x5f
mov byte [ebp + 0x21c02], 0x5a
mov byte [ebp + 0x21c03], 0x18
mov byte [ebp + 0x21c04], 0x4d
mov byte [ebp + 0x21c05], 0x51
mov byte [ebp + 0x21c06], 0x5c
mov byte [ebp + 0x21c07], 0x1b
mov byte [ebp + 0x21c08], 0x1a
mov byte [ebp + 0x21c09], 0x50
mov byte [ebp + 0x21c0a], 0x46
mov byte [ebp + 0x21c0b], 0x5b
mov byte [ebp + 0x21c0c], 0x7e
mov byte [ebp + 0x21c0d], 0x64
mov byte [ebp + 0x21c0e], 0x6e
mov byte [ebp + 0x21c0f], 0x1b
mov byte [ebp + 0x21c10], 0x5d
mov byte [ebp + 0x21c11], 0x4e
mov byte [ebp + 0x21c12], 0x5d
mov byte [ebp + 0x21c13], 0x1e
mov byte [ebp + 0x21c14], 6
mov byte [ebp + 0x21c15], 0x7e
mov byte [ebp + 0x21c16], 0x4b
mov byte [ebp + 0x21c17], 0x64
mov byte [ebp + 0x21c18], 0x5f
mov byte [ebp + 0x21c19], 0x7c
mov byte [ebp + 0x21c1a], 0x45
mov byte [ebp + 0x21c1b], 0x1c
mov byte [ebp + 0x21c1c], 0x5f
mov byte [ebp + 0x21c1d], 0x4a
mov byte [ebp + 0x21c1e], 0x63
mov byte [ebp + 0x21c1f], 0x4c
mov byte [ebp + 0x21c20], 0x70
mov byte [ebp + 0x21c21], 6
mov byte [ebp + 0x21c22], 0x47
mov byte [ebp + 0x21c23], 0x4e
mov byte [ebp + 0x21c24], 0x68
mov byte [ebp + 0x21c25], 0x7d
mov byte [ebp + 0x21c26], 0x45
mov byte [ebp + 0x21c27], 0x11
mov byte [ebp + 0x21c28], 0x11
mov byte [ebp + 0x21c29], 0x40
mov byte [ebp + 0x21c2a], 0x7e
mov byte [ebp + 0x21c2b], 0x48
mov byte [ebp + 0x21c2c], 0x7a
mov byte [ebp + 0x21c2d], 0x4e
mov byte [ebp + 0x21c2e], 0x73
mov byte [ebp + 0x21c2f], 0x65
mov byte [ebp + 0x21c30], 0x5d
mov byte [ebp + 0x21c31], 0x70
mov byte [ebp + 0x21c32], 0x53
mov byte [ebp + 0x21c33], 0x1f
mov byte [ebp + 0x21c34], 0x40
mov byte [ebp + 0x21c35], 0x7c
mov byte [ebp + 0x21c36], 0x1f
mov byte [ebp + 0x21c37], 0x68
mov byte [ebp + 0x21c38], 0x5a
mov byte [ebp + 0x21c39], 0x61
mov byte [ebp + 0x21c3a], 2
mov byte [ebp + 0x21c3b], 0x6d
mov byte [ebp + 0x21c3c], 0x23
mov byte [ebp + 0x21c3d], 0x40
mov byte [ebp + 0x21c3e], 0x5e
mov byte [ebp + 0x21c3f], 0x60
mov byte [ebp + 0x21c40], 0x6b
mov byte [ebp + 0x21c41], 0x68
mov byte [ebp + 0x21c42], 0x5e
mov byte [ebp + 0x21c43], 0x14
mov byte [ebp + 0x21c44], 0x14
mov byte [ebp + 0x21c45], 0x23
mov byte [ebp + 0x21c46], bl
mov byte [ebp + 0x21c47], bl
mov byte [ebp + 0x21c48], bl
mov byte [ebp + 0x21c49], bl
mov byte [ebp + 0x21c4a], bl
mov byte [ebp + 0x21c4b], 0x6c
mov byte [ebp + 0x21c4c], 0x67
mov byte [ebp + 0x21c4d], 0x6d
mov byte [ebp + 0x21c4e], 9
mov byte [ebp + 0x21c4f], 0x79
mov byte [ebp + 0x21c50], 0x7c
mov byte [ebp + 0x21c51], 0x6b
mov byte [ebp + 0x21c52], 0x65
mov byte [ebp + 0x21c53], 0x60
mov byte [ebp + 0x21c54], 0x6a
mov byte [ebp + 0x21c55], 9
mov byte [ebp + 0x21c56], 0x62
mov byte [ebp + 0x21c57], 0x6c
mov byte [ebp + 0x21c58], 0x70
mov byte [ebp + 0x21c59], bl
mov byte [ebp + 0x21c5a], bl
mov byte [ebp + 0x21c5b], bl
mov byte [ebp + 0x21c5c], bl
mov byte [ebp + 0x21c5d], bl
mov byte [ebp + 0x21c5e], 0
lea ecx, [ebp + 0x21a9c]
push ecx
call fcn.00448570
add esp, 4
lea ecx, [ebp - 0x94]
call fcn.004024f0
mov byte [ebp - 4], 0x59
lea edx, [ebp - 0x94]
push edx
lea eax, [ebp + 0x21a9c]
push eax
mov ecx, dword [ebp - 0x2b4]
push ecx
call fcn.005dc7d0
add esp, 0xc
test eax, eax
je 0x49559b
cmp dword [ebp - 0x1d4], 2
jne 0x49557b
mov edx, dword [ebp - 0x94]
push edx
mov eax, dword [ebp - 0x90]
push eax
call fcn.006226ae
add esp, 8
test eax, eax
je 0x495574
mov ecx, dword [ebp - 0x94]
push ecx
mov edx, dword [ebp - 0xb0]
push edx
call fcn.006226ae
add esp, 8
test eax, eax
je 0x495574
or esi, 0xffffffff
jmp 0x495598
mov esi, 1
jmp 0x495598
mov eax, dword [ebp - 0x94]
push eax
mov ecx, dword [ebp - 0x74]
push ecx
call fcn.006226ae
add esp, 8
mov esi, eax
neg esi
sbb esi, esi
and esi, 0xfffffffe
inc esi
mov dword [ebp - 0x2c], esi
lea edx, [ebp - 0x2b4]
push edx
call fcn.0057acc0
add esp, 4
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x94]
call fcn.00402560
cmp esi, edi
jg 0x49626b
mov dword [ebp - 0x1f0], edi
mov dword [ebp - 0x1f4], edi
mov dword [ebp - 0x1cc], edi
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x1f4]
push ecx
mov edx, dword [ebp - 0xd0]
push edx
call fcn.0057bd10
add esp, 0xc
test eax, eax
je 0x49626b
mov byte [ebp + 0x21d44], bl
mov byte [ebp + 0x21d45], bl
mov byte [ebp + 0x21d46], bl
mov byte [ebp + 0x21d47], bl
mov byte [ebp + 0x21d48], bl
mov byte [ebp + 0x21d49], 0x6b
mov byte [ebp + 0x21d4a], 0x6c
mov byte [ebp + 0x21d4b], 0x6e
mov byte [ebp + 0x21d4c], 0x60
mov byte [ebp + 0x21d4d], 0x67
mov byte [ebp + 0x21d4e], 9
mov byte [ebp + 0x21d4f], 0x7b
mov byte [ebp + 0x21d50], 0x7a
mov byte [ebp + 0x21d51], 0x68
mov byte [ebp + 0x21d52], 9
mov byte [ebp + 0x21d53], 0x79
mov byte [ebp + 0x21d54], 0x7c
mov byte [ebp + 0x21d55], 0x6b
mov byte [ebp + 0x21d56], 0x65
mov byte [ebp + 0x21d57], 0x60
mov byte [ebp + 0x21d58], 0x6a
mov byte [ebp + 0x21d59], 9
mov byte [ebp + 0x21d5a], 0x62
mov byte [ebp + 0x21d5b], 0x6c
mov byte [ebp + 0x21d5c], 0x70
mov byte [ebp + 0x21d5d], bl
mov byte [ebp + 0x21d5e], bl
mov byte [ebp + 0x21d5f], bl
mov byte [ebp + 0x21d60], bl
mov byte [ebp + 0x21d61], bl
mov byte [ebp + 0x21d62], 0x64
mov byte [ebp + 0x21d63], 0x60
mov byte [ebp + 0x21d64], 0x60
mov byte [ebp + 0x21d65], 0x6b
mov byte [ebp + 0x21d66], 0x6a
mov byte [ebp + 0x21d67], 0x68
mov byte [ebp + 0x21d68], 0x62
mov byte [ebp + 0x21d69], 0x6a
mov byte [ebp + 0x21d6a], 0x68
mov byte [ebp + 0x21d6b], 0x78
mov byte [ebp + 0x21d6c], 0x6c
mov byte [ebp + 0x21d6d], 0x68
mov byte [ebp + 0x21d6e], 0x51
mov byte [ebp + 0x21d6f], 0x4e
mov byte [ebp + 0x21d70], 0x4a
mov byte [ebp + 0x21d71], 0x1e
mov byte [ebp + 0x21d72], 0x59
mov byte [ebp + 0x21d73], 0x4b
mov byte [ebp + 0x21d74], 0x65
mov byte [ebp + 0x21d75], 0x1b
mov byte [ebp + 0x21d76], 0x67
mov byte [ebp + 0x21d77], 0x7e
mov byte [ebp + 0x21d78], 0x63
mov byte [ebp + 0x21d79], 0x5a
mov byte [ebp + 0x21d7a], 0x6e
mov byte [ebp + 0x21d7b], 0x67
mov byte [ebp + 0x21d7c], 0x19
mov byte [ebp + 0x21d7d], 0x6d
mov byte [ebp + 0x21d7e], 0x18
mov byte [ebp + 0x21d7f], 0x1c
mov byte [ebp + 0x21d80], 0x4e
mov byte [ebp + 0x21d81], 0x62
mov byte [ebp + 0x21d82], 0x4e
mov byte [ebp + 0x21d83], 0x78
mov byte [ebp + 0x21d84], 0x43
mov byte [ebp + 0x21d85], 0x51
mov byte [ebp + 0x21d86], 0x71
mov byte [ebp + 0x21d87], 0x5e
mov byte [ebp + 0x21d88], 0x68
mov byte [ebp + 0x21d89], 0x1f
mov byte [ebp + 0x21d8a], 0x1d
mov byte [ebp + 0x21d8b], 0x67
mov byte [ebp + 0x21d8c], 0x45
mov byte [ebp + 0x21d8d], 0x47
mov byte [ebp + 0x21d8e], 0x4c
mov byte [ebp + 0x21d8f], 0x63
mov byte [ebp + 0x21d90], 0x7b
mov byte [ebp + 0x21d91], 0x70
mov byte [ebp + 0x21d92], 0x40
mov byte [ebp + 0x21d93], 2
mov byte [ebp + 0x21d94], 0x79
mov byte [ebp + 0x21d95], 0x1c
mov byte [ebp + 0x21d96], 0x5e
mov byte [ebp + 0x21d97], 0x50
mov byte [ebp + 0x21d98], 0x43
mov byte [ebp + 0x21d99], 0x5c
mov byte [ebp + 0x21d9a], 0x4b
mov byte [ebp + 0x21d9b], 0x66
mov byte [ebp + 0x21d9c], 0x67
mov byte [ebp + 0x21d9d], 0x43
mov byte [ebp + 0x21d9e], 0x1f
mov byte [ebp + 0x21d9f], 0x48
mov byte [ebp + 0x21da0], 0x5b
mov byte [ebp + 0x21da1], 0x5e
mov byte [ebp + 0x21da2], 0x40
mov byte [ebp + 0x21da3], 0x5d
mov byte [ebp + 0x21da4], 0x44
mov byte [ebp + 0x21da5], 0x7a
mov byte [ebp + 0x21da6], 0x45
mov byte [ebp + 0x21da7], 0x6a
mov byte [ebp + 0x21da8], 0x11
mov byte [ebp + 0x21da9], 0x48
mov byte [ebp + 0x21daa], 0x46
mov byte [ebp + 0x21dab], 0x4c
mov byte [ebp + 0x21dac], 0x7a
mov byte [ebp + 0x21dad], 0x4e
mov byte [ebp + 0x21dae], 0x5d
mov byte [ebp + 0x21daf], 0x46
mov byte [ebp + 0x21db0], 0x18
mov byte [ebp + 0x21db1], 0x19
mov byte [ebp + 0x21db2], 0x53
mov byte [ebp + 0x21db3], 0x62
mov byte [ebp + 0x21db4], 0x1b
mov byte [ebp + 0x21db5], 0x44
mov byte [ebp + 0x21db6], 0x73
mov byte [ebp + 0x21db7], 0x6a
mov byte [ebp + 0x21db8], 0x60
mov byte [ebp + 0x21db9], 0x7b
mov byte [ebp + 0x21dba], 0x4d
mov byte [ebp + 0x21dbb], 0x4a
mov byte [ebp + 0x21dbc], 0x10
mov byte [ebp + 0x21dbd], 0x4e
mov byte [ebp + 0x21dbe], 0x11
mov byte [ebp + 0x21dbf], 0x10
mov byte [ebp + 0x21dc0], 0x5b
mov byte [ebp + 0x21dc1], 0x7b
mov byte [ebp + 0x21dc2], 0x5a
mov byte [ebp + 0x21dc3], 0x11
mov byte [ebp + 0x21dc4], 0x4b
mov byte [ebp + 0x21dc5], 0x6a
mov byte [ebp + 0x21dc6], 0x47
mov byte [ebp + 0x21dc7], 0x6d
mov byte [ebp + 0x21dc8], 0x62
mov byte [ebp + 0x21dc9], 0x7d
mov byte [ebp + 0x21dca], 0x50
mov byte [ebp + 0x21dcb], 0x43
mov byte [ebp + 0x21dcc], 0x78
mov byte [ebp + 0x21dcd], 0x70
mov byte [ebp + 0x21dce], 0x70
mov byte [ebp + 0x21dcf], 6
mov byte [ebp + 0x21dd0], 0x65
mov byte [ebp + 0x21dd1], 0x18
mov byte [ebp + 0x21dd2], 0x4e
mov byte [ebp + 0x21dd3], 0x6e
mov byte [ebp + 0x21dd4], 0x68
mov byte [ebp + 0x21dd5], 0x6c
mov byte [ebp + 0x21dd6], 0x7c
mov byte [ebp + 0x21dd7], 0x19
mov byte [ebp + 0x21dd8], 0x66
mov byte [ebp + 0x21dd9], 0x42
mov byte [ebp + 0x21dda], 0x64
mov byte [ebp + 0x21ddb], 0x45
mov byte [ebp + 0x21ddc], 0x78
mov byte [ebp + 0x21ddd], 0x1d
mov byte [ebp + 0x21dde], 0x79
mov byte [ebp + 0x21ddf], 0x6d
mov byte [ebp + 0x21de0], 0x67
mov byte [ebp + 0x21de1], 6
mov byte [ebp + 0x21de2], 0x5f
mov byte [ebp + 0x21de3], 0x1d
mov byte [ebp + 0x21de4], 0x42
mov byte [ebp + 0x21de5], 0x6b
mov byte [ebp + 0x21de6], 0x61
mov byte [ebp + 0x21de7], 0x6a
mov byte [ebp + 0x21de8], 0x62
mov byte [ebp + 0x21de9], 0x19
mov byte [ebp + 0x21dea], 0x45
mov byte [ebp + 0x21deb], 0x4d
mov byte [ebp + 0x21dec], 0x70
mov byte [ebp + 0x21ded], 0x5e
mov byte [ebp + 0x21dee], 0x45
mov byte [ebp + 0x21def], 0x7d
mov byte [ebp + 0x21df0], 0x1f
mov byte [ebp + 0x21df1], 0x68
mov byte [ebp + 0x21df2], 0x4d
mov byte [ebp + 0x21df3], 0x58
mov byte [ebp + 0x21df4], 0x45
mov byte [ebp + 0x21df5], 0x65
mov byte [ebp + 0x21df6], 0x19
mov byte [ebp + 0x21df7], 0x6a
mov byte [ebp + 0x21df8], 0x50
mov byte [ebp + 0x21df9], 0x59
mov byte [ebp + 0x21dfa], 0x5f
mov byte [ebp + 0x21dfb], 0x4d
mov byte [ebp + 0x21dfc], 0x51
mov byte [ebp + 0x21dfd], 0x65
mov byte [ebp + 0x21dfe], 0x46
mov byte [ebp + 0x21dff], 0x67
mov byte [ebp + 0x21e00], 0x1b
mov byte [ebp + 0x21e01], 0x68
mov byte [ebp + 0x21e02], 0x4e
mov byte [ebp + 0x21e03], 0x7d
mov byte [ebp + 0x21e04], 0x64
mov byte [ebp + 0x21e05], 0x4f
mov byte [ebp + 0x21e06], 0x5b
mov byte [ebp + 0x21e07], 0x64
mov byte [ebp + 0x21e08], 0x4d
mov byte [ebp + 0x21e09], 0x7b
mov byte [ebp + 0x21e0a], 0x7b
mov byte [ebp + 0x21e0b], 0x68
mov byte [ebp + 0x21e0c], 2
mov byte [ebp + 0x21e0d], 0x42
mov byte [ebp + 0x21e0e], 0x7e
mov byte [ebp + 0x21e0f], 0x42
mov byte [ebp + 0x21e10], 0x1b
mov byte [ebp + 0x21e11], 0x6b
mov byte [ebp + 0x21e12], 0x7b
mov byte [ebp + 0x21e13], 0x53
mov byte [ebp + 0x21e14], 0x1f
mov byte [ebp + 0x21e15], 0x63
mov byte [ebp + 0x21e16], 0x5b
mov byte [ebp + 0x21e17], 0x70
mov byte [ebp + 0x21e18], 0x5c
mov byte [ebp + 0x21e19], 0x5f
mov byte [ebp + 0x21e1a], 0x79
mov byte [ebp + 0x21e1b], 0x6b
mov byte [ebp + 0x21e1c], 0x7a
mov byte [ebp + 0x21e1d], 0x7b
mov byte [ebp + 0x21e1e], 0x7a
mov byte [ebp + 0x21e1f], 0x7d
mov byte [ebp + 0x21e20], 0x64
mov byte [ebp + 0x21e21], 0x7c
mov byte [ebp + 0x21e22], 0x58
mov byte [ebp + 0x21e23], 0x6e
mov byte [ebp + 0x21e24], 0x6a
mov byte [ebp + 0x21e25], 0x7a
mov byte [ebp + 0x21e26], 0x70
mov byte [ebp + 0x21e27], 0x1d
mov byte [ebp + 0x21e28], 0x45
mov byte [ebp + 0x21e29], 0x4e
mov byte [ebp + 0x21e2a], 0x1c
mov byte [ebp + 0x21e2b], 0x41
mov byte [ebp + 0x21e2c], 0x60
mov byte [ebp + 0x21e2d], 0x18
mov byte [ebp + 0x21e2e], 0x59
mov byte [ebp + 0x21e2f], 0x4c
mov byte [ebp + 0x21e30], 0x4a
mov byte [ebp + 0x21e31], 0x5f
mov byte [ebp + 0x21e32], 0x5c
mov byte [ebp + 0x21e33], 0x4e
mov byte [ebp + 0x21e34], 0x1d
mov byte [ebp + 0x21e35], 0x4e
mov byte [ebp + 0x21e36], 0x6b
mov byte [ebp + 0x21e37], 0x47
mov byte [ebp + 0x21e38], 0x7b
mov byte [ebp + 0x21e39], 0x7a
mov byte [ebp + 0x21e3a], 0x53
mov byte [ebp + 0x21e3b], 0x67
mov byte [ebp + 0x21e3c], 0x44
mov byte [ebp + 0x21e3d], 0x1b
mov byte [ebp + 0x21e3e], 0x7c
mov byte [ebp + 0x21e3f], 2
mov byte [ebp + 0x21e40], 0x1c
mov byte [ebp + 0x21e41], 0x5e
mov byte [ebp + 0x21e42], 0x6e
mov byte [ebp + 0x21e43], 0x40
mov byte [ebp + 0x21e44], 2
mov byte [ebp + 0x21e45], 0x1b
mov byte [ebp + 0x21e46], 0x4f
mov byte [ebp + 0x21e47], 0x65
mov byte [ebp + 0x21e48], 0x7e
mov byte [ebp + 0x21e49], 0x43
mov byte [ebp + 0x21e4a], 0x7a
mov byte [ebp + 0x21e4b], 0x58
mov byte [ebp + 0x21e4c], 0x62
mov byte [ebp + 0x21e4d], 0x18
mov byte [ebp + 0x21e4e], 0x10
mov byte [ebp + 0x21e4f], 0x1d
mov byte [ebp + 0x21e50], 0x68
mov byte [ebp + 0x21e51], 0x50
mov byte [ebp + 0x21e52], 0x63
mov byte [ebp + 0x21e53], 0x58
mov byte [ebp + 0x21e54], 0x51
mov byte [ebp + 0x21e55], 0x46
mov byte [ebp + 0x21e56], 0x5f
mov byte [ebp + 0x21e57], 0x71
mov byte [ebp + 0x21e58], 0x4b
mov byte [ebp + 0x21e59], 0x73
mov byte [ebp + 0x21e5a], 0x43
mov byte [ebp + 0x21e5b], 0x6d
mov byte [ebp + 0x21e5c], 0x61
mov byte [ebp + 0x21e5d], 0x18
mov byte [ebp + 0x21e5e], 0x67
mov byte [ebp + 0x21e5f], 0x6e
mov byte [ebp + 0x21e60], 0x1d
mov byte [ebp + 0x21e61], 0x7f
mov byte [ebp + 0x21e62], 0x51
mov byte [ebp + 0x21e63], 0x41
mov byte [ebp + 0x21e64], 0x7c
mov byte [ebp + 0x21e65], 0x70
mov byte [ebp + 0x21e66], 0x5a
mov byte [ebp + 0x21e67], 0x68
mov byte [ebp + 0x21e68], 0x45
mov byte [ebp + 0x21e69], 0x66
mov byte [ebp + 0x21e6a], 0x79
mov byte [ebp + 0x21e6b], 0x41
mov byte [ebp + 0x21e6c], 0x46
mov byte [ebp + 0x21e6d], 0x40
mov byte [ebp + 0x21e6e], 0x7d
mov byte [ebp + 0x21e6f], 0x1e
mov byte [ebp + 0x21e70], 0x7f
mov byte [ebp + 0x21e71], 0x6b
mov byte [ebp + 0x21e72], 0x65
mov byte [ebp + 0x21e73], 0x1e
mov byte [ebp + 0x21e74], 6
mov byte [ebp + 0x21e75], 0x58
mov byte [ebp + 0x21e76], 0x7c
mov byte [ebp + 0x21e77], 0x48
mov byte [ebp + 0x21e78], 0x48
mov byte [ebp + 0x21e79], 0x1f
mov byte [ebp + 0x21e7a], 0x44
mov byte [ebp + 0x21e7b], 0x6d
mov byte [ebp + 0x21e7c], 0x5e
mov byte [ebp + 0x21e7d], 0x4f
mov byte [ebp + 0x21e7e], 0x7e
mov byte [ebp + 0x21e7f], 0x4d
mov byte [ebp + 0x21e80], 0x1c
mov byte [ebp + 0x21e81], 0x5c
mov byte [ebp + 0x21e82], 0x44
mov byte [ebp + 0x21e83], 0x4a
mov byte [ebp + 0x21e84], 0x59
mov byte [ebp + 0x21e85], 0x5f
mov byte [ebp + 0x21e86], 2
mov byte [ebp + 0x21e87], 0x5f
mov byte [ebp + 0x21e88], 0x5a
mov byte [ebp + 0x21e89], 0x18
mov byte [ebp + 0x21e8a], 0x4d
mov byte [ebp + 0x21e8b], 0x51
mov byte [ebp + 0x21e8c], 0x5c
mov byte [ebp + 0x21e8d], 0x1b
mov byte [ebp + 0x21e8e], 0x1a
mov byte [ebp + 0x21e8f], 0x50
mov byte [ebp + 0x21e90], 0x46
mov byte [ebp + 0x21e91], 0x5b
mov byte [ebp + 0x21e92], 0x7e
mov byte [ebp + 0x21e93], 0x64
mov byte [ebp + 0x21e94], 0x6e
mov byte [ebp + 0x21e95], 0x1b
mov byte [ebp + 0x21e96], 0x5d
mov byte [ebp + 0x21e97], 0x4e
mov byte [ebp + 0x21e98], 0x5d
mov byte [ebp + 0x21e99], 0x1e
mov byte [ebp + 0x21e9a], 6
mov byte [ebp + 0x21e9b], 0x7e
mov byte [ebp + 0x21e9c], 0x4b
mov byte [ebp + 0x21e9d], 0x64
mov byte [ebp + 0x21e9e], 0x5f
mov byte [ebp + 0x21e9f], 0x7c
mov byte [ebp + 0x21ea0], 0x45
mov byte [ebp + 0x21ea1], 0x1c
mov byte [ebp + 0x21ea2], 0x5f
mov byte [ebp + 0x21ea3], 0x4a
mov byte [ebp + 0x21ea4], 0x63
mov byte [ebp + 0x21ea5], 0x4c
mov byte [ebp + 0x21ea6], 0x70
mov byte [ebp + 0x21ea7], 6
mov byte [ebp + 0x21ea8], 0x47
mov byte [ebp + 0x21ea9], 0x4e
mov byte [ebp + 0x21eaa], 0x68
mov byte [ebp + 0x21eab], 0x7d
mov byte [ebp + 0x21eac], 0x45
mov byte [ebp + 0x21ead], 0x11
mov byte [ebp + 0x21eae], 0x11
mov byte [ebp + 0x21eaf], 0x40
mov byte [ebp + 0x21eb0], 0x7e
mov byte [ebp + 0x21eb1], 0x48
mov byte [ebp + 0x21eb2], 0x7a
mov byte [ebp + 0x21eb3], 0x4e
mov byte [ebp + 0x21eb4], 0x73
mov byte [ebp + 0x21eb5], 0x65
mov byte [ebp + 0x21eb6], 0x5d
mov byte [ebp + 0x21eb7], 0x70
mov byte [ebp + 0x21eb8], 0x53
mov byte [ebp + 0x21eb9], 0x1f
mov byte [ebp + 0x21eba], 0x40
mov byte [ebp + 0x21ebb], 0x7c
mov byte [ebp + 0x21ebc], 0x1f
mov byte [ebp + 0x21ebd], 0x68
mov byte [ebp + 0x21ebe], 0x5a
mov byte [ebp + 0x21ebf], 0x61
mov byte [ebp + 0x21ec0], 2
mov byte [ebp + 0x21ec1], 0x6d
mov byte [ebp + 0x21ec2], 0x40
mov byte [ebp + 0x21ec3], 0x5e
mov byte [ebp + 0x21ec4], 0x60
mov byte [ebp + 0x21ec5], 0x6b
mov byte [ebp + 0x21ec6], 0x68
mov byte [ebp + 0x21ec7], 0x5e
mov byte [ebp + 0x21ec8], 0x14
mov byte [ebp + 0x21ec9], 0x14
mov byte [ebp + 0x21eca], bl
mov byte [ebp + 0x21ecb], bl
mov byte [ebp + 0x21ecc], bl
mov byte [ebp + 0x21ecd], bl
mov byte [ebp + 0x21ece], bl
mov byte [ebp + 0x21ecf], 0x6c
mov byte [ebp + 0x21ed0], 0x67
mov byte [ebp + 0x21ed1], 0x6d
mov byte [ebp + 0x21ed2], 9
mov byte [ebp + 0x21ed3], 0x7b
mov byte [ebp + 0x21ed4], 0x7a
mov byte [ebp + 0x21ed5], 0x68
mov byte [ebp + 0x21ed6], 9
mov byte [ebp + 0x21ed7], 0x79
mov byte [ebp + 0x21ed8], 0x7c
mov byte [ebp + 0x21ed9], 0x6b
mov byte [ebp + 0x21eda], 0x65
mov byte [ebp + 0x21edb], 0x60
mov byte [ebp + 0x21edc], 0x6a
mov byte [ebp + 0x21edd], 9
mov byte [ebp + 0x21ede], 0x62
mov byte [ebp + 0x21edf], 0x6c
mov byte [ebp + 0x21ee0], 0x70
mov byte [ebp + 0x21ee1], bl
mov byte [ebp + 0x21ee2], bl
mov byte [ebp + 0x21ee3], bl
mov byte [ebp + 0x21ee4], bl
mov byte [ebp + 0x21ee5], bl
mov byte [ebp + 0x21ee6], 0
lea eax, [ebp + 0x21d44]
push eax
call fcn.00448570
add esp, 4
cmp dword [ebp - 0x1d4], 2
jne 0x49620f
mov dword [ebp - 0x1dc], edi
lea ecx, [ebp - 0x1dc]
push ecx
mov edx, dword [ebp - 0x90]
push edx
mov eax, dword [ebp - 0xc4]
push eax
mov ecx, dword [ebp - 0x1f4]
push ecx
lea edx, [ebp + 0x21d44]
push edx
call fcn.005dc530
mov esi, eax
mov dword [ebp - 0x1e4], edi
lea eax, [ebp - 0x1e4]
push eax
mov ecx, dword [ebp - 0xb0]
push ecx
mov edx, dword [ebp - 0xc4]
push edx
mov eax, dword [ebp - 0x1f4]
push eax
lea ecx, [ebp + 0x21d44]
push ecx
call fcn.005dc530
add esp, 0x28
cmp esi, edi
je 0x4961fd
cmp eax, edi
je 0x4961f3
cmp dword [ebp - 0x1dc], edi
jne 0x496209
cmp dword [ebp - 0x1e4], edi
jne 0x496209
cmp dword [ebp - 0x2c], edi
jmp 0x496253
cmp dword [ebp - 0x1dc], edi
jne 0x496209
jmp 0x49625c
cmp eax, edi
je 0x49625c
cmp dword [ebp - 0x1e4], edi
je 0x49625c
add dword [ebp - 0x2c], 2
jmp 0x49625c
mov dword [ebp - 0x280], edi
lea edx, [ebp - 0x280]
push edx
mov eax, dword [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0xc4]
push ecx
mov edx, dword [ebp - 0x1f4]
push edx
lea eax, [ebp + 0x21d44]
push eax
call fcn.005dc530
add esp, 0x14
cmp eax, edi
je 0x49625c
cmp dword [ebp - 0x280], edi
je 0x496251
add esi, 2
mov dword [ebp - 0x2c], esi
jmp 0x49625c
cmp esi, edi
jne 0x49625c
mov dword [ebp - 0x2c], 0xfffffffe
lea ecx, [ebp - 0x1f4]
push ecx
call fcn.0057acc0
add esp, 4
mov edx, dword [ebp - 0xc8]
push edx
call fcn.005f4e52
mov eax, dword [ebp - 0xd0]
push eax
call fcn.005f4e52
add esp, 8
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0xb0]
call fcn.00402560
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x90]
call fcn.00402560
xor ecx, ecx
cmp dword [ebp - 0x2c], edi
setg cl
mov esi, ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x74]
call fcn.00402560
mov eax, esi
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.0045f710
mov dword [ebp - 0x1ec], eax
test eax, eax
jl case.0x490260.5292
mov edx, eax
push edx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edi, dword [eax]
cmp dword [edi + 0x34c], 8
jne 0x496329
cmp dword [edi + 0x350], 0
je 0x496300
mov edi, dword [edi + 0x350]
cmp dword [edi + 0x340], 0
je 0x496329
cmp byte [edi + 0x1ad], 0
je case.0x490260.5292
mov eax, dword [edi + 0x340]
cmp byte [eax + 0x1ad], 0
je case.0x490260.5292
cmp dword [edi + 0x5c], 0
je 0x4965ce
lea ebx, [edi + 0x54]
mov ecx, ebx
call fcn.004011e0
push 0x2e
push eax
call fcn.006206a1
add esp, 8
mov dword [ebp - 0xa8], eax
test eax, eax
je 0x4917be
push 0x681be8
mov ecx, eax
push ecx
call fcn.0062609a
add esp, 8
test eax, eax
jne 0x4917be
xor edx, edx
mov eax, dword [ebp - 0xa8]
mov word [eax], dx
lea ecx, [ebp + 0x1fc84]
call fcn.004011c0
mov byte [ebp - 4], 0x5a
push 0
mov ecx, ebx
call fcn.004011e0
push eax
push str._s.mp4
lea ecx, [ebp + 0x1fc84]
call fcn.004021a0
mov eax, dword [ebp + 0x1fc84]
test eax, eax
jne 0x4963b2
lea eax, [ebp + 0x1fc88]
lea ecx, [edi + 0x20]
push eax
call fcn.005ce650
mov ecx, dword [edi + 0x4f8]
push ecx
lea ecx, [edi + 0x20]
call fcn.005d0350
mov ecx, ebx
call fcn.004011e0
push eax
lea ecx, [ebp + 0x1fd50]
call fcn.00402170
mov byte [ebp - 4], 0x5b
lea ecx, [edi + 0xf4]
call fcn.004011e0
push eax
mov edx, dword [ebp - 0x1ec]
push edx
push 0
lea eax, [ebp + 0x1fd50]
push eax
mov ecx, dword [esi + 0x234]
call fcn.0049d5f0
mov ecx, ebx
call fcn.004011e0
push eax
lea ecx, [ebp + 0x1fd50]
call fcn.00453610
test al, al
jne 0x496437
mov eax, dword [ebp + 0x1fd50]
test eax, eax
jne 0x49642f
lea eax, [ebp + 0x1fd54]
push eax
mov ecx, edi
call fcn.005be330
mov dword [ebp - 0x470], 1
mov ecx, dword [edi + 0x4f8]
mov dword [ebp - 0x468], ecx
lea edx, [ebp - 0x470]
push edx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov dword [ebp - 0x1b0], eax
test eax, eax
jl 0x496567
mov ecx, ebx
call fcn.004011e0
push eax
lea ecx, [ebp + 0x1fd50]
call fcn.004017e0
cmp dword [0x75dbe8], 0
je 0x4964bb
mov eax, dword [0x75dce4]
test eax, eax
mov ecx, eax
jne 0x4964a0
mov ecx, 0x75dce8
mov eax, dword [0x75dc94]
test eax, eax
jne 0x4964ae
mov eax, 0x75dc98
push ecx
push eax
lea ecx, [ebp + 0x1fd50]
call fcn.0043c540
cmp dword [0x75dbec], 0
je 0x4964ef
mov eax, dword [0x75dd88]
test eax, eax
mov ecx, eax
jne 0x4964d4
mov ecx, 0x75dd8c
mov eax, dword [0x75dd7c]
test eax, eax
jne 0x4964e2
mov eax, 0x75dd80
push ecx
push eax
lea ecx, [ebp + 0x1fd50]
call fcn.0043c540
mov eax, dword [ebp + 0x1fd50]
test eax, eax
jne 0x4964ff
lea eax, [ebp + 0x1fd54]
push eax
mov ebx, dword [ebp - 0x1b0]
push ebx
push 9
mov eax, dword [esi + 0x5f0]
push eax
call fcn.00453bd0
add esp, 0x10
lea ecx, [ebp + 0x1fc9c]
call fcn.004011c0
mov byte [ebp - 4], 0x5c
lea ecx, [ebp + 0x1fc9c]
push ecx
mov ecx, edi
call fcn.005b9000
mov eax, dword [ebp + 0x1fc9c]
test eax, eax
jne 0x496545
lea eax, [ebp + 0x1fca0]
push eax
push ebx
push 0
mov edx, dword [esi + 0x5f0]
push edx
call fcn.00453bd0
add esp, 0x10
mov byte [ebp - 4], 0x5b
lea ecx, [ebp + 0x1fc9c]
call fcn.00401210
push 8
call fcn.005f4e18
add esp, 4
mov edi, eax
mov eax, dword [ebp - 0x1ec]
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov ecx, dword [eax]
mov dword [edi], ecx
add esi, 0x5d0
mov dword [edi + 4], esi
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
push 0x4c9a90
call fcn.006005d0
mov byte [ebp - 4], 0x5a
lea ecx, [ebp + 0x1fd50]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x1fc84]
call fcn.00401210
mov eax, 1
wait
jmp 0x4983e5
cmp dword [edi + 0x18], 0
je 0x4917be
mov edx, dword [edi + 0x18]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4917be
push ebx
push 0x14d5
push 0x111
mov eax, dword [edi + 0x18]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl case.0x490260.5292
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edi, dword [eax]
mov eax, dword [edi + 0xec]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x496631
sub eax, edx
jne 0x496660
cmp dword [edi + 0xdc], eax
je case.0x490260.5292
mov eax, dword [edi + 0xdc]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x496651
sub eax, edx
je case.0x490260.5292
cmp dword [edi + 0x4f8], 0
je 0x496688
cmp dword [edi + 0x3c4], 0x590
jle 0x496688
push 0
push 0x14b1
push 0x111
mov ecx, esi
call fcn.0042ec10
cmp dword [edi + 0x354], 0
jne case.0x490260.5292
cmp dword [edi + 0x34c], 0
jne case.0x490260.5292
mov eax, dword [edi + 0x17c]
test eax, 0x1000000
je 0x496722
test al, 8
je 0x496722
mov ecx, dword [edi + 0x20]
push ecx
lea ecx, [ebp - 0xd8]
call fcn.004030a0
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0xd8]
push edx
mov eax, dword [edi + 0x20]
push eax
call fcn.0047d130
mov ecx, dword [ebp - 0xd8]
push ecx
call fcn.00453f40
add esp, 0xc
test eax, eax
jne 0x4966fc
push 3
mov edx, dword [ebp - 0xd8]
push edx
call fcn.00453fd0
add esp, 8
jmp 0x496713
cmp eax, 3
je 0x496713
push edi
push 0x14ea
push 0x111
mov ecx, esi
call fcn.0042ec10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd8]
call fcn.00402560
mov edx, dword [edi + 0xe4]
mov eax, edx
lea ecx, [eax + 1]
mov dword [ebp - 0x1b0], ecx
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x496733
sub eax, dword [ebp - 0x1b0]
je 0x496755
push 0x2e
push edx
call fcn.00622170
add esp, 8
test eax, eax
jne case.0x490260.5292
lea ecx, [edi + 0x54]
call fcn.004011e0
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x496760
sub eax, edx
sar eax, 1
je case.0x490260.5292
cmp byte [edi + 0x36f], cl
je 0x4967a3
cmp byte [edi + 0x370], cl
jne 0x4967a3
cmp byte [edi + 0x37a], cl
jne 0x4967a3
mov eax, dword [edi + 0x28]
push 0x3f
push eax
call fcn.00622170
add esp, 8
test eax, eax
je case.0x490260.5292
lea ecx, [ebp + 0x1fd5c]
call fcn.004011c0
mov byte [ebp - 4], 0x5e
lea ecx, [edi + 0x54]
call fcn.004011e0
push eax
lea ecx, [ebp + 0x1fd5c]
call fcn.004017e0
cmp byte [edi + 0x36f], 0
jne 0x496890
mov eax, dword [edi + 0xec]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4967e0
sub eax, edx
je 0x4967f3
lea eax, [edi + 0xec]
jmp 0x496810
mov edx, dword [edi + 0xdc]
push edx
lea ecx, [ebp - 0x2e0]
call fcn.004030a0
mov byte [ebp - 4], 0x5f
mov dword [ebp - 0x48], 1
mov eax, dword [eax]
lea ecx, [ebp + 0x1fd5c]
push ecx
push eax
lea edx, [esi + 0x81c]
push edx
mov ecx, edi
call fcn.005c2fc0
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 4], 0x5e
test byte [ebp - 0x48], 1
je 0x49684a
and dword [ebp - 0x48], 0xfffffffe
lea ecx, [ebp - 0x2e0]
call fcn.00402560
cmp dword [ebp - 0x2e8], 0
je 0x496890
mov byte [ebp - 0x65], 1
mov eax, dword [ebp + 0x1fd5c]
test eax, eax
jne 0x496867
lea eax, [ebp + 0x1fd60]
push 0x5c
push eax
call fcn.006206a1
add esp, 8
test eax, eax
je 0x496a00
push 0x2e
push eax
call fcn.00622700
add esp, 8
test eax, eax
jne 0x496a00
mov byte [ebp - 0x65], al
lea ecx, [edi + 0x54]
call fcn.004011e0
push 0x5c
push eax
call fcn.006206a1
add esp, 8
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 0x1fd5c]
test eax, eax
jne 0x4968b6
lea eax, [ebp + 0x1fd60]
push 0x5c
push eax
call fcn.006206a1
add esp, 8
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x78], 0
je 0x4968ce
add dword [ebp - 0x78], 2
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x4968db
add eax, 2
mov dword [ebp - 0x6c], eax
cmp dword [edi + 8], 0
jne 0x496a47
cmp byte [edi + 0x1b3], 0
je 0x496a47
cmp dword [ebp - 0x78], 0
je 0x496a47
test eax, eax
je 0x496a47
cmp dword [edi + 0xdc], 0
je 0x496a47
lea ecx, [ebp + 0x1fccc]
call fcn.004011c0
mov byte [ebp - 4], 0x60
mov eax, dword [edi + 0xdc]
push eax
lea ecx, [ebp + 0x1fcc0]
call fcn.004070a0
mov byte [ebp - 4], 0x61
push 0x678d88
lea ecx, [ebp + 0x1fc6c]
call fcn.004070a0
mov byte [ebp - 4], 0x62
push 0x2e
mov ecx, dword [ebp - 0x6c]
push ecx
call fcn.00622700
add esp, 8
mov dword [ebp - 0x2f0], eax
test eax, eax
je 0x49696d
add eax, 2
mov dword [ebp - 0x2f0], eax
jne 0x496970
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp + 0x1fcc0]
test ecx, ecx
jne 0x496980
lea ecx, [ebp + 0x1fcc4]
mov edx, dword [0x75dd28]
push edx
push eax
push ecx
mov eax, dword [ebp - 0x78]
push eax
mov ecx, dword [0x75eff4]
push ecx
lea ecx, [ebp + 0x1fccc]
call fcn.00411c20
mov eax, dword [ebp + 0x1fc6c]
test eax, eax
jne 0x4969af
lea eax, [ebp + 0x1fc70]
mov ecx, dword [ebp + 0x1fccc]
test ecx, ecx
jne 0x4969bf
lea ecx, [ebp + 0x1fcd0]
push 0x50024
push eax
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 7
jne 0x496a1a
mov byte [ebp - 4], 0x61
lea ecx, [ebp + 0x1fc6c]
call fcn.00401210
mov byte [ebp - 4], 0x60
lea ecx, [ebp + 0x1fcc0]
call fcn.00401210
mov byte [ebp - 4], 0x5e
lea ecx, [ebp + 0x1fccc]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x1fd5c]
call fcn.00401210
mov eax, 1
wait
jmp 0x4983e5
mov byte [ebp - 4], 0x61
lea ecx, [ebp + 0x1fc6c]
call fcn.00401210
mov byte [ebp - 4], 0x60
lea ecx, [ebp + 0x1fcc0]
call fcn.00401210
mov byte [ebp - 4], 0x5e
lea ecx, [ebp + 0x1fccc]
call fcn.00401210
mov dl, byte [edi + 0x192]
mov byte [ebp - 0x5a], dl
mov byte [edi + 0x192], 1
lea eax, [esi + 0x81c]
push 1
lea ecx, [ebp + 0x1fd5c]
push ecx
push eax
mov ecx, edi
call fcn.005c15f0
mov eax, dword [edi + 0xec]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x496a77
sub eax, edx
je 0x496a8a
lea eax, [edi + 0xec]
jmp 0x496aa4
mov edx, dword [edi + 0xdc]
push edx
lea ecx, [ebp - 0x2f8]
call fcn.004030a0
mov byte [ebp - 4], 0x63
or dword [ebp - 0x48], 2
mov eax, dword [eax]
lea ecx, [ebp + 0x1fd5c]
push ecx
push eax
lea eax, [esi + 0x81c]
push eax
mov ecx, edi
call fcn.005c2fc0
mov dword [ebp - 4], 0x5e
test byte [ebp - 0x48], 2
je 0x496ad8
and dword [ebp - 0x48], 0xfffffffd
lea ecx, [ebp - 0x2f8]
call fcn.00402560
cmp dword [edi + 0x28], 0
je 0x496c1a
mov eax, dword [edi + 0x28]
push 0x3f
push eax
call fcn.00622170
add esp, 8
test eax, eax
jne 0x496c1a
mov eax, dword [edi + 0xec]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x496b01
sub eax, edx
jne 0x496c1a
cmp dword [edi + 0xd0], 3
je 0x496c1a
push 0x2e
mov edx, dword [ebp - 0x78]
push edx
call fcn.006206a1
add esp, 8
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp + 0x1fd5c]
test eax, eax
jne 0x496b41
lea eax, [ebp + 0x1fd60]
push 0x2e
push eax
call fcn.006206a1
add esp, 8
cmp dword [ebp - 0x1d8], 0
je 0x496c1a
test eax, eax
je 0x496c1a
push eax
mov eax, dword [ebp - 0x1d8]
push eax
call fcn.0062609a
add esp, 8
test eax, eax
je 0x496c1a
push 0
mov ecx, dword [ebp - 0x1d8]
push ecx
lea edx, [ebp - 0xe0]
push edx
call fcn.00402a60
mov byte [ebp - 4], 0x64
mov eax, dword [ebp - 0xe0]
push eax
call fcn.005b7fd0
add esp, 0x10
test al, al
jne 0x496c0b
mov ecx, dword [ebp - 0xe0]
push ecx
mov ecx, 0x75dca0
call fcn.00430b50
test eax, eax
jne 0x496c0b
cmp dword [edi + 0x950], eax
je 0x496c0b
mov eax, dword [edi + 0x950]
mov dword [edi + 0xd0], 2
mov dl, byte [ebp - 0x5a]
mov byte [edi + 0x192], dl
mov byte [eax + 0x25e], 1
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0xe0]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x1fd5c]
call fcn.00401210
mov eax, 1
wait
jmp 0x4983e5
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0xe0]
call fcn.00402560
cmp byte [edi + 0x1a4], 0
je 0x496c5b
cmp dword [ebp - 0x6c], 0
je 0x496c5b
push 0x6862a0
mov eax, dword [ebp - 0x6c]
push eax
call fcn.0062609a
add esp, 8
test eax, eax
je 0x496a00
push 0x686294
mov ecx, dword [ebp - 0x6c]
push ecx
call fcn.0062609a
add esp, 8
test eax, eax
je 0x496a00
cmp byte [edi + 0x1a0], 0
jne 0x496a00
push 0x100
lea edx, [ebp + 0x20568]
push edx
push 0x100
lea eax, [ebp + 0x21568]
push eax
push 0x100
lea ecx, [ebp + 0x21168]
push ecx
push 3
lea edx, [ebp + 0x21a58]
push edx
lea ecx, [edi + 0x54]
call fcn.004011e0
push eax
call fcn.00623b27
add esp, 0x24
mov dword [ebp - 0x178], eax
mov eax, dword [ebp + 0x1fd5c]
test eax, eax
jne 0x496cbc
lea eax, [ebp + 0x1fd60]
push 0x100
lea ecx, [ebp + 0x20d68]
push ecx
push 0x100
lea edx, [ebp + 0x20f68]
push edx
push 0x100
lea ecx, [ebp + 0x21368]
push ecx
push 3
lea edx, [ebp + 0x21a50]
push edx
push eax
call fcn.00623b27
add esp, 0x24
cmp dword [ebp - 0x178], 0
jne 0x496dc8
test eax, eax
jne 0x496dc8
lea ecx, [ebp + 0x1fc54]
call fcn.004011c0
mov byte [ebp - 4], 0x65
mov al, 1
cmp byte [edi + 0x36b], 0
jne 0x496d33
cmp byte [edi + 0x1b3], 0
jne 0x496d33
cmp byte [edi + 0x364], 0
je 0x496d35
xor al, al
cmp byte [edi + 0x1b3], 0
jne 0x496d55
cmp byte [edi + 0x365], 0
jne 0x496d55
lea ecx, [ebp + 0x20f68]
mov dword [ebp - 0xa8], ecx
jmp 0x496d61
lea edx, [ebp + 0x21568]
mov dword [ebp - 0xa8], edx
test al, al
je 0x496d73
lea ecx, [ebp + 0x21368]
lea eax, [ebp + 0x21a50]
jmp 0x496d7f
lea ecx, [ebp + 0x21168]
lea eax, [ebp + 0x21a58]
push 0
lea edx, [ebp + 0x20d68]
push edx
mov edx, dword [ebp - 0xa8]
push edx
push ecx
push eax
push str._s_s_s_s
lea ecx, [ebp + 0x1fc54]
call fcn.0043c2c0
mov eax, dword [ebp + 0x1fc54]
test eax, eax
jne 0x496db1
lea eax, [ebp + 0x1fc58]
push eax
mov ecx, edi
call fcn.005be330
mov byte [ebp - 4], 0x5e
lea ecx, [ebp + 0x1fc54]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x1fd5c]
call fcn.00401210
mov edx, dword [ebp + 0x22080]
cmp edx, 0x14db
je case.0x48da20.5013
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl 0x496fd5
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edi, dword [eax]
cmp dword [edi + 0x5c], 0
je 0x496e1a
cmp byte [edi + 0x1a0], 0
jne case.0x490260.5292
cmp dword [edi + 0x354], 0
jne case.0x490260.5292
cmp dword [edi + 0x34c], 0
jne case.0x490260.5292
cmp byte [edi + 0x1b3], 0
jne case.0x490260.5292
cmp byte [edi + 0x365], 0
jne case.0x490260.5292
lea ecx, [ebp - 0x120]
call fcn.004024f0
mov byte [ebp - 4], 0x66
push 0
lea eax, [ebp - 0x120]
push eax
lea ecx, [edi + 0x20]
call fcn.005928c0
lea ecx, [ebp + 0x3488]
call fcn.0054c120
mov byte [ebp - 4], 0x67
push 0
mov ecx, dword [ebp - 0x120]
push ecx
lea ecx, [ebp + 0x3488]
call fcn.0054d9b0
test eax, eax
je 0x496fb7
lea ecx, [ebp + 0x1d470]
call fcn.005b9780
mov byte [ebp - 4], 0x68
push 1
lea edx, [ebp + 0x1d470]
push edx
lea ecx, [ebp + 0x3488]
call fcn.0054d060
test eax, eax
jne 0x496fa8
lea ecx, [ebp + 0x1fcfc]
call fcn.004011c0
mov byte [ebp - 4], 0x69
push 1
lea eax, [ebp + 0x1fcfc]
push eax
lea ecx, [esi + 0x81c]
push ecx
lea ecx, [ebp + 0x1d470]
call fcn.005c15f0
mov eax, dword [ebp + 0x1fcfc]
test eax, eax
jne 0x496efe
lea eax, [ebp + 0x1fd00]
push 0x5c
push eax
call fcn.006206a1
add esp, 8
test eax, eax
je 0x496f99
add eax, 2
mov dword [ebp - 0x178], eax
cmp word [eax], 0
je 0x496f99
cmp dword [edi + 0x5c], 0
je 0x496f45
lea ecx, [edi + 0x54]
call fcn.004011e0
push 0x2e
push eax
call fcn.006206a1
add esp, 8
mov dword [ebp - 0x188], eax
jmp 0x496f4f
mov dword [ebp - 0x188], 0
push 0x2e
mov edx, dword [ebp - 0x178]
push edx
call fcn.006206a1
add esp, 8
test eax, eax
je 0x496f99
cmp dword [ebp - 0x188], 0
je 0x496f81
push eax
mov eax, dword [ebp - 0x188]
push eax
call fcn.0062609a
add esp, 8
test eax, eax
je 0x496f99
mov eax, dword [ebp + 0x1fcfc]
test eax, eax
jne 0x496f91
lea eax, [ebp + 0x1fd00]
push eax
mov ecx, edi
call fcn.005be330
mov byte [ebp - 4], 0x68
lea ecx, [ebp + 0x1fcfc]
call fcn.00401210
mov byte [ebp - 4], 0x67
lea ecx, [ebp + 0x1d470]
call fcn.005b9980
mov byte [ebp - 4], 0x66
lea ecx, [ebp + 0x3488]
call fcn.0054c160
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.00402560
mov edx, dword [ebp + 0x22080]
cmp edx, 0x1395
jne case.0x48da20.5065
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl case.0x48da20.5065
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edi, dword [eax]
cmp dword [edi + 0x5c], 0
je case.0x48da20.5065
cmp byte [edi + 0x1a0], 0
jne case.0x490260.5292
cmp dword [edi + 0x354], 0
jne case.0x490260.5292
cmp dword [edi + 0x34c], 0
jne case.0x490260.5292
cmp byte [edi + 0x1b3], 0
jne case.0x490260.5292
cmp byte [edi + 0x365], 0
jne case.0x490260.5292
lea ecx, [edi + 0x54]
call fcn.004011e0
push 0x2e
push eax
call fcn.006206a1
mov dword [ebp - 0x270], eax
mov eax, dword [edi + 0x28]
push 0x2e
push eax
call fcn.00623330
mov dword [ebp - 0xe8], eax
mov eax, dword [edi + 0x28]
push 0x3f
push eax
call fcn.00623330
add esp, 0x18
mov dword [ebp - 0x1e0], 0
test eax, eax
je 0x4970b8
mov ecx, dword [edi + 0x17c]
test ecx, 0x100
jne 0x4970b8
test cl, 4
jne 0x4970ae
test ecx, 0x80000
jne 0x4970b8
mov dword [ebp - 0x1e0], 1
cmp dword [ebp - 0xe8], 0
je case.0x48da20.5065
cmp dword [ebp - 0x1e0], 0
jne 0x4970d6
test eax, eax
jne case.0x48da20.5065
push 0
mov ecx, dword [ebp - 0x270]
push ecx
lea edx, [ebp - 0x1fc]
push edx
call fcn.00402a60
add esp, 0xc
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x100]
call fcn.004024f0
mov byte [ebp - 4], 0x6b
mov eax, dword [edi + 0x28]
push eax
push 0x678ea8
lea ecx, [ebp - 0x100]
push ecx
call fcn.00402f60
add esp, 0xc
cmp dword [ebp - 0x1e0], 0
je 0x497151
push 0x3f
mov edx, dword [ebp - 0x100]
push edx
call fcn.00623330
add esp, 8
test eax, eax
je 0x49713a
mov byte [eax], 0
push 0x2e
mov eax, dword [ebp - 0x100]
push eax
call fcn.00623330
add esp, 8
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
je 0x4971c8
cmp dword [ebp - 0x270], 0
je 0x49717b
mov ecx, dword [ebp - 0xe8]
push ecx
mov edx, dword [ebp - 0x1fc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x4971c8
lea ecx, [ebp + 0x1fc3c]
call fcn.004011c0
mov byte [ebp - 4], 0x6c
push 1
lea eax, [ebp + 0x1fc3c]
push eax
lea ecx, [esi + 0x81c]
push ecx
mov ecx, edi
call fcn.005c15f0
mov eax, dword [ebp + 0x1fc3c]
test eax, eax
jne 0x4971b1
lea eax, [ebp + 0x1fc40]
push eax
mov ecx, edi
call fcn.005be330
mov byte [ebp - 4], 0x6b
lea ecx, [ebp + 0x1fc3c]
call fcn.00401210
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x100]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1fc]
call fcn.00402560
push ebx
mov ecx, esi
call fcn.0045f710
mov dword [ebp - 0x110], eax
test eax, eax
jl case.0x490260.5292
mov edx, eax
push edx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov edi, dword [eax]
cmp dword [edi + 0x5c], 0
je 0x49721f
cmp byte [edi + 0x1a0], 0
jne case.0x490260.5292
cmp dword [edi + 0x354], 0
jne case.0x490260.5292
cmp dword [edi + 0x34c], 0
jne case.0x490260.5292
mov eax, dword [0x75e280]
test eax, eax
je 0x497264
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x497264
push ebx
push 0x1395
push 0x111
mov eax, dword [0x75e280]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov dword [ebp - 0x3f8], 1
mov ecx, dword [edi + 0x4f8]
mov dword [ebp - 0x3f0], ecx
lea edx, [ebp - 0x3f8]
push edx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov dword [ebp - 0x130], eax
cmp byte [edi + 0x36b], 0
jne 0x49753a
cmp dword [edi + 0x5c], 0
je 0x4976f3
lea ebx, [edi + 0x54]
mov ecx, ebx
call fcn.004011e0
push 0x2e
push eax
call fcn.006206a1
add esp, 8
test eax, eax
je 0x49753a
push 0
add eax, 2
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.00402a60
add esp, 0xc
mov byte [ebp - 4], 0x6d
lea ecx, [ebp + 0x1fd20]
call fcn.004011c0
mov byte [ebp - 4], 0x6e
mov dword [ebp - 0x128], 0
lea ecx, [ebp - 0x128]
push ecx
lea edx, [ebp + 0x1fd20]
push edx
mov eax, dword [edi + 0x20]
push eax
mov ecx, dword [ebp - 0x190]
push ecx
lea ecx, [esi + 0x81c]
call fcn.004c5960
test al, al
jne 0x497336
lea edx, [ebp + 0x1fd20]
push edx
call fcn.0044b600
add esp, 4
mov eax, dword [edi + 0x334]
cmp eax, dword [ebp - 0x128]
je 0x49751c
cmp byte [edi + 0x1b3], 0
jne 0x497469
push 0x100
lea ecx, [ebp + 0x20968]
push ecx
push 0x100
lea edx, [ebp + 0x20b68]
push edx
push 0x100
lea eax, [ebp + 0x20768]
push eax
push 3
lea ecx, [ebp + 0x21a48]
push ecx
mov ecx, ebx
call fcn.004011e0
push eax
call fcn.00623b27
add esp, 0x24
test eax, eax
jne 0x497469
lea ecx, [ebp + 0x1fcf0]
call fcn.004011c0
mov byte [ebp - 4], 0x6f
mov edx, dword [ebp + 0x1fd20]
test edx, edx
mov eax, edx
jne 0x4973bb
lea eax, [ebp + 0x1fd24]
lea ebx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4973c0
sub eax, ebx
sar eax, 1
test edx, edx
mov ecx, edx
jne 0x4973db
lea ecx, [ebp + 0x1fd24]
cmp word [ecx + eax*2 - 2], 0x5c
mov ecx, 0x679c78
je 0x4973ed
mov ecx, 0x679980
test edx, edx
mov eax, edx
jne 0x4973f9
lea eax, [ebp + 0x1fd24]
push 0
lea edx, [ebp + 0x20968]
push edx
lea edx, [ebp + 0x20b68]
push edx
push ecx
push eax
push str._s_s_s_s
lea ecx, [ebp + 0x1fcf0]
call fcn.0043c2c0
lea ecx, [edi + 0xf4]
call fcn.004011e0
push eax
mov eax, dword [ebp - 0x110]
push eax
push 0
lea ecx, [ebp + 0x1fcf0]
push ecx
mov ecx, dword [esi + 0x234]
call fcn.0049d5f0
mov eax, dword [ebp + 0x1fcf0]
test eax, eax
jne 0x497452
lea eax, [ebp + 0x1fcf4]
push eax
mov ecx, edi
call fcn.005be330
mov byte [ebp - 4], 0x6e
lea ecx, [ebp + 0x1fcf0]
call fcn.00401210
mov edx, dword [ebp - 0x128]
push edx
mov ecx, edi
call fcn.005b7040
lea ebx, [esi + 0x508]
mov ecx, ebx
call fcn.00454770
mov dword [ebp - 0x308], eax
push eax
mov ecx, ebx
call fcn.004cb130
cmp eax, 1
je 0x4974a0
cmp eax, 3
jne 0x49751c
mov eax, dword [ebp - 0x308]
push eax
mov ecx, ebx
call fcn.0060116d
test eax, eax
je 0x49751c
mov eax, dword [ebp - 0x130]
test eax, eax
jl 0x4974d1
push 0
push eax
push 0x1008
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
jmp 0x4974f3
push 1
push 1
push edi
lea ecx, [esi + 0x5d0]
call fcn.004c9dc0
mov eax, dword [esi + 0x294]
test eax, eax
je 0x4974f3
push eax
mov ecx, esi
call fcn.00456c40
mov byte [ebp - 4], 0x6d
lea ecx, [ebp + 0x1fd20]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x190]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
mov byte [ebp - 4], 0x6d
lea ecx, [ebp + 0x1fd20]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x190]
call fcn.00402560
cmp dword [edi + 0x5c], 0
je 0x4976f3
lea ebx, [edi + 0x54]
mov ecx, ebx
call fcn.004011e0
push eax
lea ecx, [ebp + 0x1fd44]
call fcn.00402170
mov byte [ebp - 4], 0x70
lea ecx, [edi + 0xf4]
call fcn.004011e0
push eax
mov ecx, dword [ebp - 0x110]
push ecx
push 0
lea edx, [ebp + 0x1fd44]
push edx
mov ecx, dword [esi + 0x234]
call fcn.0049d5f0
mov ecx, ebx
call fcn.004011e0
push eax
lea ecx, [ebp + 0x1fd44]
call fcn.00453610
test al, al
jne 0x4975b4
mov eax, dword [ebp + 0x1fd44]
test eax, eax
jne 0x4975ac
lea eax, [ebp + 0x1fd48]
push eax
mov ecx, edi
call fcn.005be330
mov dword [ebp - 0x3f8], 1
mov eax, dword [edi + 0x4f8]
mov dword [ebp - 0x3f0], eax
lea ecx, [ebp - 0x3f8]
push ecx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov dword [ebp - 0x130], eax
test eax, eax
jl 0x4976e4
mov ecx, ebx
call fcn.004011e0
push eax
lea ecx, [ebp + 0x1fd44]
call fcn.004017e0
cmp dword [0x75dbe8], 0
je 0x497638
mov eax, dword [0x75dce4]
test eax, eax
mov ecx, eax
jne 0x49761d
mov ecx, 0x75dce8
mov eax, dword [0x75dc94]
test eax, eax
jne 0x49762b
mov eax, 0x75dc98
push ecx
push eax
lea ecx, [ebp + 0x1fd44]
call fcn.0043c540
cmp dword [0x75dbec], 0
je 0x49766c
mov eax, dword [0x75dd88]
test eax, eax
mov ecx, eax
jne 0x497651
mov ecx, 0x75dd8c
mov eax, dword [0x75dd7c]
test eax, eax
jne 0x49765f
mov eax, 0x75dd80
push ecx
push eax
lea ecx, [ebp + 0x1fd44]
call fcn.0043c540
mov eax, dword [ebp + 0x1fd44]
test eax, eax
jne 0x49767c
lea eax, [ebp + 0x1fd48]
push eax
mov ebx, dword [ebp - 0x130]
push ebx
push 9
mov edx, dword [esi + 0x5f0]
push edx
call fcn.00453bd0
add esp, 0x10
lea ecx, [ebp + 0x1fc48]
call fcn.004011c0
mov byte [ebp - 4], 0x71
lea eax, [ebp + 0x1fc48]
push eax
mov ecx, edi
call fcn.005b9000
mov eax, dword [ebp + 0x1fc48]
test eax, eax
jne 0x4976c2
lea eax, [ebp + 0x1fc4c]
push eax
push ebx
push 0
mov ecx, dword [esi + 0x5f0]
push ecx
call fcn.00453bd0
add esp, 0x10
mov byte [ebp - 4], 0x70
lea ecx, [ebp + 0x1fc48]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x1fd44]
call fcn.00401210
push 8
call fcn.005f4e18
add esp, 4
mov edi, eax
mov edx, dword [ebp - 0x110]
push edx
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
mov dword [edi], eax
add esi, 0x5d0
mov dword [edi + 4], esi
push 0
push 0
push 0
push 0xfffffffffffffffe
push edi
push 0x4c9a90
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
test ebx, ebx
je 0x4917be
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
push 0x41030
push eax
push ecx
mov ecx, dword [0x75e284]
push ecx
call fcn.00473680
add esp, 0x10
push 1
mov ecx, ebx
call fcn.00464fe0
push 0
push 0x149b
push 0x111
mov edx, dword [0x75e284]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
wait
jmp 0x4983e5
push str._I_XN_JSFajaj_K_xac_nk_Bnanhj
lea ecx, [ebp - 0x114]
call fcn.004030a0
mov byte [ebp - 4], 0x72
mov eax, dword [ebp - 0x114]
push eax
call fcn.00453b70
add esp, 4
push str.jfnc
lea ecx, [ebp - 0xd4]
call fcn.004030a0
mov byte [ebp - 4], 0x73
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.00453b70
add esp, 4
mov byte [ebp + 0x21968], 0
mov byte [ebp + 0x21a04], 0
xor edi, edi
mov dword [ebp - 0x310], edi
xor esi, esi
mov dword [ebp - 0x1c0], esi
mov dword [ebp - 0x20c], 0x32
lea edx, [ebp - 0x208]
push edx
push 1
push esi
mov eax, dword [ebp - 0x114]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x497862
lea ecx, [ebp - 0x20c]
push ecx
lea edx, [ebp + 0x21968]
push edx
push eax
push eax
mov eax, dword [ebp - 0xd4]
push eax
mov ecx, dword [ebp - 0x208]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x497855
mov esi, 1
mov dword [ebp - 0x1c0], esi
mov edi, esi
mov dword [ebp - 0x310], edi
mov edx, dword [ebp - 0x208]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp + 0x21a04]
push ecx
push 0
push 0
mov edx, dword [ebp - 0xd4]
push edx
mov eax, dword [0x75dbe4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4978bd
inc esi
mov dword [ebp - 0x1c0], esi
test edi, edi
je 0x4978bd
lea ecx, [ebp + 0x21a04]
push ecx
lea edx, [ebp + 0x21968]
push edx
call fcn.006226ae
add esp, 8
test eax, eax
jne 0x4978bd
dec esi
mov dword [ebp - 0x1c0], esi
mov byte [ebp + 0x21a04], al
test ebx, ebx
je 0x497906
cmp esi, 2
jne 0x4978e4
lea eax, [ebp + 0x21968]
push eax
lea ecx, [ebp + 0x21a04]
push ecx
push 0x6862c8
push ebx
call fcn.00402f60
add esp, 0x10
jmp 0x497906
test edi, edi
je 0x4978f1
lea edx, [ebp + 0x21968]
push edx
jmp 0x4978f8
lea eax, [ebp + 0x21a04]
push eax
push 0x678ea8
push ebx
call fcn.00402f60
add esp, 0xc
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xd4]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x114]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
test ebx, ebx
je 0x490765
mov ecx, dword [0x75dda8]
push ecx
push 0x678ea8
push ebx
call fcn.00402f60
add esp, 0xc
mov eax, dword [ebx]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x497951
sub eax, edx
jne 0x490765
push 0x679418
push ebx
call fcn.00402f60
add esp, 8
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl 0x4917be
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov ebx, dword [eax]
mov dword [ebp - 0x488], 1
mov edx, dword [ebx + 0x4f8]
mov dword [ebp - 0x480], edx
lea eax, [ebp - 0x488]
push eax
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov edi, eax
cmp dword [ebx + 0x5c], 0
je 0x4917be
test edi, edi
jl 0x4917be
lea ecx, [ebp + 0x1fd14]
call fcn.004011c0
mov byte [ebp - 4], 0x74
lea ecx, [ebx + 0x54]
call fcn.004011e0
push eax
lea ecx, [ebp + 0x1fd14]
call fcn.004017e0
cmp dword [0x75dbe8], 0
je 0x497a31
mov eax, dword [0x75dce4]
test eax, eax
mov ecx, eax
jne 0x497a16
mov ecx, 0x75dce8
mov eax, dword [0x75dc94]
test eax, eax
jne 0x497a24
mov eax, 0x75dc98
push ecx
push eax
lea ecx, [ebp + 0x1fd14]
call fcn.0043c540
cmp dword [0x75dbec], 0
je 0x497a65
mov eax, dword [0x75dd88]
test eax, eax
mov ecx, eax
jne 0x497a4a
mov ecx, 0x75dd8c
mov eax, dword [0x75dd7c]
test eax, eax
jne 0x497a58
mov eax, 0x75dd80
push ecx
push eax
lea ecx, [ebp + 0x1fd14]
call fcn.0043c540
mov eax, dword [ebp + 0x1fd14]
test eax, eax
jne 0x497a75
lea eax, [ebp + 0x1fd18]
push eax
push edi
push 9
mov ecx, dword [esi + 0x5f0]
push ecx
call fcn.00453bd0
add esp, 0x10
lea ecx, [ebp + 0x1fcb4]
call fcn.004011c0
mov byte [ebp - 4], 0x75
lea edx, [ebp + 0x1fcb4]
push edx
mov ecx, ebx
call fcn.005b9000
mov eax, dword [ebp + 0x1fcb4]
test eax, eax
jne 0x497ab5
lea eax, [ebp + 0x1fcb8]
push eax
push edi
push 0
mov eax, dword [esi + 0x5f0]
push eax
call fcn.00453bd0
add esp, 0x10
mov byte [ebp - 4], 0x74
lea ecx, [ebp + 0x1fcb4]
call fcn.00401210
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x1fd14]
call fcn.00401210
mov eax, 1
wait
jmp 0x4983e5
test ebx, ebx
je 0x497768
jmp 0x497744
test ebx, ebx
je 0x4917be
mov eax, dword [0x75ddbc]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x497b10
sub eax, edx
cmp eax, 7
jbe 0x4917be
push 7
mov ecx, 0x75ddbc
call fcn.00404050
movsx eax, al
push eax
push 6
mov ecx, 0x75ddbc
call fcn.00404050
movsx ecx, al
push ecx
push 4
mov ecx, 0x75ddbc
call fcn.00404050
movsx edx, al
push edx
push 3
mov ecx, 0x75ddbc
call fcn.00404050
movsx eax, al
push eax
push 2
mov ecx, 0x75ddbc
call fcn.00404050
movsx ecx, al
push ecx
push 1
mov ecx, 0x75ddbc
call fcn.00404050
movsx edx, al
push edx
push 0
mov ecx, 0x75ddbc
call fcn.00404050
movsx eax, al
push eax
push str._d_d_d_d_d_d_d
push ebx
call fcn.00402f60
add esp, 0x24
mov eax, 1
wait
jmp 0x4983e5
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl 0x4917be
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
push 5
mov ecx, dword [eax]
call fcn.005b72d0
mov eax, 1
wait
jmp 0x4983e5
test ebx, ebx
je 0x4917be
push 0x752e9c
lea ecx, [ebp - 0xc0]
call fcn.004030a0
mov byte [ebp - 4], 0x76
mov ecx, dword [ebp - 0xc0]
push ecx
call fcn.00453b70
add esp, 4
lea ecx, [ebp - 0x198]
call fcn.004024f0
mov byte [ebp - 4], 0x77
lea edx, [ebp - 0x198]
push edx
mov eax, dword [ebp + 0x22080]
add eax, 0x15
push eax
push 0x111
mov ecx, esi
call fcn.004015a0
lea ecx, [ebp - 0x198]
push ecx
lea ecx, [ebp - 0xc0]
call fcn.0040e6d0
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x497c50
sub eax, edx
inc eax
push eax
push ebx
push 1
push 0
mov edx, dword [ebp - 0xc0]
push edx
mov eax, dword [0x75dbe4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push ebx
call fcn.005f4e52
add esp, 4
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x198]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc0]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
test ebx, ebx
je 0x497d9e
push 0x752e9c
lea ecx, [ebp - 0xb8]
call fcn.004030a0
mov byte [ebp - 4], 0x78
mov ecx, dword [ebp - 0xb8]
push ecx
call fcn.00453b70
add esp, 4
lea ecx, [ebp - 0xf4]
call fcn.004024f0
mov byte [ebp - 4], 0x79
lea edx, [ebp - 0xf4]
push edx
mov eax, dword [ebp + 0x22080]
add eax, 0xc
push eax
push 0x111
mov ecx, esi
call fcn.004015a0
lea ecx, [ebp - 0xf4]
push ecx
lea ecx, [ebp - 0xb8]
call fcn.0040e6d0
mov dword [ebp - 0x318], 0x800
lea edx, [ebp - 0x318]
push edx
lea eax, [ebp + 0x1fd68]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xb8]
push ecx
mov edx, dword [0x75dbe4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x497d80
lea eax, [ebp + 0x1fd68]
push eax
push 0x678ea8
push ebx
call fcn.00402f60
add esp, 0xc
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0xf4]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb8]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0xf4]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb8]
call fcn.00402560
xor eax, eax
wait
jmp 0x4983e5
test ebx, ebx
je 0x4917be
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x497db3
sub eax, edx
lea edi, [eax + ebx + 1]
test edi, edi
je 0x497def
push edi
push ebx
call fcn.00522200
add esp, 8
test eax, eax
jne 0x497def
push edi
push ebx
call fcn.00522700
add esp, 8
push 0
push 0x1515
push 0x111
mov ecx, esi
call fcn.0042ec10
push ebx
call fcn.005f4e52
add esp, 4
mov eax, 1
wait
jmp 0x4983e5
test ebx, ebx
je 0x4917be
mov dword [ebp - 0x320], 0
push str.Yjf_a
lea ecx, [ebp - 0xf0]
call fcn.004030a0
mov byte [ebp - 4], 0x7c
mov ecx, dword [ebp - 0xf0]
push ecx
call fcn.00453b70
add esp, 4
lea edx, [ebp - 0x358]
push edx
call fcn.0043c830
lea ecx, [ebp - 0x358]
call fcn.0043bfd0
mov esi, eax
sub esi, 0x7d0
lea ecx, [ebp - 0x14c]
call fcn.004024f0
mov byte [ebp - 4], 0x7d
mov eax, dword [ebp - 0xf0]
push eax
push ebx
push 0x67bc94
lea ecx, [ebp - 0x14c]
push ecx
call fcn.00402f60
add esp, 0x10
lea ecx, [ebp - 0x148]
call fcn.004024f0
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x358]
call fcn.0043c000
lea edx, [esi + esi*2 - 0x45]
lea esi, [eax + edx*4]
lea eax, [ebp - 0x148]
push eax
mov ecx, dword [ebp - 0x14c]
push ecx
call fcn.005222d0
add esp, 8
test eax, eax
je 0x497ee0
mov edx, dword [ebp - 0x148]
push edx
call fcn.006223ab
add esp, 4
test eax, eax
je 0x497ee0
cmp esi, eax
jb 0x497ee0
mov dword [ebp - 0x320], 1
jmp 0x497f27
lea ecx, [ebp - 0x144]
call fcn.004024f0
mov byte [ebp - 4], 0x7f
push esi
push str._ld.0
lea eax, [ebp - 0x144]
push eax
call fcn.00402f60
mov ecx, dword [ebp - 0x144]
push ecx
mov edx, dword [ebp - 0xf0]
push edx
push ebx
call fcn.00522580
add esp, 0x18
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x144]
call fcn.00402560
push ebx
call fcn.005f4e52
add esp, 4
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x148]
call fcn.00402560
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x14c]
call fcn.00402560
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf0]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
lea eax, [ebp - 0x390]
push eax
call fcn.0043c830
lea ecx, [ebp - 0x390]
call fcn.00453850
cmp eax, dword [esi + 0x17f0]
je 0x4917be
lea ecx, [ebp - 0x390]
call fcn.00453850
mov dword [esi + 0x17f0], eax
push 0
push 0
push 0
push 0
push 0
push fcn.00460d70
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
lea ecx, [ebp - 0x3a0]
push ecx
call fcn.0043c830
lea ecx, [ebp - 0x3a0]
call fcn.00453850
cmp eax, dword [esi + 0x17f4]
je 0x4917be
lea ecx, [ebp - 0x3a0]
call fcn.00453850
mov dword [esi + 0x17f4], eax
push 0
push 0
push 0
push 0
push 0
push 0x487220
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push 0
push 0x487030
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
mov dword [ebp - 0x4b8], 1
mov dword [ebp - 0x4b0], ebx
lea edx, [ebp - 0x4b8]
push edx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov dword [ebp - 0x328], eax
test eax, eax
jl 0x4917be
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl 0x4917be
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
mov edi, dword [eax + 0x110]
mov ebx, dword [eax + 0x114]
test ebx, ebx
jg 0x4980a0
jl case.0x490260.5292
test edi, edi
jb case.0x490260.5292
lea ecx, [ebp - 0x150]
call fcn.004024f0
mov byte [ebp - 4], 0x83
mov dword [ebp - method.StringConvertor.virtual_0], vtable.StringConvertor.0
mov byte [ebp - 4], 0x84
lea eax, [ebp - 0x150]
push eax
push ebx
push edi
lea ecx, [ebp - 0x210]
call fcn.0043f860
mov ecx, dword [0x75dd28]
push ecx
mov edx, dword [ebp - 0x150]
push edx
mov eax, dword [ebp - 0x328]
push eax
push 3
mov ecx, esi
call fcn.0045c770
mov byte [ebp - 4], 0x83
mov dword [ebp - method.StringConvertor.virtual_0], vtable.StringConvertor.0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x150]
call fcn.00402560
mov eax, 1
wait
jmp 0x4983e5
push 0
push 0
push 0
push 0
push 0
push 0x467e80
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
mov dword [ebp - 0x4e8], 1
mov dword [ebp - 0x4e0], ebx
lea ecx, [ebp - 0x4e8]
push ecx
push 0xffffffffffffffff
push 0x100d
mov ecx, dword [esi + 0x1fc]
call fcn.004015a0
mov dword [ebp - 0x330], eax
test eax, eax
jl 0x4917be
push ebx
mov ecx, esi
call fcn.0045f710
test eax, eax
jl 0x4917be
push eax
mov ecx, dword [esi + 0x234]
call fcn.004cf7d0
mov eax, dword [eax]
fld qword [eax + 0x3d8]
call fcn.00622e26
mov edi, eax
mov ebx, edx
test ebx, ebx
jg 0x4981ac
jl case.0x490260.5292
test edi, edi
jb case.0x490260.5292
push 0
push 0x3c
push ebx
push edi
call fcn.00624c20
mov dword [ebp - 0x220], eax
cdq
mov ecx, edi
sub ecx, eax
mov eax, ebx
sbb eax, edx
push 0
push 0x3c
push eax
push ecx
call fcn.00624b70
push 0
push 0x3c
push edx
push eax
call fcn.00624c20
mov dword [ebp - 0x218], eax
push 0
push 0xe10
push ebx
push edi
call fcn.00624b70
test eax, eax
je 0x498214
mov ecx, dword [ebp - 0x218]
push ecx
push eax
mov edx, dword [0x75ef68]
push edx
lea eax, [ebp + 0x21868]
push eax
call fcn.00623a6b
add esp, 0x10
jmp 0x498254
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x220]
push ecx
test eax, eax
je 0x49823e
push eax
mov edx, dword [0x75ef6c]
push edx
lea eax, [ebp + 0x21868]
push eax
call fcn.00623a6b
add esp, 0x10
jmp 0x498254
mov edx, dword [0x75ef70]
push edx
lea eax, [ebp + 0x21868]
push eax
call fcn.00623a6b
add esp, 0xc
mov ecx, dword [0x75dd28]
push ecx
lea edx, [ebp + 0x21868]
push edx
mov eax, dword [ebp - 0x330]
push eax
push 3
mov ecx, esi
call fcn.0045c770
mov eax, 1
wait
jmp 0x4983e5
push 0xffffffffffffffff
push 0x14df
push 0x111
mov ecx, dword [0x75e284]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
wait
jmp 0x4983e5
test ebx, ebx
je 0x4917be
push 0
push 0
push 0
push 0
push ebx
push 0x479550
call fcn.006005d0
mov eax, 1
wait
jmp 0x4983e5
cmp byte [esi + 0x27f], 0
jne 0x4917be
push 0
push 0x124f80
push 0x2f
mov ecx, esi
call fcn.00425160
test eax, eax
je 0x4917be
mov byte [esi + 0x27f], 1
mov eax, 1
wait
jmp 0x4983e5
mov ecx, esi
call fcn.0045c350
mov eax, 1
wait
jmp 0x4983e5
call fcn.00484640
mov eax, 1
wait
jmp 0x4983e5
cmp byte [esi + 0x280], 0
jne 0x4917be
push 0
push 0x11170
push 0x30
mov ecx, esi
call fcn.00425160
mov byte [esi + 0x280], 1
mov eax, 1
wait
jmp 0x4983e5
push 1
push 0x8018
lea ecx, [esi + 0x1258]
call fcn.004544d0
push 0
push 0x800b
mov edx, dword [esi + 0x200]
push edx
call dword [sym.imp.USER32.dll_EnableMenuItem]
mov eax, 1
wait
jmp 0x4983e5
cmp edx, 0x27ff
je 0x498393
push ebx
mov eax, edx
push eax
mov ecx, esi
call fcn.005faf78
wait
jmp 0x4983e5
push 1
mov ecx, esi
call fcn.00470e70
mov eax, 1
wait
jmp 0x4983e5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x22074]
xor ecx, ebp
call fcn.00620b8d
add ebp, 0x22078
mov esp, ebp
pop ebp
ret 8