Function at 0x483550
Capabilities:
Contain obfuscated stackstrings
Create directory
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50cfeb
mov eax, dword fs:[0]
push eax
sub esp, 0x260
mov eax, dword [0x57b0c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
cmp byte [0x5a6d31], 0
je 0x485238
cmp dword [0x5a9868], 1
jne 0x485238
lea ecx, [ebp - 0x5c]
call fcn.004a5070
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.004a51f0
mov edx, 0x5a6d50
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1e4]
call fcn.004a46c0
push 0xa
push str.ScreenShot
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.0040b220
mov dword [ebp - 0x1c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
push ecx
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 7
cmova eax, dword [ebp - 0x2c]
push eax
call fcn.004e0c5c
mov ecx, dword [ebp - 0x18]
add esp, 8
mov esi, eax
cmp ecx, 7
jbe 0x483662
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x483658
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48525b
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp ecx, 7
jbe 0x4836ba
mov edx, dword [ebp - 0x1e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4836b0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48525b
push ecx
push edx
call fcn.004d54f1
add esp, 8
test esi, esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
je 0x48374c
mov edx, 0x5a6d50
lea ecx, [ebp - 0x1e4]
call fcn.004a46c0
push 0x556f80
mov edx, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x234]
call fcn.0040af20
add esp, 4
mov ecx, eax
push 0
call fcn.0040ad20
push eax
call esi
lea ecx, [ebp - 0x234]
call fcn.0040ad30
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1d0]
cmp ecx, 7
jbe 0x48374c
mov edx, dword [ebp - 0x1e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x483742
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485260
push ecx
push edx
call fcn.004d54f1
add esp, 8
mov edx, 0x5a6d50
lea ecx, [ebp - 0x1e4]
call fcn.004a46c0
push 0xb
push 0x556fc8
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.0040b220
mov dword [ebp - 0x1bc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1cc], xmm0
mov dword [ebp - 0x1b8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1cc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1bc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 6
lea eax, [ebp - 0x5c]
cmp dword [ebp - 0x48], 7
lea ecx, [ebp - 0x1cc]
push dword [ebp - 0x4c]
cmova eax, dword [ebp - 0x5c]
push eax
call fcn.0040b220
mov dword [ebp - 0x1c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
push ecx
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 7
cmova eax, dword [ebp - 0x2c]
push eax
call fcn.004e0c5c
mov ecx, dword [ebp - 0x18]
add esp, 8
mov edi, eax
cmp ecx, 7
jbe 0x48385e
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x483854
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485265
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp ecx, 7
jbe 0x4838b6
mov edx, dword [ebp - 0x1cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4838ac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485265
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 7
mov word [ebp - 0x1cc], ax
cmp ecx, 7
jbe 0x483917
mov edx, dword [ebp - 0x1e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x48390d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485265
push ecx
push edx
call fcn.004d54f1
add esp, 8
test edi, edi
je 0x483ae2
mov edx, 0x5a6d50
lea ecx, [ebp - 0x1e4]
call fcn.004a46c0
push 0xb
push 0x556fb0
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.0040b220
mov dword [ebp - 0x1bc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1cc], xmm0
mov dword [ebp - 0x1b8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1cc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1bc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 8
lea eax, [ebp - 0x5c]
cmp dword [ebp - 0x48], 7
lea ecx, [ebp - 0x1cc]
push dword [ebp - 0x4c]
cmova eax, dword [ebp - 0x5c]
push eax
call fcn.0040b220
mov dword [ebp - 0x1c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
push ecx
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 7
cmova eax, dword [ebp - 0x2c]
push eax
call esi
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x483a29
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x483a1f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48526a
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp ecx, 7
jbe 0x483a81
mov edx, dword [ebp - 0x1cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x483a77
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48526a
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 7
mov word [ebp - 0x1cc], ax
cmp ecx, 7
jbe 0x483ae2
mov edx, dword [ebp - 0x1e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x483ad8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48526a
push ecx
push edx
call fcn.004d54f1
add esp, 8
cmp dword [0x5a988c], 1
je 0x483b11
mov byte [0x5a99bc], 1
mov dword [ebp - 0x7c], 0x64
mov dword [ebp - 0x78], 0
lea ecx, [ebp - 0x7c]
call fcn.0040b520
cmp byte [0x5a99bc], 0
jne 0x483b00
xorps xmm0, xmm0
movlpd qword [ebp - 0x7c], xmm0
push 0x5a99c0
mov dword [ebp - 0x7c], 0x5a99c0
mov byte [ebp - 0x78], 1
call fcn.004bd928
push 0x64
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 9
push 0
push eax
call fcn.004d73b0
add esp, 0x10
lea ecx, [ebp - 0x100]
push 0x5aaa88
call fcn.004d0080
push 0x5a99c0
mov byte [ebp - 4], 0xa
call fcn.004bd944
add esp, 4
mov byte [ebp - 0x78], 0
mov edx, 0x5a6d50
lea ecx, [ebp - 0x234]
call fcn.004a46c0
push 0xb
push 0x557010
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.0040b220
mov dword [ebp - 0x34], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x30], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x44], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x34], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x5c]
cmp dword [ebp - 0x48], 7
lea ecx, [ebp - 0x44]
push dword [ebp - 0x4c]
cmova eax, dword [ebp - 0x5c]
push eax
call fcn.0040b220
mov dword [ebp - 0x204], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x214], xmm0
mov dword [ebp - 0x200], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x214], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x204], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 1
push 0x556fe0
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0xd
call fcn.0040b220
xorps xmm0, xmm0
mov dword [ebp - 0x1ec], 0
movups xmmword [ebp - 0x1fc], xmm0
mov dword [ebp - 0x1e8], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1fc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1ec], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
xor ecx, ecx
mov word [eax], cx
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x74]
cmp dword [ebp - 0x60], 7
lea ecx, [ebp - 0x1fc]
push dword [ebp - 0x64]
cmova eax, dword [ebp - 0x74]
push eax
call fcn.0040b220
mov dword [ebp - 0x1c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 4
push 0x556fe4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.0040b220
mov dword [ebp - 0x1bc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1cc], xmm0
mov dword [ebp - 0x1b8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1cc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1bc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea edx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1e4]
call fcn.004a47e0
mov esi, eax
mov byte [ebp - 4], 0x11
cmp dword [esi + 0x14], 0xf
jbe 0x483d5b
mov esi, dword [esi]
push 0xa
sub esp, 0x64
mov byte [ebp - 0x1b1], 1
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.004d0080
mov dl, byte [ebp - 0x1b1]
mov ecx, esi
call fcn.00403490
mov byte [ebp - 4], 0x10
add esp, 0x68
mov ecx, dword [ebp - 0x1d0]
cmp ecx, 0xf
jbe 0x483dc0
mov edx, dword [ebp - 0x1e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x483db6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48526f
push ecx
push edx
call fcn.004d54f1
add esp, 8
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
cmp ecx, 7
jbe 0x483e1f
mov edx, dword [ebp - 0x1cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x483e15
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48526f
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 7
mov word [ebp - 0x1cc], ax
cmp ecx, 7
jbe 0x483e7a
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x483e70
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48526f
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x1e8]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp ecx, 7
jbe 0x483ed2
mov edx, dword [ebp - 0x1fc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x483ec8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48526f
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x200]
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 7
mov word [ebp - 0x1fc], ax
cmp ecx, 7
jbe 0x483f33
mov edx, dword [ebp - 0x214]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x483f29
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48526f
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 7
mov word [ebp - 0x214], ax
cmp ecx, 7
jbe 0x483f8e
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x483f84
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48526f
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x220]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp ecx, 7
jbe 0x483fe6
mov edx, dword [ebp - 0x234]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x483fdc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48526f
push ecx
push edx
call fcn.004d54f1
add esp, 8
mov edx, 0x5a6d50
lea ecx, [ebp - 0x234]
call fcn.004a46c0
push 0xb
push 0x557028
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.0040b220
mov dword [ebp - 0x1c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x5c]
cmp dword [ebp - 0x48], 7
lea ecx, [ebp - 0x2c]
push dword [ebp - 0x4c]
cmova eax, dword [ebp - 0x5c]
push eax
call fcn.0040b220
mov dword [ebp - 0x1bc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1cc], xmm0
mov dword [ebp - 0x1b8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1cc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1bc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 1
push 0x557040
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x14
call fcn.0040b220
mov dword [ebp - 0x1ec], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1fc], xmm0
mov dword [ebp - 0x1e8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1fc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1ec], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x74]
cmp dword [ebp - 0x60], 7
lea ecx, [ebp - 0x1fc]
push dword [ebp - 0x64]
cmova eax, dword [ebp - 0x74]
push eax
call fcn.0040b220
mov dword [ebp - 0x204], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x214], xmm0
mov dword [ebp - 0x200], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x214], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x204], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 0xf
push str._background.png
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x16
call fcn.0040b220
mov dword [ebp - 0x34], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x30], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x44], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x34], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea edx, [ebp - 0x44]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1e4]
call fcn.004a47e0
mov esi, eax
mov byte [ebp - 4], 0x18
cmp dword [esi + 0x14], 0xf
jbe 0x4841d7
mov esi, dword [esi]
push 0xa
sub esp, 0x64
mov byte [ebp - 0x1b1], 0
lea eax, [ebp - 0x100]
mov ecx, esp
push eax
call fcn.004d0080
mov dl, byte [ebp - 0x1b1]
mov ecx, esi
call fcn.00403490
mov byte [ebp - 4], 0x17
add esp, 0x68
mov ecx, dword [ebp - 0x1d0]
cmp ecx, 0xf
jbe 0x48423f
mov edx, dword [ebp - 0x1e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x484235
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485274
push ecx
push edx
call fcn.004d54f1
add esp, 8
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
cmp ecx, 7
jbe 0x484298
mov edx, dword [ebp - 0x44]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x48428e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485274
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x200]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp ecx, 7
jbe 0x4842f0
mov edx, dword [ebp - 0x214]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4842e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485274
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1e8]
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 7
mov word [ebp - 0x214], ax
cmp ecx, 7
jbe 0x484351
mov edx, dword [ebp - 0x1fc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x484347
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485274
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 7
mov word [ebp - 0x1fc], ax
cmp ecx, 7
jbe 0x4843b2
mov edx, dword [ebp - 0x1cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4843a8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485274
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 7
mov word [ebp - 0x1cc], ax
cmp ecx, 7
jbe 0x48440d
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x484403
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485274
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x220]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp ecx, 7
jbe 0x484465
mov edx, dword [ebp - 0x234]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x48445b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485274
push ecx
push edx
call fcn.004d54f1
add esp, 8
lea eax, [ebp - 0x100]
push eax
call fcn.004cfe70
mov dword [ebp - 0x14], eax
lea eax, [ebp + 8]
push eax
call fcn.004cfe70
add esp, 8
lea ecx, [ebp + 8]
mov edi, eax
call fcn.004d0ac0
lea ecx, [ebp + 8]
mov esi, eax
call fcn.004d0ab0
mov dword [ebp - 0x218], 0x1ff0000
push dword [ebp - 0x218]
push eax
push esi
push 0
push 0
push edi
push eax
push esi
push 0
push 0
push dword [ebp - 0x14]
call dword [sym.imp.MSIMG32.dll_AlphaBlend]
mov edx, 0x5a6d50
lea ecx, [ebp - 0x1e4]
call fcn.004a46c0
push 0x23
push 0x557050
mov ecx, eax
mov byte [ebp - 4], 0x19
call fcn.0040b220
mov dword [ebp - 0x1c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
push 4
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 7
cmova eax, dword [ebp - 0x2c]
push eax
call fcn.004e0c5c
mov ecx, dword [ebp - 0x18]
add esp, 8
mov esi, eax
cmp ecx, 7
jbe 0x484567
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x48455d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485279
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp ecx, 7
jbe 0x4845bf
mov edx, dword [ebp - 0x1e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4845b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485279
push ecx
push edx
call fcn.004d54f1
add esp, 8
xorps xmm0, xmm0
test esi, esi
jne 0x484ca2
movups xmmword [ebp - 0x2c], xmm0
movq qword [ebp - 0x1c], xmm0
mov byte [ebp - 0x24], 0
and dword [ebp - 0x24], 0xfffffeff
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
sub esp, 0x18
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0x5c]
mov ecx, esp
call fcn.004a47e0
lea ecx, [ebp - 0x1e4]
call fcn.004a4d00
add esp, 0x18
mov byte [ebp - 4], 0x20
mov edx, dword [eax + 0x10]
mov byte [ebp - 0x3c], 4
or dword [ebp - 0x3c], 0x100
cmp dword [eax + 0x14], 0xf
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], esi
jbe 0x484629
mov eax, dword [eax]
mov ecx, eax
call fcn.0048f6f0
mov dword [ebp - 0x44], eax
push 0x557048
push 0x557044
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x23
call fcn.00491600
push eax
lea ecx, [ebp - 0x44]
call fcn.00490240
lea ecx, [ebp - 0x44]
call fcn.004900f0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x1d0]
cmp ecx, 0xf
jbe 0x484698
mov edx, dword [ebp - 0x1e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x48468e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48527e
push ecx
push edx
call fcn.004d54f1
add esp, 8
sub esp, 0x18
lea edx, [ebp - 0x74]
mov ecx, esp
call fcn.004a47e0
lea ecx, [ebp - 0x1e4]
call fcn.004a4d00
add esp, 0x18
mov byte [ebp - 4], 0x25
mov edx, dword [eax + 0x10]
mov byte [ebp - 0x3c], 4
or dword [ebp - 0x3c], 0x100
cmp dword [eax + 0x14], 0xf
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
jbe 0x4846e2
mov eax, dword [eax]
mov ecx, eax
call fcn.0048f6f0
mov dword [ebp - 0x44], eax
push 0x5570a4
push 0x5570a0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x28
call fcn.00491600
push eax
lea ecx, [ebp - 0x44]
call fcn.00490240
lea ecx, [ebp - 0x44]
call fcn.004900f0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x1d0]
cmp ecx, 0xf
jbe 0x484751
mov edx, dword [ebp - 0x1e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x484747
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485283
push ecx
push edx
call fcn.004d54f1
add esp, 8
mov edx, 0x5a6d50
lea ecx, [ebp - 0x264]
call fcn.004a46c0
push 0xb
push 0x5570c4
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.0040b220
mov dword [ebp - 0x1d4], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1e4], xmm0
mov dword [ebp - 0x1d0], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1e4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1d4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x5c]
cmp dword [ebp - 0x48], 7
lea ecx, [ebp - 0x1e4]
push dword [ebp - 0x4c]
cmova eax, dword [ebp - 0x5c]
push eax
call fcn.0040b220
mov dword [ebp - 0x224], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x234], xmm0
mov dword [ebp - 0x220], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x234], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x224], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 1
push 0x5570a8
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x2b
call fcn.0040b220
mov dword [ebp - 0x1bc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1cc], xmm0
mov dword [ebp - 0x1b8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1cc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1bc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x74]
cmp dword [ebp - 0x60], 7
lea ecx, [ebp - 0x1cc]
push dword [ebp - 0x64]
cmova eax, dword [ebp - 0x74]
push eax
call fcn.0040b220
mov dword [ebp - 0x1ec], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1fc], xmm0
mov dword [ebp - 0x1e8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1fc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1ec], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 4
push 0x5570ac
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x2d
call fcn.0040b220
mov dword [ebp - 0x204], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x214], xmm0
mov dword [ebp - 0x200], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x214], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x204], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
sub esp, 0x18
mov byte [ebp - 4], 0x2e
lea edx, [ebp - 0x214]
mov ecx, esp
call fcn.004a47e0
lea ecx, [ebp - 0x24c]
call fcn.004a4d00
add esp, 0x18
mov byte [ebp - 4], 0x30
mov edx, dword [eax + 0x10]
mov byte [ebp - 0x3c], 4
or dword [ebp - 0x3c], 0x100
cmp dword [eax + 0x14], 0xf
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
jbe 0x484994
mov eax, dword [eax]
mov ecx, eax
call fcn.0048f6f0
mov dword [ebp - 0x44], eax
push 0x55709f
push 0x557098
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.00491600
push eax
lea ecx, [ebp - 0x44]
call fcn.00490240
lea ecx, [ebp - 0x44]
call fcn.004900f0
lea ecx, [ebp - 0x24c]
call fcn.00406e20
lea ecx, [ebp - 0x214]
call fcn.0040ad30
lea ecx, [ebp - 0x1fc]
call fcn.0040ad30
lea ecx, [ebp - 0x1cc]
call fcn.0040ad30
lea ecx, [ebp - 0x234]
call fcn.0040ad30
lea ecx, [ebp - 0x1e4]
call fcn.0040ad30
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x1e
call fcn.0040ad30
mov edx, 0x5a6d50
lea ecx, [ebp - 0x1cc]
call fcn.004a46c0
push 0x557114
mov edx, eax
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x1fc]
call fcn.0040af20
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x35
push ecx
mov edx, eax
lea ecx, [ebp - 0x214]
call fcn.00479f00
push 0x5570dc
mov edx, eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x44]
call fcn.0040af20
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x37
push ecx
mov edx, eax
lea ecx, [ebp - 0x234]
call fcn.00479f00
push 0x5570e0
mov edx, eax
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x1e4]
call fcn.0040af20
push ecx
mov edx, eax
mov byte [ebp - 4], 0x39
mov ecx, esp
call fcn.004a47e0
lea ecx, [ebp - 0x24c]
call fcn.004a4d00
add esp, 0x18
push eax
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x3a
call fcn.0048ffa0
mov esi, eax
mov byte [ebp - 4], 0x3b
push 0x5570b8
lea ecx, [ebp - 0x2c]
call fcn.00491990
push eax
mov ecx, esi
call fcn.00490240
lea ecx, [ebp - 0x264]
call fcn.004900f0
lea ecx, [ebp - 0x24c]
call fcn.00406e20
lea ecx, [ebp - 0x1e4]
call fcn.0040ad30
lea ecx, [ebp - 0x234]
call fcn.0040ad30
lea ecx, [ebp - 0x44]
call fcn.0040ad30
lea ecx, [ebp - 0x214]
call fcn.0040ad30
lea ecx, [ebp - 0x1fc]
call fcn.0040ad30
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x1e
call fcn.0040ad30
push 0x557100
mov ecx, 0x5aa620
call fcn.00491990
lea ecx, [ebp - 0x2c]
push ecx
push ecx
mov ecx, eax
call fcn.00491bc0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.004900f0
xorps xmm0, xmm0
lea ecx, [ebp - 0x9c]
movups xmmword [ebp - 0x9c], xmm0
movups xmmword [ebp - 0x8c], xmm0
call fcn.00497300
push 1
lea ecx, [ebp - 0x1e4]
call fcn.00490030
push 0x557138
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x3d
call fcn.00491990
push eax
lea ecx, [ebp - 0x1e4]
call fcn.00490240
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x3c
call fcn.004900f0
lea ecx, [ebp - 0x9c]
call fcn.004973e0
mov esi, eax
mov dword [ebp - 0x14], esi
push 0xb0
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x3e
push 0
push eax
call fcn.004d73b0
add esp, 8
lea ecx, [ebp - 0x1b0]
call fcn.0041cc70
mov byte [ebp - 4], 0x3f
lea edi, [ebp - 0x1b0]
mov eax, dword [ebp - 0x1b0]
push ecx
push 0x55712c
lea ecx, [ebp - 0x26c]
add edi, dword [eax + 4]
call fcn.004112c0
push eax
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0x21c]
push eax
mov ecx, edi
call fcn.0041cd30
lea ecx, [ebp - 0x21c]
call fcn.00404e50
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x3f
call fcn.00404e50
mov edx, 0x5a6d50
lea ecx, [ebp - 0x1e4]
call fcn.004a46c0
push 0x557150
mov edx, eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x24c]
call fcn.0040af20
mov edx, eax
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x264]
call fcn.004a47e0
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x43
call fcn.00406cd0
push eax
lea ecx, [ebp - 0x1b0]
call fcn.0041cc10
lea ecx, [ebp - 0x264]
call fcn.00406e20
lea ecx, [ebp - 0x24c]
call fcn.0040ad30
mov byte [ebp - 4], 0x3f
jmp 0x485118
push 0
lea ecx, [ebp - 0x44]
movq qword [ebp - 0x34], xmm0
movups xmmword [ebp - 0x44], xmm0
call fcn.0048fe30
sub esp, 0x18
mov byte [ebp - 4], 0x44
lea edx, [ebp - 0x5c]
mov ecx, esp
call fcn.004a47e0
lea ecx, [ebp - 0x24c]
call fcn.004a4d00
add esp, 0x18
push eax
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x45
call fcn.0048ffa0
mov esi, eax
push str.date
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x46
call fcn.00491990
push eax
mov ecx, esi
call fcn.00490240
lea ecx, [ebp - 0x264]
call fcn.004900f0
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x44
call fcn.00406e20
sub esp, 0x18
lea edx, [ebp - 0x74]
mov ecx, esp
call fcn.004a47e0
lea ecx, [ebp - 0x24c]
call fcn.004a4d00
add esp, 0x18
push eax
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x47
call fcn.0048ffa0
mov esi, eax
push str.time
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x48
call fcn.00491990
push eax
mov ecx, esi
call fcn.00490240
lea ecx, [ebp - 0x264]
call fcn.004900f0
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x44
call fcn.00406e20
mov edx, 0x5a6d50
lea ecx, [ebp - 0x2c]
call fcn.004a46c0
push 0x5571c4
mov edx, eax
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x1cc]
call fcn.0040af20
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x4a
push ecx
mov edx, eax
lea ecx, [ebp - 0x1fc]
call fcn.00479f00
push 0x5571a8
mov edx, eax
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x214]
call fcn.0040af20
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x4c
push ecx
mov edx, eax
lea ecx, [ebp - 0x234]
call fcn.00479f00
push 0x5571ac
mov edx, eax
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x1e4]
call fcn.0040af20
push ecx
mov edx, eax
mov byte [ebp - 4], 0x4e
mov ecx, esp
call fcn.004a47e0
lea ecx, [ebp - 0x24c]
call fcn.004a4d00
add esp, 0x18
push eax
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x4f
call fcn.0048ffa0
mov esi, eax
push str.drawpad
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x50
call fcn.00491990
push eax
mov ecx, esi
call fcn.00490240
lea ecx, [ebp - 0x264]
call fcn.004900f0
lea ecx, [ebp - 0x24c]
call fcn.00406e20
lea ecx, [ebp - 0x1e4]
call fcn.0040ad30
lea ecx, [ebp - 0x234]
call fcn.0040ad30
lea ecx, [ebp - 0x214]
call fcn.0040ad30
lea ecx, [ebp - 0x1fc]
call fcn.0040ad30
lea ecx, [ebp - 0x1cc]
call fcn.0040ad30
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x44
call fcn.0040ad30
mov edx, 0x5a6d50
lea ecx, [ebp - 0x2c]
call fcn.004a46c0
push str.ScreenShot_
mov edx, eax
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x1cc]
call fcn.0040af20
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x52
push ecx
mov edx, eax
lea ecx, [ebp - 0x1fc]
call fcn.00479f00
push 0x5571dc
mov edx, eax
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x214]
call fcn.0040af20
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x54
push ecx
mov edx, eax
lea ecx, [ebp - 0x234]
call fcn.00479f00
push 0x5571e0
mov edx, eax
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x1e4]
call fcn.0040af20
push ecx
mov edx, eax
mov byte [ebp - 4], 0x56
mov ecx, esp
call fcn.004a47e0
lea ecx, [ebp - 0x24c]
call fcn.004a4d00
add esp, 0x18
push eax
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x57
call fcn.0048ffa0
mov esi, eax
push str.background
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x58
call fcn.00491990
push eax
mov ecx, esi
call fcn.00490240
lea ecx, [ebp - 0x264]
call fcn.004900f0
lea ecx, [ebp - 0x24c]
call fcn.00406e20
lea ecx, [ebp - 0x1e4]
call fcn.0040ad30
lea ecx, [ebp - 0x234]
call fcn.0040ad30
lea ecx, [ebp - 0x214]
call fcn.0040ad30
lea ecx, [ebp - 0x1fc]
call fcn.0040ad30
lea ecx, [ebp - 0x1cc]
call fcn.0040ad30
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x44
call fcn.0040ad30
push 0x557200
mov ecx, 0x5aa620
call fcn.00491990
lea ecx, [ebp - 0x44]
push ecx
mov ecx, eax
call fcn.004919c0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xa
call fcn.004900f0
xorps xmm0, xmm0
lea ecx, [ebp - 0x9c]
movups xmmword [ebp - 0x9c], xmm0
movups xmmword [ebp - 0x8c], xmm0
call fcn.00497300
push 1
lea ecx, [ebp - 0x1e4]
call fcn.00490030
push 0x557238
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x5a
call fcn.00491990
push eax
lea ecx, [ebp - 0x1e4]
call fcn.00490240
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x59
call fcn.004900f0
lea ecx, [ebp - 0x9c]
call fcn.004973e0
mov esi, eax
mov dword [ebp - 0x14], esi
push 0xb0
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x5b
push 0
push eax
call fcn.004d73b0
add esp, 8
lea ecx, [ebp - 0x1b0]
call fcn.0041cc70
mov byte [ebp - 4], 0x5c
lea edi, [ebp - 0x1b0]
mov eax, dword [ebp - 0x1b0]
push ecx
push 0x55722c
lea ecx, [ebp - 0x21c]
add edi, dword [eax + 4]
call fcn.004112c0
push eax
lea eax, [ebp - 0x26c]
mov byte [ebp - 4], 0x5d
push eax
mov ecx, edi
call fcn.0041cd30
lea ecx, [ebp - 0x26c]
call fcn.00404e50
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x5c
call fcn.00404e50
mov edx, 0x5a6d50
lea ecx, [ebp - 0x1e4]
call fcn.004a46c0
push str.ScreenShot_attribute_directory.json
mov edx, eax
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x24c]
call fcn.0040af20
mov edx, eax
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x264]
call fcn.004a47e0
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x60
call fcn.00406cd0
push eax
lea ecx, [ebp - 0x1b0]
call fcn.0041cc10
lea ecx, [ebp - 0x264]
call fcn.00406e20
lea ecx, [ebp - 0x24c]
call fcn.0040ad30
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x1e4]
call fcn.0040ad30
mov eax, dword [esi]
lea ecx, [ebp - 0x1b0]
push ecx
push 0x5aa620
mov ecx, esi
call dword [eax + 4]
lea ecx, [ebp - 0x1b0]
call fcn.0041cbd0
lea ecx, [ebp - 0x1b0]
call fcn.00412220
lea ecx, [ebp - 0x14]
call fcn.00409f70
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xa
call fcn.004973c0
cmp byte [ebp + 0x6c], 0
je 0x485175
inc dword [0x5a994c]
inc dword [0x5a9958]
push 0x557254
push str.Image_Properties
mov ecx, 0x5aa620
call fcn.00491600
mov ecx, eax
call fcn.00490f20
lea ecx, [ebp - 0x100]
mov dword [0x5a9954], eax
call fcn.004d0520
mov ecx, dword [ebp - 0x60]
cmp ecx, 7
jbe 0x4851da
mov edx, dword [ebp - 0x74]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4851d0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485288
push ecx
push edx
call fcn.004d54f1
add esp, 8
mov ecx, dword [ebp - 0x48]
xor eax, eax
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
cmp ecx, 7
jbe 0x485224
mov edx, dword [ebp - 0x5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x48521a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x485288
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
lea ecx, [ebp + 8]
call fcn.004d0520
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d523a
mov esp, ebp
pop ebp
ret
call fcn.004deff4
call fcn.004deff4
call fcn.004deff4
call fcn.004deff4
call fcn.004deff4
call fcn.004deff4
call fcn.004deff4
call fcn.004deff4
call fcn.004deff4
call fcn.004deff4
int3