Function at 0x4c42e0
Capabilities:
Contain obfuscated stackstrings
Create directory
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5bf7bc
mov eax, dword fs:[0]
push eax
sub esp, 0x5e4
mov eax, dword [0x61f138]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, edx
mov dword [ebp - 0x4e4], ebx
mov dword [ebp - 0x500], ecx
mov dword [ebp - 0x4f0], 0
lea eax, [ebp - 0x360]
mov dword [ebp - 4], 5
push eax
push 0
push 0
push 0x23
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea edi, [ebp - 0x360]
add edi, 0xfffffffe
jmp 0x4c4350
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4c4350
mov ecx, 0xb
lea eax, [ebp - 0x360]
mov esi, str.AeroadminRecordings_
rep movsd dword es:[edi], dword [esi]
push 0
push eax
movsw word es:[edi], word [esi]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
sub esp, 8
lea ecx, [ebp - 0x5f0]
call fcn.00443510
mov edx, str.Ffmpeg_path_from_settings:
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5e0]
call fcn.00449a40
mov dword [ebp - 0x4ec], eax
mov byte [ebp - 4], 7
mov eax, dword [ebp + 0x78]
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x364], 0xf
mov byte [ebp - 0x378], 0
mov dword [ebp - 0x4f0], 8
mov dword [ebp - 0x4e8], eax
test eax, eax
je 0x4c44ad
cmp dword [ebp + 0x7c], 8
lea esi, [ebp + 0x68]
lea edi, [ebp + 0x68]
cmovae esi, dword [ebp + 0x68]
cmovae edi, dword [ebp + 0x68]
call fcn.005326b7
push eax
call fcn.0044adb0
mov ecx, dword [ebp - 0x4e8]
add esp, 4
mov edx, eax
mov dword [ebp - 0x4fc], edx
lea ebx, [esi + ecx*2]
test ebx, ebx
jne 0x4c4427
mov ecx, edi
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c4415
sub ecx, esi
sar ecx, 1
lea ebx, [edi + ecx*2]
cmp edi, ebx
je 0x4c44a7
mov eax, ebx
sub eax, edi
sar eax, 1
lea eax, [eax*4 + 4]
mov dword [ebp - 0x4e8], eax
cmp eax, 0x100
jbe 0x4c4488
push eax
call fcn.0056f473
mov esi, eax
add esp, 4
mov dword [ebp - 0x4f4], esi
push dword [ebp - 0x4fc]
lea eax, [ebp - 0x378]
mov dword [ebp - 4], 8
push eax
mov eax, dword [ebp - 0x4e8]
mov edx, ebx
add eax, esi
mov ecx, edi
push eax
push esi
call fcn.0053226f
push esi
call fcn.0056ef26
add esp, 0x14
jmp 0x4c44a7
push edx
lea eax, [ebp - 0x378]
mov edx, ebx
push eax
lea eax, [ebp - 0x60]
mov ecx, edi
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0053226f
add esp, 0x10
mov ebx, dword [ebp - 0x4e4]
mov dword [ebp - 4], 6
mov dword [ebp - 0x4f0], 4
mov ecx, dword [ebp - 0x4ec]
lea edx, [ebp - 0x378]
push 0x22
push 0x26
mov byte [ebp - 4], 9
call fcn.004c5530
mov byte [ebp - 4], 6
add esp, 8
mov edx, dword [ebp - 0x364]
cmp edx, 0x10
jb 0x4c4518
mov ecx, dword [ebp - 0x378]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4c450e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c53dc
push edx
push ecx
call fcn.0056eec5
add esp, 8
lea eax, [ebp - 0x4c8]
push eax
lea ecx, [ebp - 0x5f0]
call fcn.004433d0
push 0x1c
mov edx, str.misc.cpp
mov byte [ebp - 4], 0xa
mov ecx, eax
call fcn.004c2da0
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x4b4]
cmp edx, 0x10
jb 0x4c457d
mov ecx, dword [ebp - 0x4c8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4c4573
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c53e1
push edx
push ecx
call fcn.0056eec5
add esp, 8
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 5
call fcn.0043aef0
lea eax, [ebp - 0x3d8]
push eax
push ecx
call fcn.005025a0
add esp, 4
mov ecx, eax
call fcn.00438330
mov edx, dword [ebp - 0x3c4]
mov esi, dword [eax + 0x10]
cmp edx, 8
jb 0x4c45e6
mov ecx, dword [ebp - 0x3d8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4c45dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c53e6
push edx
push ecx
call fcn.0056eec5
add esp, 8
xor eax, eax
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x3c4], 7
mov word [ebp - 0x3d8], ax
test esi, esi
jne 0x4c46a8
push 0xe
push str.rec_txt_failed
lea ecx, [ebp - 0x3c0]
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], 0xf
mov byte [ebp - 0x3c0], al
call fcn.004462c0
push 0x7c
mov byte [ebp - 4], 0xb
call fcn.0056eed3
add esp, 4
mov dword [ebp - 0x4f4], eax
push esi
push str.btn_ok
push str.rec_txt_failed
push ecx
push esi
push esi
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.0048c480
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x3ac]
cmp edx, 0x10
jb 0x4c469e
mov ecx, dword [ebp - 0x3c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4c4694
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c53eb
push edx
push ecx
call fcn.0056eec5
add esp, 8
call fcn.0043b000
jmp 0x4c538d
mov al, byte [0x6c4d76]
lea ecx, [ebp + 0x68]
mov byte [0x6c4d75], al
lea eax, [ebp - 0x480]
push eax
call fcn.00532359
mov edx, eax
mov byte [ebp - 4], 0xd
cmp dword [edx + 0x14], 8
jb 0x4c46cf
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0x3c8], 0
xor eax, eax
mov dword [ebp - 0x3c4], 7
mov word [ebp - 0x3d8], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4c46f1
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x3d8]
call fcn.00445cb0
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xf
call fcn.00445c30
test ebx, ebx
js 0x4c4725
cmp ebx, 0x64
jle 0x4c472a
mov ebx, 0x32
mov eax, 0x64
sub eax, ebx
imul ecx, eax, 0x17
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, 0x12
add eax, edx
cmp byte [0x6c4d76], 0
mov dword [ebp - 0x4ec], eax
jne 0x4c520b
lea eax, [ebp - 0x4f8]
push eax
call fcn.0059dfbe
add esp, 4
lea eax, [ebp - 0x4f8]
push eax
call fcn.0059df18
add esp, 4
push eax
push str._Y_m_d__H__M__S
lea eax, [ebp - 0x60]
push 0x50
push eax
call fcn.0059b177
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x368], 0
add esp, 0x10
mov dword [ebp - 0x364], 0xf
mov byte [ebp - 0x378], 0
lea edx, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4c47b0
sub ecx, edx
lea eax, [ebp - 0x60]
push ecx
push eax
lea ecx, [ebp - 0x378]
call fcn.004462c0
mov byte [ebp - 4], 0x10
lea esi, [ebp - 0x378]
cmp dword [ebp - 0x364], 0x10
lea ebx, [ebp - 0x378]
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x410], 0
cmovae esi, dword [ebp - 0x378]
add esi, dword [ebp - 0x368]
cmp dword [ebp - 0x364], 0x10
mov dword [ebp - 0x40c], 7
cmovae ebx, dword [ebp - 0x378]
xor eax, eax
mov word [ebp - 0x420], ax
mov eax, esi
sub eax, ebx
push eax
call fcn.0044c830
push dword [ebp - 0x4f4]
lea ecx, [ebp - 0x420]
push esi
push ebx
call fcn.0049d750
mov byte [ebp - 4], 0x11
cmp dword [ebp + 0x90], 3
jb 0x4c48df
lea eax, [ebp + 0x80]
push eax
lea ecx, [ebp - 0x3a8]
call fcn.00441370
cmp dword [ebp - 0x394], 8
lea ecx, [ebp - 0x3a8]
mov eax, dword [ebp - 0x398]
cmovae ecx, dword [ebp - 0x3a8]
lea eax, [ecx + eax*2]
lea ecx, [ebp - 0x3a8]
mov esi, eax
cmovae ecx, dword [ebp - 0x3a8]
xor edi, edi
sub esi, ecx
xor edx, edx
inc esi
shr esi, 1
cmp ecx, eax
cmova esi, edi
test esi, esi
je 0x4c48b1
lea eax, [edx + 0x2f]
nop
cmp word [ecx], 0x5c
jne 0x4c48a9
mov word [ecx], ax
inc edx
add ecx, 2
cmp edx, esi
jne 0x4c48a0
lea eax, [ebp - 0x3a8]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x390]
call fcn.00441370
lea ecx, [ebp - 0x3a8]
call fcn.00445c30
lea eax, [ebp - 0x390]
mov ebx, 0x35
jmp 0x4c48f6
lea eax, [ebp - 0x360]
push eax
lea ecx, [ebp - 0x408]
call fcn.00441310
mov ebx, 6
push eax
lea ecx, [ebp - 0x480]
call fcn.004412c0
mov dword [ebp - 4], 0x14
test bl, 2
je 0x4c496e
mov edx, dword [ebp - 0x3f4]
and ebx, 0xfffffffd
cmp edx, 8
jb 0x4c4951
mov ecx, dword [ebp - 0x408]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4c4947
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c53f0
push edx
push ecx
call fcn.0056eec5
add esp, 8
xor eax, eax
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0x3f4], 7
mov word [ebp - 0x408], ax
mov byte [ebp - 4], 0x15
test bl, 1
je 0x4c49b7
mov edx, dword [ebp - 0x37c]
cmp edx, 8
jb 0x4c49b7
mov ecx, dword [ebp - 0x390]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4c49ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c53f5
push edx
push ecx
call fcn.0056eec5
add esp, 8
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x4c8]
call fcn.00441370
mov byte [ebp - 4], 0x16
lea eax, [ebp + 8]
cmp dword [ebp + 0x48], 0
mov edx, str.Admin
push eax
je 0x4c4e12
lea ecx, [ebp - 0x3f0]
call fcn.00449ce0
add esp, 4
push 0x5e3480
mov edx, eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x390]
call fcn.0044a240
add esp, 4
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 0x18
push ecx
mov edx, eax
lea ecx, [ebp - 0x468]
call fcn.0044a2c0
add esp, 4
push str.___Client
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x450]
call fcn.0044a240
add esp, 4
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 0x1a
push ecx
mov edx, eax
lea ecx, [ebp - 0x438]
call fcn.0044a2c0
add esp, 4
push 0x5e3480
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x4b0]
call fcn.0044a240
add esp, 4
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x1c
push ecx
mov edx, eax
lea ecx, [ebp - 0x498]
call fcn.0044a2c0
add esp, 4
push 0x5e3480
mov edx, eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x3a8]
call fcn.0044a240
add esp, 4
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x1e
push ecx
mov edx, eax
lea ecx, [ebp - 0x408]
call fcn.0044a2c0
add esp, 4
lea ecx, [ebp - 0x420]
push eax
call fcn.00441270
mov edx, dword [ebp - 0x3f4]
cmp edx, 8
jb 0x4c4b01
mov ecx, dword [ebp - 0x408]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4c4af7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c53fa
push edx
push ecx
call fcn.0056eec5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x394]
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0x3f4], 7
mov word [ebp - 0x408], ax
cmp edx, 8
jb 0x4c4b62
mov ecx, dword [ebp - 0x3a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4c4b58
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c53ff
push edx
push ecx
call fcn.0056eec5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x484]
mov dword [ebp - 0x398], 0
mov dword [ebp - 0x394], 7
mov word [ebp - 0x3a8], ax
cmp edx, 8
jb 0x4c4bc3
mov ecx, dword [ebp - 0x498]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4c4bb9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c5404
push edx
push ecx
call fcn.0056eec5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x49c]
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 7
mov word [ebp - 0x498], ax
cmp edx, 8
jb 0x4c4c24
mov ecx, dword [ebp - 0x4b0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4c4c1a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c5409
push edx
push ecx
call fcn.0056eec5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x49c], 7
mov word [ebp - 0x4b0], ax
cmp edx, 8
jb 0x4c4c85
mov ecx, dword [ebp - 0x438]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4c4c7b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c540e
push edx
push ecx
call fcn.0056eec5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x43c]
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
cmp edx, 8
jb 0x4c4ce6
mov ecx, dword [ebp - 0x450]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4c4cdc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c5413
push edx
push ecx
call fcn.0056eec5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x454]
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 7
mov word [ebp - 0x450], ax
cmp edx, 8
jb 0x4c4d47
mov ecx, dword [ebp - 0x468]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4c4d3d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c5418
push edx
push ecx
call fcn.0056eec5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x37c]
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 7
mov word [ebp - 0x468], ax
cmp edx, 8
jb 0x4c4da8
mov ecx, dword [ebp - 0x390]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4c4d9e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c541d
push edx
push ecx
call fcn.0056eec5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x3dc]
mov dword [ebp - 0x380], 0
mov dword [ebp - 0x37c], 7
mov word [ebp - 0x390], ax
cmp edx, 8
jb 0x4c4ecc
mov ecx, dword [ebp - 0x3f0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4c4e03
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4c5422
push edx
push ecx
call fcn.0056eec5
add esp, 8
jmp 0x4c4ecc
lea ecx, [ebp - 0x438]
call fcn.00449ce0
add esp, 4
push 0x5e3480
mov edx, eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x450]
call fcn.0044a240
add esp, 4
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 0x20
push ecx
mov edx, eax
lea ecx, [ebp - 0x468]
call fcn.0044a2c0
add esp, 4
push 0x5e3480
mov edx, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x390]
call fcn.0044a240
add esp, 4
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x22
push ecx
mov edx, eax
lea ecx, [ebp - 0x3f0]
call fcn.0044a2c0
add esp, 4
lea ecx, [ebp - 0x420]
push eax
call fcn.00441270
lea ecx, [ebp - 0x3f0]
call fcn.00445c30
lea ecx, [ebp - 0x390]
call fcn.00445c30
lea ecx, [ebp - 0x468]
call fcn.00445c30
lea ecx, [ebp - 0x450]
call fcn.00445c30
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x16
call fcn.00445c30
lea eax, [ebp - 0x480]
mov edx, 0x5e3220
push eax
lea ecx, [ebp - 0x390]
call fcn.00449ce0
add esp, 4
lea ecx, [ebp - 0x420]
mov byte [ebp - 4], 0x23
push ecx
mov edx, eax
lea ecx, [ebp - 0x3f0]
call fcn.0044a2c0
add esp, 4
push str..mp4_
mov edx, eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x3c0]
call fcn.0044a240
add esp, 4
lea ecx, [ebp - 0x3f0]
call fcn.00445c30
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0x27
call fcn.00445c30
mov edi, dword [ebp - 0x4ec]
lea ecx, [ebp - 0x498]
mov edx, edi
call fcn.00436a50
mov esi, eax
mov ebx, dword [ebp - 0x500]
lea ecx, [ebp - 0x4b0]
mov edx, ebx
mov byte [ebp - 4], 0x28
call fcn.00436a50
push eax
mov edx, str._y__rtbufsize_100M__f_gdigrab__framerate
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x438]
call fcn.004967c0
add esp, 4
push str.__probesize_10M__draw_mouse_1__i_desktop__c:v_libx264__r_25__preset_ultrafast__tune_zerolatency__crf
mov edx, eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x450]
call fcn.0044a240
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x468]
call fcn.0044a330
add esp, 4
push str.__pix_fmt_yuv420p
mov edx, eax
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x390]
call fcn.0044a240
add esp, 4
lea ecx, [ebp - 0x468]
call fcn.00445c30
lea ecx, [ebp - 0x450]
call fcn.00445c30
lea ecx, [ebp - 0x438]
call fcn.00445c30
lea ecx, [ebp - 0x4b0]
call fcn.00445c30
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x32
call fcn.00445c30
lea eax, [ebp - 0x3c0]
push eax
lea edx, [ebp - 0x390]
lea ecx, [ebp - 0x4e0]
call fcn.00480e50
push ecx
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 0x33
call fcn.00442390
push edi
push ebx
push ecx
mov edx, str.Screen_recording:_Frame_rate
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x5e0]
call fcn.00449e10
add esp, 4
mov ecx, eax
call fcn.00442d30
push ecx
mov edx, str._CRF
mov ecx, eax
call fcn.0044a500
add esp, 4
mov ecx, eax
call fcn.00442d30
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.004466f0
push 0x54
mov edx, str.misc.cpp
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x3f0]
call fcn.004c37b0
add esp, 4
lea ecx, [ebp - 0x3f0]
call fcn.00445c30
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 0x33
call fcn.0043ae30
push 0x38
lea eax, [ebp - 0x538]
mov dword [ebp - 0x53c], 0x3c
push 0
push eax
call fcn.00586880
add esp, 0xc
mov dword [ebp - 0x530], 0
cmp dword [ebp + 0x7c], 8
lea eax, [ebp + 0x68]
mov dword [ebp - 0x534], 0
cmovae eax, dword [ebp + 0x68]
cmp dword [ebp - 0x4cc], 8
mov dword [ebp - 0x52c], eax
lea eax, [ebp - 0x4e0]
cmovae eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x528], eax
lea eax, [ebp - 0x53c]
push eax
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x538], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x4c51b9
push 0xffffffffffffffff
push dword [ebp - 0x504]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
lea ecx, [ebp - 0x5f0]
call fcn.00442390
mov edx, str.Recording_started._Output_file:
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x5e0]
call fcn.00449e10
cmp dword [ebp - 0x3ac], 8
lea edx, [ebp - 0x3c0]
push dword [ebp - 0x3b0]
cmovae edx, dword [ebp - 0x3c0]
mov ecx, eax
call fcn.0044d4b0
add esp, 4
lea eax, [ebp - 0x3f0]
lea ecx, [ebp - 0x5d8]
push eax
call fcn.004466f0
push 0x61
mov edx, str.misc.cpp
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x3f0]
call fcn.004c37b0
add esp, 4
lea ecx, [ebp - 0x3f0]
call fcn.00445c30
lea ecx, [ebp - 0x5f0]
call fcn.0043ae30
lea ecx, [ebp - 0x4e0]
call fcn.00445c30
lea ecx, [ebp - 0x390]
call fcn.00445c30
lea ecx, [ebp - 0x3c0]
call fcn.00445c30
lea ecx, [ebp - 0x4c8]
call fcn.00445c30
lea ecx, [ebp - 0x480]
call fcn.00445c30
lea ecx, [ebp - 0x420]
call fcn.00445c30
lea ecx, [ebp - 0x378]
call fcn.004414e0
jmp 0x4c5374
lea ecx, [ebp - 0x3d8]
call fcn.004cfc90
mov edi, eax
test edi, edi
je 0x4c52be
push edi
push str.sending_ctrlc_to_pid__d
call fcn.004cfc70
mov ebx, dword [sym.imp.KERNEL32.dll_FreeConsole]
add esp, 8
call ebx
push edi
call dword [sym.imp.KERNEL32.dll_AttachConsole]
test eax, eax
je 0x4c526c
mov esi, dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push 1
push 0
call esi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GenerateConsoleCtrlEvent]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call ebx
push 0
push 0
call esi
jmp 0x4c52be
push 0
push 0
lea eax, [ebp - 0x4e4]
mov dword [ebp - 0x4e4], 0
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0
push 0x1300
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov eax, dword [ebp - 0x4e4]
test eax, eax
je 0x4c52be
push eax
push str.failure:__s
call fcn.004cfc70
add esp, 8
push dword [ebp - 0x4e4]
call dword [sym.imp.KERNEL32.dll_LocalFree]
sub esp, 8
lea ecx, [ebp - 0x5f0]
call fcn.00442390
lea eax, [ebp - 0x3d8]
mov byte [ebp - 4], 0x38
push eax
mov edx, 0x5e3480
lea ecx, [ebp - 0x480]
call fcn.00449ce0
add esp, 4
mov esi, eax
push edi
push ecx
mov edx, str.CTRL_C_EVENT_sent_to_PID:
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x5e0]
call fcn.0044a500
add esp, 4
mov ecx, eax
call fcn.00442ba0
cmp dword [esi + 0x14], 8
mov ecx, dword [esi + 0x10]
jb 0x4c5317
mov esi, dword [esi]
push ecx
mov edx, esi
mov ecx, eax
call fcn.0044d4b0
add esp, 4
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x480]
call fcn.00445c30
lea eax, [ebp - 0x480]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.004466f0
push 0x69
mov edx, str.misc.cpp
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x480]
call fcn.004c37b0
add esp, 4
lea ecx, [ebp - 0x480]
call fcn.00445c30
lea ecx, [ebp - 0x5f0]
call fcn.0043ae30
cmp byte [0x6c4d76], 0
lea ecx, [ebp - 0x3d8]
sete byte [0x6c4d76]
call fcn.00445c30
lea ecx, [ebp + 8]
call fcn.00445c30
lea ecx, [ebp + 0x20]
call fcn.00445c30
lea ecx, [ebp + 0x38]
call fcn.00445c30
lea ecx, [ebp + 0x50]
call fcn.00445c30
lea ecx, [ebp + 0x68]
call fcn.00445c30
lea ecx, [ebp + 0x80]
call fcn.00445c30
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0056eeb4
mov esp, ebp
pop ebp
ret
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
int3