Function at 0x4b09a0
Capabilities:
Contain obfuscated stackstrings
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58f5ce
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6b8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x5c], edi
xor esi, esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 4], esi
wait
cmp dword [edi + 0x2a4], esi
jne 0x4b09ee
xor eax, eax
wait
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [edi + 0x28]
mov dword [ebp - 0x164], eax
mov cl, byte [edi + 0x24]
mov byte [ebp - 0x15c], cl
lea ecx, [edi + 0x2e4]
call fcn.004940b0
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], esi
mov byte [ebp - 4], 1
push esi
lea ecx, [edi + 0x50]
call fcn.004f9c70
push eax
mov ecx, dword [edi + 0x2a4]
call fcn.00510cf0
mov dword [ebp - 0x150], eax
mov ecx, 0x5f5774
mov edx, dword [0x5f5774]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 2
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x68]
push ecx
call fcn.0050a4d0
add esp, 4
push 0x104
push 0x104
lea ecx, [ebp - 0x48]
call fcn.00405c40
push eax
push str.LogsDir
mov edx, dword [ebp - 0x68]
push edx
call fcn.0050a330
add esp, 0x10
lea ecx, [ebp - 0x48]
test eax, eax
jne 0x4b0ae7
push 0x104
call fcn.00405c40
push eax
push 1
push esi
push 0x1a
push esi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
cmp eax, esi
jge 0x4b0ac5
push str.SHGetFolderPathW__0__0x001a__0__SHGFP_TYPE_DEFAULT__strSysDir.GetBuffer__260__
push eax
lea ecx, [ebp - 0x244]
call fcn.00434a80
push 0x5cc0a0
lea eax, [ebp - 0x244]
push eax
call fcn.00554cbc
push 0xffffffffffffffff
lea ecx, [ebp - 0x48]
call fcn.00403ab0
push 0x5a3d24
push str._sData_
lea ecx, [ebp - 0x48]
push ecx
call fcn.0040a750
add esp, 0xc
jmp 0x4b0afb
push 0xffffffffffffffff
call fcn.00403ab0
push 0x59e4c8
lea ecx, [ebp - 0x48]
call fcn.00407ed0
mov edx, dword [edi + 0x2a4]
add edx, 0x10
push edx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x50]
push ecx
call fcn.00425d90
mov byte [ebp - 4], 4
push 0x59e4c4
push eax
lea edx, [ebp - 0x4c]
push edx
call fcn.00425e40
mov byte [ebp - 4], 5
push 0x5a3d70
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00425e40
mov byte [ebp - 4], 6
push 0x59e658
push eax
lea ecx, [ebp - 0x44]
push ecx
call fcn.00425e40
mov byte [ebp - 4], 7
push 0x5a3d7c
push eax
lea edx, [ebp - 0x24]
push edx
call fcn.00425e40
add esp, 0x3c
mov byte [ebp - 4], 8
mov eax, dword [eax]
lea ecx, [ebp - 0x6c4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x24]
call fcn.00404d60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x44]
call fcn.00404d60
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x40]
call fcn.00404d60
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4c]
call fcn.00404d60
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x50]
call fcn.00404d60
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp ebx, 0xffffffff
je 0x4b0f0a
lea ecx, [ebp - 0x88]
call fcn.004374b0
mov byte [ebp - 4], 9
mov ecx, edi
call fcn.004aab30
lea ebx, [ebx]
call esi
lea edx, [ebp - 0x1e4]
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x698]
push ecx
mov ecx, edi
call fcn.004a9640
test al, al
je 0x4b0d49
lea edx, [edi + 0x2d4]
push edx
lea ecx, [ebp - 0x220]
call fcn.00415ff0
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x22c]
call fcn.00431360
mov ecx, eax
call fcn.00431470
test al, al
je 0x4b0d49
lea ecx, [edi + 0x2c4]
push ecx
lea ecx, [ebp - 0x200]
call fcn.00415ff0
push eax
lea edx, [ebp - 0x1e4]
push edx
lea ecx, [ebp - 0x234]
call fcn.00431360
mov ecx, eax
call fcn.00431440
test al, al
je 0x4b0d49
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x214]
call fcn.00431360
fld qword [eax]
fstp qword [ebp - 0x1dc]
mov ecx, dword [edi + 0x2a4]
add ecx, 0x10
push ecx
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x50]
push eax
call fcn.00425d90
mov byte [ebp - 4], 0xa
push 0x59e4c4
push eax
lea ecx, [ebp - 0x4c]
push ecx
call fcn.00425e40
mov byte [ebp - 4], 0xb
push 0x5a3d70
push eax
lea edx, [ebp - 0x40]
push edx
call fcn.00425e40
mov byte [ebp - 4], 0xc
push 0x59e4c4
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00425e40
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x698]
push ecx
push eax
lea edx, [ebp - 0x24]
push edx
call fcn.00425e40
add esp, 0x3c
mov esi, eax
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x1dc]
push eax
lea ecx, [ebp - 0x88]
call fcn.004367f0
push esi
mov ecx, eax
call fcn.00407d40
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x24]
call fcn.00404d60
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x44]
call fcn.00404d60
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x40]
call fcn.00404d60
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x4c]
call fcn.00404d60
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x50]
call fcn.00404d60
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x6c4]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4b0be0
call esi
lea ecx, [edi + 0x2bc]
call fcn.0042c7a0
push eax
lea ecx, [ebp - 0x64]
call fcn.00404d10
mov byte [ebp - 4], 0xf
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x84]
mov edi, dword [edx]
mov dword [ebp - 0x70], edi
cmp edi, dword [ebp - 0x84]
je 0x4b0eec
push 0
push 0
lea eax, [ebp - 0x38]
push eax
mov eax, dword [edi + 0x18]
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.0040bfb0
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], 0xf
call fcn.004af670
push 0x59d4a4
mov ecx, dword [ebp - 0x5c]
add ecx, 0x2bc
push ecx
call fcn.00442c30
add esp, 0x18
test al, al
je 0x4b0ea5
mov esi, dword [ebp - 0x38]
mov ebx, esi
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x6c], esi
jmp 0x4b0df0
cmp esi, dword [ebp - 0x34]
je 0x4b0ea5
lea edx, [esi + 0x14]
push edx
lea ecx, [ebp - 0x3c]
call fcn.00404d10
mov byte [ebp - 4], 0x11
lea eax, [esi + 0x18]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00404d10
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3c]
call fcn.0042c7a0
lea ecx, [ebp - 0x1c]
call fcn.0042c7a0
push 0
mov ecx, dword [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x3c]
call fcn.004177a0
cmp eax, 0xffffffff
jne 0x4b0e98
push 0
mov edx, dword [ebp - 0x64]
push edx
lea ecx, [ebp - 0x1c]
call fcn.004177a0
cmp eax, 0xffffffff
jne 0x4b0e98
push esi
cmp esi, dword [ebp - 0x38]
je 0x4b0e69
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x38]
call fcn.004b0780
mov dword [ebp - 0x6c], ebx
lea esi, [ebx + 0x38]
jmp 0x4b0e78
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x38]
call fcn.004b0780
mov esi, dword [ebp - 0x38]
mov dword [ebp - 0x6c], esi
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1c]
call fcn.00404d60
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x3c]
call fcn.00404d60
jmp 0x4b0df0
mov ebx, esi
mov dword [ebp - 0x148], ebx
add esi, 0x38
jmp 0x4b0e78
cmp byte [edi + 0x21], 0
jne 0x4b0d8b
mov eax, dword [edi + 8]
cmp byte [eax + 0x21], 0
jne 0x4b0ed0
mov edi, eax
mov dword [ebp - 0x160], edi
mov eax, dword [edi]
cmp byte [eax + 0x21], 0
jne 0x4b0d88
jmp 0x4b0eb8
mov eax, dword [edi + 4]
cmp byte [eax + 0x21], 0
jne 0x4b0ee5
cmp edi, dword [eax + 8]
jne 0x4b0ee5
mov edi, eax
mov dword [ebp - 0x70], edi
jmp 0x4b0ed0
mov edi, eax
jmp 0x4b0d88
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x64]
call fcn.00404d60
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00437450
mov edi, dword [ebp - 0x5c]
xor ebx, ebx
mov esi, dword [ebp - 0x38]
mov dword [ebp - 0x158], esi
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
mov byte [ebp - 4], 0x13
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x13c], ebx
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], ebx
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xfc], ebx
mov byte [ebp - 4], 0x17
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov byte [ebp - 4], 0x18
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x12c], ebx
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], ebx
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x10c], ebx
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x1f4], ebx
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - 0x1ec], ebx
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], ebx
cmp esi, dword [ebp - 0x34]
je 0x4b1afe
lea edi, [esi + 0x10]
mov edx, dword [str.google.]
push edx
push edi
call fcn.00424c30
add esp, 8
test al, al
je 0x4b10fc
mov edi, dword [ebp - 0x88]
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp - 0x84]
je 0x4b10b7
lea eax, [esi + 0x18]
push eax
lea ecx, [edi + 0x18]
push ecx
call fcn.00425c00
add esp, 8
test al, al
je 0x4b10b2
push str.start
lea ecx, [ebp - 0x64]
call fcn.0040bfb0
mov byte [ebp - 4], 0x1f
mov edi, dword [esi + 0x2c]
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x224]
push eax
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], edi
setne bl
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x64]
call fcn.00404d60
test bl, bl
jne 0x4b1add
mov edi, dword [ebp - 0x18]
add edi, 0x38
jmp 0x4b1050
xor al, al
jne 0x4b1add
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x38]
call fcn.004a97a0
push eax
lea ecx, [ebp - 0x19c]
call fcn.004abe70
mov byte [ebp - 4], 0x20
lea edx, [ebp - 0x19c]
push edx
lea ecx, [ebp - 0x88]
call fcn.004b0860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x19c]
jmp 0x4b1ad8
mov eax, dword [str.bing.]
push eax
push edi
call fcn.00424c30
add esp, 8
test al, al
je 0x4b11c5
mov edi, dword [ebp - 0xf4]
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp - 0xf0]
je 0x4b1180
lea ecx, [esi + 0x18]
push ecx
lea edx, [edi + 0x18]
push edx
call fcn.00425c00
add esp, 8
test al, al
je 0x4b117b
push 0x5a41cc
lea ecx, [ebp - 0x3c]
call fcn.0040bfb0
mov byte [ebp - 4], 0x21
mov edi, dword [esi + 0x2c]
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x20c]
push ecx
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], edi
setne bl
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x3c]
call fcn.00404d60
test bl, bl
jne 0x4b1add
mov edi, dword [ebp - 0x18]
add edi, 0x38
jmp 0x4b1119
xor al, al
jne 0x4b1add
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x38]
call fcn.004a97a0
push eax
lea ecx, [ebp - 0x1d4]
call fcn.004abe70
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0xf4]
call fcn.004b0860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1d4]
jmp 0x4b1ad8
mov ecx, dword [str.yahoo.]
push ecx
push edi
call fcn.00424c30
add esp, 8
test al, al
je 0x4b128f
mov edi, dword [ebp - 0x144]
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp - 0x140]
je 0x4b124a
lea edx, [esi + 0x18]
push edx
lea eax, [edi + 0x18]
push eax
call fcn.00425c00
add esp, 8
test al, al
je 0x4b1245
push 0x5a41c8
lea ecx, [ebp - 0x1c]
call fcn.0040bfb0
mov byte [ebp - 4], 0x23
mov edi, dword [esi + 0x2c]
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x1f8]
push edx
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], edi
setne bl
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1c]
call fcn.00404d60
test bl, bl
jne 0x4b1add
mov edi, dword [ebp - 0x18]
add edi, 0x38
jmp 0x4b11e3
xor al, al
jne 0x4b1add
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.004a97a0
push eax
lea ecx, [ebp - 0x27c]
call fcn.004abe70
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x27c]
push ecx
lea ecx, [ebp - 0x144]
call fcn.004b0860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x27c]
jmp 0x4b1ad8
mov edx, dword [str.ask.]
push edx
push edi
call fcn.00424c30
add esp, 8
test al, al
je 0x4b1362
mov edi, dword [ebp - 0x124]
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp - 0x120]
je 0x4b131d
lea eax, [esi + 0x18]
push eax
lea ecx, [edi + 0x18]
push ecx
call fcn.00425c00
add esp, 8
test al, al
je 0x4b1318
push str.page
lea ecx, [ebp - 0x90]
call fcn.0040bfb0
mov byte [ebp - 4], 0x25
mov edi, dword [esi + 0x2c]
lea edx, [ebp - 0x90]
push edx
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], edi
setne bl
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x90]
call fcn.00404d60
test bl, bl
jne 0x4b1add
mov edi, dword [ebp - 0x18]
add edi, 0x38
jmp 0x4b12ad
xor al, al
jne 0x4b1add
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x38]
call fcn.004a97a0
push eax
lea ecx, [ebp - 0x474]
call fcn.004abe70
mov byte [ebp - 4], 0x26
lea edx, [ebp - 0x474]
push edx
lea ecx, [ebp - 0x124]
call fcn.004b0860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x474]
jmp 0x4b1ad8
mov eax, dword [str.aol.]
push eax
push edi
call fcn.00424c30
add esp, 8
test al, al
je 0x4b1434
mov edi, dword [ebp - 0x104]
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp - 0x100]
je 0x4b13ef
lea ecx, [esi + 0x18]
push ecx
lea edx, [edi + 0x18]
push edx
call fcn.00425c00
add esp, 8
test al, al
je 0x4b13ea
push str.page
lea ecx, [ebp - 0x98]
call fcn.0040bfb0
mov byte [ebp - 4], 0x27
mov edi, dword [esi + 0x2c]
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x204]
push ecx
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], edi
setne bl
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x98]
call fcn.00404d60
test bl, bl
jne 0x4b1add
mov edi, dword [ebp - 0x18]
add edi, 0x38
jmp 0x4b137f
xor al, al
jne 0x4b1add
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x38]
call fcn.004a97a0
push eax
lea ecx, [ebp - 0x324]
call fcn.004abe70
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x324]
push eax
lea ecx, [ebp - 0x104]
call fcn.004b0860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x324]
jmp 0x4b1ad8
mov ecx, dword [str.yandex.]
push ecx
push edi
call fcn.00424c30
add esp, 8
test al, al
jne 0x4b1a36
mov edx, dword [0x5f33ac]
push edx
push edi
call fcn.00424c30
add esp, 8
test al, al
jne 0x4b1a36
mov eax, dword [str.rambler.]
push eax
push edi
call fcn.00424c30
add esp, 8
test al, al
je 0x4b1536
mov edi, dword [ebp - 0xd4]
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp - 0xd0]
je 0x4b14f1
lea ecx, [esi + 0x18]
push ecx
lea edx, [edi + 0x18]
push edx
call fcn.00425c00
add esp, 8
test al, al
je 0x4b14ec
push str.page
lea ecx, [ebp - 0xa4]
call fcn.0040bfb0
mov byte [ebp - 4], 0x2b
mov edi, dword [esi + 0x2c]
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x208]
push ecx
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], edi
setne bl
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xa4]
call fcn.00404d60
test bl, bl
jne 0x4b1add
mov edi, dword [ebp - 0x18]
add edi, 0x38
jmp 0x4b1481
xor al, al
jne 0x4b1add
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x38]
call fcn.004a97a0
push eax
lea ecx, [ebp - 0x404]
call fcn.004abe70
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0xd4]
call fcn.004b0860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x404]
jmp 0x4b1ad8
mov ecx, dword [0x5f33a0]
push ecx
push edi
call fcn.00424c30
add esp, 8
test al, al
je 0x4b1687
mov edi, dword [ebp - 0x134]
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp - 0x130]
je 0x4b1642
lea edx, [esi + 0x18]
push edx
lea eax, [edi + 0x18]
push eax
call fcn.00425c00
add esp, 8
test al, al
je 0x4b163a
push 0x5a4044
lea ecx, [ebp - 0xa0]
call fcn.0040bfb0
mov byte [ebp - 4], 0x2d
or dword [ebp - 0x20], 1
mov ebx, dword [esi + 0x2c]
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0x210]
push edx
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], ebx
je 0x4b15ec
push str.start
lea ecx, [ebp - 0x94]
call fcn.0040bfb0
mov dword [ebp - 4], 0x2e
or dword [ebp - 0x20], 2
mov ebx, dword [esi + 0x2c]
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x230]
push ecx
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], ebx
mov byte [ebp - 0x11], 1
jne 0x4b15f0
mov byte [ebp - 0x11], 0
mov dword [ebp - 4], 0x2d
mov ebx, dword [ebp - 0x20]
test bl, 2
je 0x4b1610
and ebx, 0xfffffffd
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x94]
call fcn.00404d60
mov dword [ebp - 4], 0x1e
test bl, 1
je 0x4b162d
and ebx, 0xfffffffe
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0xa0]
call fcn.00404d60
cmp byte [ebp - 0x11], 0
jne 0x4b1add
mov edi, dword [ebp - 0x18]
add edi, 0x38
jmp 0x4b1554
xor al, al
jne 0x4b1add
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x38]
call fcn.004a97a0
push eax
lea ecx, [ebp - 0x394]
call fcn.004abe70
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0x394]
push eax
lea ecx, [ebp - 0x134]
call fcn.004b0860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x394]
jmp 0x4b1ad8
mov ecx, dword [str.mail.ru]
push ecx
push edi
call fcn.00424c30
add esp, 8
test al, al
je 0x4b17cf
mov edi, dword [ebp - 0xc4]
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp - 0xc0]
je 0x4b178a
lea edx, [esi + 0x18]
push edx
lea eax, [edi + 0x18]
push eax
call fcn.00425c00
add esp, 8
test al, al
je 0x4b1782
push 0x5a41b4
lea ecx, [ebp - 0x50]
call fcn.0040bfb0
mov byte [ebp - 4], 0x30
or dword [ebp - 0x20], 4
mov ebx, dword [esi + 0x2c]
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x1fc]
push edx
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], ebx
je 0x4b1737
push str.start
lea ecx, [ebp - 0x9c]
call fcn.0040bfb0
mov dword [ebp - 4], 0x31
or dword [ebp - 0x20], 8
mov ebx, dword [esi + 0x2c]
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x228]
push ecx
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], ebx
mov byte [ebp - 0x11], 1
jne 0x4b173b
mov byte [ebp - 0x11], 0
mov dword [ebp - 4], 0x30
mov ebx, dword [ebp - 0x20]
test bl, 8
je 0x4b175b
and ebx, 0xfffffff7
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x9c]
call fcn.00404d60
mov dword [ebp - 4], 0x1e
test bl, 4
je 0x4b1775
and ebx, 0xfffffffb
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x50]
call fcn.00404d60
cmp byte [ebp - 0x11], 0
jne 0x4b1add
mov edi, dword [ebp - 0x18]
add edi, 0x38
jmp 0x4b16a5
xor al, al
jne 0x4b1add
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x38]
call fcn.004a97a0
push eax
lea ecx, [ebp - 0x2b4]
call fcn.004abe70
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x2b4]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004b0860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x2b4]
jmp 0x4b1ad8
mov ecx, dword [0x5f33a4]
push ecx
push edi
call fcn.00424c30
add esp, 8
test al, al
je 0x4b190e
mov edi, dword [ebp - 0x114]
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp - 0x110]
je 0x4b18c9
lea edx, [esi + 0x18]
push edx
lea eax, [edi + 0x18]
push eax
call fcn.00425c00
add esp, 8
test al, al
je 0x4b18c1
push 0x5a41b4
lea ecx, [ebp - 0x40]
call fcn.0040bfb0
mov byte [ebp - 4], 0x33
or dword [ebp - 0x20], 0x10
mov ebx, dword [esi + 0x2c]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x21c]
push edx
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], ebx
je 0x4b1879
push str.start
lea ecx, [ebp - 0x4c]
call fcn.0040bfb0
mov dword [ebp - 4], 0x34
or dword [ebp - 0x20], 0x20
mov ebx, dword [esi + 0x2c]
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x1d8]
push ecx
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], ebx
mov byte [ebp - 0x11], 1
jne 0x4b187d
mov byte [ebp - 0x11], 0
mov dword [ebp - 4], 0x33
mov ebx, dword [ebp - 0x20]
test bl, 0x20
je 0x4b189a
and ebx, 0xffffffdf
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x4c]
call fcn.00404d60
mov dword [ebp - 4], 0x1e
test bl, 0x10
je 0x4b18b4
and ebx, 0xffffffef
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x40]
call fcn.00404d60
cmp byte [ebp - 0x11], 0
jne 0x4b1add
mov edi, dword [ebp - 0x18]
add edi, 0x38
jmp 0x4b17ed
xor al, al
jne 0x4b1add
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x38]
call fcn.004a97a0
push eax
lea ecx, [ebp - 0x2ec]
call fcn.004abe70
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x2ec]
push eax
lea ecx, [ebp - 0x114]
call fcn.004b0860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x2ec]
jmp 0x4b1ad8
mov ecx, dword [str.lycos.com]
push ecx
push edi
call fcn.00424c30
add esp, 8
test al, al
je 0x4b19d8
mov edi, dword [ebp - 0xb4]
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp - 0xb0]
je 0x4b1993
lea edx, [esi + 0x18]
push edx
lea eax, [edi + 0x18]
push eax
call fcn.00425c00
add esp, 8
test al, al
je 0x4b198e
push str.page2
lea ecx, [ebp - 0x44]
call fcn.0040bfb0
mov byte [ebp - 4], 0x36
mov edi, dword [esi + 0x2c]
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x1e0]
push edx
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], edi
setne bl
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x44]
call fcn.00404d60
test bl, bl
jne 0x4b1add
mov edi, dword [ebp - 0x18]
add edi, 0x38
jmp 0x4b192c
xor al, al
jne 0x4b1add
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
call fcn.004a97a0
push eax
lea ecx, [ebp - 0x35c]
call fcn.004abe70
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x35c]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.004b0860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x35c]
jmp 0x4b1ad8
mov edx, dword [str.wikipedia.org]
push edx
push edi
call fcn.00424c30
add esp, 8
test al, al
je 0x4b1add
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x38]
call fcn.004a97a0
push eax
lea ecx, [ebp - 0x3cc]
call fcn.004abe70
mov byte [ebp - 4], 0x38
lea edx, [ebp - 0x3cc]
push edx
lea ecx, [ebp - 0xb4]
call fcn.004b0860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x3cc]
jmp 0x4b1ad8
mov edi, dword [ebp - 0xe4]
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp - 0xe0]
je 0x4b1a9c
lea eax, [esi + 0x18]
push eax
lea ecx, [edi + 0x18]
push ecx
call fcn.00425c00
add esp, 8
test al, al
je 0x4b1a97
push 0x5a4044
lea ecx, [ebp - 0x24]
call fcn.0040bfb0
mov byte [ebp - 4], 0x29
mov edi, dword [esi + 0x2c]
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x54]
push eax
lea ecx, [esi + 0x28]
call fcn.0050b2d0
cmp dword [eax], edi
setne bl
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x24]
call fcn.00404d60
test bl, bl
jne 0x4b1add
mov edi, dword [ebp - 0x18]
add edi, 0x38
jmp 0x4b1a3c
xor al, al
jne 0x4b1add
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x38]
call fcn.004a97a0
push eax
lea ecx, [ebp - 0x43c]
call fcn.004abe70
mov byte [ebp - 4], 0x2a
lea edx, [ebp - 0x43c]
push edx
lea ecx, [ebp - 0xe4]
call fcn.004b0860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x43c]
call fcn.004abd00
mov eax, 1
add dword [ebp - 0x8c], eax
add esi, 0x38
mov dword [ebp - 0x158], esi
add dword [ebp - 0x28], eax
mov edi, dword [ebp - 0x5c]
xor ebx, ebx
jmp 0x4b1026
lea ecx, [edi + 4]
call fcn.00431340
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
cmp eax, ecx
je 0x4b1b4e
mov edx, dword [ebp - 0x54]
push edx
push eax
push ecx
push ecx
call fcn.004ab830
add esp, 0x10
mov ebx, eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov esi, ebx
mov dword [ebp - 0x14c], esi
cmp esi, dword [ebp - 0x24]
je 0x4b1b46
push esi
lea ecx, [ebp - 0x2c]
push ecx
call fcn.004b00e0
add esp, 8
add esi, 0x38
jmp 0x4b1b29
mov dword [ebp - 0x34], ebx
mov eax, dword [ebp - 0x38]
xor ebx, ebx
mov edx, dword [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x84]
push ecx
mov edx, dword [ebp - 0x88]
push edx
push eax
lea ecx, [ebp - 0x38]
call fcn.004b0560
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0xf0]
push ecx
mov edx, dword [ebp - 0xf4]
push edx
mov eax, dword [ebp - 0x38]
push eax
lea ecx, [ebp - 0x38]
call fcn.004b0560
mov ecx, dword [ebp - 0x54]
push ecx
mov edx, dword [ebp - 0x140]
push edx
mov eax, dword [ebp - 0x144]
push eax
mov ecx, dword [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x38]
call fcn.004b0560
mov edx, dword [ebp - 0x54]
push edx
mov eax, dword [ebp - 0x120]
push eax
mov ecx, dword [ebp - 0x124]
push ecx
mov edx, dword [ebp - 0x38]
push edx
lea ecx, [ebp - 0x38]
call fcn.004b0560
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x104]
push edx
mov eax, dword [ebp - 0x38]
push eax
lea ecx, [ebp - 0x38]
call fcn.004b0560
mov ecx, dword [ebp - 0x54]
push ecx
mov edx, dword [ebp - 0xe0]
push edx
mov eax, dword [ebp - 0xe4]
push eax
mov ecx, dword [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x38]
call fcn.004b0560
mov edx, dword [ebp - 0x54]
push edx
mov eax, dword [ebp - 0xd0]
push eax
mov ecx, dword [ebp - 0xd4]
push ecx
mov edx, dword [ebp - 0x38]
push edx
lea ecx, [ebp - 0x38]
call fcn.004b0560
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x130]
push ecx
mov edx, dword [ebp - 0x134]
push edx
mov eax, dword [ebp - 0x38]
push eax
lea ecx, [ebp - 0x38]
call fcn.004b0560
mov ecx, dword [ebp - 0x54]
push ecx
mov edx, dword [ebp - 0xc0]
push edx
mov eax, dword [ebp - 0xc4]
push eax
mov ecx, dword [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x38]
call fcn.004b0560
mov edx, dword [ebp - 0x54]
push edx
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x114]
push ecx
mov edx, dword [ebp - 0x38]
push edx
lea ecx, [ebp - 0x38]
call fcn.004b0560
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0xb0]
push ecx
mov edx, dword [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0x38]
push eax
lea ecx, [ebp - 0x38]
call fcn.004b0560
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
cmp eax, ecx
je 0x4b1cb1
mov byte [ebp - 0x24], 0
mov edx, dword [ebp - 0x24]
push edx
push ecx
push eax
call fcn.004b0380
add esp, 0xc
lea eax, [ebp - 0x60]
push eax
push str.ItemsPerPage
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.0050a210
add esp, 0xc
test eax, eax
jne 0x4b1ce2
push 0x1f4
push str.ItemsPerPage
mov edx, dword [ebp - 0x68]
push edx
call fcn.0050a260
add esp, 0xc
jmp 0x4b1ce7
cmp dword [ebp - 0x60], ebx
jne 0x4b1cee
mov dword [ebp - 0x60], 0x1f4
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x38]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, esi
xor edx, edx
mov ebx, dword [ebp - 0x60]
div ebx
mov ecx, edx
mov eax, esi
sub eax, ecx
xor edx, edx
div ebx
mov ebx, eax
mov dword [ebp - 0x154], ebx
test ecx, ecx
je 0x4b1d2d
inc ebx
mov dword [ebp - 0x154], ebx
lea eax, [esi - 1]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
lea eax, [ebx - 1]
imul eax, dword [ebp - 0x60]
mov dword [ebp - 0x44], eax
lea ecx, [edi + 0x2e4]
mov dword [ebp - 0x24], ecx
push ebx
call fcn.00494860
mov ecx, dword [ebp - 0x24]
cmp byte [edi + 0x32c], 0
jne 0x4b1d79
call fcn.004940a0
mov ecx, dword [ebp - 0x60]
imul eax, ecx
mov dword [ebp - 0x44], eax
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x3c], eax
mov byte [edi + 0x32c], 1
jmp 0x4b1d7f
push ebx
call fcn.004949a0
cmp dword [ebp - 0x3c], esi
jl 0x4b1d8a
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x3c], ecx
xor esi, esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x78], esi
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x74], eax
mov edi, dword [sym.imp.USER32.dll_LoadIconW]
mov ebx, dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
lea ebx, [ebx]
cmp eax, dword [ebp - 0x4c]
je 0x4b21c8
push eax
lea ecx, [ebp - 0x19c]
call fcn.004abe70
mov byte [ebp - 4], 0x39
cmp esi, dword [ebp - 0x44]
jl 0x4b21a6
cmp esi, dword [ebp - 0x3c]
jg 0x4b21a6
inc esi
mov dword [ebp - 0x78], esi
mov ecx, 0x5f5774
mov eax, dword [0x5f5774]
mov edx, dword [eax + 0xc]
call edx
add eax, 0x10
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x3a
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0x5c]
push 0
push 1
push 0x1002
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, eax
mov dword [ebp - 0x1d0], 0
push 0x30
push 0
lea ecx, [ebp - 0x1cc]
push ecx
call fcn.00555020
mov dword [ebp - 0x1d0], 3
mov edx, dword [str.google.]
push edx
mov eax, dword [ebp - 0x18c]
push eax
call fcn.005571bb
add esp, 0x14
test eax, eax
jne 0x4b1e78
push 0x151
mov ecx, dword [0x5fd7c0]
push ecx
call edi
mov dword [ebp - 0x1c], eax
push eax
push 0xffffffffffffffff
push esi
call ebx
mov dword [ebp - 0x1b4], eax
mov edx, dword [ebp - 0x1c]
push edx
jmp 0x4b208f
mov eax, dword [str.bing.]
push eax
mov ecx, dword [ebp - 0x18c]
push ecx
call fcn.005571bb
add esp, 8
test eax, eax
jne 0x4b1e9b
push 0x14f
jmp 0x4b2073
mov ecx, dword [str.yahoo.]
push ecx
mov edx, dword [ebp - 0x18c]
push edx
call fcn.005571bb
add esp, 8
test eax, eax
jne 0x4b1eda
push 0x152
mov eax, dword [0x5fd7c0]
push eax
call edi
mov dword [ebp - 0x1c], eax
push eax
push 0xffffffffffffffff
push esi
call ebx
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x1c]
push ecx
jmp 0x4b208f
mov edx, dword [str.ask.]
push edx
mov eax, dword [ebp - 0x18c]
push eax
call fcn.005571bb
add esp, 8
test eax, eax
jne 0x4b1efe
push 0x14d
jmp 0x4b1e57
mov eax, dword [str.aol.]
push eax
mov ecx, dword [ebp - 0x18c]
push ecx
call fcn.005571bb
add esp, 8
test eax, eax
jne 0x4b1f21
push 0x14b
jmp 0x4b2073
mov ecx, dword [str.yandex.]
push ecx
mov edx, dword [ebp - 0x18c]
push edx
call fcn.005571bb
add esp, 8
test eax, eax
je 0x4b206e
mov eax, dword [0x5f33ac]
push eax
mov ecx, dword [ebp - 0x18c]
push ecx
call fcn.005571bb
add esp, 8
test eax, eax
je 0x4b206e
mov edx, dword [str.rambler.]
push edx
mov eax, dword [ebp - 0x18c]
push eax
call fcn.005571bb
add esp, 8
test eax, eax
jne 0x4b1f80
push 0x150
jmp 0x4b1e57
mov eax, dword [str.mail.ru]
push eax
mov ecx, dword [ebp - 0x18c]
push ecx
call fcn.005571bb
add esp, 8
test eax, eax
jne 0x4b1fa3
push 0x10d
jmp 0x4b2073
mov ecx, dword [0x5f33a0]
push ecx
mov edx, dword [ebp - 0x18c]
push edx
call fcn.005571bb
add esp, 8
test eax, eax
jne 0x4b1fe2
push 0x14c
mov eax, dword [0x5fd7c0]
push eax
call edi
mov dword [ebp - 0x1c], eax
push eax
push 0xffffffffffffffff
push esi
call ebx
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x1c]
push ecx
jmp 0x4b208f
mov edx, dword [0x5f33a4]
push edx
mov eax, dword [ebp - 0x18c]
push eax
call fcn.005571bb
add esp, 8
test eax, eax
jne 0x4b2006
push 0x14e
jmp 0x4b1e57
mov eax, dword [str.lycos.com]
push eax
mov ecx, dword [ebp - 0x18c]
push ecx
call fcn.005571bb
add esp, 8
test eax, eax
jne 0x4b2026
push 0x15e
jmp 0x4b2073
mov ecx, dword [str.wikipedia.org]
push ecx
mov edx, dword [ebp - 0x18c]
push edx
call fcn.005571bb
add esp, 8
test eax, eax
jne 0x4b2062
push 0x18c
mov eax, dword [0x5fd7c0]
push eax
call edi
mov dword [ebp - 0x1c], eax
push eax
push 0xffffffffffffffff
push esi
call ebx
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x1c]
push ecx
jmp 0x4b208f
mov dword [ebp - 0x1b4], 0xffffffff
jmp 0x4b2095
push 0x153
mov edx, dword [0x5fd7c0]
push edx
call edi
push eax
push 0xffffffffffffffff
mov dword [ebp - 0x1c], eax
push esi
call ebx
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1cc], ecx
lea ecx, [ebp - 0x180]
call fcn.00404db0
mov dword [ebp - 0x1bc], eax
lea edx, [ebp - 0x1d0]
push edx
push 0
push 0x104d
mov esi, dword [ebp - 0x5c]
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x17c]
call fcn.00404db0
push eax
push 1
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [esi + 4]
call fcn.00401a50
mov esi, dword [ebp - 0x184]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
lea edx, [esi + 0xc]
cmp dword [edx], 0
jl 0x4b210d
cmp eax, dword [esi]
jne 0x4b210d
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4b2150
mov edx, dword [eax]
push 2
mov ecx, dword [esi + 4]
push ecx
mov ecx, eax
mov edx, dword [edx]
call edx
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x4b2127
call fcn.004021c0
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x24]
mov dword [ecx + 4], eax
mov eax, dword [esi + 4]
lea edx, [eax + eax + 2]
push edx
add esi, 0x10
push esi
lea eax, [eax + eax + 2]
push eax
add ecx, 0x10
push ecx
call fcn.00554d08
add esp, 0x10
mov esi, dword [ebp - 0x24]
add esi, 0x10
mov dword [ebp - 0x40], esi
mov byte [ebp - 4], 0x3c
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x40]
push ecx
push 2
mov esi, dword [ebp - 0x28]
push esi
mov ecx, dword [ebp - 0x5c]
add ecx, 4
mov dword [ebp - 0x24], ecx
call fcn.00401a50
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x40]
call fcn.00404d60
mov edx, dword [ebp - 0x188]
push edx
push 3
push esi
mov ecx, dword [ebp - 0x24]
call fcn.00401a50
inc esi
mov dword [ebp - 0x28], esi
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x50]
call fcn.00404d60
jmp 0x4b21aa
inc esi
mov dword [ebp - 0x78], esi
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x19c]
call fcn.004abd00
add dword [ebp - 0x74], 0x38
mov eax, dword [ebp - 0x74]
mov esi, dword [ebp - 0x78]
jmp 0x4b1db0
mov eax, dword [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x164]
push ecx
mov esi, dword [ebp - 0x5c]
lea ecx, [esi + 0x24]
call fcn.00432140
lea ecx, [esi + 0x2e4]
call fcn.004940c0
lea ecx, [esi + 0x2e4]
call fcn.00494150
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1f4]
call fcn.004b0740
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xb4]
call fcn.004b0740
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x114]
call fcn.004b0740
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xc4]
call fcn.004b0740
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x134]
call fcn.004b0740
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xd4]
call fcn.004b0740
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xe4]
call fcn.004b0740
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x104]
call fcn.004b0740
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x124]
call fcn.004b0740
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x144]
call fcn.004b0740
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xf4]
call fcn.004b0740
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.004b0740
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x48]
call fcn.00404d60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.004b0740
mov eax, dword [ebp - 0x150]
wait
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret