Function at 0x4054c0
Capabilities:
Accept command line arguments
Authenticate hmac
Check for unmoving mouse cursor
Encode data using base64
Extract resource via kernel32 functions
Get disk information
Get file version info

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x43b912
push eax
mov eax, 0x3ac4
mov dword fs:[0], esp
call fcn.00425d70
push ebx
push esi
push edi
lea eax, [ebp - 0x14c8]
push eax
mov esi, ecx
call fcn.004125a0
xor edi, edi
lea ecx, [ebp - 0x14c8]
mov dword [ebp - 4], edi
mov dword [esi + 0x20], ecx
call fcn.00417517
mov eax, dword [eax + 0xc]
push edi
push edi
mov dword [ebp - 0x90], eax
mov dword [0x44fdd8], eax
xor eax, eax
push edi
push edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x84], eax
mov dword [ebp - 0xd10], eax
mov dword [ebp - 0x504], edi
mov dword [ebp - 0x500], eax
mov dword [ebp - 0x4fc], eax
mov dword [ebp - 0x4f8], eax
mov dword [ebp - 0x5b4], eax
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x5ac], eax
call dword [sym.imp.CRYPT32.dll_CryptRegisterDefaultOIDFunction]
push 1
push 0xf060
push edi
push edi
mov dword [ebp - 0x24], eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
push eax
call dword [sym.imp.USER32.dll_EnableMenuItem]
lea edx, [ebp - 0x620]
push edx
call fcn.0040e4c0
lea eax, [ebp - 0x620]
mov byte [ebp - 4], 1
push eax
lea ebx, [ebp - 0x4b4]
lea esi, [ebp - 0xa0c]
mov dword [ebp - 0x4b4], 0x29
mov byte [ebp - 0x4b0], 0x37
call fcn.0040e530
xor eax, eax
lea ecx, [ebp - 0x620]
push ecx
lea ebx, [ebp - 0x1cc]
lea esi, [ebp - 0x9f4]
mov dword [ebp - 0x1cc], eax
mov byte [ebp - 0x1c8], al
call fcn.0040e530
fild dword [ebp - 0x4f8]
movzx edx, byte [ebp - 0x20]
mov eax, dword [0x44fddc]
fstp qword [ebp - 0x1cc]
neg eax
fild dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x5c], edx
fstp qword [ebp - 0x48c]
fild dword [ebp - 0xd10]
call fcn.00437830
fmul qword [ebp - 0x48c]
fimul dword [ebp - 0x5c]
fsubr qword [ebp - 0x1cc]
call fcn.00426140
mov edi, eax
xor eax, eax
mov dword [ebp - 0x200], eax
mov byte [ebp - 0x1fc], al
lea eax, [ebp - 0x620]
push eax
lea ebx, [ebp - 0x200]
lea esi, [ebp - 0x9dc]
mov dword [ebp - 0x10], edi
call fcn.0040e530
mov esi, dword [ebp - 0x604]
test esi, esi
jbe 0x40566f
fild dword [0x44fdd0]
call fcn.00437be0
fimul dword [ebp - 0x4fc]
fiadd dword [ebp - 0x5b0]
call fcn.00426140
mov dword [ebp - 0x64], eax
jmp 0x40567c
movzx ecx, byte [ebp - 0x24]
add ecx, dword [ebp - 0x70]
sub dword [0x44fdd4], ecx
test esi, esi
jne 0x4056ad
fldz
sub esp, 8
fstp qword [esp]
call fcn.00437a70
fiadd dword [ebp - 0x4fc]
add esp, 8
fadd qword [0x440f78]
fiadd dword [ebp - 0x5b4]
call fcn.00426140
mov dword [ebp - 0x5b4], eax
movzx edx, word [ebp - 0x24]
sub edx, dword [ebp - 0x70]
push 0
add dword [0x44fdd4], edx
push 0
push 0
push 0
push 0
push 0
push 0
call sub.CRYPT32.dll_CryptMsgVerifyCountersignatureEncoded
movzx ecx, word [ebp - 0x84]
mov ebx, eax
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x20]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0xb21642c9
imul ecx
mov eax, dword [ebp - 0x608]
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ecx, esi
movzx edx, bl
sub ecx, edx
add ecx, dword [ebp - 0x4f8]
mov dword [0x44fddc], ebx
mov dword [0x44fdd0], ecx
mov ecx, dword [eax + 4]
push ecx
lea ecx, [ebp - 0x620]
call fcn.0040e700
mov eax, dword [ebp - 0x608]
mov dword [eax + 4], eax
mov eax, dword [ebp - 0x608]
mov ebx, dword [ebp - 0x30]
mov dword [ebp - 0x604], 0
mov dword [eax], eax
mov eax, dword [ebp - 0x608]
mov dword [eax + 8], eax
mov eax, 0x55555556
imul dword [ebp - 0x64]
mov eax, edx
shr eax, 0x1f
add eax, edx
or ecx, 0xffffffff
sub ecx, eax
mov eax, 0xaaaaaaab
mul ebx
push 0
push edi
push ecx
shr edx, 1
push 0
add edx, 1
push edx
mov edx, dword [0x44fde4]
push edx
call dword [sym.imp.USER32.dll_MoveWindow]
fldz
call fcn.00437300
movzx eax, byte [ebp - 0x84]
mov dword [ebp - 0x14], eax
mov esi, 0x50
fild dword [ebp - 0x14]
fsubp st(1)
fsub qword [0x440f78]
fstp qword [ebp - 0x1e8]
fild dword [ebp - 0x5b4]
fadd qword [ebp - 0x1e8]
call fcn.00426140
push 0
mov dword [ebp - 0x5b4], eax
call dword [sym.imp.KERNEL32.DLL_LockResource]
test eax, eax
jne 0x4057d9
mov dword [0x44fdd0], eax
mov eax, dword [0x44fddc]
imul eax, ebx
add eax, 0x238
sub esi, 1
mov dword [ebp - 0x20], eax
jne 0x4057b1
mov eax, dword [ebp - 0x504]
neg eax
lea ecx, [ebp - 0x36c0]
cmp ecx, eax
ja 0x405841
fld qword [ebp - 0x1cc]
sub esp, 8
fstp qword [esp]
call fcn.00437a70
fnstcw word [ebp - 0xda]
movzx eax, word [ebp - 0xda]
add esp, 8
or eax, 0xc00
mov dword [ebp - 0x14], eax
fldcw word [ebp - 0x14]
fistp qword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1e8]
mov dword [ebp - 0x30], edx
fldcw word [ebp - 0xda]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SendMessageA]
lea esi, [ebp - 0x620]
mov byte [ebp - 4], 2
call fcn.0040dbc0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x620]
push eax
call fcn.00413f05
mov ecx, dword [ebp - 0x90]
add esp, 4
xor esi, esi
push 0x206
xor eax, eax
lea edx, [ebp - 0x228a]
push esi
push edx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x88], 1
mov dword [ebp - 0xc50], eax
mov dword [ebp - 0xc48], eax
mov word [ebp - 0x228c], si
call fcn.00423c00
lea ecx, [ebp - 0x16d0]
mov eax, 0x4325c53f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
lea ecx, [edx + eax + 1]
add esp, 0xc
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x234], esi
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push 4
mov dword [ebp - 0x4c], eax
call fcn.00413ed5
add esp, 4
cmp eax, esi
je 0x4058f9
lea edx, [ebp - 0x44c]
mov dword [eax], edx
jmp 0x4058fb
xor eax, eax
mov dword [ebp - 0x44c], eax
mov byte [ebp - 4], 3
call fcn.004117d0
mov dword [ebp - 0x434], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp - 0x434]
mov dword [eax + 4], eax
mov eax, dword [ebp - 0x434]
mov dword [eax], eax
mov eax, dword [ebp - 0x434]
mov dword [eax + 8], eax
mov dword [ebp - 0x430], esi
mov byte [ebp - 4], 4
lea ebx, [ebp - 0x94]
lea esi, [ebp - 0x9c4]
lea eax, [ebp - 0x44c]
mov word [ebp - 0x94], 0x65
mov byte [ebp - 0x92], 0x4f
call fcn.0040e5a0
cmp dword [ebp - 0x430], 0
jne 0x405979
mov eax, dword [ebp - 0x64]
lea eax, [ebp + eax - 0x228c]
neg eax
mov dword [ebp - 0x2c], eax
jmp 0x4059b5
fild dword [0x44fde0]
sub esp, 8
fstp dword [ebp - 0x14]
fld dword [ebp - 0x14]
fstp qword [esp]
call fcn.00422ed0
fstp dword [ebp - 0x14]
add esp, 8
fld dword [ebp - 0x14]
fstp dword [ebp - 0x14]
fld dword [ebp - 0x14]
fldz
fmul st(1), st(0)
fsubp st(1)
fiadd dword [0x44fdd0]
call fcn.00426140
mov dword [0x44fdd0], eax
lea ebx, [ebp - 0x3c]
lea esi, [ebp - 0x9b8]
lea eax, [ebp - 0x44c]
mov word [ebp - 0x3c], di
mov byte [ebp - 0x3a], 1
call fcn.0040e5a0
mov ecx, dword [ebp - 0x4c]
lea eax, [ebp - 0x16d0]
movzx eax, ax
movzx edx, cl
add edx, eax
mov dword [ebp - 0xc0], eax
je 0x4059fe
mov eax, dword [0x44fddc]
sub eax, dword [ebp - 0x70]
mov esi, dword [ebp - 0x84]
sub eax, ecx
add esi, eax
jmp 0x405a39
mov esi, dword [ebp - 0x24]
mov eax, dword [0x44fdd0]
cdq
lea ecx, [esi + 0x44]
idiv ecx
mov ebx, dword [ebp - 0x70]
mov ecx, eax
mov eax, 0xdd67c8a7
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
lea edx, [ebp - 0x228c]
sub ecx, edx
sub ecx, esi
mov esi, dword [ebp - 0x84]
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x430], 0
mov ebx, dword [0x44fde0]
jbe 0x405a97
fild dword [0x44fddc]
fstp dword [ebp - 0x14]
fld dword [ebp - 0x14]
call fcn.00437400
fstp dword [ebp - 0x14]
fld dword [ebp - 0x14]
fstp dword [ebp - 0x14]
fild dword [ebp - 0x24]
fnstcw word [ebp - 0xda]
movzx eax, word [ebp - 0xda]
fsub dword [ebp - 0x14]
or eax, 0xc00
mov dword [ebp - 0x14], eax
fldcw word [ebp - 0x14]
fistp qword [ebp - 0x1e8]
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x2c], eax
fldcw word [ebp - 0xda]
jmp 0x405ab2
xor eax, eax
xor edx, edx
lea ecx, [ebx + 0x53]
div ecx
imul eax, esi
sub eax, dword [0x44fdd0]
add eax, 1
mov dword [ebp - 0x88], eax
movzx ecx, word [ebp - 0x20]
mov eax, 0x55555556
imul ebx
mov eax, edx
shr eax, 0x1f
add eax, edx
movzx edx, word [0x44fde8]
sub edi, eax
mov eax, dword [ebp - 0x434]
sub edi, edx
sub edi, ecx
sub edi, dword [ebp - 0x2c]
mov dword [ebp - 0x84], ecx
sub edi, esi
mov esi, dword [eax + 4]
sub edi, dword [ebp - 0x4c]
cmp byte [esi + 0x11], 0
mov ebx, esi
jne 0x405b18
mov eax, dword [ebx + 8]
push eax
lea ecx, [ebp - 0x44c]
call fcn.0040e610
mov ebx, dword [ebx]
push esi
call fcn.00413f05
add esp, 4
cmp byte [ebx + 0x11], 0
mov esi, ebx
je 0x405af0
mov eax, dword [ebp - 0x434]
mov dword [eax + 4], eax
mov eax, dword [ebp - 0x434]
lea ecx, [ebp - 0x234]
push ecx
push 0
mov dword [ebp - 0x430], 0
mov dword [eax], eax
mov eax, dword [ebp - 0x434]
push 0
push 2
mov dword [eax + 8], eax
call sub.WinSCard.dll_SCardEstablishContext
fild dword [ebp - 0x10]
movzx edx, di
mov dword [ebp - 0x14], edx
fstp qword [ebp - 0x14c]
mov dword [ebp - 0x70], eax
fild dword [ebp - 0x14]
fstp qword [ebp - 0x200]
fild dword [ebp - 0x88]
call fcn.00437830
fmul qword [0x440fd8]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
fsubr qword [ebp - 0x200]
mov dword [ebp - 0x14], eax
mov eax, 0x6bca1af3
imul dword [0x44fddc]
fild dword [ebp - 0x14]
faddp st(1)
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [ebp - 0x14], ecx
fild dword [ebp - 0x14]
fsubp st(1)
fld qword [ebp - 0x14c]
fsub st(1), st(0)
fsubrp st(1)
call fcn.00426140
mov dword [ebp - 0x10], eax
mov esi, 0x2d
mov edx, dword [0x44fde8]
mov ecx, dword [0x44fddc]
xor eax, eax
push 2
lea ebx, [eax + edx]
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x640], eax
push 2
lea eax, [ebp - 0x64c]
push eax
push ecx
sub esi, 1
call dword [sym.imp.USER32.dll_DrawFrameControl]
test esi, esi
jne 0x405bbd
push edi
call dword [sym.imp.USER32.dll_OemKeyScan]
add eax, dword [ebp - 0x18]
push 0xfffffffffffffff5
mov dword [0x44fde8], eax
call dword [sym.imp.KERNEL32.DLL_GetStdHandle]
imul edi, dword [0x44fde4]
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x70]
add edi, esi
add dword [ebp - 0x4c], edi
mov edi, dword [0x44fddc]
sub edx, edi
add edx, dword [0x44fde8]
test edx, edx
jle 0x405ca7
fild dword [ebp - 0xc48]
fstp dword [ebp - 0x14]
fld dword [ebp - 0x14]
call fcn.004375e0
fstp dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
fld dword [ebp - 0x14]
xor edx, edx
fstp dword [ebp - 0x14]
add esi, 0x4b
div esi
movzx edx, word [0x44fdd0]
mov ecx, eax
mov eax, dword [0x44fde0]
imul ecx, edx
lea esi, [eax + 0x39]
lea edx, [ebp - 0x228c]
movzx eax, dx
cdq
idiv esi
sub ecx, eax
add ecx, ebx
test ecx, ecx
mov dword [ebp - 0x8c], ecx
fild dword [ebp - 0x8c]
jge 0x405c98
fadd dword [0x440fd0]
fadd dword [ebp - 0x14]
fldz
fsubrp st(1)
call fcn.00426140
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x4c]
sub eax, edi
mov dword [0x44fde0], eax
lea esi, [ebp - 0x44c]
mov byte [ebp - 4], 5
call fcn.0040e650
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x44c]
push ecx
call fcn.00413f05
mov ebx, dword [ebp - 0x24]
add esp, 4
cmp dword [0x44fde4], 0
je 0x405e11
fld qword [ebp - 0x48c]
mov byte [ebp - 0x54], 0x61
fstp qword [ebp - 0x174]
mov byte [ebp - 0x53], 0x62
fld qword [ebp - 0x328]
mov byte [ebp - 0x52], 0x63
fld qword [ebp - 0x328]
mov byte [ebp - 0x51], 0x64
fldz
test ebx, ebx
jle 0x405d79
mov edx, 1
lea edi, [ebp - 0x54]
lea esi, [ebp - 0x174]
sub edi, edx
mov dword [ebp - 0x3c], ebx
cmp edx, ebx
fld qword [esi]
mov ecx, edx
jge 0x405d6b
fcom qword [ebp + ecx*8 - 0x174]
fnstsw ax
test ah, 5
jp 0x405d64
fld qword [ebp + ecx*8 - 0x174]
movzx eax, byte [ebp + ecx - 0x54]
fld qword [ebp + ecx*8 - 0x174]
mov byte [edi + edx], al
fstp qword [esi]
fstp qword [ebp + ecx*8 - 0x174]
movzx eax, byte [ebp - 0xa5]
mov byte [ebp + ecx - 0x54], al
add ecx, 1
cmp ecx, ebx
jl 0x405d2c
add edx, 1
fstp st(0)
add esi, 8
sub dword [ebp - 0x3c], 1
jne 0x405d24
or ecx, 0xffffffff
fld qword [ebp + ecx*8 - 0x16c]
add ecx, 1
lea eax, [ecx + 1]
faddp st(3)
cmp eax, ebx
jge 0x405d9f
fld qword [ebp + eax*8 - 0x174]
add eax, 1
cmp eax, ebx
faddp st(2)
jl 0x405d8f
mov ecx, dword [ebp - 0x154]
fld st(1)
fsub st(3)
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x405dc2
fcomp qword [ebp + ebx*8 - 0x174]
fnstsw ax
test ah, 5
jnp 0x405d7c
jmp 0x405dc4
fstp st(0)
fld st(2)
fsub st(2)
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x405de1
fcomp qword [ebp + ebx*8 - 0x174]
fnstsw ax
test ah, 5
jnp 0x405d7c
jmp 0x405de3
fstp st(0)
test ebx, ebx
jl 0x405df7
mov ecx, dword [0x44fdd0]
lea edx, [ecx + ebx + 1]
mov dword [0x44fdd0], edx
fld qword [ebp + ebx*8 - 0x174]
fcomp st(2)
fnstsw ax
test ah, 5
jnp 0x405d0d
fstp st(1)
fstp st(1)
fstp st(0)
call dword [sym.imp.KERNEL32.DLL_GetLogicalDrives]
push 0x103
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18d7]
push 0
push eax
mov byte [ebp - 0x18d8], bl
call fcn.00423c00
mov edx, dword [ebp - 0x14]
add esp, 0xc
mov esi, 0x1a
mov edi, edi
test dl, 1
je 0x405e65
xor eax, eax
jmp 0x405e50
mov cl, byte [ebp + eax - 0x18d8]
mov byte [ebp + eax - 0x2894], cl
add eax, 1
test cl, cl
jne 0x405e50
add byte [ebp - 0x18d8], 1
shr edx, 1
sub esi, 1
jne 0x405e40
cmp dword [0x44fddc], esi
je 0x405f69
push 0x103
lea ecx, [ebp - 0x17d3]
push esi
push ecx
mov byte [ebp - 0x17d4], bl
call fcn.00423c00
add esp, 0xc
push 0x103
lea edx, [ebp - 0x1c33]
push esi
push edx
mov byte [ebp - 0x1c34], bl
call fcn.00423c00
lea eax, [ebp - 0x1c34]
add esp, 0xc
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x405ec0
sub eax, edx
lea esi, [ebp + eax - 0x1c35]
mov al, byte [esi]
cmp al, 0x2e
mov dword [ebp - 0x2c], esi
je 0x405ef1
jmp 0x405ee0
cmp al, 0x5c
je 0x405eee
mov al, byte [esi - 1]
sub esi, 1
cmp al, 0x2e
jne 0x405ee0
mov dword [ebp - 0x2c], esi
push esi
lea eax, [ebp - 0x17d4]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
jne 0x405f69
lea edi, [ebp - 0x17d4]
add edi, 0xffffffff
lea esp, [esp]
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x405f10
mov cx, word [0x440298]
mov word [edi], cx
mov eax, esi
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x405f26
lea edi, [ebp - 0x17d4]
sub eax, esi
add edi, 0xffffffff
lea ebx, [ebx]
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x405f40
mov edx, dword [ebp - 0x2c]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push edx
and ecx, 3
push 0x44029c
rep movsb byte es:[edi], byte [esi]
call fcn.00422a5b
add esp, 8
push 0x103
lea eax, [ebp - 0x1333]
push 0
push eax
mov byte [ebp - 0x1334], bl
call fcn.00423c00
add esp, 0xc
push 0x103
lea ecx, [ebp - 0x238f]
push 0
push ecx
mov byte [ebp - 0x2390], bl
call fcn.00423c00
add esp, 0xc
call dword [sym.imp.KERNEL32.DLL_GetCommandLineA]
mov edi, eax
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x405fb0
sub eax, edx
add eax, 1
push eax
call fcn.00413f00
mov esi, eax
add esp, 4
mov ecx, edi
sub esi, edi
lea ecx, [ecx]
mov dl, byte [ecx]
mov byte [ecx + esi], dl
add ecx, 1
test dl, dl
jne 0x405fd0
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
add ecx, 1
test dl, dl
jne 0x405fe1
sub ecx, esi
lea edx, [ebp - 0x2390]
mov esi, ecx
lea edi, [edx + 1]
mov cl, byte [edx]
add edx, 1
test cl, cl
jne 0x405ff7
sub edx, edi
sub esi, edx
mov ecx, esi
mov byte [ecx + eax], 0
mov dl, byte [ecx + eax - 1]
sub ecx, 1
cmp dl, 0x22
je 0x406006
cmp dl, 0x20
je 0x406006
mov esi, ecx
mov cl, dl
test cl, cl
jle 0x40603d
cmp dl, 0x5c
je 0x40603d
cmp dl, 0x3a
je 0x40603d
cmp dl, 0x2f
je 0x40603d
mov dl, byte [esi + eax - 1]
sub esi, 1
test dl, dl
jg 0x406023
lea eax, [esi + eax + 1]
lea edx, [ebp - 0x1334]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, 1
test cl, cl
jne 0x406050
lea eax, [ebp - 0x1334]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x406065
sub eax, edx
xor dl, dl
xor ecx, ecx
test eax, eax
jle 0x4060ae
jmp 0x406080
cmp byte [ebp + ecx - 0x1334], 0x2e
jne 0x40608c
mov dl, 1
add ecx, 1
cmp ecx, eax
jl 0x406080
test dl, dl
je 0x4060ae
cmp byte [ebp + eax - 0x1334], 0x2e
je 0x4060ae
sub eax, 1
cmp byte [ebp + eax - 0x1334], 0x2e
jne 0x4060a1
mov edx, dword [str..cfg]
mov cl, byte [0x4402a4]
lea eax, [ebp + eax - 0x1334]
mov dword [eax], edx
mov byte [eax + 4], cl
lea eax, [ebp - 0x1334]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x4060d0
sub eax, edx
push 0x26
mov byte [ebp + eax - 0x1333], cl
mov byte [ebp - 0x2c8], cl
push str.43Mbits_DCOM_InviceJabber_Family_1155.
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 0x2b4], 0xf
mov dword [ebp - 0x2b8], 0
call fcn.0040ef20
mov byte [ebp - 4], 6
cmp dword [ebp - 0x2b4], 0x10
mov edx, dword [ebp - 0x2c8]
jae 0x406127
lea edx, [ebp - 0x2c8]
xor eax, eax
mov ecx, 0x44017b
call fcn.00401120
test eax, eax
jne 0x406156
cmp dword [ebp - 0x2b8], eax
setne al
test eax, eax
jne 0x406156
push 0xf
push str.Webware_ailing.
lea eax, [ebp - 0x2cc]
call fcn.0040d620
lea edx, [ebp - 0x2cc]
call fcn.0040ce40
test eax, eax
jne 0x406177
push 0x19
push str.Echo_routers_offers_LXDE.
lea eax, [ebp - 0x2cc]
call fcn.0040d620
push 7
push str.Snicket
lea edx, [ebp - 0x2cc]
push edx
call fcn.0040da40
test eax, eax
mov edi, dword [ebp - 0x6c]
mov ebx, dword [ebp - 0x80]
je 0x406196
sub edi, ebx
push 0x41
push str.tplgyTab_Avalon_intrafamilial_disadvantages_Interchangeable_Game.
lea eax, [ebp - 0x2cc]
call fcn.0040d620
push 8
push str.winding.
lea eax, [ebp - 0x2cc]
call fcn.0040d620
lea edx, [ebp - 0x2cc]
call fcn.0040ce40
test eax, eax
je 0x4061d5
mov eax, dword [ebp - 0x2b8]
add eax, 9
mov dword [ebp - 0x30], eax
push 0xf
push str.classifications
lea ecx, [ebp - 0x2cc]
push ecx
call fcn.0040da40
test eax, eax
je 0x40621d
fild dword [ebp - 0xd8]
call fcn.00437830
fimul dword [ebp - 0x84]
movzx edx, byte [ebp - 0x158]
mov dword [ebp - 0x14], edx
fild dword [ebp - 0x14]
fsubp st(1)
fiadd dword [ebp - 0xd4]
call fcn.00426140
mov dword [ebp - 0xd4], eax
mov eax, dword [0x44fde4]
add eax, 8
test eax, eax
mov dword [ebp - 0x3c], 0
jle 0x406451
mov ecx, dword [ebp - 0x30]
fild dword [ebp - 0x30]
test ecx, ecx
jge 0x406244
fadd qword [0x440f80]
call fcn.00437830
fstp qword [ebp - 0x1cc]
fild dword [ebp - 0x20]
fstp qword [ebp - 0x4b4]
jmp 0x406263
mov ebx, dword [ebp - 0x80]
movzx edx, word [0x44fdd0]
imul edx, dword [0x44fdd4]
sub edx, dword [ebp - 0x34]
mov eax, dword [0x44fde0]
cmp edx, eax
jne 0x406285
movzx eax, al
mov dword [ebp - 0x44], eax
jmp 0x4062ca
fild dword [ebp - 0x34]
sub esp, 8
fstp qword [ebp - 0x200]
fild dword [0x44fdd4]
fstp qword [esp]
call fcn.00437a70
fisub dword [ebp - 0x10]
lea edx, [ebp - 0x16d0]
lea ecx, [ebp - 0xe48]
imul ecx, edx
mov dword [ebp - 0x14], ecx
add esp, 8
fild dword [ebp - 0x14]
faddp st(1)
fsubr qword [ebp - 0x200]
call fcn.00426140
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0xb9c]
push eax
call fcn.0040e4c0
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 7
push ecx
lea esi, [ebp - 0xa50]
lea eax, [ebp - 0xb9c]
mov byte [ebp - 0x4a4], 0xf
mov dword [ebp - 0x4a0], 0xc5
call fcn.0040e690
mov dl, byte [0x44fde4]
lea eax, [ebp - 0x484]
push eax
lea esi, [ebp - 0xab4]
lea eax, [ebp - 0xb9c]
mov byte [ebp - 0x484], dl
mov dword [ebp - 0x480], edi
call fcn.0040e690
mov ecx, dword [0x44fde8]
lea edx, [ebp - 0x16d0]
sub ecx, edx
cmp ecx, ebx
jl 0x40634b
movzx eax, word [0x44fdd0]
add dword [ebp - 0x50], eax
jmp 0x40636b
movzx ecx, word [ebp - 0x50]
mov eax, 0x4d4873ed
imul ebx
sar edx, 4
mov edi, edx
shr edi, 0x1f
add edi, edx
movzx edx, byte [0x44fdd4]
add edi, ecx
add edi, edx
fild dword [0x44fde8]
fmul qword [ebp - 0x1cc]
fdiv qword [0x440fc8]
fadd qword [ebp - 0x4b4]
call fcn.00426140
fild dword [0x44fde0]
mov ebx, eax
mov dword [ebp - 0x80], ebx
fstp dword [ebp - 0x14]
fld dword [ebp - 0x14]
call fcn.004375e0
fstp dword [ebp - 0x14]
mov ecx, dword [0x44fddc]
fld dword [ebp - 0x14]
mov eax, 0xb21642c9
fstp dword [ebp - 0x18]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x16ac]
test edx, edx
mov dword [ebp - 0x14], eax
movzx ecx, bl
fild dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
fsub dword [ebp - 0x18]
fild dword [ebp - 0x14]
fsubp st(1)
fadd qword [0x440f78]
fild dword [ebp - 0x16ac]
jge 0x4063f3
fadd dword [0x440fd0]
faddp st(1)
call fcn.00426140
cmp dword [ebp - 0xd4], 0
mov dword [ebp - 0x64], eax
jle 0x406415
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x178]
mov dword [ebp - 0x164], eax
lea esi, [ebp - 0xb9c]
mov byte [ebp - 4], 8
call fcn.0040dbc0
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0xb9c]
push eax
call fcn.00413f05
mov eax, dword [ebp - 0x3c]
mov ecx, dword [0x44fde4]
add eax, 1
add ecx, 8
add esp, 4
cmp eax, ecx
mov dword [ebp - 0x3c], eax
jl 0x406260
movzx eax, byte [ebp - 0x4c]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
add eax, edx
je 0x406475
lea eax, [ebp - 0xe48]
movzx ecx, ax
imul ecx, dword [ebp - 0x30]
mov dword [0x44fdd0], ecx
lea edx, [ebp - 0xb70]
push edx
call fcn.0040e4c0
lea eax, [ebp - 0xb70]
mov byte [ebp - 4], 9
push eax
lea ebx, [ebp - 0x4bc]
lea esi, [ebp - 0xa24]
mov word [ebp - 0x4bc], 0x21
mov dword [ebp - 0x4b8], 0x42
call fcn.0040e790
movzx ecx, word [ebp - 0x50]
mov edx, dword [0x44fddc]
lea eax, [ebp - 0xb70]
push eax
lea ebx, [ebp - 0x494]
lea esi, [ebp - 0xb50]
mov word [ebp - 0x494], cx
mov dword [ebp - 0x490], edx
call fcn.0040e790
movzx ecx, word [ebp - 0x20]
mov edx, dword [ebp - 0x70]
lea eax, [ebp - 0xb70]
push eax
lea ebx, [ebp - 0x140]
lea esi, [ebp - 0xa18]
mov word [ebp - 0x140], cx
mov dword [ebp - 0x13c], edx
call fcn.0040e790
lea esi, [ebp - 0xb70]
mov byte [ebp - 4], 0xa
call fcn.0040dbc0
mov ecx, dword [ebp - 0xb70]
push ecx
call fcn.00413f05
add esp, 4
xor esi, esi
mov byte [ebp - 4], 0
cmp dword [ebp - 0x2b4], 0x10
jb 0x406547
mov edx, dword [ebp - 0x2c8]
push edx
call fcn.00413f05
add esp, 4
mov eax, 0xf
push 7
push str.ANFSCD.
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b8], esi
mov byte [ebp - 0x2c8], 0
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x24c], esi
mov byte [ebp - 0x25c], 0
call fcn.0040ef20
push 0x16
push str.lakes_liberal_owe_iMI.
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0xb
call fcn.0040d620
lea edx, [ebp - 0x260]
call fcn.0040ce40
test eax, eax
je 0x4065bb
push 0x13
push str.spectrum_Frankfurt.
lea eax, [ebp - 0x260]
call fcn.0040d620
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24c]
add esi, 0xd
cmp esi, ecx
ja 0x4065db
push 0xffffffffffffffff
push esi
lea ecx, [ebp - 0x260]
call fcn.0040d8b0
jmp 0x4065ec
mov eax, esi
push 0x17
sub eax, ecx
lea edi, [ebp - 0x260]
call fcn.0040d730
push 0x20
push str.Checked_prohibit_discipline_DMA.
lea eax, [ebp - 0x260]
call fcn.0040d620
lea edx, [ebp - 0x260]
call fcn.0040ce40
test eax, eax
je 0x40661f
push 0x1b
push str.Webndes_passwrd_serialized.
lea eax, [ebp - 0x260]
call fcn.0040d620
push 5
push str.Barak
lea eax, [ebp - 0x260]
push eax
call fcn.0040da40
test eax, eax
je 0x40663c
mov ecx, dword [ebp - 0x20]
add dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x24c]
cmp esi, ecx
ja 0x406656
push 0xffffffffffffffff
push esi
lea ecx, [ebp - 0x260]
call fcn.0040d8b0
jmp 0x406667
mov eax, esi
push 0x1d
sub eax, ecx
lea edi, [ebp - 0x260]
call fcn.0040d730
push 3
push 0x4403e4
lea edx, [ebp - 0x260]
push edx
call fcn.0040da40
lea edi, [ebp - 0x260]
call fcn.0040cda0
movzx eax, word [ebp - 0x34]
lea ecx, [ebp - 0x1b30]
movzx edx, cx
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0x3c], 6
mov dword [ebp - 0x18], eax
fild dword [ebp - 0xe0]
xor edi, edi
fstp qword [ebp - 0x140]
mov ecx, 1
call fcn.004123b0
cmp eax, edi
je 0x4066c8
lea ecx, [ebp - 0x354]
mov dword [eax], ecx
jmp 0x4066ca
xor eax, eax
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x344], edi
mov dword [ebp - 0x340], edi
mov dword [ebp - 0x33c], edi
mov dword [ebp - 0x338], edi
lea edx, [ebp - 0x10]
push edx
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0xc
call fcn.0040d270
fild dword [0x44fddc]
fstp dword [ebp - 0x14]
fld dword [ebp - 0x14]
call fcn.0043754c
fstp dword [ebp - 0x14]
fld dword [ebp - 0x14]
fstp dword [ebp - 0x14]
fld dword [ebp - 0x14]
fadd qword [0x440f78]
fisub dword [ebp - 0x64]
call fcn.00426140
cmp dword [ebp - 0x338], edi
mov ebx, eax
mov dword [ebp - 0x50], ebx
jne 0x406747
mov eax, dword [ebp - 0x64]
sub eax, dword [0x44fde8]
add eax, dword [ebp - 0x4c]
mov dword [ebp - 0x158], eax
jmp 0x406753
mov eax, dword [0x44fde0]
imul eax, dword [ebp - 0x10]
add dword [ebp - 0x64], eax
lea ecx, [ebp - 0x74]
push ecx
lea eax, [ebp - 0x354]
call fcn.0040d270
mov edx, dword [ebp - 0x18]
cmp dword [ebp - 0x20], edx
jl 0x406796
fild dword [ebp - 0x50]
call fcn.00437be0
fild dword [ebp - 0x1632]
mov eax, dword [ebp - 0x1632]
test eax, eax
jge 0x406788
fadd qword [0x440f80]
fmulp st(1)
call fcn.00426140
mov dword [0x44fdd0], eax
jmp 0x4067a6
mov ecx, dword [ebp - 0x70]
imul ecx, dword [0x44fddc]
mov dword [0x44fdd0], ecx
push 0x44fde0
lea eax, [ebp - 0x354]
call fcn.0040d270
fldz
sub esp, 8
fstp qword [esp]
call fcn.00422ed0
fstp dword [ebp - 0x14]
fld dword [ebp - 0x14]
movzx edx, bl
fstp dword [ebp - 0x94]
mov dword [ebp - 0x14], edx
fild dword [0x44fdd0]
add esp, 8
fild dword [ebp - 0x14]
fild dword [0x44fddc]
fmul dword [ebp - 0x94]
fsubp st(1)
fsub qword [ebp - 0x140]
fsubp st(1)
call fcn.00426140
mov dword [0x44fdd0], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x354]
call fcn.0040d270
cmp dword [ebp - 0x338], edi
je 0x40684d
mov eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x340]
add eax, 1
lea edx, [ecx*4]
cmp edx, eax
mov dword [ebp - 0x33c], eax
ja 0x40683e
mov dword [ebp - 0x33c], edi
sub dword [ebp - 0x338], 1
jne 0x40684d
mov dword [ebp - 0x33c], edi
lea esi, [ebp - 0x354]
mov byte [ebp - 4], 0xb
call fcn.0040ea80
mov eax, dword [ebp - 0x354]
push eax
call fcn.00413f05
add esp, 4
sub dword [ebp - 0x3c], 1
jne 0x4066b0
lea ecx, [ebp - 0xb44]
push ecx
call fcn.0040e800
lea edx, [ebp - 0x1b2]
mov byte [ebp - 4], 0xd
push edx
lea esi, [ebp - 0xa9c]
lea eax, [ebp - 0xb44]
mov byte [ebp - 0x1b2], 0x16
mov byte [ebp - 0x1b1], 0x86
call fcn.0040e870
movzx eax, byte [ebp - 0x20]
mov cl, byte [ebp - 0x30]
lea edx, [ebp - 0xee]
mov byte [ebp - 0xee], al
push edx
lea esi, [ebp - 0xa00]
lea eax, [ebp - 0xb44]
mov byte [ebp - 0xed], cl
call fcn.0040e870
movzx eax, byte [0x44fde4]
lea ecx, [ebp - 0x9a]
mov byte [ebp - 0x99], al
push ecx
lea esi, [ebp - 0xaf4]
lea eax, [ebp - 0xb44]
mov byte [ebp - 0x9a], 0
call fcn.0040e870
mov eax, dword [ebp - 0x20]
lea esi, [eax + 0x46]
movzx eax, word [ebp - 0x64]
lea edx, [ebp - 0x1044]
movzx ecx, dx
cdq
idiv esi
mov dword [ebp - 0x104], ecx
push edi
mov dword [ebp - 0x74c], edi
sub eax, ecx
add eax, ebx
add eax, dword [0x44fddc]
lea ecx, [ebp - 0x74c]
mov dword [0x44fdd0], eax
xor eax, eax
push ecx
push edi
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x744], eax
mov dword [ebp - 0x740], eax
mov dword [ebp - 0x73c], eax
call dword [sym.imp.WINMM.dll_mmioAscend]
test eax, eax
je 0x40696a
mov dword [0x44fdd0], 1
lea esi, [ebp - 0xb44]
mov byte [ebp - 4], 0xe
call fcn.0040e8e0
mov edx, dword [ebp - 0xb44]
push edx
call fcn.00413f05
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x248], 0x10
jb 0x4069a4
mov eax, dword [ebp - 0x25c]
push eax
call fcn.00413f05
add esp, 4
movzx ecx, word [ebp - 0x10]
mov edx, dword [ebp - 0x70]
sub edx, ecx
cmp edx, dword [ebp - 0x17c]
mov dword [ebp - 0x248], 0xf
mov dword [ebp - 0x24c], edi
mov byte [ebp - 0x25c], 0
jge 0x4069de
movzx eax, byte [ebp - 0x24]
mov ecx, dword [0x44fde8]
sub ecx, eax
add dword [0x44fdd0], ecx
mov edx, dword [ebp - 0x90]
push 0x206
lea eax, [ebp - 0x38c6]
xor esi, esi
push edi
push eax
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x69c], edi
mov dword [ebp - 0x698], edi
mov dword [ebp - 0x694], edi
mov dword [ebp - 0xb20], esi
mov dword [ebp - 0xb18], esi
call fcn.00423c00
add esp, 0xc
lea ecx, [esi + 1]
call fcn.004123b0
cmp eax, edi
je 0x406a3c
lea ecx, [ebp - 0x6f8]
mov dword [eax], ecx
jmp 0x406a3e
xor eax, eax
mov dword [ebp - 0x6f8], eax
mov dword [ebp - 0x6e8], edi
mov dword [ebp - 0x6e4], edi
mov dword [ebp - 0x6e0], edi
mov dword [ebp - 0x6dc], edi
mov byte [ebp - 4], 0xf
mov dl, byte [ebp - 0x20]
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x6f8]
mov byte [ebp - 0x110], dl
call fcn.0040d3d0
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.DLL_CreateEventA]
cmp esi, edi
mov dword [ebp - 0x28], eax
je 0x406a92
mov dword [ebp - 0x698], edi
lea ecx, [ebp - 0xf2]
push ecx
lea eax, [ebp - 0x6f8]
mov byte [ebp - 0xf2], 1
call fcn.0040d3d0
mov dl, byte [ebp - 0x38]
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x6f8]
mov byte [ebp - 0x118], dl
call fcn.0040d3d0
mov edi, dword [ebp - 0x24]
xor eax, eax
cdq
lea esi, [edi + 0x47]
idiv esi
mov ecx, dword [ebp - 0x20]
add ecx, 0x50
or ebx, 0xffffffff
mov dword [0x44fdd4], ebx
mov dword [ebp - 0x1a0], ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x20]
cdq
idiv ecx
mov esi, eax
imul esi, dword [0x44fde8]
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1647]
add esi, eax
add esi, dword [0x44fddc]
lea eax, [edi + 0x52]
test eax, eax
jle 0x406b94
mov ecx, dword [0x44fdd0]
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
sub ebx, ecx
jne 0x406b30
cmp dword [ebp - 0x10], ebx
je 0x406b30
push ecx
mov ecx, dword [ebp - 0x24]
push ecx
jmp 0x406b3d
push 6
call dword [sym.imp.GDI32.dll_GetStockObject]
mov edx, dword [ebp - 0x24]
push eax
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov ebx, dword [0x44fdd4]
movzx ecx, bl
mov eax, 0x53896e7b
imul ecx
sub edx, ecx
mov ecx, dword [0x44fdd0]
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, dword [ebp - 0x70]
jbe 0x406b6e
xor edi, edi
jmp 0x406b8e
imul esi, dword [0x44fde4]
mov eax, 0xb21642c9
mul edi
shr edx, 5
sub edx, esi
sub edx, dword [ebp - 0x64]
add edx, dword [0x44fde0]
add edx, ecx
mov esi, edx
sub dword [ebp - 0x3c], 1
jne 0x406b20
xor edi, edi
xor eax, eax
cmp eax, edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x268], edi
mov dword [ebp - 0x264], edi
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 0x2ac], edi
je 0x406bc4
mov dword [0x44fdd4], 0xffffffff
lea eax, [ebp - 0x268]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xb20]
mov edi, dword [ebp - 0x94]
add ecx, 0x49
xor ebx, ebx
imul eax, dword [ebp - 0x698]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x88], eax
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x10]
jne 0x406c05
sub edi, dword [0x44fde8]
jmp 0x406c1c
mov eax, dword [0x44fde4]
lea ecx, [eax + 0x32]
lea edx, [ebp - 0x16d0]
movzx eax, dl
cdq
idiv ecx
add dword [ebp - 0x10], eax
lea eax, [ebp - 0x2b0]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [0x44fdd4]
push ecx
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
mov edx, dword [ebp - 0x268]
cmp edx, dword [ebp - 0x2b0]
jne 0x406ce0
fldz
call fcn.00437400
fstp dword [ebp - 0x18]
mov ecx, dword [0x44fde0]
fld dword [ebp - 0x18]
mov eax, 0x51eb851f
fstp dword [ebp - 0x18]
fild dword [ebp - 0x10]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, dword [0x44fde4]
sub eax, dword [ebp - 0x30]
test eax, eax
mov dword [ebp - 0x8c], eax
fild dword [ebp - 0x8c]
jge 0x406c91
fadd dword [0x440fd0]
mov ecx, edi
test ecx, ecx
mov dword [ebp - 0x8c], ecx
fild dword [ebp - 0x8c]
jge 0x406ca9
fadd dword [0x440fd0]
fmul dword [ebp - 0x18]
fdiv qword [0x440fc0]
fsubp st(1)
fadd qword [0x440f70]
fiadd dword [0x44fdd4]
fsubp st(1)
call fcn.00426140
mov edx, 1
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x10], eax
imul edx, dword [ebp - 0x64]
sub edx, esi
mov dword [ebp - 0x64], edx
jmp 0x406d73
push 0x5a
push 0
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
fild dword [ebp - 0x69c]
mov ecx, eax
imul ecx, ecx, 0xb4
fstp dword [ebp - 0x18]
fld dword [ebp - 0x18]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x2b0]
sub esp, 8
mov dword [ebp - 0x268], eax
fstp qword [esp]
call fcn.00422ed0
movzx ecx, word [0x44fde4]
fstp dword [ebp - 0x18]
fld dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
fnstcw word [ebp - 0x9a]
movzx eax, word [ebp - 0x9a]
fstp dword [ebp - 0x3c]
fild dword [ebp - 0x18]
or eax, 0xc00
mov dword [ebp - 0x18], eax
add esp, 8
fsub dword [ebp - 0x3c]
add dword [ebp - 0x2c], 1
fldcw word [ebp - 0x18]
fistp qword [ebp - 0x140]
mov esi, dword [ebp - 0x140]
fldcw word [ebp - 0x9a]
xor edx, edx
mov eax, edi
div dword [ebp - 0x14]
mov edx, esi
sub edx, eax
add edx, dword [0x44fde8]
cmp dword [ebp - 0x2c], 0
mov dword [ebp - 0x69c], edx
je 0x406da5
mov eax, dword [ebp - 0x3806]
mov ecx, dword [ebp - 0x38]
add eax, ecx
sub dword [0x44fdd4], eax
add dword [ebp - 0x54], 1
cmp dword [ebp - 0x88], 0
jne 0x406e32
fild dword [0x44fdd4]
sub esp, 8
fstp dword [ebp - 0x18]
fld dword [ebp - 0x18]
fstp qword [esp]
call fcn.00422ed0
fstp dword [ebp - 0x18]
add esp, 8
fld dword [ebp - 0x18]
fstp dword [ebp - 0x18]
fild dword [ebp - 0xb20]
call fcn.00437be0
imul edi, dword [0x44fdd0]
fadd dword [ebp - 0x18]
fsub qword [0x440f78]
test edi, edi
mov dword [ebp - 0x8c], edi
fild dword [ebp - 0x8c]
jge 0x406e06
fadd qword [0x440f80]
fnstcw word [ebp - 0x9a]
movzx eax, word [ebp - 0x9a]
or eax, 0xc00
fsubp st(1)
mov dword [ebp - 0x18], eax
fldcw word [ebp - 0x18]
fistp qword [ebp - 0x140]
mov edi, dword [ebp - 0x140]
fldcw word [ebp - 0x9a]
cmp dword [ebp - 0x54], 4
ja 0x406e72
cmp dword [ebp - 0x2c], 1
ja 0x406ec1
mov edx, dword [ebp - 0x28]
add esi, dword [ebp - 0x24]
push 0xbb6
push edx
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
mov eax, dword [0x44fddc]
push 0
push 0
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
add ebx, 1
cmp ebx, 0xa
jl 0x406bf5
jmp 0x406ede
mov edx, dword [0x44fdd4]
lea ecx, [ebp - 0x5a8]
push ecx
xor eax, eax
push edx
push 0x1207
push eax
mov dword [ebp - 0x5a8], 0
mov dword [ebp - 0x5a4], eax
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x44fdd0]
push 0
push eax
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.USER32.dll_OffsetRect]
jmp 0x406ede
mov edx, dword [0x44fdd0]
push edx
push 0
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x44fdd4]
push ecx
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
lea esi, [ebp - 0x6f8]
mov byte [ebp - 4], 0
call fcn.0040ea80
mov edx, dword [ebp - 0x6f8]
push edx
call fcn.00413f05
add esp, 4
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowWord]
movzx eax, ax
push eax
call dword [sym.imp.KERNEL32.DLL_LocalLock]
fild dword [ebp - 0x10]
fstp dword [ebp - 0x28]
fld dword [ebp - 0x28]
fstp dword [ebp - 0x18]
fld dword [ebp - 0x18]
call fcn.00437400
fstp dword [ebp - 0x18]
mov esi, dword [ebp - 0x70]
fld dword [ebp - 0x18]
lea eax, [ebp - 0xe48]
fstp dword [ebp - 0x18]
movzx ecx, ax
mov dword [ebp - 0x88], ecx
mov ecx, dword [ebp - 0x30]
mov edx, ecx
test edx, edx
movzx eax, si
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0x22c], eax
fild dword [ebp - 0xa4]
jge 0x406f63
fadd qword [0x440f80]
fld dword [ebp - 0x18]
imul eax, dword [0x44fddc]
fmul qword [0x440fb8]
fnstcw word [ebp - 0x2e]
movzx edx, byte [ebp - 0x34]
movzx ecx, cx
mov dword [ebp - 0x18], ecx
push 0x34
push str.MSI_Compatible_ContentsToc_Windows_deflect_20040701.
fild dword [ebp - 0x18]
mov dword [ebp - 0x18], edx
lea ecx, [ebp - 0x390]
faddp st(1)
fiadd dword [ebp - 0x88]
fild dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
movzx eax, word [ebp - 0x2e]
or eax, 0xc00
fsubp st(1)
fisub dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
fsubp st(1)
fldcw word [ebp - 0x18]
fistp qword [ebp - 0x14c]
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x378], 0xf
mov dword [ebp - 0x37c], 0
fldcw word [ebp - 0x2e]
mov byte [ebp - 0x38c], 0
mov dword [ebp - 0x30], eax
call fcn.0040ef20
push 0x3c
push str.Well_smenetest_square_replenished_restarting_International.
lea eax, [ebp - 0x390]
mov byte [ebp - 4], 0x10
call fcn.0040d620
lea edx, [ebp - 0x390]
call fcn.0040ce40
test eax, eax
jne 0x407020
push 4
push str.JCI.
lea eax, [ebp - 0x390]
call fcn.0040d620
cmp dword [ebp - 0x38], 0xfffffffe
je 0x407062
fld dword [ebp - 0x28]
sub esp, 8
fstp dword [ebp - 0x18]
fld dword [ebp - 0x18]
fstp qword [esp]
call fcn.00422ed0
movzx ecx, byte [ebp - 0x80]
fstp dword [ebp - 0x18]
fld dword [ebp - 0x18]
add esp, 8
fstp dword [ebp - 0x18]
fild dword [ebp - 0x20]
fsub dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
fild dword [ebp - 0x18]
fsubp st(1)
call fcn.00426140
mov dword [0x44fdd4], eax
mov edx, dword [ebp - 0x17c]
sub edx, dword [ebp - 0x37c]
add edx, dword [0x44fde0]
add dword [ebp - 0x50], edx
lea edx, [ebp - 0x390]
call fcn.0040ce40
test eax, eax
jne 0x407098
push 0x24
push str.Moreover_Describe_Dean_discriminate.
lea eax, [ebp - 0x390]
call fcn.0040d620
push 0x21
push str.Occurrence_drawling_Prodigy_HMBI.
lea eax, [ebp - 0x390]
call fcn.0040d620
mov eax, dword [str.Prtestants_allegedly.]
mov ecx, dword [0x4404b8]
mov edx, dword [0x4404bc]
mov dword [ebp - 0x1044], eax
mov eax, dword [0x4404c0]
push 3
mov dword [ebp - 0x1038], eax
mov dword [ebp - 0x1040], ecx
mov ecx, dword [0x4404c4]
mov dword [ebp - 0x103c], edx
mov dx, word [0x4404c8]
push 0x4404cc
lea eax, [ebp - 0x390]
push eax
mov dword [ebp - 0x1034], ecx
mov word [ebp - 0x1030], dx
call fcn.0040da40
test eax, eax
je 0x407130
fild dword [ebp - 0x50]
fstp dword [ebp - 0x18]
fld dword [ebp - 0x18]
fabs
fstp dword [ebp - 0x18]
fld dword [ebp - 0x18]
fstp dword [ebp - 0x18]
fild dword [ebp - 0x10]
fild dword [ebp - 0x80]
fmul dword [ebp - 0x18]
fsubp st(1)
call fcn.00426140
mov dword [ebp - 0x10], eax
lea edi, [ebp - 0x390]
call fcn.0040cda0
fild dword [ebp - 0x64]
xor edi, edi
mov dword [ebp - 0x2c], 4
mov dword [ebp - 0x600], edi
call fcn.004375e0
fstp dword [ebp - 0x18]
mov ebx, dword [ebp - 0xcc]
fld dword [ebp - 0x18]
sub ebx, dword [ebp - 0x160]
fstp dword [ebp - 0x54]
mov eax, dword [ebp - 0x164]
fild dword [ebp - 0xd8]
mov edx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x15c]
sub ebx, eax
fstp dword [ebp - 0x60]
movzx eax, ax
fild dword [ebp - 0x160]
add ecx, edx
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x20]
fstp dword [ebp - 0x94]
mov dword [ebp - 0xf0], ecx
fild dword [ebp - 0x44]
mov ecx, dword [ebp - 0x24]
cdq
fstp dword [ebp - 0x3c]
add ecx, 0x3f
idiv ecx
mov edx, dword [ebp - 0x20]
add edx, 0x37
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x584], edi
mov dword [ebp - 0x598], 0x18
fild dword [ebp - 0x18]
fstp dword [ebp - 0xdc]
mov dword [ebp - 0x1b4], eax
movzx eax, word [ebp - 0x38]
add eax, esi
mov dword [ebp - 0x18], eax
fild dword [ebp - 0x18]
fstp dword [ebp - 0xac]
fild dword [ebp - 0x20]
fstp dword [ebp - 0x18]
sub dword [ebp - 0x2c], 1
lea ecx, [ebp - 0x47c]
push ecx
call fcn.0040d460
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x468]
mov esi, dword [edx]
mov ecx, dword [esi + 4]
lea eax, [ebp - 0x600]
push eax
push ecx
push esi
call fcn.00410360
lea ecx, [ebp - 0x47c]
mov edi, eax
call fcn.004103a0
mov dword [esi + 4], edi
mov eax, dword [edi + 4]
mov dword [eax], edi
mov eax, dword [ebp - 0x468]
mov ecx, dword [eax + 4]
lea edi, [eax + 4]
lea edx, [ebp - 0x50]
push edx
push ecx
push eax
call fcn.00410360
lea ecx, [ebp - 0x47c]
mov esi, eax
call fcn.004103a0
fild dword [ebp - 0x34]
mov dword [edi], esi
mov eax, dword [esi + 4]
mov dword [eax], esi
call fcn.00437400
fstp dword [ebp - 0x28]
fld dword [ebp - 0x28]
fstp dword [ebp - 0x28]
fld dword [ebp - 0x54]
fadd dword [ebp - 0x28]
fadd dword [ebp - 0x60]
fsub dword [ebp - 0x3c]
fsub dword [ebp - 0x94]
fsub qword [0x440f78]
call fcn.00426140
mov dword [ebp - 0xd0], eax
mov eax, 0x4bda12f7
imul dword [ebp - 0xd4]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x44fde4]
lea ecx, [ebp - 0x1b30]
cmp eax, ecx
jg 0x407315
fild dword [ebp - 0x20]
fstp dword [ebp - 0x28]
fld dword [ebp - 0x28]
call fcn.0043754c
fstp dword [ebp - 0x28]
fld dword [ebp - 0x28]
fstp dword [ebp - 0x28]
fild dword [ebp - 0x164]
call fcn.00437960
fstp qword [ebp - 0x140]
fild dword [ebp - 0x44]
call fcn.00437830
fadd qword [ebp - 0x140]
mov edx, dword [ebp - 0x20]
fld dword [ebp - 0x28]
add edx, 0x48
mov dword [ebp - 0x28], edx
fidiv dword [ebp - 0x28]
movzx eax, byte [ebp - 0x10]
mov dword [ebp - 0x28], eax
fsubp st(1)
fild dword [ebp - 0x28]
faddp st(1)
call fcn.00426140
mov dword [0x44fdd0], eax
jmp 0x407348
fild dword [ebp - 0x64]
call fcn.00437830
fdiv qword [0x440fc0]
movzx ecx, word [ebp - 0x158]
mov dword [ebp - 0x28], ecx
fiadd dword [ebp - 0x160]
fild dword [ebp - 0x28]
faddp st(1)
call fcn.00426140
mov dword [ebp - 0xd4], eax
mov eax, dword [0x44fdd0]
cmp dword [ebp - 0x464], 0
jne 0x40735d
movzx edx, byte [ebp - 0x74]
sub eax, edx
add dword [0x44fdd4], eax
mov eax, dword [ebp - 0x468]
mov edx, dword [eax + 4]
lea edi, [eax + 4]
lea ecx, [ebp - 0x24]
push ecx
push edx
push eax
call fcn.00410360
lea ecx, [ebp - 0x47c]
mov esi, eax
call fcn.004103a0
mov dword [edi], esi
mov eax, dword [esi + 4]
mov dword [eax], esi
mov eax, dword [ebp - 0x468]
mov edx, dword [eax + 4]
lea edi, [eax + 4]
lea ecx, [ebp - 0x584]
push ecx
push edx
push eax
call fcn.00410360
lea ecx, [ebp - 0x47c]
mov esi, eax
call fcn.004103a0
mov dword [edi], esi
mov eax, dword [esi + 4]
mov dword [eax], esi
mov edi, ebx
push 0x10
lea eax, [ebp - 0x598]
lea esi, [ebp - 0x47c]
mov dword [ebp - 0x10], edi
call fcn.00412420
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0xf0], eax
jge 0x407403
fild dword [ebp - 0x17c]
sub esp, 8
fstp qword [esp]
call fcn.00422ed0
fstp dword [ebp - 0x28]
add esp, 8
fld dword [ebp - 0x28]
call fcn.00426140
mov dword [ebp - 0x17c], eax
jmp 0x40742e
mov ecx, dword [0x44fde0]
mov eax, edi
add ecx, 0x3b
cdq
idiv ecx
movzx edx, byte [ebp - 0x34]
sub edx, eax
sub edx, dword [ebp - 0x184]
lea eax, [ebp - 0xe48]
add edx, dword [ebp - 0x50]
movzx ecx, al
add ecx, edx
mov dword [ebp - 0x10], ecx
mov esi, dword [ebp - 0x47c]
test esi, esi
mov edi, dword [ebp - 0x468]
jne 0x407443
call fcn.00422dfa
test esi, esi
mov edi, dword [edi + 4]
je 0x40744e
mov eax, dword [esi]
jmp 0x407450
xor eax, eax
cmp edi, dword [eax + 0x14]
jne 0x40745a
call fcn.00422dfa
push edi
push esi
lea edx, [ebp - 0xd44]
push edx
lea edi, [ebp - 0x47c]
call fcn.0040eaf0
movzx eax, word [ebp - 0x44]
mov ecx, dword [0x44fdd4]
add eax, ecx
cmp eax, dword [0x44fddc]
jg 0x40748e
movzx edx, byte [0x44fde8]
mov dword [ebp - 0x34], edx
jmp 0x407500
fild dword [ebp - 0x20]
fstp dword [ebp - 0x28]
fld dword [ebp - 0x28]
call fcn.0043754c
fstp dword [ebp - 0x28]
fld dword [ebp - 0x28]
fstp dword [ebp - 0x6c]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x14c]
fild dword [0x44fddc]
call fcn.00437300
lea eax, [ebp - 0x16d0]
mov dword [ebp - 0x28], eax
fimul dword [ebp - 0x28]
mov ecx, dword [ebp - 0xe1b]
test ecx, ecx
fiadd dword [0x44fde8]
fld dword [ebp - 0x6c]
fdiv qword [0x440fb0]
fsubp st(1)
fld qword [ebp - 0x14c]
fsub st(1), st(0)
fild dword [ebp - 0xe1b]
jge 0x4074f4
fadd qword [0x440f80]
fsubp st(2)
fsubrp st(1)
call fcn.00426140
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 0x1044]
imul edx, eax
add edx, dword [ebp - 0x1b4]
cmp edx, dword [ebp - 0x178]
jge 0x407526
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x158], ecx
fld dword [ebp - 0x3c]
fstp dword [ebp - 0x28]
fld dword [ebp - 0x28]
call fcn.004375e0
fstp dword [ebp - 0x28]
fld dword [ebp - 0x28]
movzx edx, word [ebp - 0x34]
fstp dword [ebp - 0x28]
fld dword [ebp - 0x28]
mov dword [ebp - 0x28], edx
fdiv dword [ebp - 0xdc]
fadd dword [ebp - 0xac]
fild dword [ebp - 0x28]
faddp st(1)
fadd dword [ebp - 0x18]
call fcn.00426140
mov ecx, dword [ebp - 0x34]
mov dword [0x44fdd0], eax
mov eax, dword [ebp - 0x1ae0]
add eax, ecx
add eax, dword [ebp - 0x64]
lea esi, [ebp - 0x47c]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0x10
call fcn.0040eb80
mov edx, dword [ebp - 0x47c]
push edx
call fcn.00413f05
add esp, 4
cmp dword [ebp - 0x2c], 0
jne 0x4071f0
lea eax, [ebp - 0x63c]
push eax
call fcn.0040d460
movzx ecx, word [ebp - 0x64]
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x628]
mov esi, dword [edx]
lea eax, [ebp - 0xac]
mov dword [ebp - 0xac], ecx
mov ecx, dword [esi + 4]
push eax
push ecx
push esi
call fcn.00410430
lea ecx, [ebp - 0x63c]
mov edi, eax
call fcn.00410470
fild dword [ebp - 0xd4]
mov dword [esi + 4], edi
mov eax, dword [edi + 4]
mov dword [eax], edi
mov ecx, dword [0x44fde8]
fstp dword [ebp - 0x9c]
fld dword [ebp - 0x9c]
mov eax, 0xdd67c8a7
imul ecx
fabs
fstp dword [ebp - 0xac]
fld dword [ebp - 0xac]
fstp dword [ebp - 0x104]
add edx, ecx
mov ecx, dword [0x44fddc]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [ebp - 0xac], ecx
fild dword [ebp - 0xac]
fstp qword [ebp - 0x140]
fild dword [ebp - 0x38]
call fcn.00437960
fsubr qword [ebp - 0x140]
movzx edx, word [ebp - 0x158]
mov dword [ebp - 0xac], edx
fadd dword [ebp - 0x104]
fild dword [ebp - 0xac]
faddp st(1)
call fcn.00426140
mov ebx, eax
movzx eax, word [ebp - 0x80]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x628]
mov edx, dword [eax + 4]
lea edi, [eax + 4]
lea ecx, [ebp - 0x10c]
push ecx
push edx
push eax
mov dword [ebp - 0x10], ebx
call fcn.00410430
lea ecx, [ebp - 0x63c]
mov esi, eax
call fcn.00410470
mov dword [edi], esi
mov eax, dword [esi + 4]
mov dword [eax], esi
movzx eax, bx
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x628]
mov edx, dword [eax + 4]
lea edi, [eax + 4]
lea ecx, [ebp - 0xb0]
push ecx
push edx
push eax
call fcn.00410430
lea ecx, [ebp - 0x63c]
mov esi, eax
call fcn.00410470
mov dword [edi], esi
mov eax, dword [esi + 4]
mov dword [eax], esi
movzx eax, word [ebp - 0x4c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x628]
mov edx, dword [eax + 4]
lea edi, [eax + 4]
lea ecx, [ebp - 0x1c]
push ecx
push edx
push eax
call fcn.00410430
lea ecx, [ebp - 0x63c]
mov esi, eax
call fcn.00410470
mov dword [edi], esi
mov eax, dword [esi + 4]
mov dword [eax], esi
lea esi, [ebp - 0x63c]
call fcn.0040eb80
mov eax, dword [ebp - 0x63c]
push eax
call fcn.00413f05
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x378], 0x10
jb 0x407749
mov ecx, dword [ebp - 0x38c]
push ecx
call fcn.00413f05
add esp, 4
cmp dword [ebp - 0x44], 0
mov dword [ebp - 0x378], 0xf
mov dword [ebp - 0x37c], 0
mov byte [ebp - 0x38c], 0
je 0x407770
mov dword [0x44fdd0], ebx
mov edx, dword [ebp - 0x90]
xor esi, esi
push 0x206
lea eax, [ebp - 0x2ee6]
xor ebx, ebx
xor edi, edi
push esi
push eax
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x590], ebx
mov dword [ebp - 0x588], ebx
mov dword [ebp - 0x97c], esi
mov dword [ebp - 0x978], edi
mov dword [ebp - 0x970], edi
mov word [ebp - 0x2ee8], si
call fcn.00423c00
mov eax, 0x78787879
imul ebx
movzx ebx, byte [0x44fdd0]
lea ecx, [ebp - 0xe48]
imul ecx, dword [ebp - 0x64]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add esp, 0xc
add eax, edx
push str.doroga
sub eax, ecx
add eax, dword [0x44fddc]
push edi
push edi
add ebx, eax
push edi
mov dword [ebp - 0x64], ebx
call dword [sym.imp.KERNEL32.DLL_CreateEventA]
mov ecx, dword [0x44fde8]
mov dword [ebp - 0x10c], eax
xor eax, eax
movzx edx, cl
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1dc], eax
mov eax, dword [0x44fddc]
add edx, eax
je 0x407840
mov eax, dword [ebp - 0x10]
movzx edx, al
add edx, ecx
sub eax, edx
mov dword [ebp - 0x10], eax
jmp 0x407852
movzx edx, al
mov eax, dword [ebp - 0x70]
sub eax, edx
sub eax, ecx
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x64], eax
mov ebx, eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
nop
mov ecx, dword [0x44fdd4]
mov eax, dword [0x44fdd0]
sub ecx, eax
jne 0x40787b
cmp dword [ebp - 0x10], edi
je 0x40787b
mov edx, dword [ebp - 0x24]
push eax
push edx
jmp 0x407888
push 6
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
mov eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
cmp dword [ebp - 0x60], 0xa
je 0x407ac8
movzx ecx, word [ebp - 0x97c]
imul ecx, dword [0x44fddc]
xor eax, eax
sub eax, ecx
lea edx, [ebp - 0x1e0]
add eax, 1
push edx
mov dword [ebp - 0x97c], eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0x24]
push 3
push 0
push 0
push 0xf
push 0xa
push 0
push 0xa
push 5
push eax
call dword [sym.imp.USER32.dll_DrawIconEx]
imul esi, ebx
movzx ecx, byte [ebp - 0x24]
mov edx, dword [ebp - 0x1f8]
add esi, ecx
sub esi, dword [0x44fde0]
sub esi, dword [0x44fddc]
cmp edx, dword [ebp - 0x1e0]
jne 0x407950
mov eax, dword [ebp - 0x1f4]
cmp eax, dword [ebp - 0x1dc]
jne 0x407950
mov ecx, dword [0x44fdd0]
mov edx, dword [0x44fde4]
push 0
push 1
push 0xcf
push ecx
push edx
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov eax, dword [ebp - 0x1c]
lea ecx, [esi + eax]
test ecx, ecx
je 0x407940
mov edx, dword [ebp - 0x24]
add dword [0x44fdd0], edx
jmp 0x4079c8
mov eax, esi
imul eax, dword [ebp - 0x4c]
neg eax
mov dword [ebp - 0x10], eax
jmp 0x4079c8
call dword [sym.imp.KERNEL32.DLL_GetConsoleWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
movzx ecx, byte [0x44fdd0]
xor eax, eax
mov ah, bl
mov al, byte [ebp - 0x10]
shl eax, 8
or eax, ecx
push eax
push 2
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x1dc]
add dword [ebp - 0x2c], 1
mov ecx, dword [0x44fdd4]
mov dword [ebp - 0x1f8], edx
mov edx, edi
imul edx, dword [ebp - 0x20]
test edx, edx
mov dword [ebp - 0x1f4], eax
mov dword [0x44fdd0], ecx
je 0x4079c2
movzx eax, byte [ebp - 0x38]
add eax, edi
lea ecx, [ebp + eax - 0x16d0]
mov dword [ebp - 0x590], ecx
jmp 0x4079c8
sub ebx, dword [ebp - 0x590]
mov ecx, dword [ebp - 0x10]
mov eax, 0x92492493
imul ecx
add edx, ecx
movzx ecx, byte [0x44fdd0]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jb 0x407a26
mov eax, dword [ebp - 0xc0]
imul eax, dword [0x44fde0]
mov ecx, dword [0x44fde8]
mov dword [ebp - 0xb0], eax
mov eax, 0x9435e50d
imul ecx
mov ecx, dword [ebp - 0xb0]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ecx
add eax, dword [0x44fddc]
mov dword [0x44fdd0], eax
cmp dword [ebp - 0x2c], edi
je 0x407a37
push 0
call dword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
add dword [ebp - 0x54], 1
xor eax, eax
push 0x1c
lea ecx, [ebp - 0x810]
push ecx
push 1
mov dword [ebp - 0x810], eax
mov dword [ebp - 0x80c], eax
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x804], eax
mov dword [ebp - 0x800], eax
mov dword [ebp - 0x7fc], eax
mov dword [ebp - 0x7f8], eax
call dword [sym.imp.USER32.dll_SendInput]
cmp dword [ebp - 0x2c], 1
ja 0x407ac8
cmp dword [ebp - 0x38], 1
je 0x407a94
mov eax, 0x99999999
imul dword [ebp - 0x4c]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebx, eax
mov ecx, dword [0x44fde0]
imul ecx, dword [0x44fddc]
mov edx, 5
sub edx, ecx
cmp dword [ebp - 0x54], edx
je 0x407ac8
mov eax, dword [ebp - 0x10c]
push 0xbb6
push eax
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
add dword [ebp - 0x60], 1
jmp 0x407860
lea ecx, [ebp - 0x16d0]
movzx edi, cl
mov dword [ebp - 0x64], ebx
mov ebx, dword [ebp - 0x70]
mov esi, 0x4e
mov dword [ebp - 0x2c], edi
nop
push 0xfffffffffffffff5
sub esi, 1
call dword [sym.imp.KERNEL32.DLL_GetStdHandle]
mov edx, dword [0x44fde8]
neg edx
cmp edx, edi
jl 0x407b01
mov eax, dword [ebp - 0x10]
neg eax
mov dword [ebp - 0x38], eax
jmp 0x407b0e
mov eax, dword [ebp - 0x38]
lea ecx, [ebx + eax - 1]
mov dword [0x44fdd0], ecx
test esi, esi
jne 0x407ae0
push esi
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push esi
call dword [sym.imp.OPENGL32.dll_wglCreateContext]
push eax
push esi
call dword [sym.imp.OPENGL32.dll_wglMakeCurrent]
mov esi, dword [ebp - 0x30]
push 0xfffffffffffffffa
push 3
push 0xc8
add ebx, esi
push 0
mov dword [ebp - 0x74], ebx
call sub.ODBC32.dll_SQLSetEnvAttr
movzx edx, byte [0x44fdd0]
imul edx, dword [0x44fdd4]
cmp edx, esi
ja 0x407b69
mov eax, dword [ebp - 0x20]
lea ecx, [eax + 0x43]
movzx eax, word [ebp - 0x10]
cdq
idiv ecx
add eax, dword [ebp - 0x34]
mov dword [0x44fdd0], eax
lea edx, [ebp - 0x3a8]
push edx
call fcn.0040d4c0
mov byte [ebp - 4], 0x13
mov al, byte [0x44fdd4]
lea ebx, [ebp - 0xf8]
lea edi, [ebp - 0x3a8]
mov byte [ebp - 0xf8], al
call fcn.0040d510
mov cl, byte [ebp - 0x80]
lea ebx, [ebp - 0xfa]
mov byte [ebp - 0xfa], cl
call fcn.0040d510
mov eax, dword [ebp - 0x398]
mov edi, dword [ebp - 0x39c]
cmp edi, eax
mov ebx, eax
jbe 0x407bcc
call fcn.00422dfa
mov eax, dword [ebp - 0x398]
mov edi, dword [ebp - 0x39c]
cmp edi, eax
mov esi, dword [ebp - 0x3a8]
jbe 0x407bdb
call fcn.00422dfa
mov edx, dword [ebp - 0x3a8]
push ebx
push esi
push edi
push edx
lea edi, [ebp - 0xcd4]
lea esi, [ebp - 0x3a8]
call fcn.0040ec70
fild dword [ebp - 0x180]
movzx eax, byte [ebp - 0x4c]
xor ebx, ebx
mov edi, 0x50
mov byte [ebp - 0xc6], 0x3f
mov byte [ebp - 0xc5], 8
mov byte [ebp - 0xb6], bl
mov byte [ebp - 0xb5], al
call fcn.004375e0
mov cl, byte [ebp - 0x70]
fstp dword [ebp - 0x1c]
mov byte [ebp - 0x46], cl
fld dword [ebp - 0x1c]
fstp dword [ebp - 0x10c]
fild dword [ebp - 0xcc]
fstp dword [ebp - 0xf0]
fild dword [ebp - 0x80]
fstp dword [ebp - 0x1c]
fld dword [ebp - 0x1c]
call fcn.00437400
fstp dword [ebp - 0x1c]
movzx edx, byte [ebp - 0x17c]
fld dword [ebp - 0x1c]
fstp dword [ebp - 0xb0]
mov dword [ebp - 0x1c], edx
fild dword [ebp - 0x1c]
fst qword [ebp - 0x1cc]
fld dword [ebp - 0xb0]
fsub dword [ebp - 0x9c]
fsub qword [0x440f78]
fsubrp st(1)
call fcn.00426140
mov dword [ebp - 0x38], eax
movzx eax, byte [ebp - 0x4c]
mov byte [ebp - 0x96], bl
mov byte [ebp - 0x95], al
lea ecx, [ecx]
movzx esi, word [0x44fde4]
add esi, dword [ebp - 0xb4]
sub edi, 1
add esi, dword [ebp - 0x44]
cmp dword [ebp - 0x50], ebx
lea esi, [ebp + esi - 0x1044]
mov dword [0x44fdd0], esi
jne 0x407cd7
movzx eax, word [0x44fde8]
add eax, dword [ebp - 0xd4c]
mov dword [ebp - 0x6c], eax
jmp 0x407cda
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x184]
movzx ecx, al
sub edx, ecx
cmp edx, dword [ebp - 0x10]
jne 0x407cf2
mov dword [ebp - 0x44], eax
jmp 0x407d76
fild dword [ebp - 0x4c]
fstp dword [ebp - 0x1c]
fld dword [ebp - 0x1c]
call fcn.004375e0
fstp dword [ebp - 0x1c]
fld dword [ebp - 0x1c]
fstp dword [ebp - 0xb0]
fld dword [ebp - 0x9c]
call fcn.0043754c
fstp dword [ebp - 0x1c]
fld dword [ebp - 0x1c]
fstp dword [ebp - 0x1c]
fild dword [ebp - 0x10]
call fcn.00437be0
fmul dword [ebp - 0x1c]
movzx eax, word [ebp - 0x160]
fild dword [ebp - 0x6c]
mov dword [ebp - 0x1c], eax
mov eax, 0x63e7063f
imul dword [ebp - 0x178]
fmul dword [ebp - 0xb0]
faddp st(1)
fild dword [ebp - 0x1c]
faddp st(1)
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [ebp - 0x1c], ecx
fild dword [ebp - 0x1c]
fsubp st(1)
fisub dword [ebp - 0x20]
fiadd dword [ebp - 0xd8]
call fcn.00426140
mov dword [ebp - 0xd8], eax
cmp si, bx
je 0x407dc1
fild dword [ebp - 0x10]
sub esp, 8
fstp dword [ebp - 0x1c]
fld dword [ebp - 0x1c]
fstp qword [esp]
call fcn.00422ed0
fstp dword [ebp - 0x1c]
add esp, 8
fld dword [ebp - 0x1c]
fstp dword [ebp - 0x1c]
fild dword [0x44fdd0]
call fcn.00437300
fld dword [ebp - 0x1c]
fdiv qword [0x440fa8]
faddp st(1)
fadd qword [0x440f78]
call fcn.00426140
mov dword [0x44fdd0], eax
lea edx, [ebp - 0xb14]
push edx
call fcn.0040e800
lea eax, [ebp - 0xc6]
push eax
lea esi, [ebp - 0x9e8]
lea eax, [ebp - 0xb14]
mov byte [ebp - 4], 0x14
call fcn.0040e870
lea ecx, [ebp - 0xb6]
push ecx
lea esi, [ebp - 0xa78]
lea eax, [ebp - 0xb14]
call fcn.0040e870
cmp dword [ebp - 0x10], ebx
je 0x407e31
fild dword [ebp - 0x10]
fstp qword [ebp - 0x14c]
fild dword [ebp - 0x74]
call fcn.00437300
fiadd dword [0x44fdd0]
fld qword [ebp - 0x14c]
fsub st(1), st(0)
faddp st(1)
call fcn.00426140
mov dword [ebp - 0x10], eax
jmp 0x407e80
fld dword [ebp - 0x94]
call fcn.00437400
fstp dword [ebp - 0x1c]
mov edx, dword [ebp - 0x74]
fld dword [ebp - 0x1c]
imul edx, dword [ebp - 0x158]
fstp dword [ebp - 0xb0]
movzx eax, byte [ebp - 0x30]
mov dword [ebp - 0x1c], edx
fild dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x17c]
fmul dword [ebp - 0xb0]
fsubp st(1)
fiadd dword [ebp - 0x20]
fild dword [ebp - 0x1c]
fsubp st(1)
call fcn.00426140
mov dword [ebp - 0x184], eax
fild dword [ebp - 0xd8]
fmul dword [ebp - 0x10c]
fadd dword [ebp - 0xf0]
fiadd dword [ebp - 0x50]
call fcn.00426140
mov cl, byte [0x44fddc]
lea edx, [ebp - 0x46]
mov dword [ebp - 0x50], eax
push edx
lea esi, [ebp - 0x9d0]
lea eax, [ebp - 0xb14]
mov byte [ebp - 0x45], cl
call fcn.0040e870
lea eax, [ebp - 0x96]
push eax
lea esi, [ebp - 0xa30]
lea eax, [ebp - 0xb14]
call fcn.0040e870
lea ecx, [ebp - 0xb14]
push ecx
mov byte [ebp - 4], 0x13
call fcn.0040ccc0
cmp edi, ebx
jne 0x407ca0
lea eax, [ebp - 0xe48]
mov dword [ebp - 0x2d0], 0xf
mov dword [ebp - 0x2d4], ebx
mov byte [ebp - 0x2e4], 0
lea edx, [eax + 1]
jmp 0x407f10
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x407f10
sub eax, edx
push eax
lea edx, [ebp - 0xe48]
push edx
lea ecx, [ebp - 0x2e8]
call fcn.0040ef20
push str.Ideally_predictive.
lea eax, [ebp - 0xe48]
push eax
mov byte [ebp - 4], 0x15
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push 0x3c
push str.Rhine_happenings_animation_HomeGroup_Rere_suggestion_potato.
lea eax, [ebp - 0x2e8]
call fcn.0040d620
lea edx, [ebp - 0x2e8]
call fcn.0040ce40
test eax, eax
je 0x407f77
push 0x18
push str.convergence_illustratin.
lea eax, [ebp - 0x2e8]
call fcn.0040d620
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2d4]
add eax, 0xc
cmp eax, ecx
ja 0x407f97
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x2e8]
call fcn.0040d8b0
jmp 0x407fa6
push 0x15
sub eax, ecx
lea edi, [ebp - 0x2e8]
call fcn.0040d730
lea edx, [ebp - 0x2e8]
call fcn.0040ce40
test eax, eax
je 0x407fc1
mov ecx, dword [ebp - 0x2d4]
add ecx, 9
mov dword [ebp - 0x10], ecx
xor eax, eax
jmp 0x407fd0
movzx ecx, word [eax + str.Enrllment_FAT_1932_Emulator_eBk_IPs.]
mov word [ebp + eax - 0x1b30], cx
add eax, 2
cmp cx, bx
jne 0x407fd0
lea edx, [ebp - 0x2e8]
call fcn.0040ce40
test eax, eax
je 0x408002
mov edx, dword [ebp - 0x2d4]
add edx, 7
mov dword [ebp - 0x34], edx
push 5
push str.Nonce
lea eax, [ebp - 0x2e8]
push eax
call fcn.0040da40
test eax, eax
je 0x408035
fild dword [ebp - 0x178]
call fcn.00437960
fisub dword [ebp - 0xd8]
fiadd dword [ebp - 0x34]
call fcn.00426140
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x2d0], 0x10
jb 0x40804d
mov ecx, dword [ebp - 0x2e4]
push ecx
call fcn.00413f05
add esp, 4
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x39c]
cmp eax, ebx
mov dword [ebp - 0x2d0], 0xf
mov dword [ebp - 0x2d4], ebx
mov byte [ebp - 0x2e4], 0
je 0x40807b
push eax
call fcn.00413f05
add esp, 4
mov edx, dword [ebp - 0x3a8]
push edx
mov dword [ebp - 0x39c], ebx
mov dword [ebp - 0x398], ebx
mov dword [ebp - 0x394], ebx
call fcn.00413f05
fild dword [ebp - 0xd0]
add esp, 4
mov dword [ebp - 0x3c], 0x3f
call fcn.00437400
fstp dword [ebp - 0x1c]
fld dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
test eax, eax
fstp dword [ebp - 0x1c]
fild dword [ebp - 0x34]
fstp qword [ebp - 0x14c]
fild dword [ebp - 0x30]
jge 0x4080d0
fadd dword [0x440fd0]
fstp dword [ebp - 0x48]
fild dword [ebp - 0x158]
call fcn.00437300
fsub qword [0x440f78]
movzx ecx, byte [ebp - 0x6c]
fadd qword [ebp - 0x14c]
fld dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
fmul dword [ebp - 0x48]
fild dword [ebp - 0x1c]
fmulp st(1)
faddp st(1)
fstp qword [ebp - 0x494]
fild dword [ebp - 0xd8]
call fcn.00437400
fstp dword [ebp - 0x1c]
fld dword [ebp - 0x1c]
fstp dword [ebp - 0x1c]
fld qword [ebp - 0x14c]
call fcn.00437830
fmul dword [ebp - 0x1c]
fstp qword [ebp - 0x4bc]
fild dword [ebp - 0x34]
call fcn.00437400
fstp dword [ebp - 0x1c]
fld dword [ebp - 0x1c]
fstp dword [ebp - 0x1c]
fild dword [ebp - 0x38]
call fcn.00437300
fdiv qword [0x440fa0]
mov edx, dword [ebp - 0x30]
test edx, edx
fsub qword [0x440f78]
fadd dword [ebp - 0x1c]
fstp qword [ebp - 0x484]
fild dword [ebp - 0x30]
jge 0x40816a
fadd qword [0x440f80]
call fcn.00437960
fstp qword [ebp - 0x4a4]
fild dword [ebp - 0xc0]
fstp qword [ebp - 0x140]
fild dword [ebp - 0x38]
call fcn.00437400
fstp dword [ebp - 0x1c]
movzx eax, byte [ebp - 0x10]
fld dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
fstp dword [ebp - 0x10c]
mov eax, 0x51eb851f
imul dword [ebp - 0xd8]
sar edx, 3
lea ecx, [ebp - 0x16d0]
mov dword [ebp - 0x1c], ecx
movzx ecx, byte [ebp - 0x30]
fild dword [ebp - 0x1c]
mov eax, edx
shr eax, 0x1f
fstp dword [ebp - 0xac]
add eax, edx
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
fstp dword [ebp - 0x104]
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x200]
nop
fild dword [ebp - 0x164]
fadd qword [ebp - 0x494]
call fcn.00426140
lea edx, [ebp - 0x718]
mov edi, eax
push edx
mov dword [ebp - 0x164], edi
call fcn.0040e4c0
lea eax, [ebp - 0x76c]
mov byte [ebp - 4], 0x16
push eax
lea esi, [ebp - 0xa64]
lea eax, [ebp - 0x718]
mov byte [ebp - 0x76c], 0x7e
mov dword [ebp - 0x768], 0x46
call fcn.0040e690
movzx ecx, di
imul ecx, dword [ebp - 0x158]
mov dword [ebp - 0x1c], ecx
fild dword [ebp - 0x1c]
fsub qword [ebp - 0x4bc]
fiadd dword [ebp - 0x80]
call fcn.00426140
mov dl, byte [0x44fdd4]
mov dword [ebp - 0x80], eax
mov eax, dword [0x44fddc]
lea ecx, [ebp - 0x774]
mov dword [ebp - 0x770], eax
push ecx
lea esi, [ebp - 0xa84]
lea eax, [ebp - 0x718]
mov byte [ebp - 0x774], dl
call fcn.0040e690
movzx edx, byte [0x44fde8]
mov esi, dword [ebp - 0x50]
cmp esi, edx
jne 0x40829b
mov eax, dword [ebp - 0x74]
add dword [0x44fdd0], eax
jmp 0x4082f7
fild dword [ebp - 0x10]
sub esp, 8
fstp dword [ebp - 0x1c]
fld dword [ebp - 0x1c]
fstp qword [esp]
call fcn.00422ed0
movzx ecx, word [ebp - 0x74]
fstp dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x2c]
fld dword [ebp - 0x1c]
fstp dword [ebp - 0xb0]
mov eax, 0x4bda12f7
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ecx, dword [ebp - 0x34]
add esp, 8
sub ecx, dword [0x44fddc]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], ecx
fild dword [ebp - 0x1c]
fsub dword [ebp - 0xb0]
call fcn.00426140
mov dword [ebp - 0x44], eax
mov dl, byte [ebp - 0x70]
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x168], esi
push eax
lea esi, [ebp - 0xac0]
lea eax, [ebp - 0x718]
mov byte [ebp - 0x16c], dl
call fcn.0040e690
fild dword [ebp - 0x180]
fld qword [ebp - 0x484]
fsub st(1)
fadd qword [ebp - 0x4a4]
fadd qword [ebp - 0x140]
fsubp st(1)
call fcn.00426140
mov ecx, dword [ebp - 0x700]
mov edx, dword [ecx + 4]
push edx
lea ecx, [ebp - 0x718]
mov dword [ebp - 0x180], eax
call fcn.0040e700
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x28]
mov dword [eax + 4], eax
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x6fc], ebx
mov dword [eax], eax
mov eax, dword [ebp - 0x700]
mov dword [eax + 8], eax
fild dword [0x44fdd0]
mov eax, dword [0x44fdd4]
add ecx, eax
mov dword [ebp - 0x1c], ecx
fild dword [ebp - 0x1c]
fsub dword [ebp - 0x10c]
fsub dword [ebp - 0xac]
fadd dword [ebp - 0x104]
fsub qword [ebp - 0x200]
fsubp st(1)
call fcn.00426140
lea edx, [ebp - 0x718]
push edx
mov dword [0x44fdd0], eax
mov byte [ebp - 4], 0
call fcn.00405400
sub dword [ebp - 0x3c], 1
jne 0x4081e0
push ebx
lea eax, [ebp - 0x2998]
push eax
call dword [sym.imp.USER32.dll_FindWindowA]
movzx ecx, word [ebp - 0x64]
mov edx, dword [ebp - 0x90]
push ecx
push edx
mov esi, eax
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
push 0xfffffffffffffff4
push esi
call dword [sym.imp.USER32.dll_SetClassLongA]
mov eax, dword [0x44fdd0]
sub eax, dword [ebp - 0x20]
push 0x3b
add dword [ebp - 0x74], eax
mov edi, 0xf
push str.Currently_telltale_Webroot_SecurityPlicy_slimmer_Confusing.
lea ecx, [ebp - 0x3f4]
mov dword [ebp - 0x3dc], edi
mov dword [ebp - 0x3e0], ebx
mov byte [ebp - 0x3f0], 0
call fcn.0040ef20
lea edx, [ebp - 0x3f4]
mov byte [ebp - 4], 0x17
call fcn.0040ce40
test eax, eax
je 0x408454
push 0x38
push str.cities_1982_game_surmunting_foods_Recrding_technologies.
lea eax, [ebp - 0x3f4]
call fcn.0040d620
push 4
push str.All.
lea eax, [ebp - 0x3f4]
call fcn.0040d620
mov ecx, dword [str.ferry_flaunt.]
mov edx, dword [0x440620]
mov eax, dword [0x440624]
mov dword [ebp - 0xe48], ecx
mov cx, word [0x440628]
mov dword [ebp - 0xe44], edx
lea edx, [ebp - 0x3f4]
mov dword [ebp - 0xe40], eax
mov word [ebp - 0xe3c], cx
call fcn.0040ce40
test eax, eax
je 0x4084b5
mov edx, dword [ebp - 0x3e0]
add edx, 4
mov dword [0x44fdd4], edx
lea edx, [ebp - 0x3f4]
call fcn.0040ce40
test eax, eax
je 0x4084d0
mov eax, dword [ebp - 0x3e0]
add eax, 4
mov dword [ebp - 0x44], eax
push str.XPM_Meyers_ground_respnsiveness_SQLBrokerAware_Slave_Xfce.
lea ecx, [ebp - 0x1044]
push ecx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
mov edx, dword [ebp - 0x3e0]
imul edx, dword [ebp - 0x30]
add edx, dword [ebp - 0xd4]
mov ecx, 1
add dword [ebp - 0x44], edx
call fcn.004123b0
cmp eax, ebx
je 0x40850d
lea ecx, [ebp - 0x67c]
mov dword [eax], ecx
jmp 0x40850f
xor eax, eax
mov dword [ebp - 0x67c], eax
mov dword [ebp - 0x66c], ebx
mov dword [ebp - 0x668], ebx
mov dword [ebp - 0x664], ebx
mov dword [ebp - 0x660], ebx
mov byte [ebp - 4], 0x18
movzx edx, word [0x44fddc]
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x67c]
mov dword [ebp - 0xbc], edx
call fcn.0040ed20
cmp dword [ebp - 0x660], ebx
jne 0x408566
mov ecx, dword [0x44fde0]
sub ecx, dword [ebp - 0x34]
add dword [ebp - 0x38], ecx
jmp 0x40856f
mov edx, dword [ebp - 0x44]
sub dword [0x44fdd4], edx
mov esi, dword [0x44fde8]
mov eax, dword [ebp - 0x20]
add eax, esi
je 0x4085b9
fild dword [0x44fdd0]
fstp dword [ebp - 0xbc]
fld dword [ebp - 0xbc]
call fcn.004375e0
fstp dword [ebp - 0xbc]
fld dword [ebp - 0xbc]
fstp dword [ebp - 0xbc]
fild dword [ebp - 0x64]
fsub dword [ebp - 0xbc]
fiadd dword [ebp - 0x6c]
call fcn.00426140
mov dword [ebp - 0x6c], eax
movzx ecx, si
lea edx, [ebp - 0x198]
push edx
lea eax, [ebp - 0x67c]
mov dword [ebp - 0x198], ecx
call fcn.0040ed20
movzx eax, word [ebp - 0x30]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], eax
push ecx
lea eax, [ebp - 0x67c]
call fcn.0040ed20
lea esi, [ebp - 0x67c]
call fcn.0040ea80
mov edx, dword [ebp - 0x67c]
push edx
call fcn.00413f05
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x3dc], 0x10
jb 0x408620
mov eax, dword [ebp - 0x3f0]
push eax
call fcn.00413f05
add esp, 4
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0x74]
add ecx, edx
mov dword [ebp - 0x3dc], edi
mov dword [ebp - 0x3e0], ebx
mov byte [ebp - 0x3f0], 0
je 0x408649
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xd8], eax
mov esi, dword [ebp - 0x90]
xor eax, eax
push 0x206
lea ecx, [ebp - 0x2cde]
push ebx
push ecx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0xd38], eax
mov dword [ebp - 0xd34], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0xc40], eax
mov dword [ebp - 0x988], eax
mov dword [ebp - 0x984], eax
mov dword [ebp - 0x980], eax
mov word [ebp - 0x2ce0], bx
call fcn.00423c00
add esp, 0xc
lea edx, [ebp - 0x784]
push edx
lea eax, [ebp - 0xe48]
sub eax, 1
push eax
push ebx
push ebx
mov dword [ebp - 0xa4], eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
push str.exxtr
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.DLL_CreateEventA]
mov dword [ebp - 0x198], eax
movzx eax, si
movzx esi, byte [0x44fdd0]
imul esi, eax
imul esi, dword [ebp - 0x24]
mov ecx, dword [0x44fde0]
lea eax, [ebp - 0xe48]
sub esi, eax
lea eax, [ebp - 0x2ce0]
cdq
add ecx, 0x50
idiv ecx
mov edi, dword [ebp - 0x4c]
mov ecx, dword [0x44fde4]
lea ebx, [ecx + 0x34]
imul eax, dword [ebp - 0xc0]
sub edi, eax
mov eax, dword [ebp - 0x10]
cdq
idiv ebx
sub edi, eax
sub edi, dword [ebp - 0x88]
add dword [0x44fdd0], edi
lea edi, [ecx + 5]
test edi, edi
je 0x408784
xor ebx, ebx
mov edx, dword [ebp - 0x5c]
imul edx, ecx
mov eax, 1
sub eax, edx
push 0x1f4
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x2688]
push ebx
push eax
sub edi, 1
mov dword [ebp - 0x268c], ebx
call fcn.00423c00
add esp, 0xc
lea ecx, [ebp - 0x268c]
push ecx
push 1
mov dword [ebp - 0x2680], 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
cmp edi, ebx
mov ecx, dword [0x44fde4]
jne 0x408733
movzx edx, word [ebp - 0x54]
imul edx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x20]
xor eax, eax
movzx eax, al
imul eax, dword [0x44fdd0]
sub ecx, eax
mov eax, dword [0x44fde0]
xor ebx, ebx
sub ecx, edx
sub ecx, eax
sub edi, eax
sub edi, dword [ebp - 0x30]
mov dword [ebp - 0x988], ecx
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x1d8], ebx
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0x270], ebx
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x3c], 0x22
jmp 0x4087e0
push 0x54
lea ecx, [ebp - 0x13c8]
push ebx
push ecx
mov dword [ebp - 0x13cc], ebx
call fcn.00423c00
add esp, 0xc
cmp edi, dword [ebp - 0x60]
jb 0x40880c
mov edx, dword [ebp - 0x60]
lea eax, [edx + edx]
sub eax, dword [0x44fddc]
mov dword [ebp - 0x60], eax
sub dword [ebp - 0x3c], 1
jne 0x4087e0
lea ecx, [ebp - 0x1d8]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x60]
mov edi, dword [ebp - 0x70]
mov ebx, dword [0x44fddc]
movzx eax, cx
add eax, edx
add eax, edi
add eax, ebx
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x3c], 9
sub ecx, eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x98], ecx
lea ecx, [eax + 0x53]
mov eax, dword [ebp - 0x2c]
cdq
idiv ecx
imul eax, edi
mov dword [ebp - 0x40], eax
mov edi, edi
xor edi, edi
mov ecx, edi
imul ecx, dword [0x44fde0]
mov eax, 0x88888889
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x60]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [ecx + ecx]
mov ecx, edx
sub ecx, eax
sub ecx, dword [ebp - 0x40]
lea edx, [ebp - 0x270]
sub ecx, ebx
sub ecx, dword [ebp - 0x20]
push edx
mov ebx, ecx
mov dword [ebp - 0x60], ebx
call dword [sym.imp.USER32.dll_GetCursorPos]
cmp ebx, 1
jae 0x4088c2
lea eax, [ebp - 0xc74]
push eax
lea ecx, [ebp - 0xc34]
push ecx
lea edx, [ebp - 0xc04]
push edx
call dword [sym.imp.USER32.dll_IntersectRect]
mov ecx, dword [ebp - 0x270]
cmp dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x26c]
jne 0x408940
cmp dword [ebp - 0x1d4], edx
jne 0x408940
movzx eax, word [ebp - 0x54]
movzx ecx, byte [ebp - 0x64]
mov edx, dword [ebp - 0x20]
imul ecx, eax
sub dword [ebp - 0x10], ecx
lea ecx, [edx + 0x3a]
mov eax, edi
cdq
idiv ecx
add eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x20]
jl 0x408914
movzx edx, byte [0x44fde0]
sub dword [ebp - 0xc40], edx
jmp 0x4089b4
mov ecx, dword [ebp - 0x70]
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, dword [0x44fdd4]
sub eax, dword [0x44fdd0]
add eax, dword [ebp - 0x988]
lea edx, [eax + ecx - 1]
mov dword [ebp - 0x64], edx
jmp 0x4089b4
xor eax, eax
push eax
push eax
mov dword [ebp - 0x1d8], ecx
lea ecx, [ebp - 0x21c]
push ecx
push eax
mov dword [ebp - 0x1d4], edx
lea edx, [ebp - 0x864]
mov dword [ebp - 0x864], eax
mov dword [ebp - 0x860], eax
mov dword [ebp - 0x85c], eax
mov dword [ebp - 0x858], eax
mov dword [ebp - 0x854], eax
mov dword [ebp - 0x850], eax
mov dword [ebp - 0x84c], eax
mov dword [ebp - 0x848], eax
mov dword [ebp - 0x844], eax
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x21c], eax
mov eax, dword [0x44fddc]
push edx
push eax
call dword [sym.imp.GDI32.dll_CreateDIBSection]
add dword [ebp - 0xc0], 1
mov edx, dword [ebp - 0xc0]
test edx, edx
mov edi, dword [0x44fde4]
je 0x4089dc
xor eax, eax
xor ecx, ecx
cmp ecx, eax
jne 0x4089d8
mov eax, dword [ebp - 0x94]
imul eax, edi
mov dword [ebp - 0x10], eax
add dword [ebp - 0x50], 1
xor eax, eax
cmp edx, 1
mov dword [ebp - 0x68c], 0
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], eax
mov dword [ebp - 0x680], eax
ja 0x408a97
call dword [sym.imp.USER32.dll_GetFocus]
cmp eax, edi
jne 0x408a1c
lea ecx, [ebp - 0x68c]
push ecx
push 0
call dword [sym.imp.USER32.dll_DrawFocusRect]
cmp dword [ebp - 0x50], 5
je 0x408a6f
mov edx, dword [ebp - 0x198]
push 0xbb7
push edx
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
movzx eax, byte [ebp - 0x10]
cmp eax, dword [ebp - 0x54]
mov ebx, dword [0x44fddc]
ja 0x408a63
mov eax, dword [0x44fdd4]
cdq
lea ecx, [ebx + 0x40]
idiv ecx
movzx ecx, word [ebp - 0x98]
mov edx, eax
xor eax, eax
imul ecx, eax
sub edx, ecx
sub edx, dword [ebp - 0x10]
add esi, edx
sub dword [ebp - 0x3c], 1
jne 0x408860
jmp 0x408a9d
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x60]
lea ecx, [edx + 0x51]
xor edx, edx
div ecx
mov edx, eax
mov eax, dword [ebp - 0x94]
imul edx, dword [ebp - 0x54]
imul eax, esi
imul eax, dword [0x44fde0]
sub eax, edx
add dword [ebp - 0x38], eax
mov ebx, dword [0x44fddc]
mov ecx, dword [ebp - 0x30]
fild dword [ebp - 0x84]
mov edx, dword [0x44fde0]
imul edx, ecx
fstp qword [ebp - 0x16c]
mov eax, 0xaaaaaaab
mul edx
shr edx, 5
sub edx, dword [ebp - 0x38]
mov eax, 0x3e0f83e1
add edx, dword [0x44fde8]
mov byte [ebp - 0x11d], cl
add edx, dword [0x44fdd0]
add ebx, 8
add dword [0x44fdd4], edx
imul dword [ebp - 0x34]
mov al, byte [ebp - 0x44]
mov byte [ebp - 0xff], al
mov eax, dword [ebp - 0x80]
imul eax, ecx
movzx ecx, word [ebp - 0x74]
sar edx, 3
mov edi, edx
shr edi, 0x1f
add edi, edx
mov dl, byte [ebp - 0x20]
add eax, ecx
mov dword [ebp - 0x3c], ebx
mov byte [ebp - 0x111], dl
mov dword [ebp - 0xbc], eax
xor ebx, ebx
fild dword [ebp - 0x10]
fstp dword [ebp - 0x40]
fld dword [ebp - 0x40]
call fcn.00437400
fstp dword [ebp - 0x40]
mov edx, dword [0x44fde0]
fld dword [ebp - 0x40]
mov eax, dword [ebp - 0x44]
fstp dword [ebp - 0x198]
lea ecx, [edx + 0x40]
cdq
idiv ecx
mov edx, dword [0x44fde4]
lea esi, [edx + 0x47]
mov ecx, eax
lea eax, [ebp - 0x1b30]
cdq
idiv esi
mov esi, eax
mov eax, 0x66666667
imul dword [0x44fde8]
sar edx, 1
mov eax, edx
shr eax, 0x1f
sub esi, ecx
add eax, edx
add esi, edi
add eax, esi
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
fld dword [ebp - 0x198]
fmul qword [ebp - 0x1cc]
fmul qword [ebp - 0x16c]
faddp st(1)
call fcn.00426140
mov ecx, 1
mov dword [ebp - 0x50], eax
call fcn.004123b0
cmp eax, ebx
je 0x408bab
lea ecx, [ebp - 0x3c8]
mov dword [eax], ecx
jmp 0x408bad
xor eax, eax
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3b8], ebx
mov dword [ebp - 0x3b4], ebx
mov dword [ebp - 0x3b0], ebx
mov dword [ebp - 0x3ac], ebx
lea edx, [ebp - 0x11d]
push edx
lea eax, [ebp - 0x3c8]
mov byte [ebp - 4], 0x19
call fcn.0040d3d0
movzx eax, byte [ebp - 0x180]
mov ecx, dword [ebp - 0x2c]
add eax, ecx
sub dword [0x44fdd4], eax
lea eax, [ebp - 0x3c8]
call fcn.0040d2f0
movzx edx, byte [eax]
lea eax, [ebp - 0xff]
push eax
lea eax, [ebp - 0x3c8]
mov dword [ebp - 0x2ec], edx
call fcn.0040d3d0
lea ecx, [ebp - 0x111]
push ecx
lea eax, [ebp - 0x3c8]
call fcn.0040d3d0
cmp dword [ebp - 0x3ac], ebx
je 0x408c64
mov eax, dword [ebp - 0x3b0]
mov edx, dword [ebp - 0x3b4]
add eax, 1
shl edx, 4
cmp edx, eax
mov dword [ebp - 0x3b0], eax
ja 0x408c55
mov dword [ebp - 0x3b0], ebx
sub dword [ebp - 0x3ac], 1
jne 0x408c64
mov dword [ebp - 0x3b0], ebx
movzx eax, byte [0x44fde4]
sub eax, dword [ebp - 0x30]
je 0x408c7c
lea ecx, [ebp - 0x1b30]
movzx edx, cl
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0xbc]
lea esi, [ebp - 0x3c8]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0
call fcn.0040ea80
mov ecx, dword [ebp - 0x3c8]
push ecx
call fcn.00413f05
add esp, 4
sub dword [ebp - 0x3c], 1
jne 0x408b18
mov eax, dword [ebp - 0x158]
mov edi, dword [ebp - 0x20]
cdq
lea ecx, [edi + 0x39]
idiv ecx
movzx edx, word [ebp - 0xcc]
sub edx, eax
cmp edx, dword [ebp - 0x44]
jl 0x408cf8
fld dword [ebp - 0xf0]
call fcn.0043754c
fstp dword [ebp - 0x40]
fld dword [ebp - 0x40]
fstp dword [ebp - 0x40]
fild dword [0x44fde8]
fadd dword [ebp - 0x40]
fiadd dword [ebp - 0x184]
call fcn.00426140
mov dword [ebp - 0x184], eax
push ebx
call sub.pdh.dll_PdhCollectQueryData
mov ecx, 1
call fcn.004123b0
cmp eax, ebx
je 0x408d16
lea ecx, [ebp - 0x738]
mov dword [eax], ecx
jmp 0x408d18
xor eax, eax
mov dword [ebp - 0x738], eax
mov dword [ebp - 0x728], ebx
mov dword [ebp - 0x724], ebx
mov dword [ebp - 0x720], ebx
mov dword [ebp - 0x71c], ebx
mov byte [ebp - 4], 0x1a
mov dl, byte [ebp - 0x74]
lea eax, [ebp - 0xea]
push eax
lea eax, [ebp - 0x738]
mov byte [ebp - 0xea], dl
call fcn.0040d3d0
lea ecx, [ebp - 0xf7]
push ecx
lea eax, [ebp - 0x738]
mov byte [ebp - 0xf7], 0
call fcn.0040d3d0
fld dword [ebp - 0x48]
call fcn.004375e0
fstp dword [ebp - 0x40]
fld dword [ebp - 0x40]
fstp dword [ebp - 0x40]
fld dword [ebp - 0x40]
fstp qword [ebp - 0x16c]
fild dword [ebp - 0xd0]
call fcn.00437830
mov edx, dword [0x44fddc]
add edx, 0x4f
mov dword [ebp - 0x40], edx
fild dword [ebp - 0x40]
mov eax, dword [ebp - 0x15c]
imul eax, dword [0x44fde4]
fdivp st(1)
mov dword [ebp - 0x40], eax
fmul qword [ebp - 0x48c]
fsubr qword [ebp - 0x16c]
fild dword [ebp - 0x40]
faddp st(1)
fisub dword [0x44fddc]
fiadd dword [ebp - 0xd8]
call fcn.00426140
mov cl, byte [0x44fde0]
lea edx, [ebp - 0xfb]
mov dword [ebp - 0xd8], eax
push edx
lea eax, [ebp - 0x738]
mov byte [ebp - 0xfb], cl
call fcn.0040d3d0
push 0x2a
mov esi, 0xf
push str.Config_Sampling_Ant_ServiceBase_Order_CAT.
lea ecx, [ebp - 0x540]
mov dword [ebp - 0x528], esi
mov dword [ebp - 0x52c], ebx
mov byte [ebp - 0x53c], 0
call fcn.0040ef20
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x52c]
cmp eax, ebx
jne 0x408e3b
sub edi, dword [0x44fdd0]
mov dword [ebp - 0x74], edi
cmp eax, ebx
mov ecx, dword [str.Schemas_TRUSTe.]
mov edx, dword [0x4406a0]
mov dword [ebp - 0x1044], ecx
mov ecx, dword [0x4406a4]
mov dword [ebp - 0x1040], edx
mov edx, dword [0x4406a8]
mov dword [ebp - 0x103c], ecx
mov ecx, dword [str.RW_multicre.]
mov dword [ebp - 0x1038], edx
mov edx, dword [0x4406b0]
mov dword [ebp - 0xe48], ecx
mov ecx, dword [0x4406b4]
mov dword [ebp - 0xe44], edx
mov dl, byte [0x4406b8]
mov dword [ebp - 0xe40], ecx
mov byte [ebp - 0xe3c], dl
jne 0x408ec5
fild dword [ebp - 0x44]
fstp qword [ebp - 0x16c]
fild dword [ebp - 0xd8]
call fcn.00437960
fld qword [ebp - 0x16c]
fadd st(1), st(0)
fsubrp st(1)
call fcn.00426140
mov dword [ebp - 0x44], eax
push 0x1c
push str.separately_Windowing_eraser.
lea eax, [ebp - 0x540]
call fcn.0040d620
push 4
push str.Ping
lea eax, [ebp - 0x540]
push eax
call fcn.0040da40
test eax, eax
je 0x408f03