Function at 0x45d1a0
Capabilities:
Change the wallpaper
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5cdc6f
mov eax, dword fs:[0]
push eax
sub esp, 0x6e4
mov eax, dword [0x6385e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x5f0], ecx
cmp dword [0x6436b0], 0
jne 0x45d200
push 0x5faa7c
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x6436ac], eax
push str.GradientFill
mov eax, dword [0x6436ac]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6436b0], eax
push 0x6028d0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0x6c], eax
push 0
lea edx, [ebp - 0x21c]
push edx
push 0x5c
push 0x1f
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x284]
push ecx
call fcn.004533a0
add esp, 8
mov dword [ebp - 4], 0
push ecx
fld dword [0x612b38]
fstp dword [esp]
lea ecx, [ebp - 0x284]
call fcn.00402200
push eax
lea ecx, [ebp - 0xe4]
call fcn.00401f80
mov byte [ebp - 4], 1
push ecx
fld dword [0x612b78]
fstp dword [esp]
lea ecx, [ebp - 0x284]
call fcn.00402200
push eax
lea ecx, [ebp - 0x2ec]
call fcn.00401f80
mov byte [ebp - 4], 2
push ecx
fld dword [0x612b3c]
fstp dword [esp]
lea ecx, [ebp - 0x284]
call fcn.00402200
push eax
lea ecx, [ebp - 0x7c]
call fcn.00401f80
mov byte [ebp - 4], 3
push ecx
fld dword [0x612b74]
fstp dword [esp]
lea ecx, [ebp - 0x284]
call fcn.00402200
push eax
lea ecx, [ebp - 0x1bc]
call fcn.00401f80
mov byte [ebp - 4], 4
push 4
push ecx
fld dword [0x612b3c]
fstp dword [esp]
lea ecx, [ebp - 0x284]
call fcn.00402200
push eax
lea ecx, [ebp - 0x14c]
call fcn.00402090
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x7c]
call fcn.00402220
mov edx, dword [ebp - 0x5f0]
mov dword [edx + 0x78], eax
lea ecx, [ebp - 0x2ec]
call fcn.00402220
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0x7c], eax
lea ecx, [ebp - 0xe4]
call fcn.00402220
mov edx, dword [ebp - 0x5f0]
mov dword [edx + 0x80], eax
lea ecx, [ebp - 0x1bc]
call fcn.00402220
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0x70], eax
lea ecx, [ebp - 0x14c]
call fcn.00402220
mov edx, dword [ebp - 0x5f0]
mov dword [edx + 0x74], eax
push 0xcea27d
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0xc0], eax
push 0xd9d9d9
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
mov edx, dword [ebp - 0x5f0]
mov dword [edx + 0xc4], eax
push 0x28d200
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0xc8], eax
push 0xe8e8e8
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
mov edx, dword [ebp - 0x5f0]
mov dword [edx + 0xbc], eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x150], eax
push 0
push 0x10
push 0x10
push 1
push 0x78
mov eax, dword [ebp - 0x150]
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0xa0], eax
push 0
push 0x10
push 0x10
push 1
push 0x79
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0xa4], eax
push 0
push 0x10
push 0x10
push 1
push 0x6e
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0x84], eax
push 0
push 0x10
push 0x10
push 1
push 0x6f
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0x88], eax
push 0
push 0x10
push 0x10
push 1
push 0x70
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0x8c], eax
push 0
push 0x10
push 0x10
push 1
push 0xaa
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0x90], eax
push 0
push 0x10
push 0x10
push 1
push 0xad
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0x94], eax
push 0
push 0x10
push 0x10
push 1
push 0xab
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0x98], eax
push 0
push 0x10
push 0x10
push 1
push 0xac
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0x9c], eax
push 0
push 0x10
push 0x10
push 1
push 0x7d
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0xa8], eax
push 0
push 0x10
push 0x10
push 1
push 0x7a
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0xac], eax
push 0
push 0x10
push 0x10
push 1
push 0x7b
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0xb0], eax
push 0
push 0x10
push 0x10
push 1
push 0x81
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov dword [ecx + 0xb4], eax
push 0
push 0x10
push 0x10
push 1
push 0x82
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov edx, dword [ecx + 0xb8]
mov dword [edx], eax
push 0
push 0x10
push 0x10
push 1
push 0x83
mov eax, dword [ebp - 0x150]
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov edx, dword [ecx + 0xb8]
mov dword [edx + 4], eax
push 0
push 0x10
push 0x10
push 1
push 0x84
mov eax, dword [ebp - 0x150]
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov edx, dword [ecx + 0xb8]
mov dword [edx + 8], eax
push 0
push 0x10
push 0x10
push 1
push 0x85
mov eax, dword [ebp - 0x150]
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov edx, dword [ecx + 0xb8]
mov dword [edx + 0xc], eax
push 0
push 0x10
push 0x10
push 1
push 0x86
mov eax, dword [ebp - 0x150]
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov edx, dword [ecx + 0xb8]
mov dword [edx + 0x10], eax
push 0
push 0x10
push 0x10
push 1
push 0x87
mov eax, dword [ebp - 0x150]
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov edx, dword [ecx + 0xb8]
mov dword [edx + 0x14], eax
push 0
push 0x10
push 0x10
push 1
push 0x88
mov eax, dword [ebp - 0x150]
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov edx, dword [ecx + 0xb8]
mov dword [edx + 0x18], eax
push 0
push 0x10
push 0x10
push 1
push 0x64
mov eax, dword [ebp - 0x150]
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp - 0x5f0]
mov edx, dword [ecx + 0xb8]
mov dword [edx + 0x1c], eax
push str.Captions_IdentifiedRisk
lea ecx, [ebp - 0x2f8]
call fcn.004b3550
mov byte [ebp - 4], 6
lea eax, [ebp - 0x2f8]
push eax
lea ecx, [ebp - 0x304]
push ecx
mov edx, dword [ebp - 0x5f0]
mov ecx, dword [edx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x5f4], eax
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x5f8], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x5f8]
push ecx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x18c
call fcn.004b3890
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x304]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2f8]
call fcn.004b3860
push str.Captions_WfpFile
lea ecx, [ebp - 0x310]
call fcn.004b3550
mov byte [ebp - 4], 8
lea edx, [ebp - 0x310]
push edx
lea eax, [ebp - 0x31c]
push eax
mov ecx, dword [ebp - 0x5f0]
mov ecx, dword [ecx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x5fc], eax
mov edx, dword [ebp - 0x5fc]
mov dword [ebp - 0x600], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x600]
push eax
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x198
call fcn.004b3890
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x31c]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x310]
call fcn.004b3860
push 0x602068
lea ecx, [ebp - 0x328]
call fcn.004b3550
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x328]
push ecx
lea edx, [ebp - 0x334]
push edx
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [eax + 0x68]
call fcn.0041b330
mov dword [ebp - 0x604], eax
mov ecx, dword [ebp - 0x604]
mov dword [ebp - 0x608], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x608]
push edx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x1a4
call fcn.004b3890
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x334]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x328]
call fcn.004b3860
push str.Captions_SuspectDesc
lea ecx, [ebp - 0x340]
call fcn.004b3550
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x340]
push eax
lea ecx, [ebp - 0x34c]
push ecx
mov edx, dword [ebp - 0x5f0]
mov ecx, dword [edx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x610], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x610]
push ecx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x1b0
call fcn.004b3890
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x34c]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x340]
call fcn.004b3860
push str.Captions_Compression
lea ecx, [ebp - 0x358]
call fcn.004b3550
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x358]
push edx
lea eax, [ebp - 0x364]
push eax
mov ecx, dword [ebp - 0x5f0]
mov ecx, dword [ecx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x614], eax
mov edx, dword [ebp - 0x614]
mov dword [ebp - 0x618], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x618]
push eax
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x1bc
call fcn.004b3890
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x364]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x358]
call fcn.004b3860
push str.Captions_UnknownFormat
lea ecx, [ebp - 0x370]
call fcn.004b3550
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x370]
push ecx
lea edx, [ebp - 0x37c]
push edx
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [eax + 0x68]
call fcn.0041b330
mov dword [ebp - 0x61c], eax
mov ecx, dword [ebp - 0x61c]
mov dword [ebp - 0x620], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x620]
push edx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x1e0
call fcn.004b3890
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x37c]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x370]
call fcn.004b3860
push str.Labels_SuspiciousRemark
lea ecx, [ebp - 0x388]
call fcn.004b3550
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x388]
push eax
lea ecx, [ebp - 0x394]
push ecx
mov edx, dword [ebp - 0x5f0]
mov ecx, dword [edx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x628], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x628]
push ecx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x1c8
call fcn.004b3890
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x394]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x388]
call fcn.004b3860
push str.Labels_ApplyToAll
lea ecx, [ebp - 0x3a0]
call fcn.004b3550
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0x3a0]
push edx
lea eax, [ebp - 0x3ac]
push eax
mov ecx, dword [ebp - 0x5f0]
mov ecx, dword [ecx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x62c], eax
mov edx, dword [ebp - 0x62c]
mov dword [ebp - 0x630], edx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x630]
push eax
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x1d4
call fcn.004b3890
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x3ac]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3a0]
call fcn.004b3860
push str.Actions_Cancel
lea ecx, [ebp - 0x3b8]
call fcn.004b3550
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x3b8]
push ecx
lea edx, [ebp - 0x3c4]
push edx
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [eax + 0x68]
call fcn.0041b330
mov dword [ebp - 0x634], eax
mov ecx, dword [ebp - 0x634]
mov dword [ebp - 0x638], ecx
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x638]
push edx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x1f8
call fcn.004b3890
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x3c4]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3b8]
call fcn.004b3860
push str.Actions_Upload
lea ecx, [ebp - 0x3d0]
call fcn.004b3550
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x3d0]
push eax
lea ecx, [ebp - 0x3dc]
push ecx
mov edx, dword [ebp - 0x5f0]
mov ecx, dword [edx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0x640], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x640]
push ecx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x204
call fcn.004b3890
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3dc]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3d0]
call fcn.004b3860
push str.Actions_DoNotUpload
lea ecx, [ebp - 0x3e8]
call fcn.004b3550
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x3e8]
push edx
lea eax, [ebp - 0x3f4]
push eax
mov ecx, dword [ebp - 0x5f0]
mov ecx, dword [ecx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x644], eax
mov edx, dword [ebp - 0x644]
mov dword [ebp - 0x648], edx
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x648]
push eax
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x210
call fcn.004b3890
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x3f4]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3e8]
call fcn.004b3860
push str.Actions_Delete
lea ecx, [ebp - 0x400]
call fcn.004b3550
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x400]
push ecx
lea edx, [ebp - 0x40c]
push edx
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [eax + 0x68]
call fcn.0041b330
mov dword [ebp - 0x64c], eax
mov ecx, dword [ebp - 0x64c]
mov dword [ebp - 0x650], ecx
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x650]
push edx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x21c
call fcn.004b3890
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x40c]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x400]
call fcn.004b3860
push str.Actions_Quarantine
lea ecx, [ebp - 0x418]
call fcn.004b3550
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x424]
push ecx
mov edx, dword [ebp - 0x5f0]
mov ecx, dword [edx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x654], eax
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0x658], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x658]
push ecx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x234
call fcn.004b3890
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x424]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x418]
call fcn.004b3860
push str.Actions_Repair
lea ecx, [ebp - 0x430]
call fcn.004b3550
mov byte [ebp - 4], 0x20
lea edx, [ebp - 0x430]
push edx
lea eax, [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x5f0]
mov ecx, dword [ecx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x65c], eax
mov edx, dword [ebp - 0x65c]
mov dword [ebp - 0x660], edx
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x660]
push eax
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x240
call fcn.004b3890
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x43c]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x430]
call fcn.004b3860
push str.Actions_WhiteList
lea ecx, [ebp - 0x448]
call fcn.004b3550
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x448]
push ecx
lea edx, [ebp - 0x454]
push edx
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [eax + 0x68]
call fcn.0041b330
mov dword [ebp - 0x664], eax
mov ecx, dword [ebp - 0x664]
mov dword [ebp - 0x668], ecx
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x668]
push edx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x258
call fcn.004b3890
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x454]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x448]
call fcn.004b3860
push str.Actions_ReportFalsePositive
lea ecx, [ebp - 0x460]
call fcn.004b3550
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x460]
push eax
lea ecx, [ebp - 0x46c]
push ecx
mov edx, dword [ebp - 0x5f0]
mov ecx, dword [edx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x66c], eax
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x670], eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x670]
push ecx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x264
call fcn.004b3890
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x46c]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x460]
call fcn.004b3860
push str.Actions_Replace
lea ecx, [ebp - 0x478]
call fcn.004b3550
mov byte [ebp - 4], 0x26
lea edx, [ebp - 0x478]
push edx
lea eax, [ebp - 0x484]
push eax
mov ecx, dword [ebp - 0x5f0]
mov ecx, dword [ecx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x674], eax
mov edx, dword [ebp - 0x674]
mov dword [ebp - 0x678], edx
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0x678]
push eax
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x228
call fcn.004b3890
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x484]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x478]
call fcn.004b3860
push str.Actions_Ignore
lea ecx, [ebp - 0x490]
call fcn.004b3550
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x490]
push ecx
lea edx, [ebp - 0x49c]
push edx
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [eax + 0x68]
call fcn.0041b330
mov dword [ebp - 0x67c], eax
mov ecx, dword [ebp - 0x67c]
mov dword [ebp - 0x680], ecx
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x680]
push edx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x24c
call fcn.004b3890
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x49c]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x490]
call fcn.004b3860
push str.Status_PendingUpload
lea ecx, [ebp - 0x4a8]
call fcn.004b3550
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x4a8]
push eax
lea ecx, [ebp - 0x4b4]
push ecx
mov edx, dword [ebp - 0x5f0]
mov ecx, dword [edx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x684], eax
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0x688], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x688]
push ecx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0xe4
call fcn.004b3890
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x4b4]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4a8]
call fcn.004b3860
push str.Status_Uploading
lea ecx, [ebp - 0x4c0]
call fcn.004b3550
mov byte [ebp - 4], 0x2c
lea edx, [ebp - 0x4c0]
push edx
lea eax, [ebp - 0x4cc]
push eax
mov ecx, dword [ebp - 0x5f0]
mov ecx, dword [ecx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x68c], eax
mov edx, dword [ebp - 0x68c]
mov dword [ebp - 0x690], edx
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x690]
push eax
mov ecx, dword [ebp - 0x5f0]
add ecx, 0xfc
call fcn.004b3890
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x4cc]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4c0]
call fcn.004b3860
push str.Status_UploadNoConnection
lea ecx, [ebp - 0x4d8]
call fcn.004b3550
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x4d8]
push ecx
lea edx, [ebp - 0x4e4]
push edx
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [eax + 0x68]
call fcn.0041b330
mov dword [ebp - 0x694], eax
mov ecx, dword [ebp - 0x694]
mov dword [ebp - 0x698], ecx
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x698]
push edx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x108
call fcn.004b3890
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x4e4]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4d8]
call fcn.004b3860
push str.Status_UploadFailed
lea ecx, [ebp - 0x4f0]
call fcn.004b3550
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x4f0]
push eax
lea ecx, [ebp - 0x4fc]
push ecx
mov edx, dword [ebp - 0x5f0]
mov ecx, dword [edx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x6a0], eax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x6a0]
push ecx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x120
call fcn.004b3890
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x4fc]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4f0]
call fcn.004b3860
push str.Status_UploadTimeout
lea ecx, [ebp - 0x508]
call fcn.004b3550
mov byte [ebp - 4], 0x32
lea edx, [ebp - 0x508]
push edx
lea eax, [ebp - 0x514]
push eax
mov ecx, dword [ebp - 0x5f0]
mov ecx, dword [ecx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x6a4], eax
mov edx, dword [ebp - 0x6a4]
mov dword [ebp - 0x6a8], edx
mov byte [ebp - 4], 0x33
mov eax, dword [ebp - 0x6a8]
push eax
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x114
call fcn.004b3890
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x514]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x508]
call fcn.004b3860
push str.Status_Compressing
lea ecx, [ebp - 0x520]
call fcn.004b3550
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x520]
push ecx
lea edx, [ebp - 0x52c]
push edx
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [eax + 0x68]
call fcn.0041b330
mov dword [ebp - 0x6ac], eax
mov ecx, dword [ebp - 0x6ac]
mov dword [ebp - 0x6b0], ecx
mov byte [ebp - 4], 0x35
mov edx, dword [ebp - 0x6b0]
push edx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0xf0
call fcn.004b3890
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x52c]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x520]
call fcn.004b3860
push str.Status_Scanning
lea ecx, [ebp - 0x538]
call fcn.004b3550
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x538]
push eax
lea ecx, [ebp - 0x544]
push ecx
mov edx, dword [ebp - 0x5f0]
mov ecx, dword [edx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x6b4], eax
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x6b8], eax
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x6b8]
push ecx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x12c
call fcn.004b3890
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x544]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x538]
call fcn.004b3860
push str.Status_PendingDelete
lea ecx, [ebp - 0x550]
call fcn.004b3550
mov byte [ebp - 4], 0x38
lea edx, [ebp - 0x550]
push edx
lea eax, [ebp - 0x55c]
push eax
mov ecx, dword [ebp - 0x5f0]
mov ecx, dword [ecx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x6bc], eax
mov edx, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c0], edx
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0x6c0]
push eax
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x138
call fcn.004b3890
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x55c]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x550]
call fcn.004b3860
push str.Status_Deleted
lea ecx, [ebp - 0x568]
call fcn.004b3550
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x568]
push ecx
lea edx, [ebp - 0x574]
push edx
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [eax + 0x68]
call fcn.0041b330
mov dword [ebp - 0x6c4], eax
mov ecx, dword [ebp - 0x6c4]
mov dword [ebp - 0x6c8], ecx
mov byte [ebp - 4], 0x3b
mov edx, dword [ebp - 0x6c8]
push edx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x144
call fcn.004b3890
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x574]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x568]
call fcn.004b3860
push str.Status_DeleteFailed
lea ecx, [ebp - 0x580]
call fcn.004b3550
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x580]
push eax
lea ecx, [ebp - 0x58c]
push ecx
mov edx, dword [ebp - 0x5f0]
mov ecx, dword [edx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x6cc], eax
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x6d0], eax
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x6d0]
push ecx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x150
call fcn.004b3890
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x58c]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x580]
call fcn.004b3860
push str.Status_Quarantined
lea ecx, [ebp - 0x598]
call fcn.004b3550
mov byte [ebp - 4], 0x3e
lea edx, [ebp - 0x598]
push edx
lea eax, [ebp - 0x5a4]
push eax
mov ecx, dword [ebp - 0x5f0]
mov ecx, dword [ecx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x6d4], eax
mov edx, dword [ebp - 0x6d4]
mov dword [ebp - 0x6d8], edx
mov byte [ebp - 4], 0x3f
mov eax, dword [ebp - 0x6d8]
push eax
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x15c
call fcn.004b3890
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x5a4]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x598]
call fcn.004b3860
push str.Status_Repaired
lea ecx, [ebp - 0x5b0]
call fcn.004b3550
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x5b0]
push ecx
lea edx, [ebp - 0x5bc]
push edx
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [eax + 0x68]
call fcn.0041b330
mov dword [ebp - 0x6dc], eax
mov ecx, dword [ebp - 0x6dc]
mov dword [ebp - 0x6e0], ecx
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x6e0]
push edx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x168
call fcn.004b3890
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x5bc]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5b0]
call fcn.004b3860
push str.Status_RepairFailed
lea ecx, [ebp - 0x5c8]
call fcn.004b3550
mov byte [ebp - 4], 0x42
lea eax, [ebp - 0x5c8]
push eax
lea ecx, [ebp - 0x5d4]
push ecx
mov edx, dword [ebp - 0x5f0]
mov ecx, dword [edx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x6e4], eax
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x6e8], eax
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x6e8]
push ecx
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x174
call fcn.004b3890
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x5d4]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5c8]
call fcn.004b3860
push str.Status_Cancelled
lea ecx, [ebp - 0x5e0]
call fcn.004b3550
mov byte [ebp - 4], 0x44
lea edx, [ebp - 0x5e0]
push edx
lea eax, [ebp - 0x5ec]
push eax
mov ecx, dword [ebp - 0x5f0]
mov ecx, dword [ecx + 0x68]
call fcn.0041b330
mov dword [ebp - 0x6ec], eax
mov edx, dword [ebp - 0x6ec]
mov dword [ebp - 0x6f0], edx
mov byte [ebp - 4], 0x45
mov eax, dword [ebp - 0x6f0]
push eax
mov ecx, dword [ebp - 0x5f0]
add ecx, 0x180
call fcn.004b3890
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x5ec]
call fcn.004b3860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5e0]
call fcn.004b3860
mov ecx, dword [ebp - 0x5f0]
call fcn.004b7b40
push 0x45eb80
mov ecx, dword [ebp - 0x5f0]
push ecx
mov edx, dword [ebp - 0x5f0]
mov ecx, dword [edx + 0x68]
call fcn.0041af40
mov ecx, eax
call fcn.004611a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x14c]
call fcn.004021e0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1bc]
call fcn.004021e0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x7c]
call fcn.004021e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2ec]
call fcn.004021e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe4]
call fcn.004021e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x284]
call fcn.004021e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0054d4f5
mov esp, ebp
pop ebp
ret