Function at 0x433400
Capabilities:
Accept command line arguments
Capture screenshot
Check for unmoving mouse cursor
Check if file exists
Create process on windows
Delete file
Extract resource via kernel32 functions
Open clipboard
Query or enumerate registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fdea0
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1d90
call fcn.004fa330
mov eax, dword [0x53000c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [ebx + 0xc], 0x201
mov eax, dword [ebx + 0x14]
mov edi, dword [ebx + 8]
mov dword [ebp - 0x1d9c], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x1d64], 0
mov esi, dword [sym.imp.USER32.dll_GetCursorPos]
mov dword [ebp - 0x1bac], edi
ja 0x435524
cmp eax, 0x201
je 0x4355e3
cmp eax, 0xff
ja 0x435368
je 0x4352b5
dec eax
cmp eax, 0x1f
ja case.default.0x435392
movzx eax, byte [eax + 0x435f7c]
jmp dword [eax*4 + 0x435f68]
push 0x208
lea eax, [ebp - 0x228]
push 0
push eax
call fcn.004bcaf0
add esp, 0xc
lea eax, [ebp - 0x228]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x433600
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x1bf8]
call fcn.0041a2b0
lea eax, [ebp - 0x1bf8]
push eax
lea ecx, [ebp - 0x1be0]
call fcn.00498a60
mov edx, dword [ebp - 0x1be4]
cmp edx, 8
jb 0x433541
mov ecx, dword [ebp - 0x1bf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433537
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435eec
push edx
push ecx
call fcn.0048e9ad
add esp, 8
push str.debug.log
lea ecx, [ebp - 0x1bf8]
call fcn.0041a2b0
lea eax, [ebp - 0x1bf8]
push eax
lea eax, [ebp - 0x1cbc]
push eax
lea eax, [ebp - 0x1c5c]
push eax
lea ecx, [ebp - 0x1be0]
call fcn.00498da0
mov ecx, eax
call fcn.00498ae0
push eax
lea ecx, [ebp - 0x1be0]
call fcn.0041a1e0
lea ecx, [ebp - 0x1cbc]
call fcn.0041a210
lea ecx, [ebp - 0x1c5c]
call fcn.0041a210
mov edx, dword [ebp - 0x1be4]
cmp edx, 8
jb 0x4335da
mov ecx, dword [ebp - 0x1bf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4335d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435ef1
push edx
push ecx
call fcn.0048e9ad
add esp, 8
cmp dword [ebp - 0x1bcc], 8
lea eax, [ebp - 0x1be0]
cmovae eax, dword [ebp - 0x1be0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x1be0]
call fcn.0041a210
push 0x53ad60
call fcn.004cbffd
add esp, 4
cmp dword [0x53ad54], 0
jne 0x43364e
push 0x10
call fcn.0048e9bb
add esp, 4
mov dword [0x53ad54], eax
mov dword [eax], 1
push 0
push eax
push 0x53ad58
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push 0xc
push 2
lea eax, [ebp - 0x1c44]
mov dword [ebp - 0x1c44], 0x20001
push eax
mov dword [ebp - 0x1c40], 0x100
mov dword [ebp - 0x1c3c], edi
mov dword [ebp - 0x1c38], 0x60001
mov dword [ebp - 0x1c34], 0x100
mov dword [ebp - 0x1c30], edi
call dword [sym.imp.USER32.dll_RegisterRawInputDevices]
lea eax, [ebp - 0x1bb4]
mov dword [ebp - 0x1bb0], 0
push eax
mov dword [ebp - method.Gdiplus::PrivateFontCollection.virtual_0], vtable.Gdiplus::PrivateFontCollection.0
mov dword [ebp - 0x1bb4], 0
call dword [sym.imp.gdiplus.dll_GdipNewPrivateFontCollection]
push 0
mov dword [ebp - 0x1bb0], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0xa
mov esi, eax
push 0x82
push esi
mov dword [ebp - 0x1d94], esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x433727
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x433727
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push dword [ebp - 0x18]
mov esi, eax
push dword [ebp - 0x1d94]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push eax
push esi
push dword [ebp - 0x1bb4]
call dword [sym.imp.gdiplus.dll_GdipPrivateAddMemoryFont]
mov esi, dword [ebp - 0x1d94]
mov dword [ebp - 0x1bb0], eax
push 0xa
push 0x83
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x433774
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x433774
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push dword [ebp - 0x18]
mov esi, eax
push dword [ebp - 0x1d94]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push eax
push esi
push dword [ebp - 0x1bb4]
call dword [sym.imp.gdiplus.dll_GdipPrivateAddMemoryFont]
mov dword [ebp - 0x1bb0], eax
push 4
push str.C:WindowsFontsmsyhl.ttc
call fcn.004cdc48
add esp, 8
cmp eax, 0xffffffff
je 0x43379f
push str.C:WindowsFontsmsyhl.ttc
push dword [ebp - 0x1bb4]
call dword [sym.imp.gdiplus.dll_GdipPrivateAddFontFile]
mov dword [ebp - 0x1bb0], eax
lea eax, [ebp - 0x1bc8]
mov dword [ebp - 0x1bc8], 0
push eax
push dword [ebp - 0x1bb4]
call dword [sym.imp.gdiplus.dll_GdipGetFontCollectionFamilyCount]
mov esi, dword [ebp - 0x1bc8]
mov dword [ebp - 0x1bb0], eax
cmp esi, 1
jle 0x433941
xor ecx, ecx
mov eax, esi
mov edx, 8
mul edx
seto cl
neg ecx
or ecx, eax
xor eax, eax
add ecx, 4
setb al
neg eax
or eax, ecx
push eax
call dword [sym.imp.gdiplus.dll_GdipAlloc]
test eax, eax
je 0x43381f
push 0x4307e0
push fcn.004307d0
push dword [ebp - 0x1bc8]
mov dword [eax], esi
lea esi, [eax + 4]
push 8
push esi
mov dword [ebp - 0x1d94], esi
call fcn.0048f056
jmp 0x433827
xor esi, esi
mov dword [ebp - 0x1d94], esi
mov eax, dword [ebp - 0x1bc8]
mov dword [ebp - 0x1c14], 0
test eax, eax
jle 0x4338e8
test esi, esi
je 0x4338e8
xor ecx, ecx
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048f04d
add esp, 4
mov dword [ebp - 0x1d98], eax
test eax, eax
jne 0x433876
mov dword [ebp - 0x1bb0], 3
jmp 0x4338f2
lea ecx, [ebp - 0x1c14]
push ecx
push eax
push dword [ebp - 0x1bc8]
push dword [ebp - 0x1bb4]
call dword [sym.imp.gdiplus.dll_GdipGetFontCollectionFamilyList]
mov dword [ebp - 0x1bb0], eax
test eax, eax
jne 0x4338d8
xor esi, esi
cmp dword [ebp - 0x1c14], esi
jle 0x4338d2
mov edi, dword [ebp - 0x1d94]
nop word [eax + eax]
mov eax, dword [ebp - 0x1d98]
push edi
push dword [eax + esi*4]
call dword [sym.imp.gdiplus.dll_GdipCloneFontFamily]
inc esi
add edi, 8
cmp esi, dword [ebp - 0x1c14]
jl 0x4338b0
mov edi, dword [ebp - 0x1bac]
mov esi, dword [ebp - 0x1d94]
push dword [ebp - 0x1d98]
call fcn.0048edb4
add esp, 4
jmp 0x4338f2
mov dword [ebp - 0x1bb0], 2
mov ecx, esi
call fcn.004307f0
lea ecx, [esi + 8]
mov dword [0x53acdc], eax
call fcn.004307f0
mov dword [0x53acd8], eax
test esi, esi
je 0x4339a1
add esi, 0xfffffffc
mov dword [ebp - 4], 0
push 0x4307e0
push dword [esi]
push 8
push dword [ebp - 0x1d94]
call fcn.0048ea0e
push esi
call dword [sym.imp.gdiplus.dll_GdipFree]
mov dword [ebp - 4], 0xffffffff
jmp 0x4339a1
push 8
call dword [sym.imp.gdiplus.dll_GdipAlloc]
mov esi, eax
test esi, esi
je 0x433969
push esi
push 0
xorps xmm0, xmm0
push str.Microsoft_YaHei_Light
movq qword [esi], xmm0
call dword [sym.imp.gdiplus.dll_GdipCreateFontFamilyFromName]
mov dword [esi + 4], eax
jmp 0x43396b
xor esi, esi
push 8
mov dword [0x53acdc], esi
call dword [sym.imp.gdiplus.dll_GdipAlloc]
mov esi, eax
test esi, esi
je 0x433999
push esi
push 0
xorps xmm0, xmm0
push 0x51fb5c
movq qword [esi], xmm0
call dword [sym.imp.gdiplus.dll_GdipCreateFontFamilyFromName]
mov dword [esi + 4], eax
jmp 0x43399b
xor esi, esi
mov dword [0x53acd8], esi
mov esi, dword [sym.imp.gdiplus.dll_GdipAlloc]
push 8
call esi
test eax, eax
je 0x4339ca
movss xmm2, dword [0x520d18]
sub esp, 0xc
xorps xmm0, xmm0
mov ecx, eax
movq qword [eax], xmm0
call fcn.00430860
jmp 0x4339cc
xor eax, eax
push 8
mov dword [0x53acd4], eax
call esi
test eax, eax
je 0x4339f4
movss xmm2, dword [0x520d10]
sub esp, 0xc
xorps xmm0, xmm0
mov ecx, eax
movq qword [eax], xmm0
call fcn.00430860
jmp 0x4339f6
xor eax, eax
mov dword [0x53acd0], eax
lea eax, [ebp - 0x1bb4]
push eax
mov dword [ebp - method.Gdiplus::PrivateFontCollection.virtual_0], vtable.Gdiplus::PrivateFontCollection.0
call dword [sym.imp.gdiplus.dll_GdipDeletePrivateFontCollection]
push 0
call dword [sym.imp.USER32.dll_GetDC]
push 0x53ad18
push 0x430950
mov esi, eax
mov dword [0x53ad34], 0
push 0
push esi
mov dword [0x53ad30], 0
mov dword [0x53ad2c], 0
mov dword [0x53ad28], 0
call dword [sym.imp.USER32.dll_EnumDisplayMonitors]
push esi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
push 0x53ad48
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov esi, dword [0x53cd8c]
mov dword [0x53ad4c], eax
xor eax, eax
mov word [ebp - 0x1c2c], ax
mov dword [ebp - 0x1c94], eax
mov word [ebp - 0x1ca4], ax
mov dword [ebp - 0x1c7c], eax
mov word [ebp - 0x1c8c], ax
mov dword [ebp - 0x1c64], eax
mov word [ebp - 0x1c74], ax
mov eax, dword [0x53cd90]
mov dword [ebp - 0x1c1c], 0
mov dword [ebp - 0x1c18], 7
mov dword [ebp - 0x1c90], 7
mov dword [ebp - 0x1c78], 7
mov dword [ebp - 0x1c60], 7
mov dword [ebp - 0x1bac], eax
cmp esi, eax
je 0x433feb
push esi
lea ecx, [ebp - 0x1d60]
call fcn.00413630
cmp byte [ebp - 0x1d2c], 0
lea eax, [ebp - 0x1bb4]
push 0xa
push 4
xorps xmm0, xmm0
push eax
push dword [ebp - 0x1d48]
movlpd qword [ebp - 0x1bb4], xmm0
jne 0x433b6d
call fcn.004ce077
lea ecx, [ebp - 0x1bb4]
add esp, 0x10
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x433b34
sub ecx, edx
lea eax, [ebp - 0x1bb4]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1c2c]
call fcn.0041a710
push 1
push 0x51fb7c
lea ecx, [ebp - 0x1c2c]
call fcn.0041a710
jmp 0x433c42
call fcn.004ce077
lea eax, [ebp - 0x1c2c]
push eax
lea eax, [ebp - 0x1bf8]
push 0x51fb7c
push eax
call fcn.0041a9b0
add esp, 0x1c
lea ecx, [ebp - 0x1c2c]
push eax
call fcn.0041a270
mov edx, dword [ebp - 0x1be4]
cmp edx, 8
jb 0x433bd9
mov ecx, dword [ebp - 0x1bf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433bcf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435eec
push edx
push ecx
call fcn.0048e9ad
add esp, 8
lea eax, [ebp - 0x1c2c]
push eax
lea eax, [ebp - 0x1bb4]
push eax
lea eax, [ebp - 0x1bf8]
push eax
call fcn.0041a9b0
add esp, 0xc
lea ecx, [ebp - 0x1c2c]
push eax
call fcn.0041a270
mov edx, dword [ebp - 0x1be4]
cmp edx, 8
jb 0x433c42
mov ecx, dword [ebp - 0x1bf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433c38
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435eec
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov eax, dword [ebp - 0x1d48]
cmp eax, 6
je 0x433c60
cmp eax, 0x12
je 0x433c60
cmp eax, 7
je 0x433c60
cmp eax, 4
jne 0x433dbd
push 0xa
push 4
lea ecx, [ebp - 0x1bb4]
xorps xmm0, xmm0
push ecx
push eax
movlpd qword [ebp - 0x1bb4], xmm0
call fcn.004ce077
lea ecx, [ebp - 0x1bb4]
add esp, 0x10
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x433c90
sub ecx, edx
lea eax, [ebp - 0x1bb4]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1ca4]
call fcn.0041a710
push 1
push 0x51fb7c
lea ecx, [ebp - 0x1ca4]
call fcn.0041a710
mov eax, dword [ebp - 0x1d48]
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
sub eax, 4
je 0x433cf4
sub eax, 2
je 0x433ced
sub eax, 1
je 0x433ce6
or eax, 0xffffffff
jmp 0x433cf9
call fcn.004688d0
jmp 0x433cf9
call fcn.00477ac0
jmp 0x433cf9
call fcn.0045a2c0
push 0xa
push 4
lea ecx, [ebp - 0x1c]
push ecx
push eax
call fcn.004ce077
lea ecx, [ebp - 0x1c]
add esp, 0x10
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x433d10
sub ecx, edx
lea eax, [ebp - 0x1c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1c8c]
call fcn.0041a710
push 1
push 0x51fb7c
lea ecx, [ebp - 0x1c8c]
call fcn.0041a710
lea edx, [ebp - 0x1d44]
lea ecx, [ebp - 0x1bf8]
call fcn.0047d300
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x433d5c
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x1c74]
call fcn.0041a710
mov edx, dword [ebp - 0x1be4]
cmp edx, 8
jb 0x433dab
mov ecx, dword [ebp - 0x1bf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433da1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435eec
push edx
push ecx
call fcn.0048e9ad
add esp, 8
push 1
push 0x51fb7c
lea ecx, [ebp - 0x1c74]
call fcn.0041a710
lea ecx, [ebp - 0x1d60]
call fcn.004136b0
add esi, 0x58
cmp esi, dword [ebp - 0x1bac]
jne 0x433af2
mov eax, dword [ebp - 0x1c1c]
test eax, eax
je 0x433e5c
dec eax
lea ecx, [ebp - 0x1c2c]
push eax
call fcn.00436fe0
cmp word [eax], 0x2c
jne 0x433e5c
mov eax, dword [ebp - 0x1c1c]
lea ecx, [ebp - 0x1c2c]
dec eax
push eax
push 0
lea eax, [ebp - 0x1bf8]
push eax
call fcn.0041a060
push eax
lea ecx, [ebp - 0x1c2c]
call fcn.0041a270
mov edx, dword [ebp - 0x1be4]
cmp edx, 8
jb 0x433e5c
mov ecx, dword [ebp - 0x1bf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433e52
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435ef6
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov eax, dword [ebp - 0x1c94]
test eax, eax
je 0x433ee1
dec eax
lea ecx, [ebp - 0x1ca4]
push eax
call fcn.00436fe0
cmp word [eax], 0x2c
jne 0x433ee1
mov eax, dword [ebp - 0x1c94]
lea ecx, [ebp - 0x1ca4]
dec eax
push eax
push 0
lea eax, [ebp - 0x1bf8]
push eax
call fcn.0041a060
push eax
lea ecx, [ebp - 0x1ca4]
call fcn.0041a270
mov edx, dword [ebp - 0x1be4]
cmp edx, 8
jb 0x433ee1
mov ecx, dword [ebp - 0x1bf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433ed7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435efb
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov eax, dword [ebp - 0x1c7c]
test eax, eax
je 0x433f66
dec eax
lea ecx, [ebp - 0x1c8c]
push eax
call fcn.00436fe0
cmp word [eax], 0x2c
jne 0x433f66
mov eax, dword [ebp - 0x1c7c]
lea ecx, [ebp - 0x1c8c]
dec eax
push eax
push 0
lea eax, [ebp - 0x1bf8]
push eax
call fcn.0041a060
push eax
lea ecx, [ebp - 0x1c8c]
call fcn.0041a270
mov edx, dword [ebp - 0x1be4]
cmp edx, 8
jb 0x433f66
mov ecx, dword [ebp - 0x1bf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433f5c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f00
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov eax, dword [ebp - 0x1c64]
test eax, eax
je 0x433feb
dec eax
lea ecx, [ebp - 0x1c74]
push eax
call fcn.00436fe0
cmp word [eax], 0x2c
jne 0x433feb
mov eax, dword [ebp - 0x1c64]
lea ecx, [ebp - 0x1c74]
dec eax
push eax
push 0
lea eax, [ebp - 0x1bf8]
push eax
call fcn.0041a060
push eax
lea ecx, [ebp - 0x1c74]
call fcn.0041a270
mov edx, dword [ebp - 0x1be4]
cmp edx, 8
jb 0x433feb
mov ecx, dword [ebp - 0x1bf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x433fe1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f05
push edx
push ecx
call fcn.0048e9ad
add esp, 8
lea eax, [ebp - 0x1c2c]
push eax
lea eax, [ebp - 0x1d04]
push eax
call fcn.004a0e20
lea eax, [ebp - 0x1ca4]
push eax
lea eax, [ebp - 0x1d80]
push eax
call fcn.004a0e20
lea eax, [ebp - 0x1c8c]
push eax
lea eax, [ebp - 0x1cd4]
push eax
call fcn.004a0e20
lea eax, [ebp - 0x1c74]
push eax
lea eax, [ebp - 0x1cec]
push eax
call fcn.004a0e20
add esp, 0x20
cmp dword [0x53ad48], 2
jl 0x434095
mov dword [ebp - 0x1d64], 1
lea ecx, [ebp - 0x1c5c]
mov eax, dword [0x53ad4c]
push dword [eax + 4]
call fcn.0041a2b0
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x43406a
mov ecx, dword [eax]
cmp dword [eax + 0x10], 2
jne 0x434095
mov esi, 2
mov edx, 0x51fb80
nop word [eax + eax]
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x434095
add ecx, 2
add edx, 2
sub esi, 1
jne 0x434080
jmp 0x4340a5
cmp dword [0x53ad48], 1
mov byte [ebp - 0x1d8d], 0
jne 0x4340ac
mov byte [ebp - 0x1d8d], 1
test byte [ebp - 0x1d64], 1
je 0x434112
mov edx, dword [ebp - 0x1c48]
cmp edx, 8
jb 0x4340f5
mov ecx, dword [ebp - 0x1c5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4340eb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f0a
push edx
push ecx
call fcn.0048e9ad
add esp, 8
xor eax, eax
mov dword [ebp - 0x1c4c], 0
mov dword [ebp - 0x1c48], 7
mov word [ebp - 0x1c5c], ax
cmp byte [ebp - 0x1d8d], 0
je 0x43473c
push 0x51fa48
lea ecx, [ebp - 0x1bf8]
call fcn.0041a2b0
push 0x51fa48
lea ecx, [ebp - 0x1c10]
call fcn.0041a2b0
push 0x51fadc
lea ecx, [ebp - 0x1be0]
call fcn.0041a2b0
lea eax, [ebp - 0x1bf8]
push eax
lea edx, [ebp - 0x1c10]
lea ecx, [ebp - 0x1be0]
call fcn.0047cf60
mov edx, dword [ebp - 0x1bcc]
add esp, 4
cmp edx, 8
jb 0x4341aa
mov ecx, dword [ebp - 0x1be0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4341a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f0f
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov edx, dword [ebp - 0x1bfc]
xor eax, eax
mov dword [ebp - 0x1bd0], 0
mov dword [ebp - 0x1bcc], 7
mov word [ebp - 0x1be0], ax
cmp edx, 8
jb 0x434207
mov ecx, dword [ebp - 0x1c10]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4341fd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f14
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov edx, 0x51f504
lea ecx, [ebp - 0x1bf8]
call fcn.00437020
test al, al
je 0x434637
lea eax, [ebp - 0x1bac]
mov dword [ebp - 0x1d64], 0
push eax
lea eax, [ebp - 0x1d64]
mov dword [ebp - 0x18], 4
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1bac], 4
push eax
push 0x51f240
push str.SoftwareMicrosoftWindowsCurrentVersionUninstallHYLite
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
push 0x1388
lea eax, [ebp - 0x1ba8]
push 0
push eax
call fcn.004bcaf0
add esp, 0xc
lea eax, [ebp - 0x1d04]
cmp dword [ebp - 0x1cf0], 0x10
lea ecx, [ebp - 0x1cbc]
cmovae eax, dword [ebp - 0x1d04]
mov dword [ebp - 0x1d98], eax
call fcn.004813f0
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x4342a6
mov esi, dword [esi]
lea eax, [ebp - 0x1c10]
push eax
call fcn.004a1410
add esp, 4
cmp dword [eax + 0x14], 0x10
jb 0x4342bd
mov eax, dword [eax]
push dword [ebp - 0x1d64]
cmp dword [0x53bdf8], 0x10
mov ecx, 0x53bde4
push dword [ebp - 0x1d98]
cmovae ecx, dword [0x53bde4]
push esi
push eax
push ecx
lea eax, [ebp - 0x1ba8]
push eax
call fcn.00429d30
mov edx, dword [ebp - 0x1bfc]
add esp, 0x18
cmp edx, 0x10
jb 0x434328
mov ecx, dword [ebp - 0x1c10]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43431e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f19
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov edx, dword [ebp - 0x1ca8]
mov dword [ebp - 0x1c00], 0
mov dword [ebp - 0x1bfc], 0xf
mov byte [ebp - 0x1c10], 0
cmp edx, 0x10
jb 0x43437d
mov ecx, dword [ebp - 0x1cbc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x434373
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f1e
push edx
push ecx
call fcn.0048e9ad
add esp, 8
push 5
lea ecx, [ebp - 0x178]
call fcn.0049df30
lea ecx, [ebp - 0x1ba8]
mov dword [ebp - 0x1c00], 0
mov dword [ebp - 0x1bfc], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x1c10], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4343b0
sub ecx, edx
lea eax, [ebp - 0x1ba8]
push ecx
push eax
lea ecx, [ebp - 0x1c10]
call fcn.00420560
lea eax, [ebp - 0x1c10]
push eax
lea eax, [ebp - 0x1bc4]
push eax
lea ecx, [ebp - 0x178]
call fcn.0049fca0
mov edx, dword [ebp - 0x1bfc]
cmp edx, 0x10
jb 0x43441f
mov ecx, dword [ebp - 0x1c10]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x434415
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f23
push edx
push ecx
call fcn.0048e9ad
add esp, 8
push 0x53bdcc
lea ecx, [ebp - 0x1be0]
call fcn.0041f1d0
cmp dword [ebp - 0x1bb0], 0x10
lea edx, [ebp - 0x1bc4]
mov ecx, dword [ebp - 0x1bb4]
cmovae edx, dword [ebp - 0x1bc4]
mov eax, dword [ebp - 0x1bcc]
mov esi, dword [ebp - 0x1bd0]
sub eax, esi
mov dword [ebp - 0x1d98], ecx
push ecx
push edx
cmp ecx, eax
ja 0x434497
cmp dword [ebp - 0x1bcc], 0x10
lea eax, [esi + ecx]
mov dword [ebp - 0x1bd0], eax
lea eax, [ebp - 0x1be0]
cmovae eax, dword [ebp - 0x1be0]
add esi, eax
push esi
call fcn.004bd2e0
mov eax, dword [ebp - 0x1d98]
add esp, 0xc
mov byte [esi + eax], 0
jmp 0x4344b0
mov byte [ebp - 0x1d98], 0
push dword [ebp - 0x1d98]
push ecx
lea ecx, [ebp - 0x1be0]
call fcn.00421080
xor dl, dl
lea ecx, [ebp - 0x1cbc]
call fcn.00480e20
cmp eax, 0x53cda8
je 0x4344dc
cmp dword [eax + 0x14], 0x10
mov ecx, eax
jb 0x4344ce
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
mov ecx, 0x53cda8
call fcn.00420560
mov edx, dword [ebp - 0x1ca8]
cmp edx, 0x10
jb 0x434516
mov ecx, dword [ebp - 0x1cbc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43450c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f28
push edx
push ecx
call fcn.0048e9ad
add esp, 8
cmp dword [ebp - 0x1bcc], 0x10
lea eax, [ebp - 0x1be0]
push dword [ebp - 0x1bd0]
cmovae eax, dword [ebp - 0x1be0]
mov ecx, 0x53cd98
push eax
call fcn.004a2170
push 2
mov ecx, 0x53cd98
call fcn.004a3450
push 0
mov ecx, 0x53cd98
call fcn.004a3460
cmp dword [0x53bdc8], 8
mov eax, 0x53bdb4
push 0
cmovae eax, dword [0x53bdb4]
mov ecx, 0x53cd98
push 0x432cf0
push eax
call fcn.004a33c0
mov ecx, 0x53cd98
call fcn.004a2360
mov edx, dword [ebp - 0x1bcc]
cmp edx, 0x10
jb 0x4345bc
mov ecx, dword [ebp - 0x1be0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4345b2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f2d
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov edx, dword [ebp - 0x1bb0]
mov dword [ebp - 0x1bd0], 0
mov dword [ebp - 0x1bcc], 0xf
mov byte [ebp - 0x1be0], 0
cmp edx, 0x10
jb 0x434611
mov ecx, dword [ebp - 0x1bc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x434607
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f32
push edx
push ecx
call fcn.0048e9ad
add esp, 8
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x1bb4], 0
mov dword [ebp - 0x1bb0], 0xf
mov byte [ebp - 0x1bc4], 0
call fcn.0041d4f0
push 8
call fcn.0048e9bb
mov esi, eax
mov dword [ebp - 0x18], 0x423e90
add esp, 4
mov dword [0x53ad68], esi
lea eax, [ebp - 0x1bac]
mov dword [ebp - 0x1bac], esi
xorps xmm0, xmm0
lea ecx, [ebp - 0x1bb4]
movq qword [esi], xmm0
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00429b90
mov edx, eax
add esp, 8
mov dword [ebp - 0x1d64], edx
or eax, 0xffffffff
mov dword [ebp - 4], 1
cmp esi, edx
je 0x4346c8
mov ecx, dword [esi]
test ecx, ecx
je 0x4346b3
lock xadd dword [ecx + 4], eax
jne 0x4346b3
mov edx, dword [ecx + 0x78]
test edx, edx
je 0x4346a7
mov eax, dword [edx]
push ecx
mov ecx, edx
jmp 0x4346ab
mov eax, dword [ecx]
push 1
call dword [eax]
mov edx, dword [ebp - 0x1d64]
mov eax, dword [edx]
mov dword [esi], eax
mov al, byte [edx + 4]
mov dword [edx], 0
mov byte [esi + 4], al
mov eax, 0xffffffff
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x1bb4]
test ecx, ecx
je 0x4346f5
lock xadd dword [ecx + 4], eax
dec eax
jne 0x4346f5
mov edx, dword [ecx + 0x78]
test edx, edx
je 0x4346ef
mov eax, dword [edx]
push ecx
mov ecx, edx
jmp 0x4346f3
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1be4]
cmp edx, 8
jb 0x43473c
mov ecx, dword [ebp - 0x1bf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434732
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f37
push edx
push ecx
call fcn.0048e9ad
add esp, 8
cmp dword [0x53ad48], 2
jl 0x434b94
mov eax, dword [0x53ad4c]
mov edx, dword [eax + 4]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x434756
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, 0x5340b0
call fcn.0041a5b0
cmp dword [0x5340c4], 8
mov ecx, 0x5340b0
cmovae ecx, dword [0x5340b0]
cmp dword [0x5340c0], 2
jne 0x434b94
mov esi, 2
mov edx, 0x51fb80
nop dword [eax + eax]
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x434b94
add ecx, 2
add edx, 2
sub esi, 1
jne 0x4347a0
push 0x51c79c
lea ecx, [ebp - 0x1bc4]
call fcn.0041a2b0
push 0x51c79c
lea ecx, [ebp - 0x1be0]
call fcn.0041a2b0
cmp dword [0x53ad48], 3
jl 0x434829
mov eax, dword [0x53ad4c]
mov edx, dword [eax + 8]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4347f0
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, 0x534098
call fcn.0041a5b0
push 0x534098
lea edx, [ebp - 0x1be0]
lea ecx, [ebp - 0x1bc4]
call fcn.004314d0
add esp, 4
jmp 0x434989
push 1
push 0x51f504
mov ecx, 0x534098
call fcn.0041a5b0
push 0x51f504
lea ecx, [ebp - 0x1bf8]
call fcn.0041a2b0
push str.type
lea ecx, [ebp - 0x1c10]
call fcn.0041a2b0
push 0x534098
lea edx, [ebp - 0x1bf8]
lea ecx, [ebp - 0x1c10]
call fcn.0047cf60
mov edx, dword [ebp - 0x1bfc]
add esp, 4
cmp edx, 8
jb 0x4348b3
mov ecx, dword [ebp - 0x1c10]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4348a9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f3c
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov edx, dword [ebp - 0x1be4]
xor eax, eax
mov dword [ebp - 0x1c00], 0
mov dword [ebp - 0x1bfc], 7
mov word [ebp - 0x1c10], ax
cmp edx, 8
jb 0x434910
mov ecx, dword [ebp - 0x1bf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x434906
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f41
push edx
push ecx
call fcn.0048e9ad
add esp, 8
push 0x534098
lea edx, [ebp - 0x1be0]
lea ecx, [ebp - 0x1bc4]
call fcn.004314d0
add esp, 4
lea ecx, [ebp - 0x1bf8]
push str.type
call fcn.0041a2b0
mov edx, 0x534098
lea ecx, [ebp - 0x1bf8]
call fcn.0047cde0
mov edx, dword [ebp - 0x1be4]
cmp edx, 8
jb 0x434989
mov ecx, dword [ebp - 0x1bf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43497f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f46
push edx
push ecx
call fcn.0048e9ad
add esp, 8
cmp dword [ebp - 0x1bb4], 0
jne 0x43499b
cmp dword [ebp - 0x1bd0], 0
je 0x4349a2
mov byte [0x53ad38], 1
push 0x800
xor esi, esi
mov dword [ebp - 0x18], 1
lea eax, [ebp - 0x820]
mov dword [ebp - 0x1bac], 0x800
push esi
push eax
call fcn.004bcaf0
add esp, 0xc
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x820]
push eax
lea eax, [ebp - 0x18]
push eax
push str.DisplayIcon
push str.SoftwareMicrosoftWindowsCurrentVersionUninstallHYLite
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x434a0c
lea eax, [ebp - 0x820]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
mov eax, 1
cmovne esi, eax
sub esp, 0x18
lea eax, [ebp - 0x1cec]
mov ecx, esp
push eax
call fcn.0041f1d0
sub esp, 0x18
lea eax, [ebp - 0x1cd4]
mov ecx, esp
push eax
call fcn.0041f1d0
sub esp, 0x18
lea eax, [ebp - 0x1d80]
mov ecx, esp
push eax
call fcn.0041f1d0
mov edx, edi
mov ecx, esi
call fcn.00432e20
add esp, 0x48
test al, al
jne 0x434a5c
push 0
push 0
push 0
push 0
call fcn.00431d90
push 0xdc
call fcn.0048e9bb
add esp, 4
mov esi, eax
push 0xdc
push 0
push esi
call fcn.004bcaf0
add esp, 0xc
mov dword [esi + 0x14], 7
mov ecx, esi
push 0
push 0x51c79c
call fcn.0041a5b0
xor eax, eax
mov dword [esi + 0x28], 0
lea ecx, [esi + 0x18]
mov dword [ecx + 0x14], 7
push eax
push 0x51c79c
mov word [ecx], ax
call fcn.0041a5b0
lea ecx, [esi + 0x38]
mov dword [esi + 0x30], 0
mov byte [esi + 0x34], 0
call fcn.004a1e10
mov dword [0x53ad3c], esi
call fcn.0047a650
push 0xffffffffffffffec
push edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x80000
push eax
push 0xffffffffffffffec
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, edi
call fcn.004319d0
mov eax, dword [0x5340ac]
mov ecx, 0x534098
mov edx, dword [0x534098]
cmp eax, 8
mov esi, dword [0x5340a8]
cmovae ecx, edx
cmp esi, 1
jne 0x434bfd
mov edx, 0x51fa48
nop dword [eax + eax]
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x434bec
add ecx, 2
add edx, 2
sub esi, 1
jne 0x434b30
cmp dword [ebp - 0x1bb0], 8
lea eax, [ebp - 0x1bc4]
push 5
cmovae eax, dword [ebp - 0x1bc4]
push esi
push str._vss
push eax
push str.open
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, edi
call fcn.00431370
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
lea ecx, [ebp - 0x1be0]
call fcn.0041a210
lea ecx, [ebp - 0x1bc4]
call fcn.0041a210
lea ecx, [ebp - 0x1cec]
call fcn.0041f0c0
lea ecx, [ebp - 0x1cd4]
call fcn.0041f0c0
lea ecx, [ebp - 0x1d80]
call fcn.0041f0c0
lea ecx, [ebp - 0x1d04]
call fcn.0041f0c0
lea ecx, [ebp - 0x1c74]
call fcn.0041a210
lea ecx, [ebp - 0x1c8c]
call fcn.0041a210
lea ecx, [ebp - 0x1ca4]
call fcn.0041a210
lea ecx, [ebp - 0x1c2c]
jmp 0x435d6f
mov eax, dword [0x5340ac]
mov edx, dword [0x534098]
mov esi, dword [0x5340a8]
cmp eax, 8
mov ecx, 0x534098
cmovae ecx, edx
cmp esi, 1
jne 0x434c38
mov edx, 0x51f504
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x434c27
add ecx, 2
add edx, 2
sub esi, 1
jne 0x434c12
jmp 0x434c68
mov eax, dword [0x5340ac]
mov edx, dword [0x534098]
mov esi, dword [0x5340a8]
cmp eax, 8
mov ecx, 0x534098
cmovae ecx, edx
cmp esi, 1
jne 0x434b70
mov edx, 0x51fa4c
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x434b70
add ecx, 2
add edx, 2
sub esi, 1
jne 0x434c51
push 0x200
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.004bcaf0
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x10
push 0x100
push eax
mov eax, edi
cdq
push edx
push eax
call fcn.004ce001
add esp, 0x14
lea eax, [ebp - 0x220]
lea ecx, [ebp - 0x1c10]
push eax
call fcn.0041a2b0
push 1
push 0x51fbac
lea ecx, [ebp - 0x1c10]
call fcn.0041a710
cmp dword [0x5340ac], 8
lea ecx, [ebp - 0x1c10]
push dword [0x5340a8]
mov eax, 0x534098
cmovae eax, dword [0x534098]
push eax
call fcn.0041a710
cmp dword [ebp - 0x1bfc], 8
lea ecx, [ebp - 0x1c10]
push 5
cmovae ecx, dword [ebp - 0x1c10]
lea eax, [ebp - 0x1be0]
cmp dword [ebp - 0x1bcc], 8
push 0
cmovae eax, dword [ebp - 0x1be0]
push ecx
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x1c10]
call fcn.0041a210
jmp 0x434b77
cmp dword [0x53ad48], 2
jl case.default.0x435392
cmp dword [0x5340c4], 8
mov ecx, 0x5340b0
cmovae ecx, dword [0x5340b0]
cmp dword [0x5340c0], 2
jne case.default.0x435392
mov esi, 2
mov edx, 0x51fbb0
mov ax, word [ecx]
cmp ax, word [edx]
jne case.default.0x435392
add ecx, 2
add edx, 2
sub esi, 1
jne 0x434d64
lea eax, [ebp - 0x1c24]
xorps xmm0, xmm0
push eax
push edi
movups xmmword [ebp - 0x1c24], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x1c1c]
sub eax, dword [ebp - 0x1c24]
mov esi, dword [ebp - 0x1c18]
sub esi, dword [ebp - 0x1c20]
mov dword [ebp - 0x1d94], eax
mov dword [ebp - 0x1d98], esi
test eax, eax
jle 0x43510c
test esi, esi
jle 0x43510c
lea eax, [ebp - 0x1d48]
push eax
push edi
call dword [sym.imp.USER32.dll_BeginPaint]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x43510c
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push esi
push dword [ebp - 0x1d94]
mov dword [ebp - 0x1bc8], eax
push dword [ebp - 0x18]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov esi, dword [ebp - 0x1bc8]
push eax
push esi
mov dword [ebp - 0x1bac], eax
call dword [sym.imp.GDI32.dll_SelectObject]
lea eax, [ebp - 0x1d64]
mov dword [ebp - 0x1d64], 0
push eax
push esi
call dword [sym.imp.gdiplus.dll_GdipCreateFromHDC]
mov dword [ebp - 0x1bb0], eax
mov eax, dword [ebp - 0x1d64]
push ecx
lea ecx, [ebp - 0x1bb4]
mov dword [ebp - 0x1bb4], eax
call fcn.00430700
push ecx
lea ecx, [ebp - 0x1bb4]
call fcn.00430740
push ecx
lea ecx, [ebp - 0x1bb4]
call fcn.00430720
push ecx
lea ecx, [ebp - 0x1bb4]
call fcn.00430760
push 0x51f504
lea ecx, [ebp - 0x1be0]
call fcn.0041a2b0
push 0x51f504
lea ecx, [ebp - 0x1cd4]
call fcn.0041a2b0
push str.type
lea ecx, [ebp - 0x1d80]
call fcn.0041a2b0
lea eax, [ebp - 0x1be0]
push eax
lea edx, [ebp - 0x1cd4]
lea ecx, [ebp - 0x1d80]
call fcn.0047cf60
add esp, 4
lea ecx, [ebp - 0x1d80]
call fcn.0041a210
lea ecx, [ebp - 0x1cd4]
call fcn.0041a210
push 0x51c79c
lea ecx, [ebp - 0x1cbc]
call fcn.0041a2b0
push 0x51c79c
lea ecx, [ebp - 0x1cec]
call fcn.0041a2b0
lea eax, [ebp - 0x1be0]
push eax
lea edx, [ebp - 0x1cec]
lea ecx, [ebp - 0x1cbc]
call fcn.004314d0
mov eax, dword [ebp - 0x1bcc]
lea edx, [ebp - 0x1be0]
add esp, 4
mov dword [ebp - 0x1d64], 0
cmp eax, 8
cmovae edx, dword [ebp - 0x1be0]
cmp dword [ebp - 0x1bd0], 1
jne 0x434f63
mov esi, 1
mov ecx, 0x51f504
nop word [eax + eax]
mov ax, word [edx]
cmp ax, word [ecx]
jne 0x434f5d
add edx, 2
add ecx, 2
sub esi, 1
jne 0x434f40
mov ecx, 0x93
jmp 0x435033
mov eax, dword [ebp - 0x1bcc]
mov edx, dword [ebp - 0x1be0]
lea ecx, [ebp - 0x1be0]
cmp eax, 8
cmovae ecx, edx
cmp dword [ebp - 0x1bd0], 1
jne 0x434fb1
mov esi, 1
mov edx, 0x51fa4c
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x434fa5
add ecx, 2
add edx, 2
sub esi, 1
jne 0x434f88
mov ecx, 0x94
jmp 0x435033
mov eax, dword [ebp - 0x1bcc]
mov edx, dword [ebp - 0x1be0]
cmp eax, 8
lea ecx, [ebp - 0x1be0]
cmovae ecx, edx
cmp dword [ebp - 0x1bd0], 1
jne 0x434ff0
mov esi, 1
mov edx, 0x51fa48
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x434fea
add ecx, 2
add edx, 2
sub esi, 1
jne 0x434fd0
mov ecx, 0x95
jmp 0x435033
mov eax, dword [ebp - 0x1bcc]
cmp eax, 8
lea ecx, [ebp - 0x1be0]
cmovae ecx, dword [ebp - 0x1be0]
cmp dword [ebp - 0x1bd0], 2
jne 0x43502d
mov esi, 2
mov edx, 0x51fa50
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x43502d
add ecx, 2
add edx, 2
sub esi, 1
jne 0x435013
mov ecx, 0x96
jmp 0x435033
mov ecx, dword [ebp - 0x1bac]
lea eax, [ebp - 0x1d64]
push eax
call fcn.0047d1e0
add esp, 4
test eax, eax
je 0x435078
mov esi, dword [ebp - 0x1d64]
test esi, esi
je 0x435078
push ecx
push dword [ebp - 0x1d98]
lea ecx, [ebp - 0x1bb4]
push dword [ebp - 0x1d94]
sub esp, 8
push 0
push 0
push esi
call fcn.00430780
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
mov esi, dword [ebp - 0x1bc8]
push 0xcc0020
push 0
push 0
push esi
push dword [ebp - 0x1d98]
push dword [ebp - 0x1d94]
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_GetWindowDC]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
push esi
mov esi, dword [ebp - 0x1bb4]
push esi
call dword [sym.imp.gdiplus.dll_GdipReleaseDC]
push dword [ebp - 0x1bac]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 0x1bc8]
call dword [sym.imp.GDI32.dll_DeleteDC]
lea eax, [ebp - 0x1d48]
push eax
push edi
call dword [sym.imp.USER32.dll_EndPaint]
push dword [ebp - 0x18]
push edi
call dword [sym.imp.USER32.dll_ReleaseDC]
lea ecx, [ebp - 0x1cec]
call fcn.0041a210
lea ecx, [ebp - 0x1cbc]
call fcn.0041a210
lea ecx, [ebp - 0x1be0]
call fcn.0041a210
push esi
call dword [sym.imp.gdiplus.dll_GdipDeleteGraphics]
push 0
push 0x3e8
push 2
push edi
call dword [sym.imp.USER32.dll_SetTimer]
jmp case.default.0x435392
mov eax, dword fs:[0x2c]
mov esi, dword [eax]
mov eax, dword [0x53d7b0]
mov dword [ebp - 0x1d94], esi
cmp eax, dword [esi + 4]
mov esi, dword [sym.imp.USER32.dll_LoadCursorW]
jle 0x435173
push 0x53d7b0
call fcn.0048ef59
add esp, 4
cmp dword [0x53d7b0], 0xffffffff
jne 0x435173
push 0x7f00
push 0
call esi
push 0x53d7b0
mov dword [0x53d7b4], eax
call fcn.0048ef0f
add esp, 4
mov ecx, dword [ebp - 0x1d94]
mov eax, dword [0x53d7b8]
cmp eax, dword [ecx + 4]
jle 0x4351bd
push 0x53d7b8
call fcn.0048ef59
add esp, 4
cmp dword [0x53d7b8], 0xffffffff
jne 0x4351b7
push 0x7f89
push 0
call esi
push 0x53d7b8
mov dword [0x53d7bc], eax
call fcn.0048ef0f
add esp, 4
mov ecx, dword [ebp - 0x1d94]
mov eax, dword [0x53d7c0]
cmp eax, dword [ecx + 4]
jle 0x4351fb
push 0x53d7c0
call fcn.0048ef59
add esp, 4
cmp dword [0x53d7c0], 0xffffffff
jne 0x4351fb
push 0x7f02
push 0
call esi
push 0x53d7c0
mov dword [0x53d7c4], eax
call fcn.0048ef0f
add esp, 4
cmp byte [0x53ad39], 0
je 0x43521a
push dword [0x53d7c4]
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, 1
jmp 0x435d87
lea eax, [ebp - 0x1bb4]
mov dword [ebp - 0x1bb4], 0
push eax
mov dword [ebp - 0x1bb0], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x1bb4]
push eax
push edi
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [0x53ad20]
sub ecx, dword [0x53ad34]
mov edx, dword [ebp - 0x1bb4]
lea eax, [ecx - 0x32]
cmp edx, eax
jl 0x43529f
lea eax, [ecx - 0xa]
cmp edx, eax
jg 0x43529f
mov ecx, dword [0x53ad24]
sub ecx, dword [0x53ad30]
mov edx, dword [ebp - 0x1bb0]
lea eax, [ecx - 0x32]
cmp edx, eax
jl 0x43529f
lea eax, [ecx - 0xa]
cmp edx, eax
jg 0x43529f
push dword [0x53d7bc]
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, 1
jmp 0x435d87
push dword [0x53d7b4]
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, 1
jmp 0x435d87
mov eax, dword [0x53ad5c]
test eax, eax
je case.default.0x435392
cmp byte [eax + 0xa0], 0
je case.default.0x435392
mov esi, dword [sym.imp.USER32.dll_GetRawInputData]
lea eax, [ebp - 0x1d68]
push 0x10
push eax
push 0
push 0x10000003
push dword [ebp - 0x1d9c]
call esi
push dword [ebp - 0x1d68]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
push 0x10
lea ecx, [ebp - 0x1d68]
mov dword [ebp - 0x18], eax
push ecx
push eax
push 0x10000003
push dword [ebp - 0x1d9c]
call esi
mov esi, dword [ebp - 0x18]
test eax, eax
je 0x435353
cmp dword [esi + 8], 0
je 0x435353
mov eax, dword [esi]
test eax, eax
jne 0x435338
movzx eax, word [esi + 0x14]
sub eax, 1
jmp 0x435344
cmp eax, 1
jne 0x435353
cmp dword [esi + 0x18], 0x100
jne 0x435353
push 0
push 0
push 2
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp case.default.0x435392
sub eax, 0x100
je 0x435652
sub eax, 4
je case.0x4334a4.2
sub eax, 0xf
jne case.default.0x435392
mov eax, dword [ebx + 0x10]
dec eax
cmp eax, 5
ja case.default.0x435392
jmp dword [eax*4 + 0x435f9c]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov esi, eax
cmp esi, edi
je case.default.0x435392
push esi
call dword [sym.imp.USER32.dll_GetParent]
cmp eax, edi
je case.default.0x435392
push esi
mov esi, dword [sym.imp.USER32.dll_GetParent]
call esi
push eax
call esi
cmp eax, edi
je case.default.0x435392
push edi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.default.0x435392
push edi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je case.default.0x435392
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x435392
push 0
push 0
push 0xf
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.default.0x435392
push 0x51fa90
push str.Qt5QWindowOwnDCIcon
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, eax
push esi
call dword [sym.imp.USER32.dll_IsWindow]
mov ecx, dword [0x53ad44]
test eax, eax
setne al
mov byte [ebp - 0x1d8d], al
cmp ecx, 0x64
jg 0x43544b
test esi, esi
je 0x43543f
test al, al
jne 0x43544b
inc ecx
mov dword [0x53ad44], ecx
jmp case.default.0x435392
push 3
push edi
call dword [sym.imp.USER32.dll_KillTimer]
test esi, esi
je case.default.0x435392
cmp byte [ebp - 0x1d8d], 0
je case.default.0x435392
cmp dword [0x53ad5c], 0
je case.default.0x435392
call fcn.00437fc0
jmp case.default.0x435392
push 0
push str.HYVideoScreenSaverCore
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, eax
push esi
call dword [sym.imp.USER32.dll_IsWindow]
mov ecx, dword [0x53ad40]
test eax, eax
setne al
mov byte [ebp - 0x1d8d], al
cmp ecx, 0x64
jg 0x4354c0
test esi, esi
je 0x4354b4
test al, al
jne 0x4354c0
inc ecx
mov dword [0x53ad40], ecx
jmp case.default.0x435392
push 4
push edi
call dword [sym.imp.USER32.dll_KillTimer]
test esi, esi
je case.default.0x435392
cmp byte [ebp - 0x1d8d], 0
je case.default.0x435392
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x435469
cmp dword [0x53ad5c], 0
je case.default.0x435392
call fcn.00438060
jmp case.default.0x435392
cmp dword [0x53ad5c], 0
je case.default.0x435392
call fcn.00438220
jmp case.default.0x435392
cmp eax, 0x401
ja 0x435872
je 0x4355e3
sub eax, 0x202
je 0x435553
sub eax, 2
je 0x435652
sub eax, 3
je 0x435652
jmp case.default.0x435392
lea eax, [ebp - 0x1bb4]
mov dword [ebp - 0x1bb4], 0
push eax
mov dword [ebp - 0x1bb0], 0
call esi
lea eax, [ebp - 0x1bb4]
push eax
push edi
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [0x53ad20]
sub ecx, dword [0x53ad34]
mov edx, dword [ebp - 0x1bb4]
lea eax, [ecx - 0x32]
cmp edx, eax
jl 0x4355e3
lea eax, [ecx - 0xa]
cmp edx, eax
jg 0x4355e3
mov ecx, dword [0x53ad24]
sub ecx, dword [0x53ad30]
mov edx, dword [ebp - 0x1bb0]
lea eax, [ecx - 0x32]
cmp edx, eax
jl 0x4355e3
lea eax, [ecx - 0xa]
cmp edx, eax
jg 0x4355e3
push edi
push 0x4364c0
push edi
push 0x7d3
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov eax, 1
jmp 0x435d87
lea eax, [ebp - 0x1bb4]
mov dword [ebp - 0x1bb4], 0
push eax
mov dword [ebp - 0x1bb0], 0
call esi
lea eax, [ebp - 0x1bb4]
push eax
push edi
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [0x53ad20]
sub ecx, dword [0x53ad34]
mov edx, dword [ebp - 0x1bb4]
lea eax, [ecx - 0x32]
cmp edx, eax
jl 0x435652
lea eax, [ecx - 0xa]
cmp edx, eax
jg 0x435652
mov ecx, dword [0x53ad24]
sub ecx, dword [0x53ad30]
mov edx, dword [ebp - 0x1bb0]
lea eax, [ecx - 0x32]
cmp edx, eax
jl 0x435652
lea eax, [ecx - 0xa]
cmp edx, eax
jle 0x4352ab
cmp dword [0x53ad48], 2
jl case.0x4334a4.2
cmp dword [0x5340c4], 8
mov ecx, 0x5340b0
cmovae ecx, dword [0x5340b0]
cmp dword [0x5340c0], 2
jne case.0x4334a4.2
mov esi, 2
mov edx, 0x51fbb0
mov ax, word [ecx]
cmp ax, word [edx]
jne case.0x4334a4.2
add ecx, 2
add edx, 2
sub esi, 1
jne 0x435681
jmp case.default.0x435392
push 0
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x4356b1
call dword [sym.imp.USER32.dll_EmptyClipboard]
call dword [sym.imp.USER32.dll_CloseClipboard]
mov edx, dword [0x53cd84]
push ecx
mov ecx, dword [0x53cd80]
call fcn.004372b0
mov eax, dword [0x53cd80]
add esp, 4
cmp dword [0x53ad5c], 0
mov dword [0x53cd84], eax
je 0x4356e8
call fcn.00438410
mov dword [0x53ad5c], 0
mov esi, dword [sym.imp.USER32.dll_KillTimer]
push 3
push edi
call esi
push 4
push edi
call esi
push 5
push edi
call esi
push 6
push edi
call esi
call fcn.00431d10
mov esi, dword [0x53ad3c]
test esi, esi
je 0x435726
mov ecx, esi
call fcn.0047a510
push 0xdc
push esi
call fcn.0048e9ad
add esp, 8
mov esi, dword [0x53ad68]
test esi, esi
je 0x435798
mov dword [ebp - 4], 3
mov ecx, dword [esi]
test ecx, ecx
je 0x435767
mov dl, byte [esi + 4]
test dl, dl
je 0x43574a
cmp byte [ecx + 0x6c], 0
jne 0x435767
test ecx, ecx
je 0x435f4b
test dl, dl
je 0x435760
cmp byte [ecx + 0x6c], 0
jne 0x435f4b
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [esi]
mov byte [ebp - 4], 4
test ecx, ecx
je 0x43578d
or eax, 0xffffffff
lock xadd dword [ecx + 4], eax
jne 0x43578d
mov edx, dword [ecx + 0x78]
test edx, edx
je 0x435787
mov eax, dword [edx]
push ecx
mov ecx, edx
jmp 0x43578b
mov eax, dword [ecx]
push 1
call dword [eax]
push 8
push esi
call fcn.0048e9ad
add esp, 8
mov eax, dword [0x53acd4]
mov esi, dword [sym.imp.gdiplus.dll_GdipFree]
mov ecx, dword [sym.imp.gdiplus.dll_GdipDeleteFont]
mov dword [ebp - 0x1bac], eax
test eax, eax
je 0x4357cf
push dword [eax]
call ecx
push dword [ebp - 0x1bac]
call esi
mov ecx, dword [sym.imp.gdiplus.dll_GdipDeleteFont]
mov dword [0x53acd4], 0
mov eax, dword [0x53acd0]
mov dword [ebp - 0x1bac], eax
test eax, eax
je 0x4357f4
push dword [eax]
call ecx
push dword [ebp - 0x1bac]
call esi
mov dword [0x53acd0], 0
mov eax, dword [0x53acdc]
mov ecx, dword [sym.imp.gdiplus.dll_GdipDeleteFontFamily]
mov dword [ebp - 0x1bac], eax
test eax, eax
je 0x43581b
push dword [eax]
call ecx
push dword [ebp - 0x1bac]
call esi
mov ecx, dword [sym.imp.gdiplus.dll_GdipDeleteFontFamily]
mov eax, dword [0x53acd8]
mov dword [ebp - 0x1bac], eax
test eax, eax
je 0x435836
push dword [eax]
call ecx
push dword [ebp - 0x1bac]
call esi
cmp dword [0x53ad54], 0
je 0x435865
push dword [0x53ad58]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
push 0x10
push dword [0x53ad54]
call fcn.0048e9ad
add esp, 8
mov dword [0x53ad54], 0
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp case.default.0x435392
sub eax, 0x402
je 0x435c11
sub eax, 1
je 0x4358a1
sub eax, 1
jne case.default.0x435392
cmp dword [0x53ad5c], eax
je case.default.0x435392
call fcn.004384c0
jmp case.default.0x435392
push 0
push 0
push 0
push 0xffff
push 0x8001
call dword [sym.imp.USER32.dll_mouse_event]
cmp dword [0x53ad5c], 0
je 0x4358cf
call fcn.00438410
mov dword [0x53ad5c], 0
mov esi, dword [0x53cd84]
mov eax, 0x38e38e39
mov ecx, esi
sub ecx, dword [0x53cd80]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x435afa
mov eax, dword [esi - 0x24]
lea ecx, [ebp - 0x1d84]
mov dword [ebp - 0x1d8c], eax
mov eax, dword [esi - 0x20]
mov dword [ebp - 0x1d88], eax
lea eax, [esi - 0x1c]
push eax
call fcn.0041a300
mov al, byte [esi - 4]
sub esp, 0x18
mov byte [ebp - 0x1d6c], al
mov ecx, esp
lea eax, [ebp - 0x1d84]
push eax
call fcn.0041a300
sub esp, 0x18
mov ecx, esp
push 0x534098
call fcn.0041a300
push dword [ebp - 0x1d6c]
mov ecx, dword [ebp - 0x1d8c]
mov edx, edi
push dword [ebp - 0x1d88]
call fcn.00437d50
mov esi, dword [0x53cd84]
add esp, 0x38
mov dword [0x53ad5c], eax
mov ecx, dword [esi - 8]
cmp ecx, 8
jb 0x43599f
mov eax, dword [esi - 0x1c]
lea ecx, [ecx*2 + 2]
cmp ecx, 0x1000
jb 0x435995
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435eec
mov eax, edx
push ecx
push eax
call fcn.0048e9ad
add esp, 8
xor eax, eax
mov dword [esi - 0xc], 0
mov dword [esi - 8], 7
mov word [esi - 0x1c], ax
sub dword [0x53cd84], 0x24
cmp dword [ebp - 0x1d88], 2
jne 0x4359cd
call fcn.004386b0
jmp 0x435ab1
mov eax, dword [0x5340ac]
mov ecx, 0x534098
mov edx, dword [0x534098]
cmp eax, 8
mov esi, dword [0x5340a8]
cmovae ecx, edx
cmp esi, 1
jne 0x435a2e
mov edx, 0x51fa48
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x435a1d
add ecx, 2
add edx, 2
sub esi, 1
jne 0x4359f3
push esi
push 0x32
push 4
push edi
mov dword [0x53ad40], esi
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x435ab1
mov eax, dword [0x5340ac]
mov edx, dword [0x534098]
mov esi, dword [0x5340a8]
cmp eax, 8
mov ecx, 0x534098
cmovae ecx, edx
cmp esi, 1
jne 0x435a69
mov edx, 0x51f504
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x435a58
add ecx, 2
add edx, 2
sub esi, 1
jne 0x435a43
jmp 0x435a93
mov eax, dword [0x5340ac]
mov edx, dword [0x534098]
mov esi, dword [0x5340a8]
cmp eax, 8
mov ecx, 0x534098
cmovae ecx, edx
cmp esi, 1
jne 0x435aac
mov edx, 0x51fa4c
nop
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x435aac
add ecx, 2
add edx, 2
sub esi, 1
jne 0x435a80
push 0
push 0x32
push 3
push edi
mov dword [0x53ad44], 0
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x435ab1
call fcn.00437fc0
mov edx, dword [ebp - 0x1d70]
cmp edx, 8
jb case.default.0x435392
mov ecx, dword [ebp - 0x1d84]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x435aeb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435f61
push edx
push ecx
call fcn.0048e9ad
add esp, 8
jmp case.default.0x435392
mov eax, dword [0x5340ac]
mov ecx, 0x534098
mov edx, dword [0x534098]
cmp eax, 8
mov esi, dword [0x5340a8]
cmovae ecx, edx
cmp esi, 1
jne 0x435b4f
mov edx, 0x51fa48
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x435b3e
add ecx, 2
add edx, 2
sub esi, 1
jne 0x435b20
push esi
push str.HYVideoScreenSaverCore
jmp 0x435bbd
mov eax, dword [0x5340ac]
mov edx, dword [0x534098]
mov esi, dword [0x5340a8]
cmp eax, 8
mov ecx, 0x534098
cmovae ecx, edx
cmp esi, 1
jne 0x435b8a
mov edx, 0x51f504
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x435b79
add ecx, 2
add edx, 2
sub esi, 1
jne 0x435b64
jmp 0x435bb3
mov eax, dword [0x5340ac]
mov edx, dword [0x534098]
mov esi, dword [0x5340a8]
cmp eax, 8
mov ecx, 0x534098
cmovae ecx, edx
cmp esi, 1
jne 0x435bdf
mov edx, 0x51fa4c
nop
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x435bdf
add ecx, 2
add edx, 2
sub esi, 1
jne 0x435ba0
push 0x51fa90
push str.Qt5QWindowOwnDCIcon
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, eax
test esi, esi
je 0x435bdf
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0xffffffdf
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0xffffffffffffffec
push edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0xffffffdf
push eax
push 0xffffffffffffffec
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
push 0x3e8
push 1
push edi
call dword [sym.imp.USER32.dll_SetTimer]
jmp case.default.0x435392
push 0x51c79c
lea ecx, [ebp - 0x1c44]
call fcn.0041a2b0
push 0x51c79c
lea ecx, [ebp - 0x1c5c]
call fcn.0041a2b0
push 1
push 0x51f504
mov ecx, 0x534098
call fcn.0041a5b0
push 0x51f504
lea ecx, [ebp - 0x1cd4]
call fcn.0041a2b0
push str.type
lea ecx, [ebp - 0x1d80]
call fcn.0041a2b0
push 0x534098
lea edx, [ebp - 0x1cd4]
lea ecx, [ebp - 0x1d80]
call fcn.0047cf60
add esp, 4
lea ecx, [ebp - 0x1d80]
call fcn.0041a210
lea ecx, [ebp - 0x1cd4]
call fcn.0041a210
push 0x534098
lea edx, [ebp - 0x1c5c]
lea ecx, [ebp - 0x1c44]
call fcn.004314d0
add esp, 4
lea ecx, [ebp - 0x1d80]
push str.type
call fcn.0041a2b0
mov edx, 0x534098
lea ecx, [ebp - 0x1d80]
call fcn.0047cde0
lea ecx, [ebp - 0x1d80]
call fcn.0041a210
call fcn.00431d10
mov ecx, edi
call fcn.004319d0
mov eax, dword [0x5340ac]
mov ecx, 0x534098
mov edx, dword [0x534098]
cmp eax, 8
mov esi, dword [0x5340a8]
cmovae ecx, edx
cmp esi, 1
jne 0x435db8
mov edx, 0x51fa48
nop dword [eax + eax]
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x435da7
add ecx, 2
add edx, 2
sub esi, 1
jne 0x435d10
cmp dword [ebp - 0x1c30], 8
lea eax, [ebp - 0x1c44]
push 5
cmovae eax, dword [ebp - 0x1c44]
push esi
push str._vss
push eax
push str.open
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, edi
call fcn.00431370
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
lea ecx, [ebp - 0x1c5c]
call fcn.0041a210
lea ecx, [ebp - 0x1c44]
call fcn.0041a210
push dword [ebp - 0x1d9c]
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push edi
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0048e99c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
mov eax, dword [0x5340ac]
mov edx, dword [0x534098]
mov esi, dword [0x5340a8]
cmp eax, 8
mov ecx, 0x534098
cmovae ecx, edx
cmp esi, 1
jne 0x435df6
mov edx, 0x51f504
nop dword [eax]
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x435de5
add ecx, 2
add edx, 2
sub esi, 1
jne 0x435dd0
jmp 0x435e27
mov eax, dword [0x5340ac]
mov edx, dword [0x534098]
mov esi, dword [0x5340a8]
cmp eax, 8
mov ecx, 0x534098
cmovae ecx, edx
cmp esi, 1
jne 0x435d50
mov edx, 0x51fa4c
nop
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x435d50
add ecx, 2
add edx, 2
sub esi, 1
jne 0x435e10
push 0x200
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.004bcaf0
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x10
push 0x100
push eax
mov eax, edi
cdq
push edx
push eax
call fcn.004ce001
add esp, 0x14
lea eax, [ebp - 0x220]
lea ecx, [ebp - 0x1c10]
push eax
call fcn.0041a2b0
push 1
push 0x51fbac
lea ecx, [ebp - 0x1c10]
call fcn.0041a710
cmp dword [0x5340ac], 8
lea ecx, [ebp - 0x1c10]
push dword [0x5340a8]
mov eax, 0x534098
cmovae eax, dword [0x534098]
push eax
call fcn.0041a710
cmp dword [ebp - 0x1bfc], 8
lea ecx, [ebp - 0x1c10]
push 5
cmovae ecx, dword [ebp - 0x1c10]
lea eax, [ebp - 0x1c5c]
cmp dword [ebp - 0x1c48], 8
push 0
cmovae eax, dword [ebp - 0x1c5c]
push ecx
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x1c10]
call fcn.0041a210
jmp 0x435d57
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
mov edx, 4
lea ecx, [ebp - 0x1da0]
call fcn.00423c80
push eax
call fcn.0049214a
call fcn.004c5929
nop
stosd dword es:[edi], eax
xor al, 67
add byte [ecx + 0x2d004356], bl
dec ebp
inc ebx
add byte [ecx], ah
push ecx
inc ebx
add byte [ebp + ebx*2 + 0x43], dh
add byte [eax], al
add dword [esp + eax], eax
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, byte [esp + eax]
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add ebx, dword [ecx - 167754925]
push ebx
inc ebx
add byte [eax], cl
push esp
inc ebx
add byte [eax - 0x9ffbcac], al
push esp
inc ebx
add byte [0xcc004355], cl
int3