Function at 0x4a2eb5
Capabilities:
Allocate thread local storage
Get disk information

Disassembly:
mov eax, 0x4bce71
call fcn.004bbda0
sub esp, 0x1d4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x3c], 0x4aa0d722
xor ebx, ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 0x28abf8b2
mov dword [ebp - 0x30], 0x509c
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0xb0]
call fcn.00406726
mov dword [ebp - 0x14], ebx
jmp 0x4a2f10
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x134], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x4a2eff
mov dword [ebp - 0x14], ebx
jmp 0x4a2f2d
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb0]
mov dword [eax + ecx*4], 0x2e63372
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x4a2f1a
mov dword [ebp - 0x30], esi
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov dword [ebp - 0x18], 0x44a2
cmp dword [ebp - 0x18], 0x4652
jle 0x4a2fb2
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
sar eax, cl
and eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x1c4]
call fcn.00401a01
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4a2f78
mov eax, dword [eax]
push eax
call fcn.004a68c7
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1c4]
call fcn.00406da6
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x3a6f
mov eax, dword [ebp - 0x2c]
jl 0x4a2f5c
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x6dfb
jl 0x4a2f57
inc edi
cmp edi, 0x5d56
jl 0x4a2f52
mov eax, dword [ebp - 0xb0]
mov dword [eax], 0xfffffff9
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x18], 0x4490
jge 0x4a2fd5
push str.swwczuoge_viqdjwgbs_wagn_imesiuug_kfayihrx_vuqxgrq_uhbwpp
call fcn.004a68c7
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x4a2ffe
lea ecx, [ebp - 0xb0]
call fcn.004067f8
mov dword [ebp - 0x20], 0x6da6
cmp dword [ebp - 0x20], 0x7027
jle 0x4a307c
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x18], 0x7577
mov edi, eax
mov dword [ebp - 0x30], 0x5c00
mov dword [ebp - 0x38], ebx
mov eax, edi
mov ecx, ebx
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xace058
call fcn.004063d1
inc ebx
cmp ebx, 0x7f69
jl 0x4a303b
dec edi
dec dword [ebp - 0x30]
push 0
pop ebx
jne 0x4a3038
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
add eax, edi
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x18]
jne 0x4a302f
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x11ca
jl 0x4a3023
push 2
pop edi
mov dword [ebp - 4], edi
cmp dword [ebp - 0x20], 0x6b04
jge 0x4a309a
mov edx, str.jjnenwte_dxbhah_prrxj_rtyebix_zwjoq_tjnt_bvp_ktinlnngn_kmf_shk_xuvjkbbsv
mov ecx, 0xace058
call fcn.00409042
or dword [ebp - 4], 0xffffffff
jmp 0x4a30c6
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x14], eax
push esi
lea ecx, [ebp - 0x140]
call fcn.00406726
mov dword [ebp - 0x24], ebx
jmp 0x4a30fa
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], 0x2d3d4782
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x4a30e7
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], 0x6ce125d1
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, 0xcd9d75
setne cl
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 5
setg al
inc eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp dword [ebp - 0x38], eax
setle cl
xor eax, eax
cmp ecx, 0xfffffff8
setne al
imul eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
cmp eax, 6
sbb eax, eax
neg eax
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x28], ebx
jmp 0x4a318d
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4a318a
push ebx
push ebx
push 0x223
push ebx
push ebx
call dword [sym.imp.USER32.dll_CreateDialogParamA]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x4a3172
lea ecx, [ebp - 0x140]
call fcn.004067f8
mov eax, dword [0xacf360]
test al, 1
jne 0x4a321b
or eax, esi
mov dword [0xacf360], eax
mov dword [0xacf370], ebx
mov dword [0xacf374], ebx
push ebx
push ebx
call fcn.00408f41
mov dword [0xacf370], eax
mov dword [0xacf378], ebx
mov dword [0xacf380], ebx
mov dword [0xacf38c], 0x3f800000
mov dword [ebp - 0x80], eax
mov dword [0xacf37c], ebx
lea eax, [ebp - 0x80]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x184]
push eax
mov ecx, 0xacf378
call fcn.00408c77
mov dword [0xacf384], 7
mov dword [0xacf388], 8
push 0x4bd0fb
call fcn.004a689d
pop ecx
imul eax, dword [ebp - 0x44], 0x2710
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
call fcn.004a41fc
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], 0x624039b6
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4a3253
push ebx
push ebx
push 0x17c2
call dword [sym.imp.USER32.dll_InvalidateRect]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4a3262
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x4a3466
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x28], 0xd313dd33
mov dword [ebp - 0x20], 0x85f1871d
mov dword [ebp - 0x3c], 0x177c4186
mov dword [ebp - 0x3c], 0xfffffffb
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x28], 0x1a
cmp dword [ebp - 0x28], 0xffffffe8
jl 0x4a41e0
mov dword [ebp - 0x14], 0xfe01bd97
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x3c], 0x8c37f2e4
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x24], ebx
jmp 0x4a32e6
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb8], 0xfb361f3d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x4a32d5
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 0x1a
jle 0x4a345e
push 4
lea ecx, [ebp - 0xe8]
call fcn.00406726
mov dword [ebp - 0x2c], 0x7bbda73a
mov dword [ebp - 0x30], 0x3254
cmp dword [ebp - 0x30], 0x338c
jle 0x4a334a
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov eax, ebx
and eax, edi
cdq
push edx
push eax
mov ecx, 0xace058
call fcn.004063d1
inc ebx
cmp ebx, 0x3aa
jl 0x4a3321
inc edi
cmp edi, 0x5e3d
push 0
pop ebx
jl 0x4a331e
push 2
pop edi
mov dword [ebp - 0x3c], 0x2f400034
mov dword [ebp - 4], 4
cmp dword [ebp - 0x30], 0x30e5
jge 0x4a3370
mov edx, str.ammqhyo_qmnuruluc_xisq_hnf_hhih
mov ecx, 0xace058
call fcn.00409042
or dword [ebp - 4], 0xffffffff
jmp 0x4a339c
mov dword [ebp - 0x24], ebx
jmp 0x4a33b0
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xe8]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x4a33a1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
je 0x4a3408
mov esi, dword [ebp - 0xe8]
mov ecx, dword [esi + 0xc]
sub ecx, 0x77f17245
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setg cl
mov eax, 0xa66fa4bc
cmp eax, ecx
sbb eax, eax
inc eax
xor ecx, ecx
cmp eax, 3
setl cl
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp ecx, eax
setg dl
sub edx, dword [esi + 0xc]
neg edx
sbb edx, edx
inc edx
mov dword [esi + 0xc], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
setl dl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x14]
je 0x4a342a
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], ebx
jmp 0x4a343c
mov dword [ebp - 0x38], 0x9efec1a2
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x2b
jle 0x4a3432
dec dword [ebp - 0xb4]
lea ecx, [ebp - 0xe8]
call fcn.004067f8
inc dword [ebp - 0x14]
xor esi, esi
inc esi
jmp 0x4a32ee
dec dword [ebp - 0x28]
jmp 0x4a32ab
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x20], 0x1b6b
push edi
lea ecx, [ebp - 0xd0]
call fcn.00406726
mov dword [ebp - 0x34], 0xac6914f0
mov dword [ebp - 0x30], 0xfff9
mov dword [ebp - 0x34], 0x361ae7d5
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x24], ebx
jmp 0x4a34b7
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xd0]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x4a34a4
mov dword [ebp - 0x14], 0xfffffffe
jmp 0x4a35ae
mov dword [ebp - 0x18], 0xd21dfe4b
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x3c], 0xffffffff
push 3
lea ecx, [ebp - 0x14c]
call fcn.00406726
mov eax, 0xbb32
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x34], 0xaa9c1c73
mov dword [ebp - 0x24], ebx
jmp 0x4a351a
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], 0xbe2d3d47
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x4a3507
cmp dword [ebp - 0x18], 0x836ccb03
ja 0x4a356f
cmp dword [ebp - 0x14], ebx
je 0x4a3536
cmp dword [ebp - 0x18], ebx
je 0x4a3536
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jne 0x4a3544
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jg 0x4a3556
cmp dword [ebp - 0x14], ebx
mov ecx, ebx
je 0x4a3558
mov ecx, esi
mov eax, dword [ebp - 0x14]
sub ecx, eax
je 0x4a3566
cmp dword [ebp - 0x28], ebx
mov eax, esi
jne 0x4a3568
mov eax, ebx
cmp eax, dword [ebp - 0x28]
mov eax, ebx
jge 0x4a3571
mov eax, esi
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0xa
jmp 0x4a359a
mov dword [ebp - 0x18], ebx
jmp 0x4a358f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1ac], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x4a3582
dec dword [ebp - 0x34]
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff2
jg 0x4a357d
lea ecx, [ebp - 0x14c]
call fcn.004067f8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1a
je 0x4a34c8
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x14], ebx
jne 0x4a3600
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
sub edx, eax
mov eax, dword [ebp - 0xd0]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x14]
add ecx, edx
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0x20]
imul edx, dword [ebp - 0x20]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
add eax, 0xc5fd78d
cmp eax, dword [ebp - 0x20]
mov edx, ebx
jle 0x4a3602
mov edx, esi
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setle cl
add ecx, 0x6546d79
mov dword [ebp - 0x34], ecx
je 0x4a361a
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
xor edx, edx
cmp eax, esi
setg dl
add edx, 9
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x30]
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
neg eax
sbb eax, eax
inc eax
push 0xfffffffffffffff9
pop edx
sub edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setne cl
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x30]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x38], edx
lea ecx, [ebp - 0xd0]
call fcn.004067f8
mov eax, dword [0xacf360]
test al, 2
jne 0x4a36f6
or eax, edi
mov dword [0xacf360], eax
mov dword [0xacf340], ebx
mov dword [0xacf344], ebx
push ebx
push ebx
call fcn.00408f41
mov dword [0xacf340], eax
mov dword [0xacf348], ebx
mov dword [0xacf350], ebx
mov dword [0xacf35c], 0x3f800000
mov dword [ebp - 0x84], eax
mov dword [0xacf34c], ebx
lea eax, [ebp - 0x84]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x110]
push eax
mov ecx, 0xacf348
call fcn.00408c77
mov dword [0xacf354], 7
mov dword [0xacf358], 8
push 0x4bd0f6
call fcn.004a689d
pop ecx
mov dword [ebp - 0x20], 0x53b26bdd
push esi
lea ecx, [ebp - 0xdc]
call fcn.00406726
mov dword [ebp - 0x38], 0xd1456b86
mov dword [ebp - 0x18], ebx
jmp 0x4a3728
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xdc]
mov dword [eax + ecx*4], 0xdae5a60d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x4a3715
mov dword [ebp - 0x20], 0xfffffffa
jmp 0x4a3786
push edi
lea ecx, [ebp - 0x180]
call fcn.00406726
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x4a375e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x180]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x4a374e
mov eax, dword [ebp - 0xdc]
mov dword [eax], ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
test eax, eax
setg cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x180]
call fcn.004067f8
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe5
jg 0x4a3736
lea ecx, [ebp - 0xdc]
call fcn.004067f8
xorps xmm0, xmm0
movdqu xmmword [ebp - 0xa4], xmm0
movdqa xmm0, xmmword [0xac2dd0]
movdqu xmmword [ebp - 0x1a4], xmm0
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x1a4]
push eax
push ebx
lea ecx, [ebp - 0x5c]
call fcn.004096b2
mov dword [ebp - 0x14], 0xd4081c29
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x4a388b
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], 0xfffffffe
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5c]
cmp dword [eax + ecx*4], ebx
jne 0x4a380f
cmp dword [ebp - 0x14], ebx
mov dword [ebp - 0x34], ebx
je 0x4a3812
mov dword [ebp - 0x34], esi
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x2c], edi
xor edx, edx
mov eax, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x34]
cmp edi, dword [eax + ecx*4]
sete dl
mov ecx, dword [ebp - 0x30]
sub ecx, edx
neg ecx
sbb ecx, ecx
add ecx, 7
mov eax, dword [ebp - 0x38]
imul ecx, dword [eax + 8]
xor eax, eax
mov edx, dword [ebp - 0x5c]
cmp dword [edx + esi*4], ecx
setl al
xor ecx, ecx
cmp eax, 0x1a93
setl cl
xor eax, eax
mov edi, dword [ebp - 0x2c]
cmp ecx, dword [edx + edi*4]
setl al
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x34]
add eax, dword [ecx + edx*4]
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ecx]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x14]
push 1
pop esi
jns 0x4a37f5
push 2
pop edi
lea ecx, [ebp - 0x5c]
call fcn.004067f8
lea eax, [ebp - 0x44]
push eax
call fcn.004a425e
mov esi, dword [eax]
mov dword [ebp - 0x24], esi
push edi
lea ecx, [ebp - 0xf4]
call fcn.00406726
mov dword [ebp - 0x18], ebx
jmp 0x4a38c1
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf4]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x4a38b2
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4a38d8
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov eax, dword [ebp - 0xf4]
mov dword [eax], 0x4a8c6a53
lea ecx, [ebp - 0xf4]
call fcn.004067f8
mov al, byte [ebp + 0xc]
test al, al
jne 0x4a38fe
test esi, esi
jne 0x4a3bca
mov dword [ebp - 0x18], 0x7f6af112
mov dword [ebp - 0x3c], 0xea41449c
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xffffffed
jge 0x4a39b2
push 3
pop esi
push esi
lea ecx, [ebp - 0x100]
call fcn.00406726
push esi
lea ecx, [ebp - 0x10c]
call fcn.00406726
mov dword [ebp - 0x14], ebx
jmp 0x4a394c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x100]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x4a3939
mov dword [ebp - 0x14], ebx
jmp 0x4a3966
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x4a3956
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4a397b
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x10c]
mov dword [eax], ecx
lea ecx, [ebp - 0x10c]
call fcn.004067f8
lea ecx, [ebp - 0x100]
call fcn.004067f8
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffed
jl 0x4a391c
mov al, byte [ebp + 0xc]
lea ecx, [ebp - 0x1e0]
push ecx
mov dl, al
mov ecx, dword [ebp - 0x44]
call fcn.00498b96
pop ecx
mov esi, eax
lea edi, [ebp - 0xa4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movdqa xmm0, xmmword [0xac2dd0]
movdqu xmmword [ebp - 0x194], xmm0
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x194]
push eax
push ebx
lea ecx, [ebp - 0x50]
call fcn.004096b2
mov dword [ebp - 0x14], 0xd4081c29
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x4a3ab7
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], 0xfffffffe
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
cmp dword [eax + ecx*4], ebx
jne 0x4a3a3d
cmp dword [ebp - 0x14], ebx
mov dword [ebp - 0x34], ebx
je 0x4a3a44
mov dword [ebp - 0x34], 1
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x2c], edi
xor edx, edx
mov eax, dword [ebp - 0x50]
mov edi, dword [ebp - 0x34]
cmp edi, dword [eax + ecx*4]
sete dl
mov ecx, dword [ebp - 0x30]
sub ecx, edx
neg ecx
sbb ecx, ecx
add ecx, 7
mov eax, dword [ebp - 0x38]
imul ecx, dword [eax + 8]
xor eax, eax
mov edx, dword [ebp - 0x50]
cmp dword [edx + esi*4], ecx
setl al
xor ecx, ecx
cmp eax, 0x1a93
setl cl
xor eax, eax
mov edi, dword [ebp - 0x2c]
cmp ecx, dword [edx + edi*4]
setl al
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x34]
add eax, dword [ecx + edx*4]
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ecx]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x14]
jns 0x4a3a23
lea ecx, [ebp - 0x50]
call fcn.004067f8
cmp byte [ebp + 0xc], 0
je 0x4a3adb
mov ecx, dword [ebp - 0x9c]
test ecx, ecx
je 0x4a3adb
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x24]
push 2
pop edi
test ecx, ecx
jne 0x4a3bca
cmp dword [ebp - 0xa4], ecx
jle 0x4a3bca
mov dword [ebp - 0x38], 0xfffffffd
mov dword [ebp - 0x30], 0xffffffff
xor esi, esi
inc esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x3c], 0x58bac04e
mov dword [ebp - 0x3c], 0xfffffffb
mov dword [ebp - 0x3c], 0x3707822e
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x3c], 0xf5f49900
mov dword [ebp - 0x3c], 0xfdcba86b
mov dword [ebp - 0x3c], 4
push edi
lea ecx, [ebp - 0x11c]
call fcn.00406726
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x3c], 0x41022496
mov dword [ebp - 0x34], 0x2e5f58cd
mov dword [ebp - 0x14], ebx
jmp 0x4a3b71
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1d0], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x4a3b60
mov dword [ebp - 0x14], ebx
jmp 0x4a3b8f
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a3b7c
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x34]
lea ecx, [ebp - 0x11c]
call fcn.004067f8
mov ecx, dword [ebp - 0xa0]
test ecx, ecx
je 0x4a3bcd
call fcn.004a2999
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004a425e
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
jmp 0x4a3bcd
xor esi, esi
inc esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], 0xe3e7631
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x34], 0xfc53d8b3
push 3
lea ecx, [ebp - 0xc4]
call fcn.00406726
mov dword [ebp - 0x18], ebx
jmp 0x4a3c06
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 0xdd5c0aec
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x4a3bf3
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4a3c3d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x18ed
push 0xc16
push 0x2120
push 0x93a
push 0x1fd6
call dword [sym.imp.GDI32.dll_CreateFontA]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov eax, dword [ebp - 0x2c]
imul eax, ecx
xor edx, edx
cmp eax, 0xa9da
setg dl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x28]
je 0x4a3c74
cmp dword [ebp - 0x28], ebx
mov edx, esi
jne 0x4a3c76
mov edx, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, edx
setge cl
add ecx, dword [ebp - 0x28]
je 0x4a3c94
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], 0x6986d6
jmp 0x4a3d2a
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x38], 0x9b4ccc41
mov dword [ebp - 0x20], 0xffffffe3
jmp 0x4a3d24
push 3
lea ecx, [ebp - 0x130]
call fcn.00406726
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x4a3cd3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x4a3cc4
cmp dword [ebp - 0x2c], ebx
jne 0x4a3cfb
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x30]
add eax, dword [ecx + 4]
jne 0x4a3cfb
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x30], ebx
je 0x4a3d07
cmp dword [ebp - 0x38], ebx
mov edx, esi
jne 0x4a3d09
mov edx, ebx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
add eax, edx
add ecx, eax
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x130]
call fcn.004067f8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffa
jl 0x4a3cab
lea ecx, [ebp - 0xc4]
call fcn.004067f8
lea ecx, [ebp - 0xa4]
call fcn.004a2597
mov dword [ebp - 0x20], 0x1afd
cmp dword [ebp - 0x20], 0x1b4a
jle 0x4a3dc4
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov edx, edi
mov ecx, eax
shl edx, cl
mov dword [ebp - 0x38], edx
mov edi, edx
mov ecx, ebx
mov dword [ebp - 0x34], ecx
mov ebx, dword [ebp - 0x30]
mov eax, ebx
cdq
idiv ecx
or edx, edi
mov eax, edx
cdq
push edx
push eax
mov ecx, 0xace058
call fcn.004063d1
mov ecx, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x2b37
jl 0x4a3d70
inc ebx
mov dword [ebp - 0x30], ebx
cmp ebx, 0x16e7
push 0
pop ebx
jl 0x4a3d68
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x1be4
mov edi, dword [ebp - 0x18]
jl 0x4a3d5a
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x328d
jl 0x4a3d55
push 2
pop edi
mov dword [ebp - 4], 6
cmp dword [ebp - 0x20], 0x1877
jge 0x4a3de3
mov edx, str.ednnh_vhnoeriux_ruly_mvx_tvyjxayyg_eostriul_wnusjold
mov ecx, 0xace058
call fcn.00409042
or dword [ebp - 4], 0xffffffff
jmp 0x4a3e0f
mov dword [ebp - 0x18], ebx
jmp 0x4a3e25
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x90], 0xe1757117
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x4a3e14
mov dword [ebp - 0x88], ebx
jmp 0x4a3e76
mov dword [ebp - 0x18], 9
mov dword [ebp - 0x18], 0xffffffe3
jmp 0x4a3e6a
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4a3e67
push 0xd92
push 0x18f2
push 0x9d6
call dword [sym.imp.GDI32.dll_GetPixel]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe9
jl 0x4a3e43
dec dword [ebp - 0x88]
cmp dword [ebp - 0x88], 0xffffffef
jne 0x4a3e33
cmp dword [ebp - 0x24], 0
je 0x4a3f69
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], ebx
jmp 0x4a3ea2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x124], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x4a3e91
mov dword [ebp - 0x20], ebx
jmp 0x4a3eb9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x124], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x4a3eac
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4a3eda
push ebx
push ebx
push 0x19e5
push 0x17f6
push ebx
call dword [sym.imp.USER32.dll_InsertMenuW]
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x24]
call fcn.004a2b7c
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x18], ebx
jmp 0x4a3efe
mov ecx, dword [ebp - 0x18]
mov dword [ebp + ecx*4 - 0x78], 0xfffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x4a3ef0
mov dword [ebp - 0x24], ebx
jmp 0x4a3f45
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x18], ebx
jmp 0x4a3f3d
mov dword [ebp - 0x2c], 0xa5043c4a
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jl 0x4a3f33
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4a3f2e
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
dec dword [ebp - 0x2c]
jns 0x4a3f1f
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x78]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x4a3f10
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x4a3f08
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4a3f5b
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
lea eax, [ebp - 0x60]
push eax
call fcn.004a41fc
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
mov dword [ebp - 0x14], 3
mov dword [ebp - 0x2c], 0x70d2
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x38], 0x22525a52
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 0xa
jg 0x4a4180
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x7c], 0x951e
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x40], 0xb39d2057
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xe
jg 0x4a4175
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], ebx
jmp 0x4a3fe5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x158], 0xfffffffd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x4a3fd4
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
imul edx, eax
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x158]
sub edx, eax
mov eax, dword [ebp - 0x7c]
xor ecx, ecx
cmp eax, 0x6e58d020
setl cl
xor eax, eax
cmp ecx, edx
setne al
add eax, dword [ebp - 0x14]
je 0x4a403f
mov dword [ebp - 0x24], ebx
jmp 0x4a4037
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x40], ebx
jne 0x4a40aa
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x10
jne 0x4a402c
jmp 0x4a40aa
mov dword [ebp - 0x18], ebx
jmp 0x4a4051
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x174], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x4a4044
mov dword [ebp - 0x28], ebx
jmp 0x4a4062
inc dword [ebp - 0x34]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jle 0x4a405c
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x174], ebx
je 0x4a407f
cmp dword [ebp - 0x20], ebx
mov eax, esi
jne 0x4a4081
mov eax, ebx
mov dword [ebp - 0x154], eax
mov ecx, 0xa60c437f
cmp ecx, eax
sbb eax, eax
neg eax
cmp eax, 0xc8e4
jle 0x4a40a3
cmp dword [ebp - 0x174], ebx
mov eax, ebx
je 0x4a40a5
mov eax, esi
neg eax
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x19], bl
mov dword [ebp - 0x18], 0x194e
cmp dword [ebp - 0x18], 0x19b8
jle 0x4a4109
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x30]
lea ecx, [eax + edi]
mov eax, ebx
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xace058
call fcn.004063d1
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, 0x3282
jl 0x4a40ca
inc edi
cmp edi, 0x5ba3
push 0
pop ebx
jl 0x4a40c2
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x1f88
jl 0x4a40c0
push 2
pop edi
cmp byte [ebp - 0x19], 0
je 0x4a4122
push ebx
push ebx
push 0x1bc1
push 0x12f4
push ebx
call dword [sym.imp.USER32.dll_ModifyMenuW]
mov dword [ebp - 4], 8
cmp dword [ebp - 0x18], 0x17e7
jge 0x4a4141
mov edx, str.uazfabgvm_motp_mmnt_rpxj_iwavd_lpmewpwmd_nszl_hdsico_uxesqi_plcvmdz_vox_kmvygaq
mov ecx, 0xace058
call fcn.00409042
or dword [ebp - 4], 0xffffffff
jmp 0x4a416d
inc dword [ebp - 0x20]
jmp 0x4a3fb8
mov dword [ebp - 0x18], ebx
inc dword [ebp - 0x14]
jmp 0x4a3f94
cmp dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x2c]
jne 0x4a418b
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0x732b
setne cl
cmp ecx, 0xb90c
jle 0x4a41ab
cmp dword [ebp - 0x14], ebx
mov ecx, esi
jne 0x4a41ad
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x14]
imul eax, ecx
sub eax, dword [ebp - 0x74]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
je 0x4a41cf
cmp dword [ebp - 0x94], ebx
jne 0x4a41d4
cmp dword [ebp - 0x3c], ebx
je 0x4a41d6
mov ebx, esi
cmp ebx, 0xfffffff7
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 8]
mov edi, eax
lea esi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret