Function at 0x405650
Capabilities:
Check for time delay via gettickcount
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52ca97
mov eax, dword fs:[0]
push eax
sub esp, 0x518
mov eax, dword [0x5938b4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4e4], ecx
mov esi, dword [ebp + 8]
push 0x564298
push esi
call fcn.00412fc0
push 0x564298
push esi
call fcn.00413040
add esp, 0x10
mov dword [ebp - 0x90], 0
xor eax, eax
mov dword [ebp - 0x8c], 0
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 7
push 1
push 0x5642a4
mov word [ebp - 0xa0], ax
call fcn.0040e470
push 0x14
push 0x5642a8
lea ecx, [ebp - 0xa0]
mov dword [ebp - 4], 0
call fcn.0040e8a0
cmp dword [ebp - 0x8c], 8
lea eax, [ebp - 0xa0]
mov ecx, esi
cmovae eax, dword [ebp - 0xa0]
cmp dword [esi + 0x14], 8
jb 0x405719
mov ecx, dword [esi]
push dword [ebp - 0x90]
push eax
push 0
push dword [esi + 0x10]
push ecx
call fcn.0040ecf0
add esp, 0x14
cmp eax, 0xffffffff
je 0x40575d
push 1
call fcn.004cb9f0
cmp dword [ebp - 0x8c], 8
lea eax, [ebp - 0xa0]
push 0x563018
cmovae eax, dword [ebp - 0xa0]
push eax
push esi
call fcn.00412ed0
add esp, 0x10
mov dword [ebp - 0x50c], 0
mov dword [ebp - 0x508], 0
mov dword [ebp - 0x504], 0
lea eax, [ebp - 0x50c]
mov byte [ebp - 4], 1
push eax
push 0x20
push esi
call fcn.00417470
mov edi, dword [ebp - 0x50c]
add esp, 0xc
cmp edi, dword [ebp - 0x508]
je 0x4059a2
add edi, 0x18
mov dword [ebp - 0x4e8], edi
cmp dword [edi - 4], 8
lea eax, [edi - 0x18]
mov esi, dword [edi - 8]
mov edx, SysReAllocString
mov dword [ebp - 0x60], 0
mov ecx, eax
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x4dc], eax
mov dword [ebp - 0x4d0], eax
jb 0x4057e1
mov ecx, dword [eax]
mov dword [ebp - 0x4d0], ecx
cmp esi, 8
jae 0x4057f9
movups xmm0, xmmword [ecx]
mov dword [ebp - 0x5c], 7
movups xmmword [ebp - 0x70], xmm0
jmp 0x405883
mov eax, esi
or eax, 7
cmp eax, 0x7ffffffe
cmova eax, edx
mov dword [ebp - 0x4d4], eax
inc eax
lea ecx, [eax + eax]
cmp eax, 0x7fffffff
jbe 0x40581c
or ecx, 0xffffffff
jmp 0x405824
cmp ecx, 0x1000
jb 0x40584d
lea eax, [ecx + 0x23]
cmp eax, ecx
mov ecx, 0xffffffff
cmovbe eax, ecx
push eax
call fcn.004f8556
add esp, 4
test eax, eax
je 0x407a68
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
jmp 0x405860
test ecx, ecx
je 0x40585e
push ecx
call fcn.004f8556
add esp, 4
mov ecx, eax
jmp 0x405860
xor ecx, ecx
lea eax, [esi*2 + 2]
mov dword [ebp - 0x70], ecx
push eax
push dword [ebp - 0x4d0]
push ecx
call fcn.004fac70
mov eax, dword [ebp - 0x4d4]
add esp, 0xc
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], esi
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 2
push 0x564298
push eax
call fcn.00412fc0
lea eax, [ebp - 0x70]
push 0x564298
push eax
call fcn.00413040
add esp, 0x10
cmp dword [ebp - 0x60], 0
jne 0x405934
mov eax, dword [ebp - 0x508]
mov esi, edi
mov dword [ebp - 0x4d4], eax
cmp edi, eax
je 0x405923
mov ecx, dword [ebp - 0x4dc]
sub ecx, edi
mov dword [ebp - 0x4dc], ecx
lea edi, [ecx + esi]
cmp edi, esi
je 0x405910
mov ecx, edi
call fcn.0040e400
movups xmm0, xmmword [esi]
mov ecx, dword [ebp - 0x4dc]
xor eax, eax
movups xmmword [edi], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov eax, dword [ebp - 0x4d4]
add esi, 0x18
cmp esi, eax
jne 0x4058d3
mov eax, dword [ebp - 0x508]
mov edi, dword [ebp - 0x4e8]
lea ecx, [eax - 0x18]
call fcn.0040e400
sub dword [ebp - 0x508], 0x18
jmp 0x40593d
add edi, 0x18
mov dword [ebp - 0x4e8], edi
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x40597b
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x405971
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407a68
push edx
push ecx
call fcn.004f8820
add esp, 8
xor eax, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
lea eax, [edi - 0x18]
mov byte [ebp - 4], 1
cmp eax, dword [ebp - 0x508]
jne 0x4057ac
mov byte [ebp - 4], 7
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
mov byte [ebp - 4], 9
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x50c]
mov edx, dword [ebp - 0x508]
cmp ecx, edx
je 0x4079fb
lea eax, [ebp - 0x28]
cmp eax, ecx
je 0x405a24
cmp dword [ecx + 0x14], 8
mov eax, ecx
jb 0x405a0c
mov eax, dword [ecx]
push dword [ecx + 0x10]
lea ecx, [ebp - 0x28]
push eax
call fcn.0040e470
mov edx, dword [ebp - 0x508]
mov ecx, dword [ebp - 0x50c]
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jbe 0x405a62
add ecx, 0x18
lea eax, [ebp - 0x88]
cmp eax, ecx
je 0x405a62
cmp dword [ecx + 0x14], 8
mov eax, ecx
jb 0x405a53
mov eax, dword [ecx]
push dword [ecx + 0x10]
lea ecx, [ebp - 0x88]
push eax
call fcn.0040e470
lea ecx, [ebp - 0x524]
call fcn.004c5f50
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0x17
call fcn.004c9680
lea ecx, [ebp - 0x524]
mov byte [ebp - 0x4f0], al
call fcn.004c9490
lea ecx, [ebp - 0x524]
mov byte [ebp - 0x44], al
call fcn.004c93a0
mov esi, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edi, dword [ebp - 0x28]
cmp esi, 8
mov edx, dword [ebp - 0x18]
cmovae ecx, edi
mov byte [ebp - 0x4f8], al
cmp edx, 8
jne 0x405af6
mov dword [ebp - 0x4d0], edx
mov dword [ebp - 0x4dc], str._install
nop dword [eax + eax]
mov esi, dword [ebp - 0x4dc]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x405af6
add dword [ebp - 0x4dc], 2
add ecx, 2
sub dword [ebp - 0x4d0], 1
jne 0x405ad0
jmp 0x405b48
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xb
jne 0x405d4f
mov dword [ebp - 0x4d0], edx
mov dword [ebp - 0x4dc], str._installPdf
nop dword [eax + eax]
mov esi, dword [ebp - 0x4dc]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x405d4f
add dword [ebp - 0x4dc], 2
add ecx, 2
sub dword [ebp - 0x4d0], 1
jne 0x405b20
lea eax, [ebp - 0x51c]
mov byte [ebp - 0x4dc], 0
push eax
lea eax, [ebp - 0x514]
mov byte [ebp - 0x510], 0
push eax
lea eax, [ebp - 0x518]
mov byte [ebp - 0x4e0], 0
push eax
lea eax, [ebp - 0x4ec]
mov byte [ebp - 0x4e4], 0
push eax
lea eax, [ebp - 0x4e4]
mov byte [ebp - 0x4ec], 0
push eax
lea eax, [ebp - 0x4e0]
mov byte [ebp - 0x518], 0
push eax
lea eax, [ebp - 0x510]
mov byte [ebp - 0x514], 0
push eax
lea eax, [ebp - 0x4dc]
mov byte [ebp - 0x51c], 0
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.004083c0
lea ecx, [ebp - 0x4e8]
call fcn.004db750
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
cmovae ecx, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 8
jne 0x405c0c
mov esi, 8
mov edx, str._install
nop
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x405c0c
add ecx, 2
add edx, 2
sub esi, 1
jne 0x405bf0
mov byte [ebp - 0x4d0], 1
jmp 0x405c13
mov byte [ebp - 0x4d0], 0
mov esi, dword [ebp - 0x4dc]
lea ecx, [ebp - 0x4e8]
push 0
push 0
push 0
push 0
push dword [ebp - 0x4d0]
push dword [ebp - 0x4e0]
push dword [ebp - 0x510]
push 0
push esi
call fcn.004de590
push esi
call fcn.004e13f0
add esp, 4
push 1
call fcn.004e2430
mov ecx, eax
call fcn.004e2100
push dword [ebp - 0x514]
push dword [ebp - 0x518]
push dword [ebp - 0x4e4]
push esi
call fcn.00408470
call fcn.004e13e0
call fcn.004e13c0
call fcn.004e13d0
cmp byte [ebp - 0x4e4], 0
je 0x405cab
call fcn.004d9310
test al, al
jne 0x405cab
push dword [ebp - 0x51c]
lea ecx, [ebp - 0x4e8]
push dword [ebp - 0x4ec]
push esi
call fcn.004deb70
jmp 0x405cc7
cmp byte [ebp - 0x4dc], 0
je 0x405cc7
call fcn.004d9540
test al, al
je 0x405cc7
call fcn.004e1310
call fcn.004e1240
call fcn.004e2430
push 1
push dword [eax]
call fcn.0044acc0
mov ecx, eax
call fcn.0044bd90
call fcn.004e2430
mov esi, dword [eax]
cmp byte [esi], 0
je 0x405d01
call fcn.0044acc0
push esi
mov ecx, eax
call fcn.0044b1a0
push 0
mov ecx, esi
call fcn.0043f8e0
mov byte [esi], 0
lea ecx, [ebp - 0x4d4]
call fcn.004d0070
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x19
call fcn.004d02b0
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x18
call fcn.004d0230
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x17
call fcn.004db900
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xa
jne 0x405de3
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4dc], str._uninstall
mov esi, dword [ebp - 0x4dc]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x405de3
add dword [ebp - 0x4dc], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x405d71
lea ecx, [ebp - 0x4d4]
call fcn.004db750
mov byte [ebp - 4], 0x1a
call fcn.004e13e0
call fcn.004e13c0
call fcn.004e13d0
lea ecx, [ebp - 0x4d4]
call fcn.004e1650
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x17
call fcn.004db900
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xa
jne 0x405e27
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4dc], str._overwrite
mov esi, dword [ebp - 0x4dc]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x405e27
add dword [ebp - 0x4dc], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x405e01
jmp 0x405e78
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xd
jne 0x406141
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4dc], str._overwritePdf
nop dword [eax]
mov esi, dword [ebp - 0x4dc]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406141
add dword [ebp - 0x4dc], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x405e50
lea eax, [ebp - 0x518]
mov byte [ebp - 0x4e0], 0
push eax
lea eax, [ebp - 0x4d4]
mov byte [ebp - 0x51c], 0
push eax
lea eax, [ebp - 0x4e8]
mov byte [ebp - 0x4ec], 0
push eax
lea eax, [ebp - 0x514]
mov byte [ebp - 0x4dc], 0
push eax
lea eax, [ebp - 0x4dc]
mov byte [ebp - 0x514], 0
push eax
lea eax, [ebp - 0x4ec]
mov byte [ebp - 0x4e8], 0
push eax
lea eax, [ebp - 0x51c]
mov byte [ebp - 0x4d4], 0
push eax
lea eax, [ebp - 0x4e0]
mov byte [ebp - 0x518], 0
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.004083c0
lea ecx, [ebp - 0x4e4]
call fcn.004db750
mov byte [ebp - 4], 0x1b
cmp byte [ebp - 0x4e8], 0
mov esi, dword [ebp - 0x4e0]
jne 0x405f15
push esi
jmp 0x405f28
call fcn.004d9310
test al, al
jne 0x405f26
cmp byte [ebp - 0x4dc], al
je 0x405f30
push 1
call fcn.004e13f0
add esp, 4
push 1
call fcn.004e2430
mov ecx, eax
call fcn.004e2100
push dword [ebp - 0x4d4]
push dword [ebp - 0x4e8]
push dword [ebp - 0x4dc]
push esi
call fcn.00408470
call fcn.004d9450
mov byte [ebp - 0x4d6], al
call fcn.004d94a0
mov byte [ebp - 0x4d5], al
call fcn.004e13e0
call fcn.004e13c0
call fcn.004e13d0
cmp byte [ebp - 0x4e8], 0
jne 0x405f91
cmp byte [ebp - 0x4e0], 0
je 0x405f91
xor al, al
jmp 0x405f93
mov al, 1
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x4d0], al
cmovae ecx, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 0xa
jne 0x405fd0
mov esi, 0xa
mov edx, str._overwrite
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x405fd0
add ecx, 2
add edx, 2
sub esi, 1
jne 0x405fb4
mov byte [ebp - 0x4d4], 1
jmp 0x405fd7
mov byte [ebp - 0x4d4], 0
push dword [ebp - 0x4f8]
mov al, byte [ebp - 0x4d0]
lea ecx, [ebp - 0x4e4]
push dword [ebp - 0x44]
xor al, 1
push dword [ebp - 0x4f0]
movzx eax, al
push 1
push dword [ebp - 0x4d4]
push dword [ebp - 0x4ec]
push dword [ebp - 0x51c]
push dword [ebp - 0x4d0]
push eax
call fcn.004de590
mov al, byte [ebp - 0x4e0]
test al, al
jne 0x406034
push 0
lea ecx, [ebp - 0x4e4]
call fcn.004e0cf0
mov al, byte [ebp - 0x4e0]
cmp byte [ebp - 0x4e8], 0
jne 0x406048
mov byte [ebp - 0x4d0], 0
test al, al
je 0x40604f
mov byte [ebp - 0x4d0], 1
cmp byte [ebp - 0x4dc], 0
je 0x406080
call fcn.004d9310
test al, al
jne 0x406080
push dword [ebp - 0x518]
lea ecx, [ebp - 0x4e4]
push dword [ebp - 0x514]
push dword [ebp - 0x4d0]
call fcn.004deb70
jmp 0x4060b9
call fcn.004d9540
cmp byte [ebp - 0x4d0], 0
je 0x406099
test al, al
je 0x4060b9
call fcn.004e1310
jmp 0x4060b4
test al, al
je 0x4060b9
cmp byte [ebp - 0x4d6], 0
je 0x4060ab
call fcn.004e1310
cmp byte [ebp - 0x4d5], 0
je 0x4060b9
call fcn.004e1240
call fcn.004e2430
push 1
push dword [eax]
call fcn.0044acc0
mov ecx, eax
call fcn.0044bd90
call fcn.004e2430
mov esi, dword [eax]
cmp byte [esi], 0
je 0x4060f3
call fcn.0044acc0
push esi
mov ecx, eax
call fcn.0044b1a0
push 0
mov ecx, esi
call fcn.0043f8e0
mov byte [esi], 0
lea ecx, [ebp - 0x510]
call fcn.004d0070
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0x1c
call fcn.004d02b0
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0x1b
call fcn.004d0230
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 0x17
call fcn.004db900
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xb
jne 0x4063af
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._statistics
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x4063af
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406163
push 0
lea ecx, [ebp - 0x4d6]
call fcn.004d2590
push 0
mov byte [ebp - 4], 0x1d
call fcn.004e2430
mov ecx, eax
call fcn.004e2100
push 0
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004204a0
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x40]
call fcn.00417650
mov esi, dword [ebp - 0x4c]
xor ecx, ecx
mov dword [ebp - 0x4d0], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x48]
add esp, 0x10
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4062e6
xor edi, edi
cmp dword [esi + edi + 0x10], 0
lea eax, [esi + edi]
je 0x4062bb
push 0
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041ff90
add esp, 0xc
push eax
mov byte [ebp - 4], 0x20
call fcn.004e2430
mov ecx, eax
call fcn.004e24f0
test al, al
sete al
mov byte [ebp - 0x4d5], al
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x40628e
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40627e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407a68
push edx
push ecx
call fcn.004f8820
mov al, byte [ebp - 0x4d5]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], cx
mov byte [ebp - 4], 0x1f
test al, al
je 0x4062b8
mov eax, dword [ebp - 0x4c]
add eax, edi
push eax
call fcn.004054f0
add esp, 4
mov esi, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x48]
mov eax, 0x2aaaaaab
inc dword [ebp - 0x4d0]
sub ecx, esi
imul ecx
add edi, 0x18
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x4d0], eax
jb 0x406211
call fcn.004e2430
mov esi, dword [eax]
cmp byte [esi], 0
je 0x40630b
call fcn.0044acc0
push esi
mov ecx, eax
call fcn.0044b1a0
push 0
mov ecx, esi
call fcn.0043f8e0
mov byte [esi], 0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x40637e
mov edx, dword [ebp - 0x48]
push ecx
call fcn.0040ee10
mov ecx, dword [ebp - 0x44]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x4c]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x40635f
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407a68
push ecx
push esi
call fcn.004f8820
add esp, 8
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x25
call fcn.0040e250
lea ecx, [ebp - 0x4d6]
mov byte [ebp - 4], 0x17
call fcn.004d25b0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0x15
jne 0x4065b5
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._recorderRealtimeStat
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x4065b5
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x4063d1
push 0
call fcn.004e2430
mov ecx, eax
call fcn.004e2100
mov dword [ebp - 0x500], 0
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 0x4f8], 0
lea eax, [ebp - 0x500]
mov byte [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x88]
push 0x3b
push eax
call fcn.00417470
mov eax, dword [ebp - 0x4fc]
add esp, 0xc
mov esi, dword [ebp - 0x500]
mov dword [ebp - 0x4f0], eax
cmp esi, eax
je 0x40656b
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x70]
call fcn.0040e180
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x2a
push 0x564298
push eax
call fcn.004130c0
add esp, 8
cmp dword [ebp - 0x60], 0
jne 0x406495
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2b
call fcn.0040e400
jmp 0x406558
push 0
push 0x564390
lea ecx, [ebp - 0x70]
call fcn.0040dfa0
cmp eax, 0xffffffff
jne 0x4064ba
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2f
call fcn.0040e400
jmp 0x406558
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x70]
push 0x23
push eax
call fcn.00417470
add esp, 0xc
lea ecx, [ebp - 0x4c]
call fcn.0040dd80
cmp eax, 2
jne 0x406540
mov edi, dword [ebp - 0x4c]
cmp dword [edi + 0x10], 0
je 0x406540
cmp dword [edi + 0x28], 0
lea eax, [edi + 0x18]
je 0x406540
cmp dword [eax + 0x14], 8
jb 0x40650c
mov eax, dword [eax]
push 0
push eax
call fcn.00412ba0
add esp, 8
push edx
push eax
push edi
call fcn.004e2430
mov ecx, eax
call fcn.004e2020
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x2a
call fcn.0040e360
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x38
call fcn.0040e400
jmp 0x406558
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x2a
call fcn.0040e360
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x34
call fcn.0040e400
add esi, 0x18
mov byte [ebp - 4], 0x29
cmp esi, dword [ebp - 0x4f0]
jne 0x406460
call fcn.004e2430
mov esi, dword [eax]
cmp byte [esi], 0
je 0x406590
call fcn.0044acc0
push esi
mov ecx, eax
call fcn.0044b1a0
push 0
mov ecx, esi
call fcn.0043f8e0
mov byte [esi], 0
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x17
call fcn.0040e360
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xd
jne 0x406636
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], 0x564394
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406636
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x4065d3
lea ecx, [ebp - 0x4d4]
call fcn.004db750
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x3c
call fcn.004e0bc0
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x17
call fcn.004db900
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 5
jne 0x406693
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._exit
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406693
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406654
call fcn.00407fa0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xc
jne 0x4067bb
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._showFeature
nop word [eax + eax]
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x4067bb
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x4066c0
push 0x60
call fcn.004f8556
add esp, 4
mov dword [ebp - 0x4f0], eax
mov ecx, eax
mov byte [ebp - 4], 0x3d
call fcn.00487c10
push eax
lea ecx, [ebp - 0x4f0]
mov byte [ebp - 4], 0x17
call fcn.0040eb40
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x3e
push eax
call fcn.004cc270
add esp, 4
mov byte [ebp - 4], 0x3f
mov esi, dword [ebp - 0x4f0]
test esi, esi
je 0x406786
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x44], esp
push eax
call fcn.0040e180
mov byte [ebp - 4], 0x40
mov ecx, esi
mov byte [ebp - 4], 0x3f
call fcn.00488510
test al, al
jne 0x406786
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x41
call fcn.0040e400
mov byte [ebp - 4], 0x45
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 4]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x524]
xor esi, esi
mov byte [ebp - 4], 0xa
call fcn.004c60d0
jmp 0x4079fd
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x52
call fcn.0040e400
mov byte [ebp - 4], 0x56
test esi, esi
je 0x4067a1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x524]
xor esi, esi
mov byte [ebp - 4], 0xa
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xd
jne 0x4069d5
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._skinselected
nop dword [eax]
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x4069d5
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x4067e0
push str.WindowState.ini
lea ecx, [ebp - 0x58]
call fcn.0040e120
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x57
push eax
call fcn.004cc2f0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x58
push ecx
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00418670
add esp, 0x10
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x5b
call fcn.0040e400
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x60
call fcn.0040e400
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x5f
call fcn.00433bf0
cmp dword [ebp - 0x78], 0
je 0x406936
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
push 0
cmovae eax, dword [ebp - 0x88]
push eax
call fcn.00412ba0
push 0x60
mov dword [ebp - 0x4d4], eax
call fcn.004f8556
add esp, 0xc
mov dword [ebp - 0x4f0], eax
mov ecx, eax
mov byte [ebp - 4], 0x74
call fcn.00487c10
push eax
lea ecx, [ebp - 0x4f0]
mov byte [ebp - 4], 0x5f
call fcn.0040eb40
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x75
push eax
call fcn.004cc270
add esp, 4
mov byte [ebp - 4], 0x76
mov esi, dword [ebp - 0x4f0]
test esi, esi
je 0x4068f7
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x44], esp
push eax
call fcn.0040e180
mov byte [ebp - 4], 0x77
mov ecx, esi
mov byte [ebp - 4], 0x76
call fcn.00488510
test al, al
je 0x40691b
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x34]
call eax
mov edi, eax
mov dword [ebp - 0x44], edi
test edi, edi
je 0x40690f
mov edx, dword [edi]
mov ecx, edi
call dword [edx]
mov byte [ebp - 4], 0x8d
test edi, edi
jne 0x40695c
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x8f
call fcn.0040e400
mov byte [ebp - 4], 0x93
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 4]
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x94
call fcn.0040e400
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x524]
xor esi, esi
mov byte [ebp - 4], 0xa
call fcn.004c60d0
jmp 0x4079fd
cmp dword [ebp - 0x4d4], 0
mov ecx, edi
mov edx, dword [edi]
setne al
movzx eax, al
push eax
call dword [edx + 0x4c]
mov ecx, dword [ebp - 0x4d4]
mov eax, dword [edi]
neg ecx
sbb ecx, ecx
and ecx, 3
push ecx
mov ecx, edi
call dword [eax + 0x3c]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
mov byte [ebp - 4], 0xa4
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 4]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa5
call fcn.0040e400
mov byte [ebp - 4], 0xa9
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 4]
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xaa
call fcn.0040e400
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x524]
xor esi, esi
mov byte [ebp - 4], 0xa
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xb
jne 0x406a5d
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._installReg
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406a5d
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x4069f3
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x11c]
call fcn.004d4c50
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0xae
call fcn.004d6590
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x17
call fcn.004d4fa0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 5
jne 0x406aea
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str.__fix
nop
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406aea
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406a80
lea ecx, [ebp - 0x4d4]
call fcn.004db750
lea eax, [ebp - 0x50c]
mov byte [ebp - 4], 0xaf
push eax
lea ecx, [ebp - 0x4d4]
call fcn.004ddae0
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x17
call fcn.004db900
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0xb
jne 0x406bb5
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._checkAssoc
nop dword [eax]
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406bb5
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406b10
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
lea ecx, [ebp - 0x4ec]
mov edi, eax
call fcn.004db750
push 0
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0xb0
call fcn.004e07b0
mov byte [ebp - 0x4d4], al
call esi
sub eax, edi
push eax
push dword [ebp - 0x4d4]
push 0
call fcn.00407aa0
xor eax, eax
lea ecx, [ebp - 0x4ec]
cmp byte [ebp - 0x4d4], al
mov byte [ebp - 4], 0x17
sete al
add eax, 0x100
mov dword [ebp - 0x4e0], eax
call fcn.004db900
mov esi, dword [ebp - 0x4e0]
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0x1b
jne 0x406c48
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._checkAssocPDFAndSafeCenter
nop word [eax + eax]
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406c48
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406be0
mov esi, 0x300
call fcn.004d3300
test al, al
mov ecx, 0x301
cmove esi, ecx
call fcn.004d9310
test al, al
je 0x406c2e
call fcn.004d8b60
test al, al
jne 0x4079ea
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
or esi, 0x301
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0x23
jne 0x406d21
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._repairAssocPDFAndSafeCenterProtect
nop word [eax + eax]
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406d21
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406c70
call fcn.004d9b30
call fcn.004d9b90
call fcn.004d8f10
test al, al
je 0x406cdb
call fcn.004d3900
push 0x5644d0
lea ecx, [ebp - 0x40]
call fcn.0040e120
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xc9
push eax
call fcn.004d9a70
add esp, 4
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xca
call fcn.0040e400
jmp 0x406d09
call fcn.004d3910
push 0x5644d0
lea ecx, [ebp - 0x40]
call fcn.0040e120
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xce
push eax
call fcn.004d9a10
add esp, 4
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xcf
call fcn.0040e400
push 1
mov byte [ebp - 4], 0x17
call fcn.004e13f0
add esp, 4
call fcn.004d3300
jmp 0x406e53
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0x23
jne 0x406d92
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._checkAssocPDFAndImageAndSafeCenter
nop
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406d92
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406d40
call fcn.004d3150
xor ecx, ecx
mov byte [ebp - 4], 0xa
test al, al
sete cl
add ecx, 0x304
mov dword [ebp - 0x4e0], ecx
mov esi, ecx
lea ecx, [ebp - 0x524]
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0x2b
jne 0x406e7c
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._repairAssocPDFAndImageAndSafeCenterProtect
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406e7c
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406db4
call fcn.004d9b30
call fcn.004d9b90
call fcn.004d37d0
push 1
call fcn.004e13f0
add esp, 4
call fcn.004d8f10
lea ecx, [ebp - 0x40]
push 0x5644d0
test al, al
je 0x406e29
call fcn.0040e120
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xeb
push eax
call fcn.004d9a70
add esp, 4
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xec
call fcn.0040e400
jmp 0x406e4a
call fcn.0040e120
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xf0
push eax
call fcn.004d9a10
add esp, 4
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xf1
call fcn.0040e400
mov byte [ebp - 4], 0x17
call fcn.004d3150
movzx ecx, al
neg ecx
mov byte [ebp - 4], 0xa
sbb ecx, ecx
add ecx, 0x203
mov dword [ebp - 0x4e0], ecx
mov esi, ecx
lea ecx, [ebp - 0x524]
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 0x23
jne 0x406ee9
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x4d0], str._removeAssocPDFAndSafeCenterProtect
nop word [eax + eax]
mov esi, dword [ebp - 0x4d0]
mov ax, word [ecx]
cmp ax, word [esi]
mov esi, dword [ebp - 0x14]
jne 0x406ee9
add dword [ebp - 0x4d0], 2
add ecx, 2
sub dword [ebp - 0x4d4], 1
jne 0x406ea0
call fcn.004d9b30
call fcn.004d9b90
call fcn.004d33b0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
cmp esi, 8
lea ecx, [ebp - 0x28]
push 0xc
cmovae ecx, edi
push str._repairAssoc
call fcn.0040f670
add esp, 8
test al, al
je 0x406f8c
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
lea ecx, [ebp - 0x4ec]
mov edi, eax
call fcn.004db750
push 0
lea ecx, [ebp - 0x4ec]
mov dword [ebp - 4], 0x10d
call fcn.004e0cf0
mov byte [ebp - 0x4d4], al
call esi
sub eax, edi
push eax
push dword [ebp - 0x4d4]
push 1
call fcn.00407aa0
xor eax, eax
lea ecx, [ebp - 0x4ec]
cmp byte [ebp - 0x4d4], al
mov dword [ebp - 4], 0x17
sete al
add eax, 0x200
mov dword [ebp - 0x4e0], eax
call fcn.004db900
mov esi, dword [ebp - 0x4e0]
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
call fcn.004c60d0
jmp 0x4079fd
push 0
push str.__third_party_invoker
lea ecx, [ebp - 0x28]
call fcn.0040dfa0
cmp eax, 0xffffffff
jne 0x4079e8
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 8
cmovae ecx, edi
push str.__rescue
call fcn.0040f670
add esp, 8
test al, al
jne 0x4079e8
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 8
cmovae ecx, edi
push str.__fixdir
call fcn.0040f670
add esp, 8
test al, al
je 0x407042
lea ecx, [ebp - 0x6c]
call fcn.004ca010
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x11a
push eax
call fcn.004cc2f0
add esp, 4
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x6c]
call fcn.004ca500
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
call fcn.0040e400
lea ecx, [ebp - 0x6c]
mov dword [ebp - 4], 0x17
call fcn.00404670
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0x10
cmovae ecx, edi
push str._check_thumbnail
call fcn.0040f670
add esp, 8
test al, al
je 0x40707c
call fcn.00408b90
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0x13
cmovae ecx, edi
push str._check_pdfconverter
call fcn.0040f670
add esp, 8
test al, al
je 0x407102
push str.RCImage_Loader_B290ED24_1295_4B55_A6A7_5EBD321F473B
lea ecx, [ebp - 0x40]
call fcn.0040e120
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x120
mov ecx, dword [ebp - 0x4e4]
push eax
call fcn.0040dc20
mov byte [ebp - 0x4d5], al
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x121
call fcn.0040e400
cmp byte [ebp - 0x4d5], 0
mov dword [ebp - 4], 0x17
jne 0x4079e8
call fcn.0040a080
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0xa
cmovae ecx, edi
push str._check_ocr
call fcn.0040f670
add esp, 8
test al, al
je 0x407188
push str.RCImage_Loader_30ACBBAC_1110_4D9D_AFC4_9F8E2C410ACE
lea ecx, [ebp - 0x40]
call fcn.0040e120
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x131
mov ecx, dword [ebp - 0x4e4]
push eax
call fcn.0040dc20
mov byte [ebp - 0x4d5], al
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x132
call fcn.0040e400
cmp byte [ebp - 0x4d5], 0
mov dword [ebp - 4], 0x17
jne 0x4079e8
call fcn.0040ac90
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0x13
cmovae ecx, edi
push str._check_imagematting
call fcn.0040f670
add esp, 8
test al, al
je 0x40720e
push str.RCImage_Loader_A16EA45B_592E_4940_AEAC_C2135A7EE6E3
lea ecx, [ebp - 0x40]
call fcn.0040e120
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x142
mov ecx, dword [ebp - 0x4e4]
push eax
call fcn.0040dc20
mov byte [ebp - 0x4d5], al
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x143
call fcn.0040e400
cmp byte [ebp - 0x4d5], 0
mov dword [ebp - 4], 0x17
jne 0x4079e8
call fcn.0040b6c0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0x12
cmovae ecx, edi
push str._check_picdesigner
call fcn.0040f670
add esp, 8
test al, al
je 0x407294
push str.RCImage_Loader_ADD4CDBF_1ECC_449C_ADAC_F2720261E925
lea ecx, [ebp - 0x40]
call fcn.0040e120
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x153
mov ecx, dword [ebp - 0x4e4]
push eax
call fcn.0040dc20
mov byte [ebp - 0x4d5], al
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x154
call fcn.0040e400
cmp byte [ebp - 0x4d5], 0
mov dword [ebp - 4], 0x17
jne 0x4079e8
call fcn.0040cce0
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
xor esi, esi
call fcn.004c60d0
jmp 0x4079fd
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0xd
cmovae ecx, edi
push str._page_protect
call fcn.0040f670
add esp, 8
test al, al
je 0x4073c7
lea ecx, [ebp - 0x48]
call fcn.004d2810
push 0
lea ecx, [ebp - 0x4d6]
mov dword [ebp - 4], 0x164
call fcn.004d2590
push str.B7E10F94_83E9_448D_8CA3_504EA5C60EC5
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x65
call fcn.0040e120
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x66
push eax
lea ecx, [ebp - 0x4f4]
call fcn.00417110
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x69
call fcn.0040e400
mov byte [ebp - 4], 0x68
cmp dword [ebp - 0x4f4], 0
je 0x40731d
cmp byte [ebp - 0x4ef], 0
jne 0x4073a1
call fcn.004d1a40
test al, al
je 0x407355
push str.aq_07
lea ecx, [ebp - 0x40]
call fcn.0040e2a0
push 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x79
push 3
push eax
call fcn.004055a0
add esp, 0xc
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x40]
call fcn.0040e250
jmp 0x4073a1
lea ecx, [ebp - 0x88]
call fcn.0040e040
push 0
push eax
call fcn.00412ba0
add esp, 8
test eax, eax
je 0x4073a1
push eax
lea ecx, [ebp - 0x320]
call fcn.004e2c00
push ecx
mov byte [ebp - 4], 0x92
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x320]
call fcn.0040de80
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 0x68
call fcn.004e2d00
lea ecx, [ebp - 0x4f4]
mov byte [ebp - 4], 0x65
call fcn.00417170
lea ecx, [ebp - 0x4d6]
mov byte [ebp - 4], 0x64
call fcn.004d25b0
lea ecx, [ebp - 0x48]
jmp 0x4079dc
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0xb
cmovae ecx, edi
push str._page_guide
call fcn.0040f670
add esp, 8
test al, al
je 0x4075e7
lea ecx, [ebp - 0x48]
call fcn.004d2810
push str.B7E10F94_83E9_448D_8CA3_504EA5C60EC5
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x193
call fcn.0040e120
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x94
push eax
lea ecx, [ebp - 0x4f4]
call fcn.00417110
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x97
call fcn.0040e400
mov byte [ebp - 4], 0x96
cmp dword [ebp - 0x4f4], 0
je 0x40743f
cmp byte [ebp - 0x4ef], 0
jne 0x4075d0
lea ecx, [ebp - 0x500]
call fcn.004d0500
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0xa7
call fcn.004d0e50
test al, al
je 0x4075c1
lea eax, [ebp - 0x4d0]
push eax
lea ecx, [ebp - 0x500]
call fcn.004d05b0
test al, al
je 0x4075c1
push 1
call fcn.004e2430
mov ecx, eax
call fcn.004e2100
mov eax, dword [ebp - 0x4d0]
add eax, 0xfffffffe
cmp eax, 8
ja case.0x4074cf.3
movzx eax, byte [eax + 0x407a78]
jmp dword [eax*4 + 0x407a70]
call fcn.004d1a40
test al, al
je 0x407572
mov eax, dword [ebp - 0x4d0]
add eax, 0xfffffffe
cmp eax, 8
ja case.0x4074cf.3
movzx eax, byte [eax + 0x407a94]
jmp dword [eax*4 + 0x407a84]
push str.aq_10
lea ecx, [ebp - 0x40]
call fcn.0040e2a0
push 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xc0
push 4
push eax
call fcn.004e2430
mov ecx, eax
call fcn.004e2680
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa7
call fcn.0040e250
jmp case.0x4074cf.3
push str.aq_17
lea ecx, [ebp - 0x40]
call fcn.0040e2a0
push 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xc1
push 4
push eax
call fcn.004e2430
mov ecx, eax
call fcn.004e2680
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa7
call fcn.0040e250
jmp case.0x4074cf.3
push str.aq_19
lea ecx, [ebp - 0x40]
call fcn.0040e2a0
push 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xc2
push 4
push eax
call fcn.004e2430
mov ecx, eax
call fcn.004e2680
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa7
call fcn.0040e250
jmp case.0x4074cf.3
push dword [ebp - 0x4d0]
lea ecx, [ebp - 0x434]
call fcn.004ce320
push ecx
mov byte [ebp - 4], 0xc3
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x434]
call fcn.0040de80
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 0xa7
call fcn.004ce4c0
call fcn.004e2430
mov ecx, eax
call fcn.004361f0
call fcn.004e2430
mov ecx, eax
call fcn.004e2720
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x96
call fcn.004d0560
lea ecx, [ebp - 0x4f4]
mov byte [ebp - 4], 0x93
call fcn.00417170
lea ecx, [ebp - 0x48]
jmp 0x4079dc
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0xb
cmovae ecx, edi
push str._assoc_lock
call fcn.0040f670
add esp, 8
test al, al
je 0x4077ff
lea ecx, [ebp - 0x4fc]
call fcn.004d2810
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x1c4
call fcn.004e39d0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xc5
call fcn.004e4270
test al, al
je 0x4077ee
lea eax, [ebp - 0x4f0]
push eax
lea ecx, [ebp - 0x64]
call fcn.004d05b0
test al, al
je 0x4077ee
push 1
call fcn.004e2430
mov ecx, eax
call fcn.004e2100
mov eax, dword [ebp - 0x4f0]
sub eax, 2
je 0x40772f
sub eax, 1
jne 0x4077d6
push str.B7E10F94_83E9_448D_8CA3_504EA5C60EC5
lea ecx, [ebp - 0x40]
call fcn.0040e120
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xf3
push eax
lea ecx, [ebp - 0x48]
call fcn.00417110
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xf6
call fcn.0040e400
mov byte [ebp - 4], 0xf5
cmp dword [ebp - 0x48], 0
je 0x4076cb
cmp byte [ebp - 0x43], 0
je 0x4076cb
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc5
call fcn.00417170
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xc4
call fcn.004e3a30
jmp 0x4079d6
push str.aq_13
lea ecx, [ebp - 0x40]
call fcn.0040e2a0
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x206
push eax
call fcn.004e2430
mov ecx, eax
call fcn.004e1f80
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0x1f5
call fcn.0040e250
lea ecx, [ebp - 0x4cc]
call fcn.004d9e60
push ecx
mov dword [ebp - 4], 0x207
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.0040de80
mov dword [ebp - 4], 0x1f5
jmp 0x4077bf
push str.B7E10F94_83E9_448D_8CA3_504EA5C60EC5
lea ecx, [ebp - 0x40]
call fcn.0040e120
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xde
push eax
lea ecx, [ebp - 0x48]
call fcn.00417110
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xe1
call fcn.0040e400
mov byte [ebp - 4], 0xe0
cmp dword [ebp - 0x48], 0
je 0x40776c
cmp byte [ebp - 0x43], 0
jne 0x4076ae
push str.aq_13
lea ecx, [ebp - 0x40]
call fcn.0040e2a0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xf1
push eax
call fcn.004e2430
mov ecx, eax
call fcn.004e1f80
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xe0
call fcn.0040e250
lea ecx, [ebp - 0x4cc]
call fcn.004d9e60
push ecx
mov byte [ebp - 4], 0xf2
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.0040de80
mov byte [ebp - 4], 0xe0
lea ecx, [ebp - 0x4cc]
call fcn.004da000
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc5
call fcn.00417170
call fcn.004e2430
mov ecx, eax
call fcn.004361f0
call fcn.004e2430
mov ecx, eax
call fcn.004e2720
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xc4
call fcn.004e3a30
jmp 0x4079d6
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp esi, 8
push 0x14
cmovae ecx, edi
push str._page_plugin_protect
call fcn.0040f670
add esp, 8
test al, al
je 0x4079e8
lea ecx, [ebp - 0x50c]
call fcn.0040dd80
cmp eax, 3
jne 0x4079e8
call fcn.004d1a40
test al, al
jne 0x4079e8
lea ecx, [ebp - 0x4fc]
call fcn.004d2810
push 0
lea ecx, [ebp - 0x4d6]
mov dword [ebp - 4], 0x220
call fcn.004d2590
push str.D5165921_8CFE_4F51_80DC_8BC87A25FD80
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x21
call fcn.0040e120
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x48]
call fcn.00417110
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x25
call fcn.0040e400
mov byte [ebp - 4], 0x24
cmp dword [ebp - 0x48], 0
je 0x4078a3
cmp byte [ebp - 0x43], 0
jne 0x4079bb
push 0x563018
lea ecx, [ebp - 0x40]
call fcn.0040e120
push 0x563018
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x35
call fcn.0040e120
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 0x50c]
add eax, 0x18
push eax
call fcn.0040e0b0
mov eax, dword [ebp - 0x50c]
lea ecx, [ebp - 0x70]
add eax, 0x30
push eax
call fcn.0040e0b0
lea ecx, [ebp - 0x40]
call fcn.0040e040
push 0
push eax
call fcn.00412ba0
mov esi, eax
add esp, 8
test esi, esi
jne 0x407923
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x37
call fcn.0040e400
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x3b
call fcn.0040e400
mov byte [ebp - 4], 0x24
jmp 0x4079bb
push str.u128
lea ecx, [ebp - 0xb8]
call fcn.0040e2a0
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x4b
push eax
call fcn.004054f0
add esp, 4
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0xb8]
call fcn.0040e250
sub esp, 0x18
lea eax, [ebp - 0x70]
mov ecx, esp
mov dword [ebp - 0x4f0], esp
push eax
call fcn.0040e180
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x3b0]
push esi
mov byte [ebp - 4], 0x36
call fcn.004d1220
push ecx
mov byte [ebp - 4], 0x4d
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x3b0]
call fcn.0040de80
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 0x36
call fcn.004d1380
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x4e
call fcn.0040e400
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x52
call fcn.0040e400
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x21
call fcn.00417170
lea ecx, [ebp - 0x4d6]
mov byte [ebp - 4], 0x20
call fcn.004d25b0
lea ecx, [ebp - 0x4fc]
mov dword [ebp - 4], 0x17
call fcn.004d2960
xor esi, esi
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0xa
call fcn.004c60d0
jmp 0x4079fd
xor esi, esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0x256
call fcn.0040e400
lea ecx, [ebp - 0x88]
mov dword [ebp - 4], 0x25a
call fcn.0040e400
lea ecx, [ebp - 0x50c]
mov dword [ebp - 4], 0
call fcn.0040e360
lea ecx, [ebp - 0xa0]
mov dword [ebp - 4], 0x25e
call fcn.0040e400
mov dword [ebp - 4], 0xffffffff
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f8545
mov esp, ebp
pop ebp
ret 4
call fcn.004fd0f9
nop dword [eax]
test eax, 0xa9004074
jne 4225719
add byte [eax], al
add dword [eax], eax
add dword [eax], eax
add dword [eax], eax
add dword [eax], eax
nop dword [eax]
salc
je 4225735
add byte [esi*2 + 0x753f0040], cl
inc eax
add byte [ecx + 0x4075], ch
add eax, dword [ecx]
add eax, dword [edx]
add eax, dword [eax]
add eax, dword [edx]
int3
pop ecx
add byte [ebx], dh
lds ecx, [ecx + 0x5653f045]
add byte [eax], al
add byte [ebx + 0x5d8a0875], cl
or al, 0x85
div byte [ecx + ecx - 0x7d]
inc byte [ecx]