Function at 0x442c90
Capabilities:
Accept command line arguments
Check os version
Encode data using base64
Get common file path
Get graphical window text
Get session user name
Parse credit card information
Query environment variable
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x2f4
mov eax, dword [0x47e5d0]
xor eax, esp
mov dword [esp + 0x2f0], eax
mov eax, dword [esp + 0x2fc]
push ebx
mov dword [esp + 0x20], eax
push ebp
xor eax, eax
mov word [esp + 0x68], ax
push esi
push edi
lea edi, [esp + 0x72]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov ebp, dword [esp + 0x308]
mov esi, dword [esp + 0x318]
stosw word es:[edi], ax
xor ebx, ebx
xor eax, eax
lea edi, [esp + 0x5c]
mov dword [esp + 0x58], ebx
stosd dword es:[edi], eax
mov dword [esp + 0x80], ebx
lea edi, [esp + 0x84]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [esp + 0x29]
push 0x103
mov byte [esp + 0x2c], bl
stosb byte es:[edi], al
lea eax, [esp + 0x141]
push ebx
push eax
mov dword [esp + 0x70], ebp
mov dword [esp + 0x60], esi
mov dword [esp + 0x28], ebx
mov byte [esp + 0x148], bl
call fcn.00452e00
push 0x3f
lea eax, [esp + 0x2d1]
push ebx
push eax
mov byte [esp + 0x2d8], bl
call fcn.00452e00
push 0x7f
lea eax, [esp + 0x25d]
push ebx
push eax
mov byte [esp + 0x264], bl
call fcn.00452e00
xor eax, eax
mov dword [esp + 0x54], ebx
lea edi, [esp + 0x58]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0x24
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x485434]
cmp eax, ebx
je 0x442d8c
push eax
call fcn.00452756
pop ecx
mov dword [0x485434], ebx
cmp esi, ebx
je 0x442d9c
push 4
push ebx
push esi
call fcn.00452e00
add esp, 0xc
test byte [esp + 0x314], 1
jne 0x446a8a
cmp ebp, ebx
je 0x446a8a
cmp byte [ebp], bl
je 0x446a8a
push 0x46f164
push ebp
call fcn.00454980
pop ecx
pop ecx
test eax, eax
jne 0x442de1
push 0x469208
push ebp
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x446a8a
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebp
call esi
mov edi, 0x10000
lea ecx, [edi + eax]
mov eax, 0x1000
cmp ecx, eax
jle 0x442e00
push ebp
call esi
add eax, edi
push 1
push eax
call fcn.00452b24
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
mov byte [eax], bl
mov ecx, dword [0x485434]
cmp ecx, ebx
je 0x442e31
push ebp
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x485434]
mov dword [esp + 0x48], ebx
mov esi, 0x466830
cmp ecx, ebx
je 0x442e4f
push esi
push ecx
call fcn.004526d0
pop ecx
pop ecx
mov ecx, dword [0x485434]
jmp 0x442e51
xor eax, eax
cmp eax, ebx
je 0x442e72
push ebx
push ebx
lea eax, [esp + 0x30]
push eax
push esi
push ecx
mov word [esp + 0x3c], 0xff
call fcn.0044923e
mov dword [esp + 0x48], 1
push 1
push edi
call fcn.00452b24
pop ecx
pop ecx
push ebp
mov esi, eax
call fcn.00448eaf
cmp al, 0x3d
jne 0x443003
push 0x25
push ebp
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
jne 0x442eac
push 0x7b
push ebp
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
je 0x443003
push dword [0x485434]
xor ebp, ebp
mov byte [esp + 0x1b], bl
xor edi, edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [0x485434]
inc eax
mov dword [esp + 0x1c], eax
cmp byte [ecx], bl
je 0x443009
cmp byte [esp + 0x17], bl
jne 0x442eef
lea edx, [ecx + edi]
mov al, byte [edx]
cmp al, 0x22
je 0x442ee6
cmp al, 0x27
jne 0x442f09
mov byte [esp + 0x17], al
jmp 0x442fd0
movsx eax, byte [ecx + edi]
movzx edx, byte [esp + 0x17]
cmp eax, edx
jne 0x442fd0
mov byte [esp + 0x17], bl
jmp 0x442fd0
cmp ebp, ebx
jne 0x442f50
cmp al, 0x25
je 0x442f29
cmp al, 0x7b
jne 0x442f50
push 0x7d
push edx
call fcn.00452d30
pop ecx
pop ecx
mov ecx, dword [0x485434]
test eax, eax
je 0x442f50
mov eax, dword [esp + 0x1c]
sub eax, edi
add ecx, edi
push eax
push ecx
inc ecx
push ecx
call fcn.00452ea0
mov eax, dword [0x485434]
add esp, 0xc
mov byte [eax + edi], 2
inc dword [esp + 0x1c]
xor ebp, ebp
inc edi
inc ebp
jmp 0x442fca
lea edx, [ecx + edi]
mov al, byte [edx]
cmp al, 0x5b
je 0x442f5d
cmp al, 0x7b
jne 0x442f62
imul ebp, ebp, 0xa
jmp 0x442fd0
cmp ebp, 0xa
jb 0x442f7c
cmp al, 0x5d
je 0x442f6f
cmp al, 0x7d
jne 0x442f7c
mov eax, ebp
push 0xa
pop ebp
xor edx, edx
div ebp
mov ebp, eax
jmp 0x442fd0
cmp edi, ebx
jle 0x442fd0
cmp ebp, 1
jne 0x442fd0
cmp al, 0x41
jl 0x442f8d
cmp al, 0x5a
jle 0x442fd0
cmp al, 0x61
jl 0x442f95
cmp al, 0x7a
jle 0x442fd0
cmp al, 0x30
jl 0x442f9d
cmp al, 0x39
jle 0x442fd0
cmp al, 0x5f
je 0x442fd0
cmp al, 0x2e
je 0x442fd0
cmp al, 0x7d
je 0x442fd0
mov eax, dword [esp + 0x1c]
sub eax, edi
push eax
push edx
inc edx
push edx
call fcn.00452ea0
mov eax, dword [0x485434]
add esp, 0xc
mov byte [eax + edi], 2
inc dword [esp + 0x1c]
xor ebp, ebp
mov ecx, dword [0x485434]
inc edi
cmp byte [ecx + edi], bl
jne 0x442ed3
cmp ebp, ebx
je 0x443009
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ecx
call edi
mov ecx, dword [0x485434]
mov byte [eax + ecx + 1], bl
push dword [0x485434]
call edi
mov ecx, dword [0x485434]
mov byte [eax + ecx], 2
mov ecx, dword [0x485434]
push 0x7b
push ecx
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
je 0x4431b7
push 0x7d
push dword [0x485434]
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
je 0x4431b7
push dword [0x485434]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [esp + 0x1c], eax
push 0x46f160
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], 0x481968
mov al, byte [esp + 0x20]
add al, 0x31
mov byte [esp + 0x13d], al
mov eax, dword [esp + 0x24]
cmp dword [eax], ebx
je 0x4431a0
mov eax, dword [0x485434]
cmp eax, ebx
je 0x443095
lea ecx, [esp + 0x13c]
push ecx
push eax
call fcn.004526d0
pop ecx
pop ecx
jmp 0x443097
xor eax, eax
cmp eax, ebx
je 0x4431a0
xor edi, edi
cmp dword [esp + 0x1c], ebx
jle 0x4431a0
push 3
lea eax, [esp + 0x140]
push eax
mov eax, dword [0x485434]
add eax, edi
push eax
call fcn.00453201
add esp, 0xc
test eax, eax
jne 0x443195
mov eax, dword [esp + 0x24]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebp, eax
mov eax, dword [esp + 0x24]
mov eax, dword [eax]
cmp eax, ebx
je 0x4430ee
push eax
call fcn.00452af1
pop ecx
jmp 0x4430f0
xor eax, eax
mov ecx, dword [esp + 0x1c]
lea eax, [eax + ecx + 0x1000]
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
lea ecx, [eax + edi]
cmp ecx, ebx
je 0x443144
lea edx, [ecx + 3]
cmp edx, ebx
je 0x443144
mov edx, dword [esp + 0x1c]
sub edx, edi
add edx, 0xfffffffe
cmp edx, ebx
jbe 0x443144
push edx
lea eax, [ecx + 3]
push eax
push ecx
call fcn.00452ea0
mov eax, dword [0x485434]
add esp, 0xc
sub dword [esp + 0x1c], 3
lea ecx, [eax + ebp]
add ecx, edi
cmp ecx, ebx
je 0x44317b
lea edx, [eax + edi]
mov dword [esp + 0x10], edx
cmp edx, ebx
je 0x44317b
mov edx, dword [esp + 0x1c]
sub edx, edi
inc edx
cmp edx, ebx
jbe 0x44317b
push edx
push dword [esp + 0x14]
push ecx
call fcn.00452ea0
mov eax, dword [0x485434]
add esp, 0xc
mov ecx, dword [esp + 0x24]
push ebp
push dword [ecx]
add eax, edi
push eax
call fcn.00452790
add dword [esp + 0x28], ebp
add esp, 0xc
add edi, ebp
jmp 0x443196
inc edi
cmp edi, dword [esp + 0x1c]
jl 0x4430ab
add dword [esp + 0x24], 4
inc dword [esp + 0x20]
cmp dword [esp + 0x24], 0x48198c
jl 0x443061
push str.loop
push dword [0x485434]
call fcn.004010ff
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
pop ecx
pop ecx
test eax, eax
je 0x4432f1
cmp dword [esp + 0x2c], 7
ja 0x4432f1
mov eax, dword [esp + 0x2c]
xor ebp, ebp
inc ebp
shl eax, 6
lea eax, [eax + 0x484b78]
mov dword [esp + 0x18], eax
push ebp
lea eax, [esp + 0x140]
push str.__0_dd
push eax
call edi
mov eax, dword [esp + 0x24]
fld dword [eax]
call fcn.00454810
push eax
lea eax, [esp + 0x14c]
push eax
push esi
call edi
push ebp
lea eax, [esp + 0x158]
push str.loopcount_d
push eax
call edi
add esp, 0x24
push ebx
push ebx
push esi
lea eax, [esp + 0x148]
push eax
push dword [0x485434]
call fcn.0044923e
push ebp
lea eax, [esp + 0x140]
push str.loops_d
push eax
call edi
add esp, 0xc
push ebx
push ebx
push esi
lea eax, [esp + 0x148]
push eax
push dword [0x485434]
call fcn.0044923e
push ebp
lea eax, [esp + 0x140]
push str.loop_d
push eax
call edi
add esp, 0xc
push ebx
push ebx
push esi
lea eax, [esp + 0x148]
push eax
push dword [0x485434]
call fcn.0044923e
inc ebp
cmp ebp, 0x20
jle 0x4431f6
mov eax, dword [esp + 0x18]
fld dword [eax]
push 7
push ecx
push ecx
fstp qword [esp]
push esi
call fcn.0041c447
add esp, 0x10
push ebx
push ebx
push esi
push str.loopcount
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.loops
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push 0x46f10c
push dword [0x485434]
call fcn.0044923e
push 0x25
push dword [0x485434]
call fcn.00452d30
pop ecx
pop ecx
cmp eax, ebx
je 0x4433db
inc eax
push 0x25
push eax
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
je 0x4433db
push 0xfc
lea eax, [esp + 0x140]
push eax
push dword [0x485434]
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov ebp, eax
mov dword [esp + 0x20], ebp
cmp ebp, ebx
je 0x4433db
mov eax, dword [0x485434]
cmp eax, ebx
je 0x443354
push eax
call fcn.00452af1
pop ecx
jmp 0x443356
xor eax, eax
lea eax, [eax + ebp + 0x1000]
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push eax
call fcn.00452af1
pop ecx
mov ecx, 0x1000
cmp eax, ecx
jbe 0x44339e
mov eax, dword [0x485434]
cmp eax, ebx
je 0x44339a
push eax
call fcn.00452af1
pop ecx
jmp 0x4433a0
xor eax, eax
jmp 0x4433a0
mov eax, ecx
push 1
push eax
call fcn.00452b24
mov ebp, eax
pop ecx
pop ecx
cmp ebp, ebx
je 0x4433db
mov eax, dword [esp + 0x20]
inc eax
push eax
push ebp
push dword [0x485434]
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov eax, dword [0x485434]
cmp eax, ebx
je 0x4433d4
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
call fcn.00452756
pop ecx
push 0x25
push dword [0x485434]
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
je 0x443702
push str.SOFTWARE_vTaskUserVariables
push 2
call fcn.0044abb4
pop ecx
pop ecx
test eax, eax
jle 0x443702
cmp dword [esp + 0x2c], 7
ja 0x443702
push dword [0x485434]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x18], ebx
jne 0x44344a
mov eax, dword [0x485434]
cmp eax, ebx
je 0x4436da
push 0x46f108
push eax
call fcn.004526d0
jmp 0x4436e7
push 0x25
push dword [0x485434]
jmp 0x4436e2
cmp byte [ebp], 0x5b
jne 0x44345e
inc ebp
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cmp eax, 0x40
jle 0x443470
push 0x40
pop eax
jmp 0x443478
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push ebp
lea eax, [esp + 0x248]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [esp + 0x241]
push 0x25
push eax
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
je 0x4434b0
lea eax, [esp + 0x241]
push 0x25
push eax
call fcn.00452d30
pop ecx
pop ecx
mov byte [eax], bl
lea eax, [esp + 0x241]
push 0x5c
push eax
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
je 0x4434d8
lea eax, [esp + 0x241]
push 0x5c
push eax
call fcn.00452d30
pop ecx
pop ecx
mov byte [eax], bl
cmp byte [esp + 0x241], bl
je 0x4436cc
lea eax, [esp + 0x241]
push eax
push str.SOFTWARE_vTaskUserVariables
push str._s_s
push ebx
push ebx
push ebx
push 1
call fcn.0044ad45
add esp, 0x1c
mov dword [esp + 0x20], eax
cmp eax, ebx
jne 0x443527
lea eax, [esp + 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [esp + 0x240]
mov byte [eax + ecx - 1], bl
jmp 0x4434d8
mov eax, dword [esp + 0x20]
add eax, 0x1000
mov ecx, 0x208
cmp eax, ecx
jge 0x44353b
mov eax, ecx
push eax
push esi
call fcn.00401000
mov esi, eax
pop ecx
pop ecx
cmp esi, ebx
je 0x446ae3
mov eax, dword [esp + 0x20]
add eax, 2
mov ecx, 0x208
cmp eax, ecx
jge 0x443560
mov eax, ecx
lea ecx, [esp + 0x241]
push ecx
push str.SOFTWARE_vTaskUserVariables_s
push eax
push esi
push ebx
push 3
call fcn.0044ad45
add esp, 0x18
dec eax
mov dword [esp + 0x20], ebx
cmp eax, ebx
jl 0x443587
mov dword [esp + 0x20], eax
sub ebp, dword [0x485434]
jns 0x443591
xor ebp, ebp
lea eax, [esp + 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [esp + 0x24]
sub ecx, ebp
sub ecx, eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [0x485434]
cmp ecx, ebx
je 0x4435c8
push ecx
call fcn.00452af1
pop ecx
mov ecx, dword [0x485434]
mov dword [esp + 0x10], eax
jmp 0x4435cc
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x24]
add eax, dword [esp + 0x20]
mov dword [esp + 0x24], eax
add eax, 0x1000
cmp dword [esp + 0x10], eax
jbe 0x4435f8
cmp ecx, ebx
je 0x4435f6
push ecx
call fcn.00452af1
pop ecx
mov ecx, dword [0x485434]
jmp 0x4435f8
xor eax, eax
push eax
push ecx
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
lea ecx, [eax + ebp]
test ecx, ecx
je 0x443664
lea eax, [esp + 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, dword [0x485434]
add ecx, eax
add ecx, ebp
je 0x443664
mov ecx, dword [esp + 0x1c]
inc ecx
cmp ecx, ebx
jbe 0x443664
push ecx
lea eax, [esp + 0x244]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, dword [0x485434]
add ecx, eax
add ecx, ebp
push ecx
add eax, ebp
push eax
call fcn.00452ea0
mov eax, dword [0x485434]
add esp, 0xc
mov edx, dword [esp + 0x20]
lea ecx, [eax + ebp]
add edx, ecx
mov dword [esp + 0x10], edx
cmp edx, ebx
je 0x443695
cmp ecx, ebx
je 0x443695
mov edx, dword [esp + 0x1c]
inc edx
cmp edx, ebx
jbe 0x443695
push edx
push ecx
push dword [esp + 0x18]
call fcn.00452ea0
mov eax, dword [0x485434]
add esp, 0xc
push dword [esp + 0x20]
add eax, ebp
push esi
push eax
call fcn.00452790
add esp, 0xc
lea eax, [esp + 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [esp + 0x24]
sub ecx, eax
mov eax, dword [0x485434]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x20]
add eax, ebp
lea ebp, [eax + ecx - 1]
cmp dword [esp + 0x18], ebx
jne 0x4436de
lea eax, [ebp + 1]
jmp 0x443432
xor ebp, ebp
jmp 0x4436eb
push 0x25
inc ebp
push ebp
call fcn.00452d30
pop ecx
mov ebp, eax
pop ecx
cmp ebp, ebx
jne 0x443457
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 2
jl 0x443427
mov dword [esp + 0x24], 1
push dword [esp + 0x24]
lea eax, [esp + 0x244]
push str.__parameter_d
push eax
call edi
lea eax, [esp + 0x24c]
push eax
push dword [0x485434]
call fcn.004010ff
add esp, 0x14
test eax, eax
je 0x443822
push dword [esp + 0x24]
push str.SOFTWARE_vTaskUserVariablesparameter_d
push ebx
push ebx
push ebx
push 1
call fcn.0044ad45
mov ebp, eax
add esp, 0x18
cmp ebp, ebx
jle 0x443822
cmp esi, ebx
je 0x443766
push esi
call fcn.00452756
pop ecx
lea eax, [ebp + 0x100]
mov ecx, 0x10000
cmp eax, ecx
jl 0x443782
mov edx, 0x1000
cmp eax, edx
jle 0x443786
cmp eax, ecx
jge 0x443788
mov eax, ecx
jmp 0x443788
mov eax, edx
push 1
push eax
call fcn.00452b24
mov esi, eax
lea eax, [ebp + 2]
pop ecx
pop ecx
cmp eax, 0x208
jge 0x4437a3
mov eax, 0x208
push dword [esp + 0x24]
push str.SOFTWARE_vTaskUserVariablesparameter_d
push eax
push esi
push ebx
push 3
call fcn.0044ad45
mov eax, dword [0x485434]
add esp, 0x18
cmp eax, ebx
je 0x4437cf
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x4437d3
mov dword [esp + 0x10], ebx
lea eax, [esp + 0x240]
push eax
push dword [0x485434]
call fcn.00449160
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
lea ecx, [esp + 0x24c]
push ecx
push eax
call fcn.0044923e
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
dec eax
cmp eax, 9
jl 0x44370a
push 0x5f
push dword [0x485434]
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
jne 0x443865
mov eax, dword [0x485434]
cmp eax, ebx
je 0x44385f
push 0x469208
push eax
call fcn.004526d0
pop ecx
pop ecx
jmp 0x443861
xor eax, eax
cmp eax, ebx
je 0x443887
push dword [0x485434]
call fcn.00441b66
push ebx
push ebx
push 0x485e00
push str.HTTP_STATUS
push dword [0x485434]
call fcn.0044923e
mov eax, dword [esp + 0x314]
and eax, 4
mov dword [esp + 0x4c], eax
jne 0x4463a4
cmp esi, ebx
jne 0x4438af
push 1
push 0x10000
call fcn.00452b24
pop ecx
pop ecx
mov esi, eax
mov eax, dword [0x485434]
cmp eax, ebx
je 0x4438c7
push 0x46b550
push eax
call fcn.004526d0
pop ecx
pop ecx
jmp 0x4438c9
xor eax, eax
cmp eax, ebx
je 0x44393c
push 0x7d
push dword [0x485434]
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
je 0x44393c
push ebx
push ebx
push 0x467af0
push str._r
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push 0x467aec
push str._n
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push 0x467af4
push str._r_n
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push 0x4664a0
push str._t
push dword [0x485434]
call fcn.0044923e
push dword [0x485434]
mov byte [esp + 0x1b], bl
mov dword [esp + 0x20], ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
cmp ebp, eax
jae 0x4463a4
cmp byte [esp + 0x17], bl
jne 0x443a1a
mov eax, dword [0x485434]
add eax, ebp
cmp byte [eax], 0x7b
jne 0x443a01
mov cl, byte [eax + 1]
cmp cl, 0x41
jl 0x443a01
cmp cl, 0x7a
jg 0x443a01
cmp cl, 0x5c
je 0x443a01
mov dword [esp + 0x20], 1
lea ecx, [ebp + 1]
jmp 0x4439ef
cmp dword [esp + 0x20], 0x20
jg 0x443a01
mov ecx, dword [esp + 0x20]
mov al, byte [eax + ecx]
cmp al, 0x41
jl 0x4439af
cmp al, 0x5a
jle 0x4439d7
cmp al, 0x61
jl 0x4439b7
cmp al, 0x7a
jle 0x4439d7
cmp al, 0x30
jl 0x4439bf
cmp al, 0x39
jle 0x4439d7
movsx eax, al
push eax
push str.__._
call fcn.00452d30
mov ebp, dword [esp + 0x24]
pop ecx
pop ecx
test eax, eax
je 0x443a01
mov eax, dword [0x485434]
mov ecx, dword [esp + 0x20]
add eax, ebp
cmp byte [eax + ecx], 0x7d
je 0x4439f7
inc ecx
mov dword [esp + 0x20], ecx
add ecx, ebp
cmp ecx, dword [esp + 0x24]
jb 0x443999
jmp 0x443a01
cmp ecx, 1
jle 0x443a01
mov byte [esp + 0x17], 1
inc ebp
mov dword [esp + 0x1c], ebp
cmp ebp, dword [esp + 0x24]
jb 0x443960
cmp byte [esp + 0x17], bl
je 0x4463a4
cmp byte [0x4840a0], 2
jb 0x443a51
mov eax, dword [0x485434]
push 8
lea eax, [eax + ebp - 1]
push eax
lea eax, [esp + 0x144]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [esp + 0x13c]
push eax
push str.____System_Variables_Processing_Performed:___s_...
call fcn.0042604a
pop ecx
pop ecx
lea eax, [esp + 0x70]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
cmp dword [0x480108], ebx
jne 0x443a6f
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [0x480108], eax
push ebx
push ebx
mov ebp, 0x467aec
push ebp
push str.ENTER
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push ebp
push str.linefeed
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push 0x467af4
push str.newline
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push ebp
push 0x46d7f0
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push 0x467af0
push 0x46d7e4
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push 0x4663d8
push str.rn
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push 0x4664a0
push 0x46d7d8
push dword [0x485434]
call fcn.0044923e
push 0x46f050
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x443d61
push str.CURDIR
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x443ba9
push esi
push 0x102
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push 2
push 0x4648e0
push esi
call fcn.0044937b
mov eax, dword [0x485434]
cmp eax, ebx
je 0x443b66
push eax
call fcn.00452af1
pop ecx
mov ebp, eax
jmp 0x443b68
xor ebp, ebp
push 0x46f040
push dword [0x485434]
call fcn.00449160
imul eax, eax, 0x104
add eax, ebp
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46f034
push eax
call fcn.0044923e
push ebx
push ebx
mov ebp, 0x4842d0
push ebp
push str.command
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push ebp
push str.cmd
push dword [0x485434]
call fcn.0044923e
push dword [0x48409c]
push 0x464bf8
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.command_id
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.cmd_id
push dword [0x485434]
call fcn.0044923e
push str.cmdline
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x443c9d
mov ebp, dword [sym.imp.KERNEL32.dll_GetCommandLineA]
call ebp
test eax, eax
je 0x443c9d
mov eax, dword [0x485434]
cmp eax, ebx
je 0x443c43
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x443c47
mov dword [esp + 0x10], ebx
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0x46eff0
push dword [0x485434]
mov ebp, eax
call fcn.00449160
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
push 0x46efe4
push dword [0x485434]
call fcn.0044923e
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.color_depth
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x443cee
push 0xc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push 0x464bf8
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push 0x46efc4
push dword [0x485434]
call fcn.0044923e
mov eax, dword [esp + 0x310]
inc eax
push eax
push 0x464bf8
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.currentstep
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.current_step
push dword [0x485434]
call fcn.0044923e
mov eax, dword [esp + 0x2c]
inc eax
push eax
push 0x464bf8
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.currentfile
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.current_file
push dword [0x485434]
call fcn.0044923e
jmp 0x443d67
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x46d864
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x444059
push str.FILENAME
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x443e26
mov eax, dword [0x485434]
cmp eax, ebx
je 0x443db1
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x443db5
mov dword [esp + 0x10], ebx
mov eax, dword [0x480314]
imul eax, eax, 0x104
add eax, 0x4804f8
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0x46ef6c
push dword [0x485434]
mov ebp, eax
call fcn.00449160
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
mov ecx, dword [0x480314]
imul ecx, ecx, 0x104
push ebx
push ebx
add ecx, 0x4804f8
push ecx
push 0x46ef60
push eax
call fcn.0044923e
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.FILEBASENAME
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x443ec2
mov eax, dword [0x480314]
imul eax, eax, 0x104
push 0xc
push esi
add eax, 0x4804f8
push eax
call fcn.00411eca
mov eax, dword [0x485434]
cmp eax, ebx
je 0x443e6f
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x443e73
mov dword [esp + 0x10], ebx
push 0x46ef40
push dword [0x485434]
call fcn.00449160
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46ef30
push eax
call fcn.0044923e
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.FILEPATH
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x443f6b
mov eax, dword [0x480314]
imul eax, eax, 0x104
push 3
push esi
add eax, 0x4804f8
push eax
call fcn.00411eca
push 2
push 0x4648e0
push esi
call fcn.0044937b
mov eax, dword [0x485434]
cmp eax, ebx
je 0x443f18
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x443f1c
mov dword [esp + 0x10], ebx
push 0x46ef18
push dword [0x485434]
call fcn.00449160
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46ef0c
push eax
call fcn.0044923e
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.FILEEXT
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x444007
mov eax, dword [0x480314]
imul eax, eax, 0x104
push 8
push esi
add eax, 0x4804f8
push eax
call fcn.00411eca
mov eax, dword [0x485434]
cmp eax, ebx
je 0x443fb4
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x443fb8
mov dword [esp + 0x10], ebx
push 0x46eef8
push dword [0x485434]
call fcn.00449160
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46eeec
push eax
call fcn.0044923e
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.fail
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x444059
push str.SOFTWARE_vTaskFailStep
call fcn.0044dcf9
push eax
push 0x464bf8
push esi
call edi
add esp, 0x10
push ebx
push ebx
push esi
push str.failstep
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.fail_step
push dword [0x485434]
call fcn.0044923e
push 0x46eec8
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x444415
push str.UserVariableslogin_username
push 0x103
push esi
call fcn.0044def5
add esp, 0xc
push ebx
push ebx
push esi
push str.login_username
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.login_name
push dword [0x485434]
call fcn.0044923e
push str.UserVariableslogin_password
push 0x103
push esi
call fcn.0044def5
push 1
push str.EATATJOES
push esi
call fcn.0041a6c9
add esp, 0x18
push ebx
push ebx
push esi
push str.login_password
push dword [0x485434]
call fcn.0044923e
push str.LOGFILE
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x444158
push esi
call fcn.00424df8
mov eax, dword [0x485434]
cmp eax, ebx
je 0x444111
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x444115
mov dword [esp + 0x10], ebx
push 0x46ee7c
push dword [0x485434]
call fcn.00449160
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46ee70
push eax
call fcn.0044923e
push str.LANGUAGE
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x444415
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
and eax, 0x3ff
cmp eax, 0x15
jg 0x4442e3
je 0x4442d1
cmp eax, 0xb
jg 0x44424b
je 0x444239
dec eax
je 0x444227
sub eax, 3
je 0x444215
dec eax
je 0x444203
dec eax
je 0x4441f1
dec eax
je 0x4441df
dec eax
je 0x4441cd
dec eax
dec eax
jne 0x4443f6
cmp esi, ebx
je 0x444402
push str.Spanish
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Greek
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.German
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Danish
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Czech
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Chinese
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Arabic
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Finnish
jmp 0x4443ff
sub eax, 0xc
je 0x4442bf
sub eax, 4
je 0x4442ad
dec eax
je 0x44429b
dec eax
je 0x444289
dec eax
je 0x444277
dec eax
jne 0x4443f6
cmp esi, ebx
je 0x444402
push str.Norwegian
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Dutch
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Korean
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Japanese
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Italian
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.French
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Polish
jmp 0x4443ff
cmp eax, 0x46
jg 0x4443f6
je 0x4443eb
cmp eax, 0x1f
jg 0x444390
je 0x444385
sub eax, 0x16
je 0x444376
dec eax
dec eax
je 0x444364
dec eax
je 0x444352
dec eax
je 0x444340
sub eax, 3
je 0x44432e
dec eax
jne 0x4443f6
cmp esi, ebx
je 0x444402
push str.Thai
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Swedish
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Croatian
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Russian
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Romanian
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Portuguese
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Turkish
jmp 0x4443ff
sub eax, 0x22
je 0x4443e0
dec eax
dec eax
je 0x4443d5
dec eax
dec eax
je 0x4443ca
dec eax
je 0x4443bf
dec eax
dec eax
je 0x4443b4
sub eax, 0x10
jne 0x4443f6
cmp esi, ebx
je 0x444402
push str.Hindi
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Farsi
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Lithuanian
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Latvian
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Slovenian
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Ukrainian
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.Punjabi
jmp 0x4443ff
cmp esi, ebx
je 0x444402
push str.English
push esi
call ebp
push ebx
push ebx
push esi
push 0x46ed48
push dword [0x485434]
call fcn.0044923e
push 0x46ed44
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
mov ebp, 0x46b67c
test eax, eax
je 0x44470d
push str.memtotal
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x44446e
call fcn.00419619
push eax
push 0x464bf4
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push 0x46ed2c
push dword [0x485434]
call fcn.0044923e
push str.memfree
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x4444a8
call fcn.00419655
push eax
push 0x464bf4
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push 0x46ed14
push dword [0x485434]
call fcn.0044923e
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [esp + 0x58]
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.mouse_x
push dword [0x485434]
call fcn.0044923e
push dword [esp + 0x5c]
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.mouse_y
push dword [0x485434]
call fcn.0044923e
mov eax, dword [0x485434]
cmp eax, ebx
je 0x444507
push str.monitor
push eax
call fcn.004526d0
pop ecx
pop ecx
jmp 0x444509
xor eax, eax
cmp eax, ebx
je 0x44452f
push ebx
push ebx
call fcn.00447990
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.monitors
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x72]
push esi
push 3
push eax
call fcn.0041c2d7
add esp, 0xc
push ebx
push ebx
push esi
push str.month_name
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.monthname
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x72]
push esi
push 4
push eax
call fcn.0041c2d7
add esp, 0xc
push ebx
push ebx
push esi
push str.month_abbr
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.monthabbr
push dword [0x485434]
call fcn.0044923e
mov eax, dword [esp + 0x72]
and eax, 9
cmp eax, 8
je 0x4445b2
cmp eax, 1
je 0x4445b2
xor ecx, ecx
jmp 0x4445b5
xor ecx, ecx
inc ecx
movzx eax, word [esp + 0x70]
mov edx, eax
and edx, reloc.WS2_32.dll_closesocket
jns 0x4445c9
dec edx
or edx, 0xfffffffc
inc edx
jne 0x4445e6
push 0x64
cdq
pop ebp
idiv ebp
test edx, edx
jne 0x4445f3
movzx eax, word [esp + 0x70]
cdq
mov ebp, 0x190
idiv ebp
test edx, edx
je 0x4445f3
cmp word [esp + 0x72], 2
jne 0x4445f3
xor ebp, ebp
inc ebp
jmp 0x4445f5
xor ebp, ebp
xor eax, eax
cmp word [esp + 0x72], 2
sete al
sub ecx, eax
sub ecx, ebp
add ecx, 0x1e
push ecx
mov ebp, 0x464bf8
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.month_days
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.monthdays
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x72]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.month
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.month2
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x72]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.month1
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x7a]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.minute
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.minute2
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x7a]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.minute1
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x7e]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.millisecond
push dword [0x485434]
call fcn.0044923e
mov ebp, 0x46b67c
push 0x46ec38
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x44488b
push str.PROGRAMFILES
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x4447b8
push 0x102
push esi
push 0x467b48
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
push 2
push 0x4648e0
push esi
call fcn.0044937b
mov eax, dword [0x485434]
cmp eax, ebx
je 0x444771
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x444775
mov dword [esp + 0x10], ebx
push 0x467b48
push dword [0x485434]
call fcn.00449160
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46ec18
push eax
call fcn.0044923e
push str.PATH
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x44488b
push 1
push esi
push 0x467b2c
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov dword [esp + 0x20], eax
cmp esi, ebx
je 0x4447ef
push esi
call fcn.00452756
pop ecx
mov eax, 0x1000
add dword [esp + 0x20], eax
cmp dword [esp + 0x20], eax
jle 0x444802
mov eax, dword [esp + 0x20]
push 1
push eax
call fcn.00452b24
pop ecx
mov esi, eax
mov eax, dword [esp + 0x24]
pop ecx
add eax, 0xfffffffe
push eax
push esi
push 0x467b2c
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
push 2
push 0x4648e0
push esi
call fcn.0044937b
mov eax, dword [0x485434]
cmp eax, ebx
je 0x444845
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x444849
mov dword [esp + 0x10], ebx
push 0x467b2c
push dword [0x485434]
call fcn.00449160
imul eax, dword [esp + 0x20]
add eax, dword [esp + 0x10]
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46ec08
push eax
call fcn.0044923e
push 0x46ec04
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x444a2b
push ebx
push ebx
push 0x467af0
push str.return
push dword [0x485434]
call fcn.0044923e
push str.repeat
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x444a2b
cmp dword [esp + 0x2c], 7
ja 0x444a2b
mov ebp, dword [esp + 0x2c]
lea ebp, [ebp*4 + 0x480294]
mov eax, dword [ebp]
cmp eax, ebx
jge 0x4448f5
xor eax, eax
push eax
push str._05d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount5
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.repeats5
push dword [0x485434]
call fcn.0044923e
mov eax, dword [ebp]
cmp eax, ebx
jge 0x444930
xor eax, eax
push eax
push str._04d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount4
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.repeats4
push dword [0x485434]
call fcn.0044923e
mov eax, dword [ebp]
cmp eax, ebx
jge 0x44496b
xor eax, eax
push eax
push str._03d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount3
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.repeats3
push dword [0x485434]
call fcn.0044923e
mov eax, dword [ebp]
cmp eax, ebx
jge 0x4449a6
xor eax, eax
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount2
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.repeats2
push dword [0x485434]
call fcn.0044923e
mov ebp, dword [ebp]
cmp ebp, ebx
jge 0x4449e1
xor ebp, ebp
push ebp
push 0x464bf8
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.repeats
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push 0x46eb54
push dword [0x485434]
call fcn.0044923e
mov ebp, 0x46b67c
push 0x46eb50
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x4451f2
push ebx
push ebx
push str.__r_n
push str.SPACE
push dword [0x485434]
call fcn.0044923e
push str.SYSDIR
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x444ad5
push 0x102
push esi
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov eax, dword [0x485434]
cmp eax, ebx
je 0x444a92
push eax
call fcn.00452af1
pop ecx
mov ebp, eax
jmp 0x444a94
xor ebp, ebp
push 0x46eb38
push dword [0x485434]
call fcn.00449160
imul eax, eax, 0x104
add eax, ebp
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46eb2c
push eax
call fcn.0044923e
push str.STARTMENU
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x444b57
push esi
push 2
call fcn.004116b1
push 2
push 0x4648e0
push esi
call fcn.0044937b
mov eax, dword [0x485434]
cmp eax, ebx
je 0x444b14
push eax
call fcn.00452af1
pop ecx
mov ebp, eax
jmp 0x444b16
xor ebp, ebp
push 0x46eb14
push dword [0x485434]
call fcn.00449160
imul eax, eax, 0x104
add eax, ebp
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46eb08
push eax
call fcn.0044923e
push str.step_
push dword [0x485434]
jmp 0x4450b0
mov edx, dword [esp + 0x18]
mov cl, byte [edx]
xor eax, eax
jmp 0x444b7f
cmp cl, 0x7d
je 0x444b83
cmp eax, 0x3f
jge 0x444b83
inc eax
mov cl, byte [edx + eax]
cmp cl, bl
jne 0x444b71
add eax, 2
cmp eax, 0x3f
jle 0x444b8e
push 0x3f
pop eax
push eax
push dword [esp + 0x1c]
lea eax, [esp + 0x144]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [esp + 0x13c]
push eax
call fcn.0040109c
mov ebp, eax
pop ecx
mov byte [esi], bl
cmp ebp, 1
jl 0x44508f
mov eax, dword [0x480314]
cmp ebp, dword [eax*4 + 0x480274]
jg 0x44508f
lea eax, [esp + 0x13c]
push str..action
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444c04
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
lea eax, [eax + ebp - 0xf54]
jmp 0x445087
lea eax, [esp + 0x13c]
push str..category
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444c3a
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
push dword [eax + ebp - 0xf14]
jmp 0x444fd7
lea eax, [esp + 0x13c]
push str..image
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444c71
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
mov eax, dword [eax + ebp - 0xf10]
inc eax
jmp 0x444fa6
lea eax, [esp + 0x13c]
push str..text
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444ce7
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
push dword [eax + ebp - 0xf04]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cmp eax, 0xff
jle 0x444cb7
mov eax, 0xff
jmp 0x444cd1
mov eax, dword [0x480314]
mov eax, dword [eax*4 + 0x481990]
push dword [eax + ebp - 0xf04]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
mov eax, dword [0x480314]
mov eax, dword [eax*4 + 0x481990]
push dword [eax + ebp - 0xf04]
jmp 0x444d5b
lea eax, [esp + 0x13c]
push str..comment
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444d67
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
push dword [eax + ebp - 0xf00]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cmp eax, 0xff
jle 0x444d2d
mov eax, 0xff
jmp 0x444d47
mov eax, dword [0x480314]
mov eax, dword [eax*4 + 0x481990]
push dword [eax + ebp - 0xf00]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
mov eax, dword [0x480314]
mov eax, dword [eax*4 + 0x481990]
push dword [eax + ebp - 0xf00]
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
jmp 0x44508f
lea eax, [esp + 0x13c]
push str..options
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444d9d
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
lea eax, [eax + ebp - 0xefc]
jmp 0x445087
lea eax, [esp + 0x13c]
push str..timeout
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444dd3
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
lea eax, [eax + ebp - 0xdf8]
jmp 0x445087
lea eax, [esp + 0x13c]
push str..output_option
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444e09
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
lea eax, [eax + ebp - 0x28c]
jmp 0x445087
lea eax, [esp + 0x13c]
push str..output
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444e3f
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
lea eax, [eax + ebp - 0x2cc]
jmp 0x445087
lea eax, [esp + 0x13c]
push str..fail_mode
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444e75
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
lea eax, [eax + ebp - 0x187]
jmp 0x445087
lea eax, [esp + 0x13c]
push str..fail_option
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444eab
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
lea eax, [eax + ebp - 0x147]
jmp 0x445087
lea eax, [esp + 0x13c]
push str..fail_snapshot
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444ede
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
push dword [eax + ebp - 0x40]
jmp 0x444fd7
lea eax, [esp + 0x13c]
push str..fail_log
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444f11
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
push dword [eax + ebp - 0x3c]
jmp 0x444fd7
lea eax, [esp + 0x13c]
push str..grid_text_column
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444f44
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
push dword [eax + ebp - 0x34]
jmp 0x444fd7
lea eax, [esp + 0x13c]
push str..run_status
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444f77
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
push dword [eax + ebp - 0xf0c]
jmp 0x444fd7
lea eax, [esp + 0x13c]
push str..run_result
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444fa9
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
movzx eax, byte [eax + ebp - 0x30]
push eax
jmp 0x444fd7
lea eax, [esp + 0x13c]
push str..run_attempts
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x444fe7
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
push dword [eax + ebp - 0x2c]
push 0x464bf8
push esi
call edi
add esp, 0xc
jmp 0x44508f
lea eax, [esp + 0x13c]
push str..custom
push eax
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x44501a
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x481990]
lea eax, [eax + ebp - 0x3d0]
jmp 0x445087
mov dword [esp + 0x24], ebx
mov eax, dword [esp + 0x24]
inc eax
push eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x2c4]
push str..value_d
push eax
call edi
lea eax, [esp + 0x2cc]
push eax
lea eax, [esp + 0x14c]
push eax
call fcn.004526d0
add esp, 0x14
test eax, eax
jne 0x445062
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], eax
cmp eax, 8
jl 0x44501e
jmp 0x44508f
mov eax, dword [0x480314]
imul ebp, ebp, 0xf54
mov ecx, dword [eax*4 + 0x481990]
mov eax, dword [esp + 0x24]
add ecx, ebp
imul eax, eax, 0x104
lea eax, [ecx + eax - 0xbf0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
push ebx
push esi
lea eax, [esp + 0x148]
push eax
push dword [0x485434]
call fcn.0044923e
mov eax, dword [esp + 0x18]
push str.step_
inc eax
push eax
call fcn.004010ff
pop ecx
mov dword [esp + 0x1c], eax
pop ecx
cmp eax, ebx
jne 0x444b67
push ebx
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
mov ebp, 0x46b67c
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.screen_x
push dword [0x485434]
call fcn.0044923e
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.screen_y
push dword [0x485434]
call fcn.0044923e
mov ecx, dword [0x485434]
cmp ecx, ebx
je 0x44512c
push 0x46e9fc
push ecx
call fcn.004526d0
pop ecx
pop ecx
mov ecx, dword [0x485434]
jmp 0x44512e
xor eax, eax
cmp eax, ebx
je 0x445192
cmp ecx, ebx
je 0x445145
push 0x466d0c
push ecx
call fcn.004526d0
pop ecx
pop ecx
jmp 0x445147
xor eax, eax
cmp eax, ebx
je 0x445192
push 2
push ebx
call fcn.00447990
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.screen_x2
push dword [0x485434]
call fcn.0044923e
push 2
push 1
call fcn.00447990
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.screen_y2
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x7c]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.second
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.second2
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x7c]
push eax
push 0x464bf8
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.second1
push dword [0x485434]
call fcn.0044923e
mov ebp, 0x46b67c
push 0x46e9bc
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x445456
push ebx
push ebx
push 0x4664a0
push str.TAB
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push 0x4664a0
push str.tab
push dword [0x485434]
call fcn.0044923e
push str.temp
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x445369
lea eax, [esp + 0x13c]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov ebp, 0x4841c8
cmp byte [0x4841c8], bl
jne 0x445289
push ebp
push ebx
push 0x464a50
lea eax, [esp + 0x148]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
mov eax, dword [0x485434]
cmp eax, ebx
je 0x44529f
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x4452a3
mov dword [esp + 0x10], ebx
push str.tempdir
push dword [0x485434]
call fcn.00449160
push ebp
mov dword [esp + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [esp + 0x18]
imul ecx, eax
add ecx, dword [esp + 0x10]
push ecx
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
lea ecx, [esp + 0x144]
push ecx
push 0x46e990
push eax
call fcn.0044923e
mov eax, dword [0x485434]
cmp eax, ebx
je 0x44530f
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x445313
mov dword [esp + 0x10], ebx
push str.tempfile
push dword [0x485434]
call fcn.00449160
push 0x4841c8
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push 0x4841c8
push 0x46e978
push eax
call fcn.0044923e
mov ebp, 0x46b67c
mov eax, dword [esp + 0x2c]
push dword [eax*4 + 0x480274]
push 0x464bf8
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.totalsteps
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.total_steps
push dword [0x485434]
call fcn.0044923e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.ticks
push dword [0x485434]
call fcn.0044923e
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
mov eax, dword [esp + 0x90]
push 0x3c
pop ecx
cdq
idiv ecx
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.timezone
push dword [0x485434]
call fcn.0044923e
push 0x3f
push esi
push ebx
push ebx
push 0x40000000
push 0x400
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
push ebx
push ebx
push esi
push str.TODAY
push dword [0x485434]
call fcn.0044923e
push 0x3f
lea eax, [esp + 0x140]
push eax
push ebx
push ebx
push ebx
push 0x400
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
push ebx
push ebx
lea eax, [esp + 0x144]
push eax
push str.TIME
push dword [0x485434]
call fcn.0044923e
push 0x46e930
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x445735
mov ebp, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0x102
push esi
push ebx
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ebx
push ebx
push esi
push str.VistaTask_exe
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.vtask_exe
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.VistaRunner_exe
push dword [0x485434]
call fcn.0044923e
push 0x102
push esi
push ebx
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 1
push 0x1000
call fcn.00452b24
push 0x3f
mov dword [esp + 0x24], eax
lea eax, [esp + 0x2cc]
push eax
mov eax, 0x103
push eax
push dword [esp + 0x2c]
push eax
lea eax, [esp + 0x158]
push eax
push 0x7f
lea eax, [esp + 0x264]
push eax
push esi
call fcn.00454ed5
lea eax, [esp + 0x168]
push eax
lea eax, [esp + 0x270]
push eax
push 0x46b304
push esi
call edi
add esp, 0x3c
cmp dword [esp + 0x18], ebx
je 0x445537
push dword [esp + 0x18]
call fcn.00452756
pop ecx
push ebx
push ebx
push esi
push str.VistaTask_dir
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.vtask_dir
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.VistaRunner_dir
push dword [0x485434]
call fcn.0044923e
push dword [0x4800c0]
push 0x464bf4
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_hwnd
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.vtask_hwnd
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.VistaRunner_hwnd
push dword [0x485434]
call fcn.0044923e
push 0x102
push esi
push ebx
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 1
push esi
push ebx
call fcn.0041182f
push ebx
push ebx
push esi
push str.VistaTask_ver
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.vtask_ver
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.VistaRunner_ver
push dword [0x485434]
call fcn.0044923e
push dword [0x480100]
mov ebp, 0x464bf4
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_output
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.vtask_output
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.VistaRunner_output
push dword [0x485434]
call fcn.0044923e
push dword [0x4800f4]
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_list
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.vtask_list
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.VistaRunner_list
push dword [0x485434]
call fcn.0044923e
push dword [0x4800d4]
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_status
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.vtask_status
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.VistaRunner_status
push dword [0x485434]
call fcn.0044923e
push dword [0x4800c0]
call dword [sym.imp.USER32.dll_GetMenu]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_menu
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.vtask_menu
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.VistaRunner_menu
push dword [0x485434]
call fcn.0044923e
mov ebp, 0x46b67c
push 0x46e77c
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x445e3e
push str.WINDIR
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x4457ce
push 0x102
push esi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov eax, dword [0x485434]
cmp eax, ebx
je 0x445787
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x44578b
mov dword [esp + 0x10], ebx
push 0x46e76c
push dword [0x485434]
call fcn.00449160
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46e760
push eax
call fcn.0044923e
push str.WINVER
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x445932
cmp esi, ebx
je 0x4458ca
mov ebp, dword [sym.imp.KERNEL32.dll_GetVersion]
call ebp
cmp al, 5
jne 0x44580f
call ebp
shr eax, 8
cmp al, 1
jne 0x44580f
mov eax, str.Windows_XP
jmp 0x4458c2
call fcn.004195b6
test eax, eax
je 0x445822
mov eax, str.Windows_Server_2008
jmp 0x4458c2
call ebp
cmp al, 6
jne 0x44583b
call ebp
shr eax, 8
test al, al
jne 0x44583b
mov eax, str.Windows_Vista
jmp 0x4458c2
call ebp
cmp al, 6
jne 0x445851
call ebp
shr eax, 8
cmp al, 1
jne 0x445851
mov eax, str.Windows_7
jmp 0x4458c2
call ebp
cmp al, 5
jne 0x445867
call ebp
shr eax, 8
cmp al, 2
jne 0x445867
mov eax, str.Windows_2003
jmp 0x4458c2
call ebp
cmp al, 5
jne 0x44587d
call ebp
shr eax, 8
test al, al
jne 0x44587d
mov eax, str.Windows_2000
jmp 0x4458c2
call ebp
cmp al, 4
jne 0x445893
call ebp
shr eax, 8
cmp al, 0x5a
jne 0x445893
mov eax, str.Windows_ME
jmp 0x4458c2
call ebp
cmp al, 4
jne 0x4458a9
call ebp
shr eax, 8
cmp al, 0xa
jne 0x4458a9
mov eax, str.Windows_98
jmp 0x4458c2
call ebp
cmp al, 4
jne 0x4458bd
call ebp
shr eax, 8
test al, al
mov eax, str.Windows_NT
je 0x4458c2
mov eax, str.Unknown
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x485434]
cmp eax, ebx
je 0x4458e0
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x4458e4
mov dword [esp + 0x10], ebx
push 0x46e750
push dword [0x485434]
call fcn.00449160
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46e744
push eax
call fcn.0044923e
mov ebp, 0x46b67c
push str.WINDOW_
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x445a14
mov eax, dword [0x480108]
cmp eax, ebx
je 0x445a14
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x445a14
lea eax, [esp + 0x80]
push eax
push dword [0x480108]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x80]
inc eax
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.window_x
push dword [0x485434]
call fcn.0044923e
mov eax, dword [esp + 0x84]
inc eax
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.window_y
push dword [0x485434]
call fcn.0044923e
mov eax, dword [esp + 0x88]
sub eax, dword [esp + 0x80]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.window_width
push dword [0x485434]
call fcn.0044923e
mov eax, dword [esp + 0x8c]
sub eax, dword [esp + 0x84]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.window_height
push dword [0x485434]
call fcn.0044923e
push str.WINDOW
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x445a5a
push str.WIN_TITLE
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x445a5a
push str.WIN_TEXT
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x445af7
push esi
push 0x1ff
push 0xd
push dword [0x480108]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x485434]
cmp eax, ebx
je 0x445a84
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x445a88
mov dword [esp + 0x10], ebx
push 0x464c04
push dword [0x485434]
call fcn.00449160
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46e6d4
push eax
call fcn.0044923e
push ebx
push ebx
push esi
push 0x46e6c8
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push 0x46e6bc
push dword [0x485434]
call fcn.0044923e
push str.WIN_CLASS
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x445b27
push str.WINCLASS
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x445bb5
mov byte [esi], bl
mov eax, dword [0x480108]
cmp eax, ebx
je 0x445b3f
push 0x103
push esi
push eax
call dword [sym.imp.USER32.dll_GetClassNameA]
mov eax, dword [0x485434]
cmp eax, ebx
je 0x445b55
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x445b59
mov dword [esp + 0x10], ebx
push 0x46e698
push dword [0x485434]
call fcn.00449160
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46e68c
push eax
call fcn.0044923e
push ebx
push ebx
push esi
push 0x46e680
push dword [0x485434]
call fcn.0044923e
push str.WIN_ID
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x445be5
push str.WINID
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x445c7b
mov byte [esi], bl
mov eax, dword [0x480108]
cmp eax, ebx
je 0x445c05
push 0xfffffffffffffff4
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
push 0x464bf4
push esi
call edi
add esp, 0xc
mov eax, dword [0x485434]
cmp eax, ebx
je 0x445c1b
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x445c1f
mov dword [esp + 0x10], ebx
push 0x46e698
push dword [0x485434]
call fcn.00449160
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46e664
push eax
call fcn.0044923e
push ebx
push ebx
push esi
push 0x46e65c
push dword [0x485434]
call fcn.0044923e
push str.WIN_DATA
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x445cab
push str.WINDATA
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x445d7a
mov byte [esi], bl
mov eax, dword [0x480108]
cmp eax, ebx
je 0x445ccb
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
push 0x464bf4
push esi
call edi
add esp, 0xc
mov eax, dword [0x485434]
cmp eax, ebx
je 0x445ce1
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x445ce5
mov dword [esp + 0x10], ebx
push 0x46e698
push dword [0x485434]
call fcn.00449160
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46e638
push eax
call fcn.0044923e
push ebx
push ebx
push esi
push str.WIN_USERDATA
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push 0x46e61c
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.WINUSERDATA
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.USERDATA
push dword [0x485434]
call fcn.0044923e
call fcn.0041af93
push eax
mov ebp, 0x464bf8
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.weeknum
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x74]
push esi
push 2
push eax
call fcn.0041c2d7
add esp, 0xc
push ebx
push ebx
push esi
push str.weekday_abbr
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.weekdayabbr
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x74]
push esi
push 1
push eax
call fcn.0041c2d7
add esp, 0xc
push ebx
push ebx
push esi
push str.weekday
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x74]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.weekday1
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x74]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.weekday2
push dword [0x485434]
call fcn.0044923e
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x140]
push eax
mov dword [esp + 0x24], 0xff
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
push ebx
push ebx
lea eax, [esp + 0x144]
push eax
push str.username
push dword [0x485434]
call fcn.0044923e
push str.HWND
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x445efd
push dword [0x480108]
push 0x464bf4
push esi
call edi
mov eax, dword [0x485434]
add esp, 0xc
cmp eax, ebx
je 0x445eb0
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x445eb4
mov dword [esp + 0x10], ebx
push 0x4691f0
push dword [0x485434]
call fcn.00449160
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46e594
push eax
call fcn.0044923e
push str.DESKTOP
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
mov ebp, 0x46e580
test eax, eax
je 0x445f86
push esi
push 1
call fcn.004116b1
push 2
push 0x4648e0
push esi
call fcn.0044937b
mov eax, dword [0x485434]
cmp eax, ebx
je 0x445f43
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x445f47
mov dword [esp + 0x10], ebx
push ebp
push dword [0x485434]
call fcn.00449160
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46e574
push eax
call fcn.0044923e
push str.Documents
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x44600a
push esi
push 4
call fcn.004116b1
push 2
push 0x4648e0
push esi
call fcn.0044937b
mov eax, dword [0x485434]
cmp eax, ebx
je 0x445fc7
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x445fcb
mov dword [esp + 0x10], ebx
push ebp
push dword [0x485434]
call fcn.00449160
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push 0x46e55c
push eax
call fcn.0044923e
push str.AppData
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x44608e
push esi
push 5
call fcn.004116b1
push 2
push 0x4648e0
push esi
call fcn.0044937b
mov eax, dword [0x485434]
cmp eax, ebx
je 0x44604b
push eax
call fcn.00452af1
pop ecx
mov dword [esp + 0x10], eax
jmp 0x44604f
mov dword [esp + 0x10], ebx
push ebp
push dword [0x485434]
call fcn.00449160
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push str.AppData
push eax
call fcn.0044923e
movzx eax, word [esp + 0x70]
sub eax, 0x7d0
push eax
mov ebp, str._02d
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.year2
push dword [0x485434]
call fcn.0044923e
mov al, byte [esi + 1]
push ebx
push ebx
push esi
push str.year1
mov byte [esi], al
mov byte [esi + 1], bl
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x70]
push eax
push str._04d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.year
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.year4
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x76]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.day
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.day2
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x76]
push eax
push 0x464bf8
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.day1
push dword [0x485434]
call fcn.0044923e
mov cx, word [esp + 0x72]
xor eax, eax
inc eax
cmp ax, cx
sbb eax, eax
and eax, 0x1f
mov dword [esp + 0x6c], eax
cmp cx, 2
jbe 0x4461c0
movzx eax, word [esp + 0x70]
mov edx, eax
and edx, reloc.WS2_32.dll_closesocket
jns 0x44618f
dec edx
or edx, 0xfffffffc
inc edx
jne 0x4461b6
push 0x64
cdq
pop ebp
idiv ebp
test edx, edx
jne 0x4461ac
movzx eax, word [esp + 0x70]
cdq
mov ebp, 0x190
idiv ebp
test edx, edx
jne 0x4461b6
mov dword [esp + 0x18], 0x1d
jmp 0x4461c4
mov dword [esp + 0x18], 0x1c
jmp 0x4461c4
mov dword [esp + 0x18], ebx
push 3
pop eax
push 4
pop edx
cmp ax, cx
sbb eax, eax
push 5
pop ebp
and eax, 0x1f
cmp dx, cx
sbb edx, edx
and edx, 0x1e
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1f
mov dword [esp + 0x60], ebp
push 6
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1e
mov dword [esp + 0x68], ebp
push 7
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1f
mov dword [esp + 0x20], ebp
push 8
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1f
mov dword [esp + 0x24], ebp
push 9
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1e
mov dword [esp + 0x2c], ebp
push 0xa
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1f
mov dword [esp + 0x10], ebp
mov bp, 0xb
cmp bp, cx
movzx ebp, word [esp + 0x76]
sbb ecx, ecx
and ecx, 0x1e
add ebp, ecx
add ebp, dword [esp + 0x10]
add ebp, dword [esp + 0x2c]
add ebp, dword [esp + 0x24]
add ebp, dword [esp + 0x20]
add ebp, dword [esp + 0x68]
add ebp, dword [esp + 0x60]
add ebp, edx
add ebp, eax
add ebp, dword [esp + 0x18]
add ebp, dword [esp + 0x6c]
push ebp
push 0x464bf8
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.dayofyear
push dword [0x485434]
call fcn.0044923e
movzx eax, word [esp + 0x78]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.hour24
push dword [0x485434]
call fcn.0044923e
movzx ebp, word [esp + 0x78]
cmp ebp, 1
jge 0x4462bd
add ebp, 0xc
jmp 0x4462c5
cmp ebp, 0xc
jle 0x4462c5
sub ebp, 0xc
push ebp
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.hour2
push dword [0x485434]
call fcn.0044923e
push ebp
push 0x464bf8
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.hour
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.hour12
push dword [0x485434]
call fcn.0044923e
push ebx
push ebx
push esi
push str.hour1
push dword [0x485434]
call fcn.0044923e
cmp word [esp + 0x78], 0xc
mov eax, 0x4684ec
jb 0x44633b
mov eax, 0x468500
push ebx
push ebx
push eax
push str.AMPM
push dword [0x485434]
call fcn.0044923e
push 0x3f
push esi
push ebx
push ebx
push 0x40000000
mov edi, 0x400
push edi
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcatA]
push str.__r_n
push esi
call ebp
push 0x3f
lea eax, [esp + 0x140]
push eax
push ebx
push ebx
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
lea eax, [esp + 0x13c]
push eax
push esi
call ebp
push ebx
push ebx
push esi
push str.NOW
push dword [0x485434]
call fcn.0044923e
cmp dword [esp + 0x48], ebx
je 0x4463c8
xor edx, edx
jmp 0x4463bf
mov cl, byte [eax + edx]
cmp cl, bl
je 0x4463c8
cmp cl, 0xff
jne 0x4463be
mov byte [eax + edx], 0x25
inc edx
mov eax, dword [0x485434]
cmp eax, ebx
jne 0x4463ae
push str.CLIPBOARD
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x4463f8
push str._CLIPBOARD
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x4464a2
push ebx
push ebx
call fcn.00449f71
mov ebp, 0x100
add eax, ebp
cmp eax, ebp
jbe 0x446417
push ebx
push ebx
call fcn.00449f71
lea edi, [ebp + eax]
jmp 0x446419
mov edi, ebp
cmp esi, ebx
je 0x446426
push esi
call fcn.00452af1
pop ecx
jmp 0x446428
xor eax, eax
lea eax, [eax + edi + 0x1000]
push eax
push esi
call fcn.00401000
mov esi, eax
pop ecx
pop ecx
cmp esi, ebx
je 0x446ae3
push edi
push esi
call fcn.00449f71
mov eax, dword [0x485434]
cmp eax, ebx
je 0x44645d
push eax
call fcn.00452af1
pop ecx
mov ebp, eax
jmp 0x44645f
xor ebp, ebp
push 0x464be8
push dword [0x485434]
call fcn.00449160
imul eax, edi
lea eax, [eax + ebp + 0x1000]
push eax
push dword [0x485434]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ae3
push ebx
push ebx
push esi
push str.CLIPBOARD
push eax
call fcn.0044923e
mov eax, dword [0x485434]
cmp eax, ebx
je 0x4468a4
cmp byte [eax], bl
je 0x4468a4
push dword [esp + 0x64]
call fcn.00448eaf
cmp al, 0x3d
jne 0x4468a4
cmp dword [esp + 0x4c], ebx
jne 0x4468a4
push str.SUM_
push dword [0x485434]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x4468a4
mov eax, dword [0x485434]
cmp eax, ebx
je 0x44650a
push 0x468968
push eax
call fcn.00454980
neg eax
pop ecx
sbb eax, eax
pop ecx
neg eax
jmp 0x44650c
xor eax, eax
cmp eax, ebx
je 0x4468a4
cmp esi, ebx
je 0x446521
push esi
call fcn.00452af1
pop ecx
jmp 0x446523
xor eax, eax
mov ecx, 0x100000
cmp eax, ecx
jbe 0x44653d
cmp esi, ebx
je 0x446539
push esi
call fcn.00452af1
pop ecx
jmp 0x44653f
xor eax, eax
jmp 0x44653f
mov eax, ecx
push eax
push esi
call fcn.00401000
mov esi, eax
mov byte [esi], bl
push 2
push dword [0x485434]
call fcn.00452d30
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 0x10
test eax, eax
je 0x446616
push dword [0x485434]
mov dword [esp + 0x4c], ebx
xor edi, edi
call ebp
mov dword [esp + 0x50], eax
mov eax, dword [0x485434]
cmp byte [eax], bl
je 0x44661b
mov dl, bl
cmp dl, bl
jne 0x44659b
cmp byte [eax + edi], 2
jne 0x44660a
mov dl, 1
mov dword [esp + 0x48], edi
jmp 0x44660a
cmp dl, 1
jne 0x4465c0
mov cl, byte [eax + edi]
cmp cl, 2
je 0x4465c0
cmp cl, 0x30
jl 0x4465b2
cmp cl, 0x39
jle 0x4465c0
cmp cl, 0x2e
je 0x4465c0
cmp cl, 0x2d
je 0x4465c0
mov dl, 2
jmp 0x44660a
cmp byte [eax + edi], 2
jne 0x44660a
cmp dl, 1
jne 0x446608
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x50]
add eax, ecx
sub edx, ecx
push edx
lea ecx, [eax + 1]
push ecx
push eax
call fcn.00452ea0
mov ecx, dword [esp + 0x5c]
mov eax, dword [0x485434]
sub ecx, edi
add eax, edi
push ecx
push eax
dec eax
push eax
call fcn.00452ea0
sub dword [esp + 0x68], 2
mov eax, dword [0x485434]
add esp, 0x18
sub edi, 2
xor dl, dl
inc edi
cmp byte [eax + edi], bl
jne 0x446589
jmp 0x44661b
mov eax, dword [0x485434]
cmp byte [0x4840a0], 2
mov edi, 0xe5
jb 0x44672d
push str.____Pre_Formula:
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [0x485434], ebx
je 0x4466eb
lea eax, [esp + 0x13c]
push eax
call ebp
push dword [0x485434]
mov dword [esp + 0x1c], edi
sub dword [esp + 0x1c], eax
call ebp
inc eax
cmp dword [esp + 0x18], eax
jge 0x44667d
lea eax, [esp + 0x13c]
push eax
call ebp
mov ecx, edi
sub ecx, eax
jmp 0x446688
push dword [0x485434]
call ebp
lea ecx, [eax + 1]
cmp ecx, ebx
jge 0x446690
xor ecx, ecx
jmp 0x4466cc
lea eax, [esp + 0x13c]
push eax
call ebp
push dword [0x485434]
mov dword [esp + 0x1c], edi
sub dword [esp + 0x1c], eax
call ebp
inc eax
cmp dword [esp + 0x18], eax
jge 0x4466c1
lea eax, [esp + 0x13c]
push eax
call ebp
mov ecx, edi
sub ecx, eax
jmp 0x4466cc
push dword [0x485434]
call ebp
lea ecx, [eax + 1]
push ecx
push dword [0x485434]
lea eax, [esp + 0x144]
push eax
call ebp
lea eax, [esp + eax + 0x144]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 4
lea eax, [esp + 0x224]
push 0x469bc0
push eax
call fcn.00452790
add esp, 0xc
lea eax, [esp + 0x13c]
mov cl, byte [eax]
cmp cl, bl
je 0x44671a
cmp cl, 0x25
jne 0x446717
mov byte [eax], 0xb0
inc eax
jmp 0x446709
lea eax, [esp + 0x13c]
push eax
call fcn.0042604a
mov eax, dword [0x485434]
pop ecx
push 0x100000
push esi
push eax
call fcn.0041e488
fstp qword [esp + 0x58]
add esp, 0xc
cmp byte [0x4840a0], 2
jb 0x44685d
push str.____Post_Formula:
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [esi], bl
jne 0x44679a
fld qword [esp + 0x4c]
push 0xf
push ecx
push ecx
lea eax, [esp + 0x2cc]
fstp qword [esp]
push eax
call fcn.0041c447
add esp, 0x10
lea eax, [esp + 0x2c0]
push eax
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x446820
lea eax, [esp + 0x13c]
push eax
call ebp
mov dword [esp + 0x18], edi
sub dword [esp + 0x18], eax
push esi
call ebp
inc eax
cmp dword [esp + 0x18], eax
jge 0x4467c6
lea eax, [esp + 0x13c]
push eax
call ebp
mov ecx, edi
sub ecx, eax
jmp 0x4467cc
push esi
call ebp
lea ecx, [eax + 1]
cmp ecx, ebx
jge 0x4467d4
xor ecx, ecx
jmp 0x446806
lea eax, [esp + 0x13c]
push eax
call ebp
mov dword [esp + 0x18], edi
sub dword [esp + 0x18], eax
push esi
call ebp
inc eax
cmp dword [esp + 0x18], eax
jge 0x446800
lea eax, [esp + 0x13c]
push eax
call ebp
mov ecx, edi
sub ecx, eax
jmp 0x446806
push esi
call ebp
lea ecx, [eax + 1]
push ecx
push esi
lea eax, [esp + 0x144]
push eax
call ebp
lea eax, [esp + eax + 0x144]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 4
lea eax, [esp + 0x224]
push 0x469bc0
push eax
call fcn.00452790
add esp, 0xc
lea eax, [esp + 0x13c]
mov cl, byte [eax]
cmp cl, bl
je 0x44684f
cmp cl, 0x25
jne 0x44684c
mov byte [eax], 0xb0
inc eax
jmp 0x44683e
lea eax, [esp + 0x13c]
push eax
call fcn.0042604a
pop ecx
push esi
call ebp
cmp eax, 0xff0
jl 0x446872
push str.____WARNING___Formulas_in_vTask_are_limited_to_4k__4096_bytes_
call fcn.0042604a
pop ecx
cmp byte [esi], bl
je 0x446889
mov eax, dword [0x485434]
cmp eax, ebx
je 0x4468aa
push esi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x4468aa
fld qword [esp + 0x4c]
push 0xf
push ecx
push ecx
fstp qword [esp]
push dword [0x485434]
call fcn.0041c447
add esp, 0x10
jmp 0x4468aa
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov eax, dword [0x485434]
mov dword [esp + 0x1c], ebx
cmp eax, ebx
je 0x4468c6
push 0x46b550
push eax
call fcn.004526d0
pop ecx
pop ecx
jmp 0x4468c8
xor eax, eax
cmp eax, ebx
je 0x446a39
push 0x7d
push dword [0x485434]
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
je 0x446a39
cmp esi, ebx
je 0x4468f2
push esi
call fcn.00452756
pop ecx
mov edi, dword [0x485434]
cmp edi, ebx
je 0x44690b
push edi
call fcn.00452af1
mov edi, dword [0x485434]
pop ecx
jmp 0x44690d
xor eax, eax
mov ecx, 0x1000
cmp eax, ecx
ja 0x446918
mov eax, ecx
push 1
push eax
call fcn.00452b24
pop ecx
mov dword [esp + 0x20], ebx
pop ecx
mov esi, eax
mov dword [esp + 0x20], ebx
cmp byte [edi], bl
je 0x446a09
mov eax, dword [esp + 0x314]
and eax, 2
mov dword [esp + 0x4c], eax
mov ecx, ebx
cmp dword [esp + 0x4c], ebx
je 0x44696b
cmp byte [edi + ecx], 0x7b
jne 0x44696b
cmp byte [edi + ecx + 1], 0x5c
jne 0x44696b
cmp byte [edi + ecx + 4], 0x7d
jne 0x44696b
mov eax, dword [esp + 0x1c]
mov byte [esi + eax], 0x7b
jmp 0x4469f1
add edi, ecx
mov al, byte [edi]
cmp al, 0x7b
jne 0x4469ea
cmp byte [edi + 1], 0x5c
jne 0x4469ea
lea edx, [edi + 2]
mov al, byte [edx]
cmp al, 0x30
jl 0x446986
cmp al, 0x39
jle 0x446996
cmp al, 0x41
jl 0x44698e
cmp al, 0x46
jle 0x446996
cmp al, 0x61
jl 0x4469e8
cmp al, 0x66
jg 0x4469e8
mov al, byte [edi + 3]
cmp al, 0x30
jl 0x4469a1
cmp al, 0x39
jle 0x4469b1
cmp al, 0x41
jl 0x4469a9
cmp al, 0x46
jle 0x4469b1
cmp al, 0x61
jl 0x4469e8
cmp al, 0x66
jg 0x4469e8
cmp byte [edi + 4], 0x7d
jne 0x4469e8
push 3
push edx
lea eax, [esp + 0x144]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [esp + 0x13c]
push eax
call fcn.0041a0c4
add dword [esp + 0x24], 4
pop ecx
mov ecx, dword [esp + 0x1c]
mov byte [esi + ecx], al
mov ecx, dword [esp + 0x20]
jmp 0x4469f1
mov al, byte [edi]
mov edx, dword [esp + 0x1c]
mov byte [esi + edx], al
inc dword [esp + 0x1c]
mov edi, dword [0x485434]
inc ecx
mov dword [esp + 0x20], ecx
cmp byte [edi + ecx], bl
jne 0x446944
cmp edi, ebx
je 0x446a1c
push edi
call fcn.00452af1
mov edi, dword [0x485434]
pop ecx
jmp 0x446a1e
xor eax, eax
push eax
push ebx
push edi
call fcn.00452e00
push dword [esp + 0x28]
push esi
push dword [0x485434]
call fcn.00452790
add esp, 0x18
cmp esi, ebx
je 0x446a44
push esi
call fcn.00452756
pop ecx
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov esi, dword [esp + 0x54]
cmp esi, ebx
je 0x446aee
cmp dword [esp + 0x1c], ebx
je 0x446a7e
push 4
lea eax, [esp + 0x20]
push eax
push esi
call fcn.00452790
add esp, 0xc
jmp 0x446aee
push dword [0x485434]
call ebp
mov dword [esi], eax
jmp 0x446aee
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebp
call esi
mov edi, 0x400
lea ecx, [edi + eax]
mov eax, 0x1000
cmp ecx, eax
jle 0x446aa9
push ebp
call esi
add eax, edi
push 1
push eax
call fcn.00452b24
pop ecx
pop ecx
mov dword [0x485434], eax
cmp eax, ebx
je 0x446ad6
cmp ebp, ebx
je 0x446acf
cmp byte [ebp], bl
je 0x446acf
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x446ad1
mov byte [eax], bl
mov eax, dword [0x485434]
mov edi, dword [esp + 0x54]
cmp edi, ebx
je 0x446ae3
push eax
call esi
mov dword [edi], eax
lea eax, [esp + 0x30]
push eax
call fcn.00441b48
pop ecx
mov ecx, dword [esp + 0x300]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00452dee
add esp, 0x2f4
ret 0x14