Function at 0x425420
Capabilities:
Check for time delay via gettickcount
Empty the recycle bin
Find taskbar
Move file
Print debug messages
Resolve function by parsing pe exports
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x49eddb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x928
mov eax, dword [ebp + 0x10]
push ebx
push esi
xor esi, esi
push edi
mov dword [esp + 0x94], ecx
cmp eax, esi
jne 0x425458
lea eax, [esp + 0x78]
mov edi, dword [0x4c590c]
mov edx, eax
mov ebx, ecx
mov dword [esp + 0x48], eax
mov dword [edx], esi
mov dword [esp + 0x54], edi
mov dword [esp + 0x14], ebx
cmp ecx, esi
je 0x425750
cmp dword [0x4cc1c0], esi
je 0x4254ac
cmp dword [0x4cc1b0], esi
je 0x42549a
mov eax, dword [0x4cc1a8]
push eax
call dword [sym.imp.KERNEL32.DLL_GlobalUnlock]
mov dword [0x4cc1b0], esi
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x4cc1c0], esi
mov dword [0x4cc1a8], esi
mov esi, dword [sym.imp.KERNEL32.DLL_GetTickCount]
call esi
mov edx, dword [0x4c590c]
mov ecx, eax
sub ecx, dword [0x4cc164]
cmp ecx, dword [edx + 0xd8]
jbe 0x4254f7
push 0
push 0
push 0
push 0
lea eax, [esp + 0xf4]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x4254f0
push 1
push 0xffffffffffffffff
call fcn.00401360
add esp, 8
call esi
mov dword [0x4cc164], eax
cmp byte [edi + 0xec], 0
jne 0x425528
cmp byte [edi + 0xee], 0
jne 0x425528
mov edx, dword [0x4cc158]
cmp edx, 0xffffffff
jle 0x425528
mov ecx, dword [edi + 0x28]
cmp ecx, edx
jle 0x425524
mov byte [edi + 0xec], 1
jmp 0x425528
inc ecx
mov dword [edi + 0x28], ecx
mov ecx, dword [edi + 4]
mov edx, dword [edi]
cmp ecx, 0xffffffff
jl 0x42554b
jg 0x425539
cmp edx, 0xffffffff
jbe 0x42554b
cmp dword [0x4cc154], ecx
jg 0x42555d
jl 0x42554b
cmp dword [0x4cc150], edx
jae 0x42555d
mov ecx, dword [edi + 0x24]
cmp ecx, 0xffffffff
jle 0x425569
sub eax, dword [0x4cc160]
cmp eax, ecx
jb 0x425569
push 1
push 0xa
call fcn.00401360
add esp, 8
cmp byte [edi + 0xf8], 0
je 0x42558a
push 1
push 0x8000012f
call fcn.00401360
add esp, 8
cmp byte [edi + 0xf8], 0
jne 0x425572
mov dword [0x4cbcb0], ebx
cmp byte [edi + 0xf9], 0
je 0x4255ce
mov ecx, dword [0x4cb5b8]
mov dword [ecx*4 + 0x4caf78], ebx
call esi
mov ecx, dword [0x4cb5b8]
mov dword [ecx*4 + 0x4c8e10], eax
inc ecx
mov dword [0x4cb5b8], ecx
cmp ecx, 0x190
jl 0x4255ce
mov dword [0x4cb5b8], 0
mov al, byte [ebx]
cmp al, 1
je 0x4255f9
cmp al, 0x6b
je 0x4255f9
cmp al, 0x72
je 0x4255f9
mov esi, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push esi
push ebx
call fcn.0045af30
mov dword [esp + 0x24], eax
cmp eax, 1
jne 0x425755
jmp 0x4255fc
mov esi, dword [ebp + 0xc]
mov al, byte [ebx]
mov byte [esp + 0x9c], al
cmp al, 9
jb 0x42576c
cmp al, 0x20
ja 0x42576c
add dword [0x4cc150], 1
push ebx
adc dword [0x4cc154], 0
call fcn.0042a180
cmp eax, 3
jne 0x4256c4
mov ecx, dword [ebx + 0x14]
cmp byte [ecx], 0x73
jne 0x425661
lea ebx, [ebx]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push esi
push 2
call fcn.00425420
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov ecx, dword [ebx + 0x14]
cmp edx, ecx
je 0x425640
jmp 0x425676
lea eax, [esp + 0x28]
push eax
push esi
push 3
call fcn.00425420
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
cmp edx, ebx
je 0x429797
cmp dword [ebp + 8], 3
je 0x42998a
cmp eax, 1
jne 0x42998a
test edx, edx
je 0x4256aa
mov ecx, dword [edx + 0x1c]
cmp ecx, dword [ebx + 0x1c]
jne 0x4297ae
mov dword [esp + 0x14], edx
jmp 0x429797
mov ebx, dword [ebx + 0x18]
cmp byte [ebx], 0x21
mov dword [esp + 0x14], ebx
jne 0x429797
mov edx, ebx
mov eax, dword [edx + 0x18]
jmp 0x429793
mov edi, dword [ebx + 0x18]
cmp byte [edi], 0x21
mov dword [esp + 0x14], edi
jne 0x425746
mov ecx, dword [edi + 0x14]
cmp byte [ecx], 0x73
jne 0x4256f9
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push esi
push 2
call fcn.00425420
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov ecx, dword [edi + 0x14]
cmp edx, ecx
je 0x4256d8
jmp 0x42570e
lea eax, [esp + 0x28]
push eax
push esi
push 3
call fcn.00425420
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
cmp dword [ebp + 8], 3
je 0x42998a
cmp eax, 1
jne 0x42998a
test edx, edx
je 0x42573a
mov ecx, dword [edx + 0x1c]
cmp ecx, dword [edi + 0x1c]
jne 0x4297bc
mov dword [esp + 0x14], edx
jmp 0x429797
mov edx, dword [edi + 0x18]
mov dword [esp + 0x14], edx
jmp 0x429797
cmp dword [ebp + 8], 3
jne 0x429797
mov eax, 1
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
movzx ecx, al
add ecx, 0xffffffa0
cmp ecx, 0x7e
ja case.0x425782.98
movzx ecx, byte [ecx + 0x429ca0]
jmp dword [ecx*4 + 0x429c64]
mov esi, 1
add dword [0x4cc150], esi
adc dword [0x4cc154], 0
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x425818
mov edx, eax
xor eax, eax
cmp dword [ebx + 0xc], esi
mov dword [esp + 0x64], edx
sete al
mov esi, eax
test esi, esi
je 0x4257cc
mov eax, dword [edi + 0xb4]
mov dword [edi + 0xb8], eax
mov dword [edi + 0xb4], 0
mov ecx, edx
call fcn.00401220
mov dword [esp + 0x24], eax
test esi, esi
je 0x4257f1
mov ecx, dword [edi + 0xb8]
mov dword [edi + 0xb4], ecx
mov dword [edi + 0xb8], 0
test eax, eax
je 0x425755
cmp eax, 8
je 0x425755
cmp dword [ebp + 8], 3
je 0x425a36
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x14]
jmp 0x429793
mov ecx, dword [esp + 0x14]
push ecx
mov bl, 1
call fcn.004437c0
mov edx, eax
mov dword [esp + 0x64], edx
test edx, edx
je 0x429910
cmp dword [edi + 0xb4], 0
je 0x42584b
mov eax, dword [edx + 8]
call fcn.00443880
test eax, eax
jne 0x4257b6
xor esi, esi
jmp 0x4257cc
add dword [0x4cc150], 1
adc dword [0x4cc154], 0
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x64], eax
test eax, eax
jne 0x425883
mov ecx, dword [esp + 0x14]
push ecx
mov bl, 1
call fcn.004437c0
mov dword [esp + 0x64], eax
test eax, eax
je 0x429910
cmp dword [ebp + 8], 3
mov dword [edi + 0xbc], eax
je 0x4297b9
mov edx, dword [esp + 0x14]
mov ecx, dword [eax + 8]
mov edx, dword [edx + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x4297b9
mov dword [esp + 0x14], ecx
jmp 0x429797
add dword [0x4cc150], 1
mov eax, dword [esp + 0x94]
adc dword [0x4cc154], 0
mov esi, dword [eax + 0xc]
test esi, esi
jne 0x425901
mov eax, dword [0x4c94a8]
mov dword [esp + 0x40], eax
cmp word [eax], si
je 0x4258ff
mov esi, dword [0x4cb6b8]
test esi, esi
je 0x4258ff
mov ecx, dword [esp + 0x40]
mov edx, dword [esi + 4]
push ecx
push edx
call fcn.0048e559
add esp, 8
test eax, eax
je 0x425901
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4258e3
xor esi, esi
mov dword [esp + 0x24], 1
mov dword [esp + 0x40], 0
test esi, esi
je 0x425a0f
mov eax, dword [0x4c94ac]
cmp word [eax], 0
je 0x42593a
push 0x4a5b18
push eax
call fcn.0048e559
add esp, 8
test eax, eax
jne 0x42593a
mov al, 1
jmp 0x42593c
xor al, al
lea ecx, [esp + 0x64]
push ecx
push eax
push esi
xor eax, eax
call fcn.0047ada0
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x64]
test eax, eax
je 0x425a0f
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x4259a7
mov ecx, dword [ebx + 0x1c]
test ecx, ecx
je 0x42597b
jmp 0x425970
cmp edx, ecx
je 0x4259a7
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x425970
push 0x4a2868
push 0
push 0x4aca60
mov ecx, ebx
call fcn.0042ea20
xor eax, eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [edi + 0xb4]
test edx, edx
je 0x425a44
call fcn.00443880
test eax, eax
je 0x425a44
mov esi, 1
mov dword [edi + 0xb8], edx
mov dword [edi + 0xb4], 0
mov ecx, dword [esp + 0x64]
call fcn.00401220
mov dword [esp + 0x24], eax
test esi, esi
je 0x4259fe
mov edx, dword [edi + 0xb8]
mov dword [edi + 0xb4], edx
mov dword [edi + 0xb8], 0
test eax, eax
je 0x425755
cmp eax, 8
je 0x425755
cmp dword [esp + 0x40], 0
mov edx, dword [esp + 0x94]
sete al
movzx ecx, al
push ecx
push edx
call fcn.0042e850
cmp dword [ebp + 8], 3
jne case.0x425782.113
mov eax, dword [esp + 0x24]
cmp eax, 7
jne 0x425755
jmp 0x425750
xor esi, esi
jmp 0x4259d7
mov ecx, dword [esp + 0x14]
mov ebx, dword [ecx + 0xc]
mov eax, ebx
dec eax
mov dword [esp + 0x18], ebx
je 0x425a9d
sub eax, 3
je 0x425a82
sub eax, 5
jne 0x425b13
mov ecx, dword [0x4c94ac]
push eax
push eax
push 1
push ecx
call fcn.004146b0
add esp, 0x10
mov dword [esp + 0x7c], eax
jmp 0x425b13
mov edx, dword [0x4c94a8]
push 0
push 0
push 0
push edx
call fcn.004146b0
add esp, 0x10
mov dword [esp + 0x7c], eax
jmp 0x425b13
movzx eax, byte [ecx + 1]
sub eax, 0
je 0x425b0a
dec eax
mov eax, dword [0x4c94a8]
je 0x425aea
push 0x4a864c
push eax
call fcn.0048e559
add esp, 8
test eax, eax
jne 0x425ac5
lea ebx, [eax + 5]
jmp 0x425b0f
mov ecx, dword [0x4c94a8]
push 0
push 0
push 0
push ecx
call fcn.004146b0
xor ebx, ebx
add esp, 0x10
test eax, eax
setne bl
mov dword [esp + 0x7c], eax
add ebx, 3
jmp 0x425b0f
push 0
push 1
push 1
push 1
call fcn.00474e20
add esp, 0x10
test eax, eax
jne 0x425b0a
mov edx, dword [0x4c94a8]
push eax
push eax
push eax
push edx
jmp 0x425ad2
mov ebx, 2
mov dword [esp + 0x18], ebx
lea eax, [ebx - 3]
cmp eax, 7
ja case.0x425b26.5
movzx eax, byte [eax + 0x429d2c]
jmp dword [eax*4 + 0x429d20]
mov esi, dword [0x4c94ac]
call fcn.00415070
mov dword [esp + 0x5c], eax
test eax, eax
je 0x4298a0
mov eax, dword [0x4c94b0]
cmp word [eax], 0x31
jne 0x425b64
cmp word [eax + 2], 0
jne 0x425b64
mov esi, dword [ebp + 0xc]
mov edi, dword [esp + 0x54]
mov byte [esp + 0x68], 1
jmp case.0x425b26.5
mov esi, dword [ebp + 0xc]
mov edi, dword [esp + 0x54]
mov byte [esp + 0x68], 0
jmp case.0x425b26.5
cmp ebx, 4
jne 0x425bb4
mov esi, dword [0x4c94b0]
call fcn.00415070
mov dword [esp + 0x5c], eax
mov eax, dword [0x4c94b4]
cmp word [eax], 0x31
jne 0x425ba6
cmp word [eax + 2], 0
jne 0x425ba6
mov esi, dword [ebp + 0xc]
mov edi, dword [esp + 0x54]
mov byte [esp + 0x68], 1
jmp 0x425bd2
mov esi, dword [ebp + 0xc]
mov edi, dword [esp + 0x54]
mov byte [esp + 0x68], 0
jmp 0x425bd2
mov eax, dword [0x4c94b0]
call fcn.004150c0
mov dword [esp + 0x5c], eax
shr eax, 2
and al, 1
mov byte [esp + 0x68], al
je 0x425bd2
and dword [esp + 0x5c], 0xfffffffb
cmp dword [esp + 0x5c], 0
je 0x4298ce
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x1f], 0
mov dword [esp + 0x28], 0
mov ebx, dword [ecx + 0x18]
cmp byte [ebx], 0x6c
mov dword [esp + 0x40], ebx
jne 0x425c03
mov edx, dword [ebx + 0x14]
mov dword [esp + 0x40], edx
jmp 0x425c05
xor ebx, ebx
mov ecx, dword [edi + 0xc]
mov eax, dword [edi + 8]
mov edx, dword [edi + 0x10]
mov dword [esp + 0x8c], ecx
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x88], eax
mov eax, dword [edi + 0x14]
mov dword [esp + 0x58], edx
mov edx, dword [edi + 0x1c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x30], edx
cmp ecx, 8
je 0x425c4c
mov dword [edi + 8], 1
mov dword [edi + 0xc], 0
lea eax, [ecx - 2]
cmp eax, 8
ja case.default.0x425c58
jmp dword [eax*4 + 0x429d34]
mov eax, dword [esp + 0x14]
cmp byte [eax + 1], 0
jbe 0x425c79
xor edi, edi
mov ecx, eax
call fcn.00421960
mov byte [esp + 0x70], 0
jmp 0x425c82
xor eax, eax
xor edx, edx
mov byte [esp + 0x70], 1
mov ecx, dword [esp + 0x70]
mov edi, dword [esp + 0x14]
push ecx
push edx
push eax
push ebx
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x33]
push eax
push esi
call fcn.0042bdd0
mov dword [esp + 0x24], eax
jmp case.default.0x425c58
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x23]
mov ebx, esi
mov esi, dword [esp + 0x18]
push edx
call fcn.0042bf30
mov dword [esp + 0x24], eax
jmp case.default.0x425c58
mov edx, dword [esp + 0x14]
push ebx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x27]
push ecx
push esi
push edx
call fcn.0042c120
mov dword [esp + 0x24], eax
jmp case.default.0x425c58
mov eax, dword [0x4c94b0]
push 0x4a9b5c
push eax
call fcn.0048e559
add esp, 8
push ebx
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x27]
push edx
test eax, eax
mov eax, dword [esp + 0x20]
push esi
push eax
je 0x425d1a
call fcn.0042cee0
mov dword [esp + 0x24], eax
jmp case.default.0x425c58
call fcn.0042d1d0
mov dword [esp + 0x24], eax
jmp case.default.0x425c58
lea esi, [esp + 0xac]
call fcn.00415720
mov dword [esp + 0x93c], 0
mov edx, dword [0x4c94ac]
cmp word [edx], 0
je 0x425d98
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0xfc]
and eax, 0x7fffffff
push 0x30c
mov ecx, esi
call fcn.00472ba0
test al, al
je 0x425d98
mov edx, esi
push edx
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x2c]
push eax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x27]
push ecx
mov ecx, dword [0x4c94b0]
push edx
push eax
mov edx, ebx
call fcn.0042d4e0
mov dword [esp + 0x24], eax
call fcn.00415680
jmp 0x425da0
mov dword [esp + 0x24], 1
lea ecx, [esp + 0xac]
mov dword [esp + 0x93c], 0xffffffff
call fcn.00415770
jmp case.default.0x425c58
mov eax, dword [0x4c94a8]
cmp ecx, 3
je 0x425dcb
mov eax, dword [0x4c94ac]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x5c]
push eax
push ecx
push edx
push ebx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x33]
push ecx
mov ecx, dword [esp + 0x2c]
push esi
call fcn.0042c560
mov dword [esp + 0x24], eax
jmp case.default.0x425c58
lea edx, [esp + 0x53]
push edx
cmp ecx, 4
jne 0x425e19
mov eax, dword [0x4c94a8]
push 0
push 0
push eax
call fcn.004146b0
mov ecx, dword [0x4c94ac]
mov dword [esp + 0x7c], ecx
jmp 0x425e2c
mov ecx, dword [0x4c94ac]
lea eax, [esp + 0x70]
push eax
push 1
push ecx
call fcn.004146b0
mov edi, eax
add esp, 0x10
test edi, edi
je 0x425e73
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x68]
push edx
mov edx, dword [esp + 0x60]
push edi
push eax
push ecx
push edx
push ebx
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x3b]
push ecx
mov ecx, dword [esp + 0x34]
push esi
call fcn.0042cad0
cmp byte [esp + 0x53], 0
mov dword [esp + 0x24], eax
je case.default.0x425c58
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x425c58
mov dword [esp + 0x24], 1
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x58]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0x10], edx
mov edx, dword [esp + 0x20]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], ecx
mov eax, dword [esp + 0x24]
test eax, eax
je 0x425755
cmp eax, 7
je 0x425755
cmp eax, 8
je 0x425755
cmp byte [esp + 0x1f], 0
jne 0x429797
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x425ef9
mov edx, dword [ecx + 0x1c]
mov esi, dword [esp + 0x14]
cmp edx, dword [esi + 0x1c]
jne 0x429c13
mov dword [esp + 0x14], ecx
jmp 0x429797
cmp dword [ebp + 8], 3
je 0x425750
mov eax, dword [esp + 0x40]
jmp 0x429793
mov cl, byte [edi + 0x108]
mov byte [esp + 0x2e], cl
cmp al, 0x70
jne 0x425f84
mov ecx, dword [0x4c9450]
test ecx, ecx
je 0x425f3d
mov eax, dword [edi + 0x100]
mov ebx, ecx
call fcn.00477780
test eax, eax
je 0x4298fc
mov ebx, dword [esp + 0x14]
mov eax, dword [edi + 0x100]
cmp dword [eax + 8], 6
jne 0x425f53
mov eax, dword [eax]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov ecx, dword [edi + 0x100]
mov eax, dword [ecx + 0xc]
test eax, eax
je 0x425f69
push eax
call fcn.0048f817
add esp, 4
mov edx, dword [edi + 0x100]
push edx
call fcn.00490280
add esp, 4
mov dword [edi + 0x100], 0
jmp 0x425f8b
mov byte [edi + 0x108], 1
mov dword [esp + 0x28], 0
mov ecx, dword [ebx + 0x14]
cmp byte [ecx], 0x73
jne 0x425fbf
jmp 0x425fa0
mov ecx, dword [ecx + 0x14]
lea eax, [esp + 0x28]
push eax
push esi
push 2
call fcn.00425420
mov dword [esp + 0x24], eax
mov ecx, dword [ebx + 0x14]
cmp dword [esp + 0x28], ecx
je 0x425fa0
jmp 0x425fd0
lea edx, [esp + 0x28]
push edx
push esi
push 3
call fcn.00425420
mov dword [esp + 0x24], eax
mov dl, byte [esp + 0x9c]
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x14], ecx
cmp dl, 0x6f
jne 0x426036
mov dl, byte [esp + 0x2e]
mov byte [edi + 0x108], dl
xor dl, dl
cmp byte [ecx], 0x70
jne 0x42600a
cmp dword [edi + 0x100], 0
mov dl, 1
jne 0x429797
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x14], ecx
cmp byte [ecx], 0x71
je 0x426040
test dl, dl
jne 0x42609c
cmp dword [edi + 0x100], 0
je 0x42609c
lea esi, [edi + 0x100]
call fcn.0042f120
mov eax, 1
mov dword [esp + 0x24], eax
jmp 0x42609c
cmp dl, 0x70
jne 0x42609c
cmp byte [ecx], 0x71
jne 0x42609c
cmp eax, 1
jne 0x426054
cmp dword [esp + 0x28], 0
je 0x429797
mov ecx, dword [esp + 0x14]
mov esi, dword [edi + 0x100]
lea edx, [esp + 0x98]
push edx
push 0
push 3
mov dword [esp + 0x3c], esi
mov dword [edi + 0x100], 0
call fcn.00425420
mov ebx, eax
cmp ebx, 1
jne 0x429929
cmp dword [esp + 0x98], 0
jne 0x429929
mov eax, dword [esp + 0x24]
mov dword [edi + 0x100], esi
cmp dword [ebp + 8], 3
je 0x429986
cmp eax, 1
jne 0x429986
mov eax, dword [esp + 0x28]
test eax, eax
je 0x429797
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 0x14]
cmp ecx, dword [edx + 0x1c]
je 0x429793
mov ecx, dword [esp + 0x48]
mov dword [ecx], eax
jmp 0x425750
cmp dword [ebx + 0xc], 1
jne 0x4260e8
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x14], ecx
jmp 0x429797
mov ecx, dword [ebx + 0x14]
lea edx, [esp + 0x28]
push edx
push esi
push 2
call fcn.00425420
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
cmp ecx, ebx
je 0x429797
cmp dword [ebp + 8], 3
je 0x429c13
cmp eax, 1
jne 0x429c13
test ecx, ecx
je 0x4260dc
mov eax, dword [ebx + 0x1c]
cmp eax, dword [ecx + 0x1c]
jne 0x429c08
mov dword [esp + 0x14], ecx
jmp 0x429797
add dword [0x4cc150], 1
mov ebx, dword [esp + 0x14]
mov eax, dword [0x4c9450]
adc dword [0x4cc154], 0
mov cl, byte [ebx]
mov edi, dword [0x4c590c]
movzx edx, cl
dec edx
mov esi, eax
mov dword [esp + 0x20], esi
mov dword [esp + 0x18], edi
cmp edx, 0xdf
ja case.0x426174.8
movzx edx, byte [edx + 0x429fdc]
jmp dword [edx*4 + 0x429d58]
push ebx
call fcn.0043cda0
jmp 0x42977a
cmp byte [ebx + 1], 1
mov edx, dword [0x4c94ac]
jbe 0x4261fd
mov eax, dword [ebx + 8]
cmp byte [eax + 0x11], 0
je 0x4261a5
mov eax, 1
jmp 0x42977a
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x4261be
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
push esi
call fcn.00413a50
jmp 0x42977a
mov eax, dword [0x4c9454]
test eax, eax
je 0x4261fd
cmp word [edx], 0
jne 0x4261fd
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x4261da
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x4261f1
sub ecx, 2
jne 0x4261fd
mov eax, esi
call fcn.00477890
jmp 0x42977a
mov ecx, esi
call fcn.00477600
jmp 0x42977a
push 1
push 0
push 0xffffffffffffffff
push edx
push esi
call fcn.00477e60
jmp 0x42977a
mov eax, dword [ebx + 8]
cmp dword [eax + 0x1c], 0
je 0x42622f
cmp byte [eax + 0x11], 0
jne 0x42622f
mov dword [esp + 0x18], 1
mov esi, 1
xor edi, edi
jmp 0x426272
mov edi, dword [0x4c9454]
mov eax, dword [0x4c94ac]
mov dword [esp + 0x18], 0
test edi, edi
je 0x42625e
cmp word [eax], 0
jne 0x42625e
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x426259
mov edx, dword [edi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x4262bc
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.00474e20
add esp, 0x10
mov esi, eax
mov eax, dword [esp + 0x20]
push 1
call fcn.00413ab0
mov dword [esp + 0x30], eax
mov eax, dword [0x4c94b0]
movzx eax, word [eax]
test ax, ax
je 0x42648d
call fcn.004095a0
movzx ecx, ax
push ecx
push 0x4a9c2c
call fcn.0048f331
add esp, 8
test eax, eax
je 0x42648d
test esi, esi
jne 0x4262cb
lea eax, [esi + 1]
jmp 0x42977a
test edi, edi
je 0x426260
push 1
mov eax, edi
call fcn.00413ab0
jmp 0x426270
cmp dword [esp + 0x18], 0
je 0x4262dc
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x4262fa
test edi, edi
je 0x4262eb
push 0
mov eax, edi
call fcn.00413c10
jmp 0x4262fa
mov esi, dword [0x4c94ac]
call fcn.004139b0
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
fstp qword [esp + 0x30]
cmp byte [esi + 0x17], 0
jne 0x42630d
mov edi, dword [esi + 0xc]
jmp 0x42630f
mov edi, esi
test byte [edi + 0x15], 8
je 0x42631c
mov eax, edi
call fcn.00401160
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426335
test byte [edi + 0x15], 4
je 0x426330
mov eax, edi
call fcn.0042f290
mov eax, dword [edi + 8]
jmp 0x426345
cmp al, 2
jne 0x426340
call fcn.00401000
jmp 0x426345
mov eax, 0x4cb614
cmp word [eax], 0
je 0x4263b7
cmp byte [esi + 0x17], 0
jne 0x426356
mov edi, dword [esi + 0xc]
jmp 0x426358
mov edi, esi
test byte [edi + 0x15], 8
je 0x426365
mov eax, edi
call fcn.00401160
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x42637e
test byte [edi + 0x15], 4
je 0x426379
mov eax, edi
call fcn.0042f290
mov eax, dword [edi + 8]
jmp 0x42638e
cmp al, 2
jne 0x426389
call fcn.00401000
jmp 0x42638e
mov eax, 0x4cb614
lea ecx, [esp + 0x80]
push ecx
call fcn.004749e0
add esp, 4
test eax, eax
jne 0x4263db
push 1
push eax
push 0xffffffffffffffff
push 0x4a2868
push esi
call fcn.00477e60
jmp 0x42977a
lea edx, [esp + 0xa0]
push edx
call dword [sym.imp.KERNEL32.DLL_GetSystemTimeAsFileTime]
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0xa4]
push ecx
call dword [sym.imp.KERNEL32.DLL_FileTimeToLocalFileTime]
mov edx, dword [0x4c94b0]
mov ax, word [edx]
call fcn.004095a0
movzx eax, ax
add eax, 0xffffffbc
cmp eax, 0xf
ja case.0x4263fb.69
movzx eax, byte [eax + 0x42a0d0]
jmp dword [eax*4 + 0x42a0bc]
fld qword [esp + 0x30]
fmul qword [0x4bfb68]
jmp 0x426436
fld qword [esp + 0x30]
fmul qword [0x4bfb60]
jmp 0x426436
fld qword [esp + 0x30]
fmul qword [0x4bfb58]
jmp 0x426436
fld qword [esp + 0x30]
fmul qword [0x4bfb50]
jmp 0x426436
fld qword [esp + 0x30]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0x84]
call fcn.0049ceb6
add esi, eax
adc edi, edx
mov dword [esp + 0x80], esi
push 0
lea eax, [esp + 0x84]
lea esi, [esp + 0x104]
mov dword [esp + 0x88], edi
call fcn.00474c90
mov ecx, dword [esp + 0x24]
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
push ecx
call fcn.00477e60
mov ebx, dword [esp + 0x14]
jmp 0x42977a
cmp esi, 2
je 0x4264ef
cmp dword [esp + 0x30], 2
je 0x4264ef
cmp dword [esp + 0x18], 0
je 0x4264ad
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov esi, dword [eax + 4]
jmp 0x4264cf
test edi, edi
je 0x4264bc
push 0
mov eax, edi
call fcn.00413b50
jmp 0x4264cb
mov esi, dword [0x4c94ac]
call fcn.00413980
mov ebx, dword [esp + 0x14]
mov esi, edx
mov edi, eax
mov eax, dword [esp + 0x20]
push 0
call fcn.00413b50
add eax, edi
adc edx, esi
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.00413a50
jmp 0x42977a
cmp dword [esp + 0x18], 0
je 0x426500
mov ecx, dword [ebx + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x42651e
test edi, edi
je 0x42650f
push 0
mov eax, edi
call fcn.00413c10
jmp 0x42651e
mov esi, dword [0x4c94ac]
call fcn.004139b0
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
fstp qword [esp + 0x30]
push 0
mov eax, esi
call fcn.00413c10
fadd qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push esi
call fcn.00413a80
jmp 0x42977a
mov eax, dword [0x4c94b0]
movzx eax, word [eax]
test ax, ax
je 0x4266b2
call fcn.004095a0
movzx ecx, ax
push ecx
push 0x4a9c2c
call fcn.0048f331
add esp, 8
test eax, eax
je 0x4266b2
mov edi, dword [0x4c9454]
mov ecx, dword [0x4c94ac]
test edi, edi
je 0x4265e1
cmp word [ecx], 0
jne 0x4265e1
mov al, byte [edi + 0x17]
test al, al
jne 0x426596
mov edx, dword [edi + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
jne 0x4265e1
test edi, edi
je 0x4265e1
cmp byte [edi + 0x17], 0
jne 0x4265a7
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x4265b4
mov eax, edi
call fcn.00401160
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x4265cd
test byte [edi + 0x15], 4
je 0x4265c8
mov eax, edi
call fcn.0042f290
mov edi, dword [edi + 8]
jmp 0x4265e3
cmp al, 2
jne 0x4265da
call fcn.00401000
mov edi, eax
jmp 0x4265e3
mov edi, 0x4cb614
jmp 0x4265e3
mov edi, ecx
cmp byte [esi + 0x17], 0
jne 0x4265ee
mov eax, esi
mov esi, dword [eax + 0xc]
test byte [esi + 0x15], 8
je 0x4265fb
mov eax, esi
call fcn.00401160
mov al, byte [esi + 0x17]
cmp al, 1
jne 0x426614
test byte [esi + 0x15], 4
je 0x42660f
mov eax, esi
call fcn.0042f290
mov eax, dword [esi + 8]
jmp 0x426624
cmp al, 2
jne 0x42661f
call fcn.00401000
jmp 0x426624
mov eax, 0x4cb614
push eax
lea ebx, [esp + 0x67]
mov eax, edi
call fcn.00474d40
add esp, 4
cmp byte [esp + 0x63], 0
mov esi, eax
mov edi, edx
je 0x42665c
mov ecx, dword [esp + 0x20]
push 1
push 0
push 0xffffffffffffffff
push 0x4a2868
push ecx
call fcn.00477e60
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov edx, dword [0x4c94b0]
mov ax, word [edx]
call fcn.004095a0
movzx eax, ax
cmp eax, 0x44
je 0x42668b
cmp eax, 0x48
je 0x426682
cmp eax, 0x4d
jne 0x42669d
push 0
push 0x3c
jmp 0x426692
push 0
push 0xe10
jmp 0x426692
push 0
push 0x15180
push edi
push esi
call fcn.0049cf30
mov esi, eax
mov edi, edx
mov eax, dword [esp + 0x20]
push edi
push esi
push eax
call fcn.00413a50
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov eax, dword [ebx + 8]
cmp dword [eax + 0x1c], 0
je 0x4266d2
cmp byte [eax + 0x11], 0
jne 0x4266d2
mov dword [esp + 0x18], 1
mov edi, 1
xor esi, esi
jmp 0x426715
mov esi, dword [0x4c9454]
mov eax, dword [0x4c94ac]
mov dword [esp + 0x18], 0
test esi, esi
je 0x426701
cmp word [eax], 0
jne 0x426701
mov cl, byte [esi + 0x17]
test cl, cl
jne 0x4266fc
mov ecx, dword [esi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x42673e
xor esi, esi
push 1
push 1
push 0
push 1
call fcn.00474e20
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x20]
push 1
call fcn.00413ab0
cmp edi, 2
je 0x42678f
cmp eax, 2
je 0x42678f
cmp dword [esp + 0x18], 0
je 0x42674d
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
mov esi, dword [eax]
mov edi, dword [eax + 4]
jmp 0x42676f
test esi, esi
je 0x426703
push 1
mov eax, esi
call fcn.00413ab0
jmp 0x426713
test esi, esi
je 0x42675c
push 0
mov eax, esi
call fcn.00413b50
jmp 0x42676b
mov esi, dword [0x4c94ac]
call fcn.00413980
mov ebx, dword [esp + 0x14]
mov edi, edx
mov esi, eax
mov eax, dword [esp + 0x20]
push 0
call fcn.00413b50
sub eax, esi
sbb edx, edi
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.00413a50
jmp 0x42977a
cmp dword [esp + 0x18], 0
je 0x4267a0
mov ecx, dword [ebx + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x4267be
test esi, esi
je 0x4267af
push 0
mov eax, esi
call fcn.00413c10
jmp 0x4267be
mov esi, dword [0x4c94ac]
call fcn.004139b0
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
fstp qword [esp + 0x30]
push 0
mov eax, esi
call fcn.00413c10
fsub qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push esi
call fcn.00413a80
jmp 0x42977a
mov eax, dword [ebx + 8]
cmp dword [eax + 0x1c], 0
je 0x426804
cmp byte [eax + 0x11], 0
jne 0x426804
mov dword [esp + 0x18], 1
mov edi, 1
xor esi, esi
jmp 0x426847
mov esi, dword [0x4c9454]
mov eax, dword [0x4c94ac]
mov dword [esp + 0x18], 0
test esi, esi
je 0x426833
cmp word [eax], 0
jne 0x426833
mov cl, byte [esi + 0x17]
test cl, cl
jne 0x42682e
mov ecx, dword [esi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x426870
xor esi, esi
push 1
push 1
push 0
push 1
call fcn.00474e20
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x20]
push 1
call fcn.00413ab0
cmp edi, 2
je 0x4268c6
cmp eax, 2
je 0x4268c6
cmp dword [esp + 0x18], 0
je 0x42687f
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
mov esi, dword [eax]
mov edi, dword [eax + 4]
jmp 0x4268a1
test esi, esi
je 0x426835
push 1
mov eax, esi
call fcn.00413ab0
jmp 0x426845
test esi, esi
je 0x42688e
push 0
mov eax, esi
call fcn.00413b50
jmp 0x42689d
mov esi, dword [0x4c94ac]
call fcn.00413980
mov ebx, dword [esp + 0x14]
mov edi, edx
mov esi, eax
mov eax, dword [esp + 0x20]
push 0
call fcn.00413b50
push edi
push esi
push edx
push eax
call fcn.00494d90
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.00413a50
jmp 0x42977a
cmp dword [esp + 0x18], 0
je 0x4268d7
mov ecx, dword [ebx + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x4268f5
test esi, esi
je 0x4268e6
push 0
mov eax, esi
call fcn.00413c10
jmp 0x4268f5
mov esi, dword [0x4c94ac]
call fcn.004139b0
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
fstp qword [esp + 0x30]
push 0
mov eax, esi
call fcn.00413c10
fmul qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push esi
call fcn.00413a80
jmp 0x42977a
mov eax, dword [ebx + 8]
cmp dword [eax + 0x1c], 0
je 0x42693b
cmp byte [eax + 0x11], 0
jne 0x42693b
mov dword [esp + 0x18], 1
mov edi, 1
xor esi, esi
jmp 0x42697e
mov esi, dword [0x4c9454]
mov eax, dword [0x4c94ac]
mov dword [esp + 0x18], 0
test esi, esi
je 0x42696a
cmp word [eax], 0
jne 0x42696a
mov cl, byte [esi + 0x17]
test cl, cl
jne 0x426965
mov ecx, dword [esi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x4269ab
xor esi, esi
push 1
push 1
push 0
push 1
call fcn.00474e20
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x20]
push 1
call fcn.00413ab0
cmp edi, 2
je 0x426a15
cmp eax, 2
je 0x426a15
cmp dword [esp + 0x18], 0
je 0x4269ba
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov esi, dword [eax + 4]
jmp 0x4269dc
test esi, esi
je 0x42696c
push 1
mov eax, esi
call fcn.00413ab0
jmp 0x42697c
test esi, esi
je 0x4269c9
push 0
mov eax, esi
call fcn.00413b50
jmp 0x4269d8
mov esi, dword [0x4c94ac]
call fcn.00413980
mov ebx, dword [esp + 0x14]
mov esi, edx
mov edi, eax
mov eax, edi
or eax, esi
jne 0x4269f0
mov ecx, dword [esp + 0x20]
call fcn.004139f0
jmp 0x42977a
mov eax, dword [esp + 0x20]
push 0
call fcn.00413b50
push esi
push edi
push edx
push eax
call fcn.0049cf30
mov ecx, dword [esp + 0x20]
push edx
push eax
push ecx
call fcn.00413a50
jmp 0x42977a
cmp dword [esp + 0x18], 0
je 0x426a26
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426a44
test esi, esi
je 0x426a35
push 0
mov eax, esi
call fcn.00413c10
jmp 0x426a44
mov esi, dword [0x4c94ac]
call fcn.004139b0
mov ebx, dword [esp + 0x14]
fst qword [esp + 0x30]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x426a61
mov ecx, dword [esp + 0x20]
call fcn.004139f0
jmp 0x42977a
mov esi, dword [esp + 0x20]
push 0
mov eax, esi
call fcn.00413c10
fdiv qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push esi
call fcn.00413a80
jmp 0x42977a
mov edi, 2
mov ecx, ebx
call fcn.00421960
mov esi, eax
test esi, esi
jns 0x426a99
xor esi, esi
jmp 0x426aab
mov edi, 1
mov ecx, ebx
call fcn.004218d0
cmp esi, eax
jle 0x426aab
mov esi, eax
mov ecx, dword [0x4c94ac]
mov edx, dword [esp + 0x20]
push 1
push 0
push esi
push ecx
push edx
call fcn.00477e60
jmp 0x42977a
mov edi, 2
mov ecx, ebx
call fcn.00421960
mov esi, eax
test esi, esi
jns 0x426ada
xor esi, esi
mov edi, 1
mov ecx, ebx
call fcn.004218d0
cmp esi, eax
jbe 0x426aec
mov esi, eax
mov ecx, dword [0x4c94ac]
mov edx, dword [esp + 0x20]
push 1
push 0
sub eax, esi
push esi
lea eax, [ecx + eax*2]
push eax
push edx
call fcn.00477e60
jmp 0x42977a
cmp byte [ebx + 1], 4
jb 0x426b3f
mov eax, dword [ebx + 8]
mov ecx, dword [eax + 0x34]
cmp word [ecx], 0
je 0x426b3f
mov edi, 3
mov ecx, ebx
call fcn.00421960
mov dword [esp + 0x18], eax
cmp eax, 1
jge 0x426b47
mov ecx, esi
call fcn.004139f0
jmp 0x42977a
mov dword [esp + 0x18], SysStringLen
mov edi, 2
mov ecx, ebx
call fcn.00421960
mov edx, dword [0x4c94b8]
mov esi, eax
mov ax, word [edx]
call fcn.004095a0
cmp ax, 0x4c
jne 0x426b96
cmp esi, 1
jge 0x426b7c
mov ecx, dword [esp + 0x20]
call fcn.004139f0
jmp 0x42977a
mov eax, dword [esp + 0x18]
mov ecx, 1
sub ecx, eax
add esi, ecx
cmp esi, 1
jge 0x426ba0
lea edx, [eax + esi - 1]
mov dword [esp + 0x18], edx
cmp esi, 1
jge 0x426ba0
mov esi, 1
mov edi, 1
mov ecx, ebx
call fcn.004218d0
cmp eax, esi
jae 0x426bbe
mov ecx, dword [esp + 0x20]
call fcn.004139f0
jmp 0x42977a
mov ecx, edi
sub ecx, esi
add eax, ecx
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jbe 0x426bce
mov ecx, eax
mov edx, dword [0x4c94ac]
mov eax, dword [esp + 0x20]
push 1
push 0
push ecx
lea esi, [edx + esi*2 - 2]
push esi
push eax
call fcn.00477e60
jmp 0x42977a
mov edi, 2
mov ecx, ebx
call fcn.00421960
mov esi, eax
test esi, esi
jns 0x426c01
xor esi, esi
mov edi, 1
mov ecx, ebx
call fcn.004218d0
cmp esi, eax
jbe 0x426c13
mov esi, eax
mov ecx, dword [0x4c94ac]
mov edx, dword [esp + 0x20]
push 1
push 0
sub eax, esi
push eax
lea ecx, [ecx + esi*2]
push ecx
push edx
call fcn.00477e60
jmp 0x42977a
mov edi, 2
mov ecx, ebx
call fcn.00421960
mov esi, eax
test esi, esi
jns 0x426c47
xor esi, esi
mov edi, 1
mov ecx, ebx
call fcn.004218d0
cmp esi, eax
jbe 0x426c59
mov esi, eax
mov ecx, dword [esp + 0x20]
push 1
push 0
sub eax, esi
push eax
mov eax, dword [0x4c94ac]
push eax
push ecx
call fcn.00477e60
jmp 0x42977a
cmp byte [esi + 0x17], 0
jne 0x426c80
mov edi, dword [esi + 0xc]
jmp 0x426c82
mov edi, esi
test byte [edi + 0x15], 8
je 0x426c8f
mov eax, edi
call fcn.00401160
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426c9b
mov edi, dword [edi + 8]
jmp 0x426cad
cmp al, 2
jne 0x426ca8
call fcn.00401000
mov edi, eax
jmp 0x426cad
mov edi, 0x4cb614
cmp edi, dword [0x4c94ac]
jne 0x426cca
mov al, byte [esi + 0x17]
test al, al
jne 0x426cc2
mov edx, dword [esi + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
je 0x426d51
push 1
push 0
mov edi, 1
mov ecx, ebx
call fcn.004218d0
push eax
push 0
push esi
call fcn.00477e60
cmp eax, edi
jne case.0x426174.8
cmp byte [esi + 0x17], 0
jne 0x426cf6
mov edi, dword [esi + 0xc]
jmp 0x426cf8
mov edi, esi
test byte [edi + 0x15], 8
je 0x426d05
mov eax, edi
call fcn.00401160
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426d1e
test byte [edi + 0x15], 4
je 0x426d19
mov eax, edi
call fcn.0042f290
mov edi, dword [edi + 8]
jmp 0x426d30
cmp al, 2
jne 0x426d2b
call fcn.00401000
mov edi, eax
jmp 0x426d30
mov edi, 0x4cb614
mov ecx, dword [0x4c94ac]
mov edx, edi
jmp 0x426d40
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x426d40
mov eax, dword [0x4c94b0]
movzx eax, word [eax]
test ax, ax
je 0x426d7f
call fcn.004095a0
cmp ax, 0x54
jne 0x426d7f
mov ecx, dword [0x4c94b0]
cmp word [ecx + 2], 0
jne 0x426d7f
mov eax, edi
call fcn.004136f0
jmp 0x426d93
cmp byte [ebx], 0x31
push edi
jne 0x426d8d
call dword [sym.imp.USER32.dll_CharLowerW]
jmp 0x426d93
call dword [sym.imp.USER32.dll_CharUpperW]
cmp byte [esi + 0x17], 0
jne 0x426d9e
mov eax, dword [esi + 0xc]
jmp 0x426da0
mov eax, esi
cmp byte [eax + 0x17], 2
jne 0x426dbe
cmp dword [0x4cc1b4], 0
je 0x426dbe
mov ecx, 0x4cc1a8
call fcn.00404330
jmp 0x42977a
and byte [eax + 0x15], 0x86
mov eax, 1
jmp 0x42977a
mov eax, dword [0x4c9454]
test eax, eax
je 0x426dfe
cmp byte [eax + 0x17], 0
jne 0x426de3
mov edx, dword [eax + 0xc]
mov cl, byte [edx + 0x15]
jmp 0x426de6
mov cl, byte [eax + 0x15]
test cl, 1
je 0x426dfe
call fcn.00413ed0
push 0
push eax
push esi
call fcn.00413a50
jmp 0x42977a
mov edi, 1
mov ecx, ebx
call fcn.004218d0
push 0
push eax
push esi
call fcn.00413a50
jmp 0x42977a
mov edi, dword [0x4c94b4]
movzx eax, word [edi]
mov dword [esp + 0x30], edi
mov dword [esp + 0x40], 0xffffffff
test ax, ax
je 0x426eb7
call fcn.004095a0
movzx eax, ax
push eax
push 0x4a9c38
call fcn.0048f331
add esp, 8
test eax, eax
je 0x426eb7
cmp word [edi + 2], 0
je 0x426eb7
lea esi, [edi + 2]
call fcn.0040da90
mov dword [esp + 0x3c], eax
test eax, eax
jle 0x426fb1
mov ebx, dword [0x4c94b0]
cmp word [ebx], 0
jne 0x426ec1
mov dword [esp + 0x40], 0
mov eax, 0x4a296c
mov edx, dword [0x4c9d08]
push 1
push 0
push 0xffffffffffffffff
push eax
push edx
call fcn.00477e60
mov eax, dword [esp + 0x40]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x2c]
call fcn.004010e0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov dword [esp + 0x3c], 1
jmp 0x426e6b
mov ecx, dword [0x4c94ac]
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x14]
mov edi, 4
call fcn.00421960
mov esi, eax
test esi, esi
jns 0x426ee1
xor esi, esi
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.004218d0
mov edi, eax
cmp esi, edi
jge 0x426fb1
mov edx, dword [esp + 0x30]
movzx eax, word [edx]
cmp eax, 0x31
je 0x426f7a
call fcn.004095a0
cmp ax, 0x52
je 0x426f7a
mov ecx, dword [esp + 0x14]
mov edi, 2
call fcn.004218d0
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x58]
mov edi, 1
lea esi, [eax + esi*2]
mov edi, edi
mov ecx, dword [0x4c590c]
mov al, byte [ecx + 0xf2]
test al, al
jne 0x426f4b
mov eax, ebx
mov ecx, esi
call fcn.00475370
jmp 0x426f66
cmp al, 2
jne 0x426f5c
push esi
mov eax, ebx
call fcn.00475630
add esp, 4
jmp 0x426f66
push ebx
push esi
call fcn.0048f358
add esp, 8
test eax, eax
je 0x426fb1
cmp edi, dword [esp + 0x3c]
je 0x426f9d
mov edx, dword [esp + 0x30]
inc edi
lea esi, [eax + edx*2]
jmp 0x426f30
mov ecx, dword [esp + 0x18]
movzx edx, byte [ecx + 0xf2]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x58]
push eax
push edx
push ebx
mov eax, edi
sub eax, esi
push ecx
call fcn.00475160
add esp, 0x10
test eax, eax
je 0x426fb1
sub eax, dword [esp + 0x58]
sar eax, 1
mov dword [esp + 0x40], eax
jns 0x426e7f
mov eax, 0x4a54c0
jmp 0x426e84
push ebx
call fcn.0043d220
jmp 0x42977a
mov eax, dword [0x4c94b0]
mov ecx, dword [0x4c94ac]
push eax
mov eax, dword [0x4c94b4]
call fcn.00432880
jmp 0x42977a
mov ecx, dword [0x4c94b4]
mov edx, dword [0x4c94b0]
mov eax, dword [0x4c94a8]
push ecx
mov ecx, dword [0x4c94ac]
push edx
push ebx
call fcn.0043d470
jmp 0x42977a
mov eax, dword [0x4c94a8]
push eax
mov eax, ebx
call fcn.0043dc60
jmp 0x42977a
mov ecx, dword [0x4c94a8]
push ecx
mov ecx, dword [0x4c94ac]
push ebx
call fcn.0043e2e0
jmp 0x42977a
push 0
push ecx
mov edi, 7
mov ecx, ebx
call fcn.00421960
add esp, 4
push eax
mov edi, 6
mov ecx, ebx
call fcn.00421960
push eax
push ecx
mov edi, 5
mov ecx, ebx
call fcn.00421960
add esp, 4
push eax
mov edi, 4
mov ecx, ebx
call fcn.00421960
push eax
push ecx
mov edi, 3
mov ecx, ebx
call fcn.00421960
add esp, 4
push eax
mov edi, 2
mov ecx, ebx
call fcn.00421960
mov ecx, dword [0x4c94c8]
push eax
push ebx
call fcn.00439240
jmp 0x42977a
mov edx, dword [0x4c94c0]
push edx
push ecx
mov edi, 5
mov ecx, ebx
call fcn.00421960
add esp, 4
push eax
mov edi, 4
mov ecx, ebx
call fcn.00421960
push eax
push ecx
mov edi, 3
mov ecx, ebx
call fcn.00421960
add esp, 4
push eax
mov edi, 2
mov ecx, ebx
call fcn.00421960
push eax
push ebx
call fcn.00439950
jmp 0x42977a
mov eax, dword [0x4c94b4]
push eax
push ecx
mov edi, 2
mov ecx, ebx
call fcn.00421960
mov edi, 1
mov ecx, ebx
mov esi, eax
call fcn.00421960
add esp, 4
mov ecx, eax
push ebx
mov eax, esi
call fcn.004517f0
jmp 0x42977a
mov edx, dword [edi + 0xd4]
xor eax, eax
cmp cl, 0x42
mov ecx, dword [0x4c94a8]
sete al
push 0
push edx
push eax
push ecx
call fcn.0040dff0
add esp, 0x10
mov eax, 1
jmp 0x42977a
mov eax, dword [0x4c94a8]
xor edx, edx
cmp dword [edi + 0xd4], 3
push 0
sete dl
lea edx, [edx + edx + 1]
push edx
push 0
push eax
call fcn.0040dff0
add esp, 0x10
mov eax, 1
jmp 0x42977a
mov ecx, dword [0x4c94a8]
push 0
push 2
push 0
push ecx
call fcn.0040dff0
add esp, 0x10
mov eax, 1
jmp 0x42977a
mov edx, dword [0x4c94a8]
push 0
push 0
push 0
push edx
call fcn.0040dff0
add esp, 0x10
mov eax, 1
jmp 0x42977a
mov eax, dword [0x4c94a8]
push eax
call fcn.004100c0
add esp, 4
jmp 0x42977a
mov edx, dword [0x4c94c0]
mov eax, dword [0x4c94bc]
push 0x4a2868
push edx
mov edx, dword [0x4c94b8]
push eax
mov eax, dword [0x4c94b4]
push edx
mov edx, dword [0x4c94b0]
push eax
mov eax, dword [0x4c94ac]
push edx
mov edx, dword [0x4c94a8]
push eax
push ecx
mov eax, 0x4a2868
call fcn.00410330
add esp, 0x20
jmp 0x42977a
mov edx, dword [0x4c94bc]
mov eax, dword [0x4c94c0]
push edx
mov edx, dword [0x4c94b8]
push eax
mov eax, dword [0x4c94b0]
push edx
mov edx, dword [0x4c94ac]
push 0x4a2868
push 0x4a2868
push eax
mov eax, dword [0x4c94b4]
push edx
mov edx, dword [0x4c94a8]
push ecx
call fcn.00410330
add esp, 0x20
jmp 0x42977a
mov eax, dword [0x4c94b4]
mov edx, dword [0x4c94b0]
push 0x4a2868
push eax
mov eax, dword [0x4c94ac]
push edx
mov edx, dword [0x4c94a8]
push 0x4a2868
push 0x4a2868
push eax
push edx
mov eax, 0x4a2868
push ecx
mov edx, eax
call fcn.00410330
add esp, 0x20
jmp 0x42977a
mov edi, 4
mov ecx, ebx
call fcn.00421960
push eax
mov ecx, ebx
call fcn.0043c1c0
jmp 0x42977a
mov edx, dword [0x4c94ac]
mov ebx, dword [0x4c94b0]
mov esi, dword [0x4c94a8]
cmp cl, 0x76
sete al
push 0
movzx ecx, al
mov eax, dword [0x4c94b4]
push 0
push ecx
push edx
push edi
call fcn.00478b30
add esp, 0x14
test eax, eax
je 0x4272f1
mov eax, dword [0x4c590c]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle 0x4272f1
push 1
push eax
call fcn.00401360
add esp, 8
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov ecx, dword [0x4c94a8]
push 9
push 0x4a9c40
push ecx
call fcn.0048eda7
add esp, 0xc
test eax, eax
jne 0x427334
mov edx, dword [0x4c94ac]
cmp word [edx], ax
jne 0x427334
mov eax, dword [0x4c94b4]
cmp word [eax], 0
mov byte [esp + 0x2e], 1
je 0x427339
mov byte [esp + 0x2e], 0
mov al, byte [ebx]
xor ecx, ecx
cmp byte [esp + 0x2e], cl
setne cl
dec ecx
and ecx, 0x14
mov dword [esp + 0x3c], ecx
cmp al, 0x82
je 0x42739b
cmp al, 0x83
je 0x42739b
mov edx, dword [0x4c94b0]
cmp word [edx], 0
je 0x4273dd
mov al, byte [ebx]
cmp al, 0x82
je 0x427442
cmp al, 0x83
je 0x427444
mov ecx, dword [0x4c94b0]
mov edx, dword [0x4c94ac]
push ecx
mov ecx, dword [0x4c94b4]
push edx
mov edx, dword [0x4c94a8]
push eax
call fcn.00434aa0
jmp 0x42977a
mov eax, dword [0x4c94b0]
cmp word [eax], 0
je 0x4273d1
mov edi, 2
mov ecx, ebx
call fcn.00421a10
fmul qword [0x4bfac0]
call fcn.0049ce80
mov edi, dword [esp + 0x18]
mov dword [esp + 0x3c], eax
test eax, eax
jne 0x4273d1
mov dword [esp + 0x3c], 0x1f4
mov ecx, dword [0x4c94b8]
cmp word [ecx], 0
jne 0x427364
cmp byte [esp + 0x2e], 0
je 0x427364
mov eax, dword [0x4c94a8]
add eax, 0x12
call fcn.00409620
cmp word [eax], 0
mov dword [esp + 0x30], eax
je 0x427364
mov esi, dword [0x4cb6b8]
test esi, esi
je 0x427364
lea ecx, [ecx]
mov edx, dword [esp + 0x30]
mov eax, dword [esi + 4]
push edx
push eax
call fcn.0048e559
add esp, 8
test eax, eax
je 0x427431
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x427410
jmp 0x427364
mov edx, dword [esp + 0x3c]
mov cl, byte [ebx]
push esi
call fcn.0047abd0
jmp 0x42977a
cmp al, 0x83
mov edx, dword [0x4c94b8]
mov ebx, dword [0x4c94a8]
sete al
movzx ecx, al
mov eax, dword [esp + 0x3c]
push ecx
mov ecx, dword [0x4c94ac]
push edx
push eax
mov eax, dword [0x4c94b4]
push ecx
push edi
call fcn.00478e40
add esp, 0x14
test eax, eax
je 0x4272f1
mov edx, dword [0x4c590c]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle 0x4272f1
push 1
push eax
call fcn.00401360
mov ebx, dword [esp + 0x1c]
add esp, 8
mov eax, 1
jmp 0x42977a
mov ebx, dword [0x4c94ac]
call fcn.00438a80
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov eax, dword [0x4c94ac]
mov ecx, dword [0x4c94a8]
push eax
push ecx
call dword [sym.imp.KERNEL32.DLL_SetEnvironmentVariableW]
test eax, eax
sete dl
movzx eax, dl
push eax
push ebx
call fcn.0042e850
jmp 0x42977a
lea ecx, [esp + 0xa8]
push ecx
push 0x3a98
push 1
push 0x4a9c54
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
sete dl
movzx eax, dl
push eax
push ebx
call fcn.0042e850
jmp 0x42977a
mov ecx, dword [0x4c94ac]
mov edx, dword [0x4c94a8]
push ecx
push edx
push ebx
call fcn.00453090
jmp 0x42977a
mov eax, dword [0x4c94a8]
mov ecx, 0x4cc168
call fcn.004726c0
mov eax, dword [0x4c94ac]
mov ecx, 0x4cc174
call fcn.004726c0
mov eax, dword [0x4c94b0]
mov ecx, 0x4cc180
call fcn.004726c0
mov eax, 1
jmp 0x42977a
mov ecx, dword [0x4c94b0]
mov eax, 0x4a520c
call fcn.00475370
test eax, eax
setne al
mov cl, 3
cmp cl, byte [ebx + 1]
mov byte [esp + 0x74], al
mov ecx, dword [esp + 0x74]
sbb edx, edx
and edx, dword [0x4c945c]
test al, al
push edx
mov edx, dword [0x4c94b0]
push 1
push ecx
push 0
push edx
mov edx, dword [0x4c94ac]
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4c94a8]
push 0
push 0x4cb680
call fcn.0042f8d0
cmp byte [esp + 0x74], 0
je 0x42977a
test eax, eax
mov eax, 0x4a296c
jne 0x4275d9
mov eax, 0x4a9c6c
push 1
push 0
push 0xffffffffffffffff
push eax
mov eax, dword [0x4c9d08]
push eax
call fcn.00477e60
jmp 0x42977a
push ebx
call fcn.00434b80
jmp 0x42977a
cmp byte [ebx + 1], 2
jbe 0x42763e
mov ecx, dword [0x4c94c0]
mov edx, dword [0x4c94bc]
mov eax, dword [0x4c94b8]
push ecx
mov ecx, dword [0x4c94b4]
push edx
mov edx, dword [0x4c94b0]
push eax
mov eax, dword [0x4c94ac]
push ecx
mov ecx, dword [0x4c94c4]
push edx
mov edx, dword [0x4c94a8]
call fcn.00435280
jmp 0x42977a
mov eax, dword [0x4c94ac]
mov ecx, dword [0x4c94a8]
push 0x4a2868
push 0x4a2868
push 0x4a2868
push eax
push ecx
mov ecx, 0x4a2868
mov eax, ecx
mov edx, ecx
call fcn.00435280
jmp 0x42977a
mov edx, dword [0x4c94d0]
mov eax, dword [0x4c94cc]
mov ecx, dword [0x4c94c8]
push edx
mov edx, dword [0x4c94c4]
push eax
mov eax, dword [0x4c94c0]
push ecx
mov ecx, dword [0x4c94b4]
push edx
mov edx, dword [0x4c94b0]
push eax
mov eax, dword [0x4c94ac]
push ecx
mov ecx, dword [0x4c94a8]
push edx
mov edx, dword [0x4c94bc]
push eax
push ecx
mov ecx, dword [0x4c94b8]
push ebx
call fcn.00451c30
jmp 0x42977a
mov eax, dword [0x4c94b8]
xor edx, edx
cmp cl, 0x47
mov ecx, dword [0x4c94b4]
sete dl
push edx
mov edx, dword [0x4c94ac]
push eax
mov eax, dword [0x4c94a8]
push ecx
mov ecx, dword [0x4c94bc]
push edx
mov edx, dword [0x4c94b0]
push eax
push ebx
call fcn.004353a0
jmp 0x42977a
mov esi, dword [0x4c94b4]
push 1
xor bl, bl
call fcn.0040dac0
add esp, 4
mov byte [esp + 0x78], al
test al, al
jne 0x427734
mov ecx, dword [0x4c94b4]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push 0x4a866c
call fcn.0042ea20
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov edx, dword [0x4c94b8]
cmp word [edx], 0
je 0x427750
mov ecx, dword [esp + 0x14]
mov edi, 4
call fcn.00421960
jmp 0x427755
mov eax, 1
mov ecx, dword [0x4c94c0]
mov edx, dword [0x4c94b0]
push ecx
mov ecx, dword [0x4c94a8]
push edx
mov edx, dword [0x4c94bc]
push ecx
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [0x4c94ac]
push eax
mov eax, dword [esp + 0x8c]
push eax
push ecx
mov ecx, dword [0x4c94c4]
call fcn.00435460
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov edx, dword [0x4c94c4]
mov eax, dword [0x4c94c0]
mov ecx, dword [0x4c94b8]
push edx
mov edx, dword [0x4c94b4]
push eax
mov eax, dword [0x4c94b0]
push ecx
mov ecx, dword [0x4c94ac]
push edx
mov edx, dword [0x4c94a8]
push eax
push ecx
mov ecx, dword [0x4c94c8]
push edx
mov edx, dword [0x4c94bc]
push ebx
call fcn.00435ad0
jmp 0x42977a
mov eax, dword [0x4c94c8]
mov ecx, dword [0x4c94c4]
mov edx, dword [0x4c94c0]
push eax
mov eax, dword [0x4c94bc]
push ecx
mov ecx, dword [0x4c94b8]
push edx
push eax
push ecx
mov ecx, ebx
call fcn.00435d00
jmp 0x42977a
mov edx, dword [0x4c94b8]
mov eax, dword [0x4c94b4]
mov ecx, dword [0x4c94b0]
push edx
mov edx, dword [0x4c94ac]
push eax
push ecx
push edx
push ebx
call fcn.00435e50
jmp 0x42977a
mov eax, dword [0x4c94b4]
mov ecx, dword [0x4c94b0]
mov edx, dword [0x4c94a8]
push eax
push ecx
mov ecx, dword [0x4c94b8]
push edx
mov edx, dword [0x4c94ac]
push ebx
call fcn.00436030
jmp 0x42977a
mov eax, dword [0x4c94b8]
mov ecx, dword [0x4c94b4]
mov edx, dword [0x4c94ac]
mov esi, dword [0x4c94a8]
push eax
push ecx
mov ecx, dword [0x4c94bc]
push edx
mov edx, dword [0x4c94b0]
push ebx
call fcn.00436140
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov eax, dword [0x4c94b8]
mov ecx, dword [0x4c94ac]
mov edx, dword [0x4c94b0]
push eax
mov eax, dword [0x4c94b4]
push ecx
mov ecx, dword [0x4c94bc]
push ebx
call fcn.00436200
jmp 0x42977a
mov edx, dword [0x4c94c0]
mov eax, dword [0x4c94bc]
mov ecx, dword [0x4c94b8]
push edx
mov edx, dword [0x4c94b4]
push eax
mov eax, dword [0x4c94b0]
push ecx
mov ecx, dword [0x4c94ac]
push edx
mov edx, dword [0x4c94a8]
push eax
push ebx
call fcn.00451f70
jmp 0x42977a
mov ecx, dword [0x4c94c4]
mov edx, dword [0x4c94c0]
mov eax, dword [0x4c94bc]
push ecx
mov ecx, dword [0x4c94b8]
push edx
mov edx, dword [0x4c94b4]
push eax
mov eax, dword [0x4c94b0]
push ecx
mov ecx, dword [0x4c94ac]
push edx
push eax
push ebx
call fcn.004527d0
jmp 0x42977a
mov ecx, dword [0x4c94b8]
mov eax, dword [0x4c94b4]
mov edx, dword [0x4c94b0]
mov edi, dword [0x4c94ac]
push ecx
mov ecx, dword [0x4c94bc]
call fcn.00436ac0
jmp 0x42977a
mov edx, dword [0x4c94c0]
mov eax, dword [0x4c94bc]
mov ecx, dword [0x4c94b8]
push edx
mov edx, dword [0x4c94b0]
push eax
mov eax, dword [0x4c94ac]
push ecx
mov ecx, dword [0x4c94a8]
push edx
mov edx, dword [0x4c94b4]
push eax
push ecx
mov ecx, dword [0x4c94c4]
call fcn.00436b30
jmp 0x42977a
cmp cl, 0x90
sete dl
movzx eax, dl
push eax
mov eax, ebx
call fcn.00436c70
jmp 0x42977a
mov ecx, dword [0x4c94ac]
mov edx, dword [0x4c94a8]
push ecx
mov ecx, dword [0x4c94b0]
push ebx
call fcn.00436f90
jmp 0x42977a
mov edx, dword [0x4c94bc]
mov eax, dword [0x4c94b8]
mov ecx, dword [0x4c94b4]
push edx
mov edx, dword [0x4c94b0]
push eax
push ecx
mov ecx, dword [0x4c94ac]
push edx
mov edx, dword [0x4c94a8]
push ebx
call fcn.00437620
jmp 0x42977a
cmp byte [ebx + 1], 1
jbe 0x427a26
mov eax, dword [0x4c94b4]
mov ecx, dword [0x4c94b0]
mov edx, dword [0x4c94a8]
push eax
mov eax, dword [0x4c94ac]
push ecx
mov ecx, dword [0x4c94b8]
call fcn.00437a00
jmp 0x42977a
mov edi, dword [0x4c94a8]
mov ecx, 0x4a2868
push 0x4a2868
mov eax, ecx
mov edx, ecx
call fcn.00443680
test eax, eax
je 0x427a4b
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, 1
jmp 0x42977a
mov edx, dword [0x4c94b4]
mov ecx, dword [0x4c94b8]
mov eax, dword [0x4c94b0]
push edx
mov edx, dword [0x4c94ac]
call fcn.00437a30
jmp 0x42977a
mov eax, dword [0x4c94b4]
mov ecx, dword [0x4c94b8]
mov edx, dword [0x4c94ac]
push eax
mov eax, dword [0x4c94b0]
call fcn.00437c40
jmp 0x42977a
mov ecx, dword [0x4c94b8]
mov edx, dword [0x4c94b4]
mov eax, dword [0x4c94ac]
push ecx
mov ecx, dword [0x4c94bc]
push edx
mov edx, dword [0x4c94b0]
push eax
push ebx
call fcn.00437d60
jmp 0x42977a
mov ecx, dword [0x4c94b4]
mov eax, dword [0x4c94b0]
mov edx, dword [0x4c94ac]
push ecx
mov ecx, dword [0x4c94b8]
push ebx
call fcn.00438650
jmp 0x42977a
mov edx, dword [0x4c94c4]
mov eax, dword [0x4c94c0]
mov ecx, dword [0x4c94bc]
push edx
mov edx, dword [0x4c94b8]
push eax
push ecx
push edx
mov eax, ebx
call fcn.00438900
jmp 0x42977a
mov eax, dword [0x4c94b0]
mov ecx, dword [0x4c94ac]
push eax
push ebx
call fcn.00438bd0
jmp 0x42977a
push 0
push 0x1a3
push 0x111
push 0
push 0x4a735c
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [0x4c590c]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x427b5d
push 1
push eax
call fcn.00401360
add esp, 8
mov eax, 1
jmp 0x42977a
push 0
push 0x1a0
push 0x111
push 0
push 0x4a735c
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [0x4c590c]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle 0x427b5d
push 1
push eax
call fcn.00401360
add esp, 8
mov eax, 1
jmp 0x42977a
mov eax, dword [ebx + 0xc]
test eax, eax
jne 0x427be3
mov edi, dword [0x4c94a8]
cmp word [edi], ax
je 0x427be3
mov eax, 0x4cb680
call fcn.0041aba0
test eax, eax
jne 0x427be3
mov eax, dword [0x4c94a8]
push eax
push 0
push 0x4a54c4
mov ecx, ebx
call fcn.0042ea20
jmp 0x42977a
mov dword [0x4cc0fc], eax
mov eax, 1
jmp 0x42977a
mov eax, dword [0x4c94b0]
mov cl, 1
cmp cl, byte [ebx + 1]
mov ecx, dword [0x4c94ac]
sbb edx, edx
and edx, dword [0x4c9454]
push edx
mov edx, dword [0x4c94a8]
push eax
push ecx
mov ecx, dword [ebx + 0xc]
push edx
call fcn.0040a9c0
add esp, 0x10
jmp 0x42977a
mov ebx, dword [ebx + 0xc]
test ebx, ebx
jne 0x427cd1
mov edi, dword [0x4c94a8]
push ebx
mov ebx, 0x4cb680
call fcn.0041abe0
mov ebx, eax
test ebx, ebx
jne 0x427cd1
mov eax, dword [0x4c94a8]
mov ecx, dword [esp + 0x14]
cmp word [eax], bx
je 0x427c6d
push eax
push ebx
push 0x4a54c4
call fcn.0042ea20
mov ebx, dword [esp + 0x14]
jmp 0x42977a
cmp byte [ecx + 1], 0
jbe 0x427c99
mov eax, dword [ecx + 8]
mov eax, dword [eax + 4]
cmp word [eax], 0
je 0x427c99
push 0x4a2868
push 0
push 0x4a59e4
call fcn.0042ea20
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov eax, dword [esp + 0x18]
mov ebx, dword [eax + 0xbc]
test ebx, ebx
jne 0x427cd1
mov eax, dword [eax + 0xc0]
test eax, eax
je 0x427cb7
mov ebx, dword [eax]
test ebx, ebx
jne 0x427cd1
push 0x4a2868
push 0
push 0x4a9c78
call fcn.0042ea20
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov esi, dword [0x4c94ac]
cmp word [esi], 0
je 0x427d83
push 0
call fcn.00414de0
add esp, 4
test eax, eax
jne 0x427d58
push eax
mov eax, dword [0x4c94ac]
push 1
push 1
push 1
call fcn.00474e20
add esp, 0x10
test eax, eax
jne 0x427d79
mov ecx, dword [0x4c94ac]
push 0x4a4824
push ecx
call fcn.0048e559
add esp, 8
test eax, eax
jne 0x427d38
push ebx
push 0x4cb680
call fcn.0041aab0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov edx, dword [0x4c94ac]
mov ecx, dword [esp + 0x14]
push edx
push 0
push 0x4a5a10
call fcn.0042ea20
mov ebx, dword [esp + 0x14]
jmp 0x42977a
jle 0x427d79
cmp eax, 2
jg 0x427d79
mov edx, dword [0x4c94b0]
cmp eax, 1
sete al
push 0
movzx ecx, al
push ecx
push edx
push 0x4a2868
jmp 0x427d9c
mov esi, dword [0x4c94ac]
cmp word [esi], 0
mov ecx, dword [0x4c94b0]
jne 0x427d95
cmp word [ecx], 0
je 0x427d95
mov al, 1
jmp 0x427d97
xor al, al
push eax
push 1
push ecx
push esi
push ebx
mov edi, 0x4cb680
call fcn.0041a7d0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov eax, dword [0x4c94a8]
cmp word [eax], 0
mov esi, 0x10
je 0x427dea
push 0x4a6fd8
push eax
call fcn.0048e559
add esp, 8
test eax, eax
je 0x427dea
xor edi, edi
mov ecx, ebx
call fcn.00421960
mov edi, dword [esp + 0x18]
mov esi, eax
test esi, esi
je 0x427def
mov eax, 1
mov byte [edi + 0xee], al
test al, al
je 0x427e1b
or eax, 0xffffffff
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 0x24], eax
mov dword [edi + 0xd8], esi
mov byte [edi + 0xec], 0
mov eax, 1
jmp 0x42977a
mov dword [edi + 0xd8], 5
mov byte [edi + 0xec], 1
mov eax, 1
jmp 0x42977a
mov esi, dword [0x4c94a8]
call fcn.00414d80
dec eax
je 0x427ee8
dec eax
je 0x427e9e
dec eax
jne 0x427efd
mov eax, dword [0x4c94ac]
cmp word [eax], 0
je 0x427e88
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00421960
or eax, edx
jne 0x427e84
mov ebx, dword [esp + 0x14]
mov eax, edi
mov edi, dword [esp + 0x18]
mov byte [edi + 0xed], al
jmp 0x42977a
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
xor eax, eax
mov byte [edi + 0xed], al
mov eax, 1
jmp 0x42977a
mov ecx, dword [0x4c94ac]
cmp word [ecx], 0
je 0x427ebd
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00421960
mov dword [0x4cc15c], eax
mov edx, dword [0x4c94b0]
cmp word [edx], 0
je 0x427efd
mov ecx, dword [esp + 0x14]
mov edi, 2
call fcn.00421960
mov ebx, dword [esp + 0x14]
mov dword [0x4cc158], eax
lea eax, [edi - 1]
jmp 0x42977a
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00421960
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x2c], eax
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov esi, dword [ebx + 0xc]
test esi, esi
jne 0x427f2e
mov edi, dword [0x4c94a8]
push 1
push 0x4cb680
call fcn.004226d0
mov esi, eax
test esi, esi
je case.0x426174.8
mov edi, dword [0x4c94b4]
cmp word [edi], 0
je 0x427f6b
mov eax, dword [ebx + 0x18]
test eax, eax
jne 0x427f68
mov eax, 0x4cb680
call fcn.0041aba0
test eax, eax
jne 0x427f68
mov edx, dword [0x4c94b4]
push edx
push eax
push 0x4a54c4
mov ecx, ebx
call fcn.0042ea20
jmp 0x42977a
mov dword [esi + 0x10], eax
mov eax, dword [0x4c94bc]
mov ecx, dword [0x4c94b8]
mov edx, dword [0x4c94b0]
push eax
mov eax, dword [0x4c94ac]
push ecx
push edx
push eax
push esi
call fcn.0047a8a0
jmp 0x42977a
mov esi, dword [ebx + 0xc]
test esi, esi
jne 0x427fd0
mov eax, dword [0x4c94a8]
mov edi, eax
cmp word [eax], si
je 0x42800b
mov esi, dword [0x4cb6b8]
test esi, esi
je 0x42800b
lea ecx, [ecx]
mov ecx, dword [esi + 4]
push edi
push ecx
call fcn.0048e559
add esp, 8
test eax, eax
je 0x427fd0
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x427fb0
lea eax, [esi + 1]
jmp 0x42977a
mov eax, dword [0x4c94ac]
cmp word [eax], 0
je 0x428001
push 0x4a5b18
push eax
call fcn.0048e559
add esp, 8
test eax, eax
jne 0x428001
mov al, 1
mov ecx, esi
push eax
call fcn.0047af20
mov eax, 1
jmp 0x42977a
xor al, al
mov ecx, esi
push eax
call fcn.0047af20
mov eax, 1
jmp 0x42977a
mov esi, dword [ebx + 0xc]
test esi, esi
jne 0x428060
mov eax, dword [0x4c94a8]
mov edi, eax
cmp word [eax], si
je 0x4280ca
mov esi, dword [0x4cb6b8]
test esi, esi
je 0x4280ca
lea ebx, [ebx]
mov edx, dword [esi + 4]
push edi
push edx
call fcn.0048e559
add esp, 8
test eax, eax
je 0x428060
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x428040
lea eax, [esi + 1]
jmp 0x42977a
mov eax, dword [0x4c94ac]
cmp word [eax], 0
je 0x4280c1
push 0x4a8388
push eax
call fcn.0048e559
add esp, 8
test eax, eax
jne 0x428091
push esi
xor edx, edx
mov cl, 0x82
call fcn.0047abd0
mov eax, 1
jmp 0x42977a
mov eax, dword [0x4c94ac]
cmp word [eax], 0
je 0x4280c1
push 0x4a5b18
push eax
call fcn.0048e559
add esp, 8
test eax, eax
jne 0x4280c1
mov al, 1
push eax
push esi
call fcn.0047ac90
mov eax, 1
jmp 0x42977a
xor al, al
push eax
push esi
call fcn.0047ac90
mov eax, 1
jmp 0x42977a
mov eax, dword [0x4c94b0]
push eax
mov eax, dword [0x4c94ac]
call fcn.0043ef50
jmp 0x42977a
test esi, esi
jne 0x428103
lea edi, [esi + 1]
mov ecx, ebx
call fcn.00421960
call fcn.004133d0
mov eax, edi
jmp 0x42977a
mov eax, dword [0x4c94ac]
push 0
push 1
push 0
push 1
call fcn.00474e20
add esp, 0x10
cmp eax, 2
je 0x42813b
mov eax, dword [0x4c94b0]
push 0
push 1
push 0
push 1
call fcn.00474e20
add esp, 0x10
cmp eax, 2
jne 0x4281c8
mov ecx, dword [0x4c94ac]
cmp word [ecx], 0
je 0x428155
mov edi, 1
mov ecx, ebx
call fcn.00421a10
jmp 0x428157
fldz
mov edx, dword [0x4c94b0]
fst qword [esp + 0x30]
cmp word [edx], 0
je 0x428192
mov edi, 2
fstp st(0)
mov ecx, ebx
call fcn.00421a10
fst qword [esp + 0x40]
fld qword [esp + 0x30]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x42819e
fstp qword [esp + 0x30]
fstp qword [esp + 0x40]
jmp 0x4281a2
fld qword [0x4bfb48]
fst qword [esp + 0x40]
jmp 0x42817f
fstp st(0)
fstp st(0)
call fcn.00413540
fld qword [esp + 0x40]
fld qword [esp + 0x30]
sub esp, 8
fsub st(1), st(0)
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push esi
call fcn.00413a80
jmp 0x42977a
mov eax, dword [0x4c94ac]
cmp word [eax], 0
je 0x4281e7
mov edi, 1
mov ecx, ebx
call fcn.00421960
mov esi, eax
mov dword [esp + 0x40], eax
jmp 0x4281ed
xor esi, esi
mov dword [esp + 0x40], esi
mov ecx, dword [0x4c94b0]
cmp word [ecx], 0
je 0x428209
mov edi, 2
mov ecx, ebx
call fcn.00421960
mov edi, eax
jmp 0x42820e
mov edi, SysReAllocString
cmp esi, edi
jle 0x42821c
mov eax, esi
mov esi, edi
mov dword [esp + 0x40], esi
mov edi, eax
call fcn.004134f0
mov ecx, eax
mov eax, esi
cdq
mov esi, eax
mov dword [esp + 0x30], edx
mov eax, edi
cdq
sub eax, esi
sbb edx, dword [esp + 0x30]
add eax, 1
adc edx, 0
push edx
push eax
push 0
push ecx
call fcn.0049d940
add eax, dword [esp + 0x40]
push 0x18
cdq
push edx
push eax
mov eax, dword [esp + 0x2c]
call fcn.004010e0
mov eax, 1
jmp 0x42977a
mov edx, dword [esp + 0x14]
mov ecx, dword [0x4c94ac]
push edx
mov bl, 1
call fcn.0043f070
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov eax, dword [0x4c94b0]
mov ecx, dword [0x4c94a8]
push eax
mov eax, dword [0x4c94ac]
push ebx
call fcn.0043f240
jmp 0x42977a
mov eax, dword [0x4c94b0]
mov ecx, dword [0x4c94ac]
push ebx
call fcn.0043f4f0
jmp 0x42977a
mov edx, dword [0x4c94b4]
mov eax, dword [0x4c94ac]
push edx
xor edx, edx
cmp cl, 0x9b
sete dl
push eax
dec edx
and edx, dword [0x4c94a8]
push edx
push ebx
call fcn.0043faf0
jmp 0x42977a
mov eax, dword [0x4c94ac]
cmp word [eax], 0
je 0x4282f0
mov edi, 1
mov ecx, ebx
call fcn.00421960
dec eax
jmp 0x4282f2
xor eax, eax
cdq
test edx, edx
jg 0x428303
jl 0x4282fd
test eax, eax
jae 0x428303
xor eax, eax
mov dword [esp + 0x34], eax
cmp byte [ebx], 0x9d
push eax
jne 0x428319
mov esi, ebx
call fcn.00440c00
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov edi, dword [0x4c94a8]
mov ebx, dword [esp + 0x18]
call fcn.00440cf0
jmp 0x42977a
mov ecx, dword [0x4c94ac]
cmp word [ecx], 0
je 0x428349
mov edi, 1
mov ecx, ebx
call fcn.00421960
mov esi, eax
jmp 0x42834e
mov esi, 0x96
mov edx, dword [0x4c94a8]
cmp word [edx], 0
je 0x428373
xor edi, edi
mov ecx, ebx
call fcn.00421960
push esi
push eax
call dword [sym.imp.KERNEL32.DLL_Beep]
lea eax, [edi + 1]
jmp 0x42977a
mov eax, 0x20b
push esi
push eax
call dword [sym.imp.KERNEL32.DLL_Beep]
mov eax, 1
jmp 0x42977a
mov eax, dword [0x4c94ac]
cmp word [eax], 0
je 0x4283ac
push 0x4a9cd4
push eax
call fcn.0048e559
add esp, 8
test eax, eax
je 0x4283d1
mov eax, dword [0x4c94ac]
push 0x4a54c0
push eax
call fcn.0048e559
add esp, 8
test eax, eax
je 0x4283d1
xor al, al
push eax
mov eax, dword [0x4c94a8]
push ebx
call fcn.00440e50
jmp 0x42977a
mov eax, 1
push eax
mov eax, dword [0x4c94a8]
push ebx
call fcn.00440e50
jmp 0x42977a
cmp byte [ebx + 1], 2
jae 0x4283f2
mov edi, dword [edi + 0x18]
jmp 0x4283f4
xor edi, edi
mov eax, dword [0x4c94a8]
mov ecx, dword [0x4c94ac]
push edi
push eax
push ecx
push ebx
call fcn.00442320
jmp 0x42977a
mov ecx, dword [0x4c94ac]
push ebx
call fcn.004419b0
jmp 0x42977a
mov edx, dword [0x4c94ac]
mov ecx, dword [0x4c94b0]
push edx
push ebx
call fcn.00441f90
jmp 0x42977a
mov esi, dword [0x4c94a8]
mov edi, dword [esp + 0x14]
call fcn.00442750
mov ebx, edi
jmp 0x42977a
mov eax, dword [0x4c94a8]
mov esi, ebx
call fcn.00453d50
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov ecx, dword [0x4c94a8]
movzx eax, word [ecx]
neg eax
sbb eax, eax
push 7
and eax, ecx
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
test eax, eax
setne al
movzx ecx, al
push ecx
push ebx
call fcn.0042e850
jmp 0x42977a
mov eax, dword [0x4c94b0]
mov ecx, dword [0x4c94ac]
mov edx, dword [0x4c94a8]
push ebx
call fcn.004427d0
jmp 0x42977a
add edi, 0x30
push edi
push 0
mov edi, 2
mov ecx, ebx
call fcn.00421960
mov ecx, dword [0x4c94ac]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4c94a8]
push eax
push ecx
call fcn.004544c0
add esp, 0x10
test eax, eax
jne 0x42852c
mov edx, dword [0x4c9d08]
push 1
push eax
push 0xffffffffffffffff
push 0x4a296c
push edx
call fcn.00477e60
jmp 0x42977a
add edi, 0x30
push edi
push 1
mov edi, 2
mov ecx, ebx
call fcn.00421960
mov edx, dword [0x4c94ac]
cmp eax, 1
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4c94a8]
call fcn.004544c0
add esp, 0x10
push eax
push ebx
call fcn.0042e910
jmp 0x42977a
mov edi, 2
mov ecx, ebx
call fcn.00421960
mov edx, dword [0x4c94ac]
cmp eax, 1
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4c94a8]
call fcn.00454030
add esp, 8
test al, al
sete al
movzx ecx, al
push ecx
push ebx
call fcn.0042e850
jmp 0x42977a
mov edx, dword [0x4c94b0]
mov ax, word [edx]
call fcn.004095a0
cmp ax, 0x52
jne 0x4285b2
mov eax, dword [0x4c94ac]
mov ecx, dword [0x4c94a8]
push eax
push ecx
call dword [sym.imp.KERNEL32.DLL_MoveFileW]
test eax, eax
sete dl
movzx eax, dl
push eax
push ebx
call fcn.0042e850
jmp 0x42977a
mov edi, 2
mov ecx, ebx
call fcn.00421960
mov ecx, dword [0x4c94ac]
mov edx, dword [0x4c94a8]
push ecx
mov edi, eax
call fcn.00454200
add esp, 4
test al, al
sete dl
movzx eax, dl
push eax
push ebx
call fcn.0042e850
jmp 0x42977a
mov ecx, dword [0x4c94a8]
push ecx
mov ecx, ebx
call fcn.004417c0
jmp 0x42977a
mov edx, dword [0x4c94a8]
cmp word [edx], 0
je 0x42863d
mov edi, 1
mov ecx, ebx
call fcn.00421960
mov edx, dword [0x4c94a8]
cmp eax, edi
sete al
movzx ecx, al
push ecx
call fcn.004543d0
add esp, 4
test al, al
je 0x42863d
xor al, al
push eax
push ebx
call fcn.0042e850
jmp 0x42977a
mov eax, 1
push eax
push ebx
call fcn.0042e850
jmp 0x42977a
mov eax, dword [0x4c94ac]
cmp word [eax], 0
jne 0x428668
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x2c]
test edi, edi
jne 0x428668
mov eax, 0x4a2868
mov edi, ebx
call fcn.00442980
jmp 0x42977a
mov eax, dword [0x4c94ac]
cmp word [eax], 0
je 0x428685
mov dword [esp + 0x40], eax
jmp 0x42869d
mov edi, dword [edi + 0x10]
test edi, edi
je 0x428695
add edi, 0x2c
mov dword [esp + 0x40], edi
jmp 0x42869d
mov dword [esp + 0x40], 0x4a2868
mov edi, 3
mov ecx, ebx
call fcn.00421960
mov esi, dword [0x4c94b0]
cmp eax, 1
sete dl
movzx eax, dl
push eax
call fcn.00415070
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x18]
push eax
mov eax, dword [0x4c94a8]
push ecx
push edx
call fcn.00442a90
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
xor eax, eax
cmp dword [ecx + 0x100], eax
sete al
jmp 0x42977a
mov eax, dword [0x4c94ac]
cmp word [eax], 0
jne 0x428705
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x2c]
test edi, edi
jne 0x428705
mov eax, 0x4a2868
mov edx, dword [0x4c94b0]
movzx ecx, word [edx]
push ecx
mov edi, ebx
call fcn.004430e0
jmp 0x42977a
mov eax, dword [0x4c94ac]
cmp word [eax], 0
je 0x42872c
mov dword [esp + 0x40], eax
jmp 0x428744
mov edi, dword [edi + 0x10]
test edi, edi
je 0x42873c
add edi, 0x2c
mov dword [esp + 0x40], edi
jmp 0x428744
mov dword [esp + 0x40], 0x4a2868
mov edi, 4
mov ecx, ebx
call fcn.00421960
mov esi, dword [0x4c94b4]
cmp eax, 1
sete dl
movzx eax, dl
push eax
call fcn.00415070
mov ecx, dword [0x4c94b0]
movzx edx, word [ecx]
mov edi, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x48]
push edx
push eax
mov eax, dword [0x4c94a8]
call fcn.00443260
jmp 0x4286d3
mov eax, dword [0x4c94ac]
cmp word [eax], 0
je 0x4287a7
mov edx, dword [0x4c94b0]
push edx
mov edi, eax
push ebx
call fcn.00443420
jmp 0x42977a
mov edi, dword [edi + 0x10]
test edi, edi
je 0x4287c3
mov edx, dword [0x4c94b0]
push edx
add edi, 0x2c
push ebx
call fcn.00443420
jmp 0x42977a
mov edx, dword [0x4c94b0]
push edx
mov edi, 0x4a2868
push ebx
call fcn.00443420
jmp 0x42977a
mov eax, dword [0x4c94ac]
cmp word [eax], 0
jne 0x4287f4
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x2c]
test edi, edi
jne 0x4287f4
mov eax, 0x4a2868
push ebx
call fcn.00453e60
jmp 0x42977a
mov edi, dword [0x4c94a8]
call fcn.00441080
mov ecx, dword [esp + 0x18]
xor eax, eax
cmp dword [ecx + 0x100], eax
sete al
jmp 0x42977a
mov edx, dword [0x4c94b8]
mov eax, dword [0x4c94b0]
mov ecx, dword [0x4c94ac]
push edx
push eax
push ecx
mov ecx, dword [0x4c94b4]
push ebx
call fcn.00441170
jmp 0x42977a
mov edx, dword [0x4c94b0]
mov eax, dword [0x4c94ac]
mov ecx, dword [0x4c94b4]
push edx
push eax
mov edx, ebx
call fcn.00453470
jmp 0x42977a
mov ecx, dword [0x4c94a8]
push ecx
push ebx
call fcn.00453780
jmp 0x42977a
mov edx, dword [0x4c94c8]
mov eax, dword [0x4c94c4]
mov ecx, dword [0x4c94c0]
mov ebx, dword [0x4c94b8]
mov edi, dword [0x4c94b4]
push edx
mov edx, dword [0x4c94bc]
push eax
mov eax, dword [0x4c94ac]
push ecx
mov ecx, dword [0x4c94a8]
push edx
mov edx, dword [esp + 0x24]
push eax
push ecx
mov ecx, dword [0x4c94b0]
push edx
call fcn.00453b00
mov ebx, dword [esp + 0x14]
jmp 0x42977a
push 0
mov ecx, 4
call fcn.0043b330
add esp, 4
jmp 0x42977a
mov esi, dword [0x4c94a8]
push 7
call fcn.00414de0
add esp, 4
cmp eax, 7
jne 0x428900
push 0
lea ecx, [eax - 6]
call fcn.0043b330
mov ebx, dword [esp + 0x18]
add esp, 4
jmp 0x42977a
cmp byte [edi + 0xf9], 0
je 0x42892c
mov ecx, dword [0x4cb5b8]
test ecx, ecx
jle 0x428916
dec ecx
jmp 0x42891b
mov ecx, 0x18f
mov dword [0x4cb5b8], ecx
mov dword [ecx*4 + 0x4caf78], 0
mov ebx, dword [esp + 0x14]
cmp eax, 1
sete al
mov byte [edi + 0xf9], al
mov eax, 1
jmp 0x42977a
push 0
mov ecx, 2
call fcn.0043b330
add esp, 4
jmp 0x42977a
push 0
mov ecx, 3
call fcn.0043b330
add esp, 4
jmp 0x42977a
mov ebx, dword [0x4c590c]
add ebx, 0x4c
call fcn.0045c430
test eax, eax
je 0x42898e
mov ecx, dword [0x4c590c]
mov edx, dword [ecx + 0x4c]
mov eax, dword [edx + 4]
jmp 0x428990
xor eax, eax
mov ebx, dword [esp + 0x14]
mov cl, byte [ebx + 1]
push eax
test cl, cl
jne 0x4289b2
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push 0x4a9ce0
jmp 0x4289f7
cmp cl, 1
jne 0x4289ce
fldz
mov eax, dword [0x4c94a8]
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push eax
jmp 0x4289f7
push ecx
mov edi, 3
mov ecx, ebx
call fcn.00421a10
push ecx
mov ecx, dword [0x4c94ac]
fstp qword [esp]
push ecx
xor edi, edi
mov ecx, ebx
call fcn.00421960
mov edx, dword [0x4c94b0]
push eax
push edx
call fcn.00479a00
mov esi, eax
add esp, 0x18
test esi, esi
jne 0x428a2e
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x59e
jne 0x428a2e
mov eax, dword [0x4c94a8]
push eax
push esi
push 0x4a59e4
mov ecx, ebx
call fcn.0042ea20
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov ebx, dword [esp + 0x14]
xor eax, eax
test esi, esi
setne al
jmp 0x42977a
mov ecx, dword [0x4c94c4]
cmp word [ecx], 0
je 0x428a61
mov edi, 7
mov ecx, ebx
call fcn.00421960
mov dword [esp + 0x40], eax
mov esi, SysReAllocString
jmp 0x428a6a
mov esi, SysReAllocString
mov dword [esp + 0x40], esi
mov edx, dword [0x4c94c0]
cmp word [edx], 0
je 0x428a88
mov edi, 6
mov ecx, ebx
call fcn.00421960
mov dword [esp + 0x58], eax
jmp 0x428a8c
mov dword [esp + 0x58], esi
mov eax, dword [0x4c94bc]
cmp word [eax], 0
je 0x428aa9
mov edi, 5
mov ecx, ebx
call fcn.00421960
mov dword [esp + 0x3c], eax
jmp 0x428aad
mov dword [esp + 0x3c], esi
mov ecx, dword [0x4c94b8]
cmp word [ecx], 0
je 0x428ac7
mov edi, 4
mov ecx, ebx
call fcn.00421960
mov esi, eax
mov edi, 9
mov ecx, ebx
call fcn.00421a10
mov edx, dword [0x4c94d0]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x58]
sub esp, 8
fstp qword [esp]
push edx
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [0x4c94b4]
mov ax, word [eax]
push ecx
push edx
call fcn.004095a0
mov edx, dword [0x4c94b0]
cmp ax, 0x48
mov eax, dword [0x4c94ac]
push edx
mov edx, dword [esp + 0x3c]
push eax
sete cl
push edx
mov edi, esi
call fcn.0043b600
add esp, 0x24
jmp 0x42977a
mov eax, dword [0x4c94ac]
cmp word [eax], 0
je 0x428b3f
mov edi, 1
mov ecx, ebx
call fcn.00421960
mov esi, eax
jmp 0x428b41
xor esi, esi
mov ecx, dword [0x4c94a8]
cmp word [ecx], 0
je 0x428b58
xor edi, edi
mov ecx, ebx
call fcn.00421960
jmp 0x428b5d
mov eax, 0xc8
mov edx, dword [0x4c94b4]
mov ecx, dword [0x4c94b0]
push edx
push ecx
push esi
push eax
call fcn.004519c0
jmp 0x42977a
mov eax, dword [0x4c9510]
test eax, eax
je 0x428b98
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x428b98
mov edx, dword [0x4c9510]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4c9510], 0
mov eax, 1
jmp 0x42977a
mov eax, dword [0x4c94b8]
mov ecx, dword [0x4c94b4]
mov edx, dword [0x4c94b0]
push 0
push eax
mov eax, dword [0x4c94ac]
push ecx
mov ecx, dword [0x4c94a8]
push edx
push eax
push ecx
push ebx
mov ecx, 0x4a2868
call fcn.00431210
jmp 0x42977a
mov edx, dword [0x4c94bc]
mov eax, dword [0x4c94b8]
mov ecx, dword [0x4c94b4]
push 1
push edx
mov edx, dword [0x4c94b0]
push eax
mov eax, dword [0x4c94ac]
push ecx
mov ecx, dword [0x4c94a8]
push edx
push eax
push ebx
call fcn.00431210
jmp 0x42977a
mov ecx, dword [0x4c94b0]
mov edx, dword [0x4c94ac]
mov eax, dword [0x4c94a8]
push ecx
mov ecx, dword [0x4c94b4]
push edx
push eax
push ebx
call fcn.00432470
jmp 0x42977a
mov ecx, dword [0x4c94ac]
mov edx, dword [0x4c94a8]
mov edi, dword [0x4c94b4]
mov esi, dword [0x4c94b0]
push ecx
push edx
call fcn.00432780
mov ebx, dword [esp + 0x14]
jmp 0x42977a
push ebx
call fcn.00433af0
jmp 0x42977a
mov esi, dword [0x4c94ac]
call fcn.00415300
mov esi, dword [0x4c94a8]
movzx ebx, ax
call fcn.00415370
movzx ecx, ax
cmp ecx, 0xffffffff
je 0x428cb0
cmp ebx, 0xffffffff
je 0x428cb0
mov edx, 3
shl dx, cl
shl bx, cl
not dx
and dx, word [edi + 0xf0]
or dx, bx
mov word [edi + 0xf0], dx
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
xor edi, edi
mov ecx, ebx
call fcn.00421960
mov ecx, dword [esp + 0x18]
mov byte [ecx + 0xef], al
cmp al, 0x64
jbe 0x428cdc
mov byte [ecx + 0xef], 2
mov eax, 1
jmp 0x42977a
mov eax, dword [edi + 0xd4]
push eax
mov eax, dword [0x4c94a8]
call fcn.00414fe0
mov dword [edi + 0xd4], eax
add esp, 4
mov eax, 1
jmp 0x42977a
xor edi, edi
mov ecx, ebx
call fcn.00421960
cmp eax, 0x64
ja 0x428d22
mov ecx, dword [esp + 0x18]
mov byte [ecx + 0xf6], al
mov eax, 1
jmp 0x42977a
mov edx, dword [0x4c94b0]
push 0x4a7044
push edx
call fcn.0048e559
add esp, 8
test eax, eax
jne 0x428d85
mov eax, dword [0x4c94a8]
cmp word [eax], 0
je 0x428d5f
xor edi, edi
mov ecx, ebx
call fcn.00421960
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x60], eax
mov edx, dword [0x4c94ac]
cmp word [edx], 0
je 0x428dc0
mov edi, 1
mov ecx, ebx
call fcn.00421960
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x68], eax
mov eax, edi
jmp 0x42977a
mov edx, dword [0x4c94a8]
cmp word [edx], 0
je 0x428da1
xor edi, edi
mov ecx, ebx
call fcn.00421960
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x5c], eax
mov edx, dword [0x4c94ac]
cmp word [edx], 0
je 0x428dc0
mov edi, 1
mov ecx, ebx
call fcn.00421960
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x64], eax
mov eax, 1
jmp 0x42977a
mov edx, dword [0x4c94ac]
push 0x4a7044
push edx
call fcn.0048e559
add esp, 8
xor edi, edi
mov ecx, ebx
test eax, eax
jne 0x428dfa
call fcn.00421960
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x70], eax
lea eax, [edi + 1]
jmp 0x42977a
call fcn.00421960
mov edx, dword [esp + 0x18]
mov dword [edx + 0x6c], eax
mov eax, 1
jmp 0x42977a
xor edi, edi
mov ecx, ebx
call fcn.00421960
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x54], eax
lea eax, [edi + 1]
jmp 0x42977a
xor edi, edi
mov ecx, ebx
call fcn.00421960
mov edx, dword [esp + 0x18]
mov dword [edx + 0x58], eax
lea eax, [edi + 1]
jmp 0x42977a
mov ecx, dword [0x4c94a8]
mov eax, 0x4a9d0c
call fcn.00475370
mov ecx, ebx
test eax, eax
je 0x428e79
mov dword [edi], 0xffffffff
mov dword [edi + 4], 0xffffffff
xor edi, edi
call fcn.00421960
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x24], eax
lea eax, [edi + 1]
jmp 0x42977a
mov dword [edi + 0x24], 0xffffffff
xor edi, edi
call fcn.00421960
mov ecx, dword [esp + 0x18]
mov dword [ecx + 4], edx
mov edx, eax
or edx, dword [ecx + 4]
mov dword [ecx], eax
jne 0x428ea0
mov dword [ecx], 0xa
mov dword [ecx + 4], edi
mov eax, 1
jmp 0x42977a
mov esi, dword [0x4c94a8]
push 7
call fcn.00414de0
add esp, 4
cmp eax, 7
je 0x428ecb
cmp eax, 1
sete al
mov byte [edi + 0xf3], al
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov esi, dword [0x4c94a8]
call fcn.00414a50
dec eax
cmp eax, 5
ja case.default.0x428eee
jmp dword [eax*4 + 0x42a0e0]
mov ebx, dword [esp + 0x14]
mov eax, 1
mov dword [edi + 0x20], eax
jmp 0x42977a
mov ebx, dword [esp + 0x14]
mov dword [edi + 0x20], 2
mov eax, 1
jmp 0x42977a
mov ebx, dword [esp + 0x14]
mov dword [edi + 0x20], 4
mov eax, 1
jmp 0x42977a
mov ebx, dword [esp + 0x14]
mov dword [edi + 0x20], 3
mov eax, 1
jmp 0x42977a
mov ebx, dword [esp + 0x14]
mov byte [edi + 0xe9], 1
mov eax, 1
jmp 0x42977a
mov ebx, dword [esp + 0x14]
mov byte [edi + 0xe9], 0
mov eax, 1
jmp 0x42977a
mov ecx, dword [0x4c94a8]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push 0x4a59e4
call fcn.0042ea20
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov edx, dword [0x4c94a8]
push 5
push 0x4a7194
push edx
call fcn.0048eda7
add esp, 0xc
test eax, eax
jne 0x429081
lea edi, [eax + 1]
mov ecx, ebx
call fcn.004218d0
cmp eax, 0x1e
jb 0x428fc3
mov eax, edi
jmp 0x42977a
mov ecx, dword [esp + 0x14]
call fcn.00421960
mov edi, eax
mov eax, dword [0x4c94ac]
push 0x2e
push eax
mov ebx, edx
call fcn.0048f331
mov esi, eax
add esp, 8
mov dword [esp + 0x40], esi
test esi, esi
je 0x428ff8
add esi, 2
call fcn.00413980
mov esi, dword [esp + 0x40]
jmp 0x428ffc
xor eax, eax
xor edx, edx
add edi, eax
adc ebx, edx
add edi, 2
adc ebx, 0
mov dword [esp + 0x34], ebx
js 0x429024
jg 0x429016
cmp edi, 0xff
jbe 0x429024
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov eax, dword [0x4c94ac]
push 0
push 1
push 1
push 1
call fcn.00474e20
add esp, 0x10
mov ecx, 0x4a9d14
test eax, eax
jne 0x429047
mov ecx, 0x4a2868
mov eax, 0x4a2868
test esi, esi
jne 0x429055
mov eax, 0x4a8be0
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [0x4c94ac]
push eax
push ecx
add edx, 0x74
push 0x4a9d18
push edx
call fcn.0048e963
mov ebx, dword [esp + 0x28]
add esp, 0x14
mov eax, 1
jmp 0x42977a
mov eax, dword [0x4c94a8]
push 7
push 0x4a7184
push eax
call fcn.0048eda7
add esp, 0xc
test eax, eax
jne case.0x4290b2.69
mov ecx, dword [0x4c94ac]
movzx eax, word [ecx]
add eax, 0xffffffbc
cmp eax, 0x24
ja case.0x4290b2.69
movzx edx, byte [eax + 0x42a104]
jmp dword [edx*4 + 0x42a0f8]
mov byte [edi + 0xf5], 0x44
mov eax, 1
jmp 0x42977a
mov al, byte [ecx]
mov byte [edi + 0xf5], al
mov eax, 1
jmp 0x42977a
mov ecx, dword [0x4c94b0]
push ecx
mov ecx, dword [0x4c94ac]
call fcn.0043c590
jmp 0x42977a
movzx eax, byte [ebx + 1]
mov dl, 4
cmp dl, al
sbb ecx, ecx
and ecx, dword [0x4c9460]
mov dl, 3
cmp dl, al
mov edx, dword [0x4c94b8]
push ecx
mov ecx, dword [0x4c94bc]
sbb eax, eax
and eax, dword [0x4c945c]
push eax
mov eax, dword [0x4c94b4]
push ecx
mov ecx, dword [0x4c94b0]
push edx
mov edx, dword [0x4c94a8]
push eax
mov eax, dword [0x4c94ac]
push ecx
push edx
push 0x4cb680
call fcn.0046ab50
jmp 0x42977a
mov eax, dword [0x4c94b4]
mov ecx, dword [0x4c94b0]
mov edx, dword [0x4c94ac]
push eax
push ecx
mov ecx, dword [0x4c94a8]
push edx
push 0x4cb680
call fcn.0045c4a0
jmp 0x42977a
mov edx, dword [0x4c94ac]
mov al, 2
cmp al, byte [ebx + 1]
mov eax, dword [0x4c94a8]
sbb ecx, ecx
and ecx, dword [0x4c9458]
push ecx
push edx
push eax
mov eax, dword [0x4c94b0]
push ebx
call fcn.0045cdd0
jmp 0x42977a
mov ecx, dword [0x4c94b4]
mov edx, dword [0x4c94b0]
mov eax, dword [0x4c94ac]
push ecx
push edx
push eax
push ebx
call fcn.0045dda0
jmp 0x42977a
mov esi, dword [0x4c94a8]
call fcn.00414e80
cmp eax, 7
ja case.0x4291ca.3
jmp dword [eax*4 + 0x42a12c]
cmp byte [0x4c9664], 0
jne case.0x4291ca.3
call fcn.0042e460
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
cmp byte [0x4c9664], 0
je case.0x4291ca.3
call fcn.0042e460
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov edi, 1
mov ecx, ebx
call fcn.00421960
mov esi, dword [0x4c94a8]
test eax, eax
setne dl
movzx eax, dl
push eax
call fcn.004096c0
mov ecx, dword [esp + 0x18]
push eax
push ecx
call fcn.0042e4b0
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov esi, dword [0x4c94a8]
push 7
call fcn.00414de0
add esp, 4
cmp eax, 7
je 0x42925e
cmp eax, 1
sete dl
mov byte [edi + 0xf4], dl
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov esi, dword [0x4c94a8]
call fcn.00414e30
mov byte [edi + 0xf2], al
cmp al, 4
jne 0x429288
mov byte [edi + 0xf2], 0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov esi, dword [0x4c94a8]
push 7
call fcn.00414de0
add esp, 4
cmp eax, 7
je 0x4292b7
cmp eax, 1
sete al
mov byte [edi + 0xea], al
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov esi, dword [0x4c94a8]
push 7
call fcn.00414de0
add esp, 4
cmp eax, 7
je 0x4292e6
cmp eax, 1
sete cl
mov byte [edi + 0xeb], cl
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov esi, dword [0x4c94a8]
call fcn.00414f00
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x429312.3
movzx edx, byte [ecx + 0x42a164]
jmp dword [edx*4 + 0x42a14c]
mov bl, 1
call fcn.0042e5b0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
xor bl, bl
call fcn.0042e5b0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov ebx, dword [esp + 0x14]
mov dword [0x4c59e8], eax
mov eax, 1
jmp 0x42977a
or byte [0x4c9f1a], 2
cmp dword [0x4c963c], 0
mov byte [0x4c9f19], 1
jne case.0x429312.3
mov eax, dword [0x4c6aec]
movzx ecx, word [eax]
push ecx
call fcn.00407fa0
mov ebx, dword [esp + 0x18]
add esp, 4
mov eax, 1
jmp 0x42977a
mov byte [0x4c9f19], 0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov esi, dword [0x4c94a8]
mov edi, 0x4c59dc
mov al, 0x90
call fcn.004435e0
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov esi, dword [0x4c94a8]
mov edi, 0x4c59e0
mov al, 0x14
call fcn.004435e0
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov esi, dword [0x4c94a8]
mov edi, 0x4c59e4
mov al, 0x91
call fcn.004435e0
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov al, 1
mov edx, 0x4cb680
call fcn.00416930
mov eax, 1
jmp 0x42977a
xor edi, edi
mov ecx, ebx
call fcn.00421960
jmp 0x427b52
mov edx, dword [0x4c94ac]
mov ecx, dword [0x4c94b8]
mov ebx, dword [0x4c94b4]
push edx
mov edx, dword [0x4c94b0]
call fcn.00471620
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov eax, dword [0x4c94a8]
mov ecx, dword [esp + 0x14]
mov ebx, dword [0x4c94b0]
mov edx, dword [0x4c94ac]
push eax
push ecx
mov ecx, dword [0x4c94b4]
call fcn.00471860
mov ebx, dword [esp + 0x14]
jmp 0x42977a
cmp byte [ebx + 1], 3
mov eax, dword [0x4c94ac]
sbb edx, edx
not edx
and edx, dword [0x4c94b0]
push edx
mov edx, dword [0x4c94a8]
push eax
push ebx
call fcn.004719a0
jmp 0x42977a
cmp byte [ebx + 1], 2
jae 0x4294b4
mov edi, dword [edi + 0x14]
test edi, edi
je 0x4294b4
mov eax, dword [edi + 4]
lea ecx, [edi + 0x808]
push ecx
lea edx, [edi + 8]
push edx
push ebx
call fcn.00471a10
jmp 0x42977a
mov edx, dword [0x4c94ac]
lea eax, [esp + 0x2f]
push eax
lea ecx, [esp + 0x50]
push ecx
push 2
push edx
call fcn.004146b0
mov esi, eax
mov eax, dword [esp + 0x5c]
add esp, 0x10
test eax, eax
jne 0x4294ea
mov eax, dword [0x4c94b0]
mov ecx, dword [0x4c94b4]
mov dword [esp + 0x4c], eax
jmp 0x4294f0
mov ecx, dword [0x4c94b0]
push ecx
push eax
push ebx
mov eax, esi
call fcn.00471a10
cmp byte [esp + 0x2f], 0
mov edi, eax
je 0x42950e
test esi, esi
je 0x42950e
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
jmp 0x42977a
cmp byte [ebx + 1], 2
jae 0x429547
mov edi, dword [edi + 0x14]
test edi, edi
je 0x429547
mov eax, dword [0x4c94a8]
push eax
mov eax, dword [edi + 4]
lea ecx, [edi + 0x808]
push ecx
mov ecx, dword [edi + 0x1008]
lea edx, [edi + 8]
push edx
push ebx
call fcn.00471e30
jmp 0x42977a
mov edx, dword [0x4c94ac]
lea eax, [esp + 0x2f]
push eax
lea ecx, [esp + 0x50]
push ecx
push 2
push edx
call fcn.004146b0
mov edi, eax
mov eax, dword [esp + 0x5c]
add esp, 0x10
test eax, eax
jne 0x429583
mov eax, dword [0x4c94b0]
mov ecx, dword [0x4c94b4]
mov edx, dword [0x4c94b8]
mov dword [esp + 0x4c], eax
jmp 0x42958f
mov ecx, dword [0x4c94b0]
mov edx, dword [0x4c94b4]
mov esi, dword [0x4c94a8]
push edx
push ecx
push eax
call fcn.00414920
mov ecx, eax
mov eax, dword [esp + 0x20]
push eax
mov eax, edi
call fcn.00471e30
cmp byte [esp + 0x2f], 0
mov esi, eax
je 0x4295bf
test edi, edi
je 0x4295bf
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [esp + 0x14]
mov eax, esi
jmp 0x42977a
cmp byte [ebx + 1], 1
jae 0x429642
mov eax, dword [edi + 0x14]
test eax, eax
je 0x429642
cmp dword [eax + 0x1008], 0xfffffffe
lea ecx, [eax + 8]
jne 0x42961d
cmp word [ecx], 0
je 0x429613
add eax, 0x808
push eax
push ecx
push 0x4a7324
mov esi, 0x400
lea edi, [esp + 0x10c]
call fcn.00474fc0
add esp, 0xc
mov ecx, edi
mov edi, dword [esp + 0x18]
xor eax, eax
jmp 0x429622
lea ecx, [eax + 0x808]
xor eax, eax
jmp 0x429622
add eax, 0x808
mov edx, dword [edi + 0x14]
mov ebx, dword [edx + 4]
push eax
mov eax, dword [esp + 0x18]
push eax
mov edi, ecx
mov dword [esp + 0x54], ecx
call fcn.00472240
mov ebx, dword [esp + 0x14]
jmp 0x42977a
mov eax, dword [0x4c94a8]
lea ecx, [esp + 0x2f]
push ecx
lea edx, [esp + 0x50]
push edx
push 2
push eax
call fcn.004146b0
mov edi, dword [esp + 0x5c]
add esp, 0x10
mov ebx, eax
test edi, edi
jne 0x429678
mov edi, dword [0x4c94ac]
mov esi, dword [0x4c94b0]
mov dword [esp + 0x4c], edi
jmp 0x42967e
mov esi, dword [0x4c94ac]
cmp word [esi], 0
jne 0x429688
xor esi, esi
jmp 0x42969f
push 0x4a9d2c
push esi
call fcn.0048e559
add esp, 8
test eax, eax
jne 0x42969f
mov esi, 0x4a2868
mov ecx, dword [esp + 0x14]
push esi
push ecx
call fcn.00472240
cmp byte [esp + 0x2f], 0
mov esi, eax
je 0x4296be
test ebx, ebx
je 0x4296be
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [esp + 0x14]
mov eax, esi
jmp 0x42977a
mov esi, dword [0x4c94a8]
call fcn.004149a0
mov esi, eax
cmp esi, 0xffffffff
jne 0x4296fb
mov edx, dword [0x4c94a8]
mov ecx, dword [esp + 0x14]
push edx
push 0
push 0x4a59e4
call fcn.0042ea20
mov ebx, dword [esp + 0x14]
jmp 0x42977a
call fcn.004765a0
test eax, eax
je 0x42970a
mov dword [edi + 0xd0], esi
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x42977a
mov eax, dword [0x4c94a8]
push eax
call dword [sym.imp.KERNEL32.DLL_OutputDebugStringW]
mov eax, 1
jmp 0x42977a
xor edi, edi
mov ecx, ebx
call fcn.00421960
push eax
call fcn.00454de0
xor ecx, ecx
add esp, 4
test al, al
setne cl
mov eax, ecx
jmp 0x42977a
mov eax, dword [0x4c94a8]
call fcn.00415530
cmp eax, 0xffffffff
jne 0x42976b
mov edx, dword [0x4c94a8]
push edx
push 0
push 0x4a59e4
mov ecx, ebx
call fcn.0042ea20
jmp 0x42977a
mov dword [edi + 0xfc], eax
mov eax, 1
jmp 0x42977a
xor eax, eax
mov dword [esp + 0x24], eax
test eax, eax
je 0x425755
cmp dword [ebp + 8], 3
je 0x425755
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x14], eax
mov ebx, dword [esp + 0x14]
test ebx, ebx
je 0x425750
mov edi, dword [esp + 0x54]
xor esi, esi
jmp 0x425478
mov ecx, dword [esp + 0x48]
mov dword [ecx], edx
jmp 0x425750
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x48]
mov dword [eax], edx
jmp 0x425750
test esi, esi
je 0x429826
cmp dword [esi + 8], 0
jne 0x429826
mov eax, dword [0x4c9450]
test eax, eax
je 0x429817
cmp byte [eax + 0x17], 0
jne 0x4297e5
mov ecx, dword [eax + 0xc]
jmp 0x4297e7
mov ecx, eax
test byte [ecx + 0x15], 2
je 0x429817
mov edi, esi
call fcn.00413cf0
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [esi + 8], 0
mov ecx, dword [0x4c94a8]
mov dword [esi], ecx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [ebx + 0x18]
test ebx, ebx
je 0x42985b
mov edx, dword [esp + 0x48]
mov dword [edx], ebx
jmp 0x425750
mov eax, 5
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [ebx + 0x18]
test ebx, ebx
je 0x429884
mov eax, dword [esp + 0x48]
mov dword [eax], ebx
mov eax, 6
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4c94ac]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push 0x4a5a10
call fcn.0042ea20
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4c94b0]
mov ecx, dword [esp + 0x14]
push edx
push 0
push 0x4a5a3c
call fcn.0042ea20
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [edi + 0x108], 0
jne 0x429910
lea esi, [edi + 0x100]
call fcn.0042f120
xor eax, eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test esi, esi
je 0x429936
lea esi, [esp + 0x30]
call fcn.0042f120
test ebx, ebx
je 0x42996d
cmp ebx, 8
je 0x42996d
mov ecx, dword [0x4cbcb0]
push 0x4a2868
push 0
push 0x4a96c0
call fcn.0042ea20
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, ebx
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x48]
mov dword [ecx], edx
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [ebx + 1], 0
jne 0x4299d7
push 0x4a2868
push 0
push 0x4a9b64
mov ecx, ebx
call fcn.0042e760
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [edi + 0x100], 0
lea eax, [edi + 0x100]
mov dword [esp + 0x70], eax
je 0x4299f9
mov esi, eax
call fcn.0042f120
mov ebx, dword [esp + 0x14]
mov edi, dword [esp + 0x54]
push 0x10
call fcn.00490341
mov esi, eax
add esp, 4
test esi, esi
je 0x429a4e
mov eax, dword [0x4cb5c0]
test eax, eax
jne 0x429a78
mov edx, dword [ebx + 8]
movzx eax, word [edx + 2]
mov ecx, 0xff
cmp ax, cx
jae 0x429a25
mov eax, ecx
inc eax
lea edx, [eax + eax]
push edx
mov dword [0x4cb5c4], eax
call fcn.0048e5e4
add esp, 4
mov dword [0x4cb5c0], eax
test eax, eax
jne 0x429a78
push esi
mov dword [0x4cb5c4], eax
call fcn.00490280
add esp, 4
push 0x4a2868
push 0
push 0x4a55e8
mov ecx, ebx
call fcn.0042ea20
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4cb5c4]
mov dword [esp + 0x74], ecx
xor ecx, ecx
push ecx
mov dword [esp + 0x40], eax
mov dword [esp + 0x7c], eax
lea edx, [esp + 0x8c]
push edx
lea eax, [esp + 0x7c]
push eax
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x88]
push eax
push esi
lea edx, [esp + 0x3c]
push edx
push ecx
push ebx
mov dword [0x4cb5c0], ecx
mov dword [0x4cb5c4], ecx
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], ecx
mov dword [esi + 8], 0x41
call fcn.00458690
mov dword [esp + 0x6c], eax
cmp eax, dword [esp + 0x3c]
jne 0x429ae4
mov dword [esi + 0xc], eax
jmp 0x429b2a
cmp dword [esp + 0x3c], 0
mov dword [esi + 0xc], 0
je 0x429b2a
mov eax, dword [0x4cb5c0]
test eax, eax
je 0x429b16
push eax
call fcn.0048f817
add esp, 4
cmp dword [0x4cb5c4], 0x400000
jbe 0x429b16
dec dword [0x4cb5c8]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x74]
mov dword [0x4cb5c0], ecx
mov dword [0x4cb5c4], edx
mov eax, dword [esp + 0x6c]
test eax, eax
jne 0x429b56
push esi
call fcn.00490280
mov eax, dword [esp + 0x28]
add esp, 4
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [esi + 8], 0x41
jne 0x429b65
mov dword [esi + 8], 0
mov dword [esi], eax
mov eax, dword [esp + 0x70]
mov dword [eax], esi
mov dword [edi + 0x104], ebx
xor eax, eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4c6aec]
cmp word [ecx], 0
jne 0x429bba
cmp dword [0x4caf10], 0
jne 0x429bba
cmp dword [0x4c9638], 0
jne 0x429bba
cmp dword [0x4c963c], 0
jne 0x429bba
cmp byte [0x4c965c], 0
je case.0x425782.222
mov eax, 8
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x14]
xor edi, edi
call fcn.00421960
push eax
push 0x4cb680
xor eax, eax
lea edx, [edi + 9]
call fcn.00416960
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x48]
mov dword [edx], ecx
jmp 0x425750
mov edx, dword [esp + 0x48]
mov dword [edx], ecx
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je 0x425750
push 0x4a2868
push 0
push 0x4a9b98
mov ecx, ebx
call fcn.0042ea20
mov ecx, dword [esp + 0x934]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc