Function at 0x43b804
Capabilities:
Accept command line arguments
Check os version
Encode data using base64
Get common file path
Get graphical window text
Get session user name
Parse credit card information
Query environment variable
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x2f4
mov eax, dword [0x4755d0]
xor eax, esp
mov dword [esp + 0x2f0], eax
mov eax, dword [esp + 0x2fc]
push ebx
mov dword [esp + 0x20], eax
push ebp
xor eax, eax
mov word [esp + 0x68], ax
push esi
push edi
lea edi, [esp + 0x72]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov ebp, dword [esp + 0x308]
mov esi, dword [esp + 0x318]
stosw word es:[edi], ax
xor ebx, ebx
xor eax, eax
lea edi, [esp + 0x5c]
mov dword [esp + 0x58], ebx
stosd dword es:[edi], eax
mov dword [esp + 0x80], ebx
lea edi, [esp + 0x84]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [esp + 0x29]
push 0x103
mov byte [esp + 0x2c], bl
stosb byte es:[edi], al
lea eax, [esp + 0x141]
push ebx
push eax
mov dword [esp + 0x70], ebp
mov dword [esp + 0x60], esi
mov dword [esp + 0x28], ebx
mov byte [esp + 0x148], bl
call fcn.00448090
push 0x3f
lea eax, [esp + 0x2d1]
push ebx
push eax
mov byte [esp + 0x2d8], bl
call fcn.00448090
push 0x7f
lea eax, [esp + 0x25d]
push ebx
push eax
mov byte [esp + 0x264], bl
call fcn.00448090
xor eax, eax
mov dword [esp + 0x54], ebx
lea edi, [esp + 0x58]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0x24
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43b900
push eax
call fcn.00447ab6
pop ecx
mov dword [0x47c474], ebx
cmp esi, ebx
je 0x43b910
push 4
push ebx
push esi
call fcn.00448090
add esp, 0xc
test byte [esp + 0x314], 1
jne 0x43f5e7
cmp ebp, ebx
je 0x43f5e7
cmp byte [ebp], bl
je 0x43f5e7
push 0x4668b0
push ebp
call fcn.00449b60
pop ecx
pop ecx
test eax, eax
jne 0x43b955
push 0x460d30
push ebp
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43f5e7
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebp
call esi
mov edi, 0x10000
lea ecx, [edi + eax]
mov eax, 0x1000
cmp ecx, eax
jle 0x43b974
push ebp
call esi
add eax, edi
push 1
push eax
call fcn.00447e84
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
mov byte [eax], bl
mov ecx, dword [0x47c474]
cmp ecx, ebx
je 0x43b9a5
push ebp
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x47c474]
mov dword [esp + 0x48], ebx
mov esi, 0x45e480
cmp ecx, ebx
je 0x43b9c3
push esi
push ecx
call fcn.00447a30
pop ecx
pop ecx
mov ecx, dword [0x47c474]
jmp 0x43b9c5
xor eax, eax
cmp eax, ebx
je 0x43b9e6
push ebx
push ebx
lea eax, [esp + 0x30]
push eax
push esi
push ecx
mov word [esp + 0x3c], 0xff
call fcn.0044168f
mov dword [esp + 0x48], 1
push 1
push edi
call fcn.00447e84
pop ecx
pop ecx
push ebp
mov esi, eax
call fcn.00441300
cmp al, 0x3d
jne 0x43bb77
push 0x25
push ebp
call fcn.00447970
pop ecx
pop ecx
test eax, eax
jne 0x43ba20
push 0x7b
push ebp
call fcn.00447970
pop ecx
pop ecx
test eax, eax
je 0x43bb77
push dword [0x47c474]
xor ebp, ebp
mov byte [esp + 0x1b], bl
xor edi, edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [0x47c474]
inc eax
mov dword [esp + 0x1c], eax
cmp byte [ecx], bl
je 0x43bb7d
cmp byte [esp + 0x17], bl
jne 0x43ba63
lea edx, [ecx + edi]
mov al, byte [edx]
cmp al, 0x22
je 0x43ba5a
cmp al, 0x27
jne 0x43ba7d
mov byte [esp + 0x17], al
jmp 0x43bb44
movsx eax, byte [ecx + edi]
movzx edx, byte [esp + 0x17]
cmp eax, edx
jne 0x43bb44
mov byte [esp + 0x17], bl
jmp 0x43bb44
cmp ebp, ebx
jne 0x43bac4
cmp al, 0x25
je 0x43ba9d
cmp al, 0x7b
jne 0x43bac4
push 0x7d
push edx
call fcn.00447970
pop ecx
pop ecx
mov ecx, dword [0x47c474]
test eax, eax
je 0x43bac4
mov eax, dword [esp + 0x1c]
sub eax, edi
add ecx, edi
push eax
push ecx
inc ecx
push ecx
call fcn.00448130
mov eax, dword [0x47c474]
add esp, 0xc
mov byte [eax + edi], 2
inc dword [esp + 0x1c]
xor ebp, ebp
inc edi
inc ebp
jmp 0x43bb3e
lea edx, [ecx + edi]
mov al, byte [edx]
cmp al, 0x5b
je 0x43bad1
cmp al, 0x7b
jne 0x43bad6
imul ebp, ebp, 0xa
jmp 0x43bb44
cmp ebp, 0xa
jb 0x43baf0
cmp al, 0x5d
je 0x43bae3
cmp al, 0x7d
jne 0x43baf0
mov eax, ebp
push 0xa
pop ebp
xor edx, edx
div ebp
mov ebp, eax
jmp 0x43bb44
cmp edi, ebx
jle 0x43bb44
cmp ebp, 1
jne 0x43bb44
cmp al, 0x41
jl 0x43bb01
cmp al, 0x5a
jle 0x43bb44
cmp al, 0x61
jl 0x43bb09
cmp al, 0x7a
jle 0x43bb44
cmp al, 0x30
jl 0x43bb11
cmp al, 0x39
jle 0x43bb44
cmp al, 0x5f
je 0x43bb44
cmp al, 0x2e
je 0x43bb44
cmp al, 0x7d
je 0x43bb44
mov eax, dword [esp + 0x1c]
sub eax, edi
push eax
push edx
inc edx
push edx
call fcn.00448130
mov eax, dword [0x47c474]
add esp, 0xc
mov byte [eax + edi], 2
inc dword [esp + 0x1c]
xor ebp, ebp
mov ecx, dword [0x47c474]
inc edi
cmp byte [ecx + edi], bl
jne 0x43ba47
cmp ebp, ebx
je 0x43bb7d
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ecx
call edi
mov ecx, dword [0x47c474]
mov byte [eax + ecx + 1], bl
push dword [0x47c474]
call edi
mov ecx, dword [0x47c474]
mov byte [eax + ecx], 2
mov ecx, dword [0x47c474]
push 0x7b
push ecx
call fcn.00447970
pop ecx
pop ecx
test eax, eax
je 0x43bd2b
push 0x7d
push dword [0x47c474]
call fcn.00447970
pop ecx
pop ecx
test eax, eax
je 0x43bd2b
push dword [0x47c474]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [esp + 0x1c], eax
push 0x4668ac
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], 0x478a48
mov al, byte [esp + 0x20]
add al, 0x31
mov byte [esp + 0x13d], al
mov eax, dword [esp + 0x24]
cmp dword [eax], ebx
je 0x43bd14
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43bc09
lea ecx, [esp + 0x13c]
push ecx
push eax
call fcn.00447a30
pop ecx
pop ecx
jmp 0x43bc0b
xor eax, eax
cmp eax, ebx
je 0x43bd14
xor edi, edi
cmp dword [esp + 0x1c], ebx
jle 0x43bd14
push 3
lea eax, [esp + 0x140]
push eax
mov eax, dword [0x47c474]
add eax, edi
push eax
call fcn.0044855d
add esp, 0xc
test eax, eax
jne 0x43bd09
mov eax, dword [esp + 0x24]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebp, eax
mov eax, dword [esp + 0x24]
mov eax, dword [eax]
cmp eax, ebx
je 0x43bc62
push eax
call fcn.00447e51
pop ecx
jmp 0x43bc64
xor eax, eax
mov ecx, dword [esp + 0x1c]
lea eax, [eax + ecx + 0x1000]
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
lea ecx, [eax + edi]
cmp ecx, ebx
je 0x43bcb8
lea edx, [ecx + 3]
cmp edx, ebx
je 0x43bcb8
mov edx, dword [esp + 0x1c]
sub edx, edi
add edx, 0xfffffffe
cmp edx, ebx
jbe 0x43bcb8
push edx
lea eax, [ecx + 3]
push eax
push ecx
call fcn.00448130
mov eax, dword [0x47c474]
add esp, 0xc
sub dword [esp + 0x1c], 3
lea ecx, [eax + ebp]
add ecx, edi
cmp ecx, ebx
je 0x43bcef
lea edx, [eax + edi]
mov dword [esp + 0x10], edx
cmp edx, ebx
je 0x43bcef
mov edx, dword [esp + 0x1c]
sub edx, edi
inc edx
cmp edx, ebx
jbe 0x43bcef
push edx
push dword [esp + 0x14]
push ecx
call fcn.00448130
mov eax, dword [0x47c474]
add esp, 0xc
mov ecx, dword [esp + 0x24]
push ebp
push dword [ecx]
add eax, edi
push eax
call fcn.00447af0
add dword [esp + 0x28], ebp
add esp, 0xc
add edi, ebp
jmp 0x43bd0a
inc edi
cmp edi, dword [esp + 0x1c]
jl 0x43bc1f
add dword [esp + 0x24], 4
inc dword [esp + 0x20]
cmp dword [esp + 0x24], 0x478a6c
jl 0x43bbd5
push str.loop
push dword [0x47c474]
call fcn.004010ff
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
pop ecx
pop ecx
test eax, eax
je 0x43be65
cmp dword [esp + 0x2c], 7
ja 0x43be65
mov eax, dword [esp + 0x2c]
xor ebp, ebp
inc ebp
shl eax, 6
lea eax, [eax + 0x47bbb8]
mov dword [esp + 0x18], eax
push ebp
lea eax, [esp + 0x140]
push str.__0_dd
push eax
call edi
mov eax, dword [esp + 0x24]
fld dword [eax]
call fcn.00449ec0
push eax
lea eax, [esp + 0x14c]
push eax
push esi
call edi
push ebp
lea eax, [esp + 0x158]
push str.loopcount_d
push eax
call edi
add esp, 0x24
push ebx
push ebx
push esi
lea eax, [esp + 0x148]
push eax
push dword [0x47c474]
call fcn.0044168f
push ebp
lea eax, [esp + 0x140]
push str.loops_d
push eax
call edi
add esp, 0xc
push ebx
push ebx
push esi
lea eax, [esp + 0x148]
push eax
push dword [0x47c474]
call fcn.0044168f
push ebp
lea eax, [esp + 0x140]
push str.loop_d
push eax
call edi
add esp, 0xc
push ebx
push ebx
push esi
lea eax, [esp + 0x148]
push eax
push dword [0x47c474]
call fcn.0044168f
inc ebp
cmp ebp, 0x20
jle 0x43bd6a
mov eax, dword [esp + 0x18]
fld dword [eax]
push 7
push ecx
push ecx
fstp qword [esp]
push esi
call fcn.00417eeb
add esp, 0x10
push ebx
push ebx
push esi
push str.loopcount
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.loops
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push 0x466858
push dword [0x47c474]
call fcn.0044168f
push 0x25
push dword [0x47c474]
call fcn.00447970
pop ecx
pop ecx
cmp eax, ebx
je 0x43bf4f
inc eax
push 0x25
push eax
call fcn.00447970
pop ecx
pop ecx
test eax, eax
je 0x43bf4f
push 0xfc
lea eax, [esp + 0x140]
push eax
push dword [0x47c474]
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov ebp, eax
mov dword [esp + 0x20], ebp
cmp ebp, ebx
je 0x43bf4f
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43bec8
push eax
call fcn.00447e51
pop ecx
jmp 0x43beca
xor eax, eax
lea eax, [eax + ebp + 0x1000]
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push eax
call fcn.00447e51
pop ecx
mov ecx, 0x1000
cmp eax, ecx
jbe 0x43bf12
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43bf0e
push eax
call fcn.00447e51
pop ecx
jmp 0x43bf14
xor eax, eax
jmp 0x43bf14
mov eax, ecx
push 1
push eax
call fcn.00447e84
mov ebp, eax
pop ecx
pop ecx
cmp ebp, ebx
je 0x43bf4f
mov eax, dword [esp + 0x20]
inc eax
push eax
push ebp
push dword [0x47c474]
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43bf48
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
call fcn.00447ab6
pop ecx
push 0x25
push dword [0x47c474]
call fcn.00447970
pop ecx
pop ecx
test eax, eax
je 0x43c276
push str.SOFTWARE_vTaskUserVariables
push 2
call fcn.00442da7
pop ecx
pop ecx
test eax, eax
jle 0x43c276
cmp dword [esp + 0x2c], 7
ja 0x43c276
push dword [0x47c474]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x18], ebx
jne 0x43bfbe
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43c24e
push 0x466854
push eax
call fcn.00447a30
jmp 0x43c25b
push 0x25
push dword [0x47c474]
jmp 0x43c256
cmp byte [ebp], 0x5b
jne 0x43bfd2
inc ebp
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cmp eax, 0x40
jle 0x43bfe4
push 0x40
pop eax
jmp 0x43bfec
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push ebp
lea eax, [esp + 0x248]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [esp + 0x241]
push 0x25
push eax
call fcn.00447970
pop ecx
pop ecx
test eax, eax
je 0x43c024
lea eax, [esp + 0x241]
push 0x25
push eax
call fcn.00447970
pop ecx
pop ecx
mov byte [eax], bl
lea eax, [esp + 0x241]
push 0x5c
push eax
call fcn.00447970
pop ecx
pop ecx
test eax, eax
je 0x43c04c
lea eax, [esp + 0x241]
push 0x5c
push eax
call fcn.00447970
pop ecx
pop ecx
mov byte [eax], bl
cmp byte [esp + 0x241], bl
je 0x43c240
lea eax, [esp + 0x241]
push eax
push str.SOFTWARE_vTaskUserVariables
push str._s_s
push ebx
push ebx
push ebx
push 1
call fcn.00442f38
add esp, 0x1c
mov dword [esp + 0x20], eax
cmp eax, ebx
jne 0x43c09b
lea eax, [esp + 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [esp + 0x240]
mov byte [eax + ecx - 1], bl
jmp 0x43c04c
mov eax, dword [esp + 0x20]
add eax, 0x1000
mov ecx, 0x208
cmp eax, ecx
jge 0x43c0af
mov eax, ecx
push eax
push esi
call fcn.00401000
mov esi, eax
pop ecx
pop ecx
cmp esi, ebx
je 0x43f640
mov eax, dword [esp + 0x20]
add eax, 2
mov ecx, 0x208
cmp eax, ecx
jge 0x43c0d4
mov eax, ecx
lea ecx, [esp + 0x241]
push ecx
push str.SOFTWARE_vTaskUserVariables_s
push eax
push esi
push ebx
push 3
call fcn.00442f38
add esp, 0x18
dec eax
mov dword [esp + 0x20], ebx
cmp eax, ebx
jl 0x43c0fb
mov dword [esp + 0x20], eax
sub ebp, dword [0x47c474]
jns 0x43c105
xor ebp, ebp
lea eax, [esp + 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [esp + 0x24]
sub ecx, ebp
sub ecx, eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [0x47c474]
cmp ecx, ebx
je 0x43c13c
push ecx
call fcn.00447e51
pop ecx
mov ecx, dword [0x47c474]
mov dword [esp + 0x10], eax
jmp 0x43c140
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x24]
add eax, dword [esp + 0x20]
mov dword [esp + 0x24], eax
add eax, 0x1000
cmp dword [esp + 0x10], eax
jbe 0x43c16c
cmp ecx, ebx
je 0x43c16a
push ecx
call fcn.00447e51
pop ecx
mov ecx, dword [0x47c474]
jmp 0x43c16c
xor eax, eax
push eax
push ecx
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
lea ecx, [eax + ebp]
test ecx, ecx
je 0x43c1d8
lea eax, [esp + 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, dword [0x47c474]
add ecx, eax
add ecx, ebp
je 0x43c1d8
mov ecx, dword [esp + 0x1c]
inc ecx
cmp ecx, ebx
jbe 0x43c1d8
push ecx
lea eax, [esp + 0x244]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, dword [0x47c474]
add ecx, eax
add ecx, ebp
push ecx
add eax, ebp
push eax
call fcn.00448130
mov eax, dword [0x47c474]
add esp, 0xc
mov edx, dword [esp + 0x20]
lea ecx, [eax + ebp]
add edx, ecx
mov dword [esp + 0x10], edx
cmp edx, ebx
je 0x43c209
cmp ecx, ebx
je 0x43c209
mov edx, dword [esp + 0x1c]
inc edx
cmp edx, ebx
jbe 0x43c209
push edx
push ecx
push dword [esp + 0x18]
call fcn.00448130
mov eax, dword [0x47c474]
add esp, 0xc
push dword [esp + 0x20]
add eax, ebp
push esi
push eax
call fcn.00447af0
add esp, 0xc
lea eax, [esp + 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [esp + 0x24]
sub ecx, eax
mov eax, dword [0x47c474]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x20]
add eax, ebp
lea ebp, [eax + ecx - 1]
cmp dword [esp + 0x18], ebx
jne 0x43c252
lea eax, [ebp + 1]
jmp 0x43bfa6
xor ebp, ebp
jmp 0x43c25f
push 0x25
inc ebp
push ebp
call fcn.00447970
pop ecx
mov ebp, eax
pop ecx
cmp ebp, ebx
jne 0x43bfcb
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 2
jl 0x43bf9b
mov dword [esp + 0x24], 1
push dword [esp + 0x24]
lea eax, [esp + 0x244]
push str.__parameter_d
push eax
call edi
lea eax, [esp + 0x24c]
push eax
push dword [0x47c474]
call fcn.004010ff
add esp, 0x14
test eax, eax
je 0x43c396
push dword [esp + 0x24]
push str.SOFTWARE_vTaskUserVariablesparameter_d
push ebx
push ebx
push ebx
push 1
call fcn.00442f38
mov ebp, eax
add esp, 0x18
cmp ebp, ebx
jle 0x43c396
cmp esi, ebx
je 0x43c2da
push esi
call fcn.00447ab6
pop ecx
lea eax, [ebp + 0x100]
mov ecx, 0x10000
cmp eax, ecx
jl 0x43c2f6
mov edx, 0x1000
cmp eax, edx
jle 0x43c2fa
cmp eax, ecx
jge 0x43c2fc
mov eax, ecx
jmp 0x43c2fc
mov eax, edx
push 1
push eax
call fcn.00447e84
mov esi, eax
lea eax, [ebp + 2]
pop ecx
pop ecx
cmp eax, 0x208
jge 0x43c317
mov eax, 0x208
push dword [esp + 0x24]
push str.SOFTWARE_vTaskUserVariablesparameter_d
push eax
push esi
push ebx
push 3
call fcn.00442f38
mov eax, dword [0x47c474]
add esp, 0x18
cmp eax, ebx
je 0x43c343
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43c347
mov dword [esp + 0x10], ebx
lea eax, [esp + 0x240]
push eax
push dword [0x47c474]
call fcn.004415b1
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
lea ecx, [esp + 0x24c]
push ecx
push eax
call fcn.0044168f
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
dec eax
cmp eax, 9
jl 0x43c27e
push 0x5f
push dword [0x47c474]
call fcn.00447970
pop ecx
pop ecx
test eax, eax
jne 0x43c3d9
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43c3d3
push 0x460d30
push eax
call fcn.00447a30
pop ecx
pop ecx
jmp 0x43c3d5
xor eax, eax
cmp eax, ebx
je 0x43c3e4
push dword [0x47c474]
call fcn.0043a6e8
mov eax, dword [esp + 0x314]
and eax, 4
mov dword [esp + 0x4c], eax
jne 0x43ef01
cmp esi, ebx
jne 0x43c40c
push 1
push 0x10000
call fcn.00447e84
pop ecx
pop ecx
mov esi, eax
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43c424
push 0x462be0
push eax
call fcn.00447a30
pop ecx
pop ecx
jmp 0x43c426
xor eax, eax
cmp eax, ebx
je 0x43c499
push 0x7d
push dword [0x47c474]
call fcn.00447970
pop ecx
pop ecx
test eax, eax
je 0x43c499
push ebx
push ebx
push 0x45f758
push str._r
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push 0x45f754
push str._n
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push 0x45f75c
push str._r_n
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push 0x45e680
push str._t
push dword [0x47c474]
call fcn.0044168f
push dword [0x47c474]
mov byte [esp + 0x1b], bl
mov dword [esp + 0x20], ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
cmp ebp, eax
jae 0x43ef01
cmp byte [esp + 0x17], bl
jne 0x43c577
mov eax, dword [0x47c474]
add eax, ebp
cmp byte [eax], 0x7b
jne 0x43c55e
mov cl, byte [eax + 1]
cmp cl, 0x41
jl 0x43c55e
cmp cl, 0x7a
jg 0x43c55e
cmp cl, 0x5c
je 0x43c55e
mov dword [esp + 0x20], 1
lea ecx, [ebp + 1]
jmp 0x43c54c
cmp dword [esp + 0x20], 0x20
jg 0x43c55e
mov ecx, dword [esp + 0x20]
mov al, byte [eax + ecx]
cmp al, 0x41
jl 0x43c50c
cmp al, 0x5a
jle 0x43c534
cmp al, 0x61
jl 0x43c514
cmp al, 0x7a
jle 0x43c534
cmp al, 0x30
jl 0x43c51c
cmp al, 0x39
jle 0x43c534
movsx eax, al
push eax
push str.__._
call fcn.00447970
mov ebp, dword [esp + 0x24]
pop ecx
pop ecx
test eax, eax
je 0x43c55e
mov eax, dword [0x47c474]
mov ecx, dword [esp + 0x20]
add eax, ebp
cmp byte [eax + ecx], 0x7d
je 0x43c554
inc ecx
mov dword [esp + 0x20], ecx
add ecx, ebp
cmp ecx, dword [esp + 0x24]
jb 0x43c4f6
jmp 0x43c55e
cmp ecx, 1
jle 0x43c55e
mov byte [esp + 0x17], 1
inc ebp
mov dword [esp + 0x1c], ebp
cmp ebp, dword [esp + 0x24]
jb 0x43c4bd
cmp byte [esp + 0x17], bl
je 0x43ef01
cmp byte [0x47b0e0], 2
jb 0x43c5ae
mov eax, dword [0x47c474]
push 8
lea eax, [eax + ebp - 1]
push eax
lea eax, [esp + 0x144]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [esp + 0x13c]
push eax
push str.____System_Variables_Processing_Performed:___s_...
call fcn.00421b06
pop ecx
pop ecx
lea eax, [esp + 0x70]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
cmp dword [0x4771e8], ebx
jne 0x43c5cc
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [0x4771e8], eax
push ebx
push ebx
mov ebp, 0x45f754
push ebp
push str.ENTER
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push ebp
push str.linefeed
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push 0x45f75c
push str.newline
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push ebp
push 0x464f00
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push 0x45f758
push 0x464ef4
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push 0x45e620
push str.rn
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push 0x45e680
push 0x464ee8
push dword [0x47c474]
call fcn.0044168f
push 0x4667ac
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43c8be
push str.CURDIR
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43c706
push esi
push 0x102
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push 2
push 0x45c800
push esi
call fcn.004417cc
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43c6c3
push eax
call fcn.00447e51
pop ecx
mov ebp, eax
jmp 0x43c6c5
xor ebp, ebp
push 0x46679c
push dword [0x47c474]
call fcn.004415b1
imul eax, eax, 0x104
add eax, ebp
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x466790
push eax
call fcn.0044168f
push ebx
push ebx
mov ebp, 0x47b310
push ebp
push str.command
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push ebp
push str.cmd
push dword [0x47c474]
call fcn.0044168f
push dword [0x47b0dc]
push 0x45cb18
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.command_id
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.cmd_id
push dword [0x47c474]
call fcn.0044168f
push str.cmdline
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43c7fa
mov ebp, dword [sym.imp.KERNEL32.dll_GetCommandLineA]
call ebp
test eax, eax
je 0x43c7fa
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43c7a0
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43c7a4
mov dword [esp + 0x10], ebx
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0x46674c
push dword [0x47c474]
mov ebp, eax
call fcn.004415b1
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
push 0x466740
push dword [0x47c474]
call fcn.0044168f
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.color_depth
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43c84b
push 0xc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push 0x45cb18
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push 0x466720
push dword [0x47c474]
call fcn.0044168f
mov eax, dword [esp + 0x310]
inc eax
push eax
push 0x45cb18
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.currentstep
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.current_step
push dword [0x47c474]
call fcn.0044168f
mov eax, dword [esp + 0x2c]
inc eax
push eax
push 0x45cb18
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.currentfile
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.current_file
push dword [0x47c474]
call fcn.0044168f
jmp 0x43c8c4
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x464f74
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cbb6
push str.FILENAME
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43c983
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43c90e
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43c912
mov dword [esp + 0x10], ebx
mov eax, dword [0x4773f4]
imul eax, eax, 0x104
add eax, 0x4775d8
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0x4666c8
push dword [0x47c474]
mov ebp, eax
call fcn.004415b1
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
mov ecx, dword [0x4773f4]
imul ecx, ecx, 0x104
push ebx
push ebx
add ecx, 0x4775d8
push ecx
push 0x4666bc
push eax
call fcn.0044168f
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.FILEBASENAME
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43ca1f
mov eax, dword [0x4773f4]
imul eax, eax, 0x104
push 0xc
push esi
add eax, 0x4775d8
push eax
call fcn.0040eb69
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43c9cc
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43c9d0
mov dword [esp + 0x10], ebx
push 0x46669c
push dword [0x47c474]
call fcn.004415b1
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x46668c
push eax
call fcn.0044168f
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.FILEPATH
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cac8
mov eax, dword [0x4773f4]
imul eax, eax, 0x104
push 3
push esi
add eax, 0x4775d8
push eax
call fcn.0040eb69
push 2
push 0x45c800
push esi
call fcn.004417cc
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43ca75
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43ca79
mov dword [esp + 0x10], ebx
push 0x466674
push dword [0x47c474]
call fcn.004415b1
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x466668
push eax
call fcn.0044168f
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.FILEEXT
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cb64
mov eax, dword [0x4773f4]
imul eax, eax, 0x104
push 8
push esi
add eax, 0x4775d8
push eax
call fcn.0040eb69
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43cb11
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43cb15
mov dword [esp + 0x10], ebx
push 0x466654
push dword [0x47c474]
call fcn.004415b1
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x466648
push eax
call fcn.0044168f
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.fail
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cbb6
push str.SOFTWARE_vTaskFailStep
call fcn.00445ef2
push eax
push 0x45cb18
push esi
call edi
add esp, 0x10
push ebx
push ebx
push esi
push str.failstep
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.fail_step
push dword [0x47c474]
call fcn.0044168f
push 0x466624
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cf72
push str.UserVariableslogin_username
push 0x103
push esi
call fcn.004460ee
add esp, 0xc
push ebx
push ebx
push esi
push str.login_username
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.login_name
push dword [0x47c474]
call fcn.0044168f
push str.UserVariableslogin_password
push 0x103
push esi
call fcn.004460ee
push 1
push str.EATATJOES
push esi
call fcn.0041616d
add esp, 0x18
push ebx
push ebx
push esi
push str.login_password
push dword [0x47c474]
call fcn.0044168f
push str.LOGFILE
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43ccb5
push esi
call fcn.004208b4
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43cc6e
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43cc72
mov dword [esp + 0x10], ebx
push 0x46658c
push dword [0x47c474]
call fcn.004415b1
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x466580
push eax
call fcn.0044168f
push str.LANGUAGE
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cf72
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
and eax, 0x3ff
cmp eax, 0x15
jg 0x43ce40
je 0x43ce2e
cmp eax, 0xb
jg 0x43cda8
je 0x43cd96
dec eax
je 0x43cd84
sub eax, 3
je 0x43cd72
dec eax
je 0x43cd60
dec eax
je 0x43cd4e
dec eax
je 0x43cd3c
dec eax
je 0x43cd2a
dec eax
dec eax
jne 0x43cf53
cmp esi, ebx
je 0x43cf5f
push str.Spanish
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Greek
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.German
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Danish
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Czech
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Chinese
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Arabic
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Finnish
jmp 0x43cf5c
sub eax, 0xc
je 0x43ce1c
sub eax, 4
je 0x43ce0a
dec eax
je 0x43cdf8
dec eax
je 0x43cde6
dec eax
je 0x43cdd4
dec eax
jne 0x43cf53
cmp esi, ebx
je 0x43cf5f
push str.Norwegian
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Dutch
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Korean
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Japanese
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Italian
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.French
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Polish
jmp 0x43cf5c
cmp eax, 0x46
jg 0x43cf53
je 0x43cf48
cmp eax, 0x1f
jg 0x43ceed
je 0x43cee2
sub eax, 0x16
je 0x43ced3
dec eax
dec eax
je 0x43cec1
dec eax
je 0x43ceaf
dec eax
je 0x43ce9d
sub eax, 3
je 0x43ce8b
dec eax
jne 0x43cf53
cmp esi, ebx
je 0x43cf5f
push str.Thai
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Swedish
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Croatian
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Russian
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Romanian
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Portuguese
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Turkish
jmp 0x43cf5c
sub eax, 0x22
je 0x43cf3d
dec eax
dec eax
je 0x43cf32
dec eax
dec eax
je 0x43cf27
dec eax
je 0x43cf1c
dec eax
dec eax
je 0x43cf11
sub eax, 0x10
jne 0x43cf53
cmp esi, ebx
je 0x43cf5f
push str.Hindi
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Farsi
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Lithuanian
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Latvian
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Slovenian
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Ukrainian
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.Punjabi
jmp 0x43cf5c
cmp esi, ebx
je 0x43cf5f
push str.English
push esi
call ebp
push ebx
push ebx
push esi
push 0x466458
push dword [0x47c474]
call fcn.0044168f
push 0x466454
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
mov ebp, 0x462d0c
test eax, eax
je 0x43d26a
push str.memtotal
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cfcb
call fcn.004150bd
push eax
push 0x45cb14
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push 0x46643c
push dword [0x47c474]
call fcn.0044168f
push str.memfree
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43d005
call fcn.004150f9
push eax
push 0x45cb14
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push 0x466424
push dword [0x47c474]
call fcn.0044168f
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [esp + 0x58]
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.mouse_x
push dword [0x47c474]
call fcn.0044168f
push dword [esp + 0x5c]
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.mouse_y
push dword [0x47c474]
call fcn.0044168f
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43d064
push str.monitor
push eax
call fcn.00447a30
pop ecx
pop ecx
jmp 0x43d066
xor eax, eax
cmp eax, ebx
je 0x43d08c
push ebx
push ebx
call fcn.00440179
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.monitors
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x72]
push esi
push 3
push eax
call fcn.00417d7b
add esp, 0xc
push ebx
push ebx
push esi
push str.month_name
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.monthname
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x72]
push esi
push 4
push eax
call fcn.00417d7b
add esp, 0xc
push ebx
push ebx
push esi
push str.month_abbr
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.monthabbr
push dword [0x47c474]
call fcn.0044168f
mov eax, dword [esp + 0x72]
and eax, 9
cmp eax, 8
je 0x43d10f
cmp eax, 1
je 0x43d10f
xor ecx, ecx
jmp 0x43d112
xor ecx, ecx
inc ecx
movzx eax, word [esp + 0x70]
mov edx, eax
and edx, 0x80000003
jns 0x43d126
dec edx
or edx, 0xfffffffc
inc edx
jne 0x43d143
push 0x64
cdq
pop ebp
idiv ebp
test edx, edx
jne 0x43d150
movzx eax, word [esp + 0x70]
cdq
mov ebp, 0x190
idiv ebp
test edx, edx
je 0x43d150
cmp word [esp + 0x72], 2
jne 0x43d150
xor ebp, ebp
inc ebp
jmp 0x43d152
xor ebp, ebp
xor eax, eax
cmp word [esp + 0x72], 2
sete al
sub ecx, eax
sub ecx, ebp
add ecx, 0x1e
push ecx
mov ebp, 0x45cb18
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.month_days
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.monthdays
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x72]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.month
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.month2
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x72]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.month1
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x7a]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.minute
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.minute2
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x7a]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.minute1
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x7e]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.millisecond
push dword [0x47c474]
call fcn.0044168f
mov ebp, 0x462d0c
push 0x466348
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43d3e8
push str.PROGRAMFILES
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43d315
push 0x102
push esi
push 0x45f790
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
push 2
push 0x45c800
push esi
call fcn.004417cc
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43d2ce
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43d2d2
mov dword [esp + 0x10], ebx
push 0x45f790
push dword [0x47c474]
call fcn.004415b1
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x466328
push eax
call fcn.0044168f
push str.PATH
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43d3e8
push 1
push esi
push 0x45f774
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov dword [esp + 0x20], eax
cmp esi, ebx
je 0x43d34c
push esi
call fcn.00447ab6
pop ecx
mov eax, 0x1000
add dword [esp + 0x20], eax
cmp dword [esp + 0x20], eax
jle 0x43d35f
mov eax, dword [esp + 0x20]
push 1
push eax
call fcn.00447e84
pop ecx
mov esi, eax
mov eax, dword [esp + 0x24]
pop ecx
add eax, 0xfffffffe
push eax
push esi
push 0x45f774
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
push 2
push 0x45c800
push esi
call fcn.004417cc
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43d3a2
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43d3a6
mov dword [esp + 0x10], ebx
push 0x45f774
push dword [0x47c474]
call fcn.004415b1
imul eax, dword [esp + 0x20]
add eax, dword [esp + 0x10]
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x466318
push eax
call fcn.0044168f
push 0x466314
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43d588
push ebx
push ebx
push 0x45f758
push str.return
push dword [0x47c474]
call fcn.0044168f
push str.repeat
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43d588
cmp dword [esp + 0x2c], 7
ja 0x43d588
mov ebp, dword [esp + 0x2c]
lea ebp, [ebp*4 + 0x477374]
mov eax, dword [ebp]
cmp eax, ebx
jge 0x43d452
xor eax, eax
push eax
push str._05d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount5
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.repeats5
push dword [0x47c474]
call fcn.0044168f
mov eax, dword [ebp]
cmp eax, ebx
jge 0x43d48d
xor eax, eax
push eax
push str._04d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount4
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.repeats4
push dword [0x47c474]
call fcn.0044168f
mov eax, dword [ebp]
cmp eax, ebx
jge 0x43d4c8
xor eax, eax
push eax
push str._03d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount3
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.repeats3
push dword [0x47c474]
call fcn.0044168f
mov eax, dword [ebp]
cmp eax, ebx
jge 0x43d503
xor eax, eax
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount2
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.repeats2
push dword [0x47c474]
call fcn.0044168f
mov ebp, dword [ebp]
cmp ebp, ebx
jge 0x43d53e
xor ebp, ebp
push ebp
push 0x45cb18
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.repeats
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push 0x466264
push dword [0x47c474]
call fcn.0044168f
mov ebp, 0x462d0c
push 0x466260
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43dd4f
push ebx
push ebx
push str.__r_n
push str.SPACE
push dword [0x47c474]
call fcn.0044168f
push str.SYSDIR
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43d632
push 0x102
push esi
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43d5ef
push eax
call fcn.00447e51
pop ecx
mov ebp, eax
jmp 0x43d5f1
xor ebp, ebp
push 0x466248
push dword [0x47c474]
call fcn.004415b1
imul eax, eax, 0x104
add eax, ebp
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x46623c
push eax
call fcn.0044168f
push str.STARTMENU
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43d6b4
push esi
push 2
call fcn.0040e350
push 2
push 0x45c800
push esi
call fcn.004417cc
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43d671
push eax
call fcn.00447e51
pop ecx
mov ebp, eax
jmp 0x43d673
xor ebp, ebp
push 0x466224
push dword [0x47c474]
call fcn.004415b1
imul eax, eax, 0x104
add eax, ebp
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x466218
push eax
call fcn.0044168f
push str.step_
push dword [0x47c474]
jmp 0x43dc0d
mov edx, dword [esp + 0x18]
mov cl, byte [edx]
xor eax, eax
jmp 0x43d6dc
cmp cl, 0x7d
je 0x43d6e0
cmp eax, 0x3f
jge 0x43d6e0
inc eax
mov cl, byte [edx + eax]
cmp cl, bl
jne 0x43d6ce
add eax, 2
cmp eax, 0x3f
jle 0x43d6eb
push 0x3f
pop eax
push eax
push dword [esp + 0x1c]
lea eax, [esp + 0x144]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [esp + 0x13c]
push eax
call fcn.0040109c
mov ebp, eax
pop ecx
mov byte [esi], bl
cmp ebp, 1
jl 0x43dbec
mov eax, dword [0x4773f4]
cmp ebp, dword [eax*4 + 0x477354]
jg 0x43dbec
lea eax, [esp + 0x13c]
push str..action
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43d761
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
lea eax, [eax + ebp - 0xf54]
jmp 0x43dbe4
lea eax, [esp + 0x13c]
push str..category
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43d797
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
push dword [eax + ebp - 0xf14]
jmp 0x43db34
lea eax, [esp + 0x13c]
push str..image
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43d7ce
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
mov eax, dword [eax + ebp - 0xf10]
inc eax
jmp 0x43db03
lea eax, [esp + 0x13c]
push str..text
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43d844
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
push dword [eax + ebp - 0xf04]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cmp eax, 0xff
jle 0x43d814
mov eax, 0xff
jmp 0x43d82e
mov eax, dword [0x4773f4]
mov eax, dword [eax*4 + 0x478a70]
push dword [eax + ebp - 0xf04]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
mov eax, dword [0x4773f4]
mov eax, dword [eax*4 + 0x478a70]
push dword [eax + ebp - 0xf04]
jmp 0x43d8b8
lea eax, [esp + 0x13c]
push str..comment
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43d8c4
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
push dword [eax + ebp - 0xf00]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cmp eax, 0xff
jle 0x43d88a
mov eax, 0xff
jmp 0x43d8a4
mov eax, dword [0x4773f4]
mov eax, dword [eax*4 + 0x478a70]
push dword [eax + ebp - 0xf00]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
mov eax, dword [0x4773f4]
mov eax, dword [eax*4 + 0x478a70]
push dword [eax + ebp - 0xf00]
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
jmp 0x43dbec
lea eax, [esp + 0x13c]
push str..options
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43d8fa
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
lea eax, [eax + ebp - 0xefc]
jmp 0x43dbe4
lea eax, [esp + 0x13c]
push str..timeout
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43d930
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
lea eax, [eax + ebp - 0xdf8]
jmp 0x43dbe4
lea eax, [esp + 0x13c]
push str..output_option
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43d966
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
lea eax, [eax + ebp - 0x28c]
jmp 0x43dbe4
lea eax, [esp + 0x13c]
push str..output
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43d99c
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
lea eax, [eax + ebp - 0x2cc]
jmp 0x43dbe4
lea eax, [esp + 0x13c]
push str..fail_mode
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43d9d2
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
lea eax, [eax + ebp - 0x187]
jmp 0x43dbe4
lea eax, [esp + 0x13c]
push str..fail_option
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43da08
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
lea eax, [eax + ebp - 0x147]
jmp 0x43dbe4
lea eax, [esp + 0x13c]
push str..fail_snapshot
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43da3b
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
push dword [eax + ebp - 0x40]
jmp 0x43db34
lea eax, [esp + 0x13c]
push str..fail_log
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43da6e
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
push dword [eax + ebp - 0x3c]
jmp 0x43db34
lea eax, [esp + 0x13c]
push str..grid_text_column
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43daa1
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
push dword [eax + ebp - 0x34]
jmp 0x43db34
lea eax, [esp + 0x13c]
push str..run_status
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43dad4
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
push dword [eax + ebp - 0xf0c]
jmp 0x43db34
lea eax, [esp + 0x13c]
push str..run_result
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43db06
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
movzx eax, byte [eax + ebp - 0x30]
push eax
jmp 0x43db34
lea eax, [esp + 0x13c]
push str..run_attempts
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43db44
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
push dword [eax + ebp - 0x2c]
push 0x45cb18
push esi
call edi
add esp, 0xc
jmp 0x43dbec
lea eax, [esp + 0x13c]
push str..custom
push eax
call fcn.00447a30
pop ecx
pop ecx
test eax, eax
je 0x43db77
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x478a70]
lea eax, [eax + ebp - 0x3d0]
jmp 0x43dbe4
mov dword [esp + 0x24], ebx
mov eax, dword [esp + 0x24]
inc eax
push eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x2c4]
push str..value_d
push eax
call edi
lea eax, [esp + 0x2cc]
push eax
lea eax, [esp + 0x14c]
push eax
call fcn.00447a30
add esp, 0x14
test eax, eax
jne 0x43dbbf
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], eax
cmp eax, 8
jl 0x43db7b
jmp 0x43dbec
mov eax, dword [0x4773f4]
imul ebp, ebp, 0xf54
mov ecx, dword [eax*4 + 0x478a70]
mov eax, dword [esp + 0x24]
add ecx, ebp
imul eax, eax, 0x104
lea eax, [ecx + eax - 0xbf0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
push ebx
push esi
lea eax, [esp + 0x148]
push eax
push dword [0x47c474]
call fcn.0044168f
mov eax, dword [esp + 0x18]
push str.step_
inc eax
push eax
call fcn.004010ff
pop ecx
mov dword [esp + 0x1c], eax
pop ecx
cmp eax, ebx
jne 0x43d6c4
push ebx
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
mov ebp, 0x462d0c
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.screen_x
push dword [0x47c474]
call fcn.0044168f
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.screen_y
push dword [0x47c474]
call fcn.0044168f
mov ecx, dword [0x47c474]
cmp ecx, ebx
je 0x43dc89
push 0x46610c
push ecx
call fcn.00447a30
pop ecx
pop ecx
mov ecx, dword [0x47c474]
jmp 0x43dc8b
xor eax, eax
cmp eax, ebx
je 0x43dcef
cmp ecx, ebx
je 0x43dca2
push 0x45e96c
push ecx
call fcn.00447a30
pop ecx
pop ecx
jmp 0x43dca4
xor eax, eax
cmp eax, ebx
je 0x43dcef
push 2
push ebx
call fcn.00440179
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.screen_x2
push dword [0x47c474]
call fcn.0044168f
push 2
push 1
call fcn.00440179
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.screen_y2
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x7c]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.second
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.second2
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x7c]
push eax
push 0x45cb18
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.second1
push dword [0x47c474]
call fcn.0044168f
mov ebp, 0x462d0c
push 0x4660cc
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43dfb3
push ebx
push ebx
push 0x45e680
push str.TAB
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push 0x45e680
push str.tab
push dword [0x47c474]
call fcn.0044168f
push str.temp
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43dec6
lea eax, [esp + 0x13c]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov ebp, 0x47b208
cmp byte [0x47b208], bl
jne 0x43dde6
push ebp
push ebx
push 0x45c970
lea eax, [esp + 0x148]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43ddfc
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43de00
mov dword [esp + 0x10], ebx
push str.tempdir
push dword [0x47c474]
call fcn.004415b1
push ebp
mov dword [esp + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [esp + 0x18]
imul ecx, eax
add ecx, dword [esp + 0x10]
push ecx
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
lea ecx, [esp + 0x144]
push ecx
push 0x4660a0
push eax
call fcn.0044168f
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43de6c
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43de70
mov dword [esp + 0x10], ebx
push str.tempfile
push dword [0x47c474]
call fcn.004415b1
push 0x47b208
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push 0x47b208
push 0x466088
push eax
call fcn.0044168f
mov ebp, 0x462d0c
mov eax, dword [esp + 0x2c]
push dword [eax*4 + 0x477354]
push 0x45cb18
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.totalsteps
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.total_steps
push dword [0x47c474]
call fcn.0044168f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.ticks
push dword [0x47c474]
call fcn.0044168f
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
mov eax, dword [esp + 0x90]
push 0x3c
pop ecx
cdq
idiv ecx
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.timezone
push dword [0x47c474]
call fcn.0044168f
push 0x3f
push esi
push ebx
push ebx
push 0x40000000
push 0x400
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
push ebx
push ebx
push esi
push str.TODAY
push dword [0x47c474]
call fcn.0044168f
push 0x3f
lea eax, [esp + 0x140]
push eax
push ebx
push ebx
push ebx
push 0x400
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
push ebx
push ebx
lea eax, [esp + 0x144]
push eax
push str.TIME
push dword [0x47c474]
call fcn.0044168f
push 0x466040
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43e292
mov ebp, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0x102
push esi
push ebx
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ebx
push ebx
push esi
push str.VistaTask_exe
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.vtask_exe
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.VistaRunner_exe
push dword [0x47c474]
call fcn.0044168f
push 0x102
push esi
push ebx
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 1
push 0x1000
call fcn.00447e84
push 0x3f
mov dword [esp + 0x24], eax
lea eax, [esp + 0x2cc]
push eax
mov eax, 0x103
push eax
push dword [esp + 0x2c]
push eax
lea eax, [esp + 0x158]
push eax
push 0x7f
lea eax, [esp + 0x264]
push eax
push esi
call fcn.0044a225
lea eax, [esp + 0x168]
push eax
lea eax, [esp + 0x270]
push eax
push 0x462998
push esi
call edi
add esp, 0x3c
cmp dword [esp + 0x18], ebx
je 0x43e094
push dword [esp + 0x18]
call fcn.00447ab6
pop ecx
push ebx
push ebx
push esi
push str.VistaTask_dir
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.vtask_dir
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.VistaRunner_dir
push dword [0x47c474]
call fcn.0044168f
push dword [0x4771a0]
push 0x45cb14
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_hwnd
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.vtask_hwnd
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.VistaRunner_hwnd
push dword [0x47c474]
call fcn.0044168f
push 0x102
push esi
push ebx
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 1
push esi
push ebx
call fcn.0040e4ce
push ebx
push ebx
push esi
push str.VistaTask_ver
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.vtask_ver
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.VistaRunner_ver
push dword [0x47c474]
call fcn.0044168f
push dword [0x4771e0]
mov ebp, 0x45cb14
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_output
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.vtask_output
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.VistaRunner_output
push dword [0x47c474]
call fcn.0044168f
push dword [0x4771d4]
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_list
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.vtask_list
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.VistaRunner_list
push dword [0x47c474]
call fcn.0044168f
push dword [0x4771b4]
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_status
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.vtask_status
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.VistaRunner_status
push dword [0x47c474]
call fcn.0044168f
push dword [0x4771a0]
call dword [sym.imp.USER32.dll_GetMenu]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_menu
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.vtask_menu
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.VistaRunner_menu
push dword [0x47c474]
call fcn.0044168f
mov ebp, 0x462d0c
push 0x465e8c
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43e99b
push str.WINDIR
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43e32b
push 0x102
push esi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43e2e4
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43e2e8
mov dword [esp + 0x10], ebx
push 0x465e7c
push dword [0x47c474]
call fcn.004415b1
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x465e70
push eax
call fcn.0044168f
push str.WINVER
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43e48f
cmp esi, ebx
je 0x43e427
mov ebp, dword [sym.imp.KERNEL32.dll_GetVersion]
call ebp
cmp al, 5
jne 0x43e36c
call ebp
shr eax, 8
cmp al, 1
jne 0x43e36c
mov eax, str.Windows_XP
jmp 0x43e41f
call fcn.0041505a
test eax, eax
je 0x43e37f
mov eax, str.Windows_Server_2008
jmp 0x43e41f
call ebp
cmp al, 6
jne 0x43e398
call ebp
shr eax, 8
test al, al
jne 0x43e398
mov eax, str.Windows_Vista
jmp 0x43e41f
call ebp
cmp al, 6
jne 0x43e3ae
call ebp
shr eax, 8
cmp al, 1
jne 0x43e3ae
mov eax, str.Windows_7
jmp 0x43e41f
call ebp
cmp al, 5
jne 0x43e3c4
call ebp
shr eax, 8
cmp al, 2
jne 0x43e3c4
mov eax, str.Windows_2003
jmp 0x43e41f
call ebp
cmp al, 5
jne 0x43e3da
call ebp
shr eax, 8
test al, al
jne 0x43e3da
mov eax, str.Windows_2000
jmp 0x43e41f
call ebp
cmp al, 4
jne 0x43e3f0
call ebp
shr eax, 8
cmp al, 0x5a
jne 0x43e3f0
mov eax, str.Windows_ME
jmp 0x43e41f
call ebp
cmp al, 4
jne 0x43e406
call ebp
shr eax, 8
cmp al, 0xa
jne 0x43e406
mov eax, str.Windows_98
jmp 0x43e41f
call ebp
cmp al, 4
jne 0x43e41a
call ebp
shr eax, 8
test al, al
mov eax, str.Windows_NT
je 0x43e41f
mov eax, str.Unknown
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43e43d
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43e441
mov dword [esp + 0x10], ebx
push 0x465e60
push dword [0x47c474]
call fcn.004415b1
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x465e54
push eax
call fcn.0044168f
mov ebp, 0x462d0c
push str.WINDOW_
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43e571
mov eax, dword [0x4771e8]
cmp eax, ebx
je 0x43e571
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x43e571
lea eax, [esp + 0x80]
push eax
push dword [0x4771e8]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x80]
inc eax
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.window_x
push dword [0x47c474]
call fcn.0044168f
mov eax, dword [esp + 0x84]
inc eax
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.window_y
push dword [0x47c474]
call fcn.0044168f
mov eax, dword [esp + 0x88]
sub eax, dword [esp + 0x80]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.window_width
push dword [0x47c474]
call fcn.0044168f
mov eax, dword [esp + 0x8c]
sub eax, dword [esp + 0x84]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.window_height
push dword [0x47c474]
call fcn.0044168f
push str.WINDOW
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43e5b7
push str.WIN_TITLE
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43e5b7
push str.WIN_TEXT
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43e654
push esi
push 0x1ff
push 0xd
push dword [0x4771e8]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43e5e1
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43e5e5
mov dword [esp + 0x10], ebx
push 0x45cb24
push dword [0x47c474]
call fcn.004415b1
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x465de4
push eax
call fcn.0044168f
push ebx
push ebx
push esi
push 0x465dd8
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push 0x465dcc
push dword [0x47c474]
call fcn.0044168f
push str.WIN_CLASS
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43e684
push str.WINCLASS
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43e712
mov byte [esi], bl
mov eax, dword [0x4771e8]
cmp eax, ebx
je 0x43e69c
push 0x103
push esi
push eax
call dword [sym.imp.USER32.dll_GetClassNameA]
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43e6b2
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43e6b6
mov dword [esp + 0x10], ebx
push 0x465da8
push dword [0x47c474]
call fcn.004415b1
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x465d9c
push eax
call fcn.0044168f
push ebx
push ebx
push esi
push 0x465d90
push dword [0x47c474]
call fcn.0044168f
push str.WIN_ID
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43e742
push str.WINID
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43e7d8
mov byte [esi], bl
mov eax, dword [0x4771e8]
cmp eax, ebx
je 0x43e762
push 0xfffffffffffffff4
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
push 0x45cb14
push esi
call edi
add esp, 0xc
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43e778
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43e77c
mov dword [esp + 0x10], ebx
push 0x465da8
push dword [0x47c474]
call fcn.004415b1
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x465d74
push eax
call fcn.0044168f
push ebx
push ebx
push esi
push 0x465d6c
push dword [0x47c474]
call fcn.0044168f
push str.WIN_DATA
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43e808
push str.WINDATA
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43e8d7
mov byte [esi], bl
mov eax, dword [0x4771e8]
cmp eax, ebx
je 0x43e828
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
push 0x45cb14
push esi
call edi
add esp, 0xc
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43e83e
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43e842
mov dword [esp + 0x10], ebx
push 0x465da8
push dword [0x47c474]
call fcn.004415b1
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x465d48
push eax
call fcn.0044168f
push ebx
push ebx
push esi
push str.WIN_USERDATA
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push 0x465d2c
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.WINUSERDATA
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.USERDATA
push dword [0x47c474]
call fcn.0044168f
call fcn.00416a37
push eax
mov ebp, 0x45cb18
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.weeknum
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x74]
push esi
push 2
push eax
call fcn.00417d7b
add esp, 0xc
push ebx
push ebx
push esi
push str.weekday_abbr
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.weekdayabbr
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x74]
push esi
push 1
push eax
call fcn.00417d7b
add esp, 0xc
push ebx
push ebx
push esi
push str.weekday
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x74]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.weekday1
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x74]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.weekday2
push dword [0x47c474]
call fcn.0044168f
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x140]
push eax
mov dword [esp + 0x24], 0xff
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
push ebx
push ebx
lea eax, [esp + 0x144]
push eax
push str.username
push dword [0x47c474]
call fcn.0044168f
push str.HWND
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43ea5a
push dword [0x4771e8]
push 0x45cb14
push esi
call edi
mov eax, dword [0x47c474]
add esp, 0xc
cmp eax, ebx
je 0x43ea0d
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43ea11
mov dword [esp + 0x10], ebx
push 0x460d18
push dword [0x47c474]
call fcn.004415b1
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x465ca4
push eax
call fcn.0044168f
push str.DESKTOP
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
mov ebp, 0x465c90
test eax, eax
je 0x43eae3
push esi
push 1
call fcn.0040e350
push 2
push 0x45c800
push esi
call fcn.004417cc
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43eaa0
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43eaa4
mov dword [esp + 0x10], ebx
push ebp
push dword [0x47c474]
call fcn.004415b1
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x465c84
push eax
call fcn.0044168f
push str.Documents
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43eb67
push esi
push 4
call fcn.0040e350
push 2
push 0x45c800
push esi
call fcn.004417cc
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43eb24
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43eb28
mov dword [esp + 0x10], ebx
push ebp
push dword [0x47c474]
call fcn.004415b1
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push 0x465c6c
push eax
call fcn.0044168f
push str.AppData
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43ebeb
push esi
push 5
call fcn.0040e350
push 2
push 0x45c800
push esi
call fcn.004417cc
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43eba8
push eax
call fcn.00447e51
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43ebac
mov dword [esp + 0x10], ebx
push ebp
push dword [0x47c474]
call fcn.004415b1
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push str.AppData
push eax
call fcn.0044168f
movzx eax, word [esp + 0x70]
sub eax, 0x7d0
push eax
mov ebp, str._02d
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.year2
push dword [0x47c474]
call fcn.0044168f
mov al, byte [esi + 1]
push ebx
push ebx
push esi
push str.year1
mov byte [esi], al
mov byte [esi + 1], bl
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x70]
push eax
push str._04d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.year
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.year4
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x76]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.day
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.day2
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x76]
push eax
push 0x45cb18
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.day1
push dword [0x47c474]
call fcn.0044168f
mov cx, word [esp + 0x72]
xor eax, eax
inc eax
cmp ax, cx
sbb eax, eax
and eax, 0x1f
mov dword [esp + 0x6c], eax
cmp cx, 2
jbe 0x43ed1d
movzx eax, word [esp + 0x70]
mov edx, eax
and edx, 0x80000003
jns 0x43ecec
dec edx
or edx, 0xfffffffc
inc edx
jne 0x43ed13
push 0x64
cdq
pop ebp
idiv ebp
test edx, edx
jne 0x43ed09
movzx eax, word [esp + 0x70]
cdq
mov ebp, 0x190
idiv ebp
test edx, edx
jne 0x43ed13
mov dword [esp + 0x18], 0x1d
jmp 0x43ed21
mov dword [esp + 0x18], 0x1c
jmp 0x43ed21
mov dword [esp + 0x18], ebx
push 3
pop eax
push 4
pop edx
cmp ax, cx
sbb eax, eax
push 5
pop ebp
and eax, 0x1f
cmp dx, cx
sbb edx, edx
and edx, 0x1e
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1f
mov dword [esp + 0x60], ebp
push 6
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1e
mov dword [esp + 0x68], ebp
push 7
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1f
mov dword [esp + 0x20], ebp
push 8
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1f
mov dword [esp + 0x24], ebp
push 9
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1e
mov dword [esp + 0x2c], ebp
push 0xa
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1f
mov dword [esp + 0x10], ebp
mov bp, 0xb
cmp bp, cx
movzx ebp, word [esp + 0x76]
sbb ecx, ecx
and ecx, 0x1e
add ebp, ecx
add ebp, dword [esp + 0x10]
add ebp, dword [esp + 0x2c]
add ebp, dword [esp + 0x24]
add ebp, dword [esp + 0x20]
add ebp, dword [esp + 0x68]
add ebp, dword [esp + 0x60]
add ebp, edx
add ebp, eax
add ebp, dword [esp + 0x18]
add ebp, dword [esp + 0x6c]
push ebp
push 0x45cb18
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.dayofyear
push dword [0x47c474]
call fcn.0044168f
movzx eax, word [esp + 0x78]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.hour24
push dword [0x47c474]
call fcn.0044168f
movzx ebp, word [esp + 0x78]
cmp ebp, 1
jge 0x43ee1a
add ebp, 0xc
jmp 0x43ee22
cmp ebp, 0xc
jle 0x43ee22
sub ebp, 0xc
push ebp
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.hour2
push dword [0x47c474]
call fcn.0044168f
push ebp
push 0x45cb18
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.hour
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.hour12
push dword [0x47c474]
call fcn.0044168f
push ebx
push ebx
push esi
push str.hour1
push dword [0x47c474]
call fcn.0044168f
cmp word [esp + 0x78], 0xc
mov eax, 0x460014
jb 0x43ee98
mov eax, 0x460028
push ebx
push ebx
push eax
push str.AMPM
push dword [0x47c474]
call fcn.0044168f
push 0x3f
push esi
push ebx
push ebx
push 0x40000000
mov edi, 0x400
push edi
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcatA]
push str.__r_n
push esi
call ebp
push 0x3f
lea eax, [esp + 0x140]
push eax
push ebx
push ebx
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
lea eax, [esp + 0x13c]
push eax
push esi
call ebp
push ebx
push ebx
push esi
push str.NOW
push dword [0x47c474]
call fcn.0044168f
cmp dword [esp + 0x48], ebx
je 0x43ef25
xor edx, edx
jmp 0x43ef1c
mov cl, byte [eax + edx]
cmp cl, bl
je 0x43ef25
cmp cl, 0xff
jne 0x43ef1b
mov byte [eax + edx], 0x25
inc edx
mov eax, dword [0x47c474]
cmp eax, ebx
jne 0x43ef0b
push str.CLIPBOARD
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43ef55
push str._CLIPBOARD
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43efff
push ebx
push ebx
call fcn.004422aa
mov ebp, 0x100
add eax, ebp
cmp eax, ebp
jbe 0x43ef74
push ebx
push ebx
call fcn.004422aa
lea edi, [ebp + eax]
jmp 0x43ef76
mov edi, ebp
cmp esi, ebx
je 0x43ef83
push esi
call fcn.00447e51
pop ecx
jmp 0x43ef85
xor eax, eax
lea eax, [eax + edi + 0x1000]
push eax
push esi
call fcn.00401000
mov esi, eax
pop ecx
pop ecx
cmp esi, ebx
je 0x43f640
push edi
push esi
call fcn.004422aa
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43efba
push eax
call fcn.00447e51
pop ecx
mov ebp, eax
jmp 0x43efbc
xor ebp, ebp
push 0x45cb08
push dword [0x47c474]
call fcn.004415b1
imul eax, edi
lea eax, [eax + ebp + 0x1000]
push eax
push dword [0x47c474]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f640
push ebx
push ebx
push esi
push str.CLIPBOARD
push eax
call fcn.0044168f
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43f401
cmp byte [eax], bl
je 0x43f401
push dword [esp + 0x64]
call fcn.00441300
cmp al, 0x3d
jne 0x43f401
cmp dword [esp + 0x4c], ebx
jne 0x43f401
push str.SUM_
push dword [0x47c474]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43f401
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43f067
push 0x460490
push eax
call fcn.00449b60
neg eax
pop ecx
sbb eax, eax
pop ecx
neg eax
jmp 0x43f069
xor eax, eax
cmp eax, ebx
je 0x43f401
cmp esi, ebx
je 0x43f07e
push esi
call fcn.00447e51
pop ecx
jmp 0x43f080
xor eax, eax
mov ecx, 0x100000
cmp eax, ecx
jbe 0x43f09a
cmp esi, ebx
je 0x43f096
push esi
call fcn.00447e51
pop ecx
jmp 0x43f09c
xor eax, eax
jmp 0x43f09c
mov eax, ecx
push eax
push esi
call fcn.00401000
mov esi, eax
mov byte [esi], bl
push 2
push dword [0x47c474]
call fcn.00447970
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 0x10
test eax, eax
je 0x43f173
push dword [0x47c474]
mov dword [esp + 0x4c], ebx
xor edi, edi
call ebp
mov dword [esp + 0x50], eax
mov eax, dword [0x47c474]
cmp byte [eax], bl
je 0x43f178
mov dl, bl
cmp dl, bl
jne 0x43f0f8
cmp byte [eax + edi], 2
jne 0x43f167
mov dl, 1
mov dword [esp + 0x48], edi
jmp 0x43f167
cmp dl, 1
jne 0x43f11d
mov cl, byte [eax + edi]
cmp cl, 2
je 0x43f11d
cmp cl, 0x30
jl 0x43f10f
cmp cl, 0x39
jle 0x43f11d
cmp cl, 0x2e
je 0x43f11d
cmp cl, 0x2d
je 0x43f11d
mov dl, 2
jmp 0x43f167
cmp byte [eax + edi], 2
jne 0x43f167
cmp dl, 1
jne 0x43f165
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x50]
add eax, ecx
sub edx, ecx
push edx
lea ecx, [eax + 1]
push ecx
push eax
call fcn.00448130
mov ecx, dword [esp + 0x5c]
mov eax, dword [0x47c474]
sub ecx, edi
add eax, edi
push ecx
push eax
dec eax
push eax
call fcn.00448130
sub dword [esp + 0x68], 2
mov eax, dword [0x47c474]
add esp, 0x18
sub edi, 2
xor dl, dl
inc edi
cmp byte [eax + edi], bl
jne 0x43f0e6
jmp 0x43f178
mov eax, dword [0x47c474]
cmp byte [0x47b0e0], 2
mov edi, 0xe5
jb 0x43f28a
push str.____Pre_Formula:
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [0x47c474], ebx
je 0x43f248
lea eax, [esp + 0x13c]
push eax
call ebp
push dword [0x47c474]
mov dword [esp + 0x1c], edi
sub dword [esp + 0x1c], eax
call ebp
inc eax
cmp dword [esp + 0x18], eax
jge 0x43f1da
lea eax, [esp + 0x13c]
push eax
call ebp
mov ecx, edi
sub ecx, eax
jmp 0x43f1e5
push dword [0x47c474]
call ebp
lea ecx, [eax + 1]
cmp ecx, ebx
jge 0x43f1ed
xor ecx, ecx
jmp 0x43f229
lea eax, [esp + 0x13c]
push eax
call ebp
push dword [0x47c474]
mov dword [esp + 0x1c], edi
sub dword [esp + 0x1c], eax
call ebp
inc eax
cmp dword [esp + 0x18], eax
jge 0x43f21e
lea eax, [esp + 0x13c]
push eax
call ebp
mov ecx, edi
sub ecx, eax
jmp 0x43f229
push dword [0x47c474]
call ebp
lea ecx, [eax + 1]
push ecx
push dword [0x47c474]
lea eax, [esp + 0x144]
push eax
call ebp
lea eax, [esp + eax + 0x144]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 4
lea eax, [esp + 0x224]
push 0x4616bc
push eax
call fcn.00447af0
add esp, 0xc
lea eax, [esp + 0x13c]
mov cl, byte [eax]
cmp cl, bl
je 0x43f277
cmp cl, 0x25
jne 0x43f274
mov byte [eax], 0xb0
inc eax
jmp 0x43f266
lea eax, [esp + 0x13c]
push eax
call fcn.00421b06
mov eax, dword [0x47c474]
pop ecx
push 0x100000
push esi
push eax
call fcn.00419f2c
fstp qword [esp + 0x58]
add esp, 0xc
cmp byte [0x47b0e0], 2
jb 0x43f3ba
push str.____Post_Formula:
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [esi], bl
jne 0x43f2f7
fld qword [esp + 0x4c]
push 0xf
push ecx
push ecx
lea eax, [esp + 0x2cc]
fstp qword [esp]
push eax
call fcn.00417eeb
add esp, 0x10
lea eax, [esp + 0x2c0]
push eax
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x43f37d
lea eax, [esp + 0x13c]
push eax
call ebp
mov dword [esp + 0x18], edi
sub dword [esp + 0x18], eax
push esi
call ebp
inc eax
cmp dword [esp + 0x18], eax
jge 0x43f323
lea eax, [esp + 0x13c]
push eax
call ebp
mov ecx, edi
sub ecx, eax
jmp 0x43f329
push esi
call ebp
lea ecx, [eax + 1]
cmp ecx, ebx
jge 0x43f331
xor ecx, ecx
jmp 0x43f363
lea eax, [esp + 0x13c]
push eax
call ebp
mov dword [esp + 0x18], edi
sub dword [esp + 0x18], eax
push esi
call ebp
inc eax
cmp dword [esp + 0x18], eax
jge 0x43f35d
lea eax, [esp + 0x13c]
push eax
call ebp
mov ecx, edi
sub ecx, eax
jmp 0x43f363
push esi
call ebp
lea ecx, [eax + 1]
push ecx
push esi
lea eax, [esp + 0x144]
push eax
call ebp
lea eax, [esp + eax + 0x144]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 4
lea eax, [esp + 0x224]
push 0x4616bc
push eax
call fcn.00447af0
add esp, 0xc
lea eax, [esp + 0x13c]
mov cl, byte [eax]
cmp cl, bl
je 0x43f3ac
cmp cl, 0x25
jne 0x43f3a9
mov byte [eax], 0xb0
inc eax
jmp 0x43f39b
lea eax, [esp + 0x13c]
push eax
call fcn.00421b06
pop ecx
push esi
call ebp
cmp eax, 0xff0
jl 0x43f3cf
push str.____WARNING___Formulas_in_vTask_are_limited_to_4k__4096_bytes_
call fcn.00421b06
pop ecx
cmp byte [esi], bl
je 0x43f3e6
mov eax, dword [0x47c474]
cmp eax, ebx
je 0x43f407
push esi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x43f407
fld qword [esp + 0x4c]
push 0xf
push ecx
push ecx
fstp qword [esp]
push dword [0x47c474]
call fcn.00417eeb
add esp, 0x10
jmp 0x43f407
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov eax, dword [0x47c474]
mov dword [esp + 0x1c], ebx
cmp eax, ebx
je 0x43f423
push 0x462be0
push eax
call fcn.00447a30
pop ecx
pop ecx
jmp 0x43f425
xor eax, eax
cmp eax, ebx
je 0x43f596
push 0x7d
push dword [0x47c474]
call fcn.00447970
pop ecx
pop ecx
test eax, eax
je 0x43f596
cmp esi, ebx
je 0x43f44f
push esi
call fcn.00447ab6
pop ecx
mov edi, dword [0x47c474]
cmp edi, ebx
je 0x43f468
push edi
call fcn.00447e51
mov edi, dword [0x47c474]
pop ecx
jmp 0x43f46a
xor eax, eax
mov ecx, 0x1000
cmp eax, ecx
ja 0x43f475
mov eax, ecx
push 1
push eax
call fcn.00447e84
pop ecx
mov dword [esp + 0x20], ebx
pop ecx
mov esi, eax
mov dword [esp + 0x20], ebx
cmp byte [edi], bl
je 0x43f566
mov eax, dword [esp + 0x314]
and eax, 2
mov dword [esp + 0x4c], eax
mov ecx, ebx
cmp dword [esp + 0x4c], ebx
je 0x43f4c8
cmp byte [edi + ecx], 0x7b
jne 0x43f4c8
cmp byte [edi + ecx + 1], 0x5c
jne 0x43f4c8
cmp byte [edi + ecx + 4], 0x7d
jne 0x43f4c8
mov eax, dword [esp + 0x1c]
mov byte [esi + eax], 0x7b
jmp 0x43f54e
add edi, ecx
mov al, byte [edi]
cmp al, 0x7b
jne 0x43f547
cmp byte [edi + 1], 0x5c
jne 0x43f547
lea edx, [edi + 2]
mov al, byte [edx]
cmp al, 0x30
jl 0x43f4e3
cmp al, 0x39
jle 0x43f4f3
cmp al, 0x41
jl 0x43f4eb
cmp al, 0x46
jle 0x43f4f3
cmp al, 0x61
jl 0x43f545
cmp al, 0x66
jg 0x43f545
mov al, byte [edi + 3]
cmp al, 0x30
jl 0x43f4fe
cmp al, 0x39
jle 0x43f50e
cmp al, 0x41
jl 0x43f506
cmp al, 0x46
jle 0x43f50e
cmp al, 0x61
jl 0x43f545
cmp al, 0x66
jg 0x43f545
cmp byte [edi + 4], 0x7d
jne 0x43f545
push 3
push edx
lea eax, [esp + 0x144]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [esp + 0x13c]
push eax
call fcn.00415b68
add dword [esp + 0x24], 4
pop ecx
mov ecx, dword [esp + 0x1c]
mov byte [esi + ecx], al
mov ecx, dword [esp + 0x20]
jmp 0x43f54e
mov al, byte [edi]
mov edx, dword [esp + 0x1c]
mov byte [esi + edx], al
inc dword [esp + 0x1c]
mov edi, dword [0x47c474]
inc ecx
mov dword [esp + 0x20], ecx
cmp byte [edi + ecx], bl
jne 0x43f4a1
cmp edi, ebx
je 0x43f579
push edi
call fcn.00447e51
mov edi, dword [0x47c474]
pop ecx
jmp 0x43f57b
xor eax, eax
push eax
push ebx
push edi
call fcn.00448090
push dword [esp + 0x28]
push esi
push dword [0x47c474]
call fcn.00447af0
add esp, 0x18
cmp esi, ebx
je 0x43f5a1
push esi
call fcn.00447ab6
pop ecx
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov esi, dword [esp + 0x54]
cmp esi, ebx
je 0x43f64b
cmp dword [esp + 0x1c], ebx
je 0x43f5db
push 4
lea eax, [esp + 0x20]
push eax
push esi
call fcn.00447af0
add esp, 0xc
jmp 0x43f64b
push dword [0x47c474]
call ebp
mov dword [esi], eax
jmp 0x43f64b
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebp
call esi
mov edi, 0x400
lea ecx, [edi + eax]
mov eax, 0x1000
cmp ecx, eax
jle 0x43f606
push ebp
call esi
add eax, edi
push 1
push eax
call fcn.00447e84
pop ecx
pop ecx
mov dword [0x47c474], eax
cmp eax, ebx
je 0x43f633
cmp ebp, ebx
je 0x43f62c
cmp byte [ebp], bl
je 0x43f62c
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x43f62e
mov byte [eax], bl
mov eax, dword [0x47c474]
mov edi, dword [esp + 0x54]
cmp edi, ebx
je 0x43f640
push eax
call esi
mov dword [edi], eax
lea eax, [esp + 0x30]
push eax
call fcn.0043a6cd
pop ecx
mov ecx, dword [esp + 0x300]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00448080
add esp, 0x2f4
ret 0x14