Function at 0x439ea7
Capabilities:
Accept command line arguments
Check os version
Encode data using base64
Get common file path
Get graphical window text
Get session user name
Parse credit card information
Query environment variable
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x2f0
mov eax, dword [0x4705d0]
xor eax, esp
mov dword [esp + 0x2ec], eax
push ebx
push ebp
xor eax, eax
mov word [esp + 0x28], ax
push esi
push edi
lea edi, [esp + 0x32]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov ebp, dword [esp + 0x304]
mov esi, dword [esp + 0x314]
stosw word es:[edi], ax
xor ebx, ebx
xor eax, eax
lea edi, [esp + 0x68]
mov dword [esp + 0x64], ebx
stosd dword es:[edi], eax
mov dword [esp + 0x6c], ebx
lea edi, [esp + 0x70]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [esp + 0x29]
push 0x103
mov byte [esp + 0x2c], bl
stosb byte es:[edi], al
lea eax, [esp + 0x13d]
push ebx
push eax
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x6c], esi
mov dword [esp + 0x28], ebx
mov byte [esp + 0x144], bl
call fcn.004464f0
push 0x3f
lea eax, [esp + 0x2cd]
push ebx
push eax
mov byte [esp + 0x2d4], bl
call fcn.004464f0
push 0x7f
lea eax, [esp + 0x259]
push ebx
push eax
mov byte [esp + 0x260], bl
call fcn.004464f0
xor eax, eax
mov dword [esp + 0x6c], ebx
lea edi, [esp + 0x70]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0x24
lea eax, [esp + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [esp + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x439f92
push eax
call fcn.00445e06
pop ecx
mov dword [0x4775e4], ebx
cmp esi, ebx
je 0x439fa2
push 4
push ebx
push esi
call fcn.004464f0
add esp, 0xc
test byte [esp + 0x310], 1
jne 0x43daf8
cmp ebp, ebx
je 0x43daf8
cmp byte [ebp], bl
je 0x43daf8
push 0x46321c
push ebp
call fcn.00448020
pop ecx
pop ecx
test eax, eax
jne 0x439fe7
push 0x45d970
push ebp
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43daf8
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebp
call esi
mov ecx, eax
mov edi, 0x10000
add ecx, edi
mov eax, 0x1000
cmp ecx, eax
jle 0x43a007
push ebp
call esi
add eax, edi
push 1
push eax
call fcn.004462a8
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
mov byte [eax], bl
mov ecx, dword [0x4775e4]
cmp ecx, ebx
je 0x43a038
push ebp
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [0x4775e4]
mov dword [esp + 0x2c], ebx
mov esi, 0x45b320
cmp ecx, ebx
je 0x43a056
push esi
push ecx
call fcn.00445d80
pop ecx
pop ecx
mov ecx, dword [0x4775e4]
jmp 0x43a058
xor eax, eax
cmp eax, ebx
je 0x43a07b
push ebx
push ebx
lea eax, [esp + 0x30]
push eax
push esi
push ecx
mov byte [esp + 0x3c], 0xff
mov byte [esp + 0x3d], bl
call fcn.0043fa75
mov dword [esp + 0x2c], 1
push 1
push edi
call fcn.004462a8
pop ecx
pop ecx
push ebp
mov esi, eax
call fcn.0043f6da
cmp al, 0x3d
jne 0x43a20c
push 0x25
push ebp
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
jne 0x43a0b5
push 0x7b
push ebp
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
je 0x43a20c
push dword [0x4775e4]
xor ebp, ebp
mov byte [esp + 0x1b], bl
xor edi, edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [0x4775e4]
inc eax
mov dword [esp + 0x1c], eax
cmp byte [ecx], bl
je 0x43a212
cmp byte [esp + 0x17], bl
jne 0x43a0f8
lea edx, [ecx + edi]
mov al, byte [edx]
cmp al, 0x22
je 0x43a0ef
cmp al, 0x27
jne 0x43a112
mov byte [esp + 0x17], al
jmp 0x43a1d9
movsx eax, byte [ecx + edi]
movzx edx, byte [esp + 0x17]
cmp eax, edx
jne 0x43a1d9
mov byte [esp + 0x17], bl
jmp 0x43a1d9
cmp ebp, ebx
jne 0x43a159
cmp al, 0x25
je 0x43a132
cmp al, 0x7b
jne 0x43a159
push 0x7d
push edx
call fcn.00445cc0
pop ecx
pop ecx
mov ecx, dword [0x4775e4]
test eax, eax
je 0x43a159
mov eax, dword [esp + 0x1c]
sub eax, edi
add ecx, edi
push eax
push ecx
inc ecx
push ecx
call fcn.00446570
mov eax, dword [0x4775e4]
add esp, 0xc
mov byte [eax + edi], 2
inc dword [esp + 0x1c]
xor ebp, ebp
inc edi
inc ebp
jmp 0x43a1d3
lea edx, [ecx + edi]
mov al, byte [edx]
cmp al, 0x5b
je 0x43a166
cmp al, 0x7b
jne 0x43a16b
imul ebp, ebp, 0xa
jmp 0x43a1d9
cmp ebp, 0xa
jb 0x43a185
cmp al, 0x5d
je 0x43a178
cmp al, 0x7d
jne 0x43a185
mov eax, ebp
push 0xa
pop ebp
xor edx, edx
div ebp
mov ebp, eax
jmp 0x43a1d9
cmp edi, ebx
jle 0x43a1d9
cmp ebp, 1
jne 0x43a1d9
cmp al, 0x41
jl 0x43a196
cmp al, 0x5a
jle 0x43a1d9
cmp al, 0x61
jl 0x43a19e
cmp al, 0x7a
jle 0x43a1d9
cmp al, 0x30
jl 0x43a1a6
cmp al, 0x39
jle 0x43a1d9
cmp al, 0x5f
je 0x43a1d9
cmp al, 0x2e
je 0x43a1d9
cmp al, 0x7d
je 0x43a1d9
mov eax, dword [esp + 0x1c]
sub eax, edi
push eax
push edx
inc edx
push edx
call fcn.00446570
mov eax, dword [0x4775e4]
add esp, 0xc
mov byte [eax + edi], 2
inc dword [esp + 0x1c]
xor ebp, ebp
mov ecx, dword [0x4775e4]
inc edi
cmp byte [ecx + edi], bl
jne 0x43a0dc
cmp ebp, ebx
je 0x43a212
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ecx
call edi
mov ecx, dword [0x4775e4]
mov byte [eax + ecx + 1], bl
push dword [0x4775e4]
call edi
mov ecx, dword [0x4775e4]
mov byte [eax + ecx], 2
mov ecx, dword [0x4775e4]
push 0x7b
push ecx
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
je 0x43a3c0
push 0x7d
push dword [0x4775e4]
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
je 0x43a3c0
push dword [0x4775e4]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [esp + 0x1c], eax
push 0x463218
lea eax, [esp + 0x13c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], 0x473bc4
mov al, byte [esp + 0x24]
add al, 0x31
mov byte [esp + 0x139], al
mov eax, dword [esp + 0x20]
cmp dword [eax], ebx
je 0x43a3a9
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43a29e
lea ecx, [esp + 0x138]
push ecx
push eax
call fcn.00445d80
pop ecx
pop ecx
jmp 0x43a2a0
xor eax, eax
cmp eax, ebx
je 0x43a3a9
xor edi, edi
cmp dword [esp + 0x1c], ebx
jle 0x43a3a9
push 3
lea eax, [esp + 0x13c]
push eax
mov eax, dword [0x4775e4]
add eax, edi
push eax
call fcn.004468e5
add esp, 0xc
test eax, eax
jne 0x43a39e
mov eax, dword [esp + 0x20]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebp, eax
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
cmp eax, ebx
je 0x43a2f7
push eax
call fcn.00446205
pop ecx
jmp 0x43a2f9
xor eax, eax
mov ecx, dword [esp + 0x1c]
lea eax, [eax + ecx + 0x1000]
push eax
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
lea ecx, [eax + edi]
cmp ecx, ebx
je 0x43a34d
lea edx, [ecx + 3]
cmp edx, ebx
je 0x43a34d
mov edx, dword [esp + 0x1c]
sub edx, edi
add edx, 0xfffffffe
cmp edx, ebx
jbe 0x43a34d
push edx
lea eax, [ecx + 3]
push eax
push ecx
call fcn.00446570
mov eax, dword [0x4775e4]
add esp, 0xc
sub dword [esp + 0x1c], 3
lea ecx, [eax + ebp]
add ecx, edi
cmp ecx, ebx
je 0x43a384
lea edx, [eax + edi]
mov dword [esp + 0x10], edx
cmp edx, ebx
je 0x43a384
mov edx, dword [esp + 0x1c]
sub edx, edi
inc edx
cmp edx, ebx
jbe 0x43a384
push edx
push dword [esp + 0x14]
push ecx
call fcn.00446570
mov eax, dword [0x4775e4]
add esp, 0xc
mov ecx, dword [esp + 0x20]
push ebp
push dword [ecx]
add eax, edi
push eax
call fcn.00445ea0
add dword [esp + 0x28], ebp
add esp, 0xc
add edi, ebp
jmp 0x43a39f
inc edi
cmp edi, dword [esp + 0x1c]
jl 0x43a2b4
add dword [esp + 0x20], 4
inc dword [esp + 0x24]
cmp dword [esp + 0x20], 0x473be8
jl 0x43a26a
push str.loop
push dword [0x4775e4]
call fcn.004010ff
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
pop ecx
pop ecx
test eax, eax
je 0x43a500
cmp dword [esp + 0x308], 7
ja 0x43a500
mov eax, dword [esp + 0x308]
xor ebp, ebp
inc ebp
shl eax, 6
lea eax, [eax + 0x476d28]
mov dword [esp + 0x18], eax
push ebp
lea eax, [esp + 0x13c]
push str.__0_dd
push eax
call edi
mov eax, dword [esp + 0x24]
fld dword [eax]
call fcn.00448380
push eax
lea eax, [esp + 0x148]
push eax
push esi
call edi
push ebp
lea eax, [esp + 0x154]
push str.loopcount_d
push eax
call edi
add esp, 0x24
push ebx
push ebx
push esi
lea eax, [esp + 0x144]
push eax
push dword [0x4775e4]
call fcn.0043fa75
push ebp
lea eax, [esp + 0x13c]
push str.loops_d
push eax
call edi
add esp, 0xc
push ebx
push ebx
push esi
lea eax, [esp + 0x144]
push eax
push dword [0x4775e4]
call fcn.0043fa75
push ebp
lea eax, [esp + 0x13c]
push str.loop_d
push eax
call edi
add esp, 0xc
push ebx
push ebx
push esi
lea eax, [esp + 0x144]
push eax
push dword [0x4775e4]
call fcn.0043fa75
inc ebp
cmp ebp, 0x20
jle 0x43a405
mov eax, dword [esp + 0x18]
fld dword [eax]
push 7
push ecx
push ecx
fstp qword [esp]
push esi
call fcn.00416b8a
add esp, 0x10
push ebx
push ebx
push esi
push str.loopcount
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.loops
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push 0x4631c4
push dword [0x4775e4]
call fcn.0043fa75
push 0x25
push dword [0x4775e4]
call fcn.00445cc0
pop ecx
pop ecx
cmp eax, ebx
je 0x43a5ea
inc eax
push 0x25
push eax
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
je 0x43a5ea
push 0xfc
lea eax, [esp + 0x13c]
push eax
push dword [0x4775e4]
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov ebp, eax
mov dword [esp + 0x24], ebp
cmp ebp, ebx
je 0x43a5ea
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43a563
push eax
call fcn.00446205
pop ecx
jmp 0x43a565
xor eax, eax
lea eax, [eax + ebp + 0x1000]
push eax
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push eax
call fcn.00446205
pop ecx
mov ecx, 0x1000
cmp eax, ecx
jbe 0x43a5ad
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43a5a9
push eax
call fcn.00446205
pop ecx
jmp 0x43a5af
xor eax, eax
jmp 0x43a5af
mov eax, ecx
push 1
push eax
call fcn.004462a8
mov ebp, eax
pop ecx
pop ecx
cmp ebp, ebx
je 0x43a5ea
mov eax, dword [esp + 0x24]
inc eax
push eax
push ebp
push dword [0x4775e4]
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43a5e3
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
call fcn.00445e06
pop ecx
push 0x25
push dword [0x4775e4]
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
je 0x43a916
push str.SOFTWARE_vTaskUserVariables
push 2
call fcn.0044110e
pop ecx
pop ecx
test eax, eax
jle 0x43a916
cmp dword [esp + 0x308], 7
ja 0x43a916
push dword [0x4775e4]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x18], ebx
jne 0x43a65c
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43a8ee
push 0x4631c0
push eax
call fcn.00445d80
jmp 0x43a8fb
push 0x25
push dword [0x4775e4]
jmp 0x43a8f6
cmp byte [ebp], 0x5b
jne 0x43a670
inc ebp
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cmp eax, 0x40
jle 0x43a682
push 0x40
pop eax
jmp 0x43a68a
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push ebp
lea eax, [esp + 0x244]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [esp + 0x23d]
push 0x25
push eax
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
je 0x43a6c2
lea eax, [esp + 0x23d]
push 0x25
push eax
call fcn.00445cc0
pop ecx
pop ecx
mov byte [eax], bl
lea eax, [esp + 0x23d]
push 0x5c
push eax
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
je 0x43a6ea
lea eax, [esp + 0x23d]
push 0x5c
push eax
call fcn.00445cc0
pop ecx
pop ecx
mov byte [eax], bl
cmp byte [esp + 0x23d], bl
je 0x43a8e0
lea eax, [esp + 0x23d]
push eax
push str.SOFTWARE_vTaskUserVariables
push str._s_s
push ebx
push ebx
push ebx
push 1
call fcn.0044129f
add esp, 0x1c
mov dword [esp + 0x24], eax
cmp eax, ebx
jne 0x43a739
lea eax, [esp + 0x23c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [esp + 0x23c]
dec ecx
mov byte [eax + ecx], bl
jmp 0x43a6ea
mov eax, dword [esp + 0x24]
add eax, 0x1000
mov ecx, 0x208
cmp eax, ecx
jge 0x43a74d
mov eax, ecx
push eax
push esi
call fcn.00401000
mov esi, eax
pop ecx
pop ecx
cmp esi, ebx
je 0x43db52
mov eax, dword [esp + 0x24]
add eax, 2
mov ecx, 0x208
cmp eax, ecx
jge 0x43a772
mov eax, ecx
lea ecx, [esp + 0x23d]
push ecx
push str.SOFTWARE_vTaskUserVariables_s
push eax
push esi
push ebx
push 3
call fcn.0044129f
add esp, 0x18
dec eax
cmp eax, ebx
mov dword [esp + 0x24], ebx
jl 0x43a799
mov dword [esp + 0x24], eax
sub ebp, dword [0x4775e4]
jns 0x43a7a3
xor ebp, ebp
lea eax, [esp + 0x23c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [esp + 0x20]
sub ecx, ebp
sub ecx, eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [0x4775e4]
cmp ecx, ebx
je 0x43a7da
push ecx
call fcn.00446205
pop ecx
mov ecx, dword [0x4775e4]
mov dword [esp + 0x10], eax
jmp 0x43a7de
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
add eax, edx
mov dword [esp + 0x20], eax
add eax, 0x1000
cmp dword [esp + 0x10], eax
jbe 0x43a80c
cmp ecx, ebx
je 0x43a80a
push ecx
call fcn.00446205
pop ecx
mov ecx, dword [0x4775e4]
jmp 0x43a80c
xor eax, eax
push eax
push ecx
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
lea ecx, [eax + ebp]
test ecx, ecx
je 0x43a878
lea eax, [esp + 0x23c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, dword [0x4775e4]
add ecx, eax
add ecx, ebp
je 0x43a878
mov ecx, dword [esp + 0x1c]
inc ecx
cmp ecx, ebx
jbe 0x43a878
push ecx
lea eax, [esp + 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
mov eax, dword [0x4775e4]
add ecx, eax
add ecx, ebp
push ecx
add eax, ebp
push eax
call fcn.00446570
mov eax, dword [0x4775e4]
add esp, 0xc
mov edx, dword [esp + 0x24]
lea ecx, [eax + ebp]
add edx, ecx
mov dword [esp + 0x10], edx
cmp edx, ebx
je 0x43a8a9
cmp ecx, ebx
je 0x43a8a9
mov edx, dword [esp + 0x1c]
inc edx
cmp edx, ebx
jbe 0x43a8a9
push edx
push ecx
push dword [esp + 0x18]
call fcn.00446570
mov eax, dword [0x4775e4]
add esp, 0xc
push dword [esp + 0x24]
add eax, ebp
push esi
push eax
call fcn.00445ea0
add esp, 0xc
lea eax, [esp + 0x23c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [esp + 0x20]
sub ecx, eax
mov eax, dword [0x4775e4]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x24]
add eax, ebp
lea ebp, [eax + ecx - 1]
cmp dword [esp + 0x18], ebx
jne 0x43a8f2
lea eax, [ebp + 1]
jmp 0x43a644
xor ebp, ebp
jmp 0x43a8ff
push 0x25
inc ebp
push ebp
call fcn.00445cc0
pop ecx
mov ebp, eax
pop ecx
cmp ebp, ebx
jne 0x43a669
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 2
jl 0x43a639
mov dword [esp + 0x20], 1
push dword [esp + 0x20]
lea eax, [esp + 0x240]
push str.__parameter_d
push eax
call edi
lea eax, [esp + 0x248]
push eax
push dword [0x4775e4]
call fcn.004010ff
add esp, 0x14
test eax, eax
je 0x43aa36
push dword [esp + 0x20]
push str.SOFTWARE_vTaskUserVariablesparameter_d
push ebx
push ebx
push ebx
push 1
call fcn.0044129f
mov ebp, eax
add esp, 0x18
cmp ebp, ebx
jle 0x43aa36
cmp esi, ebx
je 0x43a97a
push esi
call fcn.00445e06
pop ecx
lea eax, [ebp + 0x100]
mov ecx, 0x10000
cmp eax, ecx
jl 0x43a996
mov edx, 0x1000
cmp eax, edx
jle 0x43a99a
cmp eax, ecx
jge 0x43a99c
mov eax, ecx
jmp 0x43a99c
mov eax, edx
push 1
push eax
call fcn.004462a8
mov esi, eax
lea eax, [ebp + 2]
cmp eax, 0x208
pop ecx
pop ecx
jge 0x43a9b7
mov eax, 0x208
push dword [esp + 0x20]
push str.SOFTWARE_vTaskUserVariablesparameter_d
push eax
push esi
push ebx
push 3
call fcn.0044129f
mov eax, dword [0x4775e4]
add esp, 0x18
cmp eax, ebx
je 0x43a9e3
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43a9e7
mov dword [esp + 0x10], ebx
lea eax, [esp + 0x23c]
push eax
push dword [0x4775e4]
call fcn.0043f997
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
lea ecx, [esp + 0x248]
push ecx
push eax
call fcn.0043fa75
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
dec eax
cmp eax, 9
jl 0x43a91e
push 0x5f
push dword [0x4775e4]
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
jne 0x43aa79
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43aa73
push 0x45d970
push eax
call fcn.00445d80
pop ecx
pop ecx
jmp 0x43aa75
xor eax, eax
cmp eax, ebx
je 0x43aa84
push dword [0x4775e4]
call fcn.00438d80
cmp esi, ebx
jne 0x43aa98
push 1
push 0x10000
call fcn.004462a8
pop ecx
pop ecx
mov esi, eax
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43aab0
push 0x45f7b8
push eax
call fcn.00445d80
pop ecx
pop ecx
jmp 0x43aab2
xor eax, eax
mov ebp, 0x45b520
cmp eax, ebx
je 0x43ab26
push 0x7d
push dword [0x4775e4]
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
je 0x43ab26
push ebx
push ebx
push 0x45c508
push str._r
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push 0x45c504
push str._n
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push 0x45c50c
push str._r_n
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push ebp
push str._t
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push 0x45c504
push 0x4618d0
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push 0x45c508
push 0x4618c4
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push 0x45b4c0
push str.rn
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push ebp
push 0x4618b8
push dword [0x4775e4]
call fcn.0043fa75
push dword [0x4775e4]
mov byte [esp + 0x1b], bl
mov dword [esp + 0x20], ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
cmp ebp, eax
jae 0x43d41c
cmp byte [esp + 0x17], bl
jne 0x43ac5c
mov eax, dword [0x4775e4]
add eax, ebp
cmp byte [eax], 0x7b
jne 0x43ac43
mov cl, byte [eax + 1]
cmp cl, 0x41
jl 0x43ac43
cmp cl, 0x7a
jg 0x43ac43
cmp cl, 0x5c
je 0x43ac43
mov dword [esp + 0x24], 1
lea ecx, [ebp + 1]
jmp 0x43ac31
cmp dword [esp + 0x24], 0x20
jg 0x43ac43
mov ecx, dword [esp + 0x24]
mov al, byte [eax + ecx]
cmp al, 0x41
jl 0x43abf1
cmp al, 0x5a
jle 0x43ac19
cmp al, 0x61
jl 0x43abf9
cmp al, 0x7a
jle 0x43ac19
cmp al, 0x30
jl 0x43ac01
cmp al, 0x39
jle 0x43ac19
movsx eax, al
push eax
push str.__._
call fcn.00445cc0
mov ebp, dword [esp + 0x24]
pop ecx
pop ecx
test eax, eax
je 0x43ac43
mov eax, dword [0x4775e4]
mov ecx, dword [esp + 0x24]
add eax, ebp
cmp byte [eax + ecx], 0x7d
je 0x43ac39
inc ecx
mov dword [esp + 0x24], ecx
add ecx, ebp
cmp ecx, dword [esp + 0x20]
jb 0x43abdb
jmp 0x43ac43
cmp ecx, 3
jle 0x43ac43
mov byte [esp + 0x17], 1
inc ebp
mov dword [esp + 0x1c], ebp
cmp ebp, dword [esp + 0x20]
jb 0x43aba2
cmp byte [esp + 0x17], bl
je 0x43d41c
cmp byte [0x476258], 2
jb 0x43ac93
mov eax, dword [0x4775e4]
push 8
lea eax, [eax + ebp - 1]
push eax
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [esp + 0x138]
push eax
push str.____System_Variables_Processing_Required___s_...
call fcn.0042036e
pop ecx
pop ecx
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
cmp dword [0x472468], ebx
jne 0x43acb1
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [0x472468], eax
push ebx
push ebx
mov ebp, 0x45c504
push ebp
push str.ENTER
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push ebp
push str.linefeed
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push 0x45c50c
push str.newline
push dword [0x4775e4]
call fcn.0043fa75
push 0x463118
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43af4e
push str.CURDIR
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43ad93
push esi
push 0x102
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push 2
push 0x45a954
push esi
call fcn.0043fbb2
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43ad50
push eax
call fcn.00446205
pop ecx
mov ebp, eax
jmp 0x43ad52
xor ebp, ebp
push 0x463108
push dword [0x4775e4]
call fcn.0043f997
imul eax, eax, 0x104
add eax, ebp
push eax
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x4630fc
push eax
call fcn.0043fa75
push ebx
push ebx
mov ebp, 0x476488
push ebp
push str.command
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push ebp
push str.cmd
push dword [0x4775e4]
call fcn.0043fa75
push dword [0x476254]
push 0x45aac0
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.command_id
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.cmd_id
push dword [0x4775e4]
call fcn.0043fa75
push str.cmdline
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43ae87
mov ebp, dword [sym.imp.KERNEL32.dll_GetCommandLineA]
call ebp
test eax, eax
je 0x43ae87
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43ae2d
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43ae31
mov dword [esp + 0x10], ebx
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0x4630b8
push dword [0x4775e4]
mov ebp, eax
call fcn.0043f997
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
push 0x4630ac
push dword [0x4775e4]
call fcn.0043fa75
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.color_depth
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43aed8
push 0xc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push 0x45aac0
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push 0x46308c
push dword [0x4775e4]
call fcn.0043fa75
mov eax, dword [esp + 0x30c]
inc eax
push eax
push 0x45aac0
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.currentstep
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.current_step
push dword [0x4775e4]
call fcn.0043fa75
mov eax, dword [esp + 0x308]
inc eax
push eax
push 0x45aac0
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.currentfile
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.current_file
push dword [0x4775e4]
call fcn.0043fa75
jmp 0x43af54
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x461944
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43b246
push str.FILENAME
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43b013
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43af9e
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43afa2
mov dword [esp + 0x10], ebx
mov eax, dword [0x472674]
imul eax, eax, 0x104
add eax, 0x472858
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0x463034
push dword [0x4775e4]
mov ebp, eax
call fcn.0043f997
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
mov ecx, dword [0x472674]
imul ecx, ecx, 0x104
push ebx
push ebx
add ecx, 0x472858
push ecx
push 0x463028
push eax
call fcn.0043fa75
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.FILEBASENAME
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43b0af
mov eax, dword [0x472674]
imul eax, eax, 0x104
push 0xc
push esi
add eax, 0x472858
push eax
call fcn.0040dac4
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43b05c
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43b060
mov dword [esp + 0x10], ebx
push 0x463008
push dword [0x4775e4]
call fcn.0043f997
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x462ff8
push eax
call fcn.0043fa75
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.FILEPATH
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43b158
mov eax, dword [0x472674]
imul eax, eax, 0x104
push 3
push esi
add eax, 0x472858
push eax
call fcn.0040dac4
push 2
push 0x45a954
push esi
call fcn.0043fbb2
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43b105
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43b109
mov dword [esp + 0x10], ebx
push 0x462fe0
push dword [0x4775e4]
call fcn.0043f997
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x462fd4
push eax
call fcn.0043fa75
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.FILEEXT
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43b1f4
mov eax, dword [0x472674]
imul eax, eax, 0x104
push 8
push esi
add eax, 0x472858
push eax
call fcn.0040dac4
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43b1a1
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43b1a5
mov dword [esp + 0x10], ebx
push 0x462fc0
push dword [0x4775e4]
call fcn.0043f997
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x462fb4
push eax
call fcn.0043fa75
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.fail
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43b246
push str.SOFTWARE_vTaskFailStep
call fcn.0044426c
push eax
push 0x45aac0
push esi
call edi
add esp, 0x10
push ebx
push ebx
push esi
push str.failstep
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.fail_step
push dword [0x4775e4]
call fcn.0043fa75
push 0x462f90
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43b602
push str.UserVariableslogin_username
push 0x103
push esi
call fcn.00444468
add esp, 0xc
push ebx
push ebx
push esi
push str.login_username
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.login_name
push dword [0x4775e4]
call fcn.0043fa75
push str.UserVariableslogin_password
push 0x103
push esi
call fcn.00444468
push 1
push str.EATATJOES
push esi
call fcn.00414e46
add esp, 0x18
push ebx
push ebx
push esi
push str.login_password
push dword [0x4775e4]
call fcn.0043fa75
push str.LOGFILE
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43b345
push esi
call fcn.0041f17e
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43b2fe
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43b302
mov dword [esp + 0x10], ebx
push 0x462ef8
push dword [0x4775e4]
call fcn.0043f997
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x462eec
push eax
call fcn.0043fa75
push str.LANGUAGE
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43b602
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
and eax, 0x3ff
cmp eax, 0x15
jg 0x43b4d0
je 0x43b4be
cmp eax, 0xb
jg 0x43b438
je 0x43b426
dec eax
je 0x43b414
sub eax, 3
je 0x43b402
dec eax
je 0x43b3f0
dec eax
je 0x43b3de
dec eax
je 0x43b3cc
dec eax
je 0x43b3ba
dec eax
dec eax
jne 0x43b5e3
cmp esi, ebx
je 0x43b5ef
push str.Spanish
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Greek
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.German
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Danish
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Czech
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Chinese
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Arabic
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Finnish
jmp 0x43b5ec
sub eax, 0xc
je 0x43b4ac
sub eax, 4
je 0x43b49a
dec eax
je 0x43b488
dec eax
je 0x43b476
dec eax
je 0x43b464
dec eax
jne 0x43b5e3
cmp esi, ebx
je 0x43b5ef
push str.Norwegian
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Dutch
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Korean
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Japanese
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Italian
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.French
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Polish
jmp 0x43b5ec
cmp eax, 0x46
jg 0x43b5e3
je 0x43b5d8
cmp eax, 0x1f
jg 0x43b57d
je 0x43b572
sub eax, 0x16
je 0x43b563
dec eax
dec eax
je 0x43b551
dec eax
je 0x43b53f
dec eax
je 0x43b52d
sub eax, 3
je 0x43b51b
dec eax
jne 0x43b5e3
cmp esi, ebx
je 0x43b5ef
push str.Thai
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Swedish
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Croatian
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Russian
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Romanian
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Portuguese
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Turkish
jmp 0x43b5ec
sub eax, 0x22
je 0x43b5cd
dec eax
dec eax
je 0x43b5c2
dec eax
dec eax
je 0x43b5b7
dec eax
je 0x43b5ac
dec eax
dec eax
je 0x43b5a1
sub eax, 0x10
jne 0x43b5e3
cmp esi, ebx
je 0x43b5ef
push str.Hindi
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Farsi
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Lithuanian
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Latvian
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Slovenian
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Ukrainian
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.Punjabi
jmp 0x43b5ec
cmp esi, ebx
je 0x43b5ef
push str.English
push esi
call ebp
push ebx
push ebx
push esi
push 0x462dc4
push dword [0x4775e4]
call fcn.0043fa75
push 0x462dc0
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
mov ebp, 0x45f8e4
test eax, eax
je 0x43b8fc
push str.memtotal
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43b65b
call fcn.00413ce5
push eax
push 0x45aabc
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push 0x462da8
push dword [0x4775e4]
call fcn.0043fa75
push str.memfree
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43b695
call fcn.00413d0d
push eax
push 0x45aabc
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push 0x462d90
push dword [0x4775e4]
call fcn.0043fa75
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [esp + 0x64]
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.mouse_x
push dword [0x4775e4]
call fcn.0043fa75
push dword [esp + 0x68]
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.mouse_y
push dword [0x4775e4]
call fcn.0043fa75
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43b6f4
push str.monitor
push eax
call fcn.00445d80
pop ecx
pop ecx
jmp 0x43b6f6
xor eax, eax
cmp eax, ebx
je 0x43b71c
push ebx
push ebx
call fcn.0043e627
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.monitors
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x32]
push esi
push 3
push eax
call fcn.00416a2e
add esp, 0xc
push ebx
push ebx
push esi
push str.month_name
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.monthname
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x32]
push esi
push 4
push eax
call fcn.00416a2e
add esp, 0xc
push ebx
push ebx
push esi
push str.month_abbr
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.monthabbr
push dword [0x4775e4]
call fcn.0043fa75
mov eax, dword [esp + 0x30]
and eax, 9
cmp ax, 8
je 0x43b7a1
cmp ax, 1
je 0x43b7a1
xor ecx, ecx
jmp 0x43b7a4
xor ecx, ecx
inc ecx
movzx eax, word [esp + 0x32]
mov edx, eax
and edx, 0x80000003
jns 0x43b7b8
dec edx
or edx, 0xfffffffc
inc edx
jne 0x43b7d5
push 0x64
cdq
pop ebp
idiv ebp
test edx, edx
jne 0x43b7e2
movzx eax, word [esp + 0x32]
cdq
mov ebp, 0x190
idiv ebp
test edx, edx
je 0x43b7e2
cmp word [esp + 0x30], 2
jne 0x43b7e2
xor ebp, ebp
inc ebp
jmp 0x43b7e4
xor ebp, ebp
xor eax, eax
cmp word [esp + 0x30], 2
sete al
sub ecx, eax
sub ecx, ebp
add ecx, 0x1e
push ecx
mov ebp, 0x45aac0
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.month_days
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.monthdays
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x32]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.month
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.month2
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x32]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.month1
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x3a]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.minute
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.minute2
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x3a]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.minute1
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x3e]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.millisecond
push dword [0x4775e4]
call fcn.0043fa75
mov ebp, 0x45f8e4
push 0x462cb4
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43ba7a
push str.PROGRAMFILES
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43b9a7
push 0x102
push esi
push 0x45c540
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
push 2
push 0x45a954
push esi
call fcn.0043fbb2
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43b960
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43b964
mov dword [esp + 0x10], ebx
push 0x45c540
push dword [0x4775e4]
call fcn.0043f997
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x462c94
push eax
call fcn.0043fa75
push str.PATH
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43ba7a
push 1
push esi
push 0x45c524
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov dword [esp + 0x24], eax
cmp esi, ebx
je 0x43b9de
push esi
call fcn.00445e06
pop ecx
mov eax, 0x1000
add dword [esp + 0x24], eax
cmp dword [esp + 0x24], eax
jle 0x43b9f1
mov eax, dword [esp + 0x24]
push 1
push eax
call fcn.004462a8
pop ecx
mov esi, eax
mov eax, dword [esp + 0x28]
pop ecx
add eax, 0xfffffffe
push eax
push esi
push 0x45c524
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
push 2
push 0x45a954
push esi
call fcn.0043fbb2
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43ba34
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43ba38
mov dword [esp + 0x10], ebx
push 0x45c524
push dword [0x4775e4]
call fcn.0043f997
imul eax, dword [esp + 0x24]
add eax, dword [esp + 0x10]
push eax
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x462c84
push eax
call fcn.0043fa75
push 0x462c80
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43bc20
push ebx
push ebx
push 0x45c508
push str.return
push dword [0x4775e4]
call fcn.0043fa75
push str.repeat
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43bc20
cmp dword [esp + 0x308], 7
ja 0x43bc20
mov ebp, dword [esp + 0x308]
lea ebp, [ebp*4 + 0x4725f4]
mov eax, dword [ebp]
cmp eax, ebx
jge 0x43baea
xor eax, eax
push eax
push str._05d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount5
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.repeats5
push dword [0x4775e4]
call fcn.0043fa75
mov eax, dword [ebp]
cmp eax, ebx
jge 0x43bb25
xor eax, eax
push eax
push str._04d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount4
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.repeats4
push dword [0x4775e4]
call fcn.0043fa75
mov eax, dword [ebp]
cmp eax, ebx
jge 0x43bb60
xor eax, eax
push eax
push str._03d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount3
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.repeats3
push dword [0x4775e4]
call fcn.0043fa75
mov eax, dword [ebp]
cmp eax, ebx
jge 0x43bb9b
xor eax, eax
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount2
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.repeats2
push dword [0x4775e4]
call fcn.0043fa75
mov ebp, dword [ebp]
cmp ebp, ebx
jge 0x43bbd6
xor ebp, ebp
push ebp
push 0x45aac0
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.repeatcount
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.repeats
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push 0x462bd0
push dword [0x4775e4]
call fcn.0043fa75
mov ebp, 0x45f8e4
push 0x462bcc
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43c3e7
push ebx
push ebx
push str.__r_n
push str.SPACE
push dword [0x4775e4]
call fcn.0043fa75
push str.SYSDIR
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43bcca
push 0x102
push esi
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43bc87
push eax
call fcn.00446205
pop ecx
mov ebp, eax
jmp 0x43bc89
xor ebp, ebp
push 0x462bb4
push dword [0x4775e4]
call fcn.0043f997
imul eax, eax, 0x104
add eax, ebp
push eax
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x462ba8
push eax
call fcn.0043fa75
push str.STARTMENU
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43bd4c
push esi
push 2
call fcn.0040d2df
push 2
push 0x45a954
push esi
call fcn.0043fbb2
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43bd09
push eax
call fcn.00446205
pop ecx
mov ebp, eax
jmp 0x43bd0b
xor ebp, ebp
push 0x462b90
push dword [0x4775e4]
call fcn.0043f997
imul eax, eax, 0x104
add eax, ebp
push eax
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x462b84
push eax
call fcn.0043fa75
push str.step_
push dword [0x4775e4]
jmp 0x43c2a5
mov edx, dword [esp + 0x18]
mov cl, byte [edx]
xor eax, eax
jmp 0x43bd74
cmp cl, 0x7d
je 0x43bd78
cmp eax, 0x3f
jge 0x43bd78
inc eax
mov cl, byte [edx + eax]
cmp cl, bl
jne 0x43bd66
add eax, 2
cmp eax, 0x3f
jle 0x43bd83
push 0x3f
pop eax
push eax
push dword [esp + 0x1c]
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [esp + 0x138]
push eax
call fcn.0040109c
mov ebp, eax
cmp ebp, 1
pop ecx
mov byte [esi], bl
jl 0x43c284
mov eax, dword [0x472674]
cmp ebp, dword [eax*4 + 0x4725d4]
jg 0x43c284
lea eax, [esp + 0x138]
push str..action
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43bdf9
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
lea eax, [eax + ebp - 0xf54]
jmp 0x43c27c
lea eax, [esp + 0x138]
push str..category
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43be2f
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
push dword [eax + ebp - 0xf14]
jmp 0x43c1cc
lea eax, [esp + 0x138]
push str..image
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43be66
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
mov eax, dword [eax + ebp - 0xf10]
inc eax
jmp 0x43c19b
lea eax, [esp + 0x138]
push str..text
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43bedc
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
push dword [eax + ebp - 0xf04]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cmp eax, 0xff
jle 0x43beac
mov eax, 0xff
jmp 0x43bec6
mov eax, dword [0x472674]
mov eax, dword [eax*4 + 0x473bec]
push dword [eax + ebp - 0xf04]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
mov eax, dword [0x472674]
mov eax, dword [eax*4 + 0x473bec]
push dword [eax + ebp - 0xf04]
jmp 0x43bf50
lea eax, [esp + 0x138]
push str..comment
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43bf5c
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
push dword [eax + ebp - 0xf00]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cmp eax, 0xff
jle 0x43bf22
mov eax, 0xff
jmp 0x43bf3c
mov eax, dword [0x472674]
mov eax, dword [eax*4 + 0x473bec]
push dword [eax + ebp - 0xf00]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
mov eax, dword [0x472674]
mov eax, dword [eax*4 + 0x473bec]
push dword [eax + ebp - 0xf00]
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
jmp 0x43c284
lea eax, [esp + 0x138]
push str..options
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43bf92
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
lea eax, [eax + ebp - 0xefc]
jmp 0x43c27c
lea eax, [esp + 0x138]
push str..timeout
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43bfc8
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
lea eax, [eax + ebp - 0xdf8]
jmp 0x43c27c
lea eax, [esp + 0x138]
push str..output_option
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43bffe
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
lea eax, [eax + ebp - 0x28c]
jmp 0x43c27c
lea eax, [esp + 0x138]
push str..output
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43c034
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
lea eax, [eax + ebp - 0x2cc]
jmp 0x43c27c
lea eax, [esp + 0x138]
push str..fail_mode
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43c06a
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
lea eax, [eax + ebp - 0x187]
jmp 0x43c27c
lea eax, [esp + 0x138]
push str..fail_option
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43c0a0
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
lea eax, [eax + ebp - 0x147]
jmp 0x43c27c
lea eax, [esp + 0x138]
push str..fail_snapshot
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43c0d3
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
push dword [eax + ebp - 0x40]
jmp 0x43c1cc
lea eax, [esp + 0x138]
push str..fail_log
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43c106
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
push dword [eax + ebp - 0x3c]
jmp 0x43c1cc
lea eax, [esp + 0x138]
push str..grid_text_column
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43c139
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
push dword [eax + ebp - 0x34]
jmp 0x43c1cc
lea eax, [esp + 0x138]
push str..run_status
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43c16c
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
push dword [eax + ebp - 0xf0c]
jmp 0x43c1cc
lea eax, [esp + 0x138]
push str..run_result
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43c19e
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
movzx eax, byte [eax + ebp - 0x30]
push eax
jmp 0x43c1cc
lea eax, [esp + 0x138]
push str..run_attempts
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43c1dc
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
push dword [eax + ebp - 0x2c]
push 0x45aac0
push esi
call edi
add esp, 0xc
jmp 0x43c284
lea eax, [esp + 0x138]
push str..custom
push eax
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x43c20f
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov eax, dword [eax*4 + 0x473bec]
lea eax, [eax + ebp - 0x3d0]
jmp 0x43c27c
mov dword [esp + 0x20], ebx
mov eax, dword [esp + 0x20]
inc eax
push eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x2c0]
push str..value_d
push eax
call edi
lea eax, [esp + 0x2c8]
push eax
lea eax, [esp + 0x148]
push eax
call fcn.00445d80
add esp, 0x14
test eax, eax
jne 0x43c257
mov eax, dword [esp + 0x10]
cmp eax, 8
mov dword [esp + 0x20], eax
jl 0x43c213
jmp 0x43c284
mov eax, dword [0x472674]
imul ebp, ebp, 0xf54
mov ecx, dword [eax*4 + 0x473bec]
mov eax, dword [esp + 0x20]
add ecx, ebp
imul eax, eax, 0x104
lea eax, [ecx + eax - 0xbf0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
push ebx
push esi
lea eax, [esp + 0x144]
push eax
push dword [0x4775e4]
call fcn.0043fa75
mov eax, dword [esp + 0x18]
push str.step_
inc eax
push eax
call fcn.004010ff
pop ecx
mov dword [esp + 0x1c], eax
pop ecx
cmp eax, ebx
jne 0x43bd5c
push ebx
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
mov ebp, 0x45f8e4
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.screen_x
push dword [0x4775e4]
call fcn.0043fa75
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.screen_y
push dword [0x4775e4]
call fcn.0043fa75
mov ecx, dword [0x4775e4]
cmp ecx, ebx
je 0x43c321
push 0x462a78
push ecx
call fcn.00445d80
pop ecx
pop ecx
mov ecx, dword [0x4775e4]
jmp 0x43c323
xor eax, eax
cmp eax, ebx
je 0x43c387
cmp ecx, ebx
je 0x43c33a
push 0x45b80c
push ecx
call fcn.00445d80
pop ecx
pop ecx
jmp 0x43c33c
xor eax, eax
cmp eax, ebx
je 0x43c387
push 2
push ebx
call fcn.0043e627
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.screen_x2
push dword [0x4775e4]
call fcn.0043fa75
push 2
push 1
call fcn.0043e627
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.screen_y2
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x3c]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.second
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.second2
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x3c]
push eax
push 0x45aac0
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.second1
push dword [0x4775e4]
call fcn.0043fa75
mov ebp, 0x45f8e4
push 0x462a38
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43c5e0
push ebx
push ebx
push 0x45b520
push str.TAB
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push 0x45b520
push str.tab
push dword [0x4775e4]
call fcn.0043fa75
push str.tempfile
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43c4f0
mov ebp, 0x476380
cmp byte [0x476380], bl
jne 0x43c47e
lea eax, [esp + 0x138]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
push ebp
push ebx
push 0x4597fe
lea eax, [esp + 0x144]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43c494
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43c498
mov dword [esp + 0x10], ebx
push 0x462a10
push dword [0x4775e4]
call fcn.0043f997
push ebp
mov dword [esp + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [esp + 0x18]
imul ecx, eax
add ecx, dword [esp + 0x10]
push ecx
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push 0x476380
push 0x462a04
push eax
call fcn.0043fa75
mov ebp, 0x45f8e4
mov eax, dword [esp + 0x308]
push dword [eax*4 + 0x4725d4]
push 0x45aac0
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.totalsteps
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.total_steps
push dword [0x4775e4]
call fcn.0043fa75
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.ticks
push dword [0x4775e4]
call fcn.0043fa75
lea eax, [esp + 0x8c]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
mov eax, dword [esp + 0x8c]
push 0x3c
pop ecx
cdq
idiv ecx
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.timezone
push dword [0x4775e4]
call fcn.0043fa75
push 0x3f
push esi
push ebx
push ebx
push 0x40000000
push 0x400
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
push ebx
push ebx
push esi
push str.TODAY
push dword [0x4775e4]
call fcn.0043fa75
push 0x3f
lea eax, [esp + 0x13c]
push eax
push ebx
push ebx
push ebx
push 0x400
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
push ebx
push ebx
lea eax, [esp + 0x140]
push eax
push str.TIME
push dword [0x4775e4]
call fcn.0043fa75
push 0x4629bc
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43c8bf
mov ebp, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0x102
push esi
push ebx
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ebx
push ebx
push esi
push str.VistaTask_exe
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.vtask_exe
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.VistaRunner_exe
push dword [0x4775e4]
call fcn.0043fa75
push 0x102
push esi
push ebx
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 1
push 0x1000
call fcn.004462a8
push 0x3f
mov dword [esp + 0x24], eax
lea eax, [esp + 0x2c8]
push eax
mov eax, 0x103
push eax
push dword [esp + 0x2c]
push eax
lea eax, [esp + 0x154]
push eax
push 0x7f
lea eax, [esp + 0x260]
push eax
push esi
call fcn.004486e5
lea eax, [esp + 0x164]
push eax
lea eax, [esp + 0x26c]
push eax
push 0x45f570
push esi
call edi
add esp, 0x3c
cmp dword [esp + 0x18], ebx
je 0x43c6c1
push dword [esp + 0x18]
call fcn.00445e06
pop ecx
push ebx
push ebx
push esi
push str.VistaTask_dir
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.vtask_dir
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.VistaRunner_dir
push dword [0x4775e4]
call fcn.0043fa75
push dword [0x472420]
push 0x45aabc
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_hwnd
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.vtask_hwnd
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.VistaRunner_hwnd
push dword [0x4775e4]
call fcn.0043fa75
push 0x102
push esi
push ebx
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 1
push esi
push ebx
call fcn.0040d429
push ebx
push ebx
push esi
push str.VistaTask_ver
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.vtask_ver
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.VistaRunner_ver
push dword [0x4775e4]
call fcn.0043fa75
push dword [0x472460]
mov ebp, 0x45aabc
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_output
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.vtask_output
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.VistaRunner_output
push dword [0x4775e4]
call fcn.0043fa75
push dword [0x472454]
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_list
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.vtask_list
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.VistaRunner_list
push dword [0x4775e4]
call fcn.0043fa75
push dword [0x472434]
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_status
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.vtask_status
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.VistaRunner_status
push dword [0x4775e4]
call fcn.0043fa75
push dword [0x472420]
call dword [sym.imp.USER32.dll_GetMenu]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.VistaTask_menu
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.vtask_menu
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.VistaRunner_menu
push dword [0x4775e4]
call fcn.0043fa75
mov ebp, 0x45f8e4
push 0x462808
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cfb3
push str.WINDIR
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43c958
push 0x102
push esi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43c911
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43c915
mov dword [esp + 0x10], ebx
push 0x4627f8
push dword [0x4775e4]
call fcn.0043f997
imul eax, eax, 0x104
add eax, dword [esp + 0x10]
push eax
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x4627ec
push eax
call fcn.0043fa75
push str.WINVER
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cabc
cmp esi, ebx
je 0x43ca54
mov ebp, dword [sym.imp.KERNEL32.dll_GetVersion]
call ebp
cmp al, 5
jne 0x43c999
call ebp
shr eax, 8
cmp al, 1
jne 0x43c999
mov eax, str.Windows_XP
jmp 0x43ca4c
call fcn.00413c82
test eax, eax
je 0x43c9ac
mov eax, str.Windows_Server_2008
jmp 0x43ca4c
call ebp
cmp al, 6
jne 0x43c9c5
call ebp
shr eax, 8
test al, al
jne 0x43c9c5
mov eax, str.Windows_Vista
jmp 0x43ca4c
call ebp
cmp al, 6
jne 0x43c9db
call ebp
shr eax, 8
cmp al, 1
jne 0x43c9db
mov eax, str.Windows_7
jmp 0x43ca4c
call ebp
cmp al, 5
jne 0x43c9f1
call ebp
shr eax, 8
cmp al, 2
jne 0x43c9f1
mov eax, str.Windows_2003
jmp 0x43ca4c
call ebp
cmp al, 5
jne 0x43ca07
call ebp
shr eax, 8
test al, al
jne 0x43ca07
mov eax, str.Windows_2000
jmp 0x43ca4c
call ebp
cmp al, 4
jne 0x43ca1d
call ebp
shr eax, 8
cmp al, 0x5a
jne 0x43ca1d
mov eax, str.Windows_ME
jmp 0x43ca4c
call ebp
cmp al, 4
jne 0x43ca33
call ebp
shr eax, 8
cmp al, 0xa
jne 0x43ca33
mov eax, str.Windows_98
jmp 0x43ca4c
call ebp
cmp al, 4
jne 0x43ca47
call ebp
shr eax, 8
test al, al
mov eax, str.Windows_NT
je 0x43ca4c
mov eax, str.Unknown
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43ca6a
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43ca6e
mov dword [esp + 0x10], ebx
push 0x4627dc
push dword [0x4775e4]
call fcn.0043f997
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x4627d0
push eax
call fcn.0043fa75
mov ebp, 0x45f8e4
push str.WINDOW_
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cb89
mov eax, dword [0x472468]
cmp eax, ebx
je 0x43cb89
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x43cb89
lea eax, [esp + 0x6c]
push eax
push dword [0x472468]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x6c]
inc eax
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.window_x
push dword [0x4775e4]
call fcn.0043fa75
mov eax, dword [esp + 0x70]
inc eax
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.window_y
push dword [0x4775e4]
call fcn.0043fa75
mov eax, dword [esp + 0x74]
sub eax, dword [esp + 0x6c]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.window_width
push dword [0x4775e4]
call fcn.0043fa75
mov eax, dword [esp + 0x78]
sub eax, dword [esp + 0x70]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.window_height
push dword [0x4775e4]
call fcn.0043fa75
push str.WINDOW
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43cbcf
push str.WIN_TITLE
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43cbcf
push str.WIN_TEXT
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cc6c
push esi
push 0x1ff
push 0xd
push dword [0x472468]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43cbf9
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43cbfd
mov dword [esp + 0x10], ebx
push 0x45aacc
push dword [0x4775e4]
call fcn.0043f997
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x462760
push eax
call fcn.0043fa75
push ebx
push ebx
push esi
push 0x462754
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push 0x462748
push dword [0x4775e4]
call fcn.0043fa75
push str.WIN_CLASS
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43cc9c
push str.WINCLASS
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cd2a
mov byte [esi], bl
mov eax, dword [0x472468]
cmp eax, ebx
je 0x43ccb4
push 0x103
push esi
push eax
call dword [sym.imp.USER32.dll_GetClassNameA]
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43ccca
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43ccce
mov dword [esp + 0x10], ebx
push 0x462724
push dword [0x4775e4]
call fcn.0043f997
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x462718
push eax
call fcn.0043fa75
push ebx
push ebx
push esi
push 0x46270c
push dword [0x4775e4]
call fcn.0043fa75
push str.WIN_ID
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43cd5a
push str.WINID
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43cdf0
mov byte [esi], bl
mov eax, dword [0x472468]
cmp eax, ebx
je 0x43cd7a
push 0xfffffffffffffff4
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
push 0x45aabc
push esi
call edi
add esp, 0xc
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43cd90
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43cd94
mov dword [esp + 0x10], ebx
push 0x462724
push dword [0x4775e4]
call fcn.0043f997
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x4626f0
push eax
call fcn.0043fa75
push ebx
push ebx
push esi
push 0x4626e8
push dword [0x4775e4]
call fcn.0043fa75
push str.WIN_DATA
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43ce20
push str.WINDATA
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43ceef
mov byte [esi], bl
mov eax, dword [0x472468]
cmp eax, ebx
je 0x43ce40
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
push 0x45aabc
push esi
call edi
add esp, 0xc
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43ce56
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43ce5a
mov dword [esp + 0x10], ebx
push 0x462724
push dword [0x4775e4]
call fcn.0043f997
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x4626c4
push eax
call fcn.0043fa75
push ebx
push ebx
push esi
push str.WIN_USERDATA
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push 0x4626a8
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.WINUSERDATA
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.USERDATA
push dword [0x4775e4]
call fcn.0043fa75
call fcn.004156d7
push eax
mov ebp, 0x45aac0
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.weeknum
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x34]
push esi
push 2
push eax
call fcn.00416a2e
add esp, 0xc
push ebx
push ebx
push esi
push str.weekday_abbr
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.weekdayabbr
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x34]
push esi
push 1
push eax
call fcn.00416a2e
add esp, 0xc
push ebx
push ebx
push esi
push str.weekday
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x34]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.weekday1
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x34]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.weekday2
push dword [0x4775e4]
call fcn.0043fa75
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x13c]
push eax
mov dword [esp + 0x24], 0xff
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
push ebx
push ebx
lea eax, [esp + 0x140]
push eax
push str.username
push dword [0x4775e4]
call fcn.0043fa75
push str.HWND
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43d072
push dword [0x472468]
push 0x45aabc
push esi
call edi
mov eax, dword [0x4775e4]
add esp, 0xc
cmp eax, ebx
je 0x43d025
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x10], eax
jmp 0x43d029
mov dword [esp + 0x10], ebx
push 0x45d958
push dword [0x4775e4]
call fcn.0043f997
push esi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
imul ebp, eax
add ebp, dword [esp + 0x10]
push ebp
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x462620
push eax
call fcn.0043fa75
push str.DESKTOP
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43d0f4
push esi
push 1
call fcn.0040d2df
push 2
push 0x45a954
push esi
call fcn.0043fbb2
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43d0b1
push eax
call fcn.00446205
pop ecx
mov ebp, eax
jmp 0x43d0b3
xor ebp, ebp
push 0x46260c
push dword [0x4775e4]
call fcn.0043f997
imul eax, eax, 0x104
add eax, ebp
push eax
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push 0x462600
push eax
call fcn.0043fa75
movzx eax, word [esp + 0x30]
sub eax, 0x7d0
push eax
mov ebp, str._02d
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.year2
push dword [0x4775e4]
call fcn.0043fa75
mov al, byte [esi + 1]
push ebx
push ebx
push esi
push str.year1
mov byte [esi], al
mov byte [esi + 1], bl
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x30]
push eax
push str._04d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.year
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.year4
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x36]
push eax
push ebp
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.day
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.day2
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x36]
push eax
push 0x45aac0
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.day1
push dword [0x4775e4]
call fcn.0043fa75
mov cx, word [esp + 0x32]
xor eax, eax
inc eax
cmp ax, cx
sbb eax, eax
and eax, 0x1f
mov dword [esp + 0x84], eax
cmp cx, 2
jbe 0x43d229
movzx eax, word [esp + 0x30]
mov edx, eax
and edx, 0x80000003
jns 0x43d1f8
dec edx
or edx, 0xfffffffc
inc edx
jne 0x43d21f
push 0x64
cdq
pop ebp
idiv ebp
test edx, edx
jne 0x43d215
movzx eax, word [esp + 0x30]
cdq
mov ebp, 0x190
idiv ebp
test edx, edx
jne 0x43d21f
mov dword [esp + 0x18], 0x1d
jmp 0x43d22d
mov dword [esp + 0x18], 0x1c
jmp 0x43d22d
mov dword [esp + 0x18], ebx
push 3
pop eax
push 4
pop edx
cmp ax, cx
sbb eax, eax
push 5
pop ebp
and eax, 0x1f
cmp dx, cx
sbb edx, edx
and edx, 0x1e
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1f
mov dword [esp + 0x80], ebp
push 6
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1e
mov dword [esp + 0x7c], ebp
push 7
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1f
mov dword [esp + 0x88], ebp
push 8
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1f
mov dword [esp + 0x24], ebp
push 9
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1e
mov dword [esp + 0x20], ebp
push 0xa
pop ebp
cmp bp, cx
sbb ebp, ebp
and ebp, 0x1f
mov dword [esp + 0x10], ebp
mov bp, 0xb
cmp bp, cx
movzx ebp, word [esp + 0x36]
sbb ecx, ecx
and ecx, 0x1e
add ebp, ecx
add ebp, dword [esp + 0x10]
add ebp, dword [esp + 0x20]
add ebp, dword [esp + 0x24]
add ebp, dword [esp + 0x88]
add ebp, dword [esp + 0x7c]
add ebp, dword [esp + 0x80]
add ebp, edx
add ebp, eax
add ebp, dword [esp + 0x18]
add ebp, dword [esp + 0x84]
push ebp
push 0x45aac0
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.dayofyear
push dword [0x4775e4]
call fcn.0043fa75
movzx eax, word [esp + 0x38]
push eax
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.hour24
push dword [0x4775e4]
call fcn.0043fa75
movzx ebp, word [esp + 0x38]
cmp ebp, 1
jge 0x43d335
add ebp, 0xc
jmp 0x43d33d
cmp ebp, 0xc
jle 0x43d33d
sub ebp, 0xc
push ebp
push str._02d
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.hour2
push dword [0x4775e4]
call fcn.0043fa75
push ebp
push 0x45aac0
push esi
call edi
add esp, 0xc
push ebx
push ebx
push esi
push str.hour
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.hour12
push dword [0x4775e4]
call fcn.0043fa75
push ebx
push ebx
push esi
push str.hour1
push dword [0x4775e4]
call fcn.0043fa75
cmp word [esp + 0x38], 0xc
mov eax, 0x45cd34
jb 0x43d3b3
mov eax, 0x45cd48
push ebx
push ebx
push eax
push str.AMPM
push dword [0x4775e4]
call fcn.0043fa75
push 0x3f
push esi
push ebx
push ebx
push 0x40000000
mov edi, 0x400
push edi
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcatA]
push str.__r_n
push esi
call ebp
push 0x3f
lea eax, [esp + 0x13c]
push eax
push ebx
push ebx
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
lea eax, [esp + 0x138]
push eax
push esi
call ebp
push ebx
push ebx
push esi
push str.NOW
push dword [0x4775e4]
call fcn.0043fa75
cmp dword [esp + 0x2c], ebx
je 0x43d44b
mov eax, dword [0x4775e4]
xor edx, edx
cmp eax, ebx
je 0x43d846
add eax, edx
mov cl, byte [eax]
cmp cl, bl
je 0x43d44b
cmp cl, 0xff
jne 0x43d441
mov byte [eax], 0x25
mov eax, dword [0x4775e4]
inc edx
cmp eax, ebx
jne 0x43d431
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43d846
cmp byte [eax], bl
je 0x43d846
push dword [esp + 0x40]
call fcn.0043f6da
cmp al, 0x3d
jne 0x43d846
push str.SUM_
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43d846
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43d4a9
push 0x45d170
push eax
call fcn.00448020
neg eax
pop ecx
sbb eax, eax
pop ecx
neg eax
jmp 0x43d4ab
xor eax, eax
cmp eax, ebx
je 0x43d846
cmp esi, ebx
je 0x43d4c0
push esi
call fcn.00446205
pop ecx
jmp 0x43d4c2
xor eax, eax
mov ecx, 0x100000
cmp eax, ecx
jbe 0x43d4dc
cmp esi, ebx
je 0x43d4d8
push esi
call fcn.00446205
pop ecx
jmp 0x43d4de
xor eax, eax
jmp 0x43d4de
mov eax, ecx
push eax
push esi
call fcn.00401000
mov esi, eax
mov byte [esi], bl
push 2
push dword [0x4775e4]
call fcn.00445cc0
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 0x10
test eax, eax
je 0x43d5b4
push dword [0x4775e4]
mov dword [esp + 0x30], ebx
xor edi, edi
call ebp
mov dword [esp + 0x44], eax
mov eax, dword [0x4775e4]
cmp byte [eax], bl
je 0x43d5b9
mov dl, bl
cmp dl, bl
jne 0x43d53a
cmp byte [eax + edi], 2
jne 0x43d5a8
mov dl, 1
mov dword [esp + 0x2c], edi
jmp 0x43d5a8
cmp dl, 1
jne 0x43d55f
mov cl, byte [eax + edi]
cmp cl, 2
je 0x43d55f
cmp cl, 0x30
jl 0x43d551
cmp cl, 0x39
jle 0x43d55f
cmp cl, 0x2e
je 0x43d55f
cmp cl, 0x2d
je 0x43d55f
mov dl, 2
jmp 0x43d5a8
cmp byte [eax + edi], 2
jne 0x43d5a8
cmp dl, 1
jne 0x43d5a6
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x44]
add eax, ecx
sub edx, ecx
push edx
lea ecx, [eax + 1]
push ecx
push eax
call fcn.00446570
mov ecx, dword [esp + 0x50]
mov eax, dword [0x4775e4]
sub ecx, edi
add eax, edi
push ecx
push eax
dec eax
push eax
call fcn.00446570
sub dword [esp + 0x5c], 2
mov eax, dword [0x4775e4]
add esp, 0x18
dec edi
dec edi
xor dl, dl
inc edi
cmp byte [eax + edi], bl
jne 0x43d528
jmp 0x43d5b9
mov eax, dword [0x4775e4]
cmp byte [0x476258], 2
mov edi, 0xe5
jb 0x43d6cb
push str.____Pre_Formula:
lea eax, [esp + 0x13c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [0x4775e4], ebx
je 0x43d689
lea eax, [esp + 0x138]
push eax
call ebp
push dword [0x4775e4]
mov dword [esp + 0x1c], edi
sub dword [esp + 0x1c], eax
call ebp
inc eax
cmp dword [esp + 0x18], eax
jge 0x43d61b
lea eax, [esp + 0x138]
push eax
call ebp
mov ecx, edi
sub ecx, eax
jmp 0x43d626
push dword [0x4775e4]
call ebp
mov ecx, eax
inc ecx
cmp ecx, ebx
jge 0x43d62e
xor ecx, ecx
jmp 0x43d66a
lea eax, [esp + 0x138]
push eax
call ebp
push dword [0x4775e4]
mov dword [esp + 0x1c], edi
sub dword [esp + 0x1c], eax
call ebp
inc eax
cmp dword [esp + 0x18], eax
jge 0x43d65f
lea eax, [esp + 0x138]
push eax
call ebp
mov ecx, edi
sub ecx, eax
jmp 0x43d66a
push dword [0x4775e4]
call ebp
mov ecx, eax
inc ecx
push ecx
push dword [0x4775e4]
lea eax, [esp + 0x140]
push eax
call ebp
lea eax, [esp + eax + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 4
lea eax, [esp + 0x220]
push 0x45e2fc
push eax
call fcn.00445ea0
add esp, 0xc
lea eax, [esp + 0x138]
mov cl, byte [eax]
cmp cl, bl
je 0x43d6b8
cmp cl, 0x25
jne 0x43d6b5
mov byte [eax], 0xb0
inc eax
jmp 0x43d6a7
lea eax, [esp + 0x138]
push eax
call fcn.0042036e
mov eax, dword [0x4775e4]
pop ecx
push 0x100000
push esi
push eax
call fcn.00418a96
fstp qword [esp + 0x4c]
add esp, 0xc
cmp byte [0x476258], 2
jb 0x43d7fb
push str.____Post_Formula:
lea eax, [esp + 0x13c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [esi], bl
jne 0x43d738
fld qword [esp + 0x40]
push 0xf
push ecx
push ecx
lea eax, [esp + 0x2c8]
fstp qword [esp]
push eax
call fcn.00416b8a
add esp, 0x10
lea eax, [esp + 0x2bc]
push eax
lea eax, [esp + 0x13c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x43d7be
lea eax, [esp + 0x138]
push eax
call ebp
mov dword [esp + 0x18], edi
sub dword [esp + 0x18], eax
push esi
call ebp
inc eax
cmp dword [esp + 0x18], eax
jge 0x43d764
lea eax, [esp + 0x138]
push eax
call ebp
mov ecx, edi
sub ecx, eax
jmp 0x43d76a
push esi
call ebp
mov ecx, eax
inc ecx
cmp ecx, ebx
jge 0x43d772
xor ecx, ecx
jmp 0x43d7a4
lea eax, [esp + 0x138]
push eax
call ebp
mov dword [esp + 0x18], edi
sub dword [esp + 0x18], eax
push esi
call ebp
inc eax
cmp dword [esp + 0x18], eax
jge 0x43d79e
lea eax, [esp + 0x138]
push eax
call ebp
mov ecx, edi
sub ecx, eax
jmp 0x43d7a4
push esi
call ebp
mov ecx, eax
inc ecx
push ecx
push esi
lea eax, [esp + 0x140]
push eax
call ebp
lea eax, [esp + eax + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 4
lea eax, [esp + 0x220]
push 0x45e2fc
push eax
call fcn.00445ea0
add esp, 0xc
lea eax, [esp + 0x138]
mov cl, byte [eax]
cmp cl, bl
je 0x43d7ed
cmp cl, 0x25
jne 0x43d7ea
mov byte [eax], 0xb0
inc eax
jmp 0x43d7dc
lea eax, [esp + 0x138]
push eax
call fcn.0042036e
pop ecx
push esi
call ebp
cmp eax, 0xff0
jl 0x43d810
push str.____WARNING___Formulas_in_vTask_are_limited_to_4k__4096_bytes_
call fcn.0042036e
pop ecx
cmp byte [esi], bl
je 0x43d82b
cmp dword [0x4775e4], ebx
je 0x43d84c
push esi
push dword [0x4775e4]
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x43d84c
fld qword [esp + 0x40]
push 0xf
push ecx
push ecx
fstp qword [esp]
push dword [0x4775e4]
call fcn.00416b8a
add esp, 0x10
jmp 0x43d84c
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.CLIPBOARD
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
jne 0x43d87c
push str._CLIPBOARD
push dword [0x4775e4]
call fcn.004010ff
pop ecx
pop ecx
test eax, eax
je 0x43d931
push ebx
call fcn.00440693
mov ecx, eax
mov eax, 0x100
add ecx, eax
cmp ecx, eax
jle 0x43d89f
push ebx
call fcn.00440693
mov edi, eax
add edi, 0x100
jmp 0x43d8a1
mov edi, eax
cmp esi, ebx
je 0x43d8ae
push esi
call fcn.00446205
pop ecx
jmp 0x43d8b0
xor eax, eax
lea eax, [eax + edi + 0x1000]
push eax
push esi
call fcn.00401000
mov esi, eax
pop ecx
pop ecx
cmp esi, ebx
je 0x43db52
push esi
call fcn.00440693
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43d8e6
push eax
call fcn.00446205
pop ecx
mov dword [esp + 0x2c], eax
jmp 0x43d8ea
mov dword [esp + 0x2c], ebx
push 0x45aab0
push dword [0x4775e4]
call fcn.0043f997
imul eax, edi
mov ecx, dword [esp + 0x2c]
lea eax, [eax + ecx + 0x1000]
push eax
push dword [0x4775e4]
call fcn.00401000
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db52
push ebx
push ebx
push esi
push str.CLIPBOARD
push eax
call fcn.0043fa75
mov eax, dword [0x4775e4]
mov dword [esp + 0x1c], ebx
cmp eax, ebx
je 0x43d94d
push 0x45f7b8
push eax
call fcn.00445d80
pop ecx
pop ecx
jmp 0x43d94f
xor eax, eax
cmp eax, ebx
je 0x43daa7
push 0x7d
push dword [0x4775e4]
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
je 0x43daa7
cmp esi, ebx
je 0x43d979
push esi
call fcn.00445e06
pop ecx
mov eax, dword [0x4775e4]
cmp eax, ebx
je 0x43d98b
push eax
call fcn.00446205
pop ecx
jmp 0x43d98d
xor eax, eax
mov ecx, 0x1000
cmp eax, ecx
ja 0x43d998
mov eax, ecx
push 1
push eax
call fcn.004462a8
pop ecx
pop ecx
mov ecx, dword [0x4775e4]
xor edi, edi
mov dword [esp + 0x1c], ebx
mov esi, eax
cmp byte [ecx], bl
je 0x43da77
mov eax, dword [esp + 0x310]
and eax, 2
mov dword [esp + 0x40], eax
cmp dword [esp + 0x40], ebx
je 0x43d9ea
cmp byte [ecx + edi], 0x7b
jne 0x43d9ea
cmp byte [ecx + edi + 1], 0x5c
jne 0x43d9ea
cmp byte [ecx + edi + 4], 0x7d
jne 0x43d9ea
mov eax, dword [esp + 0x1c]
mov byte [esi + eax], 0x7b
jmp 0x43da63
add ecx, edi
mov al, byte [ecx]
cmp al, 0x7b
jne 0x43da5c
cmp byte [ecx + 1], 0x5c
jne 0x43da5c
lea edx, [ecx + 2]
mov al, byte [edx]
cmp al, 0x30
jl 0x43da05
cmp al, 0x39
jle 0x43da15
cmp al, 0x41
jl 0x43da0d
cmp al, 0x46
jle 0x43da15
cmp al, 0x61
jl 0x43da5a
cmp al, 0x66
jg 0x43da5a
mov al, byte [ecx + 3]
cmp al, 0x30
jl 0x43da20
cmp al, 0x39
jle 0x43da30
cmp al, 0x41
jl 0x43da28
cmp al, 0x46
jle 0x43da30
cmp al, 0x61
jl 0x43da5a
cmp al, 0x66
jg 0x43da5a
cmp byte [ecx + 4], 0x7d
jne 0x43da5a
push 3
push edx
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [esp + 0x138]
push eax
call fcn.00414836
pop ecx
add edi, 4
jmp 0x43da5c
mov al, byte [ecx]
mov ecx, dword [esp + 0x1c]
mov byte [esi + ecx], al
inc dword [esp + 0x1c]
mov ecx, dword [0x4775e4]
inc edi
cmp byte [ecx + edi], bl
jne 0x43d9c6
cmp ecx, ebx
je 0x43da8a
push ecx
call fcn.00446205
pop ecx
mov ecx, dword [0x4775e4]
jmp 0x43da8c
xor eax, eax
push eax
push ebx
push ecx
call fcn.004464f0
push dword [esp + 0x28]
push esi
push dword [0x4775e4]
call fcn.00445ea0
add esp, 0x18
cmp esi, ebx
je 0x43dab2
push esi
call fcn.00445e06
pop ecx
lea eax, [esp + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea eax, [esp + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov esi, dword [esp + 0x60]
cmp esi, ebx
je 0x43db5d
cmp dword [esp + 0x1c], ebx
je 0x43daec
push 4
lea eax, [esp + 0x20]
push eax
push esi
call fcn.00445ea0
add esp, 0xc
jmp 0x43db5d
push dword [0x4775e4]
call ebp
mov dword [esi], eax
jmp 0x43db5d
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebp
call esi
mov ecx, eax
mov edi, 0x400
add ecx, edi
mov eax, 0x1000
cmp ecx, eax
jle 0x43db18
push ebp
call esi
add eax, edi
push 1
push eax
call fcn.004462a8
pop ecx
pop ecx
mov dword [0x4775e4], eax
cmp eax, ebx
je 0x43db45
cmp ebp, ebx
je 0x43db3e
cmp byte [ebp], bl
je 0x43db3e
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x43db40
mov byte [eax], bl
mov eax, dword [0x4775e4]
mov edi, dword [esp + 0x60]
cmp edi, ebx
je 0x43db52
push eax
call esi
mov dword [edi], eax
lea eax, [esp + 0x48]
push eax
call fcn.00438d65
pop ecx
mov ecx, dword [esp + 0x2fc]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004464bf
add esp, 0x2f0
ret 0x14