Function at 0x4016e8
Capabilities:
Copy file
Create shortcut via ishelllink
Delete file
Delete registry value
Enumerate files on windows
Get file attributes
Move file
Query environment variable
Query or enumerate registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Set current directory
Set file attributes
Set registry value

Disassembly:
push ebp
mov ecx, 7
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x284]
push ebx
sub esp, 0x2bc
mov esi, dword [ebp + 8]
mov eax, dword [0x42ba4c]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x2a4], eax
mov ebx, dword [ebp - 0x280]
mov esi, dword [ebp - 0x27c]
mov edi, dword [ebp - 0x284]
mov eax, ebx
shl eax, 0xb
add eax, dword [0x40c974]
mov dword [ebp - 0x29c], eax
mov eax, esi
shl eax, 0xb
add eax, dword [0x40c974]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x280]
mov dword [0x4150fc], eax
lea eax, [edi - 2]
cmp eax, 0x43
ja case.0x40175a.66
jmp dword [eax*4 + 0x40c004]
mov dword [esp + 4], 0
mov dword [esp], ebx
jmp 0x401d6c
inc dword [0x42d29c]
cmp dword [ebp - 0x2a4], 0
mov ebx, 0x7fffffff
je case.0x40175a.2
mov dword [esp], 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push esi
jmp case.0x40175a.2
mov dword [esp], ebx
call fcn.004016a5
push edx
dec eax
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00403bf8
mov ebx, eax
push ecx
push ecx
jmp case.0x40175a.2
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.0040761e
jmp 0x402693
xor eax, eax
call fcn.0040148a
mov edx, 1
test eax, eax
cmovle eax, edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4017ff
mov eax, dword [ebp - 0x2a4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push eax
jmp case.0x40175a.66
mov edi, dword [ebp - 0x278]
test edi, edi
jne 0x401839
mov eax, dword [ebx*4 + 0x415020]
mov dword [ebx*4 + 0x415060], eax
mov eax, 1
call fcn.0040148a
mov edx, dword [ebp - 0x280]
mov dword [edx*4 + 0x415020], eax
jmp 0x403be4
mov eax, dword [ebx*4 + 0x415060]
mov dword [ebx*4 + 0x415020], eax
jmp case.0x40175a.66
mov edx, dword [ebp - 0x278]
xor ecx, ecx
mov eax, dword [edx*4 + 0x415020]
test eax, eax
sete cl
and eax, dword [ebp - 0x274]
mov dword [edx*4 + 0x415020], eax
mov ebx, dword [ebp + ecx*4 - 0x280]
jmp case.0x40175a.2
mov eax, dword [esi*4 + 0x415020]
jmp 0x402832
mov eax, dword [0x42d288]
test eax, eax
je 0x40189d
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push eax
push eax
mov eax, dword [0x42d290]
test eax, eax
je case.0x40175a.66
mov edx, dword [ebp - 0x280]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x402693
mov dword [esp], 0xfffffff0
call fcn.00401434
mov edx, dword [ebp - 0x27c]
push edi
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
jmp 0x401b9e
mov dword [esp], 0xfffffff0
xor edi, edi
call fcn.00401434
push ebx
mov ebx, eax
mov dword [esp], eax
call fcn.00407f9c
push esi
test eax, eax
je 0x40198b
mov dword [esp + 4], 0x5c
mov dword [esp], eax
call fcn.00407efd
mov esi, eax
push ecx
push ecx
mov ax, word [eax]
mov word [esi], 0
mov word [ebp - 0x29c], ax
test ax, ax
jne 0x40194d
cmp dword [ebp - 0x278], 0
je 0x40194d
call fcn.00409200
test eax, eax
je 0x40194d
mov dword [esp], ebx
call fcn.00407cfc
jmp 0x401955
mov dword [esp], ebx
call fcn.00407d90
push edx
test eax, eax
je 0x401977
cmp eax, 0xb7
je 0x401964
inc edi
jmp 0x401977
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
and eax, 0x10
push ecx
cmp eax, 1
adc edi, 0
mov ecx, dword [ebp - 0x29c]
lea eax, [esi + 2]
mov word [esi], cx
test cx, cx
jmp 0x401903
cmp dword [ebp - 0x27c], 0
je 0x4019ce
mov dword [esp], 0xffffffe6
call fcn.004016c9
mov eax, dword [0x40c974]
push esi
add eax, 0xb000
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.0040866c
push eax
push eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
cmp eax, 1
push edx
adc edi, 0
jmp 0x403be4
mov dword [esp], 0xfffffff5
jmp 0x40390b
mov dword [esp], 0
call fcn.00401434
push ecx
mov dword [esp], eax
call fcn.00408db8
jmp 0x4023f5
mov dword [esp], 0xffffffd0
call fcn.00401434
push ecx
mov ebx, eax
mov dword [esp], 0xffffffdf
call fcn.00401434
push esi
mov esi, eax
mov dword [esp], 0x13
call fcn.00401434
push edi
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov edi, eax
push edx
push edx
test eax, eax
je 0x401a40
mov dword [esp], 0xffffffe3
jmp 0x402cdf
cmp dword [ebp - 0x278], 0
je 0x403b1a
mov dword [esp], ebx
call fcn.00408db8
push edx
test eax, eax
je 0x403b1a
mov dword [esp], ebx
mov dword [esp + 4], esi
call fcn.00408d73
push ebx
push ebx
mov dword [esp], 0xffffffe4
jmp 0x40390b
mov dword [esp], 0
call fcn.00401434
push ecx
mov ebx, eax
lea eax, [ebp - 0x268]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 4], 0x400
mov dword [esp + 8], eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
test eax, eax
je 0x401aeb
mov eax, dword [ebp - 0x268]
xor edi, edi
cmp eax, ebx
jbe 0x401afb
cmp word [eax], 0
je 0x401afb
mov dword [esp], ebx
call fcn.00408db8
push edx
test eax, eax
je 0x401aeb
add eax, 0x2c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x268]
mov dword [esp], eax
call fcn.0040866c
push esi
push esi
jmp 0x401afb
mov eax, dword [ebp - 0x2a0]
mov edi, 1
mov word [eax], 0
cmp dword [ebp - 0x278], 0
jne 0x403be4
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 8], 0x400
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
sub esp, 0xc
jmp 0x403be4
mov dword [esp], 0xffffffff
xor edi, edi
call fcn.00401434
mov ecx, dword [ebp - 0x29c]
lea edx, [ebp - 0x268]
push ebx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], 0x400
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
sub esp, 0x18
test eax, eax
jne 0x403be4
jmp 0x4036f4
mov dword [esp], 0xffffffef
call fcn.00401434
push ecx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004081b3
push edx
push edx
jmp 0x40337a
mov dword [esp], 0x31
call fcn.00401434
push ebx
mov ebx, dword [ebp - 0x280]
mov esi, eax
and ebx, 7
mov dword [esp], eax
call fcn.00407f69
push edi
test eax, eax
je 0x401bdc
mov dword [esp + 4], esi
mov dword [esp], 0x415100
call fcn.0040866c
jmp 0x401c0d
mov eax, dword [0x40c974]
mov dword [esp], 0x415100
add eax, 0xb000
mov dword [esp + 4], eax
call fcn.0040866c
push edx
push edx
mov dword [esp], eax
call fcn.004086a0
push ecx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.KERNEL32.dll_lstrcatW
push edi
push edi
mov dword [esp], 0x415100
call fcn.00408734
push eax
cmp ebx, 2
jle 0x401c5d
mov dword [esp], 0x415100
call fcn.00408db8
xor edx, edx
push ecx
test eax, eax
je 0x401c4e
lea edx, [ebp - 0x274]
add eax, 0x14
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
push edx
push edx
mov edx, eax
sub ebx, 3
or ebx, 0x80000000
test ebx, edx
je 0x401c7e
jmp 0x401c61
test ebx, ebx
jne 0x401c72
mov dword [esp], 0x415100
xor ebx, ebx
call fcn.004080b8
push edi
jmp 0x401c77
cmp ebx, 1
je 0x401c7e
mov eax, 2
jmp 0x401c88
mov ebx, 1
mov eax, 1
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40000000
mov dword [esp], 0x415100
call fcn.0040815b
sub esp, 0xc
mov edi, eax
cmp eax, 0xffffffff
jne 0x401d7d
test ebx, ebx
je 0x401ccc
mov dword [esp + 4], esi
mov dword [esp], 0xffffffe2
call fcn.0040761e
cmp ebx, 2
push esi
push esi
jmp 0x403608
mov eax, dword [0x40c974]
mov dword [esp], 0x416100
mov dword [esp + 4], eax
call fcn.0040866c
push eax
push eax
mov eax, dword [0x40c974]
mov dword [esp + 4], 0x415100
mov dword [esp], eax
call fcn.0040866c
push eax
push eax
mov eax, dword [ebp - 0x26c]
mov dword [esp], 0x415900
mov dword [esp + 4], eax
call fcn.00408811
push eax
push eax
mov eax, dword [0x40c974]
mov dword [esp + 4], 0x416100
mov dword [esp], eax
call fcn.0040866c
mov eax, dword [ebp - 0x280]
push edx
push edx
sar eax, 3
mov dword [esp + 4], eax
mov dword [esp], 0x415900
call fcn.00407e91
push ecx
push ecx
cmp eax, 4
je 0x401c61
cmp eax, 5
jne 0x401d5d
inc dword [0x415028]
jmp case.0x40175a.2
mov dword [esp + 4], 0x415100
mov dword [esp], 0xfffffffa
call fcn.0040761e
mov ebx, 0x7fffffff
push eax
push eax
jmp case.0x40175a.2
mov dword [esp + 4], esi
mov dword [esp], 0xffffffea
call fcn.0040761e
inc dword [0x415054]
push eax
push eax
mov eax, dword [ebp - 0x278]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.004040e4
dec dword [0x415054]
mov ebx, eax
mov eax, dword [ebp - 0x274]
and eax, dword [ebp - 0x270]
sub esp, 0x10
inc eax
je 0x401df3
lea eax, [ebp - 0x274]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
sub esp, 0x10
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
test ebx, ebx
jns case.0x40175a.66
cmp ebx, 0xfffffffe
jne 0x401e32
mov dword [esp + 4], 0xffffffe9
mov dword [esp], 0x415100
call fcn.00408811
push ebx
push ebx
mov dword [esp + 4], esi
mov dword [esp], 0x415100
call sub.KERNEL32.dll_lstrcatW
jmp 0x401e46
mov dword [esp + 4], 0xffffffee
mov dword [esp], 0x415100
call fcn.00408811
push ecx
push ecx
mov dword [esp + 4], 0x200010
mov dword [esp], 0x415100
jmp 0x4021e2
mov dword [esp], 0
jmp 0x401eb8
mov dword [esp], 0x31
call fcn.00401434
mov edx, dword [ebp - 0x280]
push edi
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00407e91
push edx
push edx
test eax, eax
je 0x403b1a
cmp dword [ebp - 0x278], eax
je 0x40208d
cmp dword [ebp - 0x270], eax
jne case.0x40175a.66
mov ebx, dword [ebp - 0x26c]
jmp case.0x40175a.2
mov dword [esp], 0xfffffff0
call fcn.00401434
mov edx, dword [ebp - 0x27c]
push esi
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00408ea4
jmp 0x402693
mov dword [esp], 1
call fcn.00401434
push ebx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
jmp 0x402658
mov eax, 2
call fcn.0040148a
mov ebx, eax
mov eax, 3
mov edi, edx
call fcn.0040148a
mov dword [esp], 1
mov esi, eax
call fcn.00401434
push edx
mov dword [ebp - 0x2a0], eax
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
test edi, edi
cmove ebx, eax
push ecx
mov ecx, dword [ebp - 0x29c]
mov word [ecx], 0
test ebx, ebx
je case.0x40175a.66
test esi, esi
mov edx, dword [ebp - 0x2a0]
jns 0x401f4f
add esi, eax
js case.0x40175a.66
cmp eax, esi
cmovg eax, esi
add eax, eax
add eax, edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.0040866c
push edi
push edi
test ebx, ebx
jns 0x401f83
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
push esi
add ebx, eax
js 0x401f91
cmp ebx, 0x3ff
jg case.0x40175a.66
jmp 0x401f93
xor ebx, ebx
mov eax, dword [ebp - 0x29c]
mov word [eax + ebx*2], 0
jmp case.0x40175a.66
mov dword [esp], 0x20
call fcn.00401434
push edx
mov ebx, eax
mov dword [esp], 0x31
call fcn.00401434
cmp dword [ebp - 0x270], 0
push ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
jne 0x401fd8
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
jmp 0x401fde
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push edi
push edi
test eax, eax
jne 0x40208d
jmp 0x402405
mov dword [esp], 1
call fcn.00401434
push esi
mov ebx, eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], 0x400
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
sub esp, 0xc
test eax, eax
jne 0x402030
mov eax, dword [ebp - 0x29c]
mov edi, 1
mov word [eax], 0
jmp 0x402058
cmp dword [ebp - 0x278], 0
jne 0x40203d
xor edi, edi
jmp 0x402058
mov eax, dword [ebp - 0x29c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push ebx
push ebx
test eax, eax
je 0x40201e
jmp 0x402039
mov eax, dword [ebp - 0x29c]
mov word [eax + 0x7fe], 0
jmp 0x403be4
xor eax, eax
mov esi, dword [ebp - 0x26c]
call fcn.0040148a
mov ebx, eax
mov eax, 1
call fcn.0040148a
test esi, esi
jne 0x4020a9
cmp ebx, eax
jge 0x402098
mov ebx, dword [ebp - 0x274]
jmp case.0x40175a.2
jle 0x402405
mov ebx, dword [ebp - 0x270]
jmp case.0x40175a.2
cmp ebx, eax
jb 0x40208d
jbe 0x402405
jmp 0x40209e
mov eax, 1
call fcn.0040148a
mov ebx, eax
mov eax, 2
call fcn.0040148a
mov edi, dword [ebp - 0x274]
mov ecx, eax
mov esi, eax
cmp edi, 0xd
ja case.default.0x4020de
jmp dword [edi*4 + 0x40c114]
lea ecx, [eax + ebx]
jmp 0x402162
mov ecx, ebx
sub ecx, eax
jmp 0x402160
mov ecx, eax
imul ecx, ebx
jmp 0x402160
mov edi, 1
test eax, eax
je 0x402162
mov eax, ebx
cdq
idiv ecx
mov ecx, eax
jmp 0x402160
mov ecx, eax
or ecx, ebx
jmp 0x402160
mov ecx, eax
and ecx, ebx
jmp 0x402160
mov ecx, eax
xor ecx, ebx
jmp 0x402160
test ebx, ebx
sete cl
jmp 0x402127
or ebx, eax
setne cl
movzx ecx, cl
jmp 0x402160
test ebx, ebx
setne cl
xor edx, edx
test esi, esi
setne dl
and ecx, edx
jmp 0x402160
mov edi, 1
test eax, eax
je 0x402162
mov eax, ebx
cdq
idiv ecx
mov ecx, edx
jmp 0x402160
mov ecx, eax
shl ebx, cl
jmp case.default.0x4020de
mov ecx, eax
sar ebx, cl
jmp case.default.0x4020de
mov ecx, eax
shr ebx, cl
mov ecx, ebx
xor edi, edi
mov dword [esp + 4], ecx
jmp 0x4023da
mov dword [esp], 1
call fcn.00401434
push ecx
mov ebx, eax
mov eax, 2
call fcn.0040148a
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_wsprintfW]
jmp case.0x40175a.66
mov edi, dword [ebp - 0x278]
mov ebx, dword [0x417900]
mov ecx, edi
test edi, edi
je 0x40222c
dec ecx
test ebx, ebx
je 0x4021c1
mov ebx, dword [ebx]
test ecx, ecx
jne 0x4021b2
test ebx, ebx
jne 0x4021ec
mov dword [esp + 4], 0xffffffe8
mov dword [esp], 0
call fcn.00408811
push edx
push edx
mov dword [esp + 4], 0x200010
mov dword [esp], eax
call fcn.00407e91
jmp 0x401d71
add ebx, 4
mov dword [esp], 0x415100
mov dword [esp + 4], ebx
call fcn.0040866c
push eax
push eax
mov eax, dword [0x417900]
add eax, 4
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0040866c
push eax
push eax
mov eax, dword [0x417900]
add eax, 4
mov dword [esp + 4], 0x415100
jmp 0x403723
test esi, esi
je 0x40225b
test ebx, ebx
je 0x403b1a
lea eax, [ebx + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.0040866c
push eax
push eax
mov eax, dword [ebx]
mov dword [0x417900], eax
jmp 0x402982
mov dword [esp + 4], 0x804
mov dword [esp], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push esi
mov ebx, eax
mov eax, dword [ebp - 0x280]
push esi
mov dword [esp + 4], eax
lea eax, [ebx + 4]
mov dword [esp], eax
call fcn.00408811
push eax
push eax
mov eax, dword [0x417900]
mov dword [ebx], eax
mov dword [0x417900], ebx
jmp 0x403be4
mov eax, 3
call fcn.0040148a
mov ebx, eax
mov eax, 4
call fcn.0040148a
mov esi, eax
test byte [ebp - 0x26c], 1
je 0x4022cd
mov dword [esp], 0x33
call fcn.00401434
push ebx
mov ebx, eax
test byte [ebp - 0x26c], 2
je 0x4022e5
mov dword [esp], 0x44
call fcn.00401434
push ecx
mov esi, eax
cmp dword [ebp - 0x284], 0x21
jne 0x402377
mov eax, 1
call fcn.0040148a
mov dword [ebp - 0x2a0], eax
mov eax, 2
call fcn.0040148a
mov edi, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x2a0]
sar edi, 2
je 0x402357
lea edx, [ebp - 0x268]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
sub esp, 0x1c
test eax, eax
sete al
movzx eax, al
mov edi, eax
jmp 0x4023c3
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x268], eax
sub esp, 0x10
jmp 0x4023c3
mov dword [esp], 1
call fcn.00401434
push edi
mov edi, eax
mov dword [esp], 0x12
call fcn.00401434
push edx
cmp word [eax], 0
jne 0x40239b
xor eax, eax
cmp word [edi], 0
jne 0x4023a3
xor edi, edi
mov dword [esp + 8], edi
xor edi, edi
mov dword [esp + 0xc], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [ebp - 0x268], eax
sub esp, 0x10
cmp dword [ebp - 0x280], 0
js 0x403be4
mov eax, dword [ebp - 0x268]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
jmp 0x403a27
xor eax, eax
call fcn.0040148a
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsWindow]
push esi
test eax, eax
je 0x402405
mov ebx, dword [ebp - 0x27c]
jmp case.0x40175a.2
mov ebx, dword [ebp - 0x278]
jmp case.0x40175a.2
mov eax, 2
call fcn.0040148a
mov ebx, eax
mov eax, 1
call fcn.0040148a
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push ebx
jmp 0x402832
xor eax, eax
add esi, dword [0x417968]
call fcn.0040148a
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffffeb
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x403bdf
test byte [ebp - 0x273], 1
je 0x402476
mov eax, 2
call fcn.0040148a
jmp 0x402491
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push ecx
push ecx
mov ebx, eax
mov eax, dword [ebp - 0x274]
mov ecx, eax
mov edx, eax
mov edi, eax
and ecx, 4
shr edx, 0x1e
and edi, 3
mov dword [ebp - 0x2a4], ecx
mov esi, edx
mov ecx, eax
shr ecx, 0x1f
and esi, 1
bt eax, 0x10
mov dword [ebp - 0x2a8], ecx
jae 0x4024d3
mov dword [esp], 0x11
call fcn.00401434
push edx
jmp 0x4024da
movzx eax, word [ebp - 0x27c]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x268]
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [ebp - 0x274]
mov edx, dword [ebp - 0x25c]
push eax
imul edx, esi
push eax
and ecx, 0xfef0
mov eax, dword [ebp - 0x2a8]
xor esi, esi
imul eax, dword [ebp - 0x260]
cmp dword [ebp - 0x2a4], 0
je 0x402528
mov esi, dword [0x42ba48]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp], esi
mov dword [esp + 8], edi
mov dword [esp + 4], eax
call dword [sym.imp.USER32.dll_LoadImageW]
sub esp, 0x18
mov esi, eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0x172
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
test eax, eax
je 0x40257e
test edi, edi
jne 0x40257e
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push eax
cmp dword [ebp - 0x280], 0
js case.0x40175a.66
mov dword [esp + 4], esi
jmp 0x402836
mov eax, dword [ebp - 0x2a4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDC]
push ecx
mov ebx, eax
mov dword [esp + 4], 0x5a
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push esi
push esi
mov esi, eax
mov eax, 2
call fcn.0040148a
mov dword [esp + 8], 0x48
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
sub esp, 0xc
mov dword [0x4150a0], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, 3
push edi
push edi
call fcn.0040148a
mov dword [esp], 0x4150bc
mov dword [0x4150b0], eax
mov eax, dword [ebp - 0x270]
mov byte [0x4150b7], 1
mov edx, eax
and edx, 1
mov byte [0x4150b4], dl
mov edx, eax
and eax, 4
mov byte [0x4150b6], al
mov eax, dword [ebp - 0x27c]
and edx, 2
mov byte [0x4150b5], dl
mov dword [esp + 4], eax
call fcn.00408811
push eax
push eax
mov dword [esp], 0x4150a0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push edx
jmp 0x402832
xor eax, eax
call fcn.0040148a
mov ebx, eax
mov eax, 1
call fcn.0040148a
mov edi, dword [ebp - 0x274]
mov dword [esp], ebx
mov dword [esp + 4], eax
test edi, edi
jne 0x40268d
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x403a63
call dword [sym.imp.USER32.dll_EnableWindow]
push eax
push eax
jmp case.0x40175a.66
mov dword [esp], 0
call fcn.00401434
push ecx
mov esi, eax
mov dword [esp], 0x31
call fcn.00401434
push ebx
mov edi, eax
mov dword [esp], 0x22
call fcn.00401434
push edx
mov ebx, eax
mov dword [esp], 0x15
call fcn.00401434
push ecx
mov dword [esp], 0xffffffec
call fcn.004016c9
push eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x24c], eax
cmp word [esi], 0
jne 0x40270d
xor esi, esi
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x258], edi
cmp word [ebx], 0
jne 0x402721
xor ebx, ebx
mov eax, dword [0x40c974]
mov dword [ebp - 0x254], ebx
mov edi, 1
add eax, 0xb000
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x268]
mov dword [esp], eax
call fcn.00407e40
push edx
test eax, eax
je 0x403be4
xor edi, edi
test byte [ebp - 0x264], 0x40
je 0x403be4
mov eax, dword [ebp - 0x230]
mov dword [esp], eax
call fcn.004092b9
push eax
mov eax, dword [ebp - 0x230]
mov dword [esp], eax
jmp 0x4027f1
mov dword [esp], 0
call fcn.00401434
push ecx
mov ebx, eax
mov dword [esp + 4], eax
mov dword [esp], 0xffffffeb
call fcn.0040761e
push esi
push esi
mov dword [esp], ebx
call fcn.00407dbe
mov ebx, eax
push edi
test eax, eax
je 0x403b1a
mov edi, dword [ebp - 0x278]
test edi, edi
je 0x4027ee
mov dword [esp], eax
call fcn.004092b9
cmp dword [ebp - 0x27c], 0
push edx
js 0x4027e4
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408585
push edi
push edi
xor edi, edi
jmp 0x4027ee
test eax, eax
setne al
movzx eax, al
mov edi, eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4030c0
mov dword [esp], 2
call fcn.00401434
push ebx
mov dword [esp], eax
call fcn.00408db8
mov ebx, eax
push esi
test eax, eax
je 0x402841
mov eax, dword [eax + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408585
push ecx
push ecx
mov eax, dword [ebx + 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
jmp 0x403b7e
mov eax, dword [ebp - 0x29c]
mov word [eax], 0
jmp 0x403b0f
mov dword [esp], 0xffffffee
call fcn.00401434
push esi
mov esi, eax
mov dword [esp], 0xa
call fcn.004091b4
lea edx, [ebp - 0x28c]
push edi
mov dword [esp + 4], edx
mov dword [esp], esi
call eax
mov edi, eax
mov eax, dword [ebp - 0x29c]
push edx
push edx
mov word [eax], 0
mov eax, dword [ebp - 0x2a0]
mov word [eax], 0
test edi, edi
je 0x403b1a
mov dword [esp + 4], edi
mov dword [esp], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push ebx
push ebx
mov ebx, eax
test eax, eax
je 0x403b1a
mov dword [esp], 0xb
call fcn.004091b4
push edx
mov dword [ebp - 0x2a8], eax
mov dword [esp], 0xc
call fcn.004091b4
push ecx
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2a4], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], esi
call ecx
mov edx, dword [ebp - 0x2a4]
sub esp, 0x10
test eax, eax
jne 0x402910
mov edi, 1
jmp 0x402982
lea eax, [ebp - 0x268]
mov dword [esp + 4], 0x40c000
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 8], eax
mov dword [esp], ebx
call edx
sub esp, 0x10
test eax, eax
je 0x402909
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x288]
mov eax, dword [eax + edx*4 + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408585
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x288]
push edi
push edi
mov eax, dword [eax + edx*4 + 0xc]
xor edi, edi
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408585
push eax
push eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x4030c0
cmp dword [section..bss], 0
js 0x402ab8
mov dword [esp], 0xfffffff0
call fcn.00401434
push ebx
mov edi, eax
mov dword [esp], 1
call fcn.00401434
cmp dword [ebp - 0x270], 0
push esi
mov esi, eax
jne 0x4029eb
mov dword [esp + 8], 8
mov dword [esp + 4], 0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
sub esp, 0xc
mov ebx, eax
test eax, eax
jne 0x4029fb
jmp 0x402aac
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ebx, eax
push ecx
test eax, eax
je 0x4029c4
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00409271
push edx
push edx
test eax, eax
je 0x402a69
mov edi, dword [ebp - 0x278]
test edi, edi
je 0x402a3a
mov dword [esp], edi
mov dword [ebp - 0x29c], eax
call fcn.004016c9
mov eax, dword [ebp - 0x29c]
push edi
call eax
test eax, eax
setne al
movzx eax, al
mov edi, eax
jmp 0x402a80
mov ecx, dword [0x40c974]
mov dword [esp + 0x10], 0x40b000
mov dword [esp + 0xc], 0x417900
mov dword [esp + 8], ecx
mov ecx, dword [ebp - 0x2a4]
mov dword [esp + 4], 0x400
mov dword [esp], ecx
call eax
jmp 0x402a80
mov dword [esp + 4], esi
mov edi, 1
mov dword [esp], 0xfffffff7
call fcn.0040761e
push esi
push esi
cmp dword [ebp - 0x274], 0
jne 0x403be4
mov dword [esp], ebx
call fcn.00404edb
push ecx
test eax, eax
je 0x403be4
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x4030c0
mov dword [esp], 0xfffffff6
jmp 0x402b7c
mov dword [esp], 0xffffffe7
jmp 0x402b7c
mov dword [esp], 0xfffffff0
call fcn.00401434
push esi
mov dword [ebp - 0x2a0], eax
mov dword [esp], 0xffffffdf
call fcn.00401434
push edi
mov esi, eax
mov dword [esp], 2
call fcn.00401434
push edx
mov dword [ebp - 0x2a4], eax
mov dword [esp], 0xffffffcd
call fcn.00401434
push ecx
mov dword [ebp - 0x29c], eax
mov dword [esp], 0x45
call fcn.00401434
mov edi, dword [ebp - 0x270]
push ebx
mov dword [ebp - 0x2a8], eax
mov dword [esp], esi
call fcn.00407f69
push edx
test eax, eax
jne 0x402b3f
mov dword [esp], 0x21
call fcn.00401434
push ebx
lea eax, [ebp - 0x288]
mov dword [esp + 0xc], 0x412744
mov dword [esp + 0x10], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x40de44
call dword [sym.imp.ole32.dll_CoCreateInstance]
sub esp, 0x14
test eax, eax
jns 0x402b87
mov dword [esp], 0xfffffff0
call fcn.004016c9
push ecx
jmp 0x403b1a
mov eax, dword [ebp - 0x288]
lea ecx, [ebp - 0x268]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 4], 0x411d44
mov dword [esp], eax
call dword [edx]
sub esp, 0xc
mov ebx, eax
test eax, eax
js 0x402cc1
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [edx + 0x50]
bt edi, 0xf
mov ebx, eax
push edx
push edx
jb 0x402bed
mov edx, dword [ebp - 0x288]
mov eax, dword [0x40c974]
mov ecx, dword [edx]
add eax, 0xb000
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [ecx + 0x24]
push eax
push eax
mov eax, edi
sar eax, 0xc
and eax, 7
je 0x402c0b
mov edx, dword [ebp - 0x288]
mov ecx, dword [edx]
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [ecx + 0x3c]
push eax
push eax
mov eax, dword [ebp - 0x288]
mov ecx, edi
shr ecx, 0x10
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x34]
push eax
push eax
mov eax, dword [ebp - 0x29c]
cmp word [eax], 0
je 0x402c55
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x29c]
and edi, 0xfff
mov edx, dword [eax]
mov dword [esp + 8], edi
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x44]
sub esp, 0xc
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x2c]
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2a8]
push edi
push edi
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x1c]
push eax
push eax
test ebx, ebx
js 0x402cb2
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [eax]
mov dword [esp + 8], 1
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x18]
sub esp, 0xc
mov ebx, eax
mov eax, dword [ebp - 0x268]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push esi
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push ecx
test ebx, ebx
js 0x402b75
mov dword [esp], 0xfffffff4
call fcn.004016c9
jmp 0x4017ff
mov dword [esp], 0
call fcn.00401434
push edi
mov ebx, eax
mov dword [esp], 0x11
call fcn.00401434
push edx
mov esi, eax
mov dword [esp], 0x23
call fcn.00401434
push ecx
mov edi, eax
mov dword [esp], ebx
call fcn.00408db8
push edx
test eax, eax
je 0x402da8
mov dword [esp], ebx
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x268], eax
call sub.KERNEL32.dll_lstrlenW
push edx
mov word [ebx + eax*2 + 2], 0
mov dword [esp], esi
call sub.KERNEL32.dll_lstrlenW
push ecx
mov word [esi + eax*2 + 2], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x260], ebx
mov dword [esp + 4], edi
mov dword [esp], 0
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x24e], edi
mov word [ebp - 0x258], ax
call fcn.0040761e
lea eax, [ebp - 0x268]
push ebx
push ebx
mov dword [esp], eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov edi, eax
push esi
test eax, eax
je 0x403be4
mov dword [esp + 4], 0
mov dword [esp], 0xfffffff9
call fcn.0040761e
push ebx
push ebx
jmp 0x403b1a
cmp ebx, 0xbadf00d
jne 0x4021c1
inc dword [0x415034]
jmp case.0x40175a.66
xor esi, esi
test ebx, ebx
je 0x402def
mov dword [esp], 0
call fcn.00401434
push ecx
mov esi, eax
xor ebx, ebx
cmp dword [ebp - 0x27c], 0
je 0x402e09
mov dword [esp], 0x11
call fcn.00401434
push edx
mov ebx, eax
xor edi, edi
cmp dword [ebp - 0x270], 0
je 0x402e23
mov dword [esp], 0x22
call fcn.00401434
push edi
mov edi, eax
mov dword [esp], 0xffffffcd
call fcn.00401434
push ecx
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
sub esp, 0x10
jmp 0x40337a
mov dword [esp], 1
mov dword [ebp - 0x268], 0xa
call fcn.00401434
push esi
mov esi, eax
mov dword [esp], 0x12
call fcn.00401434
push edi
mov ebx, eax
xor edi, edi
mov dword [esp], 0xffffffdd
call fcn.00401434
push edx
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0x10], 0x3ff
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x268]
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [ebp - 0x29c]
sub esp, 0x18
cmp word [eax], 0xa
jne 0x403be4
jmp 0x403b15
cmp dword [ebp - 0x270], 0
jne 0x402f13
mov dword [esp], 2
call fcn.004014bf
mov esi, eax
push ebx
test eax, eax
je 0x403b1a
mov dword [esp], 0x33
call fcn.00401434
push edi
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push edx
mov ebx, eax
push edx
mov dword [esp], esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
jmp 0x402f8c
mov dword [esp], 0x22
call fcn.00401434
push ebx
mov ebx, eax
mov eax, dword [ebp - 0x270]
sar eax, 1
mov dword [ebp - 0x268], eax
cmp word [ebx], 0
je 0x403b1a
or eax, 0x100020
mov dword [ebp - 0x268], eax
test esi, esi
js 0x402f55
add esi, dword [0x415024]
sub esi, 0x7fffffff
lea eax, [ebp - 0x268]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.00408395
push ecx
push ecx
test eax, eax
je 0x403b1a
mov edx, dword [ebp - 0x268]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], edx
call fcn.00401523
sub esp, 0xc
mov ebx, eax
test ebx, ebx
setne al
movzx eax, al
mov edi, eax
jmp 0x403be4
mov dword [esp], 2
mov esi, dword [ebp - 0x270]
mov edi, dword [ebp - 0x26c]
call fcn.00401434
push ecx
mov dword [ebp - 0x29c], eax
mov dword [esp], 0x11
call fcn.00401434
push edx
mov edx, eax
test ebx, ebx
js 0x402fd9
add ebx, dword [0x415024]
sub ebx, 0x7fffffff
lea eax, [ebp - 0x268]
mov dword [esp + 8], 0x100022
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
mov dword [esp], ebx
call fcn.00408467
sub esp, 0x10
test eax, eax
jne 0x403b1a
mov ebx, dword [ebp - 0x268]
test ebx, ebx
je 0x403b1a
cmp esi, 1
jne 0x403034
mov dword [esp], 0x23
call fcn.00401434
push esi
mov dword [esp], 0x416100
call sub.KERNEL32.dll_lstrlenW
inc eax
push edx
add eax, eax
jmp 0x40307f
cmp esi, 4
je 0x40306b
xor eax, eax
cmp esi, 3
jne 0x40307f
mov eax, dword [ebp - 0x274]
mov dword [esp + 0xc], 0x1800
mov dword [esp + 8], 0x416100
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.004040e4
sub esp, 0x10
jmp 0x40307f
mov eax, 3
call fcn.0040148a
mov dword [0x416100], eax
mov eax, 4
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0x416100
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
sub esp, 0x18
test eax, eax
setne al
movzx eax, al
mov edi, eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
jmp 0x403be4
mov dword [esp], 0x20019
call fcn.004014bf
push edx
mov ebx, eax
mov dword [esp], 0x33
call fcn.00401434
push ecx
mov ecx, dword [ebp - 0x29c]
mov word [ecx], 0
test ebx, ebx
je 0x403b1a
lea edx, [ebp - 0x288]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x268]
mov dword [ebp - 0x288], 0x800
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x403148
mov eax, dword [ebp - 0x268]
cmp eax, 4
je 0x403162
cmp eax, 1
je 0x40315d
cmp eax, 2
je 0x403191
mov eax, dword [ebp - 0x29c]
mov edi, 1
mov word [eax], 0
jmp 0x4030b7
cmp eax, 4
jne 0x403191
xor eax, eax
cmp dword [ebp - 0x270], 0
sete al
mov edi, eax
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408585
push eax
push eax
jmp 0x4030b7
mov edi, dword [ebp - 0x270]
mov eax, dword [ebp - 0x29c]
mov word [eax + 0x7fe], 0
jmp 0x4030b7
mov dword [esp], 0x20019
call fcn.004014bf
push esi
mov ebx, eax
mov eax, 3
call fcn.0040148a
mov ecx, dword [ebp - 0x29c]
mov word [ecx], 0
test ebx, ebx
je 0x403b1a
cmp dword [ebp - 0x270], 0
mov dword [ebp - 0x268], 0x3ff
je 0x40320a
mov dword [esp + 0xc], 0x3ff
xor edi, edi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
sub esp, 0x10
jmp 0x403197
mov ecx, dword [ebp - 0x29c]
lea edx, [ebp - 0x268]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
sub esp, 0x20
test eax, eax
setne al
movzx eax, al
mov edi, eax
jmp 0x403197
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004085aa
push ebx
test eax, eax
je case.0x40175a.66
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4017ff
mov dword [esp], 0xffffffed
call fcn.00401434
mov edx, dword [ebp - 0x278]
push ecx
mov dword [esp + 8], edx
mov edx, dword [ebp - 0x27c]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0040815b
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x402832
jmp 0x4036f4
mov ebx, dword [ebp - 0x278]
test ebx, ebx
je 0x4032e3
mov eax, 1
call fcn.0040148a
mov word [0x415900], ax
xor eax, eax
cmp edi, 0x38
setne al
mov esi, eax
inc esi
jmp 0x40333c
cmp edi, 0x38
jne 0x403323
mov dword [esp], 0x21
call fcn.00401434
push eax
mov dword [esp + 8], 0x400
mov dword [esp + 4], 0x415900
mov dword [esp], 0x416100
call fcn.004086e7
mov dword [esp], 0x415900
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
push edx
jmp 0x40333c
mov dword [esp], 0x11
call fcn.00401434
push ecx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
push esi
lea esi, [eax + eax]
mov eax, dword [ebp - 0x29c]
cmp word [eax], 0
je 0x403b1a
mov dword [esp], eax
call fcn.004085aa
push edx
mov edx, eax
xor eax, eax
cmp edi, 0x38
sete al
or eax, ebx
je 0x403381
mov dword [esp + 8], esi
mov dword [esp + 4], 0x415900
mov dword [esp], edx
call fcn.00408267
sub esp, 0xc
test eax, eax
jmp 0x403608
cmp dword [ebp - 0x274], 0
je 0x403363
mov dword [esp + 4], edx
mov dword [esp], edx
mov dword [ebp - 0x29c], edx
call fcn.004082ad
mov edx, dword [ebp - 0x29c]
test eax, eax
push ebx
push ebx
jns 0x403363
jmp 0x403b1a
mov eax, 2
call fcn.0040148a
test eax, eax
jle case.0x40175a.66
mov ecx, dword [ebp - 0x29c]
xor edi, edi
cmp word [ecx], 0
je 0x4035fa
mov dword [esp], ecx
cmp eax, 0x3ff
mov edi, 0x3ff
cmovle edi, eax
xor ebx, ebx
call fcn.004085aa
mov word [ebp - 0x2a4], 0
push ecx
mov esi, eax
mov dword [ebp - 0x29c], 2
cmp dword [ebp - 0x284], 0x39
mov edx, dword [ebp - 0x274]
jne 0x403505
lea eax, [ebp - 0x268]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov eax, 2
sub eax, edx
mov dword [esp], esi
mov dword [esp + 8], eax
lea eax, [ebp - 0x288]
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x4035f8
mov eax, dword [ebp - 0x268]
test eax, eax
je 0x4035f8
mov dword [ebp - 0x29c], eax
movzx eax, byte [ebp - 0x288]
cmp dword [ebp - 0x274], 0
mov word [ebp - 0x28c], ax
jne 0x40354c
lea eax, [ebp - 0x28c]
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x268]
mov dword [esp + 4], 8
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 8], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
sub esp, 0x18
test eax, eax
jne 0x40354c
dec dword [ebp - 0x268]
mov word [ebp - 0x28c], 0xfffd
je 0x40354c
dec dword [ebp - 0x29c]
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], 1
neg eax
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
jmp 0x40347b
or edx, ebx
je 0x40352f
lea eax, [ebp - 0x28c]
mov dword [esp + 8], 2
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00408221
sub esp, 0xc
test eax, eax
jne 0x40354c
jmp 0x4035f8
mov dword [esp + 4], 0
mov dword [esp], esi
call fcn.004082ad
push edx
push edx
test eax, eax
jns 0x403509
xor ebx, ebx
jmp 0x4035f8
cmp dword [ebp - 0x274], 0
movzx eax, word [ebp - 0x28c]
je 0x403575
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408585
push eax
push eax
jmp 0x403bea
lea edx, [ebx + ebx]
add edx, dword [ebp - 0x2a0]
cmp word [ebp - 0x2a4], 0xd
je 0x403592
cmp word [ebp - 0x2a4], 0xa
jne 0x4035d7
cmp word [ebp - 0x2a4], ax
je 0x4035a7
cmp ax, 0xd
je 0x4035d1
cmp ax, 0xa
je 0x4035d1
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
neg eax
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
jmp 0x4035f8
mov word [edx], ax
inc ebx
jmp 0x4035f8
mov ecx, dword [ebp - 0x2a0]
inc ebx
mov word [ecx + ebx*2 - 2], ax
test ax, ax
je 0x4035f8
cmp edi, ebx
je 0x4035fa
mov word [ebp - 0x2a4], ax
jmp 0x4033fe
mov edi, ebx
mov eax, dword [ebp - 0x2a0]
test edi, edi
mov word [eax + edi*2], 0
sete al
jmp 0x402f91
mov eax, dword [ebp - 0x29c]
cmp word [eax], 0
je case.0x40175a.66
mov eax, 2
mov esi, dword [ebp - 0x274]
call fcn.0040148a
mov ebx, eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004085aa
push edi
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
cmp dword [ebp - 0x27c], 0
js case.0x40175a.66
jmp 0x403b74
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004085aa
push ebx
test eax, eax
je case.0x40175a.66
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x4017ff
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.004085aa
push ecx
test eax, eax
je 0x4036f4
lea edx, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push edx
push edx
test eax, eax
je 0x4036f4
jmp 0x403713
mov dword [esp], 2
call fcn.00401434
lea edx, [ebp - 0x268]
push esi
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push edi
push edi
cmp eax, 0xffffffff
jne 0x4036ff
mov eax, dword [ebp - 0x2a0]
mov word [eax], 0
mov eax, dword [ebp - 0x29c]
jmp 0x403b15
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408585
push ebx
push ebx
lea eax, [ebp - 0x23c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.0040866c
jmp 0x402693
mov dword [esp], 0xfffffff0
call fcn.00401434
push edx
mov esi, eax
mov dword [esp], eax
call fcn.00407f69
push ecx
test eax, eax
jne 0x403759
mov dword [esp], 0xffffffed
call fcn.00401434
push eax
mov dword [esp], esi
call fcn.004080b8
push edi
mov dword [esp + 8], 2
mov dword [esp + 4], 0x40000000
mov dword [esp], esi
call fcn.0040815b
mov dword [ebp - 0x29c], eax
sub esp, 0xc
inc eax
jne 0x40379f
mov dword [esp], esi
mov edi, 1
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, 0xffffffef
push ebx
jmp 0x403908
cmp dword [ebp - 0x278], 0
mov edx, dword [ebp - 0x27c]
je 0x4038c2
mov eax, dword [0x417928]
mov dword [ebp - 0x2a4], edx
mov dword [esp], 0x40
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x2a0], eax
mov dword [esp + 4], eax
call edi
mov edx, dword [ebp - 0x2a4]
test eax, eax
push ecx
mov ebx, eax
push ecx
je 0x4038c2
mov dword [esp], 0
call fcn.00403ec6
push eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00403e9e
push eax
push eax
mov eax, dword [ebp - 0x278]
mov dword [esp], 0x40
mov dword [esp + 4], eax
call edi
mov edi, eax
push edx
push edx
test eax, eax
je 0x403896
mov eax, dword [ebp - 0x278]
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.004040e4
mov eax, edi
sub esp, 0x10
cmp byte [eax], 0
je 0x40388c
mov ecx, dword [eax]
lea edx, [eax + 8]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [ebp - 0x2a8], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2a4], edx
add ecx, ebx
mov dword [esp], ecx
call fcn.0040809b
mov edx, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x2a8]
sub esp, 0xc
lea eax, [edx + ecx]
jmp 0x40384d
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408267
sub esp, 0xc
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
or edx, 0xffffffff
push eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], edx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
call fcn.004040e4
mov ebx, eax
mov eax, dword [ebp - 0x29c]
sub esp, 0x10
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
test ebx, ebx
js 0x403786
mov eax, 0xfffffff3
xor edi, edi
mov dword [esp], eax
call fcn.004016c9
jmp 0x4030c0
xor eax, eax
call fcn.0040148a
mov ebx, eax
cmp eax, dword [0x41794c]
jae 0x403b1a
mov edi, dword [ebp - 0x278]
imul esi, eax, 0x818
add esi, dword [0x417948]
test edi, edi
js 0x403964
jne 0x40395c
mov eax, dword [ebp - 0x2a0]
add esi, 0x18
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.0040866c
jmp 0x403a63
mov eax, dword [esi + edi*4]
jmp 0x403b74
mov ecx, edi
not ecx
mov dword [ebp - 0x278], ecx
test ecx, ecx
je 0x403984
mov eax, 1
call fcn.0040148a
mov dword [ebp - 0x27c], eax
jmp 0x4039a2
mov eax, dword [ebp - 0x270]
mov dword [esp + 4], eax
lea eax, [esi + 0x18]
mov dword [esp], eax
call fcn.00408811
push edi
push edi
or dword [esi + 8], 0x100
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x278]
mov dword [esi + eax*4], edx
cmp dword [ebp - 0x274], 0
je case.0x40175a.66
mov dword [esp], ebx
call fcn.00401248
jmp 0x4017ff
xor eax, eax
call fcn.0040148a
cmp eax, 0x1f
ja 0x403b1a
cmp dword [ebp - 0x274], 0
mov edi, dword [ebp - 0x278]
je 0x403a31
test edi, edi
je 0x403a10
mov dword [esp], eax
call fcn.0040135c
push ecx
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004012a7
jmp 0x402693
mov dword [esp], 0
call fcn.004013b5
push edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408585
jmp 0x403a63
test edi, edi
mov edx, dword [0x417930]
lea eax, [eax + 0x24]
je 0x403a4d
mov ecx, dword [ebp - 0x27c]
mov dword [edx + eax*4 + 4], ecx
jmp case.0x40175a.66
mov eax, dword [edx + eax*4 + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408811
push eax
push eax
jmp 0x403be4
mov edi, dword [ebp - 0x274]
test edi, edi
je 0x403a80
dec edi
je 0x403b24
jmp case.0x40175a.66
mov dword [esp], 5
call fcn.004091b4
push ecx
mov ebx, eax
mov dword [esp], 0x22
call fcn.00401434
push esi
test ebx, ebx
je 0x403b0f
lea esi, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 4], esi
call dword [sym.imp.ole32.dll_IIDFromString]
push edx
push edx
test eax, eax
js 0x403b0f
lea eax, [ebp - 0x288]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x274]
mov dword [esp], esi
mov dword [esp + 4], eax
call ebx
sub esp, 0x10
test eax, eax
js 0x403b0f
mov eax, dword [ebp - 0x288]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.0040866c
push eax
push eax
mov eax, dword [ebp - 0x288]
mov dword [esp], eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x4030c0
mov eax, dword [ebp - 0x2a0]
mov word [eax], 0
mov edi, 1
jmp 0x403be4
mov eax, 2
call fcn.0040148a
mov ebx, eax
mov eax, 4
call fcn.0040148a
mov dword [ebp - 0x268], 0
movzx edx, al
shr eax, 0x18
test ebx, ebx
jne 0x403b53
mov ebx, 0x415020
add eax, ebx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [ebp - 0x268]
mov dword [esp], eax
call fcn.0040809b
mov eax, dword [ebp - 0x268]
sub esp, 0xc
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408585
jmp 0x402693
mov eax, dword [ebp - 0x2a4]
and ebx, dword [0x42d2a0]
mov dword [esp + 0xc], 0
mov dword [esp + 8], ebx
mov dword [esp + 4], 0xb
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
cmp dword [ebp - 0x280], 0
je case.0x40175a.66
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_InvalidateRect]
sub esp, 0xc
xor edi, edi
add dword [0x415028], edi
xor ebx, ebx
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 4