Function at 0x4016b8
Capabilities:
Copy file
Create shortcut via ishelllink
Delete file
Delete registry value
Enumerate files on windows
Get file attributes
Move file
Query environment variable
Query or enumerate registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Set current directory
Set file attributes
Set registry value

Disassembly:
push ebp
mov ecx, 7
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x284]
push ebx
sub esp, 0x2bc
mov esi, dword [ebp + 8]
mov eax, dword [0x431de8]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x2a4], eax
mov ebx, dword [ebp - 0x280]
mov esi, dword [ebp - 0x27c]
mov edi, dword [ebp - 0x284]
mov eax, ebx
shl eax, 0xb
add eax, dword [0x40c8f4]
mov dword [ebp - 0x29c], eax
mov eax, esi
shl eax, 0xb
add eax, dword [0x40c8f4]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x280]
mov dword [0x41405c], eax
lea eax, [edi - 2]
cmp eax, 0x43
ja case.0x40172a.66
jmp dword [eax*4 + 0x40c008]
mov dword [esp + 4], 0
mov dword [esp], ebx
jmp 0x401d42
inc dword [0x432e00]
cmp dword [ebp - 0x2a4], 0
mov ebx, 0x7fffffff
je case.0x40172a.2
mov dword [esp], 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push esi
jmp case.0x40172a.2
mov dword [esp], ebx
call fcn.00401675
push edx
dec eax
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00403b22
mov ebx, eax
push ecx
push ecx
jmp case.0x40172a.2
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.0040724e
jmp 0x402669
xor eax, eax
call fcn.00401414
mov edx, 1
test eax, eax
cmovle eax, edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4017cf
mov eax, dword [ebp - 0x2a4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push eax
jmp case.0x40172a.66
mov edi, dword [ebp - 0x278]
test edi, edi
jne 0x401809
mov eax, dword [ebx*4 + 0x431d20]
mov dword [ebx*4 + 0x431ce0], eax
mov eax, 1
call fcn.00401414
mov edx, dword [ebp - 0x280]
mov dword [edx*4 + 0x431d20], eax
jmp 0x403b0e
mov eax, dword [ebx*4 + 0x431ce0]
mov dword [ebx*4 + 0x431d20], eax
jmp case.0x40172a.66
mov edx, dword [ebp - 0x278]
xor ecx, ecx
mov eax, dword [edx*4 + 0x431d20]
test eax, eax
sete cl
and eax, dword [ebp - 0x274]
mov ebx, dword [ebp + ecx*4 - 0x280]
mov dword [edx*4 + 0x431d20], eax
jmp case.0x40172a.2
mov eax, dword [esi*4 + 0x431d20]
jmp 0x402808
mov eax, dword [0x432e04]
test eax, eax
je 0x40186d
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push eax
push eax
mov eax, dword [0x432e08]
test eax, eax
je case.0x40172a.66
mov edx, dword [ebp - 0x280]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x402669
mov dword [esp], 0xfffffff0
call fcn.00401449
mov edx, dword [ebp - 0x27c]
push edi
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
jmp 0x401b74
mov dword [esp], 0xfffffff0
xor edi, edi
call fcn.00401449
push ebx
mov ebx, eax
mov dword [esp], eax
call fcn.00407bd1
push esi
test eax, eax
je 0x40195b
mov dword [esp + 4], 0x5c
mov dword [esp], eax
call fcn.00407b31
mov esi, eax
push ecx
push ecx
mov ax, word [eax]
mov word [esi], 0
mov word [ebp - 0x29c], ax
test ax, ax
jne 0x40191d
cmp dword [ebp - 0x278], 0
je 0x40191d
call fcn.00408e54
test eax, eax
je 0x40191d
mov dword [esp], ebx
call fcn.00407930
jmp 0x401925
mov dword [esp], ebx
call fcn.004079c4
push edx
test eax, eax
je 0x401947
cmp eax, 0xb7
je 0x401934
inc edi
jmp 0x401947
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
and eax, 0x10
push ecx
cmp eax, 1
adc edi, 0
mov ecx, dword [ebp - 0x29c]
lea eax, [esi + 2]
mov word [esi], cx
test cx, cx
jmp 0x4018d3
cmp dword [ebp - 0x27c], 0
je 0x40199e
mov dword [esp], 0xffffffe6
call fcn.00401699
mov eax, dword [0x40c8f4]
push esi
add eax, 0xb000
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004082a4
push eax
push eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
cmp eax, 1
push edx
adc edi, 0
jmp 0x403b0e
mov dword [esp], 0xfffffff5
jmp 0x401a43
mov dword [esp], 0
call fcn.00401449
push ecx
mov dword [esp], eax
call fcn.00408a07
jmp 0x4023cb
mov dword [esp], 0xffffffd0
call fcn.00401449
push ecx
mov ebx, eax
mov dword [esp], 0xffffffdf
call fcn.00401449
push esi
mov esi, eax
mov dword [esp], 0x13
call fcn.00401449
push edi
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov edi, eax
push edx
push edx
test eax, eax
je 0x401a10
mov dword [esp], 0xffffffe3
jmp 0x402cac
cmp dword [ebp - 0x278], 0
je 0x402b4a
mov dword [esp], ebx
call fcn.00408a07
push edx
test eax, eax
je 0x402b4a
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.004089c2
push esi
push esi
mov dword [esp], 0xffffffe4
call fcn.00401699
push ebx
jmp 0x403b0e
mov dword [esp], 0
call fcn.00401449
push ecx
mov ebx, eax
lea eax, [ebp - 0x268]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 4], 0x400
mov dword [esp + 8], eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
test eax, eax
je 0x401ac1
mov eax, dword [ebp - 0x268]
xor edi, edi
cmp eax, ebx
jbe 0x401ad1
cmp word [eax], 0
je 0x401ad1
mov dword [esp], ebx
call fcn.00408a07
push edx
test eax, eax
je 0x401ac1
add eax, 0x2c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x268]
mov dword [esp], eax
call fcn.004082a4
push esi
push esi
jmp 0x401ad1
mov eax, dword [ebp - 0x2a0]
mov edi, 1
mov word [eax], 0
cmp dword [ebp - 0x278], 0
jne 0x403b0e
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 8], 0x400
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
sub esp, 0xc
jmp 0x403b0e
mov dword [esp], 0xffffffff
xor edi, edi
call fcn.00401449
mov ecx, dword [ebp - 0x29c]
lea edx, [ebp - 0x268]
push ebx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], 0x400
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
sub esp, 0x18
test eax, eax
jne 0x403b0e
jmp 0x4036b2
mov dword [esp], 0xffffffef
call fcn.00401449
push ecx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00407de8
push edx
push edx
jmp 0x40333d
mov dword [esp], 0x31
call fcn.00401449
push ebx
mov ebx, dword [ebp - 0x280]
mov esi, eax
and ebx, 7
mov dword [esp], eax
call fcn.00407b9e
push edi
test eax, eax
je 0x401bb2
mov dword [esp + 4], esi
mov dword [esp], 0x414060
call fcn.004082a4
jmp 0x401be3
mov eax, dword [0x40c8f4]
mov dword [esp], 0x414060
add eax, 0xb000
mov dword [esp + 4], eax
call fcn.004082a4
push edx
push edx
mov dword [esp], eax
call fcn.004082d8
push ecx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.KERNEL32.dll_lstrcatW
push ecx
push ecx
mov dword [esp], 0x414060
call fcn.0040836d
push edi
cmp ebx, 2
jle 0x401c35
mov dword [esp], 0x414060
call fcn.00408a07
push edx
mov edx, eax
xor eax, eax
test edx, edx
je 0x401c24
lea eax, [ebp - 0x274]
add edx, 0x14
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
push edi
push edi
sub ebx, 3
or ebx, 0x80000000
test ebx, eax
sete bl
movzx ebx, bl
test ebx, ebx
jne 0x401c4a
mov dword [esp], 0x414060
call fcn.00407ced
push ebx
xor ebx, ebx
jmp 0x401c59
mov eax, 1
cmp ebx, 1
je 0x401c5e
mov ebx, 2
mov eax, 2
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40000000
mov dword [esp], 0x414060
call fcn.00407d90
sub esp, 0xc
mov edi, eax
cmp eax, 0xffffffff
jne 0x401d53
test ebx, ebx
je 0x401ca2
mov dword [esp + 4], esi
mov dword [esp], 0xffffffe2
call fcn.0040724e
cmp ebx, 2
push ecx
push ecx
jmp 0x40333f
mov eax, dword [0x40c8f4]
mov dword [esp], 0x415060
mov dword [esp + 4], eax
call fcn.004082a4
push eax
push eax
mov eax, dword [0x40c8f4]
mov dword [esp + 4], 0x414060
mov dword [esp], eax
call fcn.004082a4
push eax
push eax
mov eax, dword [ebp - 0x26c]
mov dword [esp], 0x414860
mov dword [esp + 4], eax
call fcn.0040844a
push eax
push eax
mov eax, dword [0x40c8f4]
mov dword [esp + 4], 0x415060
mov dword [esp], eax
call fcn.004082a4
push eax
push eax
mov eax, dword [ebp - 0x280]
sar eax, 3
mov dword [esp + 4], eax
mov dword [esp], 0x414860
call fcn.00407ac5
push edx
push edx
cmp eax, 4
je 0x401c39
cmp eax, 5
jne 0x401d33
inc dword [0x431d28]
jmp case.0x40172a.2
mov dword [esp + 4], 0x414060
mov dword [esp], 0xfffffffa
call fcn.0040724e
mov ebx, 0x7fffffff
push eax
push eax
jmp case.0x40172a.2
mov dword [esp + 4], esi
mov dword [esp], 0xffffffea
call fcn.0040724e
inc dword [0x431d54]
push eax
push eax
mov eax, dword [ebp - 0x278]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00403db0
dec dword [0x431d54]
mov ebx, eax
mov eax, dword [ebp - 0x274]
and eax, dword [ebp - 0x270]
sub esp, 0x10
inc eax
je 0x401dc9
lea eax, [ebp - 0x274]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
sub esp, 0x10
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
test ebx, ebx
jns case.0x40172a.66
cmp ebx, 0xfffffffe
jne 0x401e08
mov dword [esp + 4], 0xffffffe9
mov dword [esp], 0x414060
call fcn.0040844a
push ebx
push ebx
mov dword [esp + 4], esi
mov dword [esp], 0x414060
call sub.KERNEL32.dll_lstrcatW
jmp 0x401e1c
mov dword [esp + 4], 0xffffffee
mov dword [esp], 0x414060
call fcn.0040844a
push ecx
push ecx
mov dword [esp + 4], 0x200010
mov dword [esp], 0x414060
jmp 0x4021b8
mov dword [esp], 0
jmp 0x401e8e
mov dword [esp], 0x31
call fcn.00401449
mov edx, dword [ebp - 0x280]
push edi
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00407ac5
push edx
push edx
test eax, eax
je 0x402b4a
cmp dword [ebp - 0x278], eax
je 0x402063
cmp dword [ebp - 0x270], eax
jne case.0x40172a.66
mov ebx, dword [ebp - 0x26c]
jmp case.0x40172a.2
mov dword [esp], 0xfffffff0
call fcn.00401449
mov edx, dword [ebp - 0x27c]
push esi
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00408af3
jmp 0x402669
mov dword [esp], 1
call fcn.00401449
push ebx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
jmp 0x40262e
mov eax, 2
call fcn.00401414
mov ebx, eax
mov eax, 3
mov edi, edx
call fcn.00401414
mov dword [esp], 1
mov esi, eax
call fcn.00401449
push edx
mov dword [ebp - 0x2a0], eax
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
test edi, edi
cmove ebx, eax
push ecx
mov ecx, dword [ebp - 0x29c]
mov word [ecx], 0
test ebx, ebx
je case.0x40172a.66
test esi, esi
mov edx, dword [ebp - 0x2a0]
jns 0x401f25
add esi, eax
js case.0x40172a.66
cmp eax, esi
cmovg eax, esi
add eax, eax
add eax, edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004082a4
push edi
push edi
test ebx, ebx
jns 0x401f59
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
push esi
add ebx, eax
js 0x401f67
cmp ebx, 0x3ff
jg case.0x40172a.66
jmp 0x401f69
xor ebx, ebx
mov eax, dword [ebp - 0x29c]
mov word [eax + ebx*2], 0
jmp case.0x40172a.66
mov dword [esp], 0x20
call fcn.00401449
push edx
mov ebx, eax
mov dword [esp], 0x31
call fcn.00401449
cmp dword [ebp - 0x270], 0
push ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
jne 0x401fae
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
jmp 0x401fb4
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push edi
push edi
test eax, eax
jne 0x402063
jmp 0x4023db
mov dword [esp], 1
call fcn.00401449
push esi
mov ebx, eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], 0x400
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
sub esp, 0xc
test eax, eax
jne 0x402006
mov eax, dword [ebp - 0x29c]
mov edi, 1
mov word [eax], 0
jmp 0x40202e
cmp dword [ebp - 0x278], 0
jne 0x402013
xor edi, edi
jmp 0x40202e
mov eax, dword [ebp - 0x29c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push ebx
push ebx
test eax, eax
je 0x401ff4
jmp 0x40200f
mov eax, dword [ebp - 0x29c]
mov word [eax + 0x7fe], 0
jmp 0x403b0e
xor eax, eax
mov esi, dword [ebp - 0x26c]
call fcn.00401414
mov ebx, eax
mov eax, 1
call fcn.00401414
test esi, esi
jne 0x40207f
cmp ebx, eax
jge 0x40206e
mov ebx, dword [ebp - 0x274]
jmp case.0x40172a.2
jle 0x4023db
mov ebx, dword [ebp - 0x270]
jmp case.0x40172a.2
cmp ebx, eax
jb 0x402063
jbe 0x4023db
jmp 0x402074
mov eax, 1
call fcn.00401414
mov ebx, eax
mov eax, 2
call fcn.00401414
mov edi, dword [ebp - 0x274]
mov ecx, eax
mov esi, eax
cmp edi, 0xd
ja case.default.0x4020b4
jmp dword [edi*4 + 0x40c118]
lea ecx, [eax + ebx]
jmp 0x402138
mov ecx, ebx
sub ecx, eax
jmp 0x402136
mov ecx, eax
imul ecx, ebx
jmp 0x402136
mov edi, 1
test eax, eax
je 0x402138
mov eax, ebx
cdq
idiv ecx
mov ecx, eax
jmp 0x402136
mov ecx, eax
or ecx, ebx
jmp 0x402136
mov ecx, eax
and ecx, ebx
jmp 0x402136
mov ecx, eax
xor ecx, ebx
jmp 0x402136
test ebx, ebx
sete cl
jmp 0x4020fd
or ebx, eax
setne cl
movzx ecx, cl
jmp 0x402136
test ebx, ebx
setne cl
xor edx, edx
test esi, esi
setne dl
and ecx, edx
jmp 0x402136
mov edi, 1
test eax, eax
je 0x402138
mov eax, ebx
cdq
idiv ecx
mov ecx, edx
jmp 0x402136
mov ecx, eax
shl ebx, cl
jmp case.default.0x4020b4
mov ecx, eax
sar ebx, cl
jmp case.default.0x4020b4
mov ecx, eax
shr ebx, cl
mov ecx, ebx
xor edi, edi
mov dword [esp + 4], ecx
jmp 0x4023b0
mov dword [esp], 1
call fcn.00401449
push ecx
mov ebx, eax
mov eax, 2
call fcn.00401414
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_wsprintfW]
jmp case.0x40172a.66
mov edi, dword [ebp - 0x278]
mov ebx, dword [0x416860]
mov ecx, edi
test edi, edi
je 0x402202
dec ecx
test ebx, ebx
je 0x402197
mov ebx, dword [ebx]
test ecx, ecx
jne 0x402188
test ebx, ebx
jne 0x4021c2
mov dword [esp + 4], 0xffffffe8
mov dword [esp], 0
call fcn.0040844a
push edx
push edx
mov dword [esp + 4], 0x200010
mov dword [esp], eax
call fcn.00407ac5
jmp 0x401d47
add ebx, 4
mov dword [esp], 0x414060
mov dword [esp + 4], ebx
call fcn.004082a4
push eax
push eax
mov eax, dword [0x416860]
add eax, 4
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.004082a4
push eax
push eax
mov eax, dword [0x416860]
add eax, 4
mov dword [esp + 4], 0x414060
jmp 0x4036e1
test esi, esi
je 0x402231
test ebx, ebx
je 0x402b4a
lea eax, [ebx + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004082a4
push eax
push eax
mov eax, dword [ebx]
mov dword [0x416860], eax
jmp 0x40294a
mov dword [esp + 4], 0x804
mov dword [esp], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push esi
mov ebx, eax
mov eax, dword [ebp - 0x280]
push esi
mov dword [esp + 4], eax
lea eax, [ebx + 4]
mov dword [esp], eax
call fcn.0040844a
push eax
push eax
mov eax, dword [0x416860]
mov dword [ebx], eax
mov dword [0x416860], ebx
jmp 0x403b0e
mov eax, 3
call fcn.00401414
mov ebx, eax
mov eax, 4
call fcn.00401414
mov esi, eax
test byte [ebp - 0x26c], 1
je 0x4022a3
mov dword [esp], 0x33
call fcn.00401449
push ebx
mov ebx, eax
test byte [ebp - 0x26c], 2
je 0x4022bb
mov dword [esp], 0x44
call fcn.00401449
push ecx
mov esi, eax
cmp dword [ebp - 0x284], 0x21
jne 0x40234d
mov eax, 1
call fcn.00401414
mov dword [ebp - 0x2a0], eax
mov eax, 2
call fcn.00401414
mov edi, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x2a0]
sar edi, 2
je 0x40232d
lea edx, [ebp - 0x268]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
sub esp, 0x1c
test eax, eax
sete al
movzx eax, al
mov edi, eax
jmp 0x402399
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
mov dword [ebp - 0x268], eax
jmp 0x402399
mov dword [esp], 1
call fcn.00401449
push edi
mov edi, eax
mov dword [esp], 0x12
call fcn.00401449
push edx
cmp word [eax], 0
jne 0x402371
xor eax, eax
cmp word [edi], 0
jne 0x402379
xor edi, edi
mov dword [esp + 8], edi
xor edi, edi
mov dword [esp + 0xc], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [ebp - 0x268], eax
sub esp, 0x10
cmp dword [ebp - 0x280], 0
js 0x403b0e
mov eax, dword [ebp - 0x268]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
jmp 0x4039d3
xor eax, eax
call fcn.00401414
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsWindow]
push esi
test eax, eax
je 0x4023db
mov ebx, dword [ebp - 0x27c]
jmp case.0x40172a.2
mov ebx, dword [ebp - 0x278]
jmp case.0x40172a.2
mov eax, 2
call fcn.00401414
mov ebx, eax
mov eax, 1
call fcn.00401414
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push ebx
jmp 0x402808
xor eax, eax
add esi, dword [0x431da8]
call fcn.00401414
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffffeb
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x403b09
test byte [ebp - 0x273], 1
je 0x40244c
mov eax, 2
call fcn.00401414
jmp 0x402467
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push ecx
push ecx
mov ebx, eax
mov eax, dword [ebp - 0x274]
mov ecx, eax
mov edx, eax
mov edi, eax
and ecx, 4
shr edx, 0x1e
and edi, 3
mov dword [ebp - 0x2a4], ecx
mov ecx, eax
and edx, 1
shr ecx, 0x1f
bt eax, 0x10
mov esi, edx
mov dword [ebp - 0x2a8], ecx
jae 0x4024a9
mov dword [esp], 0x11
call fcn.00401449
push edx
jmp 0x4024b0
movzx eax, word [ebp - 0x27c]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x268]
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [ebp - 0x274]
mov edx, dword [ebp - 0x25c]
push eax
imul edx, esi
push eax
and ecx, 0xfef0
mov eax, dword [ebp - 0x2a8]
xor esi, esi
imul eax, dword [ebp - 0x260]
cmp dword [ebp - 0x2a4], 0
je 0x4024fe
mov esi, dword [0x431dec]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp], esi
mov dword [esp + 8], edi
mov dword [esp + 4], eax
call dword [sym.imp.USER32.dll_LoadImageW]
sub esp, 0x18
mov esi, eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0x172
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
test eax, eax
je 0x402554
test edi, edi
jne 0x402554
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push eax
cmp dword [ebp - 0x280], 0
js case.0x40172a.66
mov dword [esp + 4], esi
jmp 0x40280c
mov eax, dword [ebp - 0x2a4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDC]
push ecx
mov ebx, eax
mov dword [esp + 4], 0x5a
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push esi
push esi
mov esi, eax
mov eax, 2
call fcn.00401414
mov dword [esp + 8], 0x48
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
sub esp, 0xc
mov dword [section..bss], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, 3
push edi
push edi
call fcn.00401414
mov dword [esp], 0x41401c
mov dword [0x414010], eax
mov eax, dword [ebp - 0x270]
mov byte [0x414017], 1
mov edx, eax
and edx, 1
mov byte [0x414014], dl
mov edx, eax
and eax, 4
mov byte [0x414016], al
mov eax, dword [ebp - 0x27c]
and edx, 2
mov byte [0x414015], dl
mov dword [esp + 4], eax
call fcn.0040844a
push eax
push eax
mov dword [esp], section..bss
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push edx
jmp 0x402808
xor eax, eax
call fcn.00401414
mov ebx, eax
mov eax, 1
call fcn.00401414
mov edi, dword [ebp - 0x274]
mov dword [esp], ebx
mov dword [esp + 4], eax
test edi, edi
jne 0x402663
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x403a0f
call dword [sym.imp.USER32.dll_EnableWindow]
push eax
push eax
jmp case.0x40172a.66
mov dword [esp], 0
call fcn.00401449
push esi
mov esi, eax
mov dword [esp], 0x31
call fcn.00401449
push edi
mov edi, eax
mov dword [esp], 0x22
call fcn.00401449
push edx
mov ebx, eax
mov dword [esp], 0x15
call fcn.00401449
push ecx
mov dword [esp], 0xffffffec
call fcn.00401699
push eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x24c], eax
cmp word [esi], 0
jne 0x4026e3
xor esi, esi
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x258], edi
cmp word [ebx], 0
jne 0x4026f7
xor ebx, ebx
mov eax, dword [0x40c8f4]
mov dword [ebp - 0x254], ebx
mov edi, 1
add eax, 0xb000
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x268]
mov dword [esp], eax
call fcn.00407a74
push ebx
test eax, eax
je 0x403b0e
xor edi, edi
test byte [ebp - 0x264], 0x40
je 0x403b0e
mov eax, dword [ebp - 0x230]
mov dword [esp], eax
call fcn.00408f0d
mov eax, dword [ebp - 0x230]
push ecx
mov dword [esp], eax
jmp 0x4027c7
mov dword [esp], 0
call fcn.00401449
push edi
mov ebx, eax
mov dword [esp + 4], eax
mov dword [esp], 0xffffffeb
call fcn.0040724e
push eax
push eax
mov dword [esp], ebx
call fcn.004079f2
mov ebx, eax
push edx
test eax, eax
je 0x402b4a
mov edi, dword [ebp - 0x278]
test edi, edi
je 0x4027c4
mov dword [esp], eax
call fcn.00408f0d
cmp dword [ebp - 0x27c], 0
push esi
js 0x4027ba
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
xor edi, edi
mov dword [esp], eax
call fcn.004081bf
push ecx
push ecx
jmp 0x4027c4
test eax, eax
setne al
movzx eax, al
mov edi, eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x401a48
mov dword [esp], 2
call fcn.00401449
push edi
mov dword [esp], eax
call fcn.00408a07
mov ebx, eax
push edx
test eax, eax
je 0x402817
mov eax, dword [eax + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.004081bf
push esi
push esi
mov eax, dword [ebx + 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
jmp 0x403620
mov eax, dword [ebp - 0x29c]
mov word [eax], 0
jmp 0x403aa5
mov dword [esp], 0xffffffee
call fcn.00401449
push esi
mov edi, eax
mov dword [esp], 0xa
call fcn.00408e08
push edx
lea edx, [ebp - 0x28c]
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov esi, eax
mov eax, dword [ebp - 0x29c]
push ecx
push ecx
mov word [eax], 0
mov eax, dword [ebp - 0x2a0]
mov word [eax], 0
test esi, esi
je 0x402b4a
mov dword [esp + 4], esi
mov dword [esp], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push ebx
push ebx
mov ebx, eax
test eax, eax
je 0x402b4a
mov dword [esp], 0xb
call fcn.00408e08
push edx
mov dword [ebp - 0x2a8], eax
mov dword [esp], 0xc
call fcn.00408e08
mov edx, dword [ebp - 0x2a8]
push ecx
mov dword [ebp - 0x2a4], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], edi
call edx
mov ecx, dword [ebp - 0x2a4]
sub esp, 0x10
test eax, eax
jne 0x4028e6
mov edi, 1
jmp 0x40294a
lea eax, [ebp - 0x268]
mov dword [esp + 4], 0x40c000
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 8], eax
mov dword [esp], ebx
call ecx
sub esp, 0x10
test eax, eax
je 0x4028df
mov eax, dword [ebp - 0x288]
mov eax, dword [eax + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004081bf
mov eax, dword [ebp - 0x288]
push edi
push edi
mov eax, dword [eax + 0xc]
xor edi, edi
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.004081bf
push eax
push eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x401a48
cmp dword [0x431d58], 0
js 0x402a80
mov dword [esp], 0xfffffff0
call fcn.00401449
push ebx
mov edi, eax
mov dword [esp], 1
call fcn.00401449
cmp dword [ebp - 0x270], 0
push esi
mov esi, eax
jne 0x4029b3
mov dword [esp + 8], 8
mov dword [esp + 4], 0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
sub esp, 0xc
mov ebx, eax
test eax, eax
jne 0x4029c3
jmp 0x402a74
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ebx, eax
push ecx
test eax, eax
je 0x40298c
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00408ec5
push edx
push edx
test eax, eax
je 0x402a31
mov edi, dword [ebp - 0x278]
test edi, edi
je 0x402a02
mov dword [esp], edi
mov dword [ebp - 0x29c], eax
call fcn.00401699
mov eax, dword [ebp - 0x29c]
push edi
call eax
test eax, eax
setne al
movzx eax, al
mov edi, eax
jmp 0x402a48
mov ecx, dword [0x40c8f4]
mov dword [esp + 0x10], 0x40b000
mov dword [esp + 0xc], 0x416860
mov dword [esp + 8], ecx
mov ecx, dword [ebp - 0x2a4]
mov dword [esp + 4], 0x400
mov dword [esp], ecx
call eax
jmp 0x402a48
mov dword [esp + 4], esi
mov edi, 1
mov dword [esp], 0xfffffff7
call fcn.0040724e
push esi
push esi
cmp dword [ebp - 0x274], 0
jne 0x403b0e
mov dword [esp], ebx
call fcn.00404b53
push ecx
test eax, eax
je 0x403b0e
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x401a48
mov dword [esp], 0xfffffff6
jmp 0x402b44
mov dword [esp], 0xffffffe7
jmp 0x402b44
mov dword [esp], 0xfffffff0
call fcn.00401449
push esi
mov dword [ebp - 0x2a0], eax
mov dword [esp], 0xffffffdf
call fcn.00401449
push edi
mov esi, eax
mov dword [esp], 2
call fcn.00401449
push edx
mov dword [ebp - 0x2a4], eax
mov dword [esp], 0xffffffcd
call fcn.00401449
push ecx
mov dword [ebp - 0x29c], eax
mov dword [esp], 0x45
call fcn.00401449
mov edi, dword [ebp - 0x270]
push ebx
mov dword [ebp - 0x2a8], eax
mov dword [esp], esi
call fcn.00407b9e
push edx
test eax, eax
jne 0x402b07
mov dword [esp], 0x21
call fcn.00401449
push ebx
lea eax, [ebp - 0x288]
mov dword [esp + 0xc], 0x4126c4
mov dword [esp + 0x10], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x40ddc4
call dword [sym.imp.ole32.dll_CoCreateInstance]
sub esp, 0x14
test eax, eax
jns 0x402b54
mov dword [esp], 0xfffffff0
call fcn.00401699
push ecx
mov edi, 1
jmp 0x403b0e
mov eax, dword [ebp - 0x288]
lea ecx, [ebp - 0x268]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 4], 0x411cc4
mov dword [esp], eax
call dword [edx]
sub esp, 0xc
mov ebx, eax
test eax, eax
js 0x402c8e
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [edx + 0x50]
bt edi, 0xf
mov ebx, eax
push edx
push edx
jb 0x402bba
mov edx, dword [ebp - 0x288]
mov eax, dword [0x40c8f4]
mov ecx, dword [edx]
add eax, 0xb000
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [ecx + 0x24]
push eax
push eax
mov eax, edi
sar eax, 0xc
and eax, 7
je 0x402bd8
mov edx, dword [ebp - 0x288]
mov ecx, dword [edx]
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [ecx + 0x3c]
push eax
push eax
mov eax, dword [ebp - 0x288]
mov ecx, edi
shr ecx, 0x10
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x34]
push eax
push eax
mov eax, dword [ebp - 0x29c]
cmp word [eax], 0
je 0x402c22
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x29c]
and edi, 0xfff
mov edx, dword [eax]
mov dword [esp + 8], edi
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x44]
sub esp, 0xc
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x2c]
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2a8]
push edi
push edi
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x1c]
push eax
push eax
test ebx, ebx
js 0x402c7f
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [eax]
mov dword [esp + 8], 1
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x18]
sub esp, 0xc
mov ebx, eax
mov eax, dword [ebp - 0x268]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push esi
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push ecx
test ebx, ebx
js 0x402b3d
mov dword [esp], 0xfffffff4
call fcn.00401699
jmp 0x4017cf
mov dword [esp], 0
call fcn.00401449
push edi
mov ebx, eax
mov dword [esp], 0x11
call fcn.00401449
push edx
mov esi, eax
mov dword [esp], 0x23
call fcn.00401449
push ecx
mov edi, eax
mov dword [esp], ebx
call fcn.00408a07
push edx
test eax, eax
je 0x402d75
mov dword [esp], ebx
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x268], eax
call sub.KERNEL32.dll_lstrlenW
push edx
mov word [ebx + eax*2 + 2], 0
mov dword [esp], esi
call sub.KERNEL32.dll_lstrlenW
push ecx
mov word [esi + eax*2 + 2], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x260], ebx
mov dword [esp + 4], edi
mov dword [esp], 0
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x24e], edi
mov word [ebp - 0x258], ax
call fcn.0040724e
lea eax, [ebp - 0x268]
push ebx
push ebx
mov dword [esp], eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov edi, eax
push esi
test eax, eax
je 0x403b0e
mov dword [esp + 4], 0
mov dword [esp], 0xfffffff9
call fcn.0040724e
push edi
push edi
jmp 0x402b4a
cmp ebx, 0xbadf00d
jne 0x402197
inc dword [0x431d34]
jmp case.0x40172a.66
xor esi, esi
test ebx, ebx
je 0x402dbc
mov dword [esp], 0
call fcn.00401449
push esi
mov esi, eax
xor edi, edi
cmp dword [ebp - 0x27c], 0
je 0x402dd6
mov dword [esp], 0x11
call fcn.00401449
push ebx
mov edi, eax
xor ebx, ebx
cmp dword [ebp - 0x270], 0
je 0x402df0
mov dword [esp], 0x22
call fcn.00401449
push ecx
mov ebx, eax
mov dword [esp], 0xffffffcd
call fcn.00401449
push edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
sub esp, 0x10
jmp 0x40333d
mov dword [esp], 1
mov eax, dword [0x40c004]
mov dword [ebp - 0x268], eax
call fcn.00401449
push ecx
mov ebx, eax
mov dword [esp], 0x12
call fcn.00401449
push esi
mov esi, eax
mov dword [esp], 0xffffffdd
call fcn.00401449
push edi
xor edi, edi
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0x10], 0x3ff
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x268]
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [ebp - 0x29c]
sub esp, 0x18
cmp word [eax], 0xa
jne 0x403b0e
jmp 0x403aab
cmp dword [ebp - 0x270], 0
jne 0x402ee1
mov dword [esp], 2
call fcn.00401612
mov ebx, eax
push edx
test eax, eax
je 0x402b4a
mov dword [esp], 0x33
call fcn.00401449
push esi
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push edi
mov esi, eax
push edi
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push eax
jmp 0x402f5a
mov dword [esp], 0x22
call fcn.00401449
push ebx
mov ebx, eax
mov eax, dword [ebp - 0x270]
sar eax, 1
mov dword [ebp - 0x268], eax
cmp word [ebx], 0
je 0x402b4a
or eax, 0x100020
mov dword [ebp - 0x268], eax
test esi, esi
js 0x402f23
add esi, dword [0x431d24]
sub esi, 0x7fffffff
lea eax, [ebp - 0x268]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.00407fcd
push ecx
push ecx
test eax, eax
je 0x402b4a
mov edx, dword [ebp - 0x268]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], edx
call fcn.0040149f
sub esp, 0xc
mov esi, eax
test esi, esi
setne al
movzx eax, al
mov edi, eax
jmp 0x403b0e
mov dword [esp], 2
mov esi, dword [ebp - 0x270]
mov edi, dword [ebp - 0x26c]
call fcn.00401449
push ecx
mov dword [ebp - 0x29c], eax
mov dword [esp], 0x11
call fcn.00401449
push edx
test ebx, ebx
js 0x402fa5
add ebx, dword [0x431d24]
sub ebx, 0x7fffffff
lea edx, [ebp - 0x268]
mov dword [esp + 8], 0x100022
mov dword [esp + 0xc], edx
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.004080a1
sub esp, 0x10
test eax, eax
jne 0x402b4a
mov ebx, dword [ebp - 0x268]
test ebx, ebx
je 0x402b4a
cmp esi, 1
jne 0x403000
mov dword [esp], 0x23
call fcn.00401449
push esi
mov dword [esp], 0x415060
call sub.KERNEL32.dll_lstrlenW
inc eax
push edx
add eax, eax
jmp 0x40304b
cmp esi, 4
je 0x403037
xor eax, eax
cmp esi, 3
jne 0x40304b
mov eax, dword [ebp - 0x274]
mov dword [esp + 0xc], 0x1800
mov dword [esp + 8], 0x415060
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00403db0
sub esp, 0x10
jmp 0x40304b
mov eax, 3
call fcn.00401414
mov dword [0x415060], eax
mov eax, 4
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0x415060
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
sub esp, 0x18
test eax, eax
setne al
movzx eax, al
mov edi, eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x401a48
mov dword [esp], 0x20019
call fcn.00401612
push edx
mov ebx, eax
mov dword [esp], 0x33
call fcn.00401449
push ecx
mov ecx, dword [ebp - 0x29c]
mov word [ecx], 0
test ebx, ebx
je 0x402b4a
lea edx, [ebp - 0x288]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x268]
mov dword [ebp - 0x288], 0x800
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x403111
mov eax, dword [ebp - 0x268]
lea edx, [eax - 1]
cmp edx, 1
jbe 0x403126
cmp eax, 4
je 0x403126
mov eax, dword [ebp - 0x29c]
mov edi, 1
mov word [eax], 0
jmp 0x403083
mov edi, dword [ebp - 0x270]
cmp eax, 4
jne 0x4031bc
xor eax, eax
test edi, edi
sete al
mov edi, eax
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004081bf
push eax
push eax
jmp 0x403083
mov dword [esp], 0x20019
call fcn.00401612
push esi
mov ebx, eax
mov eax, 3
call fcn.00401414
mov ecx, dword [ebp - 0x29c]
mov word [ecx], 0
test ebx, ebx
je 0x402b4a
cmp dword [ebp - 0x270], 0
mov dword [ebp - 0x268], 0x3ff
je 0x4031d0
mov dword [esp + 0xc], 0x3ff
xor edi, edi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
sub esp, 0x10
mov eax, dword [ebp - 0x29c]
mov word [eax + 0x7fe], 0
jmp 0x403083
mov ecx, dword [ebp - 0x29c]
lea edx, [ebp - 0x268]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
sub esp, 0x20
test eax, eax
setne al
movzx eax, al
mov edi, eax
jmp 0x4031bc
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004081e4
push ebx
test eax, eax
je case.0x40172a.66
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4017cf
mov dword [esp], 0xffffffed
call fcn.00401449
mov edx, dword [ebp - 0x278]
push ecx
mov dword [esp + 8], edx
mov edx, dword [ebp - 0x27c]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00407d90
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x402808
jmp 0x4036b2
mov ebx, dword [ebp - 0x278]
test ebx, ebx
je 0x4032a6
mov eax, 1
call fcn.00401414
mov word [0x414860], ax
xor eax, eax
cmp edi, 0x38
setne al
mov esi, eax
inc esi
jmp 0x4032ff
cmp edi, 0x38
jne 0x4032e6
mov dword [esp], 0x21
call fcn.00401449
push eax
mov dword [esp + 8], 0x400
mov dword [esp + 4], 0x414860
mov dword [esp], 0x415060
call fcn.00408320
mov dword [esp], 0x414860
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
push edx
jmp 0x4032ff
mov dword [esp], 0x11
call fcn.00401449
push ecx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
push esi
lea esi, [eax + eax]
mov eax, dword [ebp - 0x29c]
cmp word [eax], 0
je 0x402b4a
mov dword [esp], eax
call fcn.004081e4
push edx
mov edx, eax
xor eax, eax
cmp edi, 0x38
sete al
or eax, ebx
je 0x403347
mov dword [esp + 8], esi
mov dword [esp + 4], 0x414860
mov dword [esp], edx
call fcn.00407e9f
sub esp, 0xc
test eax, eax
sete al
jmp 0x402f5f
cmp dword [ebp - 0x274], 0
je 0x403326
mov dword [esp + 4], edx
mov dword [esp], edx
mov dword [ebp - 0x29c], edx
call fcn.00407ee5
mov edx, dword [ebp - 0x29c]
test eax, eax
push ebx
push ebx
jns 0x403326
jmp 0x402b4a
mov eax, 2
call fcn.00401414
mov dword [ebp - 0x2a4], eax
test eax, eax
jle case.0x40172a.66
mov eax, dword [ebp - 0x29c]
xor ebx, ebx
cmp word [eax], 0
je 0x4035a9
mov dword [esp], eax
mov edi, 2
call fcn.004081e4
mov word [ebp - 0x29c], 0
push ecx
mov esi, eax
cmp dword [ebp - 0x284], 0x39
mov edx, dword [ebp - 0x274]
jne 0x4034a7
lea eax, [ebp - 0x268]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov eax, 2
sub eax, edx
mov dword [esp], esi
mov dword [esp + 8], eax
lea eax, [ebp - 0x288]
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x4035a9
mov edi, dword [ebp - 0x268]
test edi, edi
je 0x4035a9
movzx eax, byte [ebp - 0x288]
cmp dword [ebp - 0x274], 0
mov word [ebp - 0x28c], ax
jne 0x4034ee
lea eax, [ebp - 0x28c]
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x268]
mov dword [esp + 4], 8
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 8], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
sub esp, 0x18
test eax, eax
jne 0x4034ee
dec dword [ebp - 0x268]
mov word [ebp - 0x28c], 0xfffd
je 0x4034ee
dec edi
mov dword [esp + 0xc], 1
mov eax, edi
mov dword [esp + 8], 0
neg eax
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
jmp 0x40342d
or edx, ebx
je 0x4034d1
lea eax, [ebp - 0x28c]
mov dword [esp + 8], 2
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00407e59
sub esp, 0xc
test eax, eax
jne 0x4034ee
jmp 0x4035a9
mov dword [esp + 4], 0
mov dword [esp], esi
call fcn.00407ee5
push edx
push edx
test eax, eax
jns 0x4034ab
xor ebx, ebx
jmp 0x4035a9
cmp dword [ebp - 0x274], 0
movzx eax, word [ebp - 0x28c]
je 0x403517
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.004081bf
push eax
push eax
jmp 0x403b14
lea edx, [ebx + ebx]
add edx, dword [ebp - 0x2a0]
cmp word [ebp - 0x29c], 0xd
je 0x403534
cmp word [ebp - 0x29c], 0xa
jne 0x403573
cmp word [ebp - 0x29c], ax
je 0x403549
cmp ax, 0xd
je 0x40356d
cmp ax, 0xa
je 0x40356d
neg edi
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
jmp 0x4035a9
inc ebx
mov word [edx], ax
jmp 0x4035a9
mov ecx, dword [ebp - 0x2a0]
inc ebx
mov word [ecx + ebx*2 - 2], ax
test ax, ax
je 0x4035a9
mov word [ebp - 0x29c], ax
mov eax, 0x3ff
cmp dword [ebp - 0x2a4], 0x3ff
cmovle eax, dword [ebp - 0x2a4]
cmp ebx, eax
jl 0x4033b6
mov eax, dword [ebp - 0x2a0]
test ebx, ebx
mov word [eax + ebx*2], 0
jmp 0x40333f
mov eax, dword [ebp - 0x29c]
cmp word [eax], 0
je case.0x40172a.66
mov eax, 2
mov ebx, dword [ebp - 0x274]
call fcn.00401414
mov esi, eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004081e4
push edi
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
cmp dword [ebp - 0x27c], 0
js case.0x40172a.66
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.004081bf
jmp 0x402669
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004081e4
push ebx
test eax, eax
je case.0x40172a.66
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x4017cf
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.004081e4
push ecx
test eax, eax
je 0x4036b2
lea edx, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push edx
push edx
test eax, eax
je 0x4036b2
jmp 0x4036d1
mov dword [esp], 2
call fcn.00401449
lea edx, [ebp - 0x268]
push esi
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push edi
push edi
cmp eax, 0xffffffff
jne 0x4036bd
mov eax, dword [ebp - 0x2a0]
mov word [eax], 0
mov eax, dword [ebp - 0x29c]
jmp 0x403aab
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.004081bf
push ebx
push ebx
lea eax, [ebp - 0x23c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004082a4
jmp 0x402669
mov dword [esp], 0xfffffff0
call fcn.00401449
push edx
mov esi, eax
mov dword [esp], eax
call fcn.00407b9e
push ecx
test eax, eax
jne 0x403717
mov dword [esp], 0xffffffed
call fcn.00401449
push eax
mov dword [esp], esi
call fcn.00407ced
push edi
mov dword [esp + 8], 2
mov dword [esp + 4], 0x40000000
mov dword [esp], esi
call fcn.00407d90
sub esp, 0xc
mov dword [ebp - 0x29c], eax
inc eax
jne 0x40375d
mov dword [esp], esi
mov edi, 1
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, 0xffffffef
push ebx
jmp 0x4038b9
mov eax, dword [0x431dcc]
mov dword [esp], 0x40
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x2a0], eax
mov dword [esp + 4], eax
call edi
mov edx, 0xfffffd66
push ecx
mov ebx, eax
push ecx
test eax, eax
je 0x40388e
mov dword [esp], 0
call fcn.00403d7e
push eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00403d56
push eax
push eax
mov eax, dword [ebp - 0x278]
mov dword [esp], 0x40
mov dword [esp + 4], eax
call edi
mov edi, eax
push edx
push edx
test eax, eax
je 0x40383a
mov eax, dword [ebp - 0x278]
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.00403db0
mov eax, edi
sub esp, 0x10
cmp byte [eax], 0
je 0x403830
mov ecx, dword [eax]
lea edx, [eax + 8]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [ebp - 0x2a8], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2a4], edx
add ecx, ebx
mov dword [esp], ecx
call fcn.00407cd0
mov edx, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x2a8]
sub esp, 0xc
lea eax, [edx + ecx]
jmp 0x4037f1
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00407e9f
sub esp, 0xc
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0xffffffff
call fcn.00403db0
sub esp, 0x10
mov edx, eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x2a0], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x2a0]
push eax
test edx, edx
js 0x403744
mov eax, 0xfffffff3
xor edi, edi
mov dword [esp], eax
jmp 0x401a43
xor eax, eax
call fcn.00401414
mov ebx, eax
cmp eax, dword [0x431d8c]
jae 0x402b4a
mov edi, dword [ebp - 0x278]
imul esi, eax, 0x818
add esi, dword [0x431d88]
test edi, edi
js 0x403910
jne 0x403908
mov eax, dword [ebp - 0x2a0]
add esi, 0x18
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.004082a4
jmp 0x403a0f
mov eax, dword [esi + edi*4]
jmp 0x403616
mov ecx, edi
not ecx
mov dword [ebp - 0x278], ecx
test ecx, ecx
je 0x403930
mov eax, 1
call fcn.00401414
mov dword [ebp - 0x27c], eax
jmp 0x40394e
mov eax, dword [ebp - 0x270]
mov dword [esp + 4], eax
lea eax, [esi + 0x18]
mov dword [esp], eax
call fcn.0040844a
push edi
push edi
or dword [esi + 8], 0x100
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x278]
mov dword [esi + eax*4], edx
cmp dword [ebp - 0x274], 0
je case.0x40172a.66
mov dword [esp], ebx
call fcn.00401230
jmp 0x4017cf
xor eax, eax
call fcn.00401414
cmp eax, 0x1f
ja 0x402b4a
cmp dword [ebp - 0x274], 0
mov edi, dword [ebp - 0x278]
je 0x4039dd
test edi, edi
je 0x4039bc
mov dword [esp], eax
call fcn.00401343
push ecx
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0040128f
jmp 0x402669
mov dword [esp], 0
call fcn.00401392
push edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.004081bf
jmp 0x403a0f
test edi, edi
mov edx, dword [0x431d60]
lea eax, [eax + 0x24]
je 0x4039f9
mov ecx, dword [ebp - 0x27c]
mov dword [edx + eax*4 + 4], ecx
jmp case.0x40172a.66
mov eax, dword [edx + eax*4 + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.0040844a
push eax
push eax
jmp 0x403b0e
mov dword [esp], 5
call fcn.00408e08
push ecx
mov ebx, eax
mov dword [esp], 0x22
call fcn.00401449
push esi
test ebx, ebx
je 0x403aa5
lea esi, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 4], esi
call dword [sym.imp.ole32.dll_IIDFromString]
push edx
push edx
test eax, eax
js 0x403aa5
lea eax, [ebp - 0x288]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x274]
mov dword [esp], esi
mov dword [esp + 4], eax
call ebx
sub esp, 0x10
test eax, eax
js 0x403aa5
mov eax, dword [ebp - 0x288]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.004082a4
push eax
push eax
mov eax, dword [ebp - 0x288]
mov dword [esp], eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x4017cf
mov eax, dword [ebp - 0x2a0]
mov word [eax], 0
jmp 0x402b4a
mov eax, dword [ebp - 0x2a4]
and ebx, dword [0x42b160]
mov dword [esp + 0xc], 0
mov dword [esp + 8], ebx
mov dword [esp + 4], 0xb
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
cmp dword [ebp - 0x280], 0
je case.0x40172a.66
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_InvalidateRect]
sub esp, 0xc
xor edi, edi
add dword [0x431d28], edi
xor ebx, ebx
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 4