Function at 0x426660
Capabilities:
Check for time delay via gettickcount
Empty the recycle bin
Find taskbar
Move file
Persist via application shimming
Print debug messages
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x498a8b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5a8
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
mov dword [esp + 0xb8], ecx
test eax, eax
jne 0x426699
lea eax, [esp + 0xac]
mov ebx, dword [0x4aa988]
mov edx, eax
mov esi, ecx
mov dword [esp + 0x6c], eax
mov dword [edx], 0
mov dword [esp + 0x74], ebx
mov dword [esp + 0x40], esi
test ecx, ecx
je case.0x4269d4.116
mov edi, dword [esp + 0xac]
cmp dword [0x4af910], 0
je 0x4266fe
cmp dword [0x4af900], 0
je 0x4266ec
mov eax, dword [0x4af8f8]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4af900], 0
call dword [sym.imp.USER32.dll_CloseClipboard]
xor eax, eax
mov dword [0x4af910], eax
mov dword [0x4af8f8], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x4aa988]
mov ecx, eax
sub ecx, dword [0x4af8b4]
cmp ecx, dword [edx + 0xb8]
jbe 0x42674b
push 0
push 0
push 0
push 0
lea eax, [esp + 0x174]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x426740
push 1
push 0xffffffffffffffff
call fcn.00401420
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4af8b4], eax
cmp byte [ebx + 0xcc], 0
jne 0x42677c
cmp byte [ebx + 0xce], 0
jne 0x42677c
mov edx, dword [0x4af8a8]
cmp edx, 0xffffffff
jle 0x42677c
mov ecx, dword [ebx + 0x28]
cmp ecx, edx
jle 0x426778
mov byte [ebx + 0xcc], 1
jmp 0x42677c
inc ecx
mov dword [ebx + 0x28], ecx
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
cmp ecx, 0xffffffff
jl 0x42679f
jg 0x42678d
cmp edx, 0xffffffff
jbe 0x42679f
cmp dword [0x4af8a4], ecx
jg 0x4267b1
jl 0x42679f
cmp dword [0x4af8a0], edx
jae 0x4267b1
mov ecx, dword [ebx + 0x24]
cmp ecx, 0xffffffff
jle 0x4267bd
sub eax, dword [0x4af8b0]
cmp eax, ecx
jb 0x4267bd
push 1
push 0xa
call fcn.00401420
add esp, 8
cmp byte [ebx + 0xd8], 0
je 0x4267e8
jmp 0x4267d0
push 1
push 0x8000012f
call fcn.00401420
add esp, 8
cmp byte [ebx + 0xd8], 0
jne 0x4267d0
mov dword [0x4af5ec], esi
cmp byte [ebx + 0xd9], 0
je 0x426830
mov ecx, dword [0x4aebb4]
mov dword [ecx*4 + 0x4aebb8], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x4aebb4]
mov dword [ecx*4 + 0x4adbd8], eax
inc ecx
mov dword [0x4aebb4], ecx
cmp ecx, 0x190
jl 0x426830
mov dword [0x4aebb4], 0
mov al, byte [esi]
cmp al, 1
je 0x426859
cmp al, 0x6b
je 0x426859
cmp al, 0x72
je 0x426859
mov ebx, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push ebx
push esi
call fcn.0045b310
mov edi, eax
cmp edi, 1
jne 0x42accc
jmp 0x42685c
mov ebx, dword [ebp + 0xc]
mov dl, byte [esi]
mov byte [esp + 0xe4], dl
cmp dl, 9
jb 0x4269bc
cmp dl, 0x20
ja 0x4269bc
add dword [0x4af8a0], 1
push esi
adc dword [0x4af8a4], 0
call fcn.0042b5d0
cmp eax, 3
jne 0x42691c
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x75
jne 0x4268bf
lea esp, [esp]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x54]
push edx
push ebx
push 2
call fcn.00426660
mov ecx, dword [esi + 0x14]
mov edi, eax
mov eax, dword [esp + 0x54]
cmp eax, ecx
je 0x4268a0
jmp 0x4268d2
lea eax, [esp + 0x54]
push eax
push ebx
push 3
call fcn.00426660
mov edi, eax
mov eax, dword [esp + 0x54]
cmp eax, esi
je 0x427b6c
cmp dword [ebp + 8], 3
je 0x42acc6
cmp edi, 1
jne 0x42acc6
test eax, eax
je 0x426902
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x42ace8
jmp 0x427b64
mov esi, dword [esi + 0x18]
cmp byte [esi], 0x21
mov dword [esp + 0x40], esi
jne 0x427b68
mov edx, esi
mov eax, dword [edx + 0x18]
jmp 0x427b64
mov esi, dword [esi + 0x18]
cmp byte [esi], 0x21
mov dword [esp + 0x40], esi
jne 0x426996
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x75
jne 0x42694f
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x54]
push edx
push ebx
push 2
call fcn.00426660
mov ecx, dword [esi + 0x14]
mov edi, eax
mov eax, dword [esp + 0x54]
cmp eax, ecx
je 0x426930
jmp 0x426962
lea eax, [esp + 0x54]
push eax
push ebx
push 3
call fcn.00426660
mov edi, eax
mov eax, dword [esp + 0x54]
cmp dword [ebp + 8], 3
je 0x42acc6
cmp edi, 1
jne 0x42acc6
test eax, eax
je 0x42698a
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x42ace8
jmp 0x427b64
mov edx, dword [esi + 0x18]
mov dword [esp + 0x40], edx
jmp 0x427b68
cmp dword [ebp + 8], 3
jne 0x427b68
mov eax, 1
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
movzx eax, dl
add eax, 0xffffffa0
cmp eax, 0x80
ja case.0x4269d4.98
movzx eax, byte [eax + 0x42b104]
jmp dword [eax*4 + 0x42b0c0]
mov ecx, 1
add dword [0x4af8a0], ecx
adc dword [0x4af8a4], 0
mov eax, dword [esi + 0x18]
test eax, eax
je 0x426a90
xor ebx, ebx
cmp dword [esi + 0xc], ecx
mov edx, eax
sete bl
mov dword [esp + 0x88], edx
test ebx, ebx
je 0x426a27
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x94]
mov dword [eax + 0x98], ecx
mov dword [eax + 0x94], 0
mov ecx, edx
call fcn.004012e0
mov edi, eax
test ebx, ebx
je 0x426a4e
mov eax, dword [esp + 0x74]
mov edx, dword [eax + 0x98]
mov dword [eax + 0x94], edx
mov dword [eax + 0x98], 0
test edi, edi
je 0x42accc
cmp edi, 8
je 0x42accc
cmp dword [ebp + 8], 3
jne 0x427b61
mov eax, 1
cmp edi, 7
je 0x4269a5
mov eax, edi
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push esi
mov bl, cl
call fcn.004430b0
mov edx, eax
mov dword [esp + 0x88], edx
test edx, edx
je 0x42aff9
mov ecx, dword [esp + 0x74]
cmp dword [ecx + 0x94], 0
je 0x426acc
mov eax, dword [edx + 8]
call fcn.00443160
test eax, eax
je 0x426acc
mov ebx, 1
jmp 0x426a0d
xor ebx, ebx
jmp 0x426a27
add dword [0x4af8a0], 1
adc dword [0x4af8a4], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x88], eax
test eax, eax
jne 0x426b06
push esi
mov bl, 1
call fcn.004430b0
mov dword [esp + 0x88], eax
test eax, eax
je 0x42aff9
cmp dword [ebp + 8], 3
mov ecx, dword [esp + 0x74]
mov dword [ecx + 0x9c], eax
je 0x42ace5
mov ecx, dword [eax + 8]
mov edx, dword [esi + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x42ace5
mov dword [esp + 0x40], ecx
jmp 0x427b68
add dword [0x4af8a0], 1
mov eax, dword [esp + 0xb8]
adc dword [0x4af8a4], 0
mov ebx, dword [eax + 0xc]
test ebx, ebx
jne 0x426b7d
mov eax, dword [0x4ae270]
mov edi, eax
cmp byte [eax], bl
je 0x426b7b
mov ebx, dword [0x4af2b0]
test ebx, ebx
je 0x426b7b
mov eax, dword [ebx + 4]
push edi
push eax
call fcn.004883a1
add esp, 8
test eax, eax
je 0x426b7d
mov ebx, dword [ebx + 0x14]
test ebx, ebx
jne 0x426b63
xor ebx, ebx
xor eax, eax
mov edi, 1
test ebx, ebx
je 0x426c86
mov eax, dword [0x4ae274]
cmp byte [eax], 0
je 0x426bac
push 0x49d54c
push eax
call fcn.004883a1
add esp, 8
test eax, eax
jne 0x426bac
mov al, 1
jmp 0x426bae
xor al, al
lea ecx, [esp + 0x88]
push ecx
push eax
push ebx
call fcn.0047afb0
mov edx, dword [esp + 0x88]
mov dword [esp + 0x58], eax
test edx, edx
je 0x426c82
mov eax, dword [edx + 8]
mov edi, dword [eax + 0x1c]
test edi, edi
je 0x426c18
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x426bec
cmp edi, ecx
je 0x426c18
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x426be1
push 0x49b8cd
push 0
push str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov ecx, esi
call fcn.0042faa0
xor eax, eax
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [esp + 0x74]
mov edi, dword [ebx + 0x94]
test edi, edi
je 0x426cab
call fcn.00443160
test eax, eax
je 0x426cab
mov dword [esp + 0x4c], 1
mov dword [ebx + 0x98], edi
mov dword [ebx + 0x94], 0
mov ecx, edx
call fcn.004012e0
cmp dword [esp + 0x4c], 0
mov edi, eax
je 0x426c71
mov edx, dword [ebx + 0x98]
mov dword [ebx + 0x94], edx
mov dword [ebx + 0x98], 0
test edi, edi
je 0x42accc
cmp edi, 8
je 0x42accc
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0xb8]
test eax, eax
sete al
movzx ecx, al
push ecx
push edx
call fcn.0042f740
cmp dword [ebp + 8], 3
je 0x426a69
jmp 0x427b61
mov dword [esp + 0x4c], 0
jmp 0x426c4b
mov eax, dword [esi + 0xc]
mov dword [esp + 0x48], eax
dec eax
je 0x426d0d
sub eax, 3
je 0x426cec
sub eax, 5
jne 0x426dae
mov ecx, dword [0x4ae274]
push eax
push eax
push 1
push ecx
call fcn.00415990
add esp, 0x10
mov dword [esp + 0x8c], eax
jmp 0x426dae
mov edx, dword [0x4ae270]
push 0
push 0
push 0
push edx
call fcn.00415990
add esp, 0x10
mov dword [esp + 0x8c], eax
jmp 0x426dae
movzx eax, byte [esi + 1]
sub eax, 0
je 0x426da6
dec eax
mov eax, dword [0x4ae270]
je 0x426d6a
push 0x49ec20
push eax
call fcn.004883a1
add esp, 8
test eax, eax
jne 0x426d3e
mov dword [esp + 0x48], 5
jmp 0x426dae
mov ecx, dword [0x4ae270]
push 0
push 0
push 0
push ecx
call fcn.00415990
xor edx, edx
add esp, 0x10
test eax, eax
setne dl
mov dword [esp + 0x8c], eax
add edx, 3
mov dword [esp + 0x48], edx
jmp 0x426dae
push 0
push 1
push 1
push 1
call fcn.00474dd0
add esp, 0x10
test eax, eax
jne 0x426da6
push eax
push eax
push eax
mov eax, dword [0x4ae270]
push eax
call fcn.00415990
xor ecx, ecx
add esp, 0x10
test eax, eax
setne cl
mov dword [esp + 0x8c], eax
add ecx, 3
mov dword [esp + 0x48], ecx
jmp 0x426dae
mov dword [esp + 0x48], 2
mov ecx, dword [esp + 0x48]
lea eax, [ecx - 3]
cmp eax, 7
ja case.0x426dc5.5
movzx edx, byte [eax + 0x42b194]
jmp dword [edx*4 + 0x42b188]
mov esi, dword [0x4ae274]
call fcn.004161b0
mov dword [esp + 0x80], eax
test eax, eax
je 0x42adcd
mov eax, dword [0x4ae278]
cmp byte [eax], 0x31
jne 0x426e0a
cmp byte [eax + 1], 0
jne 0x426e0a
mov esi, dword [esp + 0x40]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0x84], 1
jmp case.0x426dc5.5
mov esi, dword [esp + 0x40]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0x84], 0
jmp case.0x426dc5.5
cmp ecx, 4
jne 0x426e67
mov esi, dword [0x4ae278]
call fcn.004161b0
mov dword [esp + 0x80], eax
mov eax, dword [0x4ae27c]
cmp byte [eax], 0x31
jne 0x426e56
cmp byte [eax + 1], 0
jne 0x426e56
mov esi, dword [esp + 0x40]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0x84], 1
jmp 0x426e8e
mov esi, dword [esp + 0x40]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0x84], 0
jmp 0x426e8e
mov eax, dword [0x4ae278]
call fcn.00416200
mov dword [esp + 0x80], eax
shr eax, 2
and al, 1
mov byte [esp + 0x84], al
je 0x426e8e
and dword [esp + 0x80], 0xfffffffb
cmp dword [esp + 0x80], 0
je 0x42adfb
xor edx, edx
mov byte [esp + 0x53], 0
mov dword [esp + 0x54], edx
mov eax, dword [esi + 0x18]
cmp byte [eax], 0x6c
mov dword [esp + 0x4c], eax
jne 0x426ec0
mov dword [esp + 0x44], eax
mov eax, dword [eax + 0x14]
mov dword [esp + 0x4c], eax
jmp 0x426ec4
mov dword [esp + 0x44], edx
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 8]
mov dword [esp + 0x108], ecx
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x10c], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x58], ecx
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x70], ecx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0xa0], ecx
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x48]
cmp ecx, 8
je 0x426f0e
mov dword [eax + 8], 1
mov dword [eax + 0xc], edx
lea eax, [ecx - 2]
cmp eax, 8
ja case.default.0x426f1a
jmp dword [eax*4 + 0x42b19c]
cmp byte [esi + 1], dl
jbe 0x426f3c
xor edi, edi
mov ecx, esi
call fcn.00422a10
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0xd4], 0
jmp 0x426f48
xor eax, eax
xor edx, edx
mov byte [esp + 0xd4], 1
mov ecx, dword [esp + 0xd4]
push ecx
push edx
mov edx, dword [esp + 0x4c]
push eax
push edx
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x67]
push ecx
push esi
call fcn.0042cb30
mov edi, eax
jmp case.default.0x426f1a
mov ebx, dword [ebp + 0xc]
lea edx, [esp + 0x54]
push edx
lea eax, [esp + 0x57]
push eax
call fcn.0042ccf0
mov esi, dword [esp + 0x40]
mov edi, eax
jmp case.default.0x426f1a
mov ecx, dword [esp + 0x44]
push ecx
lea edx, [esp + 0x58]
push edx
lea eax, [esp + 0x5b]
push eax
push ebx
push esi
call fcn.0042cee0
mov edi, eax
jmp case.default.0x426f1a
mov ecx, dword [0x4ae278]
push 0x49f7b4
push ecx
call fcn.004883a1
mov edx, dword [esp + 0x4c]
add esp, 8
push edx
test eax, eax
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x5b]
push ecx
push ebx
push esi
je 0x426fdd
call fcn.0042df60
mov edi, eax
jmp case.default.0x426f1a
call fcn.0042e210
mov edi, eax
jmp case.default.0x426f1a
lea esi, [esp + 0x12c]
call fcn.00416860
mov dword [esp + 0x5bc], 0
mov edx, dword [0x4ae274]
cmp byte [edx], 0
je 0x427058
mov eax, dword [esp + 0x74]
mov eax, dword [eax + 0xdc]
and eax, 0x7fffffff
push 0x30c
mov ecx, esi
call fcn.00472990
test al, al
je 0x427058
mov ecx, dword [0x4ae278]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x58]
push edx
mov edx, dword [esp + 0x48]
lea eax, [esp + 0x5b]
push eax
push ecx
push edx
mov edx, dword [esp + 0x58]
mov ecx, esi
call fcn.0042e4d0
mov edi, eax
call fcn.004167d0
jmp 0x42705d
mov edi, 1
lea ecx, [esp + 0x12c]
mov dword [esp + 0x5bc], 0xffffffff
call fcn.004168b0
mov esi, dword [esp + 0x40]
jmp case.default.0x426f1a
cmp dword [esp + 0x48], 3
mov eax, dword [0x4ae270]
je 0x42708e
mov eax, dword [0x4ae274]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x44]
push eax
mov eax, dword [esp + 0x88]
push eax
push ecx
push edx
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x67]
push ecx
push ebx
mov ecx, esi
call fcn.0042d350
mov edi, eax
jmp case.default.0x426f1a
cmp dword [esp + 0x48], 4
lea edx, [esp + 0x7e]
push edx
jne 0x4270e7
mov eax, dword [0x4ae270]
push 0
push 0
push eax
call fcn.00415990
mov ecx, dword [0x4ae274]
mov dword [esp + 0xcc], ecx
jmp 0x4270fd
mov ecx, dword [0x4ae274]
lea eax, [esp + 0xc0]
push eax
push 1
push ecx
call fcn.00415990
add esp, 0x10
mov dword [esp + 0x68], eax
test eax, eax
je 0x427156
mov edx, dword [esp + 0xbc]
mov ecx, dword [esp + 0x8c]
push edx
mov edx, dword [esp + 0x88]
push eax
mov eax, dword [esp + 0x88]
push ecx
mov ecx, dword [esp + 0x50]
push edx
push eax
push ecx
lea edx, [esp + 0x6c]
push edx
lea eax, [esp + 0x6f]
push eax
push ebx
mov ecx, esi
call fcn.0042dae0
cmp byte [esp + 0x7e], 0
mov edi, eax
je case.default.0x426f1a
mov ecx, dword [esp + 0x68]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x426f1a
mov edi, 1
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x108]
mov ecx, dword [esp + 0x10c]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x58]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x70]
mov dword [eax + 0x10], edx
mov edx, dword [esp + 0xa0]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], ecx
test edi, edi
je 0x42accc
cmp edi, 7
je 0x42accc
cmp edi, 8
je 0x42accc
cmp byte [esp + 0x53], 0
jne 0x427b6c
mov eax, dword [esp + 0x54]
test eax, eax
je 0x4271d6
mov edx, dword [eax + 0x1c]
cmp edx, dword [esi + 0x1c]
jne 0x42ae26
mov dword [esp + 0x40], eax
mov esi, eax
jmp 0x427b6c
cmp dword [ebp + 8], 3
je case.0x4269d4.116
mov eax, dword [esp + 0x4c]
jmp 0x427b64
mov ecx, dword [esp + 0x74]
mov eax, dword [ecx + 0xe0]
mov dword [esp + 0xa0], eax
cmp dl, 0x70
jne 0x427245
mov ebx, dword [0x4ae218]
mov eax, dword [ecx + 0xe4]
mov dword [esp + 0x60], eax
mov dword [ecx + 0xe4], 0
test ebx, ebx
je 0x427226
call fcn.004779f0
mov edi, eax
jmp 0x42722b
mov edi, 1
lea esi, [esp + 0x60]
call fcn.00430250
test edi, edi
je 0x42aff9
mov esi, dword [esp + 0x40]
mov ebx, dword [ebp + 0xc]
jmp 0x42725f
or eax, 1
mov dword [ecx + 0xe0], eax
mov edx, dword [esi + 0x18]
cmp byte [edx], 0x71
je 0x42725f
or eax, 2
mov dword [ecx + 0xe0], eax
mov dword [esp + 0x54], 0
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x75
jne 0x42728f
nop
mov ecx, dword [ecx + 0x14]
lea eax, [esp + 0x54]
push eax
push ebx
push 2
call fcn.00426660
mov ecx, dword [esi + 0x14]
mov edx, dword [esp + 0x54]
mov edi, eax
cmp edx, ecx
je 0x427270
jmp 0x4272a2
lea edx, [esp + 0x54]
push edx
push ebx
push 3
call fcn.00426660
mov edx, dword [esp + 0x54]
mov edi, eax
mov al, byte [esp + 0xe4]
mov esi, dword [esi + 0x18]
mov dword [esp + 0x40], esi
cmp al, 0x6f
jne 0x427315
mov eax, dword [esp + 0xa0]
mov ebx, dword [esp + 0x74]
mov dword [ebx + 0xe0], eax
xor al, al
cmp byte [esi], 0x70
jne 0x4272e6
cmp dword [ebx + 0xe4], 0
mov al, 1
jne 0x427b68
mov ecx, esi
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x40], ecx
mov esi, ecx
cmp byte [esi], 0x71
je 0x42732a
test al, al
jne 0x4273e8
cmp dword [ebx + 0xe4], 0
lea esi, [ebx + 0xe4]
je 0x4273e8
call fcn.00430250
mov edi, 1
jmp 0x4273e4
cmp al, 0x70
jne 0x4273e8
cmp byte [esi], 0x71
jne 0x4273e8
mov ebx, dword [esp + 0x74]
cmp edi, 1
jne 0x42733b
test edx, edx
je 0x427b68
mov esi, dword [esp + 0x40]
mov ecx, dword [0x4af1fc]
mov edx, dword [ebx + 0xe4]
mov dword [esp + 0x70], ecx
xor eax, eax
lea ecx, [esp + 0xfc]
push ecx
mov dword [esp + 0x50], edx
mov edx, dword [0x4af200]
push eax
push 3
mov ecx, esi
mov dword [ebx + 0xe4], eax
mov dword [esp + 0x6c], edx
mov dword [0x4af1fc], eax
mov dword [0x4af200], eax
call fcn.00426660
cmp dword [esp + 0x70], 0
mov dword [esp + 0x58], eax
je 0x4273bf
mov eax, dword [0x4af1fc]
test eax, eax
je 0x4273ac
push eax
call fcn.004883b8
add esp, 4
cmp dword [0x4af200], 0x400000
jbe 0x4273ac
dec dword [0x4af204]
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x60]
mov dword [0x4af1fc], edx
mov dword [0x4af200], eax
mov eax, dword [esp + 0x58]
cmp eax, 1
jne 0x42ae31
cmp dword [esp + 0xfc], 0
jne 0x42ae31
mov ecx, dword [esp + 0x4c]
mov dword [ebx + 0xe4], ecx
mov edx, dword [esp + 0x54]
cmp dword [ebp + 8], 3
je 0x42ae8f
cmp edi, 1
jne 0x42ae8f
test edx, edx
je 0x427b68
mov eax, dword [edx + 0x1c]
mov ecx, dword [esp + 0x40]
cmp eax, dword [ecx + 0x1c]
jne 0x42ae84
mov dword [esp + 0x40], edx
jmp 0x427b68
mov edx, dword [esi + 0x14]
mov dword [esp + 0x40], edx
jmp 0x427b68
mov ebx, dword [0x4af1fc]
mov ecx, dword [0x4af200]
xor eax, eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x44], ecx
mov dword [0x4af1fc], eax
mov dword [0x4af200], eax
mov dword [esp + 0xcc], eax
cmp dword [esi + 0xc], eax
jne 0x427468
mov dword [esp + 0xc8], 0x44
lea edi, [eax + 1]
jmp 0x4274c4
push 5
lea edx, [esp + 0x4c]
push edx
push 0
push esi
lea ebx, [esp + 0x54]
lea esi, [esp + 0xd0]
call fcn.0045ad70
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x40]
mov edi, eax
cmp edi, 1
jne 0x427739
cmp dword [esp + 0xc8], 5
jne 0x4274c4
cmp dword [esp + 0xc0], ebx
jne 0x4274c4
mov eax, dword [esp + 0x44]
mov dword [esp + 0xcc], ebx
xor ebx, ebx
mov dword [esp + 0x114], eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x44], ebx
mov ecx, dword [esi + 0x14]
mov eax, dword [ecx + 0x14]
cmp byte [eax], 0x74
mov dword [esp + 0x68], eax
jne 0x4276e7
jmp 0x4274e0
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x58], eax
test eax, eax
jne 0x4274fb
mov edx, dword [ecx + 0x14]
mov dword [esp + 0x4c], edx
jmp 0x4276c9
mov dword [esp + 0x70], 0
test eax, eax
jle 0x4276c9
jmp 0x427510
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x68]
push 5
lea eax, [esp + 0x4c]
push eax
push ecx
push edx
lea ebx, [esp + 0x54]
lea esi, [esp + 0xa0]
call fcn.0045ad70
mov edi, eax
cmp edi, 1
jne 0x4276a6
cmp dword [esp + 0x98], 0
jne 0x427566
mov eax, dword [esp + 0x40]
cmp dword [eax + 0xc], 0
jne 0x427566
mov dword [esp + 0x98], 5
mov dword [esp + 0x94], 0
cmp dword [esp + 0xc8], 0x44
lea ecx, [esp + 0x90]
push ecx
jne 0x427660
call fcn.0044f280
add esp, 4
dec eax
je 0x427640
dec eax
je 0x4275d9
mov ecx, dword [esp + 0x98]
mov eax, dword [esp + 0x90]
cmp ecx, 6
je 0x427655
cmp ecx, 4
jne 0x4275bd
cmp byte [eax + 0x17], 0
jne 0x4275b3
mov eax, dword [eax + 0xc]
test byte [eax + 0x15], 2
jne 0x427655
xor ecx, ecx
lea eax, [esp + 0x90]
call fcn.0044f510
xor edx, edx
cmp byte [eax], dl
setne dl
mov eax, edx
jmp 0x42766f
mov eax, dword [esp + 0x98]
dec eax
cmp eax, 5
ja case.0x4275e6.3
jmp dword [eax*4 + 0x42b1c0]
fild qword [esp + 0x90]
jmp 0x42762e
fld qword [esp + 0x90]
jmp 0x42762e
mov eax, dword [esp + 0x90]
push 1
call fcn.00415000
jmp 0x42762e
mov eax, dword [esp + 0x94]
test eax, eax
je case.0x4275e6.3
fild qword [eax]
jmp 0x42762e
mov eax, dword [esp + 0x90]
push eax
call fcn.0048a250
add esp, 4
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp case.0x4275e6.6
mov eax, 1
jmp 0x42766f
push 1
lea ecx, [esp + 0x94]
call fcn.0044f3d0
add esp, 4
or eax, edx
je case.0x4275e6.6
mov eax, 1
jmp 0x42766f
xor eax, eax
jmp 0x42766f
lea eax, [esp + 0xc4]
call fcn.0044f810
add esp, 4
test eax, eax
setne bl
cmp dword [esp + 0x98], 6
jne 0x42768d
mov eax, dword [esp + 0x90]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
test bl, bl
jne 0x4276b0
mov eax, dword [esp + 0x70]
inc eax
mov dword [esp + 0x70], eax
cmp eax, dword [esp + 0x58]
jl 0x427510
jmp 0x4276c5
mov dword [esp + 0x4c], 0
jmp 0x4276bb
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + 0x14]
mov dword [esp + 0x4c], edx
mov eax, dword [esp + 0x58]
cmp dword [esp + 0x70], eax
jl 0x4276df
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx + 0x18]
cmp byte [eax], 0x74
mov dword [esp + 0x68], eax
je 0x4274e0
jmp 0x4276e3
mov esi, dword [esp + 0x40]
mov ebx, dword [esp + 0x48]
cmp dword [esp + 0xc8], 6
jne 0x427700
mov eax, dword [esp + 0xc0]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
cmp dword [esp + 0xcc], 0
je 0x427739
test ebx, ebx
je 0x427727
push ebx
call fcn.004883b8
add esp, 4
cmp dword [esp + 0x44], 0x400000
jbe 0x427727
dec dword [0x4af204]
mov ecx, dword [esp + 0x114]
mov ebx, dword [esp + 0xcc]
mov dword [esp + 0x44], ecx
test ebx, ebx
je 0x427776
cmp dword [0x4af1fc], 0
je 0x427767
mov edx, dword [0x4af1fc]
push edx
call fcn.004883b8
add esp, 4
cmp dword [0x4af200], 0x400000
jbe 0x427767
dec dword [0x4af204]
mov eax, dword [esp + 0x44]
mov dword [0x4af1fc], ebx
mov dword [0x4af200], eax
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x427796
mov eax, dword [ebp + 0xc]
lea edx, [esp + 0x54]
push edx
push eax
push 2
call fcn.00426660
mov edi, eax
mov eax, dword [esp + 0x54]
jmp 0x42779c
xor eax, eax
mov dword [esp + 0x54], eax
cmp edi, 1
jne 0x42acc6
cmp dword [ebp + 8], 3
je 0x42acc6
test eax, eax
je 0x42698a
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x42ace8
jmp 0x427b64
cmp dword [esi + 0xc], 1
jne 0x4277d6
mov eax, dword [esi + 0x18]
jmp 0x427b64
lea ecx, [esp + 0x54]
push ecx
mov ecx, dword [esi + 0x14]
push ebx
push 2
call fcn.00426660
mov edi, eax
mov eax, dword [esp + 0x54]
cmp eax, esi
je 0x427b6c
cmp dword [ebp + 8], 3
je 0x42acc6
cmp edi, 1
jne 0x42acc6
test eax, eax
je 0x4277ce
mov edx, dword [esi + 0x1c]
cmp edx, dword [eax + 0x1c]
jne 0x42ace8
mov dword [esp + 0x40], eax
mov esi, eax
jmp 0x427b6c
add dword [0x4af8a0], 1
mov eax, dword [0x4ae218]
mov edi, dword [0x4aa988]
adc dword [0x4af8a4], 0
mov cl, byte [esi]
movzx edx, cl
dec edx
mov ebx, eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x44], edi
cmp edx, 0xe1
ja case.0x42785e.8
movzx edx, byte [edx + 0x42b458]
jmp dword [edx*4 + 0x42b1d8]
push esi
call fcn.0043cec0
jmp 0x427b4d
cmp byte [esi + 1], 1
mov edx, dword [0x4ae274]
jbe 0x4278e0
mov eax, dword [esi + 8]
cmp byte [eax + 0x11], 0
je 0x42788f
mov edi, 1
jmp 0x427b57
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x4278a2
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
jmp 0x427b47
mov eax, dword [0x4ae21c]
test eax, eax
je 0x4278e0
cmp byte [edx], 0
jne 0x4278e0
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x4278bd
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x4278d4
sub ecx, 2
jne 0x4278e0
mov eax, ebx
call fcn.00477b00
jmp 0x427b4d
mov ecx, ebx
call fcn.00477870
jmp 0x427b4d
push 1
push 0
push 0xffffffffffffffff
push edx
push ebx
call fcn.004780a0
jmp 0x427b4d
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x42790e
cmp byte [eax + 0x11], 0
jne 0x42790e
mov eax, 1
mov dword [esp + 0x48], eax
xor edi, edi
jmp 0x42794e
mov edi, dword [0x4ae21c]
mov eax, dword [0x4ae274]
mov dword [esp + 0x48], 0
test edi, edi
je 0x42793c
cmp byte [eax], 0
jne 0x42793c
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x427937
mov edx, dword [edi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x42799d
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.00474dd0
add esp, 0x10
push 1
mov ecx, ebx
mov dword [esp + 0x50], eax
call fcn.00414ed0
mov dword [esp + 0x60], eax
mov eax, dword [0x4ae278]
mov al, byte [eax]
test al, al
je 0x427ad8
call fcn.00409bf0
movsx eax, al
push eax
push str.SMHD
call fcn.004890e1
add esp, 8
test eax, eax
je 0x427ad8
cmp dword [esp + 0x4c], 0
jne 0x4279ac
mov edi, 1
jmp 0x427b57
test edi, edi
je 0x42793e
push 1
mov ecx, edi
call fcn.00414ed0
jmp 0x42794e
cmp dword [esp + 0x48], 0
je 0x4279bd
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x4279db
test edi, edi
je 0x4279cc
push 0
mov eax, edi
call fcn.00415000
jmp 0x4279db
mov esi, dword [0x4ae274]
call fcn.00414da0
mov esi, dword [esp + 0x40]
push 0
fstp qword [esp + 0x64]
push 1
mov ecx, ebx
call fcn.00401270
cmp byte [eax], 0
je 0x427a23
lea eax, [esp + 0xb0]
push eax
push 0
push 1
mov ecx, ebx
call fcn.00401270
call fcn.004749b0
add esp, 4
test eax, eax
jne 0x427a47
push 1
push eax
push 0xffffffffffffffff
push 0x49b8cd
push ebx
call fcn.004780a0
jmp 0x427b4d
lea ecx, [esp + 0x124]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea edx, [esp + 0xb0]
push edx
lea eax, [esp + 0x128]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov ecx, dword [0x4ae278]
mov al, byte [ecx]
call fcn.00409bf0
fld qword [esp + 0x60]
cmp al, 0x44
je 0x427a74
cmp al, 0x48
je 0x427a6c
cmp al, 0x4d
jne 0x427a7a
fmul qword [0x4a4000]
jmp 0x427a7a
fmul qword [0x4a3ff8]
jmp 0x427a7a
fmul qword [0x4a3ff0]
mov esi, dword [esp + 0xb0]
mov edi, dword [esp + 0xb4]
call fcn.004969e6
push 0
push 0x989680
push edx
push eax
call fcn.0048ec80
add esi, eax
adc edi, edx
mov dword [esp + 0xb0], esi
push 0
lea eax, [esp + 0xb4]
lea esi, [esp + 0x184]
mov dword [esp + 0xb8], edi
call fcn.00474c40
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
push ebx
call fcn.004780a0
mov esi, dword [esp + 0x40]
jmp 0x427b4d
mov eax, 2
cmp dword [esp + 0x4c], eax
je 0x427b7d
cmp dword [esp + 0x60], eax
je 0x427b7d
cmp dword [esp + 0x48], 0
je 0x427b0c
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xf4], eax
jmp 0x427b33
test edi, edi
je 0x427b1b
push 0
mov eax, edi
call fcn.00414f80
jmp 0x427b2a
mov esi, dword [0x4ae274]
call fcn.00414d70
mov esi, dword [esp + 0x40]
mov dword [esp + 0xf4], edx
mov edi, eax
push 0
mov eax, ebx
call fcn.00414f80
add eax, edi
adc edx, dword [esp + 0xf4]
push edx
push eax
push ebx
call fcn.00414e40
mov edi, eax
test edi, edi
je 0x42accc
cmp dword [ebp + 8], 3
je 0x42accc
mov eax, dword [esi + 0x14]
mov dword [esp + 0x40], eax
mov esi, dword [esp + 0x40]
test esi, esi
je case.0x4269d4.116
mov ebx, dword [esp + 0x74]
jmp 0x4266c4
cmp dword [esp + 0x48], 0
je 0x427b8e
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x427bac
test edi, edi
je 0x427b9d
push 0
mov eax, edi
call fcn.00415000
jmp 0x427bac
mov esi, dword [0x4ae274]
call fcn.00414da0
mov esi, dword [esp + 0x40]
push 0
fstp qword [esp + 0x64]
mov eax, ebx
call fcn.00415000
fadd qword [esp + 0x60]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.00414e70
jmp 0x427b4d
mov eax, dword [0x4ae278]
mov al, byte [eax]
test al, al
je 0x427cb5
call fcn.00409bf0
movsx eax, al
push eax
push str.SMHD
call fcn.004890e1
add esp, 8
test eax, eax
je 0x427cb5
mov ecx, dword [0x4ae21c]
mov edi, dword [0x4ae274]
test ecx, ecx
je 0x427c2d
cmp byte [edi], 0
jne 0x427c2d
mov al, byte [ecx + 0x17]
test al, al
jne 0x427c1a
mov edx, dword [ecx + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
jne 0x427c2d
test ecx, ecx
je 0x427c2d
push 0
push 1
call fcn.00401270
mov edi, eax
push 0
push 1
mov ecx, ebx
call fcn.00401270
push eax
lea ebx, [esp + 0x83]
mov eax, edi
call fcn.00474cf0
add esp, 4
cmp byte [esp + 0x7f], 0
mov edi, eax
mov ebx, edx
je 0x427c6f
mov eax, dword [esp + 0x48]
push 1
push 0
push 0xffffffffffffffff
push 0x49b8cd
push eax
call fcn.004780a0
jmp 0x427b4d
mov ecx, dword [0x4ae278]
mov al, byte [ecx]
call fcn.00409bf0
cmp al, 0x44
je 0x427c97
cmp al, 0x48
je 0x427c8e
cmp al, 0x4d
jne 0x427ca9
push 0
push 0x3c
jmp 0x427c9e
push 0
push 0xe10
jmp 0x427c9e
push 0
push 0x15180
push ebx
push edi
call fcn.00496a60
mov edi, eax
mov ebx, edx
mov edx, dword [esp + 0x48]
push ebx
push edi
push edx
jmp 0x427b48
mov eax, dword [esi + 8]
xor edx, edx
cmp dword [eax + 0x1c], edx
je 0x427cd3
cmp byte [eax + 0x11], dl
jne 0x427cd3
mov edi, 1
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], edx
jmp 0x427d25
mov edi, dword [0x4ae21c]
mov eax, dword [0x4ae274]
mov dword [esp + 0x48], edx
cmp edi, edx
je 0x427d0f
cmp byte [eax], dl
jne 0x427d0f
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x427cf7
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x427d0f
mov dword [esp + 0x44], edi
cmp edi, edx
je 0x427d13
push 1
mov ecx, edi
call fcn.00414ed0
jmp 0x427d23
mov dword [esp + 0x44], edx
push 1
push 1
push 0
push 1
call fcn.00474dd0
add esp, 0x10
mov edi, eax
push 1
mov ecx, ebx
call fcn.00414ed0
cmp edi, 2
je 0x427da8
cmp eax, 2
je 0x427da8
cmp dword [esp + 0x48], 0
je 0x427d68
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x104], eax
push 0
mov eax, ebx
call fcn.00414f80
sub eax, edi
sbb edx, dword [esp + 0x104]
jmp 0x427b45
mov eax, dword [esp + 0x44]
test eax, eax
je 0x427d79
push 0
call fcn.00414f80
jmp 0x427d88
mov esi, dword [0x4ae274]
call fcn.00414d70
mov esi, dword [esp + 0x40]
mov edi, eax
push 0
mov eax, ebx
mov dword [esp + 0x108], edx
call fcn.00414f80
sub eax, edi
sbb edx, dword [esp + 0x104]
jmp 0x427b45
cmp dword [esp + 0x48], 0
je 0x427db9
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x427dd9
mov eax, dword [esp + 0x44]
test eax, eax
je 0x427dca
push 0
call fcn.00415000
jmp 0x427dd9
mov esi, dword [0x4ae274]
call fcn.00414da0
mov esi, dword [esp + 0x40]
push 0
fstp qword [esp + 0x64]
mov eax, ebx
call fcn.00415000
fsub qword [esp + 0x60]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.00414e70
jmp 0x427b4d
mov eax, dword [esi + 8]
xor edx, edx
cmp dword [eax + 0x1c], edx
je 0x427e19
cmp byte [eax + 0x11], dl
jne 0x427e19
mov edi, 1
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], edx
jmp 0x427e6b
mov edi, dword [0x4ae21c]
mov eax, dword [0x4ae274]
mov dword [esp + 0x48], edx
cmp edi, edx
je 0x427e55
cmp byte [eax], dl
jne 0x427e55
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x427e3d
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x427e55
mov dword [esp + 0x44], edi
cmp edi, edx
je 0x427e59
push 1
mov ecx, edi
call fcn.00414ed0
jmp 0x427e69
mov dword [esp + 0x44], edx
push 1
push 1
push 0
push 1
call fcn.00474dd0
add esp, 0x10
mov edi, eax
push 1
mov ecx, ebx
call fcn.00414ed0
cmp edi, 2
je 0x427ee0
cmp eax, 2
je 0x427ee0
cmp dword [esp + 0x48], 0
je 0x427e99
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xec], eax
jmp 0x427ec2
mov eax, dword [esp + 0x44]
test eax, eax
je 0x427eaa
push 0
call fcn.00414f80
jmp 0x427eb9
mov esi, dword [0x4ae274]
call fcn.00414d70
mov esi, dword [esp + 0x40]
mov dword [esp + 0xec], edx
mov edi, eax
push 0
mov eax, ebx
call fcn.00414f80
mov ecx, dword [esp + 0xec]
push ecx
push edi
push edx
push eax
call fcn.0048ec80
jmp 0x427b45
cmp dword [esp + 0x48], 0
je 0x427ef1
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x427f11
mov eax, dword [esp + 0x44]
test eax, eax
je 0x427f02
push 0
call fcn.00415000
jmp 0x427f11
mov esi, dword [0x4ae274]
call fcn.00414da0
mov esi, dword [esp + 0x40]
push 0
fstp qword [esp + 0x64]
mov eax, ebx
call fcn.00415000
fmul qword [esp + 0x60]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.00414e70
jmp 0x427b4d
mov eax, dword [esi + 8]
xor edx, edx
cmp dword [eax + 0x1c], edx
je 0x427f51
cmp byte [eax + 0x11], dl
jne 0x427f51
mov edi, 1
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], edx
jmp 0x427fa3
mov edi, dword [0x4ae21c]
mov eax, dword [0x4ae274]
mov dword [esp + 0x48], edx
cmp edi, edx
je 0x427f8d
cmp byte [eax], dl
jne 0x427f8d
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x427f75
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x427f8d
mov dword [esp + 0x44], edi
cmp edi, edx
je 0x427f91
push 1
mov ecx, edi
call fcn.00414ed0
jmp 0x427fa1
mov dword [esp + 0x44], edx
push 1
push 1
push 0
push 1
call fcn.00474dd0
add esp, 0x10
mov edi, eax
push 1
mov ecx, ebx
call fcn.00414ed0
cmp edi, 2
je 0x428036
cmp eax, 2
je 0x428036
cmp dword [esp + 0x48], 0
je 0x427fd5
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xdc], eax
jmp 0x428001
cmp dword [esp + 0x44], 0
je 0x427fe9
mov eax, dword [esp + 0x44]
push 0
call fcn.00414f80
jmp 0x427ff8
mov esi, dword [0x4ae274]
call fcn.00414d70
mov esi, dword [esp + 0x40]
mov dword [esp + 0xdc], edx
mov edi, eax
mov ecx, edi
or ecx, dword [esp + 0xdc]
jne 0x428018
mov ecx, ebx
call fcn.00414de0
jmp 0x427b4d
push 0
mov eax, ebx
call fcn.00414f80
mov ecx, dword [esp + 0xdc]
push ecx
push edi
push edx
push eax
call fcn.00496a60
jmp 0x427b45
cmp dword [esp + 0x48], 0
je 0x428047
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x428067
mov eax, dword [esp + 0x44]
test eax, eax
je 0x428058
push 0
call fcn.00415000
jmp 0x428067
mov esi, dword [0x4ae274]
call fcn.00414da0
mov esi, dword [esp + 0x40]
fst qword [esp + 0x60]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x428082
mov ecx, ebx
call fcn.00414de0
jmp 0x427b4d
push 0
mov eax, ebx
call fcn.00415000
fdiv qword [esp + 0x60]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.00414e70
jmp 0x427b4d
mov edi, 2
mov ecx, esi
call fcn.00422a10
mov dword [esp + 0x40], eax
test eax, eax
jns 0x4280be
mov dword [esp + 0x40], 0
jmp 0x4280d4
mov edi, 1
mov ecx, esi
call fcn.00422990
cmp dword [esp + 0x40], eax
jle 0x4280d4
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x40]
mov edx, dword [0x4ae274]
push 1
push 0
push ecx
push edx
push ebx
call fcn.004780a0
jmp 0x427b4d
mov edi, 2
mov ecx, esi
call fcn.00422a10
mov dword [esp + 0x40], eax
test eax, eax
jns 0x42810b
mov dword [esp + 0x40], 0
mov edi, 1
mov ecx, esi
call fcn.00422990
cmp dword [esp + 0x40], eax
jbe 0x428121
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x40]
push 1
push 0
sub eax, ecx
add eax, dword [0x4ae274]
push ecx
push eax
push ebx
call fcn.004780a0
jmp 0x427b4d
cmp byte [esi + 1], 4
jb 0x428170
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x34]
cmp byte [ecx], 0
je 0x428170
mov edi, 3
mov ecx, esi
call fcn.00422a10
mov dword [esp + 0x40], eax
cmp eax, 1
jge 0x428178
mov ecx, ebx
call fcn.00414de0
jmp 0x427b4d
mov dword [esp + 0x40], CreateStatusWindowA
mov edi, 2
mov ecx, esi
call fcn.00422a10
mov edx, dword [0x4ae280]
mov ebx, eax
mov al, byte [edx]
call fcn.00409bf0
cmp al, 0x4c
jne 0x4281c4
cmp ebx, 1
jge 0x4281aa
mov ecx, dword [esp + 0x48]
call fcn.00414de0
jmp 0x427b4d
mov eax, dword [esp + 0x40]
mov ecx, 1
sub ecx, eax
add ebx, ecx
cmp ebx, 1
jge 0x4281ce
lea edx, [eax + ebx - 1]
mov dword [esp + 0x40], edx
cmp ebx, 1
jge 0x4281ce
mov ebx, 1
mov edi, 1
mov ecx, esi
call fcn.00422990
cmp eax, ebx
jae 0x4281ec
mov ecx, dword [esp + 0x48]
call fcn.00414de0
jmp 0x427b4d
mov ecx, edi
sub ecx, ebx
add eax, ecx
cmp dword [esp + 0x40], eax
jbe 0x4281fc
mov dword [esp + 0x40], eax
mov edx, dword [0x4ae274]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
push 1
push 0
push eax
lea ebx, [ebx + edx - 1]
push ebx
push ecx
call fcn.004780a0
jmp 0x427b4d
mov edi, 2
mov ecx, esi
call fcn.00422a10
mov dword [esp + 0x40], eax
test eax, eax
jns 0x42823b
mov dword [esp + 0x40], 0
mov edi, 1
mov ecx, esi
call fcn.00422990
cmp dword [esp + 0x40], eax
jbe 0x428251
mov dword [esp + 0x40], eax
mov edx, dword [esp + 0x40]
mov ecx, dword [0x4ae274]
push 1
push 0
sub eax, edx
push eax
add ecx, edx
push ecx
push ebx
call fcn.004780a0
jmp 0x427b4d
mov edi, 2
mov ecx, esi
call fcn.00422a10
mov dword [esp + 0x40], eax
test eax, eax
jns 0x42828c
mov dword [esp + 0x40], 0
mov edi, 1
mov ecx, esi
call fcn.00422990
cmp dword [esp + 0x40], eax
jbe 0x4282a2
mov dword [esp + 0x40], eax
sub eax, dword [esp + 0x40]
mov edx, dword [0x4ae274]
push 1
push 0
push eax
push edx
push ebx
call fcn.004780a0
jmp 0x427b4d
push 1
push 1
mov ecx, ebx
call fcn.00401270
mov edi, eax
cmp edi, dword [0x4ae274]
jne 0x4282e3
mov al, byte [ebx + 0x17]
test al, al
jne 0x4282df
mov eax, dword [ebx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
je 0x428322
push 1
push 0
mov edi, 1
mov ecx, esi
call fcn.00422990
push eax
push 0
push ebx
call fcn.004780a0
cmp eax, edi
jne case.0x42785e.8
push 0
push edi
mov ecx, ebx
call fcn.00401270
mov ecx, dword [0x4ae274]
mov edi, eax
mov edx, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x428318
mov ecx, dword [0x4ae278]
mov al, byte [ecx]
test al, al
je 0x428358
call fcn.00409bf0
cmp al, 0x54
jne 0x428358
mov edx, dword [0x4ae278]
cmp byte [edx + 1], 0
jne 0x428358
mov eax, edi
call fcn.00414ac0
push 0
mov eax, ebx
call fcn.004152f0
jmp 0x427b4d
cmp byte [esi], 0x31
push edi
jne 0x428372
call dword [sym.imp.USER32.dll_CharLowerA]
push 0
mov eax, ebx
call fcn.004152f0
jmp 0x427b4d
call dword [sym.imp.USER32.dll_CharUpperA]
push 0
mov eax, ebx
call fcn.004152f0
jmp 0x427b4d
mov eax, dword [0x4ae21c]
test eax, eax
je 0x4283b1
cmp byte [eax + 0x17], 0
jne 0x42839d
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x15]
jmp 0x4283a0
mov cl, byte [eax + 0x15]
test cl, 1
je 0x4283b1
call fcn.00415260
push 0
jmp 0x427b46
mov edi, 1
mov ecx, esi
call fcn.00422990
push 0
jmp 0x427b46
mov edi, dword [0x4ae27c]
mov al, byte [edi]
mov dword [esp + 0x60], edi
mov dword [esp + 0x68], 0xffffffff
test al, al
je 0x42845e
call fcn.00409bf0
movsx eax, al
push eax
push 0x49f82c
call fcn.004890e1
add esp, 8
test eax, eax
je 0x42845e
cmp byte [edi + 1], 0
je 0x42845e
lea esi, [edi + 1]
call fcn.0040ed80
mov esi, dword [esp + 0x40]
mov dword [esp + 0x4c], eax
test eax, eax
jle 0x428550
mov eax, dword [0x4ae278]
cmp byte [eax], 0
jne 0x428468
mov dword [esp + 0x68], 0
mov eax, 0x49b8e8
mov edx, dword [0x4aeae0]
push 1
push 0
push 0xffffffffffffffff
push eax
push edx
call fcn.004780a0
mov eax, dword [esp + 0x68]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x54]
call fcn.00401130
mov edi, 1
jmp 0x427b57
mov dword [esp + 0x4c], 1
jmp 0x428418
mov edx, dword [0x4ae274]
mov edi, 4
mov ecx, esi
mov dword [esp + 0x70], edx
mov dword [esp + 0x58], eax
call fcn.00422a10
mov ebx, eax
test ebx, ebx
jns 0x42848a
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00422990
mov edi, eax
cmp ebx, edi
jge 0x428550
mov eax, dword [esp + 0x60]
mov al, byte [eax]
cmp al, 0x31
je 0x428517
call fcn.00409bf0
cmp al, 0x52
je 0x428517
mov edi, 2
mov ecx, esi
call fcn.00422990
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x60], eax
lea eax, [ebx + ecx]
mov ebx, dword [esp + 0x58]
mov edi, 1
mov edx, dword [0x4aa988]
mov cl, byte [edx + 0xd2]
push ebx
test cl, cl
jne 0x4284ee
call fcn.004752c0
add esp, 4
jmp 0x428506
cmp cl, 2
jne 0x4284fd
call fcn.00475540
add esp, 4
jmp 0x428506
push eax
call fcn.00489222
add esp, 8
test eax, eax
je 0x428550
cmp edi, dword [esp + 0x4c]
je 0x42853e
inc edi
add eax, dword [esp + 0x60]
jmp 0x4284d3
mov ecx, dword [esp + 0x44]
movzx edx, byte [ecx + 0xd2]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x70]
push eax
mov eax, dword [esp + 0x5c]
push edx
push eax
mov eax, edi
sub eax, ebx
push ecx
call fcn.004750c0
add esp, 0x10
test eax, eax
je 0x428550
sub eax, dword [esp + 0x70]
mov dword [esp + 0x68], eax
jns 0x42842a
mov eax, 0x49cf30
jmp 0x42842f
push esi
call fcn.0043d2b0
jmp 0x427b4d
mov eax, dword [0x4ae27c]
mov ecx, dword [0x4ae278]
mov edx, dword [0x4ae274]
call fcn.004337f0
jmp 0x427b4d
mov eax, dword [0x4ae27c]
mov ecx, dword [0x4ae278]
push eax
mov eax, dword [0x4ae270]
push ecx
mov ecx, dword [0x4ae274]
push esi
call fcn.0043d4c0
jmp 0x427b4d
mov edx, dword [0x4ae270]
push edx
mov eax, esi
call fcn.0043dc60
jmp 0x427b4d
mov eax, dword [0x4ae270]
mov ecx, dword [0x4ae274]
push eax
push esi
call fcn.0043e230
jmp 0x427b4d
push 0
push ecx
mov edi, 7
mov ecx, esi
call fcn.00422a10
add esp, 4
push eax
mov edi, 6
mov ecx, esi
call fcn.00422a10
push eax
push ecx
mov edi, 5
mov ecx, esi
call fcn.00422a10
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00422a10
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00422a10
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00422a10
mov ecx, dword [0x4ae290]
push eax
push esi
call fcn.00439470
jmp 0x427b4d
mov ecx, dword [0x4ae288]
push ecx
push ecx
mov edi, 5
mov ecx, esi
call fcn.00422a10
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00422a10
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00422a10
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00422a10
push eax
push esi
call fcn.00439c80
jmp 0x427b4d
mov edx, dword [0x4ae27c]
push edx
push ecx
mov edi, 2
mov ecx, esi
call fcn.00422a10
mov edi, 1
mov ecx, esi
mov ebx, eax
call fcn.00422a10
add esp, 4
mov ecx, eax
push esi
mov eax, ebx
call fcn.00451180
jmp 0x427b4d
mov eax, dword [edi + 0xb4]
xor edx, edx
cmp cl, 0x42
sete dl
push 0
push eax
push edx
mov eax, dword [0x4ae270]
push eax
call fcn.0040f330
add esp, 0x10
mov edi, 1
jmp 0x427b57
mov edx, dword [0x4ae270]
xor ecx, ecx
cmp dword [edi + 0xb4], 3
push 0
sete cl
lea ecx, [ecx + ecx + 1]
push ecx
push 0
push edx
call fcn.0040f330
add esp, 0x10
mov edi, 1
jmp 0x427b57
push 0
push 2
push 0
jmp 0x4286ce
mov ecx, dword [0x4ae270]
push 0
push 0
push 0
push ecx
call fcn.0040f330
add esp, 0x10
mov edi, 1
jmp 0x427b57
mov edx, dword [0x4ae270]
push edx
call fcn.004115e0
add esp, 4
jmp 0x427b4d
mov eax, dword [0x4ae288]
mov edx, dword [0x4ae284]
push 0x49b8cd
push eax
mov eax, dword [0x4ae280]
push edx
mov edx, dword [0x4ae27c]
push eax
mov eax, dword [0x4ae278]
push edx
mov edx, dword [0x4ae274]
push eax
push edx
mov edx, dword [0x4ae270]
mov eax, 0x49b8cd
push ecx
call fcn.00411870
add esp, 0x20
jmp 0x427b4d
mov eax, dword [0x4ae284]
mov edx, dword [0x4ae288]
push eax
mov eax, dword [0x4ae280]
push edx
mov edx, dword [0x4ae278]
push eax
mov eax, dword [0x4ae274]
push 0x49b8cd
push 0x49b8cd
push edx
mov edx, dword [0x4ae270]
push eax
mov eax, dword [0x4ae27c]
push ecx
call fcn.00411870
add esp, 0x20
jmp 0x427b4d
mov edx, dword [0x4ae27c]
mov eax, dword [0x4ae278]
push 0x49b8cd
push edx
mov edx, dword [0x4ae274]
push eax
mov eax, dword [0x4ae270]
push 0x49b8cd
push 0x49b8cd
push edx
push eax
mov eax, 0x49b8cd
mov edx, eax
push ecx
call fcn.00411870
add esp, 0x20
jmp 0x427b4d
mov edi, 4
mov ecx, esi
call fcn.00422a10
push eax
mov ecx, esi
call fcn.0043c3b0
jmp 0x427b4d
mov eax, dword [0x4ae274]
mov ebx, dword [0x4ae278]
mov esi, dword [0x4ae270]
cmp cl, 0x78
sete cl
movzx edx, cl
push edx
push eax
mov eax, dword [0x4ae27c]
push edi
call fcn.00478e00
add esp, 0xc
test eax, eax
je 0x428875
mov ecx, dword [0x4aa988]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x428875
push 1
push eax
call fcn.00401420
add esp, 8
mov esi, dword [esp + 0x40]
mov edi, 1
jmp 0x427b57
mov edx, dword [0x4ae270]
push 9
push str.ahk_group
push edx
call fcn.0048875d
add esp, 0xc
test eax, eax
jne 0x4288b6
mov eax, dword [0x4ae274]
cmp byte [eax], 0
jne 0x4288b6
mov ecx, dword [0x4ae27c]
cmp byte [ecx], 0
jne 0x4288b6
mov bl, 1
jmp 0x4288b8
xor bl, bl
mov al, byte [esi]
xor edx, edx
test bl, bl
setne dl
dec edx
and edx, 0x14
mov dword [esp + 0x4c], edx
cmp al, 0x84
je 0x428912
cmp al, 0x85
je 0x428912
mov eax, dword [0x4ae278]
cmp byte [eax], 0
je 0x428953
mov al, byte [esi]
cmp al, 0x84
je 0x4289ba
cmp al, 0x85
je 0x4289bc
mov edx, dword [0x4ae278]
mov ecx, dword [0x4ae274]
push edx
mov edx, dword [0x4ae270]
push ecx
mov ecx, dword [0x4ae27c]
push eax
call fcn.00435130
jmp 0x427b4d
mov ecx, dword [0x4ae278]
cmp byte [ecx], 0
je 0x428948
mov edi, 2
mov ecx, esi
call fcn.00422ac0
fmul qword [0x4a3f68]
call fcn.004969b0
mov edi, dword [esp + 0x44]
mov dword [esp + 0x4c], eax
test eax, eax
jne 0x428948
mov dword [esp + 0x4c], 0x1f4
mov edx, dword [0x4ae280]
cmp byte [edx], 0
jne 0x4288db
test bl, bl
je 0x4288db
mov ecx, dword [0x4ae270]
add ecx, 9
mov al, byte [ecx]
cmp al, 0x20
je 0x42896a
cmp al, 9
jne 0x42896d
inc ecx
jmp 0x428960
cmp byte [ecx], 0
mov dword [esp + 0x58], ecx
je 0x4288db
mov ebx, dword [0x4af2b0]
test ebx, ebx
je 0x4288db
mov ecx, dword [esp + 0x58]
mov eax, dword [ebx + 4]
push ecx
push eax
call fcn.004883a1
add esp, 8
test eax, eax
je 0x4289a9
mov ebx, dword [ebx + 0x14]
test ebx, ebx
jne 0x428988
jmp 0x4288db
mov edx, dword [esp + 0x4c]
mov cl, byte [esi]
push ebx
call fcn.0047adc0
jmp 0x427b4d
cmp al, 0x85
mov ecx, dword [0x4ae280]
mov ebx, dword [0x4ae270]
sete dl
movzx eax, dl
mov edx, dword [esp + 0x4c]
push eax
mov eax, dword [0x4ae274]
push ecx
push edx
push eax
mov eax, dword [0x4ae27c]
push edi
call fcn.004790f0
add esp, 0x14
test eax, eax
je 0x4286dc
mov ecx, dword [0x4aa988]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x4286dc
push 1
push eax
call fcn.00401420
add esp, 8
mov edi, 1
jmp 0x427b57
mov ebx, dword [0x4ae274]
call fcn.00438de0
jmp 0x427b4d
mov edx, dword [0x4ae274]
mov eax, dword [0x4ae270]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042f740
jmp 0x427b4d
lea eax, [esp + 0x120]
push eax
push 0x3a98
push 1
push str.Environment
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042f740
jmp 0x427b4d
mov eax, dword [0x4ae274]
push eax
mov eax, dword [0x4ae270]
push esi
call fcn.004528a0
jmp 0x427b4d
mov ecx, dword [0x4ae270]
push 0
push 0xffffffffffffffff
push ecx
mov eax, 0x4af8b8
call fcn.00472380
mov edx, dword [0x4ae274]
add esp, 0xc
push 0
push 0xffffffffffffffff
push edx
mov eax, 0x4af8c4
call fcn.00472380
mov eax, dword [0x4ae278]
add esp, 0xc
push 0
push 0xffffffffffffffff
push eax
mov eax, 0x4af8d0
call fcn.00472380
add esp, 0xc
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae278]
push str.UseErrorLevel
call fcn.004752c0
add esp, 4
test eax, eax
setne bl
mov cl, 3
cmp cl, byte [esi + 1]
mov ecx, dword [0x4ae278]
sbb edx, edx
and edx, dword [0x4ae224]
mov byte [esp + 0x118], bl
mov eax, dword [esp + 0x118]
push edx
push 1
push eax
push 0
test bl, bl
sete dl
push ecx
mov ecx, dword [0x4ae274]
movzx eax, dl
mov edx, dword [0x4ae270]
push eax
push ecx
push 0
push 0x4af278
call fcn.004309c0
test bl, bl
je 0x427b4d
test eax, eax
mov eax, 0x49b8e8
jne 0x428b64
mov eax, str.ERROR
mov edx, dword [0x4aeae0]
push 1
push 0
push 0xffffffffffffffff
push eax
push edx
call fcn.004780a0
jmp 0x427b4d
push esi
call fcn.00435210
jmp 0x427b4d
cmp byte [esi + 1], 2
jbe 0x428bc9
mov eax, dword [0x4ae288]
mov ecx, dword [0x4ae284]
mov edx, dword [0x4ae280]
push eax
mov eax, dword [0x4ae27c]
push ecx
mov ecx, dword [0x4ae278]
push edx
mov edx, dword [0x4ae270]
push eax
mov eax, dword [0x4ae274]
push ecx
mov ecx, dword [0x4ae28c]
call fcn.00435900
jmp 0x427b4d
mov edx, dword [0x4ae274]
mov eax, dword [0x4ae270]
push 0x49b8cd
push 0x49b8cd
push 0x49b8cd
push edx
mov ecx, 0x49b8cd
push eax
mov eax, ecx
mov edx, ecx
call fcn.00435900
jmp 0x427b4d
mov ecx, dword [0x4ae298]
mov edx, dword [0x4ae294]
mov eax, dword [0x4ae290]
push ecx
mov ecx, dword [0x4ae28c]
push edx
mov edx, dword [0x4ae288]
push eax
mov eax, dword [0x4ae27c]
push ecx
mov ecx, dword [0x4ae278]
push edx
mov edx, dword [0x4ae274]
push eax
mov eax, dword [0x4ae270]
push ecx
mov ecx, dword [0x4ae280]
push edx
mov edx, dword [0x4ae284]
push eax
push esi
call fcn.004515d0
jmp 0x427b4d
mov eax, dword [0x4ae280]
xor edx, edx
cmp cl, 0x47
mov ecx, dword [0x4ae27c]
sete dl
push edx
mov edx, dword [0x4ae274]
push eax
mov eax, dword [0x4ae270]
push ecx
mov ecx, dword [0x4ae284]
push edx
mov edx, dword [0x4ae278]
push eax
push esi
call fcn.00435a20
jmp 0x427b4d
mov esi, dword [0x4ae27c]
push 1
xor bl, bl
call fcn.0040edb0
add esp, 4
mov byte [esp + 0x11c], al
test al, al
jne 0x428cc2
mov ecx, dword [0x4ae27c]
push ecx
mov ecx, dword [esp + 0x44]
push 0
push str.Parameter_4_invalid.
call fcn.0042faa0
mov esi, dword [esp + 0x40]
jmp 0x427b4d
mov edx, dword [0x4ae280]
cmp byte [edx], bl
je 0x428cdc
mov ecx, dword [esp + 0x40]
mov edi, 4
call fcn.00422a10
jmp 0x428ce1
mov eax, 1
mov ecx, dword [0x4ae288]
mov edx, dword [0x4ae278]
push ecx
mov ecx, dword [0x4ae270]
push edx
mov edx, dword [0x4ae284]
push ecx
mov ecx, dword [esp + 0x4c]
push edx
mov edx, dword [0x4ae274]
push eax
mov eax, dword [esp + 0x130]
push eax
push ecx
mov ecx, dword [0x4ae28c]
call fcn.00435ae0
mov esi, dword [esp + 0x40]
jmp 0x427b4d
mov edx, dword [0x4ae28c]
mov eax, dword [0x4ae288]
mov ecx, dword [0x4ae280]
push edx
mov edx, dword [0x4ae27c]
push eax
mov eax, dword [0x4ae278]
push ecx
mov ecx, dword [0x4ae274]
push edx
mov edx, dword [0x4ae270]
push eax
push ecx
mov ecx, dword [0x4ae290]
push edx
mov edx, dword [0x4ae284]
push esi
call fcn.00436160
jmp 0x427b4d
mov eax, dword [0x4ae290]
mov ecx, dword [0x4ae28c]
mov edx, dword [0x4ae288]
push eax
mov eax, dword [0x4ae284]
push ecx
mov ecx, dword [0x4ae280]
push edx
push eax
push ecx
mov ecx, esi
call fcn.00436390
jmp 0x427b4d
mov edx, dword [0x4ae280]
mov eax, dword [0x4ae27c]
mov ecx, dword [0x4ae278]
push edx
mov edx, dword [0x4ae274]
push eax
push ecx
push edx
push esi
call fcn.004364e0
jmp 0x427b4d
mov eax, dword [0x4ae27c]
mov ecx, dword [0x4ae278]
mov edx, dword [0x4ae270]
push eax
push ecx
mov ecx, dword [0x4ae280]
push edx
mov edx, dword [0x4ae274]
push esi
call fcn.004366b0
jmp 0x427b4d
mov eax, dword [0x4ae280]
mov ecx, dword [0x4ae27c]
mov edx, dword [0x4ae274]
push eax
push ecx
mov ecx, dword [0x4ae284]
push edx
mov edx, dword [0x4ae278]
push esi
mov esi, dword [0x4ae270]
call fcn.004367c0
mov esi, dword [esp + 0x40]
jmp 0x427b4d
mov eax, dword [0x4ae280]
mov ecx, dword [0x4ae274]
mov edx, dword [0x4ae278]
push eax
mov eax, dword [0x4ae27c]
push ecx
mov ecx, dword [0x4ae284]
push esi
call fcn.00436880
jmp 0x427b4d
mov edx, dword [0x4ae288]
mov eax, dword [0x4ae284]
mov ecx, dword [0x4ae280]
push edx
mov edx, dword [0x4ae27c]
push eax
mov eax, dword [0x4ae278]
push ecx
mov ecx, dword [0x4ae274]
push edx
mov edx, dword [0x4ae270]
push eax
push esi
call fcn.00451910
jmp 0x427b4d
mov ecx, dword [0x4ae28c]
mov edx, dword [0x4ae288]
mov eax, dword [0x4ae284]
push ecx
mov ecx, dword [0x4ae280]
push edx
mov edx, dword [0x4ae27c]
push eax
mov eax, dword [0x4ae278]
push ecx
mov ecx, dword [0x4ae274]
push edx
push eax
push esi
call fcn.004520b0
jmp 0x427b4d
mov ecx, dword [0x4ae280]
mov eax, dword [0x4ae27c]
mov edx, dword [0x4ae278]
mov edi, dword [0x4ae274]
push ecx
mov ecx, dword [0x4ae284]
call fcn.00437010
jmp 0x427b4d
mov edx, dword [0x4ae288]
mov eax, dword [0x4ae284]
mov ecx, dword [0x4ae280]
push edx
mov edx, dword [0x4ae278]
push eax
mov eax, dword [0x4ae274]
push ecx
mov ecx, dword [0x4ae270]
push edx
mov edx, dword [0x4ae27c]
push eax
push ecx
mov ecx, dword [0x4ae28c]
call fcn.00437080
jmp 0x427b4d
cmp cl, 0x92
sete dl
movzx eax, dl
push eax
mov eax, esi
call fcn.004371b0
jmp 0x427b4d
mov ecx, dword [0x4ae274]
mov edx, dword [0x4ae270]
push ecx
mov ecx, dword [0x4ae278]
push esi
call fcn.004374c0
jmp 0x427b4d
mov edx, dword [0x4ae284]
mov eax, dword [0x4ae280]
mov ecx, dword [0x4ae27c]
push edx
mov edx, dword [0x4ae278]
push eax
push ecx
mov ecx, dword [0x4ae274]
push edx
mov edx, dword [0x4ae270]
push esi
call fcn.00437b10
jmp 0x427b4d
cmp byte [esi + 1], 1
jbe 0x428fb2
mov eax, dword [0x4ae27c]
mov ecx, dword [0x4ae278]
mov edx, dword [0x4ae270]
push eax
mov eax, dword [0x4ae274]
push ecx
mov ecx, dword [0x4ae280]
call fcn.00437ef0
jmp 0x427b4d
mov edi, dword [0x4ae270]
mov ecx, 0x49b8cd
push 0x49b8cd
mov eax, ecx
mov edx, ecx
call fcn.00442f90
test eax, eax
je 0x428fd7
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, 1
jmp 0x427b4d
mov edx, dword [0x4ae27c]
mov ecx, dword [0x4ae280]
mov eax, dword [0x4ae278]
push edx
mov edx, dword [0x4ae274]
call fcn.00437f20
jmp 0x427b4d
mov eax, dword [0x4ae27c]
mov ecx, dword [0x4ae280]
mov edx, dword [0x4ae274]
push eax
mov eax, dword [0x4ae278]
call fcn.00438070
jmp 0x427b4d
mov ecx, dword [0x4ae280]
mov edx, dword [0x4ae27c]
mov eax, dword [0x4ae274]
push ecx
mov ecx, dword [0x4ae284]
push edx
mov edx, dword [0x4ae278]
push eax
push esi
call fcn.00438190
jmp 0x427b4d
mov ecx, dword [0x4ae27c]
mov eax, dword [0x4ae278]
mov edx, dword [0x4ae274]
push ecx
mov ecx, dword [0x4ae280]
push esi
call fcn.004389d0
jmp 0x427b4d
mov edx, dword [0x4ae28c]
mov eax, dword [0x4ae288]
mov ecx, dword [0x4ae284]
push edx
mov edx, dword [0x4ae280]
push eax
push ecx
push edx
mov eax, esi
call fcn.00438c60
jmp 0x427b4d
mov eax, dword [0x4ae278]
mov ecx, dword [0x4ae274]
push eax
push esi
call fcn.00438ec0
jmp 0x427b4d
push 0
push 0x1a3
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [0x4aa988]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x4286dc
push 1
push eax
call fcn.00401420
add esp, 8
mov edi, 1
jmp 0x427b57
push 0
push 0x1a0
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov edx, dword [0x4aa988]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle 0x4286dc
push 1
push eax
call fcn.00401420
add esp, 8
mov edi, 1
jmp 0x427b57
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x429176
mov edi, dword [0x4ae270]
cmp byte [edi], al
je 0x429176
mov eax, 0x4af278
call fcn.0041bcb0
test eax, eax
jne 0x429176
mov eax, dword [0x4ae270]
push eax
push 0
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042faa0
jmp 0x427b4d
mov dword [0x4af840], eax
mov edi, 1
jmp 0x427b57
mov eax, dword [esi + 0xc]
mov cl, 1
cmp cl, byte [esi + 1]
mov ecx, dword [0x4ae278]
sbb edx, edx
and edx, dword [0x4ae21c]
push edx
mov edx, dword [0x4ae274]
push eax
mov eax, dword [0x4ae270]
push ecx
push edx
push eax
call fcn.0040b040
add esp, 0x14
jmp 0x427b4d
mov ebx, dword [esi + 0xc]
test ebx, ebx
jne 0x429254
mov ecx, dword [0x4ae270]
push 0x4af278
call fcn.0041bcf0
mov ebx, eax
test ebx, ebx
jne 0x429254
mov eax, dword [0x4ae270]
cmp byte [eax], bl
je 0x4291f9
push eax
push ebx
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042faa0
jmp 0x427b4d
cmp byte [esi + 1], 0
jbe 0x429222
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 4]
cmp byte [eax], 0
je 0x429222
push 0x49b8cd
push 0
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042faa0
jmp 0x427b4d
mov ebx, dword [edi + 0x9c]
test ebx, ebx
jne 0x429254
mov edi, dword [edi + 0xa0]
test edi, edi
je 0x42923c
mov ebx, dword [edi]
test ebx, ebx
jne 0x429254
push 0x49b8cd
push 0
push str.Parameter_1_must_not_be_blank_in_this_case.
mov ecx, esi
call fcn.0042faa0
jmp 0x427b4d
mov eax, dword [0x4ae274]
push 0
push 1
push 1
push 1
call fcn.00474dd0
add esp, 0x10
test eax, eax
jne 0x42930f
mov esi, dword [0x4ae274]
push eax
call fcn.00409d00
add esp, 4
test eax, eax
jne 0x4292d4
mov edx, dword [0x4ae274]
push 0x49c9fc
push edx
call fcn.004883a1
add esp, 8
test eax, eax
jne 0x4292b5
push ebx
push 0x4af278
call fcn.0041bbc0
mov esi, dword [esp + 0x40]
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae274]
mov ecx, dword [esp + 0x40]
push eax
push 0
push str.Parameter_2_invalid.
call fcn.0042faa0
mov esi, dword [esp + 0x40]
jmp 0x427b4d
jle 0x42930b
cmp eax, 2
jg 0x42930b
cmp eax, 1
mov eax, dword [0x4ae278]
sete cl
push 0
movzx edx, cl
push edx
push eax
push 0x49b8cd
push ebx
mov edi, 0x4af278
call fcn.0041b900
mov esi, dword [esp + 0x40]
mov edi, 1
jmp 0x427b57
mov esi, dword [esp + 0x40]
mov ecx, dword [0x4ae274]
cmp byte [ecx], 0
mov edx, dword [0x4ae278]
jne 0x429329
cmp byte [edx], 0
je 0x429329
mov al, 1
jmp 0x42932b
xor al, al
push eax
push 1
push edx
push ecx
push ebx
mov edi, 0x4af278
call fcn.0041b900
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae270]
cmp byte [eax], 0
mov ebx, 0x10
je 0x429379
push 0x49f880
push eax
call fcn.004883a1
add esp, 8
test eax, eax
je 0x429379
xor edi, edi
mov ecx, esi
call fcn.00422a10
mov edi, dword [esp + 0x44]
mov ebx, eax
test ebx, ebx
je 0x42937e
mov eax, 1
mov byte [edi + 0xce], al
test al, al
je 0x4293a8
or eax, 0xffffffff
mov dword [edi + 0xb8], ebx
mov byte [edi + 0xcc], 0
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 0x24], eax
lea edi, [eax + 2]
jmp 0x427b57
mov dword [edi + 0xb8], 5
mov byte [edi + 0xcc], 1
mov edi, 1
jmp 0x427b57
mov esi, dword [0x4ae270]
call fcn.00415f40
dec eax
je 0x429471
dec eax
je 0x429428
dec eax
jne 0x429486
mov ecx, dword [0x4ae274]
cmp byte [ecx], al
je 0x429414
mov ecx, dword [esp + 0x40]
lea edi, [eax + 1]
call fcn.00422a10
or eax, edx
jne 0x429410
mov esi, dword [esp + 0x40]
mov eax, edi
mov edi, dword [esp + 0x44]
mov byte [edi + 0xcd], al
mov edi, eax
jmp 0x427b57
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x40]
xor eax, eax
mov byte [edi + 0xcd], al
lea edi, [eax + 1]
jmp 0x427b57
mov edx, dword [0x4ae274]
cmp byte [edx], 0
je 0x429446
mov ecx, dword [esp + 0x40]
mov edi, 1
call fcn.00422a10
mov dword [0x4af8ac], eax
mov eax, dword [0x4ae278]
cmp byte [eax], 0
je 0x429486
mov ecx, dword [esp + 0x40]
mov edi, 2
call fcn.00422a10
mov esi, dword [esp + 0x40]
mov dword [0x4af8a8], eax
mov edi, 1
jmp 0x427b57
mov ecx, dword [esp + 0x40]
mov edi, 1
call fcn.00422a10
mov ecx, dword [esp + 0x44]
mov dword [ecx + 0x2c], eax
mov esi, dword [esp + 0x40]
mov edi, 1
jmp 0x427b57
mov ebx, dword [esi + 0xc]
test ebx, ebx
jne 0x4294b7
mov edx, dword [0x4ae270]
push 0x4af278
mov cl, 1
call fcn.00423720
mov ebx, eax
test ebx, ebx
je case.0x42785e.8
mov edi, dword [0x4ae27c]
cmp byte [edi], 0
je 0x4294f3
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x4294f0
mov eax, 0x4af278
call fcn.0041bcb0
test eax, eax
jne 0x4294f0
mov edx, dword [0x4ae27c]
push edx
push eax
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042faa0
jmp 0x427b4d
mov dword [ebx + 0x10], eax
mov eax, dword [0x4ae284]
mov ecx, dword [0x4ae280]
mov edx, dword [0x4ae278]
push eax
push ecx
mov ecx, dword [0x4ae274]
push edx
push ebx
call fcn.0047ab10
jmp 0x427b4d
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x429562
mov eax, dword [0x4ae270]
cmp byte [eax], 0
mov ebx, eax
je 0x4286dc
mov edi, dword [0x4af2b0]
test edi, edi
je 0x4286dc
lea ecx, [ecx]
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.004883a1
add esp, 8
test eax, eax
je 0x429562
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x429540
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae274]
cmp byte [eax], 0
je 0x429592
push 0x49d54c
push eax
call fcn.004883a1
add esp, 8
test eax, eax
jne 0x429592
mov al, 1
mov ecx, edi
push eax
call fcn.0047b1b0
mov edi, 1
jmp 0x427b57
xor al, al
mov ecx, edi
push eax
call fcn.0047b1b0
mov edi, 1
jmp 0x427b57
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x4295f2
mov eax, dword [0x4ae270]
cmp byte [eax], 0
mov ebx, eax
je 0x4286dc
mov edi, dword [0x4af2b0]
test edi, edi
je 0x4286dc
jmp 0x4295d0
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.004883a1
add esp, 8
test eax, eax
je 0x4295f2
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x4295d0
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae274]
cmp byte [eax], 0
je 0x429651
push 0x49eab4
push eax
call fcn.004883a1
add esp, 8
test eax, eax
jne 0x429622
push edi
xor edx, edx
mov cl, 0x84
call fcn.0047adc0
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae274]
cmp byte [eax], 0
je 0x429651
push 0x49d54c
push eax
call fcn.004883a1
add esp, 8
test eax, eax
jne 0x429651
mov al, 1
push eax
push edi
call fcn.0047ae80
mov edi, 1
jmp 0x427b57
xor al, al
push eax
push edi
call fcn.0047ae80
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae278]
mov esi, dword [0x4ae274]
push eax
call fcn.0043ece0
mov esi, dword [esp + 0x40]
jmp 0x427b4d
test ebx, ebx
jne 0x429696
lea edi, [ebx + 1]
mov ecx, esi
call fcn.00422a10
call fcn.00414790
jmp 0x427b57
mov eax, dword [0x4ae274]
push 0
push 1
push 0
push 1
call fcn.00474dd0
add esp, 0x10
cmp eax, 2
je 0x4296ce
mov eax, dword [0x4ae278]
push 0
push 1
push 0
push 1
call fcn.00474dd0
add esp, 0x10
cmp eax, 2
jne 0x429765
mov ecx, dword [0x4ae274]
cmp byte [ecx], 0
je 0x4296e7
mov edi, 1
mov ecx, esi
call fcn.00422ac0
jmp 0x4296e9
fldz
mov edx, dword [0x4ae278]
fst qword [esp + 0x60]
cmp byte [edx], 0
je 0x429729
mov edi, 2
fstp st(0)
mov ecx, esi
call fcn.00422ac0
fst qword [esp + 0xa0]
fld qword [esp + 0x60]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x429738
fstp qword [esp + 0x60]
fstp qword [esp + 0xa0]
jmp 0x42973c
fld qword [0x4a3fe8]
fst qword [esp + 0xa0]
jmp 0x429713
fstp st(0)
fstp st(0)
call fcn.00414900
fld qword [esp + 0xa0]
fld qword [esp + 0x60]
sub esp, 8
fsub st(1), st(0)
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push ebx
call fcn.00414e70
jmp 0x427b4d
mov eax, dword [0x4ae274]
cmp byte [eax], 0
je 0x429783
mov edi, 1
mov ecx, esi
call fcn.00422a10
mov ebx, eax
mov dword [esp + 0x4c], eax
jmp 0x429789
xor ebx, ebx
mov dword [esp + 0x4c], ebx
mov ecx, dword [0x4ae278]
cmp byte [ecx], 0
je 0x4297a4
mov edi, 2
mov ecx, esi
call fcn.00422a10
mov edi, eax
jmp 0x4297a9
mov edi, SysReAllocString
cmp ebx, edi
jle 0x4297b7
mov eax, ebx
mov ebx, edi
mov dword [esp + 0x4c], ebx
mov edi, eax
call fcn.004148b0
mov ecx, eax
mov eax, ebx
cdq
mov ebx, eax
mov dword [esp + 0x60], edx
mov eax, edi
cdq
sub eax, ebx
sbb edx, dword [esp + 0x60]
add eax, 1
adc edx, 0
push edx
push eax
push 0
push ecx
call fcn.004974c0
add eax, dword [esp + 0x4c]
jmp 0x428446
mov ecx, dword [0x4ae274]
push 1
push esi
call fcn.0043edf0
jmp 0x427b4d
mov edx, dword [0x4ae278]
mov eax, dword [0x4ae274]
mov ecx, dword [0x4ae270]
push edx
push esi
call fcn.0043ef20
jmp 0x427b4d
mov eax, dword [0x4ae278]
mov ecx, dword [0x4ae274]
push esi
call fcn.0043f1c0
jmp 0x427b4d
mov eax, dword [0x4ae27c]
mov edx, dword [0x4ae274]
push eax
xor eax, eax
cmp cl, 0x9d
sete al
push edx
dec eax
and eax, dword [0x4ae270]
push eax
push esi
call fcn.0043f740
jmp 0x427b4d
mov ecx, dword [0x4ae274]
cmp byte [ecx], 0
je 0x429871
mov edi, 1
mov ecx, esi
call fcn.00422a10
dec eax
jmp 0x429873
xor eax, eax
cdq
test edx, edx
jg 0x429884
jl 0x42987e
test eax, eax
jae 0x429884
xor eax, eax
mov dword [esp + 0x64], eax
cmp byte [esi], 0x9f
push eax
jne 0x429898
call fcn.00440840
mov esi, dword [esp + 0x40]
jmp 0x427b4d
mov edi, dword [0x4ae270]
mov ebx, esi
call fcn.00440930
jmp 0x427b4d
mov edx, dword [0x4ae274]
cmp byte [edx], 0
je 0x4298c7
mov edi, 1
mov ecx, esi
call fcn.00422a10
mov ebx, eax
test ebx, ebx
jns 0x4298cc
mov ebx, 0x96
mov eax, dword [0x4ae270]
cmp byte [eax], 0
je 0x4298f1
xor edi, edi
mov ecx, esi
call fcn.00422a10
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov edi, 1
jmp 0x427b57
mov eax, 0x20b
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae274]
cmp byte [eax], 0
je 0x429929
push str.wait
push eax
call fcn.004883a1
add esp, 8
test eax, eax
je 0x42994f
mov eax, dword [0x4ae274]
push 0x49cf30
push eax
call fcn.004883a1
add esp, 8
test eax, eax
je 0x42994f
xor al, al
mov ebx, esi
push eax
mov eax, dword [0x4ae270]
call fcn.00440a90
jmp 0x427b4d
mov eax, 1
push eax
mov eax, dword [0x4ae270]
mov ebx, esi
call fcn.00440a90
jmp 0x427b4d
cmp byte [esi + 1], 2
jae 0x429971
mov edi, dword [edi + 0x18]
jmp 0x429973
xor edi, edi
mov ecx, dword [0x4ae270]
mov edx, dword [0x4ae274]
push edi
push ecx
push edx
push esi
call fcn.00441ce0
jmp 0x427b4d
mov ecx, dword [0x4ae274]
push esi
call fcn.00441370
jmp 0x427b4d
mov eax, dword [0x4ae274]
mov ecx, dword [0x4ae278]
push eax
push esi
call fcn.00441950
jmp 0x427b4d
mov eax, dword [0x4ae270]
mov ebx, esi
call fcn.004420a0
jmp 0x427b4d
mov eax, dword [0x4ae270]
call fcn.00453560
mov esi, dword [esp + 0x40]
jmp 0x427b4d
mov ecx, dword [0x4ae270]
movsx eax, byte [ecx]
neg eax
sbb eax, eax
push 7
and eax, ecx
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHEmptyRecycleBinA]
test eax, eax
setne cl
movzx edx, cl
push edx
push esi
call fcn.0042f740
jmp 0x427b4d
mov eax, dword [0x4ae274]
mov ecx, dword [0x4ae270]
push eax
push ecx
push esi
mov esi, dword [0x4ae278]
call fcn.00442120
mov esi, dword [esp + 0x40]
jmp 0x427b4d
mov edi, 2
mov ecx, esi
call fcn.00422a10
mov ecx, dword [0x4ae270]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4ae274]
push eax
call fcn.00442250
mov esi, dword [esp + 0x40]
jmp 0x427b4d
push 0
push ecx
mov edi, 2
mov ecx, esi
call fcn.00422a10
mov ecx, dword [0x4ae274]
mov edx, dword [0x4ae270]
add esp, 4
dec eax
neg eax
sbb eax, eax
inc eax
push eax
push ecx
push edx
call fcn.00453830
add esp, 0x10
test al, al
sete al
movzx ecx, al
push ecx
push esi
call fcn.0042f740
jmp 0x427b4d
mov edx, dword [0x4ae278]
mov al, byte [edx]
call fcn.00409bf0
cmp al, 0x52
jne 0x429ad4
mov eax, dword [0x4ae274]
mov ecx, dword [0x4ae270]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042f740
jmp 0x427b4d
push 1
push ecx
mov edi, 2
mov ecx, esi
call fcn.00422a10
mov ecx, dword [0x4ae274]
mov edx, dword [0x4ae270]
add esp, 4
push eax
push ecx
push edx
call fcn.00453830
add esp, 0x10
test al, al
sete al
movzx ecx, al
push ecx
push esi
call fcn.0042f740
jmp 0x427b4d
mov eax, dword [0x4ae270]
call fcn.00441280
test al, al
sete dl
mov byte [esp + 0xac], dl
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esp + 0xac]
mov ecx, dword [0x4aa988]
push edx
push esi
mov dword [ecx + 0x30], eax
call fcn.0042f740
jmp 0x427b4d
mov eax, dword [0x4ae270]
cmp byte [eax], 0
je 0x429b87
mov edi, 1
mov ecx, esi
call fcn.00422a10
cmp eax, edi
mov eax, dword [0x4ae270]
sete cl
movzx edx, cl
push edx
call fcn.00453ac0
add esp, 4
test al, al
je 0x429b87
xor al, al
push eax
push esi
call fcn.0042f740
jmp 0x427b4d
mov eax, 1
push eax
push esi
call fcn.0042f740
jmp 0x427b4d
mov eax, dword [0x4ae274]
cmp byte [eax], 0
jne 0x429bb4
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x140]
test edi, edi
jne 0x429bb4
mov eax, 0x49b8cd
mov edi, esi
call fcn.004422a0
jmp 0x427b4d
mov ebx, dword [0x4ae274]
cmp byte [ebx], 0
jne 0x429bdd
mov edi, dword [edi + 0x10]
lea ebx, [edi + 0x140]
test edi, edi
jne 0x429bdd
mov ebx, 0x49b8cd
mov edi, 3
mov ecx, esi
call fcn.00422a10
mov esi, dword [0x4ae278]
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.004161b0
mov edx, dword [esp + 0x44]
push eax
mov eax, dword [0x4ae270]
push ebx
push edx
call fcn.004423b0
mov esi, dword [esp + 0x40]
jmp 0x427b4d
mov eax, dword [0x4ae274]
cmp byte [eax], 0
jne 0x429c34
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x140]
test edi, edi
jne 0x429c34
mov eax, 0x49b8cd
mov ecx, dword [0x4ae278]
movzx edx, byte [ecx]
push edx
mov edi, esi
call fcn.004429d0
jmp 0x427b4d
mov ebx, dword [0x4ae274]
cmp byte [ebx], 0
jne 0x429c67
mov edi, dword [edi + 0x10]
lea ebx, [edi + 0x140]
test edi, edi
jne 0x429c67
mov ebx, 0x49b8cd
mov edi, 4
mov ecx, esi
call fcn.00422a10
mov esi, dword [0x4ae27c]
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.004161b0
mov edx, dword [0x4ae278]
mov edi, dword [esp + 0x44]
push eax
movzx eax, byte [edx]
push eax
mov eax, dword [0x4ae270]
push ebx
call fcn.00442b50
mov esi, edi
jmp 0x427b4d
mov eax, dword [0x4ae274]
cmp byte [eax], 0
je 0x429cc7
mov ecx, dword [0x4ae278]
push ecx
mov edi, eax
push esi
call fcn.00442cf0
jmp 0x427b4d
mov edi, dword [edi + 0x10]
test edi, edi
je 0x429ce6
mov ecx, dword [0x4ae278]
push ecx
add edi, 0x140
push esi
call fcn.00442cf0
jmp 0x427b4d
mov ecx, dword [0x4ae278]
push ecx
mov edi, 0x49b8cd
push esi
call fcn.00442cf0
jmp 0x427b4d
mov eax, dword [0x4ae274]
cmp byte [eax], 0
jne 0x429d19
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x140]
test edi, edi
jne 0x429d19
mov eax, 0x49b8cd
push esi
call fcn.00453660
jmp 0x427b4d
mov eax, dword [0x4ae270]
call fcn.00440c70
xor edx, edx
cmp dword [edi + 0xe4], edx
sete dl
mov edi, edx
jmp 0x427b4f
mov eax, dword [0x4ae280]
mov ecx, dword [0x4ae27c]
mov edx, dword [0x4ae274]
push eax
push ecx
mov ecx, dword [0x4ae278]
push edx
push esi
call fcn.00440d10
jmp 0x427b4d
mov eax, dword [0x4ae278]
mov ecx, dword [0x4ae274]
push eax
push ecx
mov ecx, dword [0x4ae27c]
mov edx, esi
call fcn.00452c20
jmp 0x427b4d
mov edx, dword [0x4ae270]
push edx
push esi
call fcn.00452f40
jmp 0x427b4d
mov eax, dword [0x4ae290]
mov ecx, dword [0x4ae288]
mov edx, dword [0x4ae284]
mov edi, dword [0x4ae28c]
push eax
mov eax, dword [0x4ae27c]
push ecx
mov ecx, dword [0x4ae274]
push edx
mov edx, dword [0x4ae270]
push eax
push ecx
mov ecx, dword [0x4ae280]
push edx
mov edx, dword [0x4ae278]
push esi
call fcn.004532f0
jmp 0x427b4d
push 0
mov ecx, 4
call fcn.0043b500
add esp, 4
jmp 0x427b4d
mov esi, dword [0x4ae270]
push 7
call fcn.00409d00
add esp, 4
cmp eax, 7
jne 0x429e1a
push 0
lea ecx, [eax - 6]
call fcn.0043b500
mov esi, dword [esp + 0x44]
add esp, 4
jmp 0x427b4d
cmp byte [edi + 0xd9], 0
je 0x429e46
mov ecx, dword [0x4aebb4]
test ecx, ecx
jle 0x429e30
dec ecx
jmp 0x429e35
mov ecx, 0x18f
mov dword [0x4aebb4], ecx
mov dword [ecx*4 + 0x4aebb8], 0
mov esi, dword [esp + 0x40]
cmp eax, 1
sete al
mov byte [edi + 0xd9], al
mov edi, 1
jmp 0x427b57
push 0
mov ecx, 2
call fcn.0043b500
add esp, 4
jmp 0x427b4d
push 0
mov ecx, 3
call fcn.0043b500
add esp, 4
jmp 0x427b4d
mov ebx, dword [0x4aa988]
add ebx, 0x4c
call fcn.0045c770
test eax, eax
je 0x429ea8
mov ecx, dword [0x4aa988]
mov edx, dword [ecx + 0x4c]
mov ebx, dword [edx + 4]
jmp 0x429eaa
xor ebx, ebx
mov al, byte [esi + 1]
test al, al
jne 0x429ec8
fldz
sub esp, 8
fstp qword [esp]
push ebx
push 0
push 0x10000
push str.Press_OK_to_continue.
jmp 0x429f0f
cmp al, 1
jne 0x429ee4
fldz
mov eax, dword [0x4ae270]
sub esp, 8
fstp qword [esp]
push ebx
push 0
push 0x10000
push eax
jmp 0x429f0f
mov edi, 3
mov ecx, esi
call fcn.00422ac0
mov ecx, dword [0x4ae274]
sub esp, 8
fstp qword [esp]
push ebx
push ecx
xor edi, edi
mov ecx, esi
call fcn.00422a10
mov edx, dword [0x4ae278]
push eax
push edx
call fcn.00479ca0
mov edi, eax
add esp, 0x18
test edi, edi
jne 0x429f43
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x59e
jne 0x429f43
mov eax, dword [0x4ae270]
push eax
push 0
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042faa0
jmp 0x427b4d
xor ecx, ecx
test edi, edi
setne cl
mov edi, ecx
jmp 0x427b4f
mov edx, dword [0x4ae28c]
cmp byte [edx], 0
je 0x429f6e
mov edi, 7
mov ecx, esi
call fcn.00422a10
mov dword [esp + 0x58], eax
jmp 0x429f76
mov dword [esp + 0x58], CreateStatusWindowA
mov eax, dword [0x4ae288]
cmp byte [eax], 0
je 0x429f92
mov edi, 6
mov ecx, esi
call fcn.00422a10
mov dword [esp + 0x4c], eax
jmp 0x429f9a
mov dword [esp + 0x4c], CreateStatusWindowA
mov ecx, dword [0x4ae284]
cmp byte [ecx], 0
je 0x429fb7
mov edi, 5
mov ecx, esi
call fcn.00422a10
mov dword [esp + 0x70], eax
jmp 0x429fbf
mov dword [esp + 0x70], CreateStatusWindowA
mov edx, dword [0x4ae280]
cmp byte [edx], 0
je 0x429fdc
mov edi, 4
mov ecx, esi
call fcn.00422a10
mov dword [esp + 0x68], eax
jmp 0x429fe4
mov dword [esp + 0x68], CreateStatusWindowA
mov edi, 9
mov ecx, esi
call fcn.00422ac0
mov eax, dword [0x4ae298]
mov ecx, dword [0x4ae290]
sub esp, 8
fstp qword [esp]
push eax
mov al, byte [ecx]
call fcn.00409bf0
mov ecx, dword [esp + 0x64]
cmp al, 0x4c
sete dl
movzx eax, dl
mov edx, dword [esp + 0x58]
push eax
mov eax, dword [esp + 0x80]
push ecx
mov ecx, dword [0x4ae27c]
push edx
push eax
mov al, byte [ecx]
call fcn.00409bf0
mov edx, dword [0x4ae278]
mov edi, dword [esp + 0x84]
cmp al, 0x48
mov eax, dword [0x4ae274]
push edx
push eax
sete cl
push ebx
call fcn.0043b7a0
add esp, 0x28
jmp 0x427b4d
mov ecx, dword [0x4ae274]
cmp byte [ecx], 0
je 0x42a073
mov edi, 1
mov ecx, esi
call fcn.00422a10
mov ebx, eax
jmp 0x42a075
xor ebx, ebx
mov edx, dword [0x4ae270]
cmp byte [edx], 0
je 0x42a08b
xor edi, edi
mov ecx, esi
call fcn.00422a10
jmp 0x42a090
mov eax, 0xc8
mov ecx, dword [0x4ae27c]
mov edx, dword [0x4ae278]
push ecx
push edx
push ebx
push eax
call fcn.00451360
jmp 0x427b4d
mov eax, dword [0x4ae2e0]
test eax, eax
je 0x42a0ca
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x42a0ca
mov eax, dword [0x4ae2e0]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4ae2e0], 0
mov edi, 1
jmp 0x427b57
mov ecx, dword [0x4ae280]
mov edx, dword [0x4ae27c]
mov eax, dword [0x4ae278]
push 0
push ecx
mov ecx, dword [0x4ae274]
push edx
mov edx, dword [0x4ae270]
push eax
push ecx
push edx
push esi
mov ecx, 0x49b8cd
call fcn.00432140
jmp 0x427b4d
mov eax, dword [0x4ae284]
mov ecx, dword [0x4ae280]
mov edx, dword [0x4ae27c]
push 1
push eax
mov eax, dword [0x4ae278]
push ecx
mov ecx, dword [0x4ae274]
push edx
push eax
push ecx
mov ecx, dword [0x4ae270]
push esi
call fcn.00432140
jmp 0x427b4d
mov edx, dword [0x4ae278]
mov eax, dword [0x4ae274]
mov ecx, dword [0x4ae270]
push edx
push eax
push ecx
mov ecx, dword [0x4ae27c]
push esi
call fcn.00433320
jmp 0x427b4d
mov edx, dword [0x4ae274]
mov eax, dword [0x4ae270]
mov edi, dword [0x4ae27c]
mov esi, dword [0x4ae278]
push edx
push eax
call fcn.004336f0
mov esi, dword [esp + 0x40]
jmp 0x427b4d
mov ecx, esi
call fcn.00434400
jmp 0x427b4d
mov esi, dword [0x4ae274]
call fcn.00416450
mov esi, dword [0x4ae270]
movzx ebx, ax
call fcn.004164c0
movzx ecx, ax
cmp ecx, 0xffffffff
je 0x42a1e3
cmp ebx, 0xffffffff
je 0x42a1e3
mov eax, 3
shl ax, cl
shl bx, cl
not ax
and ax, word [edi + 0xd0]
or ax, bx
mov word [edi + 0xd0], ax
mov esi, dword [esp + 0x40]
mov edi, 1
jmp 0x427b57
xor edi, edi
mov ecx, esi
call fcn.00422a10
mov ecx, dword [esp + 0x44]
mov byte [ecx + 0xcf], al
cmp al, 0x64
jbe case.0x42a5f4.69
mov byte [ecx + 0xcf], 2
mov edi, 1
jmp 0x427b57
mov ecx, dword [edi + 0xb4]
mov eax, dword [0x4ae270]
push ecx
call fcn.00416120
mov dword [edi + 0xb4], eax
add esp, 4
mov edi, 1
jmp 0x427b57
xor edi, edi
mov ecx, esi
call fcn.00422a10
cmp eax, 0x64
ja case.0x42a5f4.69
mov edx, dword [esp + 0x44]
mov byte [edx + 0xd6], al
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae278]
push str.Play
push eax
call fcn.004883a1
add esp, 8
test eax, eax
jne 0x42a2be
mov ecx, dword [0x4ae270]
cmp byte [ecx], al
je 0x42a298
xor edi, edi
mov ecx, esi
call fcn.00422a10
mov edx, dword [esp + 0x44]
mov dword [edx + 0x60], eax
mov eax, dword [0x4ae274]
cmp byte [eax], 0
je case.0x42a5f4.69
mov edi, 1
mov ecx, esi
call fcn.00422a10
mov ecx, dword [esp + 0x44]
mov dword [ecx + 0x68], eax
jmp 0x427b57
mov edx, dword [0x4ae270]
cmp byte [edx], 0
je 0x42a2d9
xor edi, edi
mov ecx, esi
call fcn.00422a10
mov ecx, dword [esp + 0x44]
mov dword [ecx + 0x5c], eax
mov edx, dword [0x4ae274]
cmp byte [edx], 0
je case.0x42a5f4.69
mov edi, 1
mov ecx, esi
call fcn.00422a10
mov ecx, dword [esp + 0x44]
mov dword [ecx + 0x64], eax
jmp 0x427b57
mov edx, dword [0x4ae274]
push str.Play
push edx
call fcn.004883a1
add esp, 8
xor edi, edi
mov ecx, esi
test eax, eax
jne 0x42a332
call fcn.00422a10
mov ecx, dword [esp + 0x44]
mov dword [ecx + 0x70], eax
mov edi, 1
jmp 0x427b57
call fcn.00422a10
mov edx, dword [esp + 0x44]
mov dword [edx + 0x6c], eax
mov edi, 1
jmp 0x427b57
xor edi, edi
mov ecx, esi
call fcn.00422a10
mov ecx, dword [esp + 0x44]
mov dword [ecx + 0x54], eax
mov edi, 1
jmp 0x427b57
xor edi, edi
mov ecx, esi
call fcn.00422a10
mov edx, dword [esp + 0x44]
mov dword [edx + 0x58], eax
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae270]
push 0x49f8a4
call fcn.004752c0
add esp, 4
mov ecx, esi
test eax, eax
je 0x42a3b9
mov dword [edi], 0xffffffff
mov dword [edi + 4], 0xffffffff
xor edi, edi
call fcn.00422a10
mov ecx, dword [esp + 0x44]
mov dword [ecx + 0x24], eax
mov edi, 1
jmp 0x427b57
mov dword [edi + 0x24], 0xffffffff
xor edi, edi
call fcn.00422a10
mov ecx, dword [esp + 0x44]
mov dword [ecx + 4], edx
mov edx, eax
or edx, dword [ecx + 4]
mov dword [ecx], eax
jne case.0x42a5f4.69
mov dword [ecx + 4], edi
mov dword [ecx], 0xa
lea edi, [edx + 1]
jmp 0x427b57
mov esi, dword [0x4ae270]
push 7
call fcn.00409d00
add esp, 4
cmp eax, 7
je 0x42a40d
cmp eax, 1
sete al
mov byte [edi + 0xd3], al
mov esi, dword [esp + 0x40]
mov edi, 1
jmp 0x427b57
mov esi, dword [0x4ae270]
call fcn.00415c10
dec eax
cmp eax, 5
ja case.default.0x42a430
jmp dword [eax*4 + 0x42b53c]
mov esi, dword [esp + 0x40]
mov dword [edi + 0x20], 1
mov edi, 1
jmp 0x427b57
mov esi, dword [esp + 0x40]
mov dword [edi + 0x20], 2
mov edi, 1
jmp 0x427b57
mov esi, dword [esp + 0x40]
mov dword [edi + 0x20], 4
mov edi, 1
jmp 0x427b57
mov esi, dword [esp + 0x40]
mov dword [edi + 0x20], 3
mov edi, 1
jmp 0x427b57
mov esi, dword [esp + 0x40]
mov byte [edi + 0xc9], 1
mov edi, 1
jmp 0x427b57
mov esi, dword [esp + 0x40]
mov byte [edi + 0xc9], 0
mov edi, 1
jmp 0x427b57
mov ecx, dword [0x4ae270]
push ecx
mov ecx, dword [esp + 0x44]
push 0
push str.Parameter_1_invalid.
call fcn.0042faa0
mov esi, dword [esp + 0x40]
jmp 0x427b4d
mov edx, dword [0x4ae270]
push 5
push str.Float
push edx
call fcn.0048875d
add esp, 0xc
test eax, eax
jne 0x42a5b9
lea edi, [eax + 1]
mov ecx, esi
call fcn.00422990
cmp eax, 0x1e
jae 0x427b57
mov ecx, esi
call fcn.00422a10
mov edi, eax
mov eax, dword [0x4ae274]
push 0x2e
push eax
mov ebx, edx
call fcn.004890e1
add esp, 8
mov dword [esp + 0x58], eax
test eax, eax
je 0x42a537
mov esi, eax
inc esi
call fcn.00414d70
mov esi, dword [esp + 0x40]
jmp 0x42a53b
xor eax, eax
xor edx, edx
add edi, eax
adc ebx, edx
add edi, 2
adc ebx, 0
mov dword [esp + 0x64], ebx
js 0x42a55d
jg case.0x42a5f4.69
cmp edi, 0xff
ja case.0x42a5f4.69
mov eax, dword [0x4ae274]
push 0
push 1
push 1
push 1
call fcn.00474dd0
add esp, 0x10
mov ecx, 0x49f8a8
test eax, eax
jne 0x42a580
mov ecx, 0x49b8cd
cmp dword [esp + 0x58], 0
mov eax, 0x49b8cd
jne 0x42a591
mov eax, 0x49ef10
mov edx, dword [esp + 0x44]
push ecx
mov ecx, dword [0x4ae274]
push eax
push ecx
add edx, 0x74
push str.___s_s_s
push edx
call fcn.00488af6
add esp, 0x14
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae270]
push 7
push str.Integer
push eax
call fcn.0048875d
add esp, 0xc
test eax, eax
jne case.0x42a5f4.69
mov ecx, dword [0x4ae274]
mov al, byte [ecx]
movsx ecx, al
add ecx, 0xffffffbc
cmp ecx, 0x24
ja case.0x42a5f4.69
movzx edx, byte [ecx + 0x42b560]
jmp dword [edx*4 + 0x42b554]
mov byte [edi + 0xd5], 0x44
mov edi, 1
jmp 0x427b57
mov byte [edi + 0xd5], al
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae278]
mov ecx, dword [0x4ae274]
push eax
call fcn.0043c780
jmp 0x427b4d
mov al, byte [esi + 1]
mov cl, 4
cmp cl, al
sbb edx, edx
and edx, dword [0x4ae228]
mov cl, 3
push edx
cmp cl, al
mov eax, dword [0x4ae284]
mov ecx, dword [0x4ae280]
sbb edx, edx
and edx, dword [0x4ae224]
push edx
mov edx, dword [0x4ae27c]
push eax
mov eax, dword [0x4ae278]
push ecx
mov ecx, dword [0x4ae270]
push edx
push eax
mov eax, dword [0x4ae274]
push ecx
push 0x4af278
call fcn.0046aae0
jmp 0x427b4d
mov edx, dword [0x4ae27c]
mov eax, dword [0x4ae278]
mov ecx, dword [0x4ae274]
push edx
push eax
push ecx
mov ecx, dword [0x4ae270]
push 0x4af278
call fcn.0045c7e0
jmp 0x427b4d
mov ecx, dword [0x4ae274]
mov dl, 2
cmp dl, byte [esi + 1]
mov edx, dword [0x4ae270]
sbb eax, eax
and eax, dword [0x4ae220]
push eax
mov eax, dword [0x4ae278]
push ecx
push edx
push esi
call fcn.0045d130
jmp 0x427b4d
mov eax, dword [0x4ae27c]
mov ecx, dword [0x4ae278]
mov edx, dword [0x4ae274]
push eax
push ecx
push edx
push esi
call fcn.0045e0f0
jmp 0x427b4d
mov eax, dword [0x4ae270]
call fcn.00416010
cmp eax, 7
ja case.0x42a5f4.69
jmp dword [eax*4 + 0x42b588]
cmp byte [0x4ae43a], 0
jne case.0x42a5f4.69
call fcn.0042f3f0
mov edi, 1
jmp 0x427b57
cmp byte [0x4ae43a], 0
je case.0x42a5f4.69
call fcn.0042f3f0
mov edi, 1
jmp 0x427b57
mov edi, 1
mov ecx, esi
call fcn.00422a10
test eax, eax
mov eax, dword [0x4ae270]
setne cl
movzx edx, cl
push edx
call fcn.00409d70
push eax
push esi
call fcn.0042f440
jmp 0x427b4d
mov esi, dword [0x4ae270]
push 7
call fcn.00409d00
add esp, 4
cmp eax, 7
je 0x42a796
cmp eax, 1
sete al
mov byte [edi + 0xd4], al
mov esi, dword [esp + 0x40]
mov edi, 1
jmp 0x427b57
mov esi, dword [0x4ae270]
call fcn.00415fa0
mov byte [edi + 0xd2], al
cmp al, 4
jne 0x42a7c0
mov byte [edi + 0xd2], 0
mov esi, dword [esp + 0x40]
mov edi, 1
jmp 0x427b57
mov esi, dword [0x4ae270]
push 7
call fcn.00409d00
add esp, 4
cmp eax, 7
je 0x42a7ef
cmp eax, 1
sete cl
mov byte [edi + 0xca], cl
mov esi, dword [esp + 0x40]
mov edi, 1
jmp 0x427b57
mov esi, dword [0x4ae270]
push 7
call fcn.00409d00
add esp, 4
cmp eax, 7
je 0x42a81e
cmp eax, 1
sete dl
mov byte [edi + 0xcb], dl
mov esi, dword [esp + 0x40]
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae270]
call fcn.00416070
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x42a5f4.69
movzx ecx, byte [ecx + 0x42b5c0]
jmp dword [ecx*4 + 0x42b5a8]
push 1
call dword [sym.imp.USER32.dll_BlockInput]
mov byte [0x4aeaee], 1
mov edi, 1
jmp 0x427b57
push 0
call dword [sym.imp.USER32.dll_BlockInput]
mov byte [0x4aeaee], 0
mov edi, 1
jmp 0x427b57
mov dword [0x4aa998], eax
mov edi, 1
jmp 0x427b57
or byte [0x4aeb20], 2
cmp dword [0x4ae40c], 0
mov byte [0x4aeaef], 1
jne case.0x42a5f4.69
mov edx, dword [0x4abac4]
movzx eax, word [edx]
push eax
call fcn.004083d0
add esp, 4
mov edi, 1
jmp 0x427b57
mov byte [0x4aeaef], 0
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae270]
mov edi, str._a_a_a_v
mov cl, 0x90
call fcn.00442eb0
jmp 0x427b4d
mov eax, dword [0x4ae270]
mov edi, 0x4aa990
mov cl, 0x14
call fcn.00442eb0
jmp 0x427b4d
mov eax, dword [0x4ae270]
mov edi, 0x4aa994
mov cl, 0x91
call fcn.00442eb0
jmp 0x427b4d
mov al, 1
mov edx, 0x4af278
call fcn.00417a70
mov edi, 1
jmp 0x427b57
xor edi, edi
mov ecx, esi
call fcn.00422a10
push 1
push eax
call fcn.00401420
add esp, 8
mov edi, 1
jmp 0x427b57
mov ecx, dword [0x4ae27c]
mov edx, dword [0x4ae278]
push ecx
mov ecx, dword [0x4ae280]
push edx
mov edx, dword [0x4ae274]
call fcn.00471780
jmp 0x427b4d
mov eax, dword [0x4ae270]
mov ecx, dword [0x4ae27c]
mov ebx, dword [0x4ae278]
mov edx, dword [0x4ae274]
push eax
push esi
call fcn.00471880
jmp 0x427b4d
cmp byte [esi + 1], 3
mov edx, dword [0x4ae274]
sbb ecx, ecx
not ecx
and ecx, dword [0x4ae278]
push ecx
push edx
mov edx, dword [0x4ae270]
push esi
call fcn.004719a0
jmp 0x427b4d
cmp byte [esi + 1], 2
jae 0x42a9e3
mov edi, dword [edi + 0x14]
test edi, edi
je 0x42a9e3
lea eax, [edi + 0x408]
push eax
mov eax, dword [edi + 4]
lea ecx, [edi + 8]
push ecx
push esi
call fcn.00471a10
jmp 0x427b4d
mov ecx, dword [0x4ae274]
lea edx, [esp + 0x5f]
push edx
lea eax, [esp + 0x7c]
push eax
push 2
push ecx
call fcn.00415990
mov ebx, eax
mov eax, dword [esp + 0x88]
add esp, 0x10
test eax, eax
jne 0x42aa1c
mov eax, dword [0x4ae278]
mov ecx, dword [0x4ae27c]
mov dword [esp + 0x78], eax
jmp 0x42aa22
mov ecx, dword [0x4ae278]
push ecx
push eax
push esi
mov eax, ebx
call fcn.00471a10
cmp byte [esp + 0x5f], 0
mov edi, eax
je 0x427b4f
test ebx, ebx
je 0x427b4f
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x427b4f
cmp byte [esi + 1], 2
jae 0x42aa80
mov edi, dword [edi + 0x14]
test edi, edi
je 0x42aa80
mov ecx, dword [edi + 0x808]
mov ebx, dword [0x4ae270]
lea edx, [edi + 0x408]
push edx
lea eax, [edi + 8]
push eax
mov eax, dword [edi + 4]
push ecx
push esi
call fcn.00471d40
jmp 0x427b4d
mov ecx, dword [0x4ae274]
lea edx, [esp + 0x5f]
push edx
lea eax, [esp + 0x7c]
push eax
push 2
push ecx
call fcn.00415990
mov edi, eax
mov eax, dword [esp + 0x88]
add esp, 0x10
test eax, eax
jne 0x42aabf
mov eax, dword [0x4ae278]
mov ecx, dword [0x4ae27c]
mov ebx, dword [0x4ae280]
mov dword [esp + 0x78], eax
jmp 0x42aacb
mov ecx, dword [0x4ae278]
mov ebx, dword [0x4ae27c]
mov esi, dword [0x4ae270]
push ecx
push eax
call fcn.00415b40
mov edx, dword [esp + 0x48]
push eax
push edx
mov eax, edi
call fcn.00471d40
cmp byte [esp + 0x5f], 0
mov esi, eax
je 0x42aaf9
test edi, edi
je 0x42aaf9
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, esi
mov esi, dword [esp + 0x40]
jmp 0x427b4f
cmp byte [esi + 1], 1
jae 0x42ab7a
mov eax, dword [edi + 0x14]
test eax, eax
je 0x42ab7a
cmp dword [eax + 0x808], 0xfffffffe
lea ecx, [eax + 8]
jne 0x42ab5a
cmp byte [ecx], 0
je 0x42ab50
add eax, 0x408
push eax
push ecx
push str._s_s
mov esi, 0x400
lea edi, [esp + 0x18c]
call fcn.00474f40
mov esi, dword [esp + 0x4c]
add esp, 0xc
mov ecx, edi
mov edi, dword [esp + 0x44]
xor eax, eax
jmp 0x42ab5f
lea ecx, [eax + 0x408]
xor eax, eax
jmp 0x42ab5f
add eax, 0x408
push eax
mov eax, dword [edi + 0x14]
mov ebx, dword [eax + 4]
push esi
mov edi, ecx
mov dword [esp + 0x80], ecx
call fcn.00472120
jmp 0x427b4d
mov eax, dword [0x4ae270]
lea ecx, [esp + 0x5f]
push ecx
lea edx, [esp + 0x7c]
push edx
push 2
push eax
call fcn.00415990
add esp, 0x10
cmp dword [esp + 0x78], 0
mov ebx, eax
jne 0x42abaf
mov ecx, dword [0x4ae274]
mov edi, dword [0x4ae278]
mov dword [esp + 0x78], ecx
jmp 0x42abb5
mov edi, dword [0x4ae274]
cmp byte [edi], 0
jne 0x42abbe
xor edi, edi
jmp 0x42abd5
push str.ahk_default
push edi
call fcn.004883a1
add esp, 8
test eax, eax
jne 0x42abd5
mov edi, 0x49b8cd
push edi
mov edi, dword [esp + 0x7c]
push esi
call fcn.00472120
cmp byte [esp + 0x5f], 0
mov edi, eax
je 0x427b4f
test ebx, ebx
je 0x427b4f
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x427b4f
mov esi, dword [0x4ae270]
call fcn.00415bc0
mov esi, eax
cmp esi, 0xffffffff
jne 0x42ac1f
mov edx, dword [0x4ae270]
push edx
jmp 0x42a4bc
call fcn.00476390
test eax, eax
je 0x42ac2e
mov dword [edi + 0xb0], esi
mov esi, dword [esp + 0x40]
mov edi, 1
jmp 0x427b57
mov eax, dword [0x4ae270]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edi, 1
jmp 0x427b57
xor edi, edi
mov ecx, esi
call fcn.00422a10
push eax
call fcn.00454050
xor ecx, ecx
add esp, 4
test al, al
setne cl
mov edi, ecx
jmp 0x427b4f
mov eax, dword [0x4ae270]
call fcn.00416680
cmp eax, 0xffffffff
jne 0x42ac9b
mov edx, dword [0x4ae270]
push edx
push 0
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042faa0
jmp 0x427b4d
mov dword [edi + 0xdc], eax
mov edi, 1
jmp 0x427b57
xor edi, edi
mov eax, edi
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x6c]
mov dword [edx], eax
mov eax, edi
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x6c]
mov dword [ecx], eax
jmp case.0x4269d4.116
test ebx, ebx
je 0x42ad53
cmp dword [ebx + 8], 0
jne 0x42ad53
mov ecx, dword [0x4ae218]
test ecx, ecx
je 0x42ad44
cmp byte [ecx + 0x17], 0
jne 0x42ad12
mov eax, dword [ecx + 0xc]
jmp 0x42ad14
mov eax, ecx
test byte [eax + 0x15], 2
je 0x42ad44
mov eax, ebx
call fcn.00415110
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [ebx + 8], 0
mov edx, dword [0x4ae270]
mov dword [ebx], edx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x42ad88
mov eax, dword [esp + 0x6c]
mov dword [eax], esi
jmp case.0x4269d4.116
mov eax, 5
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x42adb1
mov ecx, dword [esp + 0x6c]
mov dword [ecx], esi
mov eax, 6
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4ae274]
mov ecx, dword [esp + 0x40]
push edx
push 0
push str.Parameter_2_invalid.
call fcn.0042faa0
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4ae278]
push eax
push 0
push str.Parameter_3_invalid.
mov ecx, esi
call fcn.0042faa0
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x6c]
mov dword [ecx], eax
jmp 0x42accc
cmp dword [esp + 0x4c], 0
je 0x42ae45
lea esi, [esp + 0x4c]
call fcn.00430250
mov eax, dword [esp + 0x58]
test eax, eax
je 0x4269a5
cmp eax, 8
je 0x4269a5
mov ecx, dword [0x4af5ec]
push 0x49b8cd
push 0
push str.Jumps_cannot_exit_a_FINALLY_block.
call fcn.0042faa0
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x6c]
mov dword [eax], edx
jmp case.0x4269d4.116
mov ecx, dword [esp + 0x6c]
mov dword [ecx], edx
mov eax, edi
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [esi + 1], 0
jne 0x42aede
push 0x49b8cd
push 0
push str.An_exception_was_thrown.
mov ecx, esi
call fcn.0042f6a0
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x10
call fcn.004897e5
mov edi, eax
add esp, 4
test edi, edi
jne 0x42af17
push 0x49b8cd
push eax
push str.Out_of_memory.
mov ecx, esi
call fcn.0042faa0
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4af200]
mov edx, dword [0x4af1fc]
mov dword [esp + 0x4c], eax
xor eax, eax
push eax
lea ecx, [esp + 0x5c]
push ecx
push eax
push esi
lea ebx, [esp + 0x5c]
mov esi, edi
mov dword [esp + 0x68], edx
mov dword [0x4af1fc], eax
mov dword [0x4af200], eax
call fcn.0045ad70
mov ebx, dword [esp + 0x58]
mov esi, eax
cmp esi, 1
jne 0x42af73
cmp dword [edi + 8], 0
jne 0x42af73
cmp dword [edi], ebx
jne 0x42af73
cmp dword [esp + 0x4c], 0x400000
mov dword [edi + 0xc], ebx
jbe 0x42afd9
dec dword [0x4af204]
jmp 0x42afd9
test ebx, ebx
je 0x42afab
mov eax, dword [0x4af1fc]
test eax, eax
je 0x42af9b
push eax
call fcn.004883b8
add esp, 4
cmp dword [0x4af200], 0x400000
jbe 0x42af9b
dec dword [0x4af204]
mov edx, dword [esp + 0x4c]
mov dword [0x4af1fc], ebx
mov dword [0x4af200], edx
cmp esi, 1
je 0x42afd2
push edi
call fcn.00488118
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 0xc], 0
mov eax, dword [esp + 0x74]
test byte [eax + 0xe0], 2
mov dword [eax + 0xe4], edi
jne 0x42aff9
mov eax, dword [esp + 0x40]
push eax
call fcn.0042ff30
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4abac4]
cmp word [eax], 0
jne 0x42b041
cmp dword [0x4aeb50], 0
jne 0x42b041
cmp dword [0x4ae408], 0
jne 0x42b041
cmp dword [0x4ae40c], 0
jne 0x42b041
cmp byte [0x4ae416], 0
je case.0x4269d4.224
mov eax, 8
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor edi, edi
mov ecx, esi
call fcn.00422a10
push eax
push 6
push 0x4af278
call fcn.00417aa0
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je case.0x4269d4.116
push 0x49b8cd
push 0
push str.A__return__must_be_encountered_prior_to_this___.
mov ecx, esi
call fcn.0042faa0
mov ecx, dword [esp + 0x5b4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc