Function at 0x425170
Capabilities:
Check for time delay via gettickcount
Check http status code
Check os version
Find taskbar
Get number of processors
Move file
Print debug messages
Resolve function by parsing pe exports
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x495efb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5e8
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
xor edi, edi
mov dword [esp + 0x6c], ecx
cmp eax, edi
jne 0x4251a5
lea eax, [esp + 0x74]
mov ebx, dword [0x4a7440]
mov edx, eax
mov esi, ecx
mov dword [esp + 0x44], eax
mov dword [edx], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x14], esi
cmp ecx, edi
je 0x4254a9
cmp dword [0x4ad3f8], edi
je 0x4251f9
cmp dword [0x4ad3e8], edi
je 0x4251e7
mov eax, dword [0x4ad3e0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4ad3e8], edi
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x4ad3f8], edi
mov dword [0x4ad3e0], edi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov edx, dword [0x4a7440]
mov ecx, eax
sub ecx, dword [0x4ad39c]
cmp ecx, dword [edx + 0xb4]
jbe 0x425244
push 0
push 0
push 0
push 0
lea eax, [esp + 0x134]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x42523d
push 1
push 0xffffffffffffffff
call fcn.00401290
add esp, 8
call edi
mov dword [0x4ad39c], eax
cmp byte [ebx + 0xc8], 0
jne 0x425275
cmp byte [ebx + 0xca], 0
jne 0x425275
mov edx, dword [0x4ad390]
cmp edx, 0xffffffff
jle 0x425275
mov ecx, dword [ebx + 0x28]
cmp ecx, edx
jle 0x425271
mov byte [ebx + 0xc8], 1
jmp 0x425275
inc ecx
mov dword [ebx + 0x28], ecx
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
cmp ecx, 0xffffffff
jl 0x425298
jg 0x425286
cmp edx, 0xffffffff
jbe 0x425298
cmp dword [0x4ad38c], ecx
jg 0x4252aa
jl 0x425298
cmp dword [0x4ad388], edx
jae 0x4252aa
mov ecx, dword [ebx + 0x24]
cmp ecx, 0xffffffff
jle 0x4252b6
sub eax, dword [0x4ad398]
cmp eax, ecx
jb 0x4252b6
push 1
push 0xa
call fcn.00401290
add esp, 8
cmp byte [ebx + 0xd4], 0
je 0x4252d8
nop
push 1
push 0x8000012f
call fcn.00401290
add esp, 8
cmp byte [ebx + 0xd4], 0
jne 0x4252c0
mov dword [0x4ad0f0], esi
cmp byte [ebx + 0xd5], 0
je 0x42531c
mov ecx, dword [0x4accc0]
mov dword [ecx*4 + 0x4ac680], esi
call edi
mov ecx, dword [0x4accc0]
mov dword [ecx*4 + 0x4aa628], eax
inc ecx
mov dword [0x4accc0], ecx
cmp ecx, 0x190
jl 0x42531c
mov dword [0x4accc0], 0
mov al, byte [esi]
cmp al, 1
je 0x425347
cmp al, 0x6b
je 0x425347
cmp al, 0x72
je 0x425347
mov edi, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push edi
push esi
call fcn.00459d00
mov dword [esp + 0x24], eax
cmp eax, 1
jne 0x4254ae
jmp 0x42534a
mov edi, dword [ebp + 0xc]
mov cl, byte [esi]
mov byte [esp + 0xc0], cl
cmp cl, 0xa
jb 0x4254c5
cmp cl, 0x21
ja 0x4254c5
add dword [0x4ad388], 1
push esi
adc dword [0x4ad38c], 0
call fcn.0042a1e0
mov ebx, 3
cmp eax, ebx
jne 0x42541a
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x4253b1
mov edi, edi
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push edi
push 2
call fcn.00425170
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
cmp edx, ecx
je 0x425390
jmp 0x4253c5
lea eax, [esp + 0x28]
push eax
push edi
push ebx
call fcn.00425170
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
cmp edx, esi
je 0x4297e7
cmp dword [ebp + 8], ebx
je 0x42980c
cmp eax, 1
jne 0x42980c
test edx, edx
je 0x4253fc
mov ecx, dword [edx + 0x1c]
mov eax, dword [esp + 0x14]
cmp ecx, dword [eax + 0x1c]
jne 0x429801
mov dword [esp + 0x14], edx
jmp 0x4297e7
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x18]
cmp byte [eax], 8
mov dword [esp + 0x14], eax
jne 0x4297e7
mov edx, eax
mov eax, dword [edx + 0x18]
jmp 0x4297e3
mov edi, dword [esi + 0x18]
cmp byte [edi], 8
mov dword [esp + 0x14], edi
jne 0x4254a0
mov ecx, dword [edi + 0x14]
cmp byte [ecx], 0x73
jne 0x425452
mov esi, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push esi
push 2
call fcn.00425170
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov ecx, dword [edi + 0x14]
cmp edx, ecx
je 0x425431
jmp 0x425469
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x28]
push eax
push edx
push ebx
call fcn.00425170
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
cmp dword [ebp + 8], ebx
je 0x42980c
cmp eax, 1
jne 0x42980c
test edx, edx
je 0x425494
mov eax, dword [edx + 0x1c]
cmp eax, dword [edi + 0x1c]
jne 0x42982c
mov dword [esp + 0x14], edx
jmp 0x4297e7
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x14], ecx
jmp 0x4297e7
cmp dword [ebp + 8], ebx
jne 0x4297e7
mov eax, 1
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
movzx eax, cl
add eax, 0xffffffa0
cmp eax, 0x7e
ja case.0x4254db.98
movzx edx, byte [eax + 0x429d04]
jmp dword [edx*4 + 0x429cc8]
add dword [0x4ad388], 1
adc dword [0x4ad38c], 0
mov eax, dword [esi + 0x18]
test eax, eax
je 0x42556f
mov edx, eax
xor eax, eax
cmp dword [esi + 0xc], 1
mov dword [esp + 0x68], edx
sete al
mov edi, eax
test edi, edi
je 0x425526
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0x94]
mov dword [eax + 0x98], ecx
mov dword [eax + 0x94], 0
mov ecx, edx
call fcn.00401210
mov dword [esp + 0x24], eax
test edi, edi
je 0x42554f
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx + 0x98]
mov dword [ecx + 0x94], edx
mov dword [ecx + 0x98], 0
test eax, eax
je 0x4254ae
cmp eax, 8
je 0x4254ae
cmp dword [ebp + 8], 3
je 0x425787
jmp 0x4297e0
push esi
mov bl, 1
call fcn.00443030
mov edx, eax
mov dword [esp + 0x68], edx
test edx, edx
je 0x429989
mov ecx, dword [esp + 0x30]
cmp dword [ecx + 0x94], 0
je 0x4255a8
mov eax, dword [edx + 8]
call fcn.004430e0
test eax, eax
je 0x4255a8
mov edi, 1
jmp 0x42550c
xor edi, edi
jmp 0x425526
add dword [0x4ad388], 1
adc dword [0x4ad38c], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x68], eax
test eax, eax
jne 0x4255e0
push esi
mov bl, 1
call fcn.00443030
mov dword [esp + 0x68], eax
test eax, eax
je 0x429989
mov ebx, dword [esp + 0x30]
cmp dword [ebp + 8], 3
mov dword [ebx + 0x9c], eax
je 0x429829
mov ecx, dword [eax + 8]
mov edx, dword [esi + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x429829
mov dword [esp + 0x14], ecx
jmp 0x4297e7
add dword [0x4ad388], 1
mov eax, dword [esp + 0x6c]
adc dword [0x4ad38c], 0
mov edi, dword [eax + 0xc]
test edi, edi
jne 0x425651
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
mov ebx, eax
je 0x42564f
mov edi, dword [0x4acdb8]
test edi, edi
je 0x42564f
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x425651
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x425637
xor edi, edi
mov dword [esp + 0x24], 1
mov dword [esp + 0x34], 0
test edi, edi
je 0x425763
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x425689
push 0x49b154
push eax
call fcn.00485431
add esp, 8
test eax, eax
jne 0x425689
mov al, 1
jmp 0x42568b
xor al, al
lea ecx, [esp + 0x68]
push ecx
push eax
push edi
xor eax, eax
call fcn.00478110
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x68]
test eax, eax
je 0x425763
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x4256f7
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x4256cb
lea ebx, [ebx]
cmp edx, ecx
je 0x4256f7
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x4256c0
push 0x4997f1
push 0
push str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov ecx, esi
call fcn.0042e9d0
xor eax, eax
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [esp + 0x30]
mov edx, dword [ebx + 0x94]
test edx, edx
je 0x425795
call fcn.004430e0
test eax, eax
je 0x425795
mov edi, 1
mov dword [ebx + 0x98], edx
mov dword [ebx + 0x94], 0
mov ecx, dword [esp + 0x68]
call fcn.00401210
mov dword [esp + 0x24], eax
test edi, edi
je 0x425752
mov edx, dword [ebx + 0x98]
mov dword [ebx + 0x94], edx
mov dword [ebx + 0x98], 0
test eax, eax
je 0x4254ae
cmp eax, 8
je 0x4254ae
cmp dword [esp + 0x34], 0
mov edx, dword [esp + 0x6c]
sete al
movzx ecx, al
push ecx
push edx
call fcn.0042e800
cmp dword [ebp + 8], 3
jne 0x4297e0
mov eax, dword [esp + 0x24]
cmp eax, 7
jne 0x4254ae
jmp 0x4254a9
xor edi, edi
jmp 0x42572b
mov eax, dword [esi + 0xc]
mov dword [esp + 0x20], eax
dec eax
je 0x4259a6
sub eax, 3
je 0x42598c
sub eax, 5
jne 0x425a1e
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0x5c
mov edi, ecx
jne 0x4257f5
cmp byte [ecx + 1], 0x5c
jne 0x4257f5
add ecx, 2
push 0x5c
push ecx
call fcn.00486421
add esp, 8
test eax, eax
je 0x425939
mov ecx, eax
sub ecx, edi
cmp ecx, 0x80
jae 0x425939
lea ecx, [eax + 1]
mov al, byte [ecx]
xor edx, edx
test al, al
je 0x42581f
lea edi, [esp + 0xa8]
sub edi, ecx
cmp al, 0x5c
je 0x42581f
cmp edx, 0x13
je 0x425939
mov byte [edi + ecx], al
mov al, byte [ecx + 1]
inc ecx
inc edx
test al, al
jne 0x425806
mov byte [esp + edx + 0xa8], 0
lea edx, [esp + 0xa8]
push str.HKLM
push edx
call fcn.00485431
add esp, 8
test eax, eax
je 0x42597e
lea eax, [esp + 0xa8]
push str.HKEY_LOCAL_MACHINE
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x42597e
lea ecx, [esp + 0xa8]
push str.HKCR
push ecx
call fcn.00485431
add esp, 8
test eax, eax
je 0x425970
lea edx, [esp + 0xa8]
push str.HKEY_CLASSES_ROOT
push edx
call fcn.00485431
add esp, 8
test eax, eax
je 0x425970
lea eax, [esp + 0xa8]
push str.HKCC
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x425962
lea ecx, [esp + 0xa8]
push str.HKEY_CURRENT_CONFIG
push ecx
call fcn.00485431
add esp, 8
test eax, eax
je 0x425962
lea edx, [esp + 0xa8]
push str.HKCU
push edx
call fcn.00485431
add esp, 8
test eax, eax
je 0x425954
lea eax, [esp + 0xa8]
push str.HKEY_CURRENT_USER
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x425954
lea ecx, [esp + 0xa8]
push 0x49b344
push ecx
call fcn.00485431
add esp, 8
test eax, eax
je 0x425946
lea edx, [esp + 0xa8]
push str.HKEY_USERS
push edx
call fcn.00485431
add esp, 8
test eax, eax
je 0x425946
mov dword [esp + 0x58], 0
jmp 0x425a1e
mov eax, CreateStatusWindowA
mov dword [esp + 0x58], eax
jmp 0x425a1e
mov eax, SysReAllocString
mov dword [esp + 0x58], eax
jmp 0x425a1e
mov eax, CreateStatusWindowA
mov dword [esp + 0x58], eax
jmp 0x425a1e
mov eax, SysReAllocString
mov dword [esp + 0x58], eax
jmp 0x425a1e
mov eax, reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x58], eax
jmp 0x425a1e
mov eax, dword [0x4aacc0]
push 0
push 0
push eax
xor eax, eax
call fcn.00413890
add esp, 0xc
mov dword [esp + 0x58], eax
jmp 0x425a1e
movzx eax, byte [esi + 1]
sub eax, 0
je 0x425a16
dec eax
je 0x4259d4
mov ecx, dword [0x4aacc0]
push str.Read
push ecx
call fcn.00485431
add esp, 8
test eax, eax
jne 0x4259ed
mov dword [esp + 0x20], 5
jmp 0x425a1e
mov eax, dword [0x4aacc0]
push 0
push 1
push 1
push 1
call fcn.004725a0
add esp, 0x10
test eax, eax
jne 0x425a16
mov edx, dword [0x4aacc0]
push 0
push 0
push edx
xor eax, eax
call fcn.00413890
xor ecx, ecx
add esp, 0xc
test eax, eax
setne cl
mov dword [esp + 0x58], eax
add ecx, 3
mov dword [esp + 0x20], ecx
jmp 0x425a1e
mov dword [esp + 0x20], 2
mov ecx, dword [esp + 0x20]
lea eax, [ecx - 3]
cmp eax, 7
ja case.0x425a35.5
movzx edx, byte [eax + 0x429d90]
jmp dword [edx*4 + 0x429d84]
mov esi, dword [0x4aacc4]
call fcn.00414240
mov dword [esp + 0x5c], eax
test eax, eax
je 0x429919
mov eax, dword [0x4aacc8]
cmp byte [eax], 0x31
jne 0x425a75
cmp byte [eax + 1], 0
jne 0x425a75
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x14]
mov byte [esp + 0x64], 1
jmp case.0x425a35.5
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x14]
mov byte [esp + 0x64], 0
jmp case.0x425a35.5
cmp ecx, 4
jne 0x425ac6
mov esi, dword [0x4aacc8]
call fcn.00414240
mov dword [esp + 0x5c], eax
mov eax, dword [0x4aaccc]
cmp byte [eax], 0x31
jne 0x425ab7
cmp byte [eax + 1], 0
jne 0x425ab7
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x30]
mov byte [esp + 0x64], 1
jmp 0x425ae4
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x30]
mov byte [esp + 0x64], 0
jmp 0x425ae4
mov eax, dword [0x4aacc8]
call fcn.00414290
mov dword [esp + 0x5c], eax
shr eax, 2
and al, 1
mov byte [esp + 0x64], al
je 0x425ae4
and dword [esp + 0x5c], 0xfffffffb
cmp dword [esp + 0x5c], 0
je 0x429947
mov byte [esp + 0x1f], 0
mov dword [esp + 0x28], 0
mov eax, dword [esi + 0x18]
cmp byte [eax], 0x6c
mov dword [esp + 0x50], eax
jne 0x425b13
mov edi, eax
mov eax, dword [edi + 0x14]
mov dword [esp + 0x50], eax
jmp 0x425b15
xor edi, edi
mov eax, dword [ebx + 0x10]
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 0xc]
mov dword [esp + 0xc8], eax
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x78], ecx
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x7c], edx
mov edx, dword [ebx + 0x18]
mov dword [esp + 0x18], edi
mov dword [esp + 0xc4], ecx
mov dword [esp + 0x88], edx
cmp eax, 8
je 0x425b63
mov dword [ebx + 8], 1
mov dword [ebx + 0xc], 0
add eax, 0xfffffffe
cmp eax, 8
ja case.default.0x425b6f
jmp dword [eax*4 + 0x429d98]
cmp byte [esi + 1], 0
jbe 0x425b8c
xor edi, edi
mov ecx, esi
call fcn.00420700
mov byte [esp + 0x70], 0
jmp 0x425b95
xor eax, eax
xor edx, edx
mov byte [esp + 0x70], 1
mov ecx, dword [esp + 0x70]
mov ebx, dword [ebp + 0xc]
push ecx
push edx
mov edx, dword [esp + 0x20]
push eax
push edx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x33]
push ecx
push esi
call fcn.0042bcf0
mov dword [esp + 0x24], eax
jmp 0x425fb3
mov ebx, dword [ebp + 0xc]
mov esi, dword [esp + 0x14]
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x23]
push eax
call fcn.0042beb0
mov dword [esp + 0x24], eax
jmp 0x425fb3
mov eax, dword [ebp + 0xc]
push edi
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x27]
push edx
push eax
push esi
call fcn.0042c0a0
mov dword [esp + 0x24], eax
jmp case.default.0x425b6f
mov ecx, dword [0x4aacc8]
push 0x49d274
push ecx
call fcn.00485431
mov ecx, dword [ebp + 0xc]
add esp, 8
push edi
lea edx, [esp + 0x2c]
push edx
test eax, eax
lea eax, [esp + 0x27]
push eax
push ecx
push esi
je 0x425c30
call fcn.0042cf80
mov dword [esp + 0x24], eax
jmp case.default.0x425b6f
call fcn.0042d230
mov dword [esp + 0x24], eax
jmp case.default.0x425b6f
lea esi, [esp + 0xec]
call fcn.004148e0
mov dword [esp + 0x5fc], 0
mov edx, dword [0x4aacc4]
cmp byte [edx], 0
je 0x425cad
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0xd8]
and eax, 0x7fffffff
push 0x30c
mov ecx, esi
call fcn.004702c0
test al, al
je 0x425cad
mov ecx, esi
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x2c]
push edx
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x27]
push eax
push ecx
mov ecx, dword [0x4aacc8]
push edx
mov edx, edi
call fcn.0042d4f0
mov dword [esp + 0x24], eax
call fcn.00414850
jmp 0x425cb5
mov dword [esp + 0x24], 1
lea ecx, [esp + 0xec]
mov dword [esp + 0x5fc], 0xffffffff
call fcn.00414930
jmp 0x425fb3
cmp dword [esp + 0x20], 3
mov eax, dword [0x4aacc0]
je 0x425ce2
mov eax, dword [0x4aacc4]
mov ecx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x68]
push eax
push ecx
mov ecx, dword [ebp + 0xc]
push edi
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x33]
push eax
push ecx
mov ecx, esi
call fcn.0042c570
mov dword [esp + 0x24], eax
jmp case.default.0x425b6f
cmp dword [esp + 0x20], 4
jne 0x425d3b
mov eax, dword [0x4aacc0]
lea edx, [esp + 0x4f]
push edx
push 0
push eax
xor eax, eax
call fcn.00413890
mov ecx, dword [0x4aacc4]
add esp, 0xc
mov edi, eax
mov dword [esp + 0x48], ecx
jmp 0x425f64
mov edi, dword [0x4aacc4]
mov esi, edi
xor ebx, ebx
cmp byte [edi], 0x5c
mov dword [esp + 0x34], esi
jne 0x425d7f
cmp byte [edi + 1], 0x5c
jne 0x425d7f
push 0x5c
add edi, 2
push edi
call fcn.00486421
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x425fab
mov edx, ebx
sub edx, esi
cmp edx, 0x80
jae 0x425fab
lea edi, [ebx + 1]
mov al, byte [edi]
xor edx, edx
test al, al
je 0x425daf
lea esi, [esp + 0x94]
mov ecx, edi
sub esi, edi
cmp al, 0x5c
je 0x425dab
cmp edx, 0x13
je 0x425fab
mov byte [esi + ecx], al
mov al, byte [ecx + 1]
inc ecx
inc edx
test al, al
jne 0x425d92
mov esi, dword [esp + 0x34]
mov byte [esp + edx + 0x94], 0
cmp byte [edi + edx], 0x5c
je 0x425dc7
mov dword [esp + 0x48], 0x4997f1
jmp 0x425dcf
lea eax, [edi + edx + 1]
mov dword [esp + 0x48], eax
lea ecx, [esp + 0x94]
push str.HKLM
test ebx, ebx
push ecx
setne byte [esp + 0x57]
call fcn.00485431
add esp, 8
test eax, eax
je 0x425f08
lea edx, [esp + 0x94]
push str.HKEY_LOCAL_MACHINE
push edx
call fcn.00485431
add esp, 8
test eax, eax
je 0x425f08
lea eax, [esp + 0x94]
push str.HKCR
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x425f01
lea ecx, [esp + 0x94]
push str.HKEY_CLASSES_ROOT
push ecx
call fcn.00485431
add esp, 8
test eax, eax
je 0x425f01
lea edx, [esp + 0x94]
push str.HKCC
push edx
call fcn.00485431
add esp, 8
test eax, eax
je 0x425efa
lea eax, [esp + 0x94]
push str.HKEY_CURRENT_CONFIG
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x425efa
lea ecx, [esp + 0x94]
push str.HKCU
push ecx
call fcn.00485431
add esp, 8
test eax, eax
je 0x425ef3
lea edx, [esp + 0x94]
push str.HKEY_CURRENT_USER
push edx
call fcn.00485431
add esp, 8
test eax, eax
je 0x425ef3
lea eax, [esp + 0x94]
push 0x49b344
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x425eec
lea ecx, [esp + 0x94]
push str.HKEY_USERS
push ecx
call fcn.00485431
add esp, 8
test eax, eax
jne 0x425fab
mov edi, CreateStatusWindowA
jmp 0x425f0d
mov edi, SysReAllocString
jmp 0x425f0d
mov edi, CreateStatusWindowA
jmp 0x425f0d
mov edi, SysReAllocString
jmp 0x425f0d
mov edi, reloc.OLEAUT32.dll_SysReAllocString
test ebx, ebx
je 0x425f5c
push 0x7f
lea edx, [esp + 0x144]
push esi
push edx
call fcn.004883d0
add esp, 0xc
lea eax, [esp + 0xcc]
push eax
push edi
lea ecx, [esp + 0x148]
mov byte [esp + 0x1c7], 0
sub ebx, esi
push ecx
mov byte [esp + ebx + 0x14c], 0
call dword [sym.imp.ADVAPI32.dll_RegConnectRegistryA]
mov edi, eax
neg edi
sbb edi, edi
not edi
and edi, dword [esp + 0xcc]
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x14]
test edi, edi
je 0x425fab
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x64]
push edx
mov edx, dword [esp + 0x60]
push edi
push eax
mov eax, dword [esp + 0x24]
push ecx
push edx
push eax
mov eax, dword [ebp + 0xc]
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x3b]
push edx
push eax
mov ecx, esi
call fcn.0042cb00
cmp byte [esp + 0x4f], 0
mov dword [esp + 0x24], eax
je case.default.0x425b6f
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x425b6f
mov dword [esp + 0x24], 1
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov dword [ebx + 0x10], eax
mov eax, dword [esp + 0x38]
mov dword [ebx + 0x1c], eax
mov eax, dword [esp + 0x24]
mov dword [ebx + 8], ecx
mov ecx, dword [esp + 0xc4]
mov dword [ebx + 0xc], edx
mov edx, dword [esp + 0x88]
mov dword [ebx + 0x14], ecx
mov dword [ebx + 0x18], edx
test eax, eax
je 0x4254ae
cmp eax, 7
je 0x4254ae
cmp eax, 8
je 0x4254ae
cmp byte [esp + 0x1f], 0
jne 0x4297e7
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x426034
mov edx, dword [ecx + 0x1c]
mov esi, dword [esp + 0x14]
cmp edx, dword [esi + 0x1c]
jne 0x429c77
mov dword [esp + 0x14], ecx
jmp 0x4297e7
cmp dword [ebp + 8], 3
je 0x4254a9
mov eax, dword [esp + 0x50]
jmp 0x4297e3
mov dl, byte [ebx + 0xe4]
mov byte [esp + 0x2f], dl
cmp cl, 0x70
jne 0x4260c2
mov ecx, dword [0x4aac68]
test ecx, ecx
je 0x42607b
mov edi, dword [esp + 0x30]
mov eax, dword [edi + 0xdc]
mov ebx, ecx
call fcn.00474cd0
test eax, eax
je 0x429973
mov ebx, edi
mov eax, dword [ebx + 0xdc]
cmp dword [eax + 8], 6
jne 0x426091
mov eax, dword [eax]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebx + 0xdc]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4260a7
push eax
call fcn.00485448
add esp, 4
mov ecx, dword [ebx + 0xdc]
push ecx
call fcn.004851a8
add esp, 4
mov dword [ebx + 0xdc], 0
jmp 0x4260c9
mov byte [ebx + 0xe4], 1
mov dword [esp + 0x28], 0
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x426104
lea esp, [esp]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push eax
push 2
call fcn.00425170
mov edi, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
cmp edi, ecx
je 0x4260e0
jmp 0x42611c
mov eax, dword [ebp + 0xc]
lea edx, [esp + 0x28]
push edx
push eax
push 3
call fcn.00425170
mov edi, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov dl, byte [esp + 0xc0]
mov ecx, dword [esi + 0x18]
mov dword [esp + 0x14], ecx
cmp dl, 0x6f
jne 0x426182
mov dl, byte [esp + 0x2f]
mov byte [ebx + 0xe4], dl
xor dl, dl
cmp byte [ecx], 0x70
jne 0x426156
cmp dword [ebx + 0xdc], 0
mov dl, 1
jne 0x4297e7
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x14], ecx
cmp byte [ecx], 0x71
je 0x42618c
test dl, dl
jne 0x4261df
mov esi, dword [esp + 0x30]
add esi, 0xdc
cmp dword [esi], 0
je 0x4261df
call fcn.0042f090
mov eax, 1
mov dword [esp + 0x24], eax
jmp 0x4261db
cmp dl, 0x70
jne 0x4261df
cmp byte [ecx], 0x71
jne 0x4261df
cmp eax, 1
jne 0x42619d
test edi, edi
je 0x4297e7
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0xbc]
push edx
push 0
push 3
call fcn.00425170
cmp dword [esp + 0xbc], 0
jne 0x4299a2
cmp eax, 5
je 0x4299a2
cmp eax, 6
je 0x4299a2
cmp eax, 7
je 0x4299a2
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x28]
cmp dword [ebp + 8], 3
je 0x4299db
cmp eax, 1
jne 0x4299db
test edi, edi
je 0x4297e7
mov eax, dword [edi + 0x1c]
mov ecx, dword [esp + 0x14]
cmp eax, dword [ecx + 0x1c]
jne 0x4299d0
mov dword [esp + 0x14], edi
jmp 0x4297e7
mov edx, dword [esi + 0x14]
mov dword [esp + 0x14], edx
jmp 0x4297e7
cmp dword [esi + 0xc], 1
jne 0x42622d
mov eax, dword [esi + 0x18]
jmp 0x4297e3
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [esi + 0x14]
push edi
push 2
call fcn.00425170
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
cmp ecx, esi
je 0x4297e7
cmp dword [ebp + 8], 3
je 0x429c77
cmp eax, 1
jne 0x429c77
test ecx, ecx
je 0x42627d
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x1c]
cmp eax, dword [ecx + 0x1c]
jne 0x429c6c
mov dword [esp + 0x14], ecx
jmp 0x4297e7
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x18]
mov dword [esp + 0x14], edx
jmp 0x4297e7
add dword [0x4ad388], 1
mov eax, dword [0x4aac68]
mov ebx, dword [0x4a7440]
adc dword [0x4ad38c], 0
mov cl, byte [esi]
movzx edx, cl
dec edx
mov edi, eax
mov dword [esp + 0x18], edi
cmp edx, 0xdf
ja case.0x4262c5.8
movzx edx, byte [edx + 0x42a040]
jmp dword [edx*4 + 0x429dbc]
push esi
call fcn.0043c280
jmp 0x4297ca
cmp byte [esi + 1], 1
mov edx, dword [0x4aacc4]
jbe 0x42634d
mov eax, dword [esi + 8]
cmp byte [eax + 0x11], 0
je 0x4262f6
mov eax, 1
jmp 0x4297ca
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x42630f
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
push edi
call fcn.00412cf0
jmp 0x4297ca
mov eax, dword [0x4aac6c]
test eax, eax
je 0x42634d
cmp byte [edx], 0
jne 0x42634d
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x42632a
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x426341
sub ecx, 2
jne 0x42634d
mov eax, edi
call fcn.00474de0
jmp 0x4297ca
mov ecx, edi
call fcn.00474b50
jmp 0x4297ca
push 1
push 0
push 0xffffffffffffffff
push edx
push edi
call fcn.00475380
jmp 0x4297ca
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x42637f
cmp byte [eax + 0x11], 0
jne 0x42637f
mov dword [esp + 0x20], 1
mov ebx, 1
xor edi, edi
jmp 0x4263c1
mov edi, dword [0x4aac6c]
mov eax, dword [0x4aacc4]
mov dword [esp + 0x20], 0
test edi, edi
je 0x4263ad
cmp byte [eax], 0
jne 0x4263ad
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x4263a8
mov edx, dword [edi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x42640b
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.004725a0
add esp, 0x10
mov ebx, eax
mov eax, dword [esp + 0x18]
push 1
call fcn.00412d50
mov esi, eax
mov eax, dword [0x4aacc8]
mov al, byte [eax]
test al, al
je 0x4265de
call fcn.00409370
movsx eax, al
push eax
push str.SMHD
call fcn.00486421
add esp, 8
test eax, eax
je 0x4265de
test ebx, ebx
jne 0x42641a
mov esi, dword [esp + 0x14]
lea eax, [ebx + 1]
jmp 0x4297ca
test edi, edi
je 0x4263af
push 1
mov eax, edi
call fcn.00412d50
jmp 0x4263bf
cmp dword [esp + 0x20], 0
je 0x42642f
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426449
test edi, edi
je 0x42643e
push 0
mov eax, edi
call fcn.00412eb0
jmp 0x426449
mov esi, dword [0x4aacc4]
call fcn.00412c50
mov esi, dword [esp + 0x18]
fstp qword [esp + 0x38]
cmp byte [esi + 0x17], 0
jne 0x42645c
mov edi, dword [esi + 0xc]
jmp 0x42645e
mov edi, esi
mov bl, 8
test byte [edi + 0x15], bl
je 0x42646c
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426485
test byte [edi + 0x15], 4
je 0x426480
mov eax, edi
call fcn.0042f200
mov eax, dword [edi + 8]
jmp 0x426495
cmp al, 2
jne 0x426490
call fcn.00401000
jmp 0x426495
mov eax, 0x4ac626
cmp byte [eax], 0
je 0x426509
cmp byte [esi + 0x17], 0
jne 0x4264a5
mov edi, dword [esi + 0xc]
jmp 0x4264a7
mov edi, esi
test byte [edi + 0x15], bl
je 0x4264b3
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x4264cc
test byte [edi + 0x15], 4
je 0x4264c7
mov eax, edi
call fcn.0042f200
mov eax, dword [edi + 8]
jmp 0x4264dc
cmp al, 2
jne 0x4264d7
call fcn.00401000
jmp 0x4264dc
mov eax, 0x4ac626
lea ecx, [esp + 0x80]
push ecx
call fcn.00472180
add esp, 4
test eax, eax
jne 0x42652d
push 1
push eax
push 0xffffffffffffffff
push 0x4997f1
push esi
call fcn.00475380
mov esi, dword [esp + 0x14]
jmp 0x4297ca
lea edx, [esp + 0xe4]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0xe8]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov edx, dword [0x4aacc8]
mov al, byte [edx]
call fcn.00409370
movsx eax, al
add eax, 0xffffffbc
cmp eax, 0xf
ja case.0x42654c.69
movzx eax, byte [eax + 0x42a134]
jmp dword [eax*4 + 0x42a120]
fld qword [esp + 0x38]
fmul qword [0x4a1988]
jmp 0x426587
fld qword [esp + 0x38]
fmul qword [0x4a1980]
jmp 0x426587
fld qword [esp + 0x38]
fmul qword [0x4a1978]
jmp 0x426587
fld qword [esp + 0x38]
fmul qword [0x4a1970]
jmp 0x426587
fld qword [esp + 0x38]
mov esi, dword [esp + 0x80]
mov ebx, dword [esp + 0x84]
call fcn.00493e76
add esi, eax
adc ebx, edx
mov dword [esp + 0x80], esi
push 0
lea eax, [esp + 0x84]
lea esi, [esp + 0x1c4]
mov dword [esp + 0x88], ebx
call fcn.00472410
mov ecx, dword [esp + 0x1c]
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
push ecx
call fcn.00475380
mov esi, dword [esp + 0x14]
jmp 0x4297ca
cmp ebx, 2
je 0x426640
cmp esi, 2
je 0x426640
cmp dword [esp + 0x20], 0
je 0x426600
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x42661e
test edi, edi
je 0x42660f
push 0
mov eax, edi
call fcn.00412df0
jmp 0x42661a
mov esi, dword [0x4aacc4]
call fcn.00412c20
mov ebx, edx
mov edi, eax
mov esi, dword [esp + 0x18]
push 0
mov eax, esi
call fcn.00412df0
add eax, edi
adc edx, ebx
push edx
push eax
push esi
call fcn.00412cf0
mov esi, dword [esp + 0x14]
jmp 0x4297ca
cmp dword [esp + 0x20], 0
je 0x426655
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x42666f
test edi, edi
je 0x426664
push 0
mov eax, edi
call fcn.00412eb0
jmp 0x42666f
mov esi, dword [0x4aacc4]
call fcn.00412c50
mov esi, dword [esp + 0x18]
fstp qword [esp + 0x38]
push 0
mov eax, esi
call fcn.00412eb0
fadd qword [esp + 0x38]
sub esp, 8
fstp qword [esp]
push esi
call fcn.00412d20
mov esi, dword [esp + 0x14]
jmp 0x4297ca
mov ecx, dword [0x4aacc8]
mov al, byte [ecx]
test al, al
je 0x426805
call fcn.00409370
movsx eax, al
push eax
push str.SMHD
call fcn.00486421
add esp, 8
test eax, eax
je 0x426805
mov edi, dword [0x4aac6c]
mov ecx, dword [0x4aacc4]
test edi, edi
je 0x42673d
cmp byte [ecx], 0
jne 0x42673d
mov al, byte [edi + 0x17]
test al, al
jne 0x4266e9
mov edx, dword [edi + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
jne 0x42673d
test edi, edi
je 0x42673d
cmp byte [edi + 0x17], 0
jne 0x4266fa
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x426707
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426724
test byte [edi + 0x15], 4
je 0x42671b
mov eax, edi
call fcn.0042f200
mov eax, dword [edi + 8]
mov dword [esp + 0x20], eax
jmp 0x426741
cmp al, 2
jne 0x426733
call fcn.00401000
mov dword [esp + 0x20], eax
jmp 0x426741
mov dword [esp + 0x20], 0x4ac626
jmp 0x426741
mov dword [esp + 0x20], ecx
mov edi, dword [esp + 0x18]
cmp byte [edi + 0x17], 0
jne 0x42674e
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x42675b
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426774
test byte [edi + 0x15], 4
je 0x42676f
mov eax, edi
call fcn.0042f200
mov eax, dword [edi + 8]
jmp 0x426784
cmp al, 2
jne 0x42677f
call fcn.00401000
jmp 0x426784
mov eax, 0x4ac626
push eax
mov eax, dword [esp + 0x24]
lea ebx, [esp + 0x67]
call fcn.004724c0
add esp, 4
cmp byte [esp + 0x63], 0
mov edi, eax
mov ebx, edx
je 0x4267ba
mov ecx, dword [esp + 0x18]
push 1
push 0
push 0xffffffffffffffff
push 0x4997f1
push ecx
call fcn.00475380
jmp 0x4297ca
mov edx, dword [0x4aacc8]
mov al, byte [edx]
call fcn.00409370
cmp al, 0x44
je 0x4267e2
cmp al, 0x48
je 0x4267d9
cmp al, 0x4d
jne 0x4267f4
push 0
push 0x3c
jmp 0x4267e9
push 0
push 0xe10
jmp 0x4267e9
push 0
push 0x15180
push ebx
push edi
call fcn.00493ef0
mov edi, eax
mov ebx, edx
mov eax, dword [esp + 0x18]
push ebx
push edi
push eax
call fcn.00412cf0
jmp 0x4297ca
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x426825
cmp byte [eax + 0x11], 0
jne 0x426825
mov dword [esp + 0x20], 1
mov edi, 1
xor ebx, ebx
jmp 0x426867
mov ebx, dword [0x4aac6c]
mov eax, dword [0x4aacc4]
mov dword [esp + 0x20], 0
test ebx, ebx
je 0x426853
cmp byte [eax], 0
jne 0x426853
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x42684e
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x426890
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.004725a0
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x18]
push 1
call fcn.00412d50
cmp edi, 2
je 0x4268e1
cmp eax, 2
je 0x4268e1
cmp dword [esp + 0x20], 0
je 0x42689f
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x4268c1
test ebx, ebx
je 0x426855
push 1
mov eax, ebx
call fcn.00412d50
jmp 0x426865
test ebx, ebx
je 0x4268ae
push 0
mov eax, ebx
call fcn.00412df0
jmp 0x4268bd
mov esi, dword [0x4aacc4]
call fcn.00412c20
mov esi, dword [esp + 0x14]
mov ebx, edx
mov edi, eax
mov eax, dword [esp + 0x18]
push 0
call fcn.00412df0
sub eax, edi
sbb edx, ebx
push edx
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.00412cf0
jmp 0x4297ca
cmp dword [esp + 0x20], 0
je 0x4268f2
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x426910
test ebx, ebx
je 0x426901
push 0
mov eax, ebx
call fcn.00412eb0
jmp 0x426910
mov esi, dword [0x4aacc4]
call fcn.00412c50
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
fstp qword [esp + 0x38]
push 0
mov eax, edi
call fcn.00412eb0
fsub qword [esp + 0x38]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412d20
jmp 0x4297ca
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x426956
cmp byte [eax + 0x11], 0
jne 0x426956
mov dword [esp + 0x20], 1
mov edi, 1
xor ebx, ebx
jmp 0x426998
mov ebx, dword [0x4aac6c]
mov eax, dword [0x4aacc4]
mov dword [esp + 0x20], 0
test ebx, ebx
je 0x426984
cmp byte [eax], 0
jne 0x426984
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x42697f
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x4269c1
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.004725a0
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x18]
push 1
call fcn.00412d50
cmp edi, 2
je 0x426a17
cmp eax, 2
je 0x426a17
cmp dword [esp + 0x20], 0
je 0x4269d0
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x4269f2
test ebx, ebx
je 0x426986
push 1
mov eax, ebx
call fcn.00412d50
jmp 0x426996
test ebx, ebx
je 0x4269df
push 0
mov eax, ebx
call fcn.00412df0
jmp 0x4269ee
mov esi, dword [0x4aacc4]
call fcn.00412c20
mov esi, dword [esp + 0x14]
mov ebx, edx
mov edi, eax
mov eax, dword [esp + 0x18]
push 0
call fcn.00412df0
push ebx
push edi
push edx
push eax
call fcn.0048c410
push edx
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.00412cf0
jmp 0x4297ca
cmp dword [esp + 0x20], 0
je 0x426a28
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x426a46
test ebx, ebx
je 0x426a37
push 0
mov eax, ebx
call fcn.00412eb0
jmp 0x426a46
mov esi, dword [0x4aacc4]
call fcn.00412c50
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
fstp qword [esp + 0x38]
push 0
mov eax, edi
call fcn.00412eb0
fmul qword [esp + 0x38]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412d20
jmp 0x4297ca
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x426a8c
cmp byte [eax + 0x11], 0
jne 0x426a8c
mov dword [esp + 0x20], 1
mov edi, 1
xor ebx, ebx
jmp 0x426ace
mov ebx, dword [0x4aac6c]
mov eax, dword [0x4aacc4]
mov dword [esp + 0x20], 0
test ebx, ebx
je 0x426aba
cmp byte [eax], 0
jne 0x426aba
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x426ab5
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x426aff
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.004725a0
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x18]
push 1
call fcn.00412d50
cmp edi, 2
je 0x426b69
cmp eax, 2
je 0x426b69
cmp dword [esp + 0x20], 0
je 0x426b0e
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov ebx, dword [eax]
mov edi, dword [eax + 4]
jmp 0x426b30
test ebx, ebx
je 0x426abc
push 1
mov eax, ebx
call fcn.00412d50
jmp 0x426acc
test ebx, ebx
je 0x426b1d
push 0
mov eax, ebx
call fcn.00412df0
jmp 0x426b2c
mov esi, dword [0x4aacc4]
call fcn.00412c20
mov esi, dword [esp + 0x14]
mov edi, edx
mov ebx, eax
mov eax, ebx
or eax, edi
jne 0x426b44
mov ecx, dword [esp + 0x18]
call fcn.00412c90
jmp 0x4297ca
mov eax, dword [esp + 0x18]
push 0
call fcn.00412df0
push edi
push ebx
push edx
push eax
call fcn.00493ef0
mov ecx, dword [esp + 0x18]
push edx
push eax
push ecx
call fcn.00412cf0
jmp 0x4297ca
cmp dword [esp + 0x20], 0
je 0x426b7a
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426b98
test ebx, ebx
je 0x426b89
push 0
mov eax, ebx
call fcn.00412eb0
jmp 0x426b98
mov esi, dword [0x4aacc4]
call fcn.00412c50
mov esi, dword [esp + 0x14]
fst qword [esp + 0x38]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x426bb5
mov ecx, dword [esp + 0x18]
call fcn.00412c90
jmp 0x4297ca
mov edi, dword [esp + 0x18]
push 0
mov eax, edi
call fcn.00412eb0
fdiv qword [esp + 0x38]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412d20
jmp 0x4297ca
mov edi, 2
mov ecx, esi
call fcn.00420700
mov ebx, eax
test ebx, ebx
jns 0x426bed
xor ebx, ebx
jmp 0x426bff
mov edi, 1
mov ecx, esi
call fcn.00420680
cmp ebx, eax
jle 0x426bff
mov ebx, eax
push 1
push 0
push ebx
mov ecx, dword [0x4aacc4]
mov edx, dword [esp + 0x24]
push ecx
push edx
call fcn.00475380
jmp 0x4297ca
mov edi, 2
mov ecx, esi
call fcn.00420700
mov ebx, eax
test ebx, ebx
jns 0x426c2e
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420680
cmp ebx, eax
jbe 0x426c40
mov ebx, eax
push 1
sub eax, ebx
add eax, dword [0x4aacc4]
push 0
push ebx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.00475380
jmp 0x4297ca
cmp byte [esi + 1], 4
jb 0x426c95
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x34]
cmp byte [edx], 0
je 0x426c95
mov ecx, dword [esp + 0x14]
mov edi, 3
call fcn.00420700
mov esi, eax
cmp esi, 1
jge 0x426c9a
mov ecx, dword [esp + 0x18]
call fcn.00412c90
mov esi, dword [esp + 0x14]
jmp 0x4297ca
mov esi, SysReAllocString
mov ecx, dword [esp + 0x14]
mov edi, 2
call fcn.00420700
mov ebx, eax
mov eax, dword [0x4aacd0]
mov al, byte [eax]
call fcn.00409370
cmp al, 0x4c
jne 0x426ce3
cmp ebx, 1
jge 0x426cd1
mov ecx, dword [esp + 0x18]
call fcn.00412c90
mov esi, dword [esp + 0x14]
jmp 0x4297ca
mov ecx, 1
sub ecx, esi
add ebx, ecx
cmp ebx, 1
jge 0x426ced
lea esi, [esi + ebx - 1]
cmp ebx, 1
jge 0x426ced
mov ebx, 1
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00420680
cmp eax, ebx
jae 0x426d11
mov ecx, dword [esp + 0x18]
call fcn.00412c90
mov esi, dword [esp + 0x14]
jmp 0x4297ca
mov edx, edi
sub edx, ebx
add eax, edx
cmp esi, eax
jbe 0x426d1d
mov esi, eax
mov eax, dword [0x4aacc4]
mov ecx, dword [esp + 0x18]
push 1
push 0
push esi
lea ebx, [ebx + eax - 1]
push ebx
push ecx
call fcn.00475380
mov esi, dword [esp + 0x14]
jmp 0x4297ca
mov edi, 2
mov ecx, esi
call fcn.00420700
mov ebx, eax
test ebx, ebx
jns 0x426d53
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420680
cmp ebx, eax
jbe 0x426d65
mov ebx, eax
mov edx, dword [0x4aacc4]
push 1
push 0
sub eax, ebx
push eax
mov eax, dword [esp + 0x24]
lea ecx, [ebx + edx]
push ecx
push eax
call fcn.00475380
jmp 0x4297ca
mov edi, 2
mov ecx, esi
call fcn.00420700
mov ebx, eax
test ebx, ebx
jns 0x426d99
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420680
cmp ebx, eax
jbe 0x426dab
mov ebx, eax
push 1
push 0
sub eax, ebx
push eax
jmp 0x426c04
cmp byte [edi + 0x17], 0
mov ebx, eax
jne 0x426dc4
mov edi, dword [ebx + 0xc]
jmp 0x426dc6
mov edi, eax
test byte [edi + 0x15], 8
je 0x426dd3
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426ddf
mov edi, dword [edi + 8]
jmp 0x426df1
cmp al, 2
jne 0x426dec
call fcn.00401000
mov edi, eax
jmp 0x426df1
mov edi, 0x4ac626
cmp edi, dword [0x4aacc4]
jne 0x426e0e
mov al, byte [ebx + 0x17]
test al, al
jne 0x426e06
mov eax, dword [ebx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
je 0x426e8c
push 1
push 0
mov edi, 1
mov ecx, esi
call fcn.00420680
mov ebx, dword [esp + 0x20]
push eax
push 0
push ebx
call fcn.00475380
cmp eax, edi
jne case.0x4262c5.8
cmp byte [ebx + 0x17], 0
jne 0x426e3e
mov edi, dword [ebx + 0xc]
jmp 0x426e40
mov edi, ebx
test byte [edi + 0x15], 8
je 0x426e4d
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426e66
test byte [edi + 0x15], 4
je 0x426e61
mov eax, edi
call fcn.0042f200
mov edi, dword [edi + 8]
jmp 0x426e78
cmp al, 2
jne 0x426e73
call fcn.00401000
mov edi, eax
jmp 0x426e78
mov edi, 0x4ac626
mov ecx, dword [0x4aacc4]
mov edx, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x426e80
jmp 0x426e90
mov ebx, dword [esp + 0x18]
mov ecx, dword [0x4aacc8]
mov al, byte [ecx]
test al, al
je 0x426ec6
call fcn.00409370
cmp al, 0x54
jne 0x426ec6
mov edx, dword [0x4aacc8]
cmp byte [edx + 1], 0
jne 0x426ec6
mov eax, edi
call fcn.00412970
push 0
mov eax, ebx
call fcn.00413230
jmp 0x4297ca
cmp byte [esi], 0x31
push edi
jne 0x426ee0
call dword [sym.imp.USER32.dll_CharLowerA]
push 0
mov eax, ebx
call fcn.00413230
jmp 0x4297ca
call dword [sym.imp.USER32.dll_CharUpperA]
push 0
mov eax, ebx
call fcn.00413230
jmp 0x4297ca
mov eax, dword [0x4aac6c]
test eax, eax
je 0x426f26
cmp byte [eax + 0x17], 0
jne 0x426f0b
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x15]
jmp 0x426f0e
mov cl, byte [eax + 0x15]
test cl, 1
je 0x426f26
call fcn.00413170
push 0
push eax
push edi
call fcn.00412cf0
jmp 0x4297ca
mov edi, 1
mov ecx, esi
call fcn.00420680
mov edi, dword [esp + 0x18]
push 0
push eax
push edi
call fcn.00412cf0
jmp 0x4297ca
mov edi, dword [0x4aaccc]
mov al, byte [edi]
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], 0xffffffff
test al, al
je 0x426fdd
call fcn.00409370
movsx eax, al
push eax
push 0x49d2f4
call fcn.00486421
add esp, 8
test eax, eax
je 0x426fdd
cmp byte [edi + 1], 0
lea esi, [edi + 1]
je 0x426fdd
call fcn.0040cea0
mov dword [esp + 0x20], eax
test eax, eax
jle 0x4270e5
mov eax, dword [0x4aacc8]
cmp byte [eax], 0
jne 0x426fe7
mov dword [esp + 0x34], 0
mov eax, 0x49987c
push 1
push 0
push 0xffffffffffffffff
push eax
mov eax, dword [0x4ab51c]
push eax
call fcn.00475380
mov eax, dword [esp + 0x34]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x24]
call fcn.004010d0
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297ca
mov dword [esp + 0x20], 1
jmp 0x426f94
mov edx, dword [0x4aacc4]
mov ecx, dword [esp + 0x14]
mov edi, 4
mov dword [esp + 0x50], edx
mov dword [esp + 0x48], eax
call fcn.00420700
mov esi, eax
test esi, esi
jns 0x42700b
xor esi, esi
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00420680
mov edi, eax
cmp esi, edi
jge 0x4270e5
mov eax, dword [esp + 0x38]
mov al, byte [eax]
cmp al, 0x31
je 0x4270b0
call fcn.00409370
cmp al, 0x52
je 0x4270b0
mov ecx, dword [esp + 0x14]
mov edi, 2
call fcn.00420680
mov ecx, dword [esp + 0x50]
mov ebx, eax
mov edi, 1
lea eax, [esi + ecx]
jmp 0x427060
mov edx, dword [0x4a7440]
mov cl, byte [edx + 0xce]
test cl, cl
jne 0x42707f
mov ecx, dword [esp + 0x48]
push ecx
call fcn.00472a90
add esp, 4
jmp 0x4270a1
cmp cl, 2
jne 0x427093
mov edx, dword [esp + 0x48]
push edx
call fcn.00472d60
add esp, 4
jmp 0x4270a1
mov ecx, dword [esp + 0x48]
push ecx
push eax
call fcn.00486562
add esp, 8
test eax, eax
je 0x4270e5
cmp edi, dword [esp + 0x20]
je 0x4270d3
inc edi
add eax, ebx
jmp 0x427060
movzx eax, byte [ebx + 0xce]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x54]
push eax
push ecx
mov eax, edi
sub eax, esi
push edx
call fcn.00472890
add esp, 0x10
test eax, eax
je 0x4270e5
sub eax, dword [esp + 0x50]
mov dword [esp + 0x34], eax
jns 0x426fa6
mov eax, 0x49aee0
jmp 0x426fab
push esi
call fcn.0043c6e0
jmp 0x4297ca
mov eax, dword [0x4aaccc]
mov ecx, dword [0x4aacc8]
mov edx, dword [0x4aacc4]
call fcn.00432610
jmp 0x4297ca
mov ecx, dword [0x4aaccc]
mov edx, dword [0x4aacc8]
mov eax, dword [0x4aacc0]
push ecx
mov ecx, dword [0x4aacc4]
push edx
push esi
call fcn.0043c930
jmp 0x4297ca
mov eax, dword [0x4aacc0]
push eax
mov eax, esi
call fcn.0043d080
jmp 0x4297ca
mov ecx, dword [0x4aacc0]
push ecx
mov ecx, dword [0x4aacc4]
push esi
call fcn.0043d650
jmp 0x4297ca
push 0
push ecx
mov edi, 7
mov ecx, esi
call fcn.00420700
add esp, 4
push eax
mov edi, 6
mov ecx, esi
call fcn.00420700
push eax
push ecx
mov edi, 5
mov ecx, esi
call fcn.00420700
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00420700
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420700
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420700
mov ecx, dword [0x4aace0]
push eax
push esi
call fcn.00438890
jmp 0x4297ca
mov edx, dword [0x4aacd8]
push edx
push ecx
mov edi, 5
mov ecx, esi
call fcn.00420700
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00420700
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420700
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420700
push eax
push esi
call fcn.00438fc0
jmp 0x4297ca
mov eax, dword [0x4aaccc]
push eax
push ecx
mov edi, 2
mov ecx, esi
call fcn.00420700
mov edi, 1
mov ecx, esi
mov ebx, eax
call fcn.00420700
add esp, 4
mov ecx, eax
push esi
mov eax, ebx
call fcn.00450180
jmp 0x4297ca
mov edx, dword [ebx + 0xb0]
cmp cl, 0x42
sete al
push 0
push edx
mov edx, dword [0x4aacc0]
movzx ecx, al
push ecx
push edx
call fcn.0040d540
add esp, 0x10
mov eax, 1
jmp 0x4297ca
mov ecx, dword [0x4aacc0]
xor eax, eax
cmp dword [ebx + 0xb0], 3
push 0
sete al
lea eax, [eax + eax + 1]
push eax
push 0
push ecx
call fcn.0040d540
add esp, 0x10
mov eax, 1
jmp 0x4297ca
mov edx, dword [0x4aacc0]
push 0
push 2
push 0
push edx
call fcn.0040d540
add esp, 0x10
mov eax, 1
jmp 0x4297ca
mov eax, dword [0x4aacc0]
push 0
push 0
push 0
push eax
call fcn.0040d540
add esp, 0x10
mov eax, 1
jmp 0x4297ca
mov ecx, dword [0x4aacc0]
push ecx
call fcn.0040f680
add esp, 4
jmp 0x4297ca
mov edx, dword [0x4aacd8]
mov eax, dword [0x4aacd4]
push 0x4997f1
push edx
mov edx, dword [0x4aacd0]
push eax
mov eax, dword [0x4aaccc]
push edx
mov edx, dword [0x4aacc8]
push eax
mov eax, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push ecx
mov eax, 0x4997f1
call fcn.0040f910
add esp, 0x20
jmp 0x4297ca
mov edx, dword [0x4aacd4]
mov eax, dword [0x4aacd8]
push edx
mov edx, dword [0x4aacd0]
push eax
mov eax, dword [0x4aacc8]
push edx
mov edx, dword [0x4aacc4]
push 0x4997f1
push 0x4997f1
push eax
mov eax, dword [0x4aaccc]
push edx
mov edx, dword [0x4aacc0]
push ecx
call fcn.0040f910
add esp, 0x20
jmp 0x4297ca
mov eax, dword [0x4aaccc]
mov edx, dword [0x4aacc8]
push 0x4997f1
push eax
mov eax, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push 0x4997f1
push 0x4997f1
push eax
push edx
mov eax, 0x4997f1
push ecx
mov edx, eax
call fcn.0040f910
add esp, 0x20
jmp 0x4297ca
mov edi, 4
mov ecx, esi
call fcn.00420700
push eax
mov ecx, esi
call fcn.0043b760
jmp 0x4297ca
mov edx, dword [0x4aacc4]
mov esi, dword [0x4aacc0]
cmp cl, 0x76
sete al
push 0
movzx ecx, al
mov eax, dword [0x4aaccc]
push 0
push ecx
push edx
push ebx
mov ebx, dword [0x4aacc8]
call fcn.00476100
add esp, 0x14
test eax, eax
je 0x427427
mov eax, dword [0x4a7440]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle 0x427427
push 1
push eax
call fcn.00401290
add esp, 8
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297ca
mov ecx, dword [0x4aacc0]
push 9
push str.ahk_group
push ecx
call fcn.00485eb0
add esp, 0xc
test eax, eax
jne 0x427468
mov edx, dword [0x4aacc4]
cmp byte [edx], al
jne 0x427468
mov eax, dword [0x4aaccc]
cmp byte [eax], 0
mov byte [esp + 0x2f], 1
je 0x42746d
mov byte [esp + 0x2f], 0
mov al, byte [esi]
xor ecx, ecx
cmp byte [esp + 0x2f], cl
setne cl
dec ecx
and ecx, 0x14
mov dword [esp + 0x48], ecx
cmp al, 0x82
je 0x4274d6
cmp al, 0x83
je 0x4274d6
mov edx, dword [0x4aacc8]
cmp byte [edx], 0
je 0x427512
mov ecx, dword [esp + 0x14]
mov al, byte [ecx]
cmp al, 0x82
je 0x427586
cmp al, 0x83
je 0x427588
mov edx, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push ecx
mov ecx, dword [0x4aaccc]
push eax
call fcn.004341f0
mov esi, dword [esp + 0x14]
jmp 0x4297ca
mov eax, dword [0x4aacc8]
cmp byte [eax], 0
je 0x427507
mov edi, 2
mov ecx, esi
call fcn.004207b0
fmul qword [0x4a18e8]
call fcn.00493e40
mov dword [esp + 0x48], eax
test eax, eax
jne 0x427507
mov dword [esp + 0x48], 0x1f4
mov ecx, dword [0x4aacd0]
cmp byte [ecx], 0
jne 0x427497
cmp byte [esp + 0x2f], 0
je 0x427497
mov esi, dword [0x4aacc0]
add esi, 9
mov al, byte [esi]
cmp al, 0x20
je 0x427530
cmp al, 9
jne 0x427533
inc esi
jmp 0x427526
cmp byte [esi], 0
je 0x427497
mov edi, dword [0x4acdb8]
test edi, edi
je 0x427497
lea ebx, [ebx]
mov eax, dword [edi + 4]
push esi
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x42756d
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x427550
jmp 0x427497
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x48]
mov cl, byte [eax]
push edi
call fcn.00477f40
mov esi, dword [esp + 0x14]
jmp 0x4297ca
cmp al, 0x83
mov ecx, dword [0x4aacd0]
sete dl
movzx eax, dl
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [0x4aacc4]
push ecx
push edx
push eax
mov eax, dword [0x4aaccc]
push ebx
mov ebx, dword [0x4aacc0]
call fcn.00476400
add esp, 0x14
test eax, eax
je 0x427427
mov ecx, dword [0x4a7440]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x427427
push 1
push eax
call fcn.00401290
mov esi, dword [esp + 0x1c]
add esp, 8
mov eax, 1
jmp 0x4297ca
mov ebx, dword [0x4aacc4]
call fcn.004380f0
jmp 0x4297ca
mov edx, dword [0x4aacc4]
mov eax, dword [0x4aacc0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042e800
jmp 0x4297ca
lea eax, [esp + 0xd4]
push eax
push 0x3a98
push 1
push str.Environment
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042e800
jmp 0x4297ca
mov eax, dword [0x4aacc4]
mov ecx, dword [0x4aacc0]
push eax
push ecx
push esi
call fcn.00451890
jmp 0x4297ca
mov edx, dword [0x4aacc0]
push 0
push 0xffffffffffffffff
push edx
mov eax, 0x4ad3a0
call fcn.0046fcb0
mov eax, dword [0x4aacc4]
add esp, 0xc
push 0
push 0xffffffffffffffff
push eax
mov eax, 0x4ad3ac
call fcn.0046fcb0
mov ecx, dword [0x4aacc8]
add esp, 0xc
push 0
push 0xffffffffffffffff
push ecx
mov eax, 0x4ad3b8
call fcn.0046fcb0
add esp, 0xc
mov eax, 1
jmp 0x4297ca
mov eax, dword [0x4aacc8]
push str.UseErrorLevel
call fcn.00472a90
add esp, 4
test eax, eax
setne bl
mov dl, 3
cmp dl, byte [esi + 1]
mov edx, dword [0x4aacc8]
sbb eax, eax
and eax, dword [0x4aac74]
mov byte [esp + 0xd0], bl
mov ecx, dword [esp + 0xd0]
push eax
push 1
push ecx
push 0
push edx
mov edx, dword [0x4aacc4]
test bl, bl
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4aacc0]
push 0
push 0x4acd80
call fcn.0042f730
test bl, bl
je 0x4297ca
test eax, eax
mov eax, 0x49987c
jne 0x427736
mov eax, str.ERROR
push 1
push 0
push 0xffffffffffffffff
push eax
mov eax, dword [0x4ab51c]
push eax
call fcn.00475380
jmp 0x4297ca
push esi
call fcn.004342d0
jmp 0x4297ca
cmp byte [esi + 1], 2
jbe 0x42779b
mov ecx, dword [0x4aacd8]
mov edx, dword [0x4aacd4]
mov eax, dword [0x4aacd0]
push ecx
mov ecx, dword [0x4aaccc]
push edx
mov edx, dword [0x4aacc8]
push eax
mov eax, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aacdc]
push edx
mov edx, dword [0x4aacc0]
call fcn.004349a0
jmp 0x4297ca
mov eax, dword [0x4aacc4]
mov ecx, dword [0x4aacc0]
push 0x4997f1
push 0x4997f1
push 0x4997f1
push eax
push ecx
mov ecx, 0x4997f1
mov eax, ecx
mov edx, ecx
call fcn.004349a0
jmp 0x4297ca
mov edx, dword [0x4aace8]
mov eax, dword [0x4aace4]
mov ecx, dword [0x4aace0]
push edx
mov edx, dword [0x4aacdc]
push eax
mov eax, dword [0x4aacd8]
push ecx
mov ecx, dword [0x4aaccc]
push edx
mov edx, dword [0x4aacc8]
push eax
mov eax, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aacc0]
push edx
mov edx, dword [0x4aacd4]
push eax
push ecx
mov ecx, dword [0x4aacd0]
push esi
call fcn.004505d0
jmp 0x4297ca
cmp cl, 0x47
mov ecx, dword [0x4aacd0]
sete dl
movzx eax, dl
mov edx, dword [0x4aaccc]
push eax
mov eax, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aacc0]
push edx
mov edx, dword [0x4aacc8]
push eax
push ecx
mov ecx, dword [0x4aacd4]
push esi
call fcn.00434ac0
jmp 0x4297ca
mov esi, dword [0x4aaccc]
push 1
xor bl, bl
call fcn.0040ced0
add esp, 4
mov byte [esp + 0x74], al
test al, al
jne 0x427893
mov edx, dword [0x4aaccc]
mov ecx, dword [esp + 0x14]
push edx
push 0
push str.Parameter_4_invalid.
call fcn.0042e9d0
mov esi, dword [esp + 0x14]
jmp 0x4297ca
mov eax, dword [0x4aacd0]
cmp byte [eax], bl
je 0x4278ac
mov ecx, dword [esp + 0x14]
mov edi, 4
call fcn.00420700
jmp 0x4278b1
mov eax, 1
mov ecx, dword [0x4aacd8]
mov edx, dword [0x4aacc8]
push ecx
mov ecx, dword [0x4aacc0]
push edx
mov edx, dword [0x4aacd4]
push ecx
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [0x4aacc4]
push eax
mov eax, dword [esp + 0x88]
push eax
push ecx
mov ecx, dword [0x4aacdc]
call fcn.00434b80
mov esi, dword [esp + 0x14]
jmp 0x4297ca
mov edx, dword [0x4aacdc]
mov eax, dword [0x4aacd8]
mov ecx, dword [0x4aacd0]
push edx
mov edx, dword [0x4aaccc]
push eax
mov eax, dword [0x4aacc8]
push ecx
mov ecx, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [0x4aace0]
push edx
mov edx, dword [0x4aacd4]
push esi
call fcn.004351c0
jmp 0x4297ca
mov eax, dword [0x4aace0]
mov ecx, dword [0x4aacdc]
mov edx, dword [0x4aacd8]
push eax
mov eax, dword [0x4aacd4]
push ecx
mov ecx, dword [0x4aacd0]
push edx
push eax
push ecx
mov ecx, esi
call fcn.004353f0
jmp 0x4297ca
mov edx, dword [0x4aacd0]
mov eax, dword [0x4aaccc]
mov ecx, dword [0x4aacc8]
push edx
mov edx, dword [0x4aacc4]
push eax
push ecx
push edx
push esi
call fcn.00435540
jmp 0x4297ca
mov eax, dword [0x4aaccc]
mov ecx, dword [0x4aacc8]
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [0x4aacd0]
push edx
mov edx, dword [0x4aacc4]
push esi
call fcn.00435710
jmp 0x4297ca
mov eax, dword [0x4aacd0]
mov ecx, dword [0x4aaccc]
mov edx, dword [0x4aacc4]
mov esi, dword [0x4aacc0]
push eax
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [0x4aacd4]
push edx
mov edx, dword [0x4aacc8]
push eax
call fcn.00435820
mov esi, dword [esp + 0x14]
jmp 0x4297ca
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aacc4]
mov eax, dword [0x4aaccc]
push ecx
mov ecx, dword [0x4aacd4]
push edx
mov edx, dword [0x4aacc8]
push esi
call fcn.004358e0
jmp 0x4297ca
mov eax, dword [0x4aacd8]
mov ecx, dword [0x4aacd4]
mov edx, dword [0x4aacd0]
push eax
mov eax, dword [0x4aaccc]
push ecx
mov ecx, dword [0x4aacc8]
push edx
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [0x4aacc4]
push esi
call fcn.004508d0
jmp 0x4297ca
mov edx, dword [0x4aacdc]
mov eax, dword [0x4aacd8]
mov ecx, dword [0x4aacd4]
push edx
mov edx, dword [0x4aacd0]
push eax
mov eax, dword [0x4aaccc]
push ecx
mov ecx, dword [0x4aacc8]
push edx
push eax
push ecx
mov ecx, dword [0x4aacc4]
push esi
call fcn.00451070
jmp 0x4297ca
mov edx, dword [0x4aacd0]
mov ecx, dword [0x4aacd4]
mov eax, dword [0x4aaccc]
mov edi, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc8]
call fcn.00436190
jmp 0x4297ca
mov eax, dword [0x4aacd8]
mov ecx, dword [0x4aacd4]
mov edx, dword [0x4aacd0]
push eax
mov eax, dword [0x4aacc8]
push ecx
mov ecx, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [0x4aacdc]
push edx
mov edx, dword [0x4aaccc]
call fcn.00436200
jmp 0x4297ca
cmp cl, 0x90
sete al
movzx ecx, al
push ecx
mov eax, esi
call fcn.00436330
jmp 0x4297ca
mov edx, dword [0x4aacc4]
mov ecx, dword [0x4aacc8]
push edx
mov edx, dword [0x4aacc0]
push esi
call fcn.00436640
jmp 0x4297ca
mov eax, dword [0x4aacd4]
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aaccc]
push eax
mov eax, dword [0x4aacc8]
push ecx
mov ecx, dword [0x4aacc4]
push edx
push eax
push ecx
mov ecx, dword [0x4aacc0]
push esi
call fcn.00436ca0
jmp 0x4297ca
cmp byte [esi + 1], 1
jbe 0x427b87
mov edx, dword [0x4aaccc]
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aacd0]
push edx
mov edx, dword [0x4aacc0]
push eax
mov eax, dword [0x4aacc4]
call fcn.004370a0
jmp 0x4297ca
mov edi, dword [0x4aacc0]
mov ecx, 0x4997f1
push 0x4997f1
mov eax, ecx
mov edx, ecx
call fcn.00442f90
test eax, eax
je 0x427bac
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, 1
jmp 0x4297ca
mov ecx, dword [0x4aaccc]
mov eax, dword [0x4aacc8]
mov edx, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aacd0]
call fcn.004370d0
jmp 0x4297ca
mov edx, dword [0x4aaccc]
mov ecx, dword [0x4aacd0]
mov eax, dword [0x4aacc8]
push edx
mov edx, dword [0x4aacc4]
call fcn.004372e0
jmp 0x4297ca
mov eax, dword [0x4aacd0]
mov ecx, dword [0x4aaccc]
mov edx, dword [0x4aacc4]
push eax
push ecx
mov ecx, dword [0x4aacd4]
push edx
mov edx, dword [0x4aacc8]
push esi
call fcn.00437400
jmp 0x4297ca
mov eax, dword [0x4aaccc]
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aacc4]
push eax
mov eax, dword [0x4aacc8]
push esi
call fcn.00437ca0
jmp 0x4297ca
mov ecx, dword [0x4aacdc]
mov edx, dword [0x4aacd8]
mov eax, dword [0x4aacd4]
push ecx
mov ecx, dword [0x4aacd0]
push edx
push eax
push ecx
mov eax, esi
call fcn.00437f70
jmp 0x4297ca
mov edx, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push edx
push esi
call fcn.00438240
jmp 0x4297ca
push 0
push 0x1a3
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [0x4a7440]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle 0x427cbe
push 1
push eax
call fcn.00401290
add esp, 8
mov eax, 1
jmp 0x4297ca
push 0
push 0x1a0
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [0x4a7440]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x427cbe
push 1
push eax
call fcn.00401290
add esp, 8
mov eax, 1
jmp 0x4297ca
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x427d43
mov edi, dword [0x4aacc0]
cmp byte [edi], al
je 0x427d43
mov eax, 0x4acd80
call fcn.00419d50
test eax, eax
jne 0x427d43
mov edx, dword [0x4aacc0]
push edx
push eax
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042e9d0
jmp 0x4297ca
mov dword [0x4ad330], eax
mov eax, 1
jmp 0x4297ca
mov ecx, dword [esi + 0xc]
test ecx, ecx
jne 0x427d88
mov eax, 1
cmp al, byte [esi + 1]
sbb eax, eax
and eax, dword [0x4aac6c]
je 0x427d88
cmp byte [eax + 0x17], cl
jne 0x427d75
mov edx, dword [eax + 0xc]
jmp 0x427d77
mov edx, eax
test byte [edx + 0x15], 2
je 0x427d88
cmp byte [eax + 0x17], 0
jne 0x427d86
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
mov edx, dword [0x4aacc8]
mov eax, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push edx
call fcn.0040a5d0
add esp, 0xc
jmp 0x4297ca
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x427df5
mov ecx, dword [0x4aacc0]
push edi
mov esi, 0x4acd80
call fcn.00419d90
mov edi, eax
test edi, edi
jne 0x427df5
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
jne 0x427ddb
mov edi, dword [ebx + 0x9c]
test edi, edi
jne 0x427df5
mov ecx, dword [esp + 0x14]
push eax
push 0
push str.Target_label_does_not_exist.
call fcn.0042e9d0
mov esi, dword [esp + 0x14]
jmp 0x4297ca
mov esi, dword [0x4aacc4]
cmp byte [esi], 0
je 0x427ea5
push 0
call fcn.00413f60
add esp, 4
test eax, eax
jne 0x427e7b
push eax
mov eax, dword [0x4aacc4]
push 1
push 1
push 1
call fcn.004725a0
add esp, 0x10
test eax, eax
jne 0x427e9c
mov eax, dword [0x4aacc4]
push str.Delete
push eax
call fcn.00485431
add esp, 8
test eax, eax
jne 0x427e5b
mov ecx, edi
mov edx, 0x4acd80
call fcn.00419cb0
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297ca
mov ecx, dword [0x4aacc4]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push str.Parameter_2_invalid.
call fcn.0042e9d0
mov esi, dword [esp + 0x14]
jmp 0x4297ca
jle 0x427e9c
cmp eax, 2
jg 0x427e9c
mov ecx, dword [0x4aacc8]
cmp eax, 1
sete dl
push 0
movzx eax, dl
push eax
push ecx
push 0x4997f1
jmp 0x427ebd
mov esi, dword [0x4aacc4]
cmp byte [esi], 0
mov ecx, dword [0x4aacc8]
jne 0x427eb6
cmp byte [ecx], 0
je 0x427eb6
mov al, 1
jmp 0x427eb8
xor al, al
push eax
push 1
push ecx
push esi
push edi
mov edi, 0x4acd80
call fcn.004199f0
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297ca
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
mov edi, 0x10
je 0x427f06
push 0x49b4c0
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x427f06
xor edi, edi
mov ecx, esi
call fcn.00420700
mov edi, eax
test edi, edi
je 0x427f0b
mov eax, 1
mov byte [ebx + 0xca], al
test al, al
je 0x427f37
or eax, 0xffffffff
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 0x24], eax
mov dword [ebx + 0xb4], edi
mov byte [ebx + 0xc8], 0
mov eax, 1
jmp 0x4297ca
mov dword [ebx + 0xb4], 5
mov byte [ebx + 0xc8], 1
mov eax, 1
jmp 0x4297ca
mov esi, dword [0x4aacc0]
call fcn.00413f00
dec eax
je 0x427ff6
dec eax
je 0x427faf
dec eax
jne 0x428007
mov edx, dword [0x4aacc4]
cmp byte [edx], al
je 0x427f99
mov ecx, dword [esp + 0x14]
lea edi, [eax + 1]
call fcn.00420700
or eax, edx
jne 0x427f99
mov esi, dword [esp + 0x14]
mov eax, edi
mov byte [ebx + 0xc9], al
jmp 0x4297ca
mov esi, dword [esp + 0x14]
xor eax, eax
mov byte [ebx + 0xc9], al
mov eax, 1
jmp 0x4297ca
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
je 0x427fcc
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00420700
mov dword [0x4ad394], eax
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0
je 0x428007
mov ecx, dword [esp + 0x14]
mov edi, 2
call fcn.00420700
mov esi, dword [esp + 0x14]
mov dword [0x4ad390], eax
lea eax, [edi - 1]
jmp 0x4297ca
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00420700
mov dword [ebx + 0x2c], eax
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297ca
mov ebx, dword [esi + 0xc]
test ebx, ebx
jne 0x428038
mov edx, dword [0x4aacc0]
push 0x4acd80
mov cl, 1
call fcn.00422570
mov ebx, eax
test ebx, ebx
je case.0x4262c5.8
mov edi, dword [0x4aaccc]
cmp byte [edi], 0
je 0x428074
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x428071
mov eax, 0x4acd80
call fcn.00419d50
test eax, eax
jne 0x428071
mov edx, dword [0x4aaccc]
push edx
push eax
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042e9d0
jmp 0x4297ca
mov dword [ebx + 0x10], eax
mov eax, dword [0x4aacd4]
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aacc8]
push eax
push ecx
mov ecx, dword [0x4aacc4]
push edx
push ebx
call fcn.00477c90
jmp 0x4297ca
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x4280d6
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
mov ebx, eax
je 0x428110
mov edi, dword [0x4acdb8]
test edi, edi
je 0x428110
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x4280d6
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x4280b6
lea eax, [edi + 1]
jmp 0x4297ca
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x428106
push 0x49b154
push eax
call fcn.00485431
add esp, 8
test eax, eax
jne 0x428106
mov al, 1
mov ecx, edi
push eax
call fcn.00478290
mov eax, 1
jmp 0x4297ca
xor al, al
mov ecx, edi
push eax
call fcn.00478290
mov eax, 1
jmp 0x4297ca
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x428160
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
mov ebx, eax
je 0x4281c8
mov edi, dword [0x4acdb8]
test edi, edi
je 0x4281c8
nop
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x428160
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x428140
lea eax, [edi + 1]
jmp 0x4297ca
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x4281bf
push 0x49bfe8
push eax
call fcn.00485431
add esp, 8
test eax, eax
jne 0x428190
push edi
xor edx, edx
mov cl, 0x82
call fcn.00477f40
mov eax, 1
jmp 0x4297ca
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x4281bf
push 0x49b154
push eax
call fcn.00485431
add esp, 8
test eax, eax
jne 0x4281bf
mov al, 1
push eax
push edi
call fcn.00478000
mov eax, 1
jmp 0x4297ca
xor al, al
push eax
push edi
call fcn.00478000
mov eax, 1
jmp 0x4297ca
mov eax, dword [0x4aacc8]
push eax
mov eax, dword [0x4aacc4]
call fcn.0043e210
jmp 0x4297ca
test edi, edi
jne 0x428203
mov edi, 1
mov ecx, esi
call fcn.00420700
call fcn.00412640
mov eax, edi
jmp 0x4297ca
mov eax, dword [0x4aacc4]
push 0
push 1
push 0
push 1
call fcn.004725a0
add esp, 0x10
cmp eax, 2
je 0x42823b
mov eax, dword [0x4aacc8]
push 0
push 1
push 0
push 1
call fcn.004725a0
add esp, 0x10
cmp eax, 2
jne 0x4282d6
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0
je 0x428254
mov edi, 1
mov ecx, esi
call fcn.004207b0
jmp 0x428256
fldz
mov edx, dword [0x4aacc8]
fst qword [esp + 0x38]
cmp byte [edx], 0
je 0x428296
mov edi, 2
fstp st(0)
mov ecx, esi
call fcn.004207b0
fst qword [esp + 0x88]
fld qword [esp + 0x38]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x4282a5
fstp qword [esp + 0x38]
fstp qword [esp + 0x88]
jmp 0x4282a9
fld qword [0x4a1968]
fst qword [esp + 0x88]
jmp 0x428280
fstp st(0)
fstp st(0)
call fcn.004127b0
fld qword [esp + 0x88]
fld qword [esp + 0x38]
mov eax, dword [esp + 0x18]
fsub st(1), st(0)
sub esp, 8
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push eax
call fcn.00412d20
jmp 0x4297ca
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0
je 0x4282f1
mov edi, 1
mov ecx, esi
call fcn.00420700
mov ebx, eax
jmp 0x4282f3
xor ebx, ebx
mov edx, dword [0x4aacc8]
cmp byte [edx], 0
je 0x428310
mov ecx, dword [esp + 0x14]
mov edi, 2
call fcn.00420700
mov esi, eax
jmp 0x428315
mov esi, SysReAllocString
cmp ebx, esi
jle 0x42831f
mov eax, ebx
mov ebx, esi
mov esi, eax
call fcn.00412760
mov ecx, eax
mov eax, ebx
cdq
mov edi, eax
mov dword [esp + 0x38], edx
mov eax, esi
cdq
sub eax, edi
sbb edx, dword [esp + 0x38]
add eax, 1
adc edx, 0
push edx
push eax
push 0
push ecx
call fcn.00494900
add eax, ebx
jmp 0x426fc1
mov ecx, dword [0x4aacc4]
push 1
push esi
call fcn.0043e3f0
jmp 0x4297ca
mov edx, dword [0x4aacc8]
mov eax, dword [0x4aacc4]
mov ecx, dword [0x4aacc0]
push edx
push esi
call fcn.0043e5b0
jmp 0x4297ca
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push esi
call fcn.0043e860
jmp 0x4297ca
mov eax, dword [0x4aaccc]
mov edx, dword [0x4aacc4]
push eax
xor eax, eax
cmp cl, 0x9b
sete al
push edx
dec eax
and eax, dword [0x4aacc0]
push eax
push esi
call fcn.0043ee10
jmp 0x4297ca
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0
je 0x4283d7
mov edi, 1
mov ecx, esi
call fcn.00420700
dec eax
jmp 0x4283d9
xor eax, eax
cdq
test edx, edx
jg 0x4283ea
jl 0x4283e4
test eax, eax
jae 0x4283ea
xor eax, eax
mov dword [esp + 0x3c], eax
cmp byte [esi], 0x9d
push eax
jne 0x4283fe
mov esi, dword [esp + 0x18]
call fcn.0043ff10
jmp 0x4297ca
mov edi, dword [0x4aacc0]
mov ebx, esi
call fcn.00440000
jmp 0x4297ca
mov edx, dword [0x4aacc4]
cmp byte [edx], 0
je 0x42842b
mov edi, 1
mov ecx, esi
call fcn.00420700
mov ebx, eax
jmp 0x428430
mov ebx, 0x96
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
je 0x428453
xor edi, edi
mov ecx, esi
call fcn.00420700
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
lea eax, [edi + 1]
jmp 0x4297ca
mov eax, 0x20b
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov eax, 1
jmp 0x4297ca
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x42848b
push str.wait
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x4284b0
mov eax, dword [0x4aacc4]
push 0x49aee0
push eax
call fcn.00485431
add esp, 8
test eax, eax
je 0x4284b0
xor al, al
push eax
mov eax, dword [0x4aacc0]
push esi
call fcn.00440160
jmp 0x4297ca
mov eax, 1
push eax
mov eax, dword [0x4aacc0]
push esi
call fcn.00440160
jmp 0x4297ca
cmp byte [esi + 1], 2
jae 0x4284d1
mov ebx, dword [ebx + 0x18]
jmp 0x4284d3
xor ebx, ebx
mov ecx, dword [0x4aacc0]
mov edx, dword [0x4aacc4]
push ebx
push ecx
push edx
push esi
call fcn.004415b0
jmp 0x4297ca
mov ecx, dword [0x4aacc4]
push esi
call fcn.00440be0
jmp 0x4297ca
mov eax, dword [0x4aacc4]
mov ecx, dword [0x4aacc8]
push eax
push esi
call fcn.00441220
jmp 0x4297ca
push esi
call fcn.004419c0
jmp 0x4297ca
mov eax, dword [0x4aacc0]
mov esi, dword [esp + 0x14]
call fcn.004525c0
jmp 0x4297ca
mov edi, dword [0x4aacc0]
push esi
call fcn.004526c0
jmp 0x4297ca
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
mov edx, dword [0x4aacc0]
push esi
call fcn.00441c50
jmp 0x4297ca
add ebx, 0x30
push ebx
push 0
mov edi, 2
mov ecx, esi
call fcn.00420700
cmp eax, 1
mov eax, dword [0x4aacc4]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4aacc0]
push eax
call fcn.00452d60
add esp, 0x10
test eax, eax
jne 0x4285e0
mov ecx, dword [0x4ab51c]
push 1
push eax
push 0xffffffffffffffff
push 0x49987c
push ecx
call fcn.00475380
jmp 0x4297ca
add ebx, 0x30
push ebx
push 1
mov edi, 2
mov ecx, esi
call fcn.00420700
mov ecx, dword [0x4aacc4]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4aacc0]
push eax
push ecx
call fcn.00452d60
add esp, 0x10
push eax
push esi
call fcn.0042e8c0
jmp 0x4297ca
mov edi, 2
mov ecx, esi
call fcn.00420700
mov ecx, dword [0x4aacc4]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4aacc0]
push eax
push ecx
call fcn.00452940
add esp, 8
test al, al
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042e800
jmp 0x4297ca
mov ecx, dword [0x4aacc8]
mov al, byte [ecx]
call fcn.00409370
cmp al, 0x52
jne 0x428663
mov edx, dword [0x4aacc4]
mov eax, dword [0x4aacc0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042e800
jmp 0x4297ca
mov edi, 2
mov ecx, esi
call fcn.00420700
mov ecx, dword [0x4aacc4]
mov edx, dword [0x4aacc0]
push ecx
mov edi, eax
call fcn.00452ad0
add esp, 4
test al, al
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042e800
jmp 0x4297ca
mov ecx, dword [0x4aacc0]
push ecx
mov ecx, esi
call fcn.00440a20
jmp 0x4297ca
mov edx, dword [0x4aacc0]
cmp byte [edx], 0
je 0x4286ed
mov edi, 1
mov ecx, esi
call fcn.00420700
mov edx, dword [0x4aacc0]
cmp eax, edi
sete al
movzx ecx, al
push ecx
call fcn.00452c80
add esp, 4
test al, al
je 0x4286ed
xor al, al
push eax
push esi
call fcn.0042e800
jmp 0x4297ca
mov eax, 1
push eax
push esi
call fcn.0042e800
jmp 0x4297ca
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
jne 0x428717
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
test ebx, ebx
jne 0x428717
mov eax, 0x4997f1
mov edi, esi
call fcn.00441df0
jmp 0x4297ca
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x428733
mov dword [esp + 0x34], eax
jmp 0x42874b
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x428743
add eax, 0x2c
mov dword [esp + 0x34], eax
jmp 0x42874b
mov dword [esp + 0x34], 0x4997f1
push 0
push ecx
mov ecx, dword [esp + 0x1c]
mov edi, 3
call fcn.00420700
mov esi, dword [0x4aacc8]
add esp, 4
cmp eax, 1
sete dl
movzx eax, dl
push eax
call fcn.00414240
mov ecx, dword [esp + 0x3c]
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [esp + 0x24]
push edx
call fcn.00441f00
mov esi, dword [esp + 0x14]
xor eax, eax
cmp dword [ebx + 0xdc], eax
sete al
jmp 0x4297ca
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
jne 0x4287b7
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
test ebx, ebx
jne 0x4287b7
mov eax, 0x4997f1
mov ecx, dword [0x4aacc8]
movzx edx, byte [ecx]
push edx
mov edi, esi
call fcn.004425e0
jmp 0x4297ca
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x4287dd
mov dword [esp + 0x34], eax
jmp 0x4287f5
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x4287ed
add eax, 0x2c
mov dword [esp + 0x34], eax
jmp 0x4287f5
mov dword [esp + 0x34], 0x4997f1
push 0
push ecx
mov ecx, dword [esp + 0x1c]
mov edi, 4
call fcn.00420700
mov esi, dword [0x4aaccc]
add esp, 4
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.00414240
mov edx, dword [0x4aacc8]
mov ecx, dword [esp + 0x3c]
push eax
movzx eax, byte [edx]
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [esp + 0x28]
push edx
call fcn.00442760
mov esi, dword [esp + 0x14]
xor eax, eax
cmp dword [ebx + 0xdc], eax
sete al
jmp 0x4297ca
mov edi, dword [0x4aacc4]
cmp byte [edi], 0
jne 0x42886c
mov ebx, dword [ebx + 0x10]
lea edi, [ebx + 0x2c]
test ebx, ebx
jne 0x42886c
mov edi, 0x4997f1
mov eax, dword [0x4aacc8]
push eax
push esi
call fcn.00442d20
jmp 0x4297ca
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
jne 0x428896
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
test ebx, ebx
jne 0x428896
mov eax, 0x4997f1
push esi
call fcn.00452770
jmp 0x4297ca
mov edi, dword [0x4aacc0]
call fcn.00440350
xor eax, eax
cmp dword [ebx + 0xdc], eax
sete al
jmp 0x4297ca
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aaccc]
push edx
mov edx, dword [0x4aacc8]
push esi
call fcn.00440430
jmp 0x4297ca
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push eax
push ecx
mov ecx, dword [0x4aaccc]
mov edx, esi
call fcn.00451cb0
jmp 0x4297ca
mov edx, dword [0x4aacc0]
push edx
push esi
call fcn.00451fd0
jmp 0x4297ca
mov eax, dword [0x4aace0]
mov ecx, dword [0x4aacdc]
mov edx, dword [0x4aacd8]
mov ebx, dword [0x4aacd0]
mov edi, dword [0x4aaccc]
push eax
mov eax, dword [0x4aacd4]
push ecx
mov ecx, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [0x4aacc8]
push edx
push esi
call fcn.00452370
jmp 0x4297ca
push 0
mov ecx, 4
call fcn.0043a8a0
add esp, 4
jmp 0x4297ca
mov esi, dword [0x4aacc0]
push 7
call fcn.00413f60
add esp, 4
cmp eax, 7
jne 0x428996
push 0
lea ecx, [eax - 6]
call fcn.0043a8a0
mov esi, dword [esp + 0x18]
add esp, 4
jmp 0x4297ca
cmp byte [ebx + 0xd5], 0
je 0x4289c2
mov ecx, dword [0x4accc0]
test ecx, ecx
jle 0x4289ac
dec ecx
jmp 0x4289b1
mov ecx, 0x18f
mov dword [0x4accc0], ecx
mov dword [ecx*4 + 0x4ac680], 0
mov esi, dword [esp + 0x14]
cmp eax, 1
sete al
mov byte [ebx + 0xd5], al
mov eax, 1
jmp 0x4297ca
push 0
mov ecx, 2
call fcn.0043a8a0
add esp, 4
jmp 0x4297ca
push 0
mov ecx, 3
call fcn.0043a8a0
add esp, 4
jmp 0x4297ca
mov ebx, dword [0x4a7440]
add ebx, 0x4c
call fcn.0045b1a0
test eax, eax
je 0x428a24
mov ecx, dword [0x4a7440]
mov edx, dword [ecx + 0x4c]
mov eax, dword [edx + 4]
jmp 0x428a26
xor eax, eax
mov cl, byte [esi + 1]
push eax
test cl, cl
jne 0x428a44
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push str.Press_OK_to_continue.
jmp 0x428a89
cmp cl, 1
jne 0x428a60
fldz
mov eax, dword [0x4aacc0]
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push eax
jmp 0x428a89
push ecx
mov edi, 3
mov ecx, esi
call fcn.004207b0
push ecx
mov ecx, dword [0x4aacc4]
fstp qword [esp]
push ecx
xor edi, edi
mov ecx, esi
call fcn.00420700
mov edx, dword [0x4aacc8]
push eax
push edx
call fcn.00476f70
mov edi, eax
add esp, 0x18
test edi, edi
jne 0x428abc
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x59e
jne 0x428abc
mov eax, dword [0x4aacc0]
push eax
push edi
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042e9d0
jmp 0x4297ca
xor eax, eax
test edi, edi
setne al
jmp 0x4297ca
mov ecx, dword [0x4aacdc]
cmp byte [ecx], 0
je 0x428ae5
mov edi, 7
mov ecx, esi
call fcn.00420700
mov dword [esp + 0x34], eax
jmp 0x428aed
mov dword [esp + 0x34], CreateStatusWindowA
mov edx, dword [0x4aacd8]
cmp byte [edx], 0
je 0x428b0a
mov edi, 6
mov ecx, esi
call fcn.00420700
mov dword [esp + 0x50], eax
jmp 0x428b12
mov dword [esp + 0x50], CreateStatusWindowA
mov eax, dword [0x4aacd4]
cmp byte [eax], 0
je 0x428b2e
mov ecx, dword [esp + 0x14]
mov edi, 5
call fcn.00420700
mov esi, eax
jmp 0x428b33
mov esi, SysReAllocString
mov ecx, dword [0x4aacd0]
cmp byte [ecx], 0
je 0x428b50
mov ecx, dword [esp + 0x14]
mov edi, 4
call fcn.00420700
mov ebx, eax
jmp 0x428b55
mov ebx, SysReAllocString
mov ecx, dword [esp + 0x14]
mov edi, 9
call fcn.004207b0
mov edx, dword [0x4aace8]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x50]
sub esp, 8
fstp qword [esp]
push edx
mov edx, dword [0x4aaccc]
push eax
mov al, byte [edx]
push ecx
push esi
call fcn.00409370
mov edx, dword [0x4aacc4]
cmp al, 0x48
mov eax, dword [0x4aacc8]
push eax
mov eax, dword [esp + 0x34]
push edx
sete cl
push eax
mov edi, ebx
call fcn.0043ab60
mov esi, dword [esp + 0x38]
add esp, 0x24
jmp 0x4297ca
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0
je 0x428bcd
mov edi, 1
mov ecx, esi
call fcn.00420700
mov ebx, eax
jmp 0x428bcf
xor ebx, ebx
mov edx, dword [0x4aacc0]
cmp byte [edx], 0
je 0x428be5
xor edi, edi
mov ecx, esi
call fcn.00420700
jmp 0x428bea
mov eax, 0xc8
mov ecx, dword [0x4aaccc]
mov edx, dword [0x4aacc8]
push ecx
push edx
push ebx
push eax
call fcn.00450360
jmp 0x4297ca
mov eax, dword [0x4aad28]
test eax, eax
je 0x428c24
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x428c24
mov eax, dword [0x4aad28]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4aad28], 0
mov eax, 1
jmp 0x4297ca
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aaccc]
mov eax, dword [0x4aacc8]
push 0
push ecx
mov ecx, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push ecx
push edx
push esi
mov ecx, 0x4997f1
call fcn.00431030
jmp 0x4297ca
mov eax, dword [0x4aacd4]
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aaccc]
push 1
push eax
mov eax, dword [0x4aacc8]
push ecx
mov ecx, dword [0x4aacc4]
push edx
push eax
push ecx
mov ecx, dword [0x4aacc0]
push esi
call fcn.00431030
jmp 0x4297ca
mov edx, dword [0x4aacc8]
mov eax, dword [0x4aacc4]
mov ecx, dword [0x4aacc0]
push edx
push eax
push ecx
mov ecx, dword [0x4aaccc]
push esi
call fcn.00432200
jmp 0x4297ca
mov edx, dword [0x4aacc4]
mov eax, dword [0x4aacc0]
mov edi, dword [0x4aaccc]
mov esi, dword [0x4aacc8]
push edx
push eax
call fcn.00432510
mov esi, dword [esp + 0x14]
jmp 0x4297ca
push esi
call fcn.00433290
jmp 0x4297ca
mov esi, dword [0x4aacc4]
call fcn.004144e0
mov esi, dword [0x4aacc0]
movzx edi, ax
call fcn.00414550
movzx ecx, ax
cmp ecx, 0xffffffff
je case.0x42921e.3
cmp edi, 0xffffffff
je case.0x42921e.3
mov esi, dword [esp + 0x14]
mov eax, 3
shl ax, cl
shl di, cl
not ax
and ax, word [ebx + 0xcc]
or ax, di
mov word [ebx + 0xcc], ax
mov eax, 1
jmp 0x4297ca
xor edi, edi
mov ecx, esi
call fcn.00420700
mov byte [ebx + 0xcb], al
cmp al, 0x64
jbe 0x428d6c
mov byte [ebx + 0xcb], 2
mov eax, 1
jmp 0x4297ca
mov ecx, dword [ebx + 0xb0]
mov eax, dword [0x4aacc0]
push ecx
call fcn.004141b0
mov dword [ebx + 0xb0], eax
add esp, 4
mov eax, 1
jmp 0x4297ca
xor edi, edi
mov ecx, esi
call fcn.00420700
cmp eax, 0x64
ja 0x428dae
mov byte [ebx + 0xd2], al
mov eax, 1
jmp 0x4297ca
mov edx, dword [0x4aacc8]
push str.Play
push edx
call fcn.00485431
add esp, 8
test eax, eax
jne 0x428e07
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
je 0x428de6
xor edi, edi
mov ecx, esi
call fcn.00420700
mov dword [ebx + 0x60], eax
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0
je 0x428e37
mov edi, 1
mov ecx, esi
call fcn.00420700
mov dword [ebx + 0x68], eax
mov eax, edi
jmp 0x4297ca
mov edx, dword [0x4aacc0]
cmp byte [edx], 0
je 0x428e1e
xor edi, edi
mov ecx, esi
call fcn.00420700
mov dword [ebx + 0x5c], eax
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x428e37
mov edi, 1
mov ecx, esi
call fcn.00420700
mov dword [ebx + 0x64], eax
mov eax, 1
jmp 0x4297ca
mov ecx, dword [0x4aacc4]
push str.Play
push ecx
call fcn.00485431
add esp, 8
xor edi, edi
mov ecx, esi
test eax, eax
jne 0x428e6d
call fcn.00420700
mov dword [ebx + 0x70], eax
lea eax, [edi + 1]
jmp 0x4297ca
call fcn.00420700
mov dword [ebx + 0x6c], eax
mov eax, 1
jmp 0x4297ca
xor edi, edi
mov ecx, esi
call fcn.00420700
mov dword [ebx + 0x54], eax
lea eax, [edi + 1]
jmp 0x4297ca
xor edi, edi
mov ecx, esi
call fcn.00420700
mov dword [ebx + 0x58], eax
lea eax, [edi + 1]
jmp 0x4297ca
mov eax, dword [0x4aacc0]
push 0x49d338
call fcn.00472a90
add esp, 4
xor edi, edi
mov ecx, esi
test eax, eax
je 0x428ede
mov dword [ebx], 0xffffffff
mov dword [ebx + 4], 0xffffffff
call fcn.00420700
mov dword [ebx + 0x24], eax
lea eax, [edi + 1]
jmp 0x4297ca
mov dword [ebx + 0x24], 0xffffffff
call fcn.00420700
mov dword [ebx + 4], edx
mov edx, eax
or edx, dword [ebx + 4]
mov dword [ebx], eax
jne 0x428eff
mov dword [ebx], 0xa
mov dword [ebx + 4], edi
mov eax, 1
jmp 0x4297ca
mov esi, dword [0x4aacc0]
push 7
call fcn.00413f60
add esp, 4
cmp eax, 7
je case.0x42921e.3
mov esi, dword [esp + 0x14]
cmp eax, 1
sete al
mov byte [ebx + 0xcf], al
mov eax, 1
jmp 0x4297ca
mov esi, dword [0x4aacc0]
call fcn.00413bd0
dec eax
cmp eax, 5
ja case.default.0x428f51
jmp dword [eax*4 + 0x42a144]
mov esi, dword [esp + 0x14]
mov eax, 1
mov dword [ebx + 0x20], eax
jmp 0x4297ca
mov esi, dword [esp + 0x14]
mov dword [ebx + 0x20], 2
mov eax, 1
jmp 0x4297ca
mov esi, dword [esp + 0x14]
mov dword [ebx + 0x20], 4
mov eax, 1
jmp 0x4297ca
mov esi, dword [esp + 0x14]
mov dword [ebx + 0x20], 3
mov eax, 1
jmp 0x4297ca
mov esi, dword [esp + 0x14]
mov byte [ebx + 0xc5], 1
mov eax, 1
jmp 0x4297ca
mov esi, dword [esp + 0x14]
mov byte [ebx + 0xc5], 0
mov eax, 1
jmp 0x4297ca
mov ecx, dword [0x4aacc0]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push str.Parameter_1_invalid.
call fcn.0042e9d0
mov esi, dword [esp + 0x14]
jmp 0x4297ca
mov edx, dword [0x4aacc0]
push 5
push str.Float
push edx
call fcn.00485eb0
add esp, 0xc
test eax, eax
jne 0x4290e1
lea edi, [eax + 1]
mov ecx, esi
call fcn.00420680
cmp eax, 0x1e
jb 0x429026
mov eax, edi
jmp 0x4297ca
mov ecx, dword [esp + 0x14]
call fcn.00420700
mov edi, eax
mov eax, dword [0x4aacc4]
push 0x2e
push eax
mov dword [esp + 0xe4], edx
call fcn.00486421
mov esi, eax
add esp, 8
mov dword [esp + 0x38], esi
test esi, esi
je 0x42905e
inc esi
call fcn.00412c20
mov esi, dword [esp + 0x38]
jmp 0x429062
xor eax, eax
xor edx, edx
add eax, edi
adc edx, dword [esp + 0xdc]
add eax, 2
adc edx, 0
mov dword [esp + 0x3c], edx
js 0x429088
jg case.0x42921e.3
cmp eax, 0xff
ja case.0x42921e.3
mov eax, dword [0x4aacc4]
push 0
push 1
push 1
push 1
call fcn.004725a0
add esp, 0x10
mov ecx, 0x49d33c
test eax, eax
jne 0x4290ab
mov ecx, 0x4997f1
mov eax, 0x4997f1
test esi, esi
jne 0x4290b9
mov eax, 0x49c46c
push ecx
mov ecx, dword [0x4aacc4]
push eax
push ecx
push str.___s_s_s
add ebx, 0x74
push ebx
call fcn.00485968
mov esi, dword [esp + 0x28]
add esp, 0x14
mov eax, 1
jmp 0x4297ca
mov edx, dword [0x4aacc0]
push 7
push str.Integer
push edx
call fcn.00485eb0
add esp, 0xc
test eax, eax
jne case.0x429114.69
mov eax, dword [0x4aacc4]
mov al, byte [eax]
movsx ecx, al
add ecx, 0xffffffbc
cmp ecx, 0x24
ja case.0x429114.69
movzx ecx, byte [ecx + 0x42a168]
jmp dword [ecx*4 + 0x42a15c]
mov byte [ebx + 0xd1], 0x44
mov eax, 1
jmp 0x4297ca
mov byte [ebx + 0xd1], al
mov eax, 1
jmp 0x4297ca
mov edx, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push edx
call fcn.0043bb30
jmp 0x4297ca
mov edx, dword [0x4aacd4]
mov al, 3
cmp al, byte [esi + 1]
mov eax, dword [0x4aacd0]
sbb ecx, ecx
and ecx, dword [0x4aac74]
push ecx
mov ecx, dword [0x4aaccc]
push edx
mov edx, dword [0x4aacc8]
push eax
mov eax, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aacc0]
push edx
push eax
push ecx
push 0x4acd80
call fcn.00468a10
jmp 0x4297ca
mov edx, dword [0x4aaccc]
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push 0x4acd80
call fcn.0045b210
jmp 0x4297ca
mov eax, dword [0x4aacc4]
mov cl, 2
cmp cl, byte [esi + 1]
mov ecx, dword [0x4aacc0]
sbb edx, edx
and edx, dword [0x4aac70]
push edx
push eax
mov eax, dword [0x4aacc8]
push ecx
push esi
call fcn.0045bb00
jmp 0x4297ca
mov edx, dword [0x4aaccc]
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push edx
push eax
push ecx
push esi
call fcn.0045cb30
jmp 0x4297ca
mov esi, dword [0x4aacc0]
call fcn.00414060
cmp eax, 7
ja case.0x42921e.3
jmp dword [eax*4 + 0x42a190]
cmp byte [0x4aae78], 0
jne case.0x42921e.3
call fcn.0042e410
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297ca
cmp byte [0x4aae78], 0
je case.0x42921e.3
call fcn.0042e410
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297ca
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00420700
mov esi, dword [0x4aacc0]
test eax, eax
setne al
movzx ecx, al
push ecx
call fcn.00413fb0
mov edx, dword [esp + 0x18]
push eax
push edx
call fcn.0042e460
mov esi, dword [esp + 0x14]
jmp 0x4297ca
mov esi, dword [0x4aacc0]
push 7
call fcn.00413f60
add esp, 4
cmp eax, 7
je case.0x42921e.3
mov esi, dword [esp + 0x14]
cmp eax, 1
sete al
mov byte [ebx + 0xd0], al
mov eax, 1
jmp 0x4297ca
mov esi, dword [0x4aacc0]
call fcn.00414010
mov byte [ebx + 0xce], al
cmp al, 4
jne case.0x42921e.3
mov esi, dword [esp + 0x14]
mov byte [ebx + 0xce], 0
mov eax, 1
jmp 0x4297ca
mov esi, dword [0x4aacc0]
push 7
call fcn.00413f60
add esp, 4
cmp eax, 7
je case.0x42921e.3
mov esi, dword [esp + 0x14]
cmp eax, 1
sete cl
mov byte [ebx + 0xc6], cl
mov eax, 1
jmp 0x4297ca
mov esi, dword [0x4aacc0]
push 7
call fcn.00413f60
add esp, 4
cmp eax, 7
je case.0x42921e.3
mov esi, dword [esp + 0x14]
cmp eax, 1
sete dl
mov byte [ebx + 0xc7], dl
mov eax, 1
jmp 0x4297ca
mov esi, dword [0x4aacc0]
call fcn.004140d0
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x42921e.3
movzx ecx, byte [ecx + 0x42a1c8]
jmp dword [ecx*4 + 0x42a1b0]
mov bl, 1
call fcn.0042e560
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297ca
xor bl, bl
call fcn.0042e560
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297ca
mov esi, dword [esp + 0x14]
mov dword [0x4a7450], eax
mov eax, 1
jmp 0x4297ca
or byte [0x4ab62a], 2
cmp dword [0x4aae54], 0
mov byte [0x4ab629], 1
jne case.0x42921e.3
mov edx, dword [0x4a8554]
movzx eax, word [edx]
push eax
call fcn.00407e60
mov esi, dword [esp + 0x18]
add esp, 4
mov eax, 1
jmp 0x4297ca
mov esi, dword [esp + 0x14]
mov byte [0x4ab629], 0
mov eax, 1
jmp 0x4297ca
mov esi, dword [0x4aacc0]
push str._a_a_a_v
mov al, 0x90
call fcn.00442ee0
mov esi, dword [esp + 0x18]
add esp, 4
jmp 0x4297ca
mov esi, dword [0x4aacc0]
push 0x4a7448
mov al, 0x14
call fcn.00442ee0
mov esi, dword [esp + 0x18]
add esp, 4
jmp 0x4297ca
mov esi, dword [0x4aacc0]
push 0x4a744c
mov al, 0x91
call fcn.00442ee0
mov esi, dword [esp + 0x18]
add esp, 4
jmp 0x4297ca
mov al, 1
mov edx, 0x4acd80
call fcn.00415b40
mov eax, 1
jmp 0x4297ca
xor edi, edi
mov ecx, esi
call fcn.00420700
jmp 0x427cb3
mov ecx, dword [0x4aaccc]
mov edx, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aacd0]
push edx
mov edx, dword [0x4aacc8]
call fcn.0046efe0
jmp 0x4297ca
mov eax, dword [0x4aacc0]
mov ecx, dword [0x4aaccc]
mov ebx, dword [0x4aacc8]
mov edx, dword [0x4aacc4]
push eax
push esi
call fcn.0046f100
jmp 0x4297ca
cmp byte [esi + 1], 3
mov edx, dword [0x4aacc4]
sbb ecx, ecx
not ecx
and ecx, dword [0x4aacc8]
push ecx
push edx
mov edx, dword [0x4aacc0]
push esi
call fcn.0046f220
jmp 0x4297ca
mov eax, 2
cmp byte [esi + 1], al
jae 0x42952a
mov ebx, dword [ebx + 0x14]
test ebx, ebx
je 0x42952a
lea eax, [ebx + 0x408]
push eax
mov eax, dword [ebx + 4]
lea ecx, [ebx + 8]
push ecx
push esi
call fcn.0046f290
jmp 0x4297ca
lea edx, [esp + 0x2e]
push edx
mov edx, dword [0x4aacc4]
lea ecx, [esp + 0x58]
push ecx
push edx
call fcn.00413890
mov edi, eax
mov eax, dword [esp + 0x60]
add esp, 0xc
test eax, eax
jne 0x42955e
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aaccc]
mov dword [esp + 0x54], eax
jmp 0x429564
mov ecx, dword [0x4aacc8]
push ecx
push eax
push esi
mov eax, edi
call fcn.0046f290
cmp byte [esp + 0x2e], 0
mov ebx, eax
je 0x429582
test edi, edi
je 0x429582
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x4297ca
cmp byte [esi + 1], 2
jae 0x4295bc
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x4295bc
mov ebx, dword [0x4aacc0]
lea ecx, [eax + 0x408]
push ecx
mov ecx, dword [eax + 0x808]
lea edx, [eax + 8]
mov eax, dword [eax + 4]
push edx
push ecx
push esi
call fcn.0046f640
jmp 0x4297ca
mov ecx, dword [0x4aacc4]
lea edx, [esp + 0x2e]
push edx
lea eax, [esp + 0x58]
push eax
push ecx
mov eax, 2
call fcn.00413890
mov edi, eax
mov eax, dword [esp + 0x60]
add esp, 0xc
test eax, eax
jne 0x4295fb
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aaccc]
mov ebx, dword [0x4aacd0]
mov dword [esp + 0x54], eax
jmp 0x429607
mov ecx, dword [0x4aacc8]
mov ebx, dword [0x4aaccc]
mov esi, dword [0x4aacc0]
push ecx
push eax
call fcn.00413b00
mov edx, dword [esp + 0x1c]
push eax
push edx
mov eax, edi
call fcn.0046f640
cmp byte [esp + 0x2e], 0
mov esi, eax
je 0x429635
test edi, edi
je 0x429635
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, esi
mov esi, dword [esp + 0x14]
jmp 0x4297ca
cmp byte [esi + 1], 1
jae 0x4296ad
mov ecx, dword [ebx + 0x14]
test ecx, ecx
je 0x4296ad
cmp dword [ecx + 0x808], 0xfffffffe
lea eax, [ecx + 0x408]
jne 0x42969b
push eax
add ecx, 8
push ecx
push 0x49b6b4
mov esi, 0x400
lea edi, [esp + 0x1cc]
call fcn.00472710
mov ecx, dword [ebx + 0x14]
mov edx, dword [ecx + 4]
mov eax, dword [esp + 0x20]
add esp, 0xc
push edx
push eax
mov eax, 0x4997f1
mov ebx, edi
call fcn.0046fa20
mov esi, dword [esp + 0x14]
jmp 0x4297ca
lea ebx, [ecx + 8]
mov ecx, dword [ecx + 4]
push ecx
push esi
call fcn.0046fa20
jmp 0x4297ca
mov ecx, dword [0x4aacc0]
lea edx, [esp + 0x2e]
push edx
lea eax, [esp + 0x58]
push eax
push ecx
mov eax, 2
call fcn.00413890
mov ebx, dword [esp + 0x60]
add esp, 0xc
mov edi, eax
test ebx, ebx
jne 0x4296e6
mov ebx, dword [0x4aacc4]
mov eax, dword [0x4aacc8]
mov dword [esp + 0x54], ebx
jmp 0x4296eb
mov eax, dword [0x4aacc4]
push edi
push esi
call fcn.0046fa20
cmp byte [esp + 0x2e], 0
mov ebx, eax
je 0x429582
test edi, edi
je 0x429582
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x4297ca
mov esi, dword [0x4aacc0]
call fcn.00413b80
mov esi, eax
cmp esi, 0xffffffff
jne 0x429747
mov edx, dword [0x4aacc0]
mov ecx, dword [esp + 0x14]
push edx
push 0
push str.Parameter_1_invalid.
call fcn.0042e9d0
mov esi, dword [esp + 0x14]
jmp 0x4297ca
call fcn.00473c50
test eax, eax
je case.0x42921e.3
mov dword [ebx + 0xac], esi
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297ca
mov eax, dword [0x4aacc0]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, 1
jmp 0x4297ca
xor edi, edi
mov ecx, esi
call fcn.00420700
push eax
call fcn.00453570
xor ecx, ecx
add esp, 4
test al, al
setne cl
mov eax, ecx
jmp 0x4297ca
mov eax, dword [0x4aacc0]
call fcn.00414710
cmp eax, 0xffffffff
jne 0x4297bb
mov edx, dword [0x4aacc0]
push edx
push 0
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042e9d0
jmp 0x4297ca
mov dword [ebx + 0xd8], eax
mov eax, 1
jmp 0x4297ca
xor eax, eax
mov dword [esp + 0x24], eax
test eax, eax
je 0x4254ae
cmp dword [ebp + 8], 3
je 0x4254ae
mov eax, dword [esi + 0x14]
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0
je 0x4254a9
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x14]
xor edi, edi
jmp 0x4251c5
mov ecx, dword [esp + 0x44]
mov dword [ecx], edx
jmp 0x4254a9
mov ecx, dword [esp + 0x44]
mov dword [ecx], edx
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x44]
mov dword [eax], edx
jmp 0x4254a9
test edi, edi
je 0x429897
cmp dword [edi + 8], 0
jne 0x429897
mov eax, dword [0x4aac68]
test eax, eax
je 0x429888
cmp byte [eax + 0x17], 0
jne 0x429855
mov ecx, dword [eax + 0xc]
jmp 0x429857
mov ecx, eax
test byte [ecx + 0x15], 2
je 0x429888
mov edi, dword [ebp + 0xc]
call fcn.00412f90
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 8], 0
mov ecx, dword [0x4aacc0]
mov dword [edi], ecx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esi + 0x18]
test eax, eax
je 0x4298d4
mov eax, dword [eax + 0x18]
mov ecx, dword [esp + 0x44]
mov dword [ecx], eax
cmp byte [eax], 0x6c
jne 0x4298d4
mov edx, dword [eax + 0x14]
mov dword [ecx], edx
mov eax, 5
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x4298fd
mov eax, dword [esp + 0x44]
mov dword [eax], esi
mov eax, 6
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4aacc4]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push str.Parameter_2_invalid.
call fcn.0042e9d0
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4aacc8]
push edx
push 0
push str.Parameter_3_invalid.
mov ecx, esi
call fcn.0042e9d0
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [edi + 0xe4], 0
jne 0x429989
mov esi, edi
add esi, 0xdc
call fcn.0042f090
xor eax, eax
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4ad0f0]
push 0x4997f1
push 0
push str.Jumps_cannot_exit_a_FINALLY_block.
call fcn.0042e9d0
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x44]
mov dword [eax], edi
jmp 0x4254a9
mov ecx, dword [esp + 0x44]
mov dword [ecx], edi
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [esi + 1], 0
jne 0x429a28
push 0x4997f1
push 0
push str.An_exception_was_thrown.
mov ecx, esi
call fcn.0042e710
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
add ebx, 0xdc
cmp dword [ebx], 0
mov dword [esp + 0x34], ebx
je 0x429a42
mov esi, ebx
call fcn.0042f090
mov esi, dword [esp + 0x14]
push 0x10
call fcn.00487690
mov edi, eax
add esp, 4
test edi, edi
jne 0x429a7b
push 0x4997f1
push eax
push str.Out_of_memory.
mov ecx, esi
call fcn.0042e9d0
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4accc8]
test eax, eax
jne 0x429add
mov edx, dword [esi + 8]
movzx eax, word [edx + 2]
mov ecx, 0xff
mov ebx, ecx
cmp ax, cx
jb 0x429a99
mov ebx, eax
inc ebx
push ebx
call fcn.004855e9
xor ecx, ecx
add esp, 4
mov dword [0x4accc8], eax
cmp eax, ecx
jne 0x429ae5
push 0x4997f1
push ecx
mov dword [0x4acccc], ecx
push str.Out_of_memory.
mov ecx, esi
call fcn.0042e9d0
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [0x4acccc]
xor ecx, ecx
push ecx
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x74]
push eax
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x84]
push eax
mov eax, dword [esp + 0x28]
push edi
lea edx, [esp + 0x3c]
push edx
push ecx
push eax
mov dword [esp + 0x90], ebx
mov dword [0x4accc8], ecx
mov dword [0x4acccc], ecx
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], ecx
mov dword [edi + 8], 0x41
call fcn.004576a0
mov esi, dword [esp + 0x70]
mov ebx, eax
cmp ebx, esi
jne 0x429b4d
mov dword [edi + 0xc], ebx
jmp 0x429b8c
mov dword [edi + 0xc], 0
test esi, esi
je 0x429b8c
mov eax, dword [0x4accc8]
test eax, eax
je 0x429b7c
push eax
call fcn.00485448
add esp, 4
cmp dword [0x4acccc], 0x400000
jbe 0x429b7c
dec dword [0x4accd0]
mov ecx, dword [esp + 0x6c]
mov dword [0x4accc8], esi
mov dword [0x4acccc], ecx
test ebx, ebx
jne 0x429bb4
push edi
call fcn.004851a8
mov eax, dword [esp + 0x28]
add esp, 4
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [edi + 8], 0x41
jne 0x429bc3
mov dword [edi + 8], 0
mov dword [edi], ebx
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
mov dword [eax + 0xe0], edx
mov dword [ecx], edi
xor eax, eax
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4a8554]
cmp word [edx], 0
jne 0x429c20
cmp dword [0x4ac61c], 0
jne 0x429c20
cmp dword [0x4aae50], 0
jne 0x429c20
cmp dword [0x4aae54], 0
jne 0x429c20
cmp byte [0x4aae70], 0
je case.0x4254db.222
mov eax, 8
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor edi, edi
mov ecx, esi
call fcn.00420700
push eax
push 0x4acd80
xor eax, eax
lea edx, [edi + 9]
call fcn.00415b70
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x44]
mov dword [eax], ecx
jmp 0x4254a9
mov edx, dword [esp + 0x44]
mov dword [edx], ecx
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je 0x4254a9
push 0x4997f1
push 0
push str.A__return__must_be_encountered_prior_to_this___.
mov ecx, esi
call fcn.0042e9d0
mov ecx, dword [esp + 0x5f4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc