Function at 0x41ee80
Capabilities:
Authenticate hmac
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xac
call fcn.004438e0
mov dword [esp + 0x3c], 0
mov dword [esp + 4], 0x45a954
lea ebp, [esp + 0x3c]
mov dword [esp], ebp
call fcn.00443ca0
sub esp, 8
mov dword [esp + 0x24], 0
lea esi, [esi]
lea esi, [esi]
call fcn.0043931f
cmp eax, 0x332c
je 0x41ef80
cmp eax, 0x10000
je 0x421e68
cmp eax, 0x10001
je 0x421e90
cmp eax, 0x10002
je 0x421eb8
cmp eax, 0x233
je 0x421ee0
cmp eax, 0x332d
je 0x422040
cmp eax, 0x3336
je 0x423918
cmp eax, 0x333c
jne case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
jne 0x4239f0
call fcn.0043bd44
test eax, eax
jne 0x423a40
mov dword [esp], 0
call fcn.0042bb01
sub esp, 4
mov dword [esp], eax
call sub.USER32.dll_IsWindowEnabled
sub esp, 4
test eax, eax
je case.0x41ef98.6
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
xor eax, eax
add esp, 0xac
pop ebx
pop esi
pop edi
pop ebp
ret
call fcn.0043bdfb
cmp eax, 0x19
je 0x41efa0
sub eax, 5
cmp eax, 0xa9
ja case.0x41ef98.6
jmp dword [eax*4 + 0x446278]
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov dword [esp + 8], str.WIM_files__.wim__.esd__.iso_.wim__.esd__.iso
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0041a1f0
sub esp, 0xc
call fcn.00443a30
call fcn.0043bdec
mov dword [esp + 8], eax
mov dword [esp + 4], 9
mov dword [esp], 0x333c
call fcn.0043bd53
sub esp, 0xc
jmp case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
jne case.0x41ef98.6
mov dword [esp + 4], 0
mov dword [esp], 0x406dd0
call fcn.0042c218
sub esp, 8
mov dword [0x45a7dc], eax
jmp case.0x41ef98.6
call fcn.0041c700
jmp case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
je 0x41f074
mov byte [0x45a915], 1
jmp case.0x41ef98.6
mov dword [esp], 1
call fcn.00402e10
sub esp, 4
jmp case.0x41ef98.6
call fcn.0043bdec
cmp eax, 2
jne case.0x41ef98.6
call fcn.0041c700
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov dword [esp], 0x10
call fcn.0043019a
sub esp, 4
mov ebx, eax
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.00440fa0
sub esp, 0xc
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.ScanWithISO
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov dword [esp], 0xf
call fcn.0043019a
sub esp, 4
mov ebx, eax
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.00440fa0
sub esp, 0xc
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.ScanSkipOSDrive
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.0043bdec
cmp eax, 0x300
jne case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov dword [esp], 0xd
call fcn.0043019a
sub esp, 4
mov ebx, eax
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.00440fa0
sub esp, 0xc
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.ScanDepth
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x28
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov dword [esp], eax
call fcn.0041cd20
sub esp, 4
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.0043bdec
cmp eax, 0x300
jne case.0x41ef98.6
call fcn.0043bdfb
mov ebx, eax
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0040e4f0
sub esp, 8
mov ebx, eax
call fcn.00443a30
test bl, bl
je case.0x41ef98.6
call fcn.0041c850
jmp case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
jne case.0x41ef98.6
call fcn.004438e0
mov dword [esp], 0x28
call fcn.0043031a
sub esp, 4
test al, 1
jne 0x41f34a
mov dword [esp + 4], 1
mov dword [esp], 0x26
call fcn.004302ef
sub esp, 8
mov dword [esp + 4], 0x455700
mov dword [esp], 0x2e
call fcn.0043000b
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 0x41d2e0
call fcn.0042c218
sub esp, 8
mov dword [0x45a7dc], eax
jmp case.0x41ef98.6
mov dword [esp + 4], 0x14
mov dword [esp], 0x452620
call fcn.0040fb50
sub esp, 8
jmp 0x41f2fb
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov dword [esp], 0x2b
call fcn.0043019a
sub esp, 4
mov ebx, eax
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.00440fa0
sub esp, 0xc
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.EXPcompType
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00443a30
jmp case.0x41ef98.6
mov dword [esp + 8], 1
mov dword [esp + 4], 0xa
mov dword [esp], 0x28
call fcn.004048d0
sub esp, 0xc
call fcn.0043bdec
mov dword [esp + 8], eax
mov dword [esp + 4], 2
mov dword [esp], 0x333c
call fcn.0043bd53
sub esp, 0xc
jmp case.0x41ef98.6
call fcn.0043bdec
test eax, eax
jne case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x30
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], 0x32
call fcn.0043000b
sub esp, 8
call fcn.00443a30
mov dword [esp], 0x32
call fcn.00416040
sub esp, 4
jmp case.0x41ef98.6
call fcn.0043bdec
cmp eax, 0x300
jne case.0x41ef98.6
call fcn.0043bdfb
mov ebx, eax
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0040e4f0
sub esp, 8
mov esi, eax
call fcn.00443a30
mov eax, esi
test al, al
jne 0x41f50a
mov dword [esp], ebx
call fcn.0043019a
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0043041b
sub esp, 8
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], 0x30
call fcn.0043000b
sub esp, 8
call fcn.00443a30
mov dword [esp], 0x32
call fcn.00416040
sub esp, 4
jmp case.0x41ef98.6
call fcn.004438e0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 4], str.Software
lea ebx, [esp + 0x64]
mov dword [esp], ebx
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], 0x45a954
lea eax, [esp + 0x50]
mov dword [esp], eax
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], 0x45a954
lea eax, [esp + 0x74]
mov dword [esp], eax
call fcn.00443ca0
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.0043cea5
mov esi, eax
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], str._yyyy_mm_dd
call fcn.0043cca6
sub esp, 0xc
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x5c]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
mov dword [esp + 4], str.WindowsSystem32config_software
lea edx, [esp + 0x44]
mov dword [esp], edx
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], str.WindowsExplorer.exe
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], str.WindowsBranding_basebrd_basebrd.dll
lea esi, [esp + 0x78]
mov dword [esp], esi
call fcn.00443ca0
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x32
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov edi, eax
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00401890
sub esp, 8
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x54]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
mov dword [esp + 4], 0x45a954
lea eax, [esp + 0x40]
mov dword [esp], eax
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], 0x45a954
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], 0x45a954
lea eax, [esp + 0x68]
mov dword [esp], eax
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], 0x45a954
lea eax, [esp + 0x6c]
mov dword [esp], eax
call fcn.00443ca0
sub esp, 8
mov dword [esp + 0x70], 0
mov dword [esp + 4], 1
mov dword [esp], 0x2f
call fcn.004302ef
sub esp, 8
call fcn.00443980
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
lea edx, [esp + 0x44]
mov dword [esp], edx
call fcn.00443b80
sub esp, 8
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
mov ecx, eax
xor eax, eax
cmp eax, ecx
sbb eax, edx
jge 0x41fba3
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov dword [esp + 4], 3
mov dword [esp], 0x45a8d4
call fcn.00443e50
sub esp, 8
call fcn.00443ad0
mov edi, eax
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00401890
sub esp, 8
call fcn.00443ad0
mov edi, eax
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.004415a0
sub esp, 8
call fcn.00443b50
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.004415a0
sub esp, 8
call fcn.00443a80
mov edi, eax
call fcn.00443a80
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00443da0
test eax, eax
je 0x41fcd7
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], str.MicrosoftWindows_NTCurrentVersion
call fcn.00443c10
sub esp, 4
call fcn.00443b50
call fcn.00443ad0
mov ebx, eax
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x452c2c
mov dword [esp + 4], ebx
mov dword [esp], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x7c]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], str.MicrosoftWindows_NTCurrentVersion
call fcn.00443c10
sub esp, 4
call fcn.00443b50
call fcn.00443ad0
mov ebx, eax
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.CurrentBuild
mov dword [esp + 4], ebx
mov dword [esp], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], str.MicrosoftWindows_NTCurrentVersion
call fcn.00443c10
sub esp, 4
call fcn.00443b50
call fcn.00443ad0
mov ebx, eax
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.DisplayVersion
mov dword [esp + 4], ebx
mov dword [esp], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x4c]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], str.MicrosoftWindows_NTCurrentVersion
call fcn.00443c10
sub esp, 4
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 0x9c], eax
mov dword [esp + 0x90], 4
mov dword [esp + 0x94], 0x454508
call fcn.004438e0
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
lea eax, [esp + 0x9c]
mov dword [esp], eax
call fcn.00443d50
sub esp, 8
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
lea eax, [esp + 0x94]
mov dword [esp], eax
call fcn.00443d50
sub esp, 8
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 8
lea eax, [esp + 0x8c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x20019
mov dword [esp + 8], 0
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov dword [esp], reloc.OLEAUT32.dll_SysReAllocString
call sub.ADVAPI32.dll_RegOpenKeyExW
sub esp, 0x14
test eax, eax
je 0x41fd12
mov dword [esp + 0x84], 0
mov ebx, dword [esp + 0x84]
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x94]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
call fcn.00443a30
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.00440fa0
sub esp, 0xc
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x48]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
mov dword [esp], reloc.OLEAUT32.dll_SysReAllocString
call sub.ADVAPI32.dll_RegUnLoadKeyW
sub esp, 8
mov dword [esp + 0x70], eax
call fcn.00443980
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00443b80
sub esp, 8
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
mov ecx, eax
xor eax, eax
cmp eax, ecx
sbb eax, edx
jge 0x41fe8c
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 8], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov dword [esp], 0x168
call fcn.00415f30
sub esp, 0xc
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x40]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x457d64
mov dword [esp + 4], 1
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.004412a0
sub esp, 0x10
mov dword [esp], 0x457d64
call fcn.00443c10
sub esp, 4
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x457d64
mov dword [esp + 4], 2
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.004412a0
sub esp, 0x10
call fcn.004439d0
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x40]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
xor esi, esi
mov ebx, 1
xor edi, edi
jmp 0x41fde9
mov dword [esp + 4], str.8d1f9caf_afc1_4b55_a5ce_cfe03d0c7aff
mov dword [esp], ebx
call fcn.00443ca0
sub esp, 8
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
mov dword [esp], reloc.OLEAUT32.dll_SysReAllocString
call sub.ADVAPI32.dll_RegLoadKeyW
sub esp, 0xc
mov dword [esp + 0x70], eax
jmp 0x41f8a4
mov eax, dword [esp + 0x8c]
lea edx, [esp + 0x88]
mov dword [esp + 0x14], edx
lea edx, [esp + 0x84]
mov dword [esp + 0x10], edx
lea edx, [esp + 0x90]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0
mov edx, dword [esp + 0x94]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.ADVAPI32.dll_RegQueryValueExW
sub esp, 0x18
test eax, eax
je 0x41fd67
mov dword [esp + 0x84], 0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call sub.ADVAPI32.dll_RegCloseKey
sub esp, 4
jmp 0x41fb25
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x457d64
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.004412a0
sub esp, 0x10
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], edx
call fcn.00443a30
mov ecx, dword [esp + 0x2c]
cmp edi, ecx
mov eax, edi
mov edx, dword [esp + 0x28]
sbb eax, edx
mov eax, 1
cmovl esi, eax
add ebx, 1
mov dword [esp + 4], 0x457d64
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00441510
sub esp, 8
add eax, 1
cmp eax, ebx
mov eax, esi
jl 0x41fe84
test al, al
je 0x41fd80
call fcn.00443980
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457d64
call fcn.00443c10
sub esp, 4
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x457d64
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.004412a0
sub esp, 0x10
call fcn.004439d0
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x40]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
jmp 0x41fd80
test al, al
jne 0x420406
call fcn.00443980
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x60]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
mov ecx, 1
cmp ecx, eax
mov eax, 0
sbb eax, edx
jge 0x420043
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00416370
sub esp, 0x10
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x50]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x457b6c
mov dword [esp + 4], 1
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.004412a0
sub esp, 0x10
mov dword [esp], 0x457b6c
call fcn.00443c10
sub esp, 4
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x457b6c
mov dword [esp + 4], 2
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.004412a0
sub esp, 0x10
call fcn.004439d0
mov dword [esp], 0x457b6c
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457b6c
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x50]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
lea eax, [esp + 0x70]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call sub.KERNEL32.dll_GetBinaryTypeW
sub esp, 8
mov eax, dword [esp + 0x70]
test eax, eax
je 0x420437
cmp eax, 6
je 0x420453
mov dword [esp + 4], str.ARM64
lea eax, [esp + 0x74]
mov dword [esp], eax
call fcn.00443ca0
sub esp, 8
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00441fb0
sub esp, 4
test eax, eax
jle 0x42046f
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x45786c
mov dword [esp + 4], 0x457d64
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00441970
sub esp, 0x10
mov dword [esp], 0x45786c
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x45786c
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x45786c
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], str..wim
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
call fcn.00443980
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457d64
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457d64
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457d64
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x68]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
call fcn.00443980
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457d64
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457d64
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457d64
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457d64
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x6c]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x36
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov dword [esp + 0xc], 1
mov dword [esp + 8], 1
mov edx, dword [esp + 0x80]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00441c20
sub esp, 0x10
mov ebx, eax
call fcn.00443a30
test ebx, ebx
jle 0x42059b
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov dword [esp], 0x3a
call fcn.0043000b
sub esp, 8
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov dword [esp], 0x3c
call fcn.0043000b
sub esp, 8
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov dword [esp], 0x4a
call fcn.0043000b
sub esp, 8
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov dword [esp], 0x4b
call fcn.0043000b
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 0x2f
call fcn.004302ef
sub esp, 8
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x68]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
jmp case.0x41ef98.6
call fcn.00443980
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x7c]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
jmp 0x41fe8c
mov dword [esp + 4], 0x454584
lea eax, [esp + 0x74]
mov dword [esp], eax
call fcn.00443ca0
sub esp, 8
jmp 0x420043
mov dword [esp + 4], 0x454ec0
lea eax, [esp + 0x74]
mov dword [esp], eax
call fcn.00443ca0
sub esp, 8
jmp 0x420043
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x45786c
mov dword [esp + 4], 0x457d64
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00441970
sub esp, 0x10
mov dword [esp], 0x45786c
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x45786c
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], str..wim
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
call fcn.00443980
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457d64
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457d64
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457d64
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x68]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
call fcn.00443980
mov eax, dword [esp + 0x68]
jmp 0x420217
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
mov dword [esp], 0x36
call fcn.0043000b
sub esp, 8
jmp 0x42029b
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x36
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov dword [esp], eax
call fcn.004055c0
sub esp, 4
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.004438e0
mov dword [esp + 0x9c], 0
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.WimScript.iniWimScript.ini
mov dword [esp + 4], str.WimScript.ini
mov dword [esp], 0x45322c
call fcn.0042cc07
sub esp, 0x14
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x9c]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov dword [esp], 0x38
call fcn.0040e4f0
sub esp, 8
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
jmp case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
jne case.0x41ef98.6
call fcn.00414f50
jmp case.0x41ef98.6
mov dword [esp + 4], str.WinDirs
mov dword [esp], 0x32
call fcn.00416d60
sub esp, 8
mov dword [esp + 8], 1
mov dword [esp + 4], 0xa
mov dword [esp], 0x36
call fcn.004048d0
sub esp, 0xc
call fcn.0043bdec
mov dword [esp + 8], eax
mov dword [esp + 4], 3
mov dword [esp], 0x333c
call fcn.0043bd53
sub esp, 0xc
jmp case.0x41ef98.6
call fcn.0043bdec
cmp eax, 0x300
jne case.0x41ef98.6
call fcn.0043bdfb
mov ebx, eax
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0040e4f0
sub esp, 8
mov esi, eax
call fcn.00443a30
mov eax, esi
test al, al
jne 0x42078d
mov dword [esp], ebx
call fcn.0043019a
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0043041b
sub esp, 8
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], 0x51
call fcn.0043000b
sub esp, 8
call fcn.00443a30
jmp case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
jne case.0x41ef98.6
call fcn.00414080
jmp case.0x41ef98.6
call fcn.0043bdec
test eax, eax
jne case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x51
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], 0x53
call fcn.0043000b
sub esp, 8
call fcn.00443a30
jmp case.0x41ef98.6
mov dword [esp + 4], str.WinDirs
mov dword [esp], 0x53
call fcn.00416d60
sub esp, 8
call fcn.0043bdec
mov dword [esp + 8], eax
mov dword [esp + 4], 0xf
mov dword [esp], 0x333c
call fcn.0043bd53
sub esp, 0xc
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov dword [esp], 0x12
call fcn.004394c8
sub esp, 4
mov ebx, eax
call fcn.004439d0
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], 0x1c2
mov dword [esp + 0x10], 0x320
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov dword [esp], ebx
call fcn.00417580
sub esp, 0x1c
call fcn.00443ad0
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.00403d70
sub esp, 8
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov dword [esp], 0x12
call fcn.004394c8
sub esp, 4
mov ebx, eax
call fcn.004439d0
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], 0x1c2
mov dword [esp + 0x10], 0x320
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00417580
sub esp, 0x1c
call fcn.00443ad0
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00403d70
sub esp, 8
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.004438e0
mov dword [esp + 0x9c], 0
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x94
call fcn.00430240
sub esp, 0x10
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x9c]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
xor eax, 0xfffffffe
not edx
or eax, edx
je 0x420a1b
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
jmp case.0x41ef98.6
mov dword [esp + 4], 1
mov dword [esp], 0x8a
call fcn.004302ef
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0xab
call fcn.004302ef
sub esp, 8
mov dword [esp + 4], 0x455700
mov dword [esp], 0xae
call fcn.0043000b
sub esp, 8
mov dword [esp], 0x18
call fcn.004434e0
sub esp, 4
mov ebx, eax
mov dword [eax + 4], 0x12
mov dword [eax], 0x15
call fcn.00443980
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [ebx + 0x10]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp], 0x425b90
call fcn.0042c218
sub esp, 8
mov dword [0x45a7dc], eax
jmp 0x420a04
xor ebx, ebx
jmp 0x420af6
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x45a954
mov dword [esp + 4], 0
mov dword [esp], 0x95
call fcn.004301c7
sub esp, 0x10
add ebx, 1
mov dword [esp + 4], 3
mov dword [esp], 0x95
call fcn.00436799
sub esp, 8
cmp ebx, eax
jl 0x420ad0
mov ebx, 1
jmp 0x420b46
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x45a954
mov dword [esp + 4], 1
mov dword [esp], 0x9c
call fcn.004301c7
sub esp, 0x10
add ebx, 1
mov dword [esp + 4], 3
mov dword [esp], 0x9c
call fcn.00436799
sub esp, 8
sub eax, 1
cmp eax, ebx
jg 0x420b20
mov dword [esp + 4], 0
mov dword [esp], 0xa9
call fcn.0042fd99
sub esp, 8
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], 0x9c
call fcn.004367ca
sub esp, 0xc
mov dword [esp + 4], 0x45a954
mov dword [esp], 0xa3
call fcn.0043000b
sub esp, 8
jmp case.0x41ef98.6
mov dword [esp], 0x45a954
call fcn.004105e0
sub esp, 4
jmp case.0x41ef98.6
mov dword [esp], 0x45a954
call fcn.00410220
sub esp, 4
jmp case.0x41ef98.6
mov dword [esp + 4], 0x45a954
mov dword [esp], 0x45a954
call fcn.0040e790
sub esp, 8
jmp case.0x41ef98.6
call fcn.0043bdec
cmp eax, 0x300
jne case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x92
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], 0x92
call fcn.0040e4f0
sub esp, 8
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.00413cb0
jmp case.0x41ef98.6
cmp byte [0x45a860], 2
jle 0x420ca7
mov dword [esp + 4], str.DriverDirs
mov dword [esp], 0x92
call fcn.00416d60
sub esp, 8
call fcn.0043bdec
mov dword [esp + 8], eax
mov dword [esp + 4], 0x12
mov dword [esp], 0x333c
call fcn.0043bd53
sub esp, 0xc
jmp case.0x41ef98.6
mov byte [0x45a860], 3
mov dword [esp + 4], 8
mov dword [esp], 0
call fcn.004399f0
sub esp, 8
mov dword [esp + 0x10], 0x12
mov dword [esp + 0xc], 0x40000
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0
mov dword [esp], 0x10001
call fcn.0043bd85
sub esp, 0x14
mov dword [esp + 0x24], 0
jmp case.0x41ef98.6
call fcn.0043bdec
cmp eax, 0x300
jne case.0x41ef98.6
call fcn.0043bdfb
mov ebx, eax
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0040e4f0
sub esp, 8
mov esi, eax
call fcn.00443a30
mov eax, esi
test al, al
jne 0x420d80
mov dword [esp], ebx
call fcn.0043019a
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0043041b
sub esp, 8
jmp case.0x41ef98.6
mov dword [esp + 4], 0
mov dword [esp], 0x72
call fcn.0042fd99
sub esp, 8
call fcn.004057b0
jmp case.0x41ef98.6
mov dword [esp], 0xc
call fcn.004394c8
sub esp, 4
mov ebx, eax
mov dword [esp + 0x98], 0x45a954
call fcn.004438e0
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
lea eax, [esp + 0x98]
mov dword [esp], eax
call fcn.00443d50
sub esp, 8
mov dword [esp + 0x9c], 0
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x452bb0
mov dword [esp], ebx
call fcn.00408990
sub esp, 0x10
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x9c]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov dword [esp], 0x6f
call fcn.0040e4f0
sub esp, 8
test al, al
jne 0x420e7d
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x98]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
jmp case.0x41ef98.6
mov dword [esp + 4], 0
mov dword [esp], 0x72
call fcn.0042fd99
sub esp, 8
call fcn.004057b0
jmp 0x420e54
call fcn.004057b0
jmp case.0x41ef98.6
mov dword [esp], 0x45a954
call fcn.00409160
sub esp, 4
jmp case.0x41ef98.6
mov dword [esp], 0x45a954
call fcn.004094a0
sub esp, 4
jmp case.0x41ef98.6
mov dword [esp], 0x72
call fcn.0043019a
sub esp, 4
test eax, eax
jne 0x420efc
mov dword [esp + 4], 0x45a954
mov dword [esp], 0x6f
call fcn.0043000b
sub esp, 8
jmp case.0x41ef98.6
mov dword [esp + 4], str.DISM_53BFAE52_B167_4E2F_A258_0A37B57FF845
mov dword [esp], 0x6f
call fcn.0043000b
sub esp, 8
jmp case.0x41ef98.6
mov dword [esp + 4], str.WinDirs
mov dword [esp], 0x6f
call fcn.00416d60
sub esp, 8
call fcn.0043bdec
mov dword [esp + 8], eax
mov dword [esp + 4], 0xc
mov dword [esp], 0x333c
call fcn.0043bd53
sub esp, 0xc
jmp case.0x41ef98.6
call fcn.0043bdec
cmp eax, 0x300
jne case.0x41ef98.6
call fcn.0043bdfb
mov ebx, eax
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0040e4f0
sub esp, 8
mov esi, eax
call fcn.00443a30
mov eax, esi
test al, al
jne 0x420fd3
mov dword [esp], ebx
call fcn.0043019a
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0043041b
sub esp, 8
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], 0x5f
call fcn.0043000b
sub esp, 8
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.0043bdec
test eax, eax
jne case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x5f
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], 0x61
call fcn.0043000b
sub esp, 8
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.0041da80
jmp case.0x41ef98.6
call fcn.004438e0
mov dword [esp + 4], 0x14
mov dword [esp], 0x454bd4
call fcn.0040fb50
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0x5a
call fcn.004302ef
sub esp, 8
mov dword [esp + 4], 0x455700
mov dword [esp], 0x6d
call fcn.0043000b
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 0x41df30
call fcn.0042c218
sub esp, 8
mov dword [0x45a7dc], eax
jmp case.0x41ef98.6
call fcn.004438e0
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x61
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
mov esi, eax
mov edi, edx
call fcn.00443a30
mov eax, esi
mov edx, edi
xor eax, 0xfffffffe
not edx
or eax, edx
jne case.0x41ef98.6
call fcn.00443980
call fcn.00443980
mov dword [esp], 0x452bdc
call fcn.00443c10
sub esp, 4
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x61
call fcn.0042ffa3
sub esp, 8
call fcn.004439d0
call fcn.00443ad0
mov dword [esp + 4], 0x14
mov dword [esp], eax
call fcn.0040fb50
sub esp, 8
call fcn.00443a30
mov dword [esp + 4], 1
mov dword [esp], 0x5a
call fcn.004302ef
sub esp, 8
mov dword [esp + 4], 0x455700
mov dword [esp], 0x6d
call fcn.0043000b
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x61
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], 0x61
call fcn.0040e4f0
sub esp, 8
call fcn.00443a30
mov dword [esp + 4], 1
mov dword [esp], 0x41e170
call fcn.0042c218
sub esp, 8
mov dword [0x45a7dc], eax
jmp case.0x41ef98.6
call fcn.00415cc0
jmp case.0x41ef98.6
call fcn.004438e0
mov dword [esp + 0x9c], 0
call fcn.00443980
call fcn.00443980
mov dword [esp], 0x67
call fcn.0043019a
sub esp, 4
mov ebx, eax
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 3
mov dword [esp + 4], ebx
mov dword [esp], 0x67
call fcn.00430240
sub esp, 0x10
call fcn.004439d0
mov dword [esp + 4], eax
lea ebx, [esp + 0x9c]
mov dword [esp], ebx
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00401890
sub esp, 8
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00443b80
sub esp, 8
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
xor eax, 0xfffffffe
not edx
or eax, edx
je 0x421317
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
mov dword [esp], 0x452bdc
call fcn.00443c10
sub esp, 4
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.00443ad0
mov dword [esp + 4], 0x14
mov dword [esp], eax
call fcn.0040fb50
sub esp, 8
call fcn.00443a30
mov dword [esp + 4], 1
mov dword [esp], 0x5a
call fcn.004302ef
sub esp, 8
mov dword [esp + 4], 0x455700
mov dword [esp], 0x6d
call fcn.0043000b
sub esp, 8
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov dword [esp], 0x61
call fcn.0040e4f0
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 0x41e170
call fcn.0042c218
sub esp, 8
mov dword [0x45a7dc], eax
jmp 0x421300
mov dword [esp + 4], str.WinDirs
mov dword [esp], 0x61
call fcn.00416d60
sub esp, 8
call fcn.0043bdec
mov dword [esp + 8], eax
mov dword [esp + 4], 4
mov dword [esp], 0x333c
call fcn.0043bd53
sub esp, 0xc
jmp case.0x41ef98.6
mov dword [esp], 0x67
call fcn.0043019a
sub esp, 4
test eax, eax
js case.0x41ef98.6
mov dword [esp], 0x67
call fcn.0043019a
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], 0x67
call fcn.00430337
sub esp, 8
mov dword [esp], 0x6b
test ah, 1
jne 0x421469
call fcn.0042fd7d
sub esp, 4
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.USER32.dll_EnableWindow
sub esp, 8
jmp case.0x41ef98.6
call fcn.0042fd7d
sub esp, 4
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.USER32.dll_EnableWindow
sub esp, 8
jmp case.0x41ef98.6
call fcn.00418b70
test al, al
jne 0x4214b7
call fcn.0043bdec
mov dword [esp + 8], eax
mov dword [esp + 4], 1
mov dword [esp], 0x333c
call fcn.0043bd53
sub esp, 0xc
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov dword [esp + 8], str.WIM_files__.wim__.esd__.iso_.wim__.esd__.iso
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0041a1f0
sub esp, 0xc
call fcn.00443a30
jmp 0x421492
call fcn.0043bdec
mov dword [esp + 8], eax
mov dword [esp + 4], 1
mov dword [esp], 0x333c
call fcn.0043bd53
sub esp, 0xc
jmp case.0x41ef98.6
call fcn.0043bdec
cmp eax, 0x300
jne case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov dword [esp + 8], str.WIM_files__.wim__.esd__.iso_.wim__.esd__.iso
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0041a1f0
sub esp, 0xc
mov ebx, eax
call fcn.00443a30
test bl, bl
jne case.0x41ef98.6
mov dword [esp], 0xa
call fcn.0043019a
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.0043041b
sub esp, 8
mov dword [esp], 7
call fcn.004300f6
sub esp, 4
jmp case.0x41ef98.6
call fcn.0043bdec
cmp eax, 0x300
je 0x421618
cmp eax, 2
je 0x4216d5
cmp eax, 1
jne case.0x41ef98.6
mov dword [esp], 7
call fcn.0043019a
sub esp, 4
test eax, eax
js case.0x41ef98.6
mov eax, dword [0x45a7ac]
mov dword [esp + 4], eax
mov dword [esp], 2
call fcn.0042e531
sub esp, 8
jmp case.0x41ef98.6
mov dword [esp], 0xf
call fcn.00439a12
sub esp, 4
test eax, eax
jne 0x421668
mov dword [esp], 0x12
call fcn.00439a12
push ebx
test eax, eax
je 0x421694
mov dword [esp + 0xc], 0x8d
mov dword [esp + 8], 0x8e
mov dword [esp + 4], 0x8c
mov dword [esp], 7
call fcn.0040c1f0
sub esp, 0x10
jmp case.0x41ef98.6
mov dword [esp + 0xc], 0x50
mov dword [esp + 8], 0x4f
mov dword [esp + 4], 0x4e
mov dword [esp], 7
call fcn.0040c1f0
sub esp, 0x10
jmp case.0x41ef98.6
mov dword [esp], 4
call fcn.00439a12
push ecx
test eax, eax
je case.0x41ef98.6
mov dword [esp + 0xc], 0x5e
mov dword [esp + 8], 0x5d
mov dword [esp + 4], 0x5c
mov dword [esp], 7
call fcn.0040c1f0
sub esp, 0x10
jmp case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
je 0x4216f0
mov byte [0x45a915], 1
mov dword [esp], 7
call fcn.0043019a
sub esp, 4
test eax, eax
js case.0x41ef98.6
mov dword [esp + 4], 1
xor eax, eax
mov dword [esp], eax
call fcn.004097e0
push edx
push edx
jmp case.0x41ef98.6
call fcn.0043bdec
cmp eax, 2
jne case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
je 0x421749
mov byte [0x45a915], 1
mov dword [esp], 8
call fcn.0043019a
sub esp, 4
test eax, eax
js case.0x41ef98.6
mov dword [esp + 4], 1
mov dword [esp], 0
call fcn.004097e0
sub esp, 8
jmp case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
je 0x421797
mov byte [0x45a915], 1
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004097e0
sub esp, 8
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x20
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0x21
call fcn.00402710
sub esp, 0xc
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x24
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov ebx, eax
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x20
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
mov esi, dword [0x45a7ac]
call fcn.00443ad0
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.004031e0
sub esp, 0xc
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x24
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov ebx, eax
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x20
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
mov esi, dword [0x45a7ac]
call fcn.00443ad0
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.004031e0
sub esp, 0xc
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x21
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], 0x20
call fcn.0043000b
sub esp, 8
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x24
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov ebx, eax
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x20
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
mov esi, dword [0x45a7ac]
call fcn.00443ad0
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.004031e0
sub esp, 0xc
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.00406790
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x20
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.FontName
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x24
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.FontSize
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00443a30
call fcn.0043bdec
mov dword [esp + 8], eax
mov dword [esp + 4], 5
mov dword [esp], 0x333c
call fcn.0043bd53
sub esp, 0xc
jmp case.0x41ef98.6
mov dword [esp + 0xc], str.libwim_.dll
mov dword [esp + 8], 0x45a954
mov dword [esp + 4], str.x64_Wimlib
mov dword [esp], 0x7d
call fcn.00409ad0
sub esp, 0x10
jmp case.0x41ef98.6
mov dword [esp + 0xc], str.libwim_.dll
mov dword [esp + 8], 0x45a954
mov dword [esp + 4], str.x86_Wimlib
mov dword [esp], 0x7e
call fcn.00409ad0
sub esp, 0x10
jmp case.0x41ef98.6
mov dword [esp + 4], 0x45a954
mov dword [esp], 0x45a954
call fcn.0040ea40
sub esp, 8
jmp case.0x41ef98.6
call fcn.0043bdec
cmp eax, 0x300
jne case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], pe_nt_image_headers32
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov dword [esp + 4], 0x45a954
mov dword [esp], eax
call fcn.0040ea40
sub esp, 8
call fcn.00443a30
jmp case.0x41ef98.6
mov dword [esp], 0
call fcn.0040e2f0
sub esp, 4
jmp case.0x41ef98.6
mov dword [esp], 0x84
call fcn.0043019a
sub esp, 4
mov ebx, eax
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.00440fa0
sub esp, 0xc
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], 0x83
call fcn.0043000b
sub esp, 8
call fcn.00443a30
call fcn.00403310
jmp case.0x41ef98.6
mov dword [esp], 1
call fcn.0040e2f0
sub esp, 4
jmp case.0x41ef98.6
mov dword [esp + 4], str.PictureFiles
mov dword [esp], pe_nt_image_headers32
call fcn.00416d60
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x83
call fcn.0042ffa3
sub esp, 8
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.Transparent
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x7d
call fcn.0042ffa3
sub esp, 8
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00401970
sub esp, 8
call fcn.00443ad0
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
mov esi, eax
mov ebx, edx
call fcn.00443a30
xor eax, eax
cmp eax, esi
sbb eax, ebx
jge 0x421d75
mov dword [esp + 0x10], 1
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.Wimlib_x64
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x7e
call fcn.0042ffa3
sub esp, 8
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00401970
sub esp, 8
call fcn.00443ad0
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
mov esi, eax
mov ebx, edx
call fcn.00443a30
xor eax, eax
cmp eax, esi
sbb eax, ebx
jge 0x421e22
mov dword [esp + 0x10], 1
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.Wimlib_x86
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00416f10
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004046e0
sub esp, 8
call fcn.0043bdec
mov dword [esp + 8], eax
mov dword [esp + 4], 6
mov dword [esp], 0x333c
call fcn.0043bd53
sub esp, 0xc
jmp case.0x41ef98.6
call fcn.0043be0a
mov dword [esp + 8], 0
mov dword [esp + 4], 0x10000
mov dword [esp], eax
call fcn.0041c1e0
sub esp, 0xc
jmp case.0x41ef98.6
call fcn.0043be0a
mov dword [esp + 8], 0
mov dword [esp + 4], 0x10001
mov dword [esp], eax
call fcn.0041c1e0
sub esp, 0xc
jmp case.0x41ef98.6
call fcn.0043be0a
mov dword [esp + 8], 1
mov dword [esp + 4], 0x10001
mov dword [esp], eax
call fcn.0041c1e0
sub esp, 0xc
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp], eax
call fcn.00443940
sub esp, 4
call fcn.004438e0
mov dword [esp + 0x9c], 0
mov dword [esp + 4], 0x45a954
lea edi, [esp + 0x9c]
mov dword [esp], edi
call fcn.00443ca0
sub esp, 8
call fcn.00439a24
mov ebx, eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call sub.SHELL32.dll_DragQueryFileW
sub esp, 0x10
test eax, eax
jle 0x421fd3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebx
call sub.SHELL32.dll_DragQueryFileW
sub esp, 0x10
mov esi, eax
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00440f50
sub esp, 8
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00443b80
sub esp, 8
add esi, 1
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x9c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], ebx
call sub.SHELL32.dll_DragQueryFileW
sub esp, 0x10
mov dword [esp], ebx
call sub.SHELL32.dll_DragFinish
sub esp, 4
call fcn.00443980
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.00443ad0
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
call fcn.00443ad0
mov dword [esp + 8], str.WIM_files__.wim__.esd__.iso_.wim__.esd__.iso
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0041a1f0
sub esp, 0xc
call fcn.00443a30
jmp case.0x41ef98.6
call fcn.0043be19
test eax, eax
je 0x422060
cmp eax, 0x13
ja case.0x41ef98.6
jmp dword [eax*4 + 0x446520]
mov dword [esp], 3
call fcn.00402e10
sub esp, 4
mov dword [esp], 0xe
call fcn.0043031a
sub esp, 4
test eax, eax
jle 0x42208c
call fcn.00406b50
jmp case.0x41ef98.6
mov dword [esp + 4], 1
mov dword [esp], 0xe
call fcn.00430399
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 0x406dd0
call fcn.0042c218
sub esp, 8
mov dword [0x45a7dc], eax
jmp case.0x41ef98.6
mov dword [esp + 8], str.WIM_files__.wim__.esd__.iso_.wim__.esd__.iso
mov dword [esp + 4], 0
mov dword [esp], 0x45a954
call fcn.0041a1f0
sub esp, 0xc
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.0042ffa3
sub esp, 8
call fcn.00443ad0
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
mov esi, eax
mov ebx, edx
call fcn.00443a30
xor eax, eax
cmp eax, esi
sbb eax, ebx
jge case.0x41ef98.6
call fcn.00419be0
jmp case.0x41ef98.6
mov dword [esp], 7
call fcn.0043019a
sub esp, 4
test eax, eax
js case.0x41ef98.6
mov dword [esp + 4], 0
mov eax, dword [0x45a7ac]
mov dword [esp], eax
call sub.USER32.dll_EnableWindow
sub esp, 8
mov dword [esp + 0xc], 0x226
mov dword [esp + 8], 0x2d0
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0040dac0
sub esp, 0x10
call fcn.004184b0
jmp case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
je 0x4221be
mov byte [0x45a915], 1
jmp case.0x41ef98.6
mov dword [esp], 7
call fcn.0043019a
sub esp, 4
test eax, eax
js case.0x41ef98.6
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004046e0
sub esp, 8
mov dword [esp + 0xc], 0x118
mov dword [esp + 8], 0x2fd
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.00409c70
sub esp, 0x10
call fcn.0041c850
jmp case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
je 0x42223d
mov byte [0x45a915], 1
jmp case.0x41ef98.6
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004046e0
sub esp, 8
mov dword [esp + 0xc], 0x258
mov dword [esp + 8], 0x2fd
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0040ee60
sub esp, 0x10
jmp case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
je 0x4222a0
mov byte [0x45a915], 1
jmp case.0x41ef98.6
mov dword [esp], 7
call fcn.0043019a
sub esp, 4
test eax, eax
js case.0x41ef98.6
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004046e0
sub esp, 8
mov dword [esp + 0xc], 0x1f4
mov dword [esp + 8], 0x2fd
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0040a1e0
sub esp, 0x10
mov dword [esp + 0xc], 0x50
mov dword [esp + 8], 0x4f
mov dword [esp + 4], 0x4e
mov dword [esp], 7
call fcn.0040c1f0
sub esp, 0x10
jmp case.0x41ef98.6
mov eax, dword [0x45a7dc]
mov dword [esp], eax
call fcn.0042c1a9
sub esp, 4
test eax, eax
je 0x422341
mov byte [0x45a915], 1
jmp case.0x41ef98.6
mov dword [esp], 7
call fcn.0043019a
sub esp, 4
test eax, eax
js case.0x41ef98.6
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004046e0
sub esp, 8
call fcn.00443980
call fcn.00443980
mov ebx, dword [0x45a7ac]
call fcn.004439d0
mov dword [esp], eax
call fcn.00443940
sub esp, 4
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], 6
mov dword [esp + 0x14], 0x4524a0
mov dword [esp + 0x10], 0x235
mov dword [esp + 0xc], 0x30c
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x12
call fcn.00439507
sub esp, 0x20
mov dword [esp + 0x10], 0x19f
mov dword [esp + 0xc], 0x30c
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x8a
call fcn.004330d7
sub esp, 0x14
mov dword [esp + 0x14], 0x452308
mov dword [esp + 0x10], 0xb9
mov dword [esp + 0xc], 0x302
mov dword [esp + 8], 5
mov dword [esp + 4], 5
mov dword [esp], 0x8f
call fcn.00433f3a
sub esp, 0x18
mov dword [esp + 0x18], 1
mov dword [esp + 0x14], 0x454ca4
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x64
mov dword [esp + 8], 0x19
mov dword [esp + 4], 0xa
mov dword [esp], 0x8b
call fcn.00433c13
sub esp, 0x1c
mov dword [esp + 0x18], 0x801
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x28
mov dword [esp + 8], 0x19
mov dword [esp + 4], 0x73
mov dword [esp], 0x8c
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x18], 0x800
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x21c
mov dword [esp + 8], 0x19
mov dword [esp + 4], 0xa0
mov dword [esp], 0x8e
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x18], 0x801
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x41
mov dword [esp + 8], 0x19
mov dword [esp + 4], 0x2c1
mov dword [esp], 0x8d
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x28f
mov dword [esp + 8], 0x32
mov dword [esp + 4], 0x73
mov dword [esp], 0x90
call fcn.00433701
sub esp, 0x18
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x28f
mov dword [esp + 8], 0x4b
mov dword [esp + 4], 0x73
mov dword [esp], 0x91
call fcn.00433701
sub esp, 0x18
mov dword [esp + 0x14], 0x42
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x28f
mov dword [esp + 8], 0x64
mov dword [esp + 4], 0x73
mov dword [esp], 0x92
call fcn.004325c7
sub esp, 0x18
mov dword [esp + 0x14], 0x45754c
mov dword [esp + 0x10], 0x50
mov dword [esp + 0xc], 0x302
mov dword [esp + 8], 0xc3
mov dword [esp + 4], 5
mov dword [esp], 0x93
call fcn.00433f3a
sub esp, 0x18
mov dword [esp + 0x1c], 0x16000
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], str.Column_1
mov dword [esp + 0x10], 0x19
mov dword [esp + 0xc], 0x2f8
mov dword [esp + 8], 0x9b
mov dword [esp + 4], 0xa
mov dword [esp], 0x94
call fcn.004349cb
sub esp, 0x20
mov dword [esp + 0x1c], 0x16000
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], str.Column_1
mov dword [esp + 0x10], 0x19
mov dword [esp + 0xc], 0x2f8
mov dword [esp + 8], 0xf0
mov dword [esp + 4], 0xa
mov dword [esp], 0x95
call fcn.004349cb
sub esp, 0x20
mov dword [esp + 0x14], 0x4542ac
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x64
mov dword [esp + 8], 0x82
mov dword [esp + 4], 0xa
mov dword [esp], 0x96
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], 0x452384
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x64
mov dword [esp + 8], 0x32
mov dword [esp + 4], 0xa
mov dword [esp], 0x97
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], 0x45257c
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x64
mov dword [esp + 8], 0x4b
mov dword [esp + 4], 0xa
mov dword [esp], 0x98
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], str.Driver
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x64
mov dword [esp + 8], 0x64
mov dword [esp + 4], 0xa
mov dword [esp], 0x99
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], 0x4527d4
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x64
mov dword [esp + 8], 0xd7
mov dword [esp + 4], 0xa
mov dword [esp], 0x9a
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], 0x45463c
mov dword [esp + 0x10], 0x7d
mov dword [esp + 0xc], 0x302
mov dword [esp + 8], 0x11d
mov dword [esp + 4], 5
mov dword [esp], 0x9b
call fcn.00433f3a
sub esp, 0x18
mov dword [esp + 0x1c], 0x12001
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], str.Column_1
mov dword [esp + 0x10], 0x46
mov dword [esp + 0xc], 0x2f8
mov dword [esp + 8], 0x14a
mov dword [esp + 4], 0xa
mov dword [esp], 0x9c
call fcn.004349cb
sub esp, 0x20
mov dword [esp + 0x14], 0x453204
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x69
mov dword [esp + 8], 0x131
mov dword [esp + 4], 0xa
mov dword [esp], 0x9d
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x18], 2
mov dword [esp + 0x14], 0x454a74
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x69
mov dword [esp + 8], 0x82
mov dword [esp + 4], 0x73
mov dword [esp], 0x9e
call fcn.00433c13
sub esp, 0x1c
mov dword [esp + 0x18], 0x800
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x73
mov dword [esp + 8], 0x82
mov dword [esp + 4], 0xe1
mov dword [esp], 0x9f
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x14], str.Verify
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x64
mov dword [esp + 8], 0x82
mov dword [esp + 4], 0x1f9
mov dword [esp], 0xa0
call fcn.00433367
sub esp, 0x18
mov dword [esp + 0x14], str.Wimlib
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x69
mov dword [esp + 8], 0x82
mov dword [esp + 4], 0x299
mov dword [esp], 0xa1
call fcn.00433367
sub esp, 0x18
mov dword [esp + 0x18], 2
mov dword [esp + 0x14], 0x454a74
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x69
mov dword [esp + 8], 0xd7
mov dword [esp + 4], 0x73
mov dword [esp], 0xa2
call fcn.00433c13
sub esp, 0x1c
mov dword [esp + 0x18], 0x800
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x73
mov dword [esp + 8], 0xd7
mov dword [esp + 4], 0xe1
mov dword [esp], 0xa3
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x73
mov dword [esp + 8], 0x82
mov dword [esp + 4], 0x15e
mov dword [esp], 0xa4
call fcn.00432817
sub esp, 0x14
mov dword [esp + 0x14], 0x457bb8
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x14
mov dword [esp + 8], 0xd7
mov dword [esp + 4], 0x2ee
mov dword [esp], 0xa5
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], 0x457d54
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x50
mov dword [esp + 8], 0xd7
mov dword [esp + 4], 0x299
mov dword [esp], 0xa6
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], 0x457b20
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x96
mov dword [esp + 8], 0xd7
mov dword [esp + 4], 0x1f9
mov dword [esp], 0xa7
call fcn.00433367
sub esp, 0x18
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x46
mov dword [esp + 8], 0xd7
mov dword [esp + 4], 0x15e
mov dword [esp], 0xa8
call fcn.00432817
sub esp, 0x14
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x46
mov dword [esp + 8], 0xd7
mov dword [esp + 4], 0x1a9
mov dword [esp], 0xa9
call fcn.00432817
sub esp, 0x14
call fcn.004333c6
mov dword [esp + 0x18], 0x200844
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x69
mov dword [esp + 0xc], 0x280
mov dword [esp + 8], 0x1ae
mov dword [esp + 4], 0xa
mov dword [esp], 0x14
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x14], 0x4575cc
mov dword [esp + 0x10], 0x73
mov dword [esp + 0xc], 0x78
mov dword [esp + 8], 0x1a4
mov dword [esp + 4], 0x28f
mov dword [esp], 0xaa
call fcn.00433f3a
sub esp, 0x18
mov dword [esp + 0x14], 0x454e28
mov dword [esp + 0x10], 0x19
mov dword [esp + 0xc], 0x6e
mov dword [esp + 8], 0x1b8
mov dword [esp + 4], 0x294
mov dword [esp], 0xab
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x18], 1
mov dword [esp + 0x14], 0x45294c
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x6e
mov dword [esp + 8], 0x1e0
mov dword [esp + 4], 0x294
mov dword [esp], 0xac
call fcn.00433c13
sub esp, 0x1c
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x6e
mov dword [esp + 8], 0x1f9
mov dword [esp + 4], 0x294
mov dword [esp], 0xad
call fcn.00432817
sub esp, 0x14
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0xc8
mov dword [esp + 8], 0x21c
mov dword [esp + 4], 0xa
mov dword [esp], 0x15
call fcn.00433865
sub esp, 0x1c
mov dword [esp + 0x18], 0x800
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x32
mov dword [esp + 8], 0x21c
mov dword [esp + 4], 0xd7
mov dword [esp], 0x16
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x18], 0x800
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0xcd
mov dword [esp + 8], 0x21c
mov dword [esp + 4], 0x10e
mov dword [esp], 0x17
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x18], 0x800
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0xaa
mov dword [esp + 8], 0x21c
mov dword [esp + 4], 0x1e0
mov dword [esp], 0x18
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x14], 0x452300
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x6e
mov dword [esp + 8], 0x21c
mov dword [esp + 4], 0x294
mov dword [esp], 0xae
call fcn.00432db0
sub esp, 0x18
call fcn.00443980
mov dword [esp], 0x4460ac
call fcn.00443c10
sub esp, 4
call fcn.00443ad0
call fcn.00443a30
call fcn.00417aa0
jmp case.0x41ef98.6
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004046e0
sub esp, 8
mov dword [esp + 0xc], 0x258
mov dword [esp + 8], 0x2fd
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0040a7c0
sub esp, 0x10
mov dword [esp], 7
call fcn.0043019a
sub esp, 4
test eax, eax
js 0x422df5
mov dword [esp + 0xc], 0x5e
mov dword [esp + 8], 0x5d
mov dword [esp + 4], 0x5c
mov dword [esp], 7
call fcn.0040c1f0
sub esp, 0x10
mov dword [esp], 0xa
call fcn.0043031a
sub esp, 4
test al, 1
jne 0x422e12
call fcn.0041da80
jmp case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 4
call fcn.00439a33
sub esp, 8
mov dword [esp], 0x4541bc
call fcn.00443c10
sub esp, 4
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], 4
call fcn.004399c7
sub esp, 8
call fcn.00443a30
mov dword [esp + 4], 0
mov dword [esp], 0x63
call fcn.0042fd99
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0x63
call fcn.004302ef
sub esp, 8
jmp 0x422e08
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004046e0
sub esp, 8
call fcn.004438e0
mov eax, dword [0x45a7ac]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], 0x80cd0002
mov dword [esp + 0x14], str.Dism_Driver
mov dword [esp + 0x10], 0x258
mov dword [esp + 0xc], 0x2fd
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0xc
call fcn.00439507
sub esp, 0x20
mov dword [esp + 0x10], 0x35
mov dword [esp + 0xc], 0x2fd
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x6e
call fcn.004330d7
sub esp, 0x14
mov dword [esp + 0x14], 0x453210
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x64
mov dword [esp + 8], 5
mov dword [esp + 4], 5
mov dword [esp], 0x71
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], 0x4578b0
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x5f
mov dword [esp + 8], 5
mov dword [esp + 4], 0x13b
mov dword [esp], 0x74
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], 0x452ec0
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x5f
mov dword [esp + 8], 5
mov dword [esp + 4], 0x1a4
mov dword [esp], 0x75
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], str.OnLine
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x5a
mov dword [esp + 8], 5
mov dword [esp + 4], 0x73
mov dword [esp], 0x72
call fcn.00433367
sub esp, 0x18
mov dword [esp + 4], 1
mov dword [esp], 0x72
call fcn.0042fd99
sub esp, 8
mov dword [esp + 0x14], 0x454a60
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x5a
mov dword [esp + 8], 5
mov dword [esp + 4], 0xd2
mov dword [esp], 0x73
call fcn.00433367
sub esp, 0x18
mov dword [esp + 4], 1
mov dword [esp], 0x73
call fcn.0042fd99
sub esp, 8
mov dword [esp + 0x14], 0x453f84
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x5f
mov dword [esp + 8], 5
mov dword [esp + 4], 0x20d
mov dword [esp], 0x76
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], 0x42
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x2f3
mov dword [esp + 8], 0x1e
mov dword [esp + 4], 5
mov dword [esp], 0x6f
call fcn.004325c7
sub esp, 0x18
call fcn.004333c6
mov dword [esp + 0x1c], 0x40010008
mov dword [esp + 0x18], 0x15e
mov dword [esp + 0x14], 0x453fa0
mov dword [esp + 0x10], 0x198
mov dword [esp + 0xc], 0x2f3
mov dword [esp + 8], 0x37
mov dword [esp + 4], 5
mov dword [esp], 0x70
call fcn.004349cb
sub esp, 0x20
mov dword [esp + 0x10], 0x87
mov dword [esp + 0xc], 0x2fd
mov dword [esp + 8], 0x1d1
mov dword [esp + 4], 0
mov dword [esp], 0x13
call fcn.004330d7
sub esp, 0x14
mov dword [esp + 0x18], 0x200844
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x64
mov dword [esp + 0xc], 0x2f3
mov dword [esp + 8], 5
mov dword [esp + 4], 5
mov dword [esp], 0x14
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0xc8
mov dword [esp + 8], 0x6e
mov dword [esp + 4], 5
mov dword [esp], 0x15
call fcn.00433865
sub esp, 0x1c
mov dword [esp + 0x18], 0x801
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x32
mov dword [esp + 8], 0x6e
mov dword [esp + 4], 0xd2
mov dword [esp], 0x16
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x18], 0x802
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0xd2
mov dword [esp + 8], 0x6e
mov dword [esp + 4], 0x109
mov dword [esp], 0x17
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x18], 0x800
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0xaf
mov dword [esp + 8], 0x6e
mov dword [esp + 4], 0x1e0
mov dword [esp], 0x18
call fcn.004335bd
sub esp, 0x1c
mov dword [esp + 0x14], 0x452300
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x5f
mov dword [esp + 8], 0x6e
mov dword [esp + 4], 0x299
mov dword [esp], 0x77
call fcn.00432db0
sub esp, 0x18
call fcn.004333c6
mov dword [esp + 4], 0x456000
mov dword [esp], 0x72
call fcn.004353e7
sub esp, 8
mov dword [esp + 4], 0x453880
mov dword [esp], 0x73
call fcn.004353e7
sub esp, 8
mov eax, dword [0x45a82c]
mov dword [esp + 8], eax
mov eax, dword [0x45a7b0]
mov dword [esp + 4], eax
mov dword [esp], 0x70
call fcn.00402c00
sub esp, 0xc
mov dword [esp + 0xc], 1
mov eax, dword [0x45a82c]
mov dword [esp + 8], eax
mov eax, dword [0x45a7b0]
mov dword [esp + 4], eax
mov dword [esp], 0x70
call fcn.00417250
sub esp, 0x10
mov dword [esp + 4], str.WinDirs
mov dword [esp], 0x6f
call fcn.00402570
sub esp, 8
mov dword [esp], 0x14
call fcn.0042fd7d
sub esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x435
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov dword [esp + 4], 0xc
mov dword [esp], 0x4065f0
call fcn.00439869
sub esp, 8
jmp case.0x41ef98.6
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004046e0
sub esp, 8
call fcn.004438e0
mov eax, dword [0x45a908]
mov dword [esp + 4], eax
mov dword [esp], 0xffffffff
call fcn.00430119
sub esp, 8
mov eax, dword [0x45a7ac]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], reloc.OLEAUT32.dll_SysStringLen
mov dword [esp + 0x14], str.FontSet
mov dword [esp + 0x10], 0x172
mov dword [esp + 0xc], 0x190
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 5
call fcn.00439507
sub esp, 0x20
mov dword [esp + 0x14], 0x454a68
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x6e
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0xf
mov dword [esp], 0x1f
call fcn.00433d2c
sub esp, 0x18
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x19
mov dword [esp + 0xc], 0x127
mov dword [esp + 8], 0x1e
mov dword [esp + 4], 0xa
mov dword [esp], 0x20
call fcn.00433701
sub esp, 0x18
mov dword [esp + 0x14], 2
mov dword [esp + 0x10], 0x113
mov dword [esp + 0xc], 0x127
mov dword [esp + 8], 0x37
mov dword [esp + 4], 0xa
mov dword [esp], 0x21
call fcn.00436a0b
sub esp, 0x18
mov dword [esp + 0x18], 0x20000
mov dword [esp + 0x14], 0x45218c
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x8c
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0xa0
mov dword [esp], 0x22
call fcn.00433254
sub esp, 0x1c
mov dword [esp + 0x14], 0x454560
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x4b
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0x13b
mov dword [esp], 0x23
call fcn.00433d2c
sub esp, 0x18
mov dword [esp + 0x10], 0x12c
mov dword [esp + 0xc], 0x50
mov dword [esp + 8], 0x1e
mov dword [esp + 4], 0x136
mov dword [esp], 0x24
call fcn.00436bbd
sub esp, 0x14
mov dword [esp + 0x14], 0x452300
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x64
mov dword [esp + 8], 0x154
mov dword [esp + 4], 0x122
mov dword [esp], 0x25
call fcn.00432db0
sub esp, 0x18
mov esi, 0xfffffff0
mov edi, 0xffffffff
lea esi, [esi]
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], edi
call fcn.00440fa0
sub esp, 0xc
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 8], eax
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x24
call fcn.0042fd1c
sub esp, 0xc
call fcn.00443a30
add esi, 1
adc edi, 0
mov eax, esi
mov edx, edi
xor eax, 0xfffffff9
not edx
or eax, edx
jne 0x4235b8
mov esi, 8
xor edi, edi
lea esi, [esi]
nop
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], edi
call fcn.00440fa0
sub esp, 0xc
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 8], eax
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x24
call fcn.0042fd1c
sub esp, 0xc
call fcn.00443a30
add esi, 1
adc edi, 0
mov eax, esi
xor eax, 0x15
or eax, edi
jne 0x423628
call fcn.00406790
jmp case.0x41ef98.6
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004046e0
sub esp, 8
mov dword [esp + 0xc], 0x168
mov dword [esp + 8], 0x1f4
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0040af50
sub esp, 0x10
jmp case.0x41ef98.6
mov dword [esp], 7
call fcn.0043019a
sub esp, 4
test eax, eax
js case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov dword [esp], 7
call fcn.0043019a
sub esp, 4
mov ebx, eax
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], ebx
mov dword [esp], 7
call fcn.00430240
sub esp, 0x10
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov ebx, eax
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.0042ffa3
sub esp, 8
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00443b80
sub esp, 8
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00403810
sub esp, 8
test al, al
je case.0x41ef98.6
mov dword [esp], 7
call fcn.0043019a
sub esp, 4
mov dword [esp + 8], str.WIM_files__.wim__.esd__.iso_.wim__.esd__.iso
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.0041a1f0
sub esp, 0xc
jmp case.0x41ef98.6
mov dword [esp], 7
call fcn.0043019a
sub esp, 4
test eax, eax
js case.0x41ef98.6
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.0042ffa3
sub esp, 8
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00443b80
sub esp, 8
mov dword [esp + 4], 0
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00403810
sub esp, 8
test al, al
je case.0x41ef98.6
mov dword [esp], 7
call fcn.0043019a
sub esp, 4
mov dword [esp + 8], str.WIM_files__.wim__.esd__.iso_.wim__.esd__.iso
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.0041a1f0
sub esp, 0xc
jmp case.0x41ef98.6
call fcn.00411ca0
jmp case.0x41ef98.6
call fcn.004438e0
mov dword [esp], str._delete_125AF0F0_6071_48F5_B9EC_879F2D789937
call fcn.00411c10
sub esp, 4
mov dword [esp], str._delete_19B3EFB3_2887_4D9E_B2ED_8F639F0D2967
call fcn.00411c10
sub esp, 4
mov dword [esp], str._bootsequence_125AF0F0_6071_48F5_B9EC_879F2D789937__remove
call fcn.00411c10
sub esp, 4
test eax, eax
jne 0x4238c6
mov dword [esp + 8], 0x40
mov dword [esp + 4], 0x456100
mov dword [esp], 0x457870
call fcn.0042cf9d
sub esp, 0xc
jmp case.0x41ef98.6
mov dword [esp + 8], 0x30
mov dword [esp + 4], 0x454900
mov dword [esp], 0x457870
call fcn.0042cf9d
sub esp, 0xc
jmp case.0x41ef98.6
mov dword [esp], 1
call fcn.0040b8a0
sub esp, 4
jmp case.0x41ef98.6
mov dword [esp], 0
call fcn.0040b8a0
sub esp, 4
jmp case.0x41ef98.6
call fcn.0043be28
cmp eax, 8
jne case.0x41ef98.6
add dword [esp + 0x24], 0x3e8
mov edi, dword [esp + 0x24]
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp + 0x24], edi
mov ebx, edi
sar ebx, 0x1f
mov eax, 0x2710
xor edx, edx
sub eax, edi
sbb edx, ebx
mov esi, dword [esp + 8]
mov edi, dword [esp + 0xc]
mov dword [esp + 8], 0x3e8
mov dword [esp + 0xc], 0
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0042b260
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00440fa0
sub esp, 0xc
call fcn.00443ad0
mov dword [esp + 4], 0x14
mov dword [esp], eax
call fcn.0040fb50
sub esp, 8
call fcn.00443a30
cmp dword [esp + 0x24], 0x270f
jle case.0x41ef98.6
mov dword [esp + 4], 8
mov dword [esp], 0
call fcn.004399f0
sub esp, 8
mov dword [esp], 0x12
call fcn.004398bf
sub esp, 4
jmp 0x41ef60
call fcn.0043bd44
test eax, eax
je 0x423a08
mov byte [0x45a915], 1
jmp case.0x41ef98.6
mov dword [esp], 0
call fcn.0042bb01
sub esp, 4
mov dword [esp], eax
call sub.USER32.dll_IsWindowEnabled
sub esp, 4
test eax, eax
je case.0x41ef98.6
mov byte [0x45a915], 1
jmp case.0x41ef98.6
call fcn.0043bd44
mov dword [esp], eax
call fcn.004398bf
sub esp, 4
mov dword [esp + 4], 1
mov eax, dword [0x45a7ac]
mov dword [esp], eax
call sub.USER32.dll_EnableWindow
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 1
call fcn.004046e0
sub esp, 8
jmp case.0x41ef98.6