Function at 0x4251a0
Capabilities:
Check for time delay via gettickcount
Check http status code
Check os version
Find taskbar
Get number of processors
Move file
Print debug messages
Resolve function by parsing pe exports
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x495f3b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5e8
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
xor edi, edi
mov dword [esp + 0x6c], ecx
cmp eax, edi
jne 0x4251d5
lea eax, [esp + 0x74]
mov ebx, dword [0x4a7440]
mov edx, eax
mov esi, ecx
mov dword [esp + 0x44], eax
mov dword [edx], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x14], esi
cmp ecx, edi
je 0x4254d9
cmp dword [0x4ad3f8], edi
je 0x425229
cmp dword [0x4ad3e8], edi
je 0x425217
mov eax, dword [0x4ad3e0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4ad3e8], edi
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x4ad3f8], edi
mov dword [0x4ad3e0], edi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov edx, dword [0x4a7440]
mov ecx, eax
sub ecx, dword [0x4ad39c]
cmp ecx, dword [edx + 0xb4]
jbe 0x425274
push 0
push 0
push 0
push 0
lea eax, [esp + 0x134]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x42526d
push 1
push 0xffffffffffffffff
call fcn.00401290
add esp, 8
call edi
mov dword [0x4ad39c], eax
cmp byte [ebx + 0xc8], 0
jne 0x4252a5
cmp byte [ebx + 0xca], 0
jne 0x4252a5
mov edx, dword [0x4ad390]
cmp edx, 0xffffffff
jle 0x4252a5
mov ecx, dword [ebx + 0x28]
cmp ecx, edx
jle 0x4252a1
mov byte [ebx + 0xc8], 1
jmp 0x4252a5
inc ecx
mov dword [ebx + 0x28], ecx
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
cmp ecx, 0xffffffff
jl 0x4252c8
jg 0x4252b6
cmp edx, 0xffffffff
jbe 0x4252c8
cmp dword [0x4ad38c], ecx
jg 0x4252da
jl 0x4252c8
cmp dword [0x4ad388], edx
jae 0x4252da
mov ecx, dword [ebx + 0x24]
cmp ecx, 0xffffffff
jle 0x4252e6
sub eax, dword [0x4ad398]
cmp eax, ecx
jb 0x4252e6
push 1
push 0xa
call fcn.00401290
add esp, 8
cmp byte [ebx + 0xd4], 0
je 0x425308
nop
push 1
push 0x8000012f
call fcn.00401290
add esp, 8
cmp byte [ebx + 0xd4], 0
jne 0x4252f0
mov dword [0x4ad0f0], esi
cmp byte [ebx + 0xd5], 0
je 0x42534c
mov ecx, dword [0x4accc0]
mov dword [ecx*4 + 0x4ac680], esi
call edi
mov ecx, dword [0x4accc0]
mov dword [ecx*4 + 0x4aa628], eax
inc ecx
mov dword [0x4accc0], ecx
cmp ecx, 0x190
jl 0x42534c
mov dword [0x4accc0], 0
mov al, byte [esi]
cmp al, 1
je 0x425377
cmp al, 0x6b
je 0x425377
cmp al, 0x72
je 0x425377
mov edi, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push edi
push esi
call fcn.00459d40
mov dword [esp + 0x24], eax
cmp eax, 1
jne 0x4254de
jmp 0x42537a
mov edi, dword [ebp + 0xc]
mov cl, byte [esi]
mov byte [esp + 0xc0], cl
cmp cl, 0xa
jb 0x4254f5
cmp cl, 0x21
ja 0x4254f5
add dword [0x4ad388], 1
push esi
adc dword [0x4ad38c], 0
call fcn.0042a210
mov ebx, 3
cmp eax, ebx
jne 0x42544a
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x4253e1
mov edi, edi
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push edi
push 2
call fcn.004251a0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
cmp edx, ecx
je 0x4253c0
jmp 0x4253f5
lea eax, [esp + 0x28]
push eax
push edi
push ebx
call fcn.004251a0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
cmp edx, esi
je 0x429817
cmp dword [ebp + 8], ebx
je 0x42983c
cmp eax, 1
jne 0x42983c
test edx, edx
je 0x42542c
mov ecx, dword [edx + 0x1c]
mov eax, dword [esp + 0x14]
cmp ecx, dword [eax + 0x1c]
jne 0x429831
mov dword [esp + 0x14], edx
jmp 0x429817
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x18]
cmp byte [eax], 8
mov dword [esp + 0x14], eax
jne 0x429817
mov edx, eax
mov eax, dword [edx + 0x18]
jmp 0x429813
mov edi, dword [esi + 0x18]
cmp byte [edi], 8
mov dword [esp + 0x14], edi
jne 0x4254d0
mov ecx, dword [edi + 0x14]
cmp byte [ecx], 0x73
jne 0x425482
mov esi, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push esi
push 2
call fcn.004251a0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov ecx, dword [edi + 0x14]
cmp edx, ecx
je 0x425461
jmp 0x425499
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x28]
push eax
push edx
push ebx
call fcn.004251a0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
cmp dword [ebp + 8], ebx
je 0x42983c
cmp eax, 1
jne 0x42983c
test edx, edx
je 0x4254c4
mov eax, dword [edx + 0x1c]
cmp eax, dword [edi + 0x1c]
jne 0x42985c
mov dword [esp + 0x14], edx
jmp 0x429817
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x14], ecx
jmp 0x429817
cmp dword [ebp + 8], ebx
jne 0x429817
mov eax, 1
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
movzx eax, cl
add eax, 0xffffffa0
cmp eax, 0x7e
ja case.0x42550b.98
movzx edx, byte [eax + 0x429d34]
jmp dword [edx*4 + 0x429cf8]
add dword [0x4ad388], 1
adc dword [0x4ad38c], 0
mov eax, dword [esi + 0x18]
test eax, eax
je 0x42559f
mov edx, eax
xor eax, eax
cmp dword [esi + 0xc], 1
mov dword [esp + 0x68], edx
sete al
mov edi, eax
test edi, edi
je 0x425556
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0x94]
mov dword [eax + 0x98], ecx
mov dword [eax + 0x94], 0
mov ecx, edx
call fcn.00401210
mov dword [esp + 0x24], eax
test edi, edi
je 0x42557f
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx + 0x98]
mov dword [ecx + 0x94], edx
mov dword [ecx + 0x98], 0
test eax, eax
je 0x4254de
cmp eax, 8
je 0x4254de
cmp dword [ebp + 8], 3
je 0x4257b7
jmp 0x429810
push esi
mov bl, 1
call fcn.00443060
mov edx, eax
mov dword [esp + 0x68], edx
test edx, edx
je 0x4299b9
mov ecx, dword [esp + 0x30]
cmp dword [ecx + 0x94], 0
je 0x4255d8
mov eax, dword [edx + 8]
call fcn.00443110
test eax, eax
je 0x4255d8
mov edi, 1
jmp 0x42553c
xor edi, edi
jmp 0x425556
add dword [0x4ad388], 1
adc dword [0x4ad38c], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x68], eax
test eax, eax
jne 0x425610
push esi
mov bl, 1
call fcn.00443060
mov dword [esp + 0x68], eax
test eax, eax
je 0x4299b9
mov ebx, dword [esp + 0x30]
cmp dword [ebp + 8], 3
mov dword [ebx + 0x9c], eax
je 0x429859
mov ecx, dword [eax + 8]
mov edx, dword [esi + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x429859
mov dword [esp + 0x14], ecx
jmp 0x429817
add dword [0x4ad388], 1
mov eax, dword [esp + 0x6c]
adc dword [0x4ad38c], 0
mov edi, dword [eax + 0xc]
test edi, edi
jne 0x425681
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
mov ebx, eax
je 0x42567f
mov edi, dword [0x4acdb8]
test edi, edi
je 0x42567f
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x425681
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x425667
xor edi, edi
mov dword [esp + 0x24], 1
mov dword [esp + 0x34], 0
test edi, edi
je 0x425793
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x4256b9
push 0x49b154
push eax
call fcn.00485471
add esp, 8
test eax, eax
jne 0x4256b9
mov al, 1
jmp 0x4256bb
xor al, al
lea ecx, [esp + 0x68]
push ecx
push eax
push edi
xor eax, eax
call fcn.00478150
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x68]
test eax, eax
je 0x425793
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x425727
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x4256fb
lea ebx, [ebx]
cmp edx, ecx
je 0x425727
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x4256f0
push 0x499831
push 0
push str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov ecx, esi
call fcn.0042ea00
xor eax, eax
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [esp + 0x30]
mov edx, dword [ebx + 0x94]
test edx, edx
je 0x4257c5
call fcn.00443110
test eax, eax
je 0x4257c5
mov edi, 1
mov dword [ebx + 0x98], edx
mov dword [ebx + 0x94], 0
mov ecx, dword [esp + 0x68]
call fcn.00401210
mov dword [esp + 0x24], eax
test edi, edi
je 0x425782
mov edx, dword [ebx + 0x98]
mov dword [ebx + 0x94], edx
mov dword [ebx + 0x98], 0
test eax, eax
je 0x4254de
cmp eax, 8
je 0x4254de
cmp dword [esp + 0x34], 0
mov edx, dword [esp + 0x6c]
sete al
movzx ecx, al
push ecx
push edx
call fcn.0042e830
cmp dword [ebp + 8], 3
jne 0x429810
mov eax, dword [esp + 0x24]
cmp eax, 7
jne 0x4254de
jmp 0x4254d9
xor edi, edi
jmp 0x42575b
mov eax, dword [esi + 0xc]
mov dword [esp + 0x20], eax
dec eax
je 0x4259d6
sub eax, 3
je 0x4259bc
sub eax, 5
jne 0x425a4e
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0x5c
mov edi, ecx
jne 0x425825
cmp byte [ecx + 1], 0x5c
jne 0x425825
add ecx, 2
push 0x5c
push ecx
call fcn.00486461
add esp, 8
test eax, eax
je 0x425969
mov ecx, eax
sub ecx, edi
cmp ecx, 0x80
jae 0x425969
lea ecx, [eax + 1]
mov al, byte [ecx]
xor edx, edx
test al, al
je 0x42584f
lea edi, [esp + 0xa8]
sub edi, ecx
cmp al, 0x5c
je 0x42584f
cmp edx, 0x13
je 0x425969
mov byte [edi + ecx], al
mov al, byte [ecx + 1]
inc ecx
inc edx
test al, al
jne 0x425836
mov byte [esp + edx + 0xa8], 0
lea edx, [esp + 0xa8]
push str.HKLM
push edx
call fcn.00485471
add esp, 8
test eax, eax
je 0x4259ae
lea eax, [esp + 0xa8]
push str.HKEY_LOCAL_MACHINE
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x4259ae
lea ecx, [esp + 0xa8]
push str.HKCR
push ecx
call fcn.00485471
add esp, 8
test eax, eax
je 0x4259a0
lea edx, [esp + 0xa8]
push str.HKEY_CLASSES_ROOT
push edx
call fcn.00485471
add esp, 8
test eax, eax
je 0x4259a0
lea eax, [esp + 0xa8]
push str.HKCC
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x425992
lea ecx, [esp + 0xa8]
push str.HKEY_CURRENT_CONFIG
push ecx
call fcn.00485471
add esp, 8
test eax, eax
je 0x425992
lea edx, [esp + 0xa8]
push str.HKCU
push edx
call fcn.00485471
add esp, 8
test eax, eax
je 0x425984
lea eax, [esp + 0xa8]
push str.HKEY_CURRENT_USER
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x425984
lea ecx, [esp + 0xa8]
push 0x49b344
push ecx
call fcn.00485471
add esp, 8
test eax, eax
je 0x425976
lea edx, [esp + 0xa8]
push str.HKEY_USERS
push edx
call fcn.00485471
add esp, 8
test eax, eax
je 0x425976
mov dword [esp + 0x58], 0
jmp 0x425a4e
mov eax, CreateStatusWindowA
mov dword [esp + 0x58], eax
jmp 0x425a4e
mov eax, SysReAllocString
mov dword [esp + 0x58], eax
jmp 0x425a4e
mov eax, CreateStatusWindowA
mov dword [esp + 0x58], eax
jmp 0x425a4e
mov eax, SysReAllocString
mov dword [esp + 0x58], eax
jmp 0x425a4e
mov eax, reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x58], eax
jmp 0x425a4e
mov eax, dword [0x4aacc0]
push 0
push 0
push eax
xor eax, eax
call fcn.00413890
add esp, 0xc
mov dword [esp + 0x58], eax
jmp 0x425a4e
movzx eax, byte [esi + 1]
sub eax, 0
je 0x425a46
dec eax
je 0x425a04
mov ecx, dword [0x4aacc0]
push str.Read
push ecx
call fcn.00485471
add esp, 8
test eax, eax
jne 0x425a1d
mov dword [esp + 0x20], 5
jmp 0x425a4e
mov eax, dword [0x4aacc0]
push 0
push 1
push 1
push 1
call fcn.004725e0
add esp, 0x10
test eax, eax
jne 0x425a46
mov edx, dword [0x4aacc0]
push 0
push 0
push edx
xor eax, eax
call fcn.00413890
xor ecx, ecx
add esp, 0xc
test eax, eax
setne cl
mov dword [esp + 0x58], eax
add ecx, 3
mov dword [esp + 0x20], ecx
jmp 0x425a4e
mov dword [esp + 0x20], 2
mov ecx, dword [esp + 0x20]
lea eax, [ecx - 3]
cmp eax, 7
ja case.0x425a65.5
movzx edx, byte [eax + 0x429dc0]
jmp dword [edx*4 + 0x429db4]
mov esi, dword [0x4aacc4]
call fcn.00414240
mov dword [esp + 0x5c], eax
test eax, eax
je 0x429949
mov eax, dword [0x4aacc8]
cmp byte [eax], 0x31
jne 0x425aa5
cmp byte [eax + 1], 0
jne 0x425aa5
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x14]
mov byte [esp + 0x64], 1
jmp case.0x425a65.5
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x14]
mov byte [esp + 0x64], 0
jmp case.0x425a65.5
cmp ecx, 4
jne 0x425af6
mov esi, dword [0x4aacc8]
call fcn.00414240
mov dword [esp + 0x5c], eax
mov eax, dword [0x4aaccc]
cmp byte [eax], 0x31
jne 0x425ae7
cmp byte [eax + 1], 0
jne 0x425ae7
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x30]
mov byte [esp + 0x64], 1
jmp 0x425b14
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x30]
mov byte [esp + 0x64], 0
jmp 0x425b14
mov eax, dword [0x4aacc8]
call fcn.00414290
mov dword [esp + 0x5c], eax
shr eax, 2
and al, 1
mov byte [esp + 0x64], al
je 0x425b14
and dword [esp + 0x5c], 0xfffffffb
cmp dword [esp + 0x5c], 0
je 0x429977
mov byte [esp + 0x1f], 0
mov dword [esp + 0x28], 0
mov eax, dword [esi + 0x18]
cmp byte [eax], 0x6c
mov dword [esp + 0x50], eax
jne 0x425b43
mov edi, eax
mov eax, dword [edi + 0x14]
mov dword [esp + 0x50], eax
jmp 0x425b45
xor edi, edi
mov eax, dword [ebx + 0x10]
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 0xc]
mov dword [esp + 0xc8], eax
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x78], ecx
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x7c], edx
mov edx, dword [ebx + 0x18]
mov dword [esp + 0x18], edi
mov dword [esp + 0xc4], ecx
mov dword [esp + 0x88], edx
cmp eax, 8
je 0x425b93
mov dword [ebx + 8], 1
mov dword [ebx + 0xc], 0
add eax, 0xfffffffe
cmp eax, 8
ja case.default.0x425b9f
jmp dword [eax*4 + 0x429dc8]
cmp byte [esi + 1], 0
jbe 0x425bbc
xor edi, edi
mov ecx, esi
call fcn.00420730
mov byte [esp + 0x70], 0
jmp 0x425bc5
xor eax, eax
xor edx, edx
mov byte [esp + 0x70], 1
mov ecx, dword [esp + 0x70]
mov ebx, dword [ebp + 0xc]
push ecx
push edx
mov edx, dword [esp + 0x20]
push eax
push edx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x33]
push ecx
push esi
call fcn.0042bd20
mov dword [esp + 0x24], eax
jmp 0x425fe3
mov ebx, dword [ebp + 0xc]
mov esi, dword [esp + 0x14]
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x23]
push eax
call fcn.0042bee0
mov dword [esp + 0x24], eax
jmp 0x425fe3
mov eax, dword [ebp + 0xc]
push edi
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x27]
push edx
push eax
push esi
call fcn.0042c0d0
mov dword [esp + 0x24], eax
jmp case.default.0x425b9f
mov ecx, dword [0x4aacc8]
push 0x49d274
push ecx
call fcn.00485471
mov ecx, dword [ebp + 0xc]
add esp, 8
push edi
lea edx, [esp + 0x2c]
push edx
test eax, eax
lea eax, [esp + 0x27]
push eax
push ecx
push esi
je 0x425c60
call fcn.0042cfb0
mov dword [esp + 0x24], eax
jmp case.default.0x425b9f
call fcn.0042d260
mov dword [esp + 0x24], eax
jmp case.default.0x425b9f
lea esi, [esp + 0xec]
call fcn.004148e0
mov dword [esp + 0x5fc], 0
mov edx, dword [0x4aacc4]
cmp byte [edx], 0
je 0x425cdd
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0xd8]
and eax, 0x7fffffff
push 0x30c
mov ecx, esi
call fcn.00470300
test al, al
je 0x425cdd
mov ecx, esi
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x2c]
push edx
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x27]
push eax
push ecx
mov ecx, dword [0x4aacc8]
push edx
mov edx, edi
call fcn.0042d520
mov dword [esp + 0x24], eax
call fcn.00414850
jmp 0x425ce5
mov dword [esp + 0x24], 1
lea ecx, [esp + 0xec]
mov dword [esp + 0x5fc], 0xffffffff
call fcn.00414930
jmp 0x425fe3
cmp dword [esp + 0x20], 3
mov eax, dword [0x4aacc0]
je 0x425d12
mov eax, dword [0x4aacc4]
mov ecx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x68]
push eax
push ecx
mov ecx, dword [ebp + 0xc]
push edi
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x33]
push eax
push ecx
mov ecx, esi
call fcn.0042c5a0
mov dword [esp + 0x24], eax
jmp case.default.0x425b9f
cmp dword [esp + 0x20], 4
jne 0x425d6b
mov eax, dword [0x4aacc0]
lea edx, [esp + 0x4f]
push edx
push 0
push eax
xor eax, eax
call fcn.00413890
mov ecx, dword [0x4aacc4]
add esp, 0xc
mov edi, eax
mov dword [esp + 0x48], ecx
jmp 0x425f94
mov edi, dword [0x4aacc4]
mov esi, edi
xor ebx, ebx
cmp byte [edi], 0x5c
mov dword [esp + 0x34], esi
jne 0x425daf
cmp byte [edi + 1], 0x5c
jne 0x425daf
push 0x5c
add edi, 2
push edi
call fcn.00486461
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x425fdb
mov edx, ebx
sub edx, esi
cmp edx, 0x80
jae 0x425fdb
lea edi, [ebx + 1]
mov al, byte [edi]
xor edx, edx
test al, al
je 0x425ddf
lea esi, [esp + 0x94]
mov ecx, edi
sub esi, edi
cmp al, 0x5c
je 0x425ddb
cmp edx, 0x13
je 0x425fdb
mov byte [esi + ecx], al
mov al, byte [ecx + 1]
inc ecx
inc edx
test al, al
jne 0x425dc2
mov esi, dword [esp + 0x34]
mov byte [esp + edx + 0x94], 0
cmp byte [edi + edx], 0x5c
je 0x425df7
mov dword [esp + 0x48], 0x499831
jmp 0x425dff
lea eax, [edi + edx + 1]
mov dword [esp + 0x48], eax
lea ecx, [esp + 0x94]
push str.HKLM
test ebx, ebx
push ecx
setne byte [esp + 0x57]
call fcn.00485471
add esp, 8
test eax, eax
je 0x425f38
lea edx, [esp + 0x94]
push str.HKEY_LOCAL_MACHINE
push edx
call fcn.00485471
add esp, 8
test eax, eax
je 0x425f38
lea eax, [esp + 0x94]
push str.HKCR
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x425f31
lea ecx, [esp + 0x94]
push str.HKEY_CLASSES_ROOT
push ecx
call fcn.00485471
add esp, 8
test eax, eax
je 0x425f31
lea edx, [esp + 0x94]
push str.HKCC
push edx
call fcn.00485471
add esp, 8
test eax, eax
je 0x425f2a
lea eax, [esp + 0x94]
push str.HKEY_CURRENT_CONFIG
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x425f2a
lea ecx, [esp + 0x94]
push str.HKCU
push ecx
call fcn.00485471
add esp, 8
test eax, eax
je 0x425f23
lea edx, [esp + 0x94]
push str.HKEY_CURRENT_USER
push edx
call fcn.00485471
add esp, 8
test eax, eax
je 0x425f23
lea eax, [esp + 0x94]
push 0x49b344
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x425f1c
lea ecx, [esp + 0x94]
push str.HKEY_USERS
push ecx
call fcn.00485471
add esp, 8
test eax, eax
jne 0x425fdb
mov edi, CreateStatusWindowA
jmp 0x425f3d
mov edi, SysReAllocString
jmp 0x425f3d
mov edi, CreateStatusWindowA
jmp 0x425f3d
mov edi, SysReAllocString
jmp 0x425f3d
mov edi, reloc.OLEAUT32.dll_SysReAllocString
test ebx, ebx
je 0x425f8c
push 0x7f
lea edx, [esp + 0x144]
push esi
push edx
call fcn.00488410
add esp, 0xc
lea eax, [esp + 0xcc]
push eax
push edi
lea ecx, [esp + 0x148]
mov byte [esp + 0x1c7], 0
sub ebx, esi
push ecx
mov byte [esp + ebx + 0x14c], 0
call dword [sym.imp.ADVAPI32.dll_RegConnectRegistryA]
mov edi, eax
neg edi
sbb edi, edi
not edi
and edi, dword [esp + 0xcc]
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x14]
test edi, edi
je 0x425fdb
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x64]
push edx
mov edx, dword [esp + 0x60]
push edi
push eax
mov eax, dword [esp + 0x24]
push ecx
push edx
push eax
mov eax, dword [ebp + 0xc]
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x3b]
push edx
push eax
mov ecx, esi
call fcn.0042cb30
cmp byte [esp + 0x4f], 0
mov dword [esp + 0x24], eax
je case.default.0x425b9f
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x425b9f
mov dword [esp + 0x24], 1
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov dword [ebx + 0x10], eax
mov eax, dword [esp + 0x38]
mov dword [ebx + 0x1c], eax
mov eax, dword [esp + 0x24]
mov dword [ebx + 8], ecx
mov ecx, dword [esp + 0xc4]
mov dword [ebx + 0xc], edx
mov edx, dword [esp + 0x88]
mov dword [ebx + 0x14], ecx
mov dword [ebx + 0x18], edx
test eax, eax
je 0x4254de
cmp eax, 7
je 0x4254de
cmp eax, 8
je 0x4254de
cmp byte [esp + 0x1f], 0
jne 0x429817
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x426064
mov edx, dword [ecx + 0x1c]
mov esi, dword [esp + 0x14]
cmp edx, dword [esi + 0x1c]
jne 0x429ca7
mov dword [esp + 0x14], ecx
jmp 0x429817
cmp dword [ebp + 8], 3
je 0x4254d9
mov eax, dword [esp + 0x50]
jmp 0x429813
mov dl, byte [ebx + 0xe4]
mov byte [esp + 0x2f], dl
cmp cl, 0x70
jne 0x4260f2
mov ecx, dword [0x4aac68]
test ecx, ecx
je 0x4260ab
mov edi, dword [esp + 0x30]
mov eax, dword [edi + 0xdc]
mov ebx, ecx
call fcn.00474d10
test eax, eax
je 0x4299a3
mov ebx, edi
mov eax, dword [ebx + 0xdc]
cmp dword [eax + 8], 6
jne 0x4260c1
mov eax, dword [eax]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebx + 0xdc]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4260d7
push eax
call fcn.00485488
add esp, 4
mov ecx, dword [ebx + 0xdc]
push ecx
call fcn.004851e8
add esp, 4
mov dword [ebx + 0xdc], 0
jmp 0x4260f9
mov byte [ebx + 0xe4], 1
mov dword [esp + 0x28], 0
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x426134
lea esp, [esp]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push eax
push 2
call fcn.004251a0
mov edi, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
cmp edi, ecx
je 0x426110
jmp 0x42614c
mov eax, dword [ebp + 0xc]
lea edx, [esp + 0x28]
push edx
push eax
push 3
call fcn.004251a0
mov edi, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov dl, byte [esp + 0xc0]
mov ecx, dword [esi + 0x18]
mov dword [esp + 0x14], ecx
cmp dl, 0x6f
jne 0x4261b2
mov dl, byte [esp + 0x2f]
mov byte [ebx + 0xe4], dl
xor dl, dl
cmp byte [ecx], 0x70
jne 0x426186
cmp dword [ebx + 0xdc], 0
mov dl, 1
jne 0x429817
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x14], ecx
cmp byte [ecx], 0x71
je 0x4261bc
test dl, dl
jne 0x42620f
mov esi, dword [esp + 0x30]
add esi, 0xdc
cmp dword [esi], 0
je 0x42620f
call fcn.0042f0c0
mov eax, 1
mov dword [esp + 0x24], eax
jmp 0x42620b
cmp dl, 0x70
jne 0x42620f
cmp byte [ecx], 0x71
jne 0x42620f
cmp eax, 1
jne 0x4261cd
test edi, edi
je 0x429817
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0xbc]
push edx
push 0
push 3
call fcn.004251a0
cmp dword [esp + 0xbc], 0
jne 0x4299d2
cmp eax, 5
je 0x4299d2
cmp eax, 6
je 0x4299d2
cmp eax, 7
je 0x4299d2
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x28]
cmp dword [ebp + 8], 3
je 0x429a0b
cmp eax, 1
jne 0x429a0b
test edi, edi
je 0x429817
mov eax, dword [edi + 0x1c]
mov ecx, dword [esp + 0x14]
cmp eax, dword [ecx + 0x1c]
jne 0x429a00
mov dword [esp + 0x14], edi
jmp 0x429817
mov edx, dword [esi + 0x14]
mov dword [esp + 0x14], edx
jmp 0x429817
cmp dword [esi + 0xc], 1
jne 0x42625d
mov eax, dword [esi + 0x18]
jmp 0x429813
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [esi + 0x14]
push edi
push 2
call fcn.004251a0
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
cmp ecx, esi
je 0x429817
cmp dword [ebp + 8], 3
je 0x429ca7
cmp eax, 1
jne 0x429ca7
test ecx, ecx
je 0x4262ad
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x1c]
cmp eax, dword [ecx + 0x1c]
jne 0x429c9c
mov dword [esp + 0x14], ecx
jmp 0x429817
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x18]
mov dword [esp + 0x14], edx
jmp 0x429817
add dword [0x4ad388], 1
mov eax, dword [0x4aac68]
mov ebx, dword [0x4a7440]
adc dword [0x4ad38c], 0
mov cl, byte [esi]
movzx edx, cl
dec edx
mov edi, eax
mov dword [esp + 0x18], edi
cmp edx, 0xdf
ja case.0x4262f5.8
movzx edx, byte [edx + 0x42a070]
jmp dword [edx*4 + 0x429dec]
push esi
call fcn.0043c2b0
jmp 0x4297fa
cmp byte [esi + 1], 1
mov edx, dword [0x4aacc4]
jbe 0x42637d
mov eax, dword [esi + 8]
cmp byte [eax + 0x11], 0
je 0x426326
mov eax, 1
jmp 0x4297fa
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x42633f
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
push edi
call fcn.00412cf0
jmp 0x4297fa
mov eax, dword [0x4aac6c]
test eax, eax
je 0x42637d
cmp byte [edx], 0
jne 0x42637d
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x42635a
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x426371
sub ecx, 2
jne 0x42637d
mov eax, edi
call fcn.00474e20
jmp 0x4297fa
mov ecx, edi
call fcn.00474b90
jmp 0x4297fa
push 1
push 0
push 0xffffffffffffffff
push edx
push edi
call fcn.004753c0
jmp 0x4297fa
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x4263af
cmp byte [eax + 0x11], 0
jne 0x4263af
mov dword [esp + 0x20], 1
mov ebx, 1
xor edi, edi
jmp 0x4263f1
mov edi, dword [0x4aac6c]
mov eax, dword [0x4aacc4]
mov dword [esp + 0x20], 0
test edi, edi
je 0x4263dd
cmp byte [eax], 0
jne 0x4263dd
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x4263d8
mov edx, dword [edi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x42643b
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.004725e0
add esp, 0x10
mov ebx, eax
mov eax, dword [esp + 0x18]
push 1
call fcn.00412d50
mov esi, eax
mov eax, dword [0x4aacc8]
mov al, byte [eax]
test al, al
je 0x42660e
call fcn.00409370
movsx eax, al
push eax
push str.SMHD
call fcn.00486461
add esp, 8
test eax, eax
je 0x42660e
test ebx, ebx
jne 0x42644a
mov esi, dword [esp + 0x14]
lea eax, [ebx + 1]
jmp 0x4297fa
test edi, edi
je 0x4263df
push 1
mov eax, edi
call fcn.00412d50
jmp 0x4263ef
cmp dword [esp + 0x20], 0
je 0x42645f
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426479
test edi, edi
je 0x42646e
push 0
mov eax, edi
call fcn.00412eb0
jmp 0x426479
mov esi, dword [0x4aacc4]
call fcn.00412c50
mov esi, dword [esp + 0x18]
fstp qword [esp + 0x38]
cmp byte [esi + 0x17], 0
jne 0x42648c
mov edi, dword [esi + 0xc]
jmp 0x42648e
mov edi, esi
mov bl, 8
test byte [edi + 0x15], bl
je 0x42649c
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x4264b5
test byte [edi + 0x15], 4
je 0x4264b0
mov eax, edi
call fcn.0042f230
mov eax, dword [edi + 8]
jmp 0x4264c5
cmp al, 2
jne 0x4264c0
call fcn.00401000
jmp 0x4264c5
mov eax, 0x4ac626
cmp byte [eax], 0
je 0x426539
cmp byte [esi + 0x17], 0
jne 0x4264d5
mov edi, dword [esi + 0xc]
jmp 0x4264d7
mov edi, esi
test byte [edi + 0x15], bl
je 0x4264e3
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x4264fc
test byte [edi + 0x15], 4
je 0x4264f7
mov eax, edi
call fcn.0042f230
mov eax, dword [edi + 8]
jmp 0x42650c
cmp al, 2
jne 0x426507
call fcn.00401000
jmp 0x42650c
mov eax, 0x4ac626
lea ecx, [esp + 0x80]
push ecx
call fcn.004721c0
add esp, 4
test eax, eax
jne 0x42655d
push 1
push eax
push 0xffffffffffffffff
push 0x499831
push esi
call fcn.004753c0
mov esi, dword [esp + 0x14]
jmp 0x4297fa
lea edx, [esp + 0xe4]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0xe8]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov edx, dword [0x4aacc8]
mov al, byte [edx]
call fcn.00409370
movsx eax, al
add eax, 0xffffffbc
cmp eax, 0xf
ja case.0x42657c.69
movzx eax, byte [eax + 0x42a164]
jmp dword [eax*4 + 0x42a150]
fld qword [esp + 0x38]
fmul qword [0x4a1990]
jmp 0x4265b7
fld qword [esp + 0x38]
fmul qword [0x4a1988]
jmp 0x4265b7
fld qword [esp + 0x38]
fmul qword [0x4a1980]
jmp 0x4265b7
fld qword [esp + 0x38]
fmul qword [0x4a1978]
jmp 0x4265b7
fld qword [esp + 0x38]
mov esi, dword [esp + 0x80]
mov ebx, dword [esp + 0x84]
call fcn.00493eb6
add esi, eax
adc ebx, edx
mov dword [esp + 0x80], esi
push 0
lea eax, [esp + 0x84]
lea esi, [esp + 0x1c4]
mov dword [esp + 0x88], ebx
call fcn.00472450
mov ecx, dword [esp + 0x1c]
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
push ecx
call fcn.004753c0
mov esi, dword [esp + 0x14]
jmp 0x4297fa
cmp ebx, 2
je 0x426670
cmp esi, 2
je 0x426670
cmp dword [esp + 0x20], 0
je 0x426630
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x42664e
test edi, edi
je 0x42663f
push 0
mov eax, edi
call fcn.00412df0
jmp 0x42664a
mov esi, dword [0x4aacc4]
call fcn.00412c20
mov ebx, edx
mov edi, eax
mov esi, dword [esp + 0x18]
push 0
mov eax, esi
call fcn.00412df0
add eax, edi
adc edx, ebx
push edx
push eax
push esi
call fcn.00412cf0
mov esi, dword [esp + 0x14]
jmp 0x4297fa
cmp dword [esp + 0x20], 0
je 0x426685
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x42669f
test edi, edi
je 0x426694
push 0
mov eax, edi
call fcn.00412eb0
jmp 0x42669f
mov esi, dword [0x4aacc4]
call fcn.00412c50
mov esi, dword [esp + 0x18]
fstp qword [esp + 0x38]
push 0
mov eax, esi
call fcn.00412eb0
fadd qword [esp + 0x38]
sub esp, 8
fstp qword [esp]
push esi
call fcn.00412d20
mov esi, dword [esp + 0x14]
jmp 0x4297fa
mov ecx, dword [0x4aacc8]
mov al, byte [ecx]
test al, al
je 0x426835
call fcn.00409370
movsx eax, al
push eax
push str.SMHD
call fcn.00486461
add esp, 8
test eax, eax
je 0x426835
mov edi, dword [0x4aac6c]
mov ecx, dword [0x4aacc4]
test edi, edi
je 0x42676d
cmp byte [ecx], 0
jne 0x42676d
mov al, byte [edi + 0x17]
test al, al
jne 0x426719
mov edx, dword [edi + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
jne 0x42676d
test edi, edi
je 0x42676d
cmp byte [edi + 0x17], 0
jne 0x42672a
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x426737
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426754
test byte [edi + 0x15], 4
je 0x42674b
mov eax, edi
call fcn.0042f230
mov eax, dword [edi + 8]
mov dword [esp + 0x20], eax
jmp 0x426771
cmp al, 2
jne 0x426763
call fcn.00401000
mov dword [esp + 0x20], eax
jmp 0x426771
mov dword [esp + 0x20], 0x4ac626
jmp 0x426771
mov dword [esp + 0x20], ecx
mov edi, dword [esp + 0x18]
cmp byte [edi + 0x17], 0
jne 0x42677e
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x42678b
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x4267a4
test byte [edi + 0x15], 4
je 0x42679f
mov eax, edi
call fcn.0042f230
mov eax, dword [edi + 8]
jmp 0x4267b4
cmp al, 2
jne 0x4267af
call fcn.00401000
jmp 0x4267b4
mov eax, 0x4ac626
push eax
mov eax, dword [esp + 0x24]
lea ebx, [esp + 0x67]
call fcn.00472500
add esp, 4
cmp byte [esp + 0x63], 0
mov edi, eax
mov ebx, edx
je 0x4267ea
mov ecx, dword [esp + 0x18]
push 1
push 0
push 0xffffffffffffffff
push 0x499831
push ecx
call fcn.004753c0
jmp 0x4297fa
mov edx, dword [0x4aacc8]
mov al, byte [edx]
call fcn.00409370
cmp al, 0x44
je 0x426812
cmp al, 0x48
je 0x426809
cmp al, 0x4d
jne 0x426824
push 0
push 0x3c
jmp 0x426819
push 0
push 0xe10
jmp 0x426819
push 0
push 0x15180
push ebx
push edi
call fcn.00493f30
mov edi, eax
mov ebx, edx
mov eax, dword [esp + 0x18]
push ebx
push edi
push eax
call fcn.00412cf0
jmp 0x4297fa
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x426855
cmp byte [eax + 0x11], 0
jne 0x426855
mov dword [esp + 0x20], 1
mov edi, 1
xor ebx, ebx
jmp 0x426897
mov ebx, dword [0x4aac6c]
mov eax, dword [0x4aacc4]
mov dword [esp + 0x20], 0
test ebx, ebx
je 0x426883
cmp byte [eax], 0
jne 0x426883
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x42687e
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x4268c0
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.004725e0
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x18]
push 1
call fcn.00412d50
cmp edi, 2
je 0x426911
cmp eax, 2
je 0x426911
cmp dword [esp + 0x20], 0
je 0x4268cf
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x4268f1
test ebx, ebx
je 0x426885
push 1
mov eax, ebx
call fcn.00412d50
jmp 0x426895
test ebx, ebx
je 0x4268de
push 0
mov eax, ebx
call fcn.00412df0
jmp 0x4268ed
mov esi, dword [0x4aacc4]
call fcn.00412c20
mov esi, dword [esp + 0x14]
mov ebx, edx
mov edi, eax
mov eax, dword [esp + 0x18]
push 0
call fcn.00412df0
sub eax, edi
sbb edx, ebx
push edx
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.00412cf0
jmp 0x4297fa
cmp dword [esp + 0x20], 0
je 0x426922
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x426940
test ebx, ebx
je 0x426931
push 0
mov eax, ebx
call fcn.00412eb0
jmp 0x426940
mov esi, dword [0x4aacc4]
call fcn.00412c50
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
fstp qword [esp + 0x38]
push 0
mov eax, edi
call fcn.00412eb0
fsub qword [esp + 0x38]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412d20
jmp 0x4297fa
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x426986
cmp byte [eax + 0x11], 0
jne 0x426986
mov dword [esp + 0x20], 1
mov edi, 1
xor ebx, ebx
jmp 0x4269c8
mov ebx, dword [0x4aac6c]
mov eax, dword [0x4aacc4]
mov dword [esp + 0x20], 0
test ebx, ebx
je 0x4269b4
cmp byte [eax], 0
jne 0x4269b4
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x4269af
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x4269f1
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.004725e0
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x18]
push 1
call fcn.00412d50
cmp edi, 2
je 0x426a47
cmp eax, 2
je 0x426a47
cmp dword [esp + 0x20], 0
je 0x426a00
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x426a22
test ebx, ebx
je 0x4269b6
push 1
mov eax, ebx
call fcn.00412d50
jmp 0x4269c6
test ebx, ebx
je 0x426a0f
push 0
mov eax, ebx
call fcn.00412df0
jmp 0x426a1e
mov esi, dword [0x4aacc4]
call fcn.00412c20
mov esi, dword [esp + 0x14]
mov ebx, edx
mov edi, eax
mov eax, dword [esp + 0x18]
push 0
call fcn.00412df0
push ebx
push edi
push edx
push eax
call fcn.0048c450
push edx
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.00412cf0
jmp 0x4297fa
cmp dword [esp + 0x20], 0
je 0x426a58
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x426a76
test ebx, ebx
je 0x426a67
push 0
mov eax, ebx
call fcn.00412eb0
jmp 0x426a76
mov esi, dword [0x4aacc4]
call fcn.00412c50
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
fstp qword [esp + 0x38]
push 0
mov eax, edi
call fcn.00412eb0
fmul qword [esp + 0x38]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412d20
jmp 0x4297fa
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x426abc
cmp byte [eax + 0x11], 0
jne 0x426abc
mov dword [esp + 0x20], 1
mov edi, 1
xor ebx, ebx
jmp 0x426afe
mov ebx, dword [0x4aac6c]
mov eax, dword [0x4aacc4]
mov dword [esp + 0x20], 0
test ebx, ebx
je 0x426aea
cmp byte [eax], 0
jne 0x426aea
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x426ae5
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x426b2f
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.004725e0
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x18]
push 1
call fcn.00412d50
cmp edi, 2
je 0x426b99
cmp eax, 2
je 0x426b99
cmp dword [esp + 0x20], 0
je 0x426b3e
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov ebx, dword [eax]
mov edi, dword [eax + 4]
jmp 0x426b60
test ebx, ebx
je 0x426aec
push 1
mov eax, ebx
call fcn.00412d50
jmp 0x426afc
test ebx, ebx
je 0x426b4d
push 0
mov eax, ebx
call fcn.00412df0
jmp 0x426b5c
mov esi, dword [0x4aacc4]
call fcn.00412c20
mov esi, dword [esp + 0x14]
mov edi, edx
mov ebx, eax
mov eax, ebx
or eax, edi
jne 0x426b74
mov ecx, dword [esp + 0x18]
call fcn.00412c90
jmp 0x4297fa
mov eax, dword [esp + 0x18]
push 0
call fcn.00412df0
push edi
push ebx
push edx
push eax
call fcn.00493f30
mov ecx, dword [esp + 0x18]
push edx
push eax
push ecx
call fcn.00412cf0
jmp 0x4297fa
cmp dword [esp + 0x20], 0
je 0x426baa
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426bc8
test ebx, ebx
je 0x426bb9
push 0
mov eax, ebx
call fcn.00412eb0
jmp 0x426bc8
mov esi, dword [0x4aacc4]
call fcn.00412c50
mov esi, dword [esp + 0x14]
fst qword [esp + 0x38]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x426be5
mov ecx, dword [esp + 0x18]
call fcn.00412c90
jmp 0x4297fa
mov edi, dword [esp + 0x18]
push 0
mov eax, edi
call fcn.00412eb0
fdiv qword [esp + 0x38]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412d20
jmp 0x4297fa
mov edi, 2
mov ecx, esi
call fcn.00420730
mov ebx, eax
test ebx, ebx
jns 0x426c1d
xor ebx, ebx
jmp 0x426c2f
mov edi, 1
mov ecx, esi
call fcn.004206b0
cmp ebx, eax
jle 0x426c2f
mov ebx, eax
push 1
push 0
push ebx
mov ecx, dword [0x4aacc4]
mov edx, dword [esp + 0x24]
push ecx
push edx
call fcn.004753c0
jmp 0x4297fa
mov edi, 2
mov ecx, esi
call fcn.00420730
mov ebx, eax
test ebx, ebx
jns 0x426c5e
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.004206b0
cmp ebx, eax
jbe 0x426c70
mov ebx, eax
push 1
sub eax, ebx
add eax, dword [0x4aacc4]
push 0
push ebx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.004753c0
jmp 0x4297fa
cmp byte [esi + 1], 4
jb 0x426cc5
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x34]
cmp byte [edx], 0
je 0x426cc5
mov ecx, dword [esp + 0x14]
mov edi, 3
call fcn.00420730
mov esi, eax
cmp esi, 1
jge 0x426cca
mov ecx, dword [esp + 0x18]
call fcn.00412c90
mov esi, dword [esp + 0x14]
jmp 0x4297fa
mov esi, SysReAllocString
mov ecx, dword [esp + 0x14]
mov edi, 2
call fcn.00420730
mov ebx, eax
mov eax, dword [0x4aacd0]
mov al, byte [eax]
call fcn.00409370
cmp al, 0x4c
jne 0x426d13
cmp ebx, 1
jge 0x426d01
mov ecx, dword [esp + 0x18]
call fcn.00412c90
mov esi, dword [esp + 0x14]
jmp 0x4297fa
mov ecx, 1
sub ecx, esi
add ebx, ecx
cmp ebx, 1
jge 0x426d1d
lea esi, [esi + ebx - 1]
cmp ebx, 1
jge 0x426d1d
mov ebx, 1
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.004206b0
cmp eax, ebx
jae 0x426d41
mov ecx, dword [esp + 0x18]
call fcn.00412c90
mov esi, dword [esp + 0x14]
jmp 0x4297fa
mov edx, edi
sub edx, ebx
add eax, edx
cmp esi, eax
jbe 0x426d4d
mov esi, eax
mov eax, dword [0x4aacc4]
mov ecx, dword [esp + 0x18]
push 1
push 0
push esi
lea ebx, [ebx + eax - 1]
push ebx
push ecx
call fcn.004753c0
mov esi, dword [esp + 0x14]
jmp 0x4297fa
mov edi, 2
mov ecx, esi
call fcn.00420730
mov ebx, eax
test ebx, ebx
jns 0x426d83
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.004206b0
cmp ebx, eax
jbe 0x426d95
mov ebx, eax
mov edx, dword [0x4aacc4]
push 1
push 0
sub eax, ebx
push eax
mov eax, dword [esp + 0x24]
lea ecx, [ebx + edx]
push ecx
push eax
call fcn.004753c0
jmp 0x4297fa
mov edi, 2
mov ecx, esi
call fcn.00420730
mov ebx, eax
test ebx, ebx
jns 0x426dc9
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.004206b0
cmp ebx, eax
jbe 0x426ddb
mov ebx, eax
push 1
push 0
sub eax, ebx
push eax
jmp 0x426c34
cmp byte [edi + 0x17], 0
mov ebx, eax
jne 0x426df4
mov edi, dword [ebx + 0xc]
jmp 0x426df6
mov edi, eax
test byte [edi + 0x15], 8
je 0x426e03
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426e0f
mov edi, dword [edi + 8]
jmp 0x426e21
cmp al, 2
jne 0x426e1c
call fcn.00401000
mov edi, eax
jmp 0x426e21
mov edi, 0x4ac626
cmp edi, dword [0x4aacc4]
jne 0x426e3e
mov al, byte [ebx + 0x17]
test al, al
jne 0x426e36
mov eax, dword [ebx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
je 0x426ebc
push 1
push 0
mov edi, 1
mov ecx, esi
call fcn.004206b0
mov ebx, dword [esp + 0x20]
push eax
push 0
push ebx
call fcn.004753c0
cmp eax, edi
jne case.0x4262f5.8
cmp byte [ebx + 0x17], 0
jne 0x426e6e
mov edi, dword [ebx + 0xc]
jmp 0x426e70
mov edi, ebx
test byte [edi + 0x15], 8
je 0x426e7d
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426e96
test byte [edi + 0x15], 4
je 0x426e91
mov eax, edi
call fcn.0042f230
mov edi, dword [edi + 8]
jmp 0x426ea8
cmp al, 2
jne 0x426ea3
call fcn.00401000
mov edi, eax
jmp 0x426ea8
mov edi, 0x4ac626
mov ecx, dword [0x4aacc4]
mov edx, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x426eb0
jmp 0x426ec0
mov ebx, dword [esp + 0x18]
mov ecx, dword [0x4aacc8]
mov al, byte [ecx]
test al, al
je 0x426ef6
call fcn.00409370
cmp al, 0x54
jne 0x426ef6
mov edx, dword [0x4aacc8]
cmp byte [edx + 1], 0
jne 0x426ef6
mov eax, edi
call fcn.00412970
push 0
mov eax, ebx
call fcn.00413230
jmp 0x4297fa
cmp byte [esi], 0x31
push edi
jne 0x426f10
call dword [sym.imp.USER32.dll_CharLowerA]
push 0
mov eax, ebx
call fcn.00413230
jmp 0x4297fa
call dword [sym.imp.USER32.dll_CharUpperA]
push 0
mov eax, ebx
call fcn.00413230
jmp 0x4297fa
mov eax, dword [0x4aac6c]
test eax, eax
je 0x426f56
cmp byte [eax + 0x17], 0
jne 0x426f3b
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x15]
jmp 0x426f3e
mov cl, byte [eax + 0x15]
test cl, 1
je 0x426f56
call fcn.00413170
push 0
push eax
push edi
call fcn.00412cf0
jmp 0x4297fa
mov edi, 1
mov ecx, esi
call fcn.004206b0
mov edi, dword [esp + 0x18]
push 0
push eax
push edi
call fcn.00412cf0
jmp 0x4297fa
mov edi, dword [0x4aaccc]
mov al, byte [edi]
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], 0xffffffff
test al, al
je 0x42700d
call fcn.00409370
movsx eax, al
push eax
push 0x49d2f4
call fcn.00486461
add esp, 8
test eax, eax
je 0x42700d
cmp byte [edi + 1], 0
lea esi, [edi + 1]
je 0x42700d
call fcn.0040cea0
mov dword [esp + 0x20], eax
test eax, eax
jle 0x427115
mov eax, dword [0x4aacc8]
cmp byte [eax], 0
jne 0x427017
mov dword [esp + 0x34], 0
mov eax, 0x49987c
push 1
push 0
push 0xffffffffffffffff
push eax
mov eax, dword [0x4ab51c]
push eax
call fcn.004753c0
mov eax, dword [esp + 0x34]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x24]
call fcn.004010d0
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297fa
mov dword [esp + 0x20], 1
jmp 0x426fc4
mov edx, dword [0x4aacc4]
mov ecx, dword [esp + 0x14]
mov edi, 4
mov dword [esp + 0x50], edx
mov dword [esp + 0x48], eax
call fcn.00420730
mov esi, eax
test esi, esi
jns 0x42703b
xor esi, esi
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.004206b0
mov edi, eax
cmp esi, edi
jge 0x427115
mov eax, dword [esp + 0x38]
mov al, byte [eax]
cmp al, 0x31
je 0x4270e0
call fcn.00409370
cmp al, 0x52
je 0x4270e0
mov ecx, dword [esp + 0x14]
mov edi, 2
call fcn.004206b0
mov ecx, dword [esp + 0x50]
mov ebx, eax
mov edi, 1
lea eax, [esi + ecx]
jmp 0x427090
mov edx, dword [0x4a7440]
mov cl, byte [edx + 0xce]
test cl, cl
jne 0x4270af
mov ecx, dword [esp + 0x48]
push ecx
call fcn.00472ad0
add esp, 4
jmp 0x4270d1
cmp cl, 2
jne 0x4270c3
mov edx, dword [esp + 0x48]
push edx
call fcn.00472da0
add esp, 4
jmp 0x4270d1
mov ecx, dword [esp + 0x48]
push ecx
push eax
call fcn.004865a2
add esp, 8
test eax, eax
je 0x427115
cmp edi, dword [esp + 0x20]
je 0x427103
inc edi
add eax, ebx
jmp 0x427090
movzx eax, byte [ebx + 0xce]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x54]
push eax
push ecx
mov eax, edi
sub eax, esi
push edx
call fcn.004728d0
add esp, 0x10
test eax, eax
je 0x427115
sub eax, dword [esp + 0x50]
mov dword [esp + 0x34], eax
jns 0x426fd6
mov eax, 0x49aee0
jmp 0x426fdb
push esi
call fcn.0043c710
jmp 0x4297fa
mov eax, dword [0x4aaccc]
mov ecx, dword [0x4aacc8]
mov edx, dword [0x4aacc4]
call fcn.00432640
jmp 0x4297fa
mov ecx, dword [0x4aaccc]
mov edx, dword [0x4aacc8]
mov eax, dword [0x4aacc0]
push ecx
mov ecx, dword [0x4aacc4]
push edx
push esi
call fcn.0043c960
jmp 0x4297fa
mov eax, dword [0x4aacc0]
push eax
mov eax, esi
call fcn.0043d0b0
jmp 0x4297fa
mov ecx, dword [0x4aacc0]
push ecx
mov ecx, dword [0x4aacc4]
push esi
call fcn.0043d680
jmp 0x4297fa
push 0
push ecx
mov edi, 7
mov ecx, esi
call fcn.00420730
add esp, 4
push eax
mov edi, 6
mov ecx, esi
call fcn.00420730
push eax
push ecx
mov edi, 5
mov ecx, esi
call fcn.00420730
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00420730
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420730
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420730
mov ecx, dword [0x4aace0]
push eax
push esi
call fcn.004388c0
jmp 0x4297fa
mov edx, dword [0x4aacd8]
push edx
push ecx
mov edi, 5
mov ecx, esi
call fcn.00420730
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00420730
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420730
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420730
push eax
push esi
call fcn.00438ff0
jmp 0x4297fa
mov eax, dword [0x4aaccc]
push eax
push ecx
mov edi, 2
mov ecx, esi
call fcn.00420730
mov edi, 1
mov ecx, esi
mov ebx, eax
call fcn.00420730
add esp, 4
mov ecx, eax
push esi
mov eax, ebx
call fcn.004501c0
jmp 0x4297fa
mov edx, dword [ebx + 0xb0]
cmp cl, 0x42
sete al
push 0
push edx
mov edx, dword [0x4aacc0]
movzx ecx, al
push ecx
push edx
call fcn.0040d540
add esp, 0x10
mov eax, 1
jmp 0x4297fa
mov ecx, dword [0x4aacc0]
xor eax, eax
cmp dword [ebx + 0xb0], 3
push 0
sete al
lea eax, [eax + eax + 1]
push eax
push 0
push ecx
call fcn.0040d540
add esp, 0x10
mov eax, 1
jmp 0x4297fa
mov edx, dword [0x4aacc0]
push 0
push 2
push 0
push edx
call fcn.0040d540
add esp, 0x10
mov eax, 1
jmp 0x4297fa
mov eax, dword [0x4aacc0]
push 0
push 0
push 0
push eax
call fcn.0040d540
add esp, 0x10
mov eax, 1
jmp 0x4297fa
mov ecx, dword [0x4aacc0]
push ecx
call fcn.0040f680
add esp, 4
jmp 0x4297fa
mov edx, dword [0x4aacd8]
mov eax, dword [0x4aacd4]
push 0x499831
push edx
mov edx, dword [0x4aacd0]
push eax
mov eax, dword [0x4aaccc]
push edx
mov edx, dword [0x4aacc8]
push eax
mov eax, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push ecx
mov eax, 0x499831
call fcn.0040f910
add esp, 0x20
jmp 0x4297fa
mov edx, dword [0x4aacd4]
mov eax, dword [0x4aacd8]
push edx
mov edx, dword [0x4aacd0]
push eax
mov eax, dword [0x4aacc8]
push edx
mov edx, dword [0x4aacc4]
push 0x499831
push 0x499831
push eax
mov eax, dword [0x4aaccc]
push edx
mov edx, dword [0x4aacc0]
push ecx
call fcn.0040f910
add esp, 0x20
jmp 0x4297fa
mov eax, dword [0x4aaccc]
mov edx, dword [0x4aacc8]
push 0x499831
push eax
mov eax, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push 0x499831
push 0x499831
push eax
push edx
mov eax, 0x499831
push ecx
mov edx, eax
call fcn.0040f910
add esp, 0x20
jmp 0x4297fa
mov edi, 4
mov ecx, esi
call fcn.00420730
push eax
mov ecx, esi
call fcn.0043b790
jmp 0x4297fa
mov edx, dword [0x4aacc4]
mov esi, dword [0x4aacc0]
cmp cl, 0x76
sete al
push 0
movzx ecx, al
mov eax, dword [0x4aaccc]
push 0
push ecx
push edx
push ebx
mov ebx, dword [0x4aacc8]
call fcn.00476140
add esp, 0x14
test eax, eax
je 0x427457
mov eax, dword [0x4a7440]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle 0x427457
push 1
push eax
call fcn.00401290
add esp, 8
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297fa
mov ecx, dword [0x4aacc0]
push 9
push str.ahk_group
push ecx
call fcn.00485ef0
add esp, 0xc
test eax, eax
jne 0x427498
mov edx, dword [0x4aacc4]
cmp byte [edx], al
jne 0x427498
mov eax, dword [0x4aaccc]
cmp byte [eax], 0
mov byte [esp + 0x2f], 1
je 0x42749d
mov byte [esp + 0x2f], 0
mov al, byte [esi]
xor ecx, ecx
cmp byte [esp + 0x2f], cl
setne cl
dec ecx
and ecx, 0x14
mov dword [esp + 0x48], ecx
cmp al, 0x82
je 0x427506
cmp al, 0x83
je 0x427506
mov edx, dword [0x4aacc8]
cmp byte [edx], 0
je 0x427542
mov ecx, dword [esp + 0x14]
mov al, byte [ecx]
cmp al, 0x82
je 0x4275b6
cmp al, 0x83
je 0x4275b8
mov edx, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push ecx
mov ecx, dword [0x4aaccc]
push eax
call fcn.00434220
mov esi, dword [esp + 0x14]
jmp 0x4297fa
mov eax, dword [0x4aacc8]
cmp byte [eax], 0
je 0x427537
mov edi, 2
mov ecx, esi
call fcn.004207e0
fmul qword [0x4a18f0]
call fcn.00493e80
mov dword [esp + 0x48], eax
test eax, eax
jne 0x427537
mov dword [esp + 0x48], 0x1f4
mov ecx, dword [0x4aacd0]
cmp byte [ecx], 0
jne 0x4274c7
cmp byte [esp + 0x2f], 0
je 0x4274c7
mov esi, dword [0x4aacc0]
add esi, 9
mov al, byte [esi]
cmp al, 0x20
je 0x427560
cmp al, 9
jne 0x427563
inc esi
jmp 0x427556
cmp byte [esi], 0
je 0x4274c7
mov edi, dword [0x4acdb8]
test edi, edi
je 0x4274c7
lea ebx, [ebx]
mov eax, dword [edi + 4]
push esi
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x42759d
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x427580
jmp 0x4274c7
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x48]
mov cl, byte [eax]
push edi
call fcn.00477f80
mov esi, dword [esp + 0x14]
jmp 0x4297fa
cmp al, 0x83
mov ecx, dword [0x4aacd0]
sete dl
movzx eax, dl
mov edx, dword [esp + 0x48]
push eax
mov eax, dword [0x4aacc4]
push ecx
push edx
push eax
mov eax, dword [0x4aaccc]
push ebx
mov ebx, dword [0x4aacc0]
call fcn.00476440
add esp, 0x14
test eax, eax
je 0x427457
mov ecx, dword [0x4a7440]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x427457
push 1
push eax
call fcn.00401290
mov esi, dword [esp + 0x1c]
add esp, 8
mov eax, 1
jmp 0x4297fa
mov ebx, dword [0x4aacc4]
call fcn.00438120
jmp 0x4297fa
mov edx, dword [0x4aacc4]
mov eax, dword [0x4aacc0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042e830
jmp 0x4297fa
lea eax, [esp + 0xd4]
push eax
push 0x3a98
push 1
push str.Environment
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042e830
jmp 0x4297fa
mov eax, dword [0x4aacc4]
mov ecx, dword [0x4aacc0]
push eax
push ecx
push esi
call fcn.004518d0
jmp 0x4297fa
mov edx, dword [0x4aacc0]
push 0
push 0xffffffffffffffff
push edx
mov eax, 0x4ad3a0
call fcn.0046fcf0
mov eax, dword [0x4aacc4]
add esp, 0xc
push 0
push 0xffffffffffffffff
push eax
mov eax, 0x4ad3ac
call fcn.0046fcf0
mov ecx, dword [0x4aacc8]
add esp, 0xc
push 0
push 0xffffffffffffffff
push ecx
mov eax, 0x4ad3b8
call fcn.0046fcf0
add esp, 0xc
mov eax, 1
jmp 0x4297fa
mov eax, dword [0x4aacc8]
push str.UseErrorLevel
call fcn.00472ad0
add esp, 4
test eax, eax
setne bl
mov dl, 3
cmp dl, byte [esi + 1]
mov edx, dword [0x4aacc8]
sbb eax, eax
and eax, dword [0x4aac74]
mov byte [esp + 0xd0], bl
mov ecx, dword [esp + 0xd0]
push eax
push 1
push ecx
push 0
push edx
mov edx, dword [0x4aacc4]
test bl, bl
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4aacc0]
push 0
push 0x4acd80
call fcn.0042f760
test bl, bl
je 0x4297fa
test eax, eax
mov eax, 0x49987c
jne 0x427766
mov eax, str.ERROR
push 1
push 0
push 0xffffffffffffffff
push eax
mov eax, dword [0x4ab51c]
push eax
call fcn.004753c0
jmp 0x4297fa
push esi
call fcn.00434300
jmp 0x4297fa
cmp byte [esi + 1], 2
jbe 0x4277cb
mov ecx, dword [0x4aacd8]
mov edx, dword [0x4aacd4]
mov eax, dword [0x4aacd0]
push ecx
mov ecx, dword [0x4aaccc]
push edx
mov edx, dword [0x4aacc8]
push eax
mov eax, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aacdc]
push edx
mov edx, dword [0x4aacc0]
call fcn.004349d0
jmp 0x4297fa
mov eax, dword [0x4aacc4]
mov ecx, dword [0x4aacc0]
push 0x499831
push 0x499831
push 0x499831
push eax
push ecx
mov ecx, 0x499831
mov eax, ecx
mov edx, ecx
call fcn.004349d0
jmp 0x4297fa
mov edx, dword [0x4aace8]
mov eax, dword [0x4aace4]
mov ecx, dword [0x4aace0]
push edx
mov edx, dword [0x4aacdc]
push eax
mov eax, dword [0x4aacd8]
push ecx
mov ecx, dword [0x4aaccc]
push edx
mov edx, dword [0x4aacc8]
push eax
mov eax, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aacc0]
push edx
mov edx, dword [0x4aacd4]
push eax
push ecx
mov ecx, dword [0x4aacd0]
push esi
call fcn.00450610
jmp 0x4297fa
cmp cl, 0x47
mov ecx, dword [0x4aacd0]
sete dl
movzx eax, dl
mov edx, dword [0x4aaccc]
push eax
mov eax, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aacc0]
push edx
mov edx, dword [0x4aacc8]
push eax
push ecx
mov ecx, dword [0x4aacd4]
push esi
call fcn.00434af0
jmp 0x4297fa
mov esi, dword [0x4aaccc]
push 1
xor bl, bl
call fcn.0040ced0
add esp, 4
mov byte [esp + 0x74], al
test al, al
jne 0x4278c3
mov edx, dword [0x4aaccc]
mov ecx, dword [esp + 0x14]
push edx
push 0
push str.Parameter_4_invalid.
call fcn.0042ea00
mov esi, dword [esp + 0x14]
jmp 0x4297fa
mov eax, dword [0x4aacd0]
cmp byte [eax], bl
je 0x4278dc
mov ecx, dword [esp + 0x14]
mov edi, 4
call fcn.00420730
jmp 0x4278e1
mov eax, 1
mov ecx, dword [0x4aacd8]
mov edx, dword [0x4aacc8]
push ecx
mov ecx, dword [0x4aacc0]
push edx
mov edx, dword [0x4aacd4]
push ecx
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [0x4aacc4]
push eax
mov eax, dword [esp + 0x88]
push eax
push ecx
mov ecx, dword [0x4aacdc]
call fcn.00434bb0
mov esi, dword [esp + 0x14]
jmp 0x4297fa
mov edx, dword [0x4aacdc]
mov eax, dword [0x4aacd8]
mov ecx, dword [0x4aacd0]
push edx
mov edx, dword [0x4aaccc]
push eax
mov eax, dword [0x4aacc8]
push ecx
mov ecx, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [0x4aace0]
push edx
mov edx, dword [0x4aacd4]
push esi
call fcn.004351f0
jmp 0x4297fa
mov eax, dword [0x4aace0]
mov ecx, dword [0x4aacdc]
mov edx, dword [0x4aacd8]
push eax
mov eax, dword [0x4aacd4]
push ecx
mov ecx, dword [0x4aacd0]
push edx
push eax
push ecx
mov ecx, esi
call fcn.00435420
jmp 0x4297fa
mov edx, dword [0x4aacd0]
mov eax, dword [0x4aaccc]
mov ecx, dword [0x4aacc8]
push edx
mov edx, dword [0x4aacc4]
push eax
push ecx
push edx
push esi
call fcn.00435570
jmp 0x4297fa
mov eax, dword [0x4aaccc]
mov ecx, dword [0x4aacc8]
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [0x4aacd0]
push edx
mov edx, dword [0x4aacc4]
push esi
call fcn.00435740
jmp 0x4297fa
mov eax, dword [0x4aacd0]
mov ecx, dword [0x4aaccc]
mov edx, dword [0x4aacc4]
mov esi, dword [0x4aacc0]
push eax
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [0x4aacd4]
push edx
mov edx, dword [0x4aacc8]
push eax
call fcn.00435850
mov esi, dword [esp + 0x14]
jmp 0x4297fa
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aacc4]
mov eax, dword [0x4aaccc]
push ecx
mov ecx, dword [0x4aacd4]
push edx
mov edx, dword [0x4aacc8]
push esi
call fcn.00435910
jmp 0x4297fa
mov eax, dword [0x4aacd8]
mov ecx, dword [0x4aacd4]
mov edx, dword [0x4aacd0]
push eax
mov eax, dword [0x4aaccc]
push ecx
mov ecx, dword [0x4aacc8]
push edx
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [0x4aacc4]
push esi
call fcn.00450910
jmp 0x4297fa
mov edx, dword [0x4aacdc]
mov eax, dword [0x4aacd8]
mov ecx, dword [0x4aacd4]
push edx
mov edx, dword [0x4aacd0]
push eax
mov eax, dword [0x4aaccc]
push ecx
mov ecx, dword [0x4aacc8]
push edx
push eax
push ecx
mov ecx, dword [0x4aacc4]
push esi
call fcn.004510b0
jmp 0x4297fa
mov edx, dword [0x4aacd0]
mov ecx, dword [0x4aacd4]
mov eax, dword [0x4aaccc]
mov edi, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc8]
call fcn.004361c0
jmp 0x4297fa
mov eax, dword [0x4aacd8]
mov ecx, dword [0x4aacd4]
mov edx, dword [0x4aacd0]
push eax
mov eax, dword [0x4aacc8]
push ecx
mov ecx, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [0x4aacdc]
push edx
mov edx, dword [0x4aaccc]
call fcn.00436230
jmp 0x4297fa
cmp cl, 0x90
sete al
movzx ecx, al
push ecx
mov eax, esi
call fcn.00436360
jmp 0x4297fa
mov edx, dword [0x4aacc4]
mov ecx, dword [0x4aacc8]
push edx
mov edx, dword [0x4aacc0]
push esi
call fcn.00436670
jmp 0x4297fa
mov eax, dword [0x4aacd4]
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aaccc]
push eax
mov eax, dword [0x4aacc8]
push ecx
mov ecx, dword [0x4aacc4]
push edx
push eax
push ecx
mov ecx, dword [0x4aacc0]
push esi
call fcn.00436cd0
jmp 0x4297fa
cmp byte [esi + 1], 1
jbe 0x427bb7
mov edx, dword [0x4aaccc]
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aacd0]
push edx
mov edx, dword [0x4aacc0]
push eax
mov eax, dword [0x4aacc4]
call fcn.004370d0
jmp 0x4297fa
mov edi, dword [0x4aacc0]
mov ecx, 0x499831
push 0x499831
mov eax, ecx
mov edx, ecx
call fcn.00442fc0
test eax, eax
je 0x427bdc
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, 1
jmp 0x4297fa
mov ecx, dword [0x4aaccc]
mov eax, dword [0x4aacc8]
mov edx, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aacd0]
call fcn.00437100
jmp 0x4297fa
mov edx, dword [0x4aaccc]
mov ecx, dword [0x4aacd0]
mov eax, dword [0x4aacc8]
push edx
mov edx, dword [0x4aacc4]
call fcn.00437310
jmp 0x4297fa
mov eax, dword [0x4aacd0]
mov ecx, dword [0x4aaccc]
mov edx, dword [0x4aacc4]
push eax
push ecx
mov ecx, dword [0x4aacd4]
push edx
mov edx, dword [0x4aacc8]
push esi
call fcn.00437430
jmp 0x4297fa
mov eax, dword [0x4aaccc]
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aacc4]
push eax
mov eax, dword [0x4aacc8]
push esi
call fcn.00437cd0
jmp 0x4297fa
mov ecx, dword [0x4aacdc]
mov edx, dword [0x4aacd8]
mov eax, dword [0x4aacd4]
push ecx
mov ecx, dword [0x4aacd0]
push edx
push eax
push ecx
mov eax, esi
call fcn.00437fa0
jmp 0x4297fa
mov edx, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push edx
push esi
call fcn.00438270
jmp 0x4297fa
push 0
push 0x1a3
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [0x4a7440]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle 0x427cee
push 1
push eax
call fcn.00401290
add esp, 8
mov eax, 1
jmp 0x4297fa
push 0
push 0x1a0
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [0x4a7440]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x427cee
push 1
push eax
call fcn.00401290
add esp, 8
mov eax, 1
jmp 0x4297fa
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x427d73
mov edi, dword [0x4aacc0]
cmp byte [edi], al
je 0x427d73
mov eax, 0x4acd80
call fcn.00419d50
test eax, eax
jne 0x427d73
mov edx, dword [0x4aacc0]
push edx
push eax
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042ea00
jmp 0x4297fa
mov dword [0x4ad330], eax
mov eax, 1
jmp 0x4297fa
mov ecx, dword [esi + 0xc]
test ecx, ecx
jne 0x427db8
mov eax, 1
cmp al, byte [esi + 1]
sbb eax, eax
and eax, dword [0x4aac6c]
je 0x427db8
cmp byte [eax + 0x17], cl
jne 0x427da5
mov edx, dword [eax + 0xc]
jmp 0x427da7
mov edx, eax
test byte [edx + 0x15], 2
je 0x427db8
cmp byte [eax + 0x17], 0
jne 0x427db6
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
mov edx, dword [0x4aacc8]
mov eax, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push edx
call fcn.0040a5d0
add esp, 0xc
jmp 0x4297fa
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x427e25
mov ecx, dword [0x4aacc0]
push edi
mov esi, 0x4acd80
call fcn.00419d90
mov edi, eax
test edi, edi
jne 0x427e25
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
jne 0x427e0b
mov edi, dword [ebx + 0x9c]
test edi, edi
jne 0x427e25
mov ecx, dword [esp + 0x14]
push eax
push 0
push str.Target_label_does_not_exist.
call fcn.0042ea00
mov esi, dword [esp + 0x14]
jmp 0x4297fa
mov esi, dword [0x4aacc4]
cmp byte [esi], 0
je 0x427ed5
push 0
call fcn.00413f60
add esp, 4
test eax, eax
jne 0x427eab
push eax
mov eax, dword [0x4aacc4]
push 1
push 1
push 1
call fcn.004725e0
add esp, 0x10
test eax, eax
jne 0x427ecc
mov eax, dword [0x4aacc4]
push str.Delete
push eax
call fcn.00485471
add esp, 8
test eax, eax
jne 0x427e8b
mov ecx, edi
mov edx, 0x4acd80
call fcn.00419cb0
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297fa
mov ecx, dword [0x4aacc4]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push str.Parameter_2_invalid.
call fcn.0042ea00
mov esi, dword [esp + 0x14]
jmp 0x4297fa
jle 0x427ecc
cmp eax, 2
jg 0x427ecc
mov ecx, dword [0x4aacc8]
cmp eax, 1
sete dl
push 0
movzx eax, dl
push eax
push ecx
push 0x499831
jmp 0x427eed
mov esi, dword [0x4aacc4]
cmp byte [esi], 0
mov ecx, dword [0x4aacc8]
jne 0x427ee6
cmp byte [ecx], 0
je 0x427ee6
mov al, 1
jmp 0x427ee8
xor al, al
push eax
push 1
push ecx
push esi
push edi
mov edi, 0x4acd80
call fcn.004199f0
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297fa
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
mov edi, 0x10
je 0x427f36
push 0x49b4c0
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x427f36
xor edi, edi
mov ecx, esi
call fcn.00420730
mov edi, eax
test edi, edi
je 0x427f3b
mov eax, 1
mov byte [ebx + 0xca], al
test al, al
je 0x427f67
or eax, 0xffffffff
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 0x24], eax
mov dword [ebx + 0xb4], edi
mov byte [ebx + 0xc8], 0
mov eax, 1
jmp 0x4297fa
mov dword [ebx + 0xb4], 5
mov byte [ebx + 0xc8], 1
mov eax, 1
jmp 0x4297fa
mov esi, dword [0x4aacc0]
call fcn.00413f00
dec eax
je 0x428026
dec eax
je 0x427fdf
dec eax
jne 0x428037
mov edx, dword [0x4aacc4]
cmp byte [edx], al
je 0x427fc9
mov ecx, dword [esp + 0x14]
lea edi, [eax + 1]
call fcn.00420730
or eax, edx
jne 0x427fc9
mov esi, dword [esp + 0x14]
mov eax, edi
mov byte [ebx + 0xc9], al
jmp 0x4297fa
mov esi, dword [esp + 0x14]
xor eax, eax
mov byte [ebx + 0xc9], al
mov eax, 1
jmp 0x4297fa
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
je 0x427ffc
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00420730
mov dword [0x4ad394], eax
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0
je 0x428037
mov ecx, dword [esp + 0x14]
mov edi, 2
call fcn.00420730
mov esi, dword [esp + 0x14]
mov dword [0x4ad390], eax
lea eax, [edi - 1]
jmp 0x4297fa
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00420730
mov dword [ebx + 0x2c], eax
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297fa
mov ebx, dword [esi + 0xc]
test ebx, ebx
jne 0x428068
mov edx, dword [0x4aacc0]
push 0x4acd80
mov cl, 1
call fcn.004225a0
mov ebx, eax
test ebx, ebx
je case.0x4262f5.8
mov edi, dword [0x4aaccc]
cmp byte [edi], 0
je 0x4280a4
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x4280a1
mov eax, 0x4acd80
call fcn.00419d50
test eax, eax
jne 0x4280a1
mov edx, dword [0x4aaccc]
push edx
push eax
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042ea00
jmp 0x4297fa
mov dword [ebx + 0x10], eax
mov eax, dword [0x4aacd4]
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aacc8]
push eax
push ecx
mov ecx, dword [0x4aacc4]
push edx
push ebx
call fcn.00477cd0
jmp 0x4297fa
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x428106
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
mov ebx, eax
je 0x428140
mov edi, dword [0x4acdb8]
test edi, edi
je 0x428140
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x428106
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x4280e6
lea eax, [edi + 1]
jmp 0x4297fa
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x428136
push 0x49b154
push eax
call fcn.00485471
add esp, 8
test eax, eax
jne 0x428136
mov al, 1
mov ecx, edi
push eax
call fcn.004782d0
mov eax, 1
jmp 0x4297fa
xor al, al
mov ecx, edi
push eax
call fcn.004782d0
mov eax, 1
jmp 0x4297fa
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x428190
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
mov ebx, eax
je 0x4281f8
mov edi, dword [0x4acdb8]
test edi, edi
je 0x4281f8
nop
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x428190
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x428170
lea eax, [edi + 1]
jmp 0x4297fa
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x4281ef
push 0x49bfe8
push eax
call fcn.00485471
add esp, 8
test eax, eax
jne 0x4281c0
push edi
xor edx, edx
mov cl, 0x82
call fcn.00477f80
mov eax, 1
jmp 0x4297fa
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x4281ef
push 0x49b154
push eax
call fcn.00485471
add esp, 8
test eax, eax
jne 0x4281ef
mov al, 1
push eax
push edi
call fcn.00478040
mov eax, 1
jmp 0x4297fa
xor al, al
push eax
push edi
call fcn.00478040
mov eax, 1
jmp 0x4297fa
mov eax, dword [0x4aacc8]
push eax
mov eax, dword [0x4aacc4]
call fcn.0043e240
jmp 0x4297fa
test edi, edi
jne 0x428233
mov edi, 1
mov ecx, esi
call fcn.00420730
call fcn.00412640
mov eax, edi
jmp 0x4297fa
mov eax, dword [0x4aacc4]
push 0
push 1
push 0
push 1
call fcn.004725e0
add esp, 0x10
cmp eax, 2
je 0x42826b
mov eax, dword [0x4aacc8]
push 0
push 1
push 0
push 1
call fcn.004725e0
add esp, 0x10
cmp eax, 2
jne 0x428306
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0
je 0x428284
mov edi, 1
mov ecx, esi
call fcn.004207e0
jmp 0x428286
fldz
mov edx, dword [0x4aacc8]
fst qword [esp + 0x38]
cmp byte [edx], 0
je 0x4282c6
mov edi, 2
fstp st(0)
mov ecx, esi
call fcn.004207e0
fst qword [esp + 0x88]
fld qword [esp + 0x38]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x4282d5
fstp qword [esp + 0x38]
fstp qword [esp + 0x88]
jmp 0x4282d9
fld qword [0x4a1970]
fst qword [esp + 0x88]
jmp 0x4282b0
fstp st(0)
fstp st(0)
call fcn.004127b0
fld qword [esp + 0x88]
fld qword [esp + 0x38]
mov eax, dword [esp + 0x18]
fsub st(1), st(0)
sub esp, 8
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push eax
call fcn.00412d20
jmp 0x4297fa
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0
je 0x428321
mov edi, 1
mov ecx, esi
call fcn.00420730
mov ebx, eax
jmp 0x428323
xor ebx, ebx
mov edx, dword [0x4aacc8]
cmp byte [edx], 0
je 0x428340
mov ecx, dword [esp + 0x14]
mov edi, 2
call fcn.00420730
mov esi, eax
jmp 0x428345
mov esi, SysReAllocString
cmp ebx, esi
jle 0x42834f
mov eax, ebx
mov ebx, esi
mov esi, eax
call fcn.00412760
mov ecx, eax
mov eax, ebx
cdq
mov edi, eax
mov dword [esp + 0x38], edx
mov eax, esi
cdq
sub eax, edi
sbb edx, dword [esp + 0x38]
add eax, 1
adc edx, 0
push edx
push eax
push 0
push ecx
call fcn.00494940
add eax, ebx
jmp 0x426ff1
mov ecx, dword [0x4aacc4]
push 1
push esi
call fcn.0043e420
jmp 0x4297fa
mov edx, dword [0x4aacc8]
mov eax, dword [0x4aacc4]
mov ecx, dword [0x4aacc0]
push edx
push esi
call fcn.0043e5e0
jmp 0x4297fa
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push esi
call fcn.0043e890
jmp 0x4297fa
mov eax, dword [0x4aaccc]
mov edx, dword [0x4aacc4]
push eax
xor eax, eax
cmp cl, 0x9b
sete al
push edx
dec eax
and eax, dword [0x4aacc0]
push eax
push esi
call fcn.0043ee40
jmp 0x4297fa
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0
je 0x428407
mov edi, 1
mov ecx, esi
call fcn.00420730
dec eax
jmp 0x428409
xor eax, eax
cdq
test edx, edx
jg 0x42841a
jl 0x428414
test eax, eax
jae 0x42841a
xor eax, eax
mov dword [esp + 0x3c], eax
cmp byte [esi], 0x9d
push eax
jne 0x42842e
mov esi, dword [esp + 0x18]
call fcn.0043ff40
jmp 0x4297fa
mov edi, dword [0x4aacc0]
mov ebx, esi
call fcn.00440030
jmp 0x4297fa
mov edx, dword [0x4aacc4]
cmp byte [edx], 0
je 0x42845b
mov edi, 1
mov ecx, esi
call fcn.00420730
mov ebx, eax
jmp 0x428460
mov ebx, 0x96
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
je 0x428483
xor edi, edi
mov ecx, esi
call fcn.00420730
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
lea eax, [edi + 1]
jmp 0x4297fa
mov eax, 0x20b
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov eax, 1
jmp 0x4297fa
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x4284bb
push str.wait
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x4284e0
mov eax, dword [0x4aacc4]
push 0x49aee0
push eax
call fcn.00485471
add esp, 8
test eax, eax
je 0x4284e0
xor al, al
push eax
mov eax, dword [0x4aacc0]
push esi
call fcn.00440190
jmp 0x4297fa
mov eax, 1
push eax
mov eax, dword [0x4aacc0]
push esi
call fcn.00440190
jmp 0x4297fa
cmp byte [esi + 1], 2
jae 0x428501
mov ebx, dword [ebx + 0x18]
jmp 0x428503
xor ebx, ebx
mov ecx, dword [0x4aacc0]
mov edx, dword [0x4aacc4]
push ebx
push ecx
push edx
push esi
call fcn.004415e0
jmp 0x4297fa
mov ecx, dword [0x4aacc4]
push esi
call fcn.00440c10
jmp 0x4297fa
mov eax, dword [0x4aacc4]
mov ecx, dword [0x4aacc8]
push eax
push esi
call fcn.00441250
jmp 0x4297fa
push esi
call fcn.004419f0
jmp 0x4297fa
mov eax, dword [0x4aacc0]
mov esi, dword [esp + 0x14]
call fcn.00452600
jmp 0x4297fa
mov edi, dword [0x4aacc0]
push esi
call fcn.00452700
jmp 0x4297fa
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
mov edx, dword [0x4aacc0]
push esi
call fcn.00441c80
jmp 0x4297fa
add ebx, 0x30
push ebx
push 0
mov edi, 2
mov ecx, esi
call fcn.00420730
cmp eax, 1
mov eax, dword [0x4aacc4]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4aacc0]
push eax
call fcn.00452da0
add esp, 0x10
test eax, eax
jne 0x428610
mov ecx, dword [0x4ab51c]
push 1
push eax
push 0xffffffffffffffff
push 0x49987c
push ecx
call fcn.004753c0
jmp 0x4297fa
add ebx, 0x30
push ebx
push 1
mov edi, 2
mov ecx, esi
call fcn.00420730
mov ecx, dword [0x4aacc4]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4aacc0]
push eax
push ecx
call fcn.00452da0
add esp, 0x10
push eax
push esi
call fcn.0042e8f0
jmp 0x4297fa
mov edi, 2
mov ecx, esi
call fcn.00420730
mov ecx, dword [0x4aacc4]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4aacc0]
push eax
push ecx
call fcn.00452980
add esp, 8
test al, al
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042e830
jmp 0x4297fa
mov ecx, dword [0x4aacc8]
mov al, byte [ecx]
call fcn.00409370
cmp al, 0x52
jne 0x428693
mov edx, dword [0x4aacc4]
mov eax, dword [0x4aacc0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042e830
jmp 0x4297fa
mov edi, 2
mov ecx, esi
call fcn.00420730
mov ecx, dword [0x4aacc4]
mov edx, dword [0x4aacc0]
push ecx
mov edi, eax
call fcn.00452b10
add esp, 4
test al, al
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042e830
jmp 0x4297fa
mov ecx, dword [0x4aacc0]
push ecx
mov ecx, esi
call fcn.00440a50
jmp 0x4297fa
mov edx, dword [0x4aacc0]
cmp byte [edx], 0
je 0x42871d
mov edi, 1
mov ecx, esi
call fcn.00420730
mov edx, dword [0x4aacc0]
cmp eax, edi
sete al
movzx ecx, al
push ecx
call fcn.00452cc0
add esp, 4
test al, al
je 0x42871d
xor al, al
push eax
push esi
call fcn.0042e830
jmp 0x4297fa
mov eax, 1
push eax
push esi
call fcn.0042e830
jmp 0x4297fa
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
jne 0x428747
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
test ebx, ebx
jne 0x428747
mov eax, 0x499831
mov edi, esi
call fcn.00441e20
jmp 0x4297fa
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x428763
mov dword [esp + 0x34], eax
jmp 0x42877b
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x428773
add eax, 0x2c
mov dword [esp + 0x34], eax
jmp 0x42877b
mov dword [esp + 0x34], 0x499831
push 0
push ecx
mov ecx, dword [esp + 0x1c]
mov edi, 3
call fcn.00420730
mov esi, dword [0x4aacc8]
add esp, 4
cmp eax, 1
sete dl
movzx eax, dl
push eax
call fcn.00414240
mov ecx, dword [esp + 0x3c]
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [esp + 0x24]
push edx
call fcn.00441f30
mov esi, dword [esp + 0x14]
xor eax, eax
cmp dword [ebx + 0xdc], eax
sete al
jmp 0x4297fa
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
jne 0x4287e7
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
test ebx, ebx
jne 0x4287e7
mov eax, 0x499831
mov ecx, dword [0x4aacc8]
movzx edx, byte [ecx]
push edx
mov edi, esi
call fcn.00442610
jmp 0x4297fa
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x42880d
mov dword [esp + 0x34], eax
jmp 0x428825
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x42881d
add eax, 0x2c
mov dword [esp + 0x34], eax
jmp 0x428825
mov dword [esp + 0x34], 0x499831
push 0
push ecx
mov ecx, dword [esp + 0x1c]
mov edi, 4
call fcn.00420730
mov esi, dword [0x4aaccc]
add esp, 4
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.00414240
mov edx, dword [0x4aacc8]
mov ecx, dword [esp + 0x3c]
push eax
movzx eax, byte [edx]
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [esp + 0x28]
push edx
call fcn.00442790
mov esi, dword [esp + 0x14]
xor eax, eax
cmp dword [ebx + 0xdc], eax
sete al
jmp 0x4297fa
mov edi, dword [0x4aacc4]
cmp byte [edi], 0
jne 0x42889c
mov ebx, dword [ebx + 0x10]
lea edi, [ebx + 0x2c]
test ebx, ebx
jne 0x42889c
mov edi, 0x499831
mov eax, dword [0x4aacc8]
push eax
push esi
call fcn.00442d50
jmp 0x4297fa
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
jne 0x4288c6
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
test ebx, ebx
jne 0x4288c6
mov eax, 0x499831
push esi
call fcn.004527b0
jmp 0x4297fa
mov edi, dword [0x4aacc0]
call fcn.00440380
xor eax, eax
cmp dword [ebx + 0xdc], eax
sete al
jmp 0x4297fa
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aaccc]
push edx
mov edx, dword [0x4aacc8]
push esi
call fcn.00440460
jmp 0x4297fa
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push eax
push ecx
mov ecx, dword [0x4aaccc]
mov edx, esi
call fcn.00451cf0
jmp 0x4297fa
mov edx, dword [0x4aacc0]
push edx
push esi
call fcn.00452010
jmp 0x4297fa
mov eax, dword [0x4aace0]
mov ecx, dword [0x4aacdc]
mov edx, dword [0x4aacd8]
mov ebx, dword [0x4aacd0]
mov edi, dword [0x4aaccc]
push eax
mov eax, dword [0x4aacd4]
push ecx
mov ecx, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push ecx
mov ecx, dword [0x4aacc8]
push edx
push esi
call fcn.004523b0
jmp 0x4297fa
push 0
mov ecx, 4
call fcn.0043a8d0
add esp, 4
jmp 0x4297fa
mov esi, dword [0x4aacc0]
push 7
call fcn.00413f60
add esp, 4
cmp eax, 7
jne 0x4289c6
push 0
lea ecx, [eax - 6]
call fcn.0043a8d0
mov esi, dword [esp + 0x18]
add esp, 4
jmp 0x4297fa
cmp byte [ebx + 0xd5], 0
je 0x4289f2
mov ecx, dword [0x4accc0]
test ecx, ecx
jle 0x4289dc
dec ecx
jmp 0x4289e1
mov ecx, 0x18f
mov dword [0x4accc0], ecx
mov dword [ecx*4 + 0x4ac680], 0
mov esi, dword [esp + 0x14]
cmp eax, 1
sete al
mov byte [ebx + 0xd5], al
mov eax, 1
jmp 0x4297fa
push 0
mov ecx, 2
call fcn.0043a8d0
add esp, 4
jmp 0x4297fa
push 0
mov ecx, 3
call fcn.0043a8d0
add esp, 4
jmp 0x4297fa
mov ebx, dword [0x4a7440]
add ebx, 0x4c
call fcn.0045b1e0
test eax, eax
je 0x428a54
mov ecx, dword [0x4a7440]
mov edx, dword [ecx + 0x4c]
mov eax, dword [edx + 4]
jmp 0x428a56
xor eax, eax
mov cl, byte [esi + 1]
push eax
test cl, cl
jne 0x428a74
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push str.Press_OK_to_continue.
jmp 0x428ab9
cmp cl, 1
jne 0x428a90
fldz
mov eax, dword [0x4aacc0]
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push eax
jmp 0x428ab9
push ecx
mov edi, 3
mov ecx, esi
call fcn.004207e0
push ecx
mov ecx, dword [0x4aacc4]
fstp qword [esp]
push ecx
xor edi, edi
mov ecx, esi
call fcn.00420730
mov edx, dword [0x4aacc8]
push eax
push edx
call fcn.00476fb0
mov edi, eax
add esp, 0x18
test edi, edi
jne 0x428aec
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x59e
jne 0x428aec
mov eax, dword [0x4aacc0]
push eax
push edi
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042ea00
jmp 0x4297fa
xor eax, eax
test edi, edi
setne al
jmp 0x4297fa
mov ecx, dword [0x4aacdc]
cmp byte [ecx], 0
je 0x428b15
mov edi, 7
mov ecx, esi
call fcn.00420730
mov dword [esp + 0x34], eax
jmp 0x428b1d
mov dword [esp + 0x34], CreateStatusWindowA
mov edx, dword [0x4aacd8]
cmp byte [edx], 0
je 0x428b3a
mov edi, 6
mov ecx, esi
call fcn.00420730
mov dword [esp + 0x50], eax
jmp 0x428b42
mov dword [esp + 0x50], CreateStatusWindowA
mov eax, dword [0x4aacd4]
cmp byte [eax], 0
je 0x428b5e
mov ecx, dword [esp + 0x14]
mov edi, 5
call fcn.00420730
mov esi, eax
jmp 0x428b63
mov esi, SysReAllocString
mov ecx, dword [0x4aacd0]
cmp byte [ecx], 0
je 0x428b80
mov ecx, dword [esp + 0x14]
mov edi, 4
call fcn.00420730
mov ebx, eax
jmp 0x428b85
mov ebx, SysReAllocString
mov ecx, dword [esp + 0x14]
mov edi, 9
call fcn.004207e0
mov edx, dword [0x4aace8]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x50]
sub esp, 8
fstp qword [esp]
push edx
mov edx, dword [0x4aaccc]
push eax
mov al, byte [edx]
push ecx
push esi
call fcn.00409370
mov edx, dword [0x4aacc4]
cmp al, 0x48
mov eax, dword [0x4aacc8]
push eax
mov eax, dword [esp + 0x34]
push edx
sete cl
push eax
mov edi, ebx
call fcn.0043ab90
mov esi, dword [esp + 0x38]
add esp, 0x24
jmp 0x4297fa
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0
je 0x428bfd
mov edi, 1
mov ecx, esi
call fcn.00420730
mov ebx, eax
jmp 0x428bff
xor ebx, ebx
mov edx, dword [0x4aacc0]
cmp byte [edx], 0
je 0x428c15
xor edi, edi
mov ecx, esi
call fcn.00420730
jmp 0x428c1a
mov eax, 0xc8
mov ecx, dword [0x4aaccc]
mov edx, dword [0x4aacc8]
push ecx
push edx
push ebx
push eax
call fcn.004503a0
jmp 0x4297fa
mov eax, dword [0x4aad28]
test eax, eax
je 0x428c54
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x428c54
mov eax, dword [0x4aad28]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4aad28], 0
mov eax, 1
jmp 0x4297fa
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aaccc]
mov eax, dword [0x4aacc8]
push 0
push ecx
mov ecx, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push ecx
push edx
push esi
mov ecx, 0x499831
call fcn.00431060
jmp 0x4297fa
mov eax, dword [0x4aacd4]
mov ecx, dword [0x4aacd0]
mov edx, dword [0x4aaccc]
push 1
push eax
mov eax, dword [0x4aacc8]
push ecx
mov ecx, dword [0x4aacc4]
push edx
push eax
push ecx
mov ecx, dword [0x4aacc0]
push esi
call fcn.00431060
jmp 0x4297fa
mov edx, dword [0x4aacc8]
mov eax, dword [0x4aacc4]
mov ecx, dword [0x4aacc0]
push edx
push eax
push ecx
mov ecx, dword [0x4aaccc]
push esi
call fcn.00432230
jmp 0x4297fa
mov edx, dword [0x4aacc4]
mov eax, dword [0x4aacc0]
mov edi, dword [0x4aaccc]
mov esi, dword [0x4aacc8]
push edx
push eax
call fcn.00432540
mov esi, dword [esp + 0x14]
jmp 0x4297fa
push esi
call fcn.004332c0
jmp 0x4297fa
mov esi, dword [0x4aacc4]
call fcn.004144e0
mov esi, dword [0x4aacc0]
movzx edi, ax
call fcn.00414550
movzx ecx, ax
cmp ecx, 0xffffffff
je case.0x42924e.3
cmp edi, 0xffffffff
je case.0x42924e.3
mov esi, dword [esp + 0x14]
mov eax, 3
shl ax, cl
shl di, cl
not ax
and ax, word [ebx + 0xcc]
or ax, di
mov word [ebx + 0xcc], ax
mov eax, 1
jmp 0x4297fa
xor edi, edi
mov ecx, esi
call fcn.00420730
mov byte [ebx + 0xcb], al
cmp al, 0x64
jbe 0x428d9c
mov byte [ebx + 0xcb], 2
mov eax, 1
jmp 0x4297fa
mov ecx, dword [ebx + 0xb0]
mov eax, dword [0x4aacc0]
push ecx
call fcn.004141b0
mov dword [ebx + 0xb0], eax
add esp, 4
mov eax, 1
jmp 0x4297fa
xor edi, edi
mov ecx, esi
call fcn.00420730
cmp eax, 0x64
ja 0x428dde
mov byte [ebx + 0xd2], al
mov eax, 1
jmp 0x4297fa
mov edx, dword [0x4aacc8]
push str.Play
push edx
call fcn.00485471
add esp, 8
test eax, eax
jne 0x428e37
mov eax, dword [0x4aacc0]
cmp byte [eax], 0
je 0x428e16
xor edi, edi
mov ecx, esi
call fcn.00420730
mov dword [ebx + 0x60], eax
mov ecx, dword [0x4aacc4]
cmp byte [ecx], 0
je 0x428e67
mov edi, 1
mov ecx, esi
call fcn.00420730
mov dword [ebx + 0x68], eax
mov eax, edi
jmp 0x4297fa
mov edx, dword [0x4aacc0]
cmp byte [edx], 0
je 0x428e4e
xor edi, edi
mov ecx, esi
call fcn.00420730
mov dword [ebx + 0x5c], eax
mov eax, dword [0x4aacc4]
cmp byte [eax], 0
je 0x428e67
mov edi, 1
mov ecx, esi
call fcn.00420730
mov dword [ebx + 0x64], eax
mov eax, 1
jmp 0x4297fa
mov ecx, dword [0x4aacc4]
push str.Play
push ecx
call fcn.00485471
add esp, 8
xor edi, edi
mov ecx, esi
test eax, eax
jne 0x428e9d
call fcn.00420730
mov dword [ebx + 0x70], eax
lea eax, [edi + 1]
jmp 0x4297fa
call fcn.00420730
mov dword [ebx + 0x6c], eax
mov eax, 1
jmp 0x4297fa
xor edi, edi
mov ecx, esi
call fcn.00420730
mov dword [ebx + 0x54], eax
lea eax, [edi + 1]
jmp 0x4297fa
xor edi, edi
mov ecx, esi
call fcn.00420730
mov dword [ebx + 0x58], eax
lea eax, [edi + 1]
jmp 0x4297fa
mov eax, dword [0x4aacc0]
push 0x49d338
call fcn.00472ad0
add esp, 4
xor edi, edi
mov ecx, esi
test eax, eax
je 0x428f0e
mov dword [ebx], 0xffffffff
mov dword [ebx + 4], 0xffffffff
call fcn.00420730
mov dword [ebx + 0x24], eax
lea eax, [edi + 1]
jmp 0x4297fa
mov dword [ebx + 0x24], 0xffffffff
call fcn.00420730
mov dword [ebx + 4], edx
mov edx, eax
or edx, dword [ebx + 4]
mov dword [ebx], eax
jne 0x428f2f
mov dword [ebx], 0xa
mov dword [ebx + 4], edi
mov eax, 1
jmp 0x4297fa
mov esi, dword [0x4aacc0]
push 7
call fcn.00413f60
add esp, 4
cmp eax, 7
je case.0x42924e.3
mov esi, dword [esp + 0x14]
cmp eax, 1
sete al
mov byte [ebx + 0xcf], al
mov eax, 1
jmp 0x4297fa
mov esi, dword [0x4aacc0]
call fcn.00413bd0
dec eax
cmp eax, 5
ja case.default.0x428f81
jmp dword [eax*4 + 0x42a174]
mov esi, dword [esp + 0x14]
mov eax, 1
mov dword [ebx + 0x20], eax
jmp 0x4297fa
mov esi, dword [esp + 0x14]
mov dword [ebx + 0x20], 2
mov eax, 1
jmp 0x4297fa
mov esi, dword [esp + 0x14]
mov dword [ebx + 0x20], 4
mov eax, 1
jmp 0x4297fa
mov esi, dword [esp + 0x14]
mov dword [ebx + 0x20], 3
mov eax, 1
jmp 0x4297fa
mov esi, dword [esp + 0x14]
mov byte [ebx + 0xc5], 1
mov eax, 1
jmp 0x4297fa
mov esi, dword [esp + 0x14]
mov byte [ebx + 0xc5], 0
mov eax, 1
jmp 0x4297fa
mov ecx, dword [0x4aacc0]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push str.Parameter_1_invalid.
call fcn.0042ea00
mov esi, dword [esp + 0x14]
jmp 0x4297fa
mov edx, dword [0x4aacc0]
push 5
push str.Float
push edx
call fcn.00485ef0
add esp, 0xc
test eax, eax
jne 0x429111
lea edi, [eax + 1]
mov ecx, esi
call fcn.004206b0
cmp eax, 0x1e
jb 0x429056
mov eax, edi
jmp 0x4297fa
mov ecx, dword [esp + 0x14]
call fcn.00420730
mov edi, eax
mov eax, dword [0x4aacc4]
push 0x2e
push eax
mov dword [esp + 0xe4], edx
call fcn.00486461
mov esi, eax
add esp, 8
mov dword [esp + 0x38], esi
test esi, esi
je 0x42908e
inc esi
call fcn.00412c20
mov esi, dword [esp + 0x38]
jmp 0x429092
xor eax, eax
xor edx, edx
add eax, edi
adc edx, dword [esp + 0xdc]
add eax, 2
adc edx, 0
mov dword [esp + 0x3c], edx
js 0x4290b8
jg case.0x42924e.3
cmp eax, 0xff
ja case.0x42924e.3
mov eax, dword [0x4aacc4]
push 0
push 1
push 1
push 1
call fcn.004725e0
add esp, 0x10
mov ecx, 0x49d33c
test eax, eax
jne 0x4290db
mov ecx, 0x499831
mov eax, 0x499831
test esi, esi
jne 0x4290e9
mov eax, 0x49c46c
push ecx
mov ecx, dword [0x4aacc4]
push eax
push ecx
push str.___s_s_s
add ebx, 0x74
push ebx
call fcn.004859a8
mov esi, dword [esp + 0x28]
add esp, 0x14
mov eax, 1
jmp 0x4297fa
mov edx, dword [0x4aacc0]
push 7
push str.Integer
push edx
call fcn.00485ef0
add esp, 0xc
test eax, eax
jne case.0x429144.69
mov eax, dword [0x4aacc4]
mov al, byte [eax]
movsx ecx, al
add ecx, 0xffffffbc
cmp ecx, 0x24
ja case.0x429144.69
movzx ecx, byte [ecx + 0x42a198]
jmp dword [ecx*4 + 0x42a18c]
mov byte [ebx + 0xd1], 0x44
mov eax, 1
jmp 0x4297fa
mov byte [ebx + 0xd1], al
mov eax, 1
jmp 0x4297fa
mov edx, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push edx
call fcn.0043bb60
jmp 0x4297fa
mov edx, dword [0x4aacd4]
mov al, 3
cmp al, byte [esi + 1]
mov eax, dword [0x4aacd0]
sbb ecx, ecx
and ecx, dword [0x4aac74]
push ecx
mov ecx, dword [0x4aaccc]
push edx
mov edx, dword [0x4aacc8]
push eax
mov eax, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aacc0]
push edx
push eax
push ecx
push 0x4acd80
call fcn.00468a50
jmp 0x4297fa
mov edx, dword [0x4aaccc]
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push edx
mov edx, dword [0x4aacc0]
push eax
push 0x4acd80
call fcn.0045b250
jmp 0x4297fa
mov eax, dword [0x4aacc4]
mov cl, 2
cmp cl, byte [esi + 1]
mov ecx, dword [0x4aacc0]
sbb edx, edx
and edx, dword [0x4aac70]
push edx
push eax
mov eax, dword [0x4aacc8]
push ecx
push esi
call fcn.0045bb40
jmp 0x4297fa
mov edx, dword [0x4aaccc]
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aacc4]
push edx
push eax
push ecx
push esi
call fcn.0045cb70
jmp 0x4297fa
mov esi, dword [0x4aacc0]
call fcn.00414060
cmp eax, 7
ja case.0x42924e.3
jmp dword [eax*4 + 0x42a1c0]
cmp byte [0x4aae78], 0
jne case.0x42924e.3
call fcn.0042e440
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297fa
cmp byte [0x4aae78], 0
je case.0x42924e.3
call fcn.0042e440
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297fa
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00420730
mov esi, dword [0x4aacc0]
test eax, eax
setne al
movzx ecx, al
push ecx
call fcn.00413fb0
mov edx, dword [esp + 0x18]
push eax
push edx
call fcn.0042e490
mov esi, dword [esp + 0x14]
jmp 0x4297fa
mov esi, dword [0x4aacc0]
push 7
call fcn.00413f60
add esp, 4
cmp eax, 7
je case.0x42924e.3
mov esi, dword [esp + 0x14]
cmp eax, 1
sete al
mov byte [ebx + 0xd0], al
mov eax, 1
jmp 0x4297fa
mov esi, dword [0x4aacc0]
call fcn.00414010
mov byte [ebx + 0xce], al
cmp al, 4
jne case.0x42924e.3
mov esi, dword [esp + 0x14]
mov byte [ebx + 0xce], 0
mov eax, 1
jmp 0x4297fa
mov esi, dword [0x4aacc0]
push 7
call fcn.00413f60
add esp, 4
cmp eax, 7
je case.0x42924e.3
mov esi, dword [esp + 0x14]
cmp eax, 1
sete cl
mov byte [ebx + 0xc6], cl
mov eax, 1
jmp 0x4297fa
mov esi, dword [0x4aacc0]
push 7
call fcn.00413f60
add esp, 4
cmp eax, 7
je case.0x42924e.3
mov esi, dword [esp + 0x14]
cmp eax, 1
sete dl
mov byte [ebx + 0xc7], dl
mov eax, 1
jmp 0x4297fa
mov esi, dword [0x4aacc0]
call fcn.004140d0
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x42924e.3
movzx ecx, byte [ecx + 0x42a1f8]
jmp dword [ecx*4 + 0x42a1e0]
mov bl, 1
call fcn.0042e590
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297fa
xor bl, bl
call fcn.0042e590
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297fa
mov esi, dword [esp + 0x14]
mov dword [0x4a7450], eax
mov eax, 1
jmp 0x4297fa
or byte [0x4ab62a], 2
cmp dword [0x4aae54], 0
mov byte [0x4ab629], 1
jne case.0x42924e.3
mov edx, dword [0x4a8554]
movzx eax, word [edx]
push eax
call fcn.00407e60
mov esi, dword [esp + 0x18]
add esp, 4
mov eax, 1
jmp 0x4297fa
mov esi, dword [esp + 0x14]
mov byte [0x4ab629], 0
mov eax, 1
jmp 0x4297fa
mov esi, dword [0x4aacc0]
push str._a_a_a_v
mov al, 0x90
call fcn.00442f10
mov esi, dword [esp + 0x18]
add esp, 4
jmp 0x4297fa
mov esi, dword [0x4aacc0]
push 0x4a7448
mov al, 0x14
call fcn.00442f10
mov esi, dword [esp + 0x18]
add esp, 4
jmp 0x4297fa
mov esi, dword [0x4aacc0]
push 0x4a744c
mov al, 0x91
call fcn.00442f10
mov esi, dword [esp + 0x18]
add esp, 4
jmp 0x4297fa
mov al, 1
mov edx, 0x4acd80
call fcn.00415b40
mov eax, 1
jmp 0x4297fa
xor edi, edi
mov ecx, esi
call fcn.00420730
jmp 0x427ce3
mov ecx, dword [0x4aaccc]
mov edx, dword [0x4aacc4]
push ecx
mov ecx, dword [0x4aacd0]
push edx
mov edx, dword [0x4aacc8]
call fcn.0046f020
jmp 0x4297fa
mov eax, dword [0x4aacc0]
mov ecx, dword [0x4aaccc]
mov ebx, dword [0x4aacc8]
mov edx, dword [0x4aacc4]
push eax
push esi
call fcn.0046f140
jmp 0x4297fa
cmp byte [esi + 1], 3
mov edx, dword [0x4aacc4]
sbb ecx, ecx
not ecx
and ecx, dword [0x4aacc8]
push ecx
push edx
mov edx, dword [0x4aacc0]
push esi
call fcn.0046f260
jmp 0x4297fa
mov eax, 2
cmp byte [esi + 1], al
jae 0x42955a
mov ebx, dword [ebx + 0x14]
test ebx, ebx
je 0x42955a
lea eax, [ebx + 0x408]
push eax
mov eax, dword [ebx + 4]
lea ecx, [ebx + 8]
push ecx
push esi
call fcn.0046f2d0
jmp 0x4297fa
lea edx, [esp + 0x2e]
push edx
mov edx, dword [0x4aacc4]
lea ecx, [esp + 0x58]
push ecx
push edx
call fcn.00413890
mov edi, eax
mov eax, dword [esp + 0x60]
add esp, 0xc
test eax, eax
jne 0x42958e
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aaccc]
mov dword [esp + 0x54], eax
jmp 0x429594
mov ecx, dword [0x4aacc8]
push ecx
push eax
push esi
mov eax, edi
call fcn.0046f2d0
cmp byte [esp + 0x2e], 0
mov ebx, eax
je 0x4295b2
test edi, edi
je 0x4295b2
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x4297fa
cmp byte [esi + 1], 2
jae 0x4295ec
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x4295ec
mov ebx, dword [0x4aacc0]
lea ecx, [eax + 0x408]
push ecx
mov ecx, dword [eax + 0x808]
lea edx, [eax + 8]
mov eax, dword [eax + 4]
push edx
push ecx
push esi
call fcn.0046f680
jmp 0x4297fa
mov ecx, dword [0x4aacc4]
lea edx, [esp + 0x2e]
push edx
lea eax, [esp + 0x58]
push eax
push ecx
mov eax, 2
call fcn.00413890
mov edi, eax
mov eax, dword [esp + 0x60]
add esp, 0xc
test eax, eax
jne 0x42962b
mov eax, dword [0x4aacc8]
mov ecx, dword [0x4aaccc]
mov ebx, dword [0x4aacd0]
mov dword [esp + 0x54], eax
jmp 0x429637
mov ecx, dword [0x4aacc8]
mov ebx, dword [0x4aaccc]
mov esi, dword [0x4aacc0]
push ecx
push eax
call fcn.00413b00
mov edx, dword [esp + 0x1c]
push eax
push edx
mov eax, edi
call fcn.0046f680
cmp byte [esp + 0x2e], 0
mov esi, eax
je 0x429665
test edi, edi
je 0x429665
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, esi
mov esi, dword [esp + 0x14]
jmp 0x4297fa
cmp byte [esi + 1], 1
jae 0x4296dd
mov ecx, dword [ebx + 0x14]
test ecx, ecx
je 0x4296dd
cmp dword [ecx + 0x808], 0xfffffffe
lea eax, [ecx + 0x408]
jne 0x4296cb
push eax
add ecx, 8
push ecx
push 0x49b6b4
mov esi, 0x400
lea edi, [esp + 0x1cc]
call fcn.00472750
mov ecx, dword [ebx + 0x14]
mov edx, dword [ecx + 4]
mov eax, dword [esp + 0x20]
add esp, 0xc
push edx
push eax
mov eax, 0x499831
mov ebx, edi
call fcn.0046fa60
mov esi, dword [esp + 0x14]
jmp 0x4297fa
lea ebx, [ecx + 8]
mov ecx, dword [ecx + 4]
push ecx
push esi
call fcn.0046fa60
jmp 0x4297fa
mov ecx, dword [0x4aacc0]
lea edx, [esp + 0x2e]
push edx
lea eax, [esp + 0x58]
push eax
push ecx
mov eax, 2
call fcn.00413890
mov ebx, dword [esp + 0x60]
add esp, 0xc
mov edi, eax
test ebx, ebx
jne 0x429716
mov ebx, dword [0x4aacc4]
mov eax, dword [0x4aacc8]
mov dword [esp + 0x54], ebx
jmp 0x42971b
mov eax, dword [0x4aacc4]
push edi
push esi
call fcn.0046fa60
cmp byte [esp + 0x2e], 0
mov ebx, eax
je 0x4295b2
test edi, edi
je 0x4295b2
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x4297fa
mov esi, dword [0x4aacc0]
call fcn.00413b80
mov esi, eax
cmp esi, 0xffffffff
jne 0x429777
mov edx, dword [0x4aacc0]
mov ecx, dword [esp + 0x14]
push edx
push 0
push str.Parameter_1_invalid.
call fcn.0042ea00
mov esi, dword [esp + 0x14]
jmp 0x4297fa
call fcn.00473c90
test eax, eax
je case.0x42924e.3
mov dword [ebx + 0xac], esi
mov esi, dword [esp + 0x14]
mov eax, 1
jmp 0x4297fa
mov eax, dword [0x4aacc0]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, 1
jmp 0x4297fa
xor edi, edi
mov ecx, esi
call fcn.00420730
push eax
call fcn.004535b0
xor ecx, ecx
add esp, 4
test al, al
setne cl
mov eax, ecx
jmp 0x4297fa
mov eax, dword [0x4aacc0]
call fcn.00414710
cmp eax, 0xffffffff
jne 0x4297eb
mov edx, dword [0x4aacc0]
push edx
push 0
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042ea00
jmp 0x4297fa
mov dword [ebx + 0xd8], eax
mov eax, 1
jmp 0x4297fa
xor eax, eax
mov dword [esp + 0x24], eax
test eax, eax
je 0x4254de
cmp dword [ebp + 8], 3
je 0x4254de
mov eax, dword [esi + 0x14]
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0
je 0x4254d9
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x14]
xor edi, edi
jmp 0x4251f5
mov ecx, dword [esp + 0x44]
mov dword [ecx], edx
jmp 0x4254d9
mov ecx, dword [esp + 0x44]
mov dword [ecx], edx
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x44]
mov dword [eax], edx
jmp 0x4254d9
test edi, edi
je 0x4298c7
cmp dword [edi + 8], 0
jne 0x4298c7
mov eax, dword [0x4aac68]
test eax, eax
je 0x4298b8
cmp byte [eax + 0x17], 0
jne 0x429885
mov ecx, dword [eax + 0xc]
jmp 0x429887
mov ecx, eax
test byte [ecx + 0x15], 2
je 0x4298b8
mov edi, dword [ebp + 0xc]
call fcn.00412f90
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 8], 0
mov ecx, dword [0x4aacc0]
mov dword [edi], ecx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esi + 0x18]
test eax, eax
je 0x429904
mov eax, dword [eax + 0x18]
mov ecx, dword [esp + 0x44]
mov dword [ecx], eax
cmp byte [eax], 0x6c
jne 0x429904
mov edx, dword [eax + 0x14]
mov dword [ecx], edx
mov eax, 5
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x42992d
mov eax, dword [esp + 0x44]
mov dword [eax], esi
mov eax, 6
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4aacc4]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push str.Parameter_2_invalid.
call fcn.0042ea00
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4aacc8]
push edx
push 0
push str.Parameter_3_invalid.
mov ecx, esi
call fcn.0042ea00
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [edi + 0xe4], 0
jne 0x4299b9
mov esi, edi
add esi, 0xdc
call fcn.0042f0c0
xor eax, eax
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4ad0f0]
push 0x499831
push 0
push str.Jumps_cannot_exit_a_FINALLY_block.
call fcn.0042ea00
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x44]
mov dword [eax], edi
jmp 0x4254d9
mov ecx, dword [esp + 0x44]
mov dword [ecx], edi
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [esi + 1], 0
jne 0x429a58
push 0x499831
push 0
push str.An_exception_was_thrown.
mov ecx, esi
call fcn.0042e740
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
add ebx, 0xdc
cmp dword [ebx], 0
mov dword [esp + 0x34], ebx
je 0x429a72
mov esi, ebx
call fcn.0042f0c0
mov esi, dword [esp + 0x14]
push 0x10
call fcn.004876d0
mov edi, eax
add esp, 4
test edi, edi
jne 0x429aab
push 0x499831
push eax
push str.Out_of_memory.
mov ecx, esi
call fcn.0042ea00
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4accc8]
test eax, eax
jne 0x429b0d
mov edx, dword [esi + 8]
movzx eax, word [edx + 2]
mov ecx, 0xff
mov ebx, ecx
cmp ax, cx
jb 0x429ac9
mov ebx, eax
inc ebx
push ebx
call fcn.00485629
xor ecx, ecx
add esp, 4
mov dword [0x4accc8], eax
cmp eax, ecx
jne 0x429b15
push 0x499831
push ecx
mov dword [0x4acccc], ecx
push str.Out_of_memory.
mov ecx, esi
call fcn.0042ea00
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [0x4acccc]
xor ecx, ecx
push ecx
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x74]
push eax
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x84]
push eax
mov eax, dword [esp + 0x28]
push edi
lea edx, [esp + 0x3c]
push edx
push ecx
push eax
mov dword [esp + 0x90], ebx
mov dword [0x4accc8], ecx
mov dword [0x4acccc], ecx
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], ecx
mov dword [edi + 8], 0x41
call fcn.004576e0
mov esi, dword [esp + 0x70]
mov ebx, eax
cmp ebx, esi
jne 0x429b7d
mov dword [edi + 0xc], ebx
jmp 0x429bbc
mov dword [edi + 0xc], 0
test esi, esi
je 0x429bbc
mov eax, dword [0x4accc8]
test eax, eax
je 0x429bac
push eax
call fcn.00485488
add esp, 4
cmp dword [0x4acccc], 0x400000
jbe 0x429bac
dec dword [0x4accd0]
mov ecx, dword [esp + 0x6c]
mov dword [0x4accc8], esi
mov dword [0x4acccc], ecx
test ebx, ebx
jne 0x429be4
push edi
call fcn.004851e8
mov eax, dword [esp + 0x28]
add esp, 4
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [edi + 8], 0x41
jne 0x429bf3
mov dword [edi + 8], 0
mov dword [edi], ebx
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
mov dword [eax + 0xe0], edx
mov dword [ecx], edi
xor eax, eax
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4a8554]
cmp word [edx], 0
jne 0x429c50
cmp dword [0x4ac61c], 0
jne 0x429c50
cmp dword [0x4aae50], 0
jne 0x429c50
cmp dword [0x4aae54], 0
jne 0x429c50
cmp byte [0x4aae70], 0
je case.0x42550b.222
mov eax, 8
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor edi, edi
mov ecx, esi
call fcn.00420730
push eax
push 0x4acd80
xor eax, eax
lea edx, [edi + 9]
call fcn.00415b70
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x44]
mov dword [eax], ecx
jmp 0x4254d9
mov edx, dword [esp + 0x44]
mov dword [edx], ecx
mov ecx, dword [esp + 0x5f4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je 0x4254d9
push 0x499831
push 0
push str.A__return__must_be_encountered_prior_to_this___.
mov ecx, esi
call fcn.0042ea00
mov ecx, dword [esp + 0x5f4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc