Function at 0x432400
Capabilities:
Check for time delay via gettickcount
Empty the recycle bin
Find taskbar
Move file
Print debug messages
Set environment variable

Disassembly:
push ebp
lea ebp, [esp - 0x60]
sub esp, 0x60
push 0xffffffffffffffff
push 0x4c69ab
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x8c4
mov eax, dword [ebp + 0x70]
mov edx, ecx
test eax, eax
mov dword [ebp - 0x28], edx
lea ecx, [ebp]
mov dword [ebp + 0x58], edx
cmovne ecx, eax
mov eax, dword [0x4f48cc]
mov dword [ebp + 0x34], ecx
mov dword [ebp + 0x38], eax
push ebx
mov dword [ecx], 0
mov ebx, 1
push esi
mov esi, dword fs:[0x24]
mov dword [ebp - 0x34], esi
push edi
test edx, edx
je 0x432937
cmp dword [0x4f9a6c], 0
je 0x4324a3
cmp dword [0x4f9a5c], 0
je 0x432489
push dword [0x4f9a54]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4f9a5c], 0
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x4f9a6c], 0
mov dword [0x4f9a54], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov eax, dword [0x4f48cc]
mov ecx, edi
sub ecx, dword [0x4fa584]
cmp ecx, dword [eax + 0xd8]
jbe 0x4324f9
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x4324eb
cmp dword [0x4f9a38], esi
jne 0x4324eb
mov edx, ebx
or ecx, 0xffffffff
call fcn.00401890
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov dword [0x4fa584], edi
mov ebx, dword [ebp + 0x38]
cmp byte [ebx + 0xec], 0
jne 0x43252e
cmp byte [ebx + 0xee], 0
jne 0x43252e
mov eax, dword [0x4fa578]
cmp eax, 0xffffffff
jle 0x43252e
mov ecx, dword [ebx + 0x28]
cmp ecx, eax
jle 0x432528
mov byte [ebx + 0xec], 1
jmp 0x43252e
lea eax, [ecx + 1]
mov dword [ebx + 0x28], eax
mov eax, dword [ebx + 4]
mov esi, dword [ebx]
mov ecx, dword [0x4fa570]
mov edx, dword [0x4fa574]
cmp eax, 0xffffffff
jl 0x432555
jg 0x43254b
cmp esi, 0xffffffff
jbe 0x432555
cmp edx, eax
jg 0x432567
jl 0x432555
cmp ecx, esi
jae 0x432567
mov eax, dword [ebx + 0x24]
cmp eax, 0xffffffff
jle 0x432584
sub edi, dword [0x4fa580]
cmp edi, eax
jb 0x432584
mov esi, 1
mov edx, esi
lea ecx, [esi + 9]
call fcn.00401890
mov edx, dword [0x4fa574]
mov ecx, dword [0x4fa570]
jmp 0x432589
mov esi, 1
cmp byte [ebx + 0xf8], 0
je 0x4325c8
mov edi, dword [ebp - 0x34]
cmp dword [0x4f9a38], edi
jne 0x4325ab
mov edx, esi
mov ecx, 0x8000012f
call fcn.00401890
jmp 0x4325b3
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [ebx + 0xf8], 0
jne 0x432595
mov edx, dword [0x4fa574]
mov ecx, dword [0x4fa570]
mov edi, dword [ebp + 0x58]
mov dword [0x4fa0bc], edi
cmp byte [ebx + 0xf9], 0
je 0x432617
mov eax, dword [0x4f8468]
mov dword [eax*4 + 0x4f8ab0], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x4f8468]
mov edx, dword [0x4fa574]
mov dword [ecx*4 + 0x4f8470], eax
inc ecx
xor eax, eax
cmp ecx, 0x190
cmovge ecx, eax
mov dword [0x4f8468], ecx
mov ecx, dword [0x4fa570]
mov al, byte [edi]
cmp al, 1
je 0x43264d
cmp al, 0x6b
je 0x43264d
cmp al, 0x74
je 0x43264d
push 0
push 0xffffffffffffffff
push dword [ebp + 0x6c]
mov ecx, edi
call fcn.0046cef0
mov ecx, eax
mov dword [ebp + 0x5c], ecx
cmp ecx, 1
jne 0x436f4e
mov edx, dword [0x4fa574]
mov ecx, dword [0x4fa570]
mov bl, byte [edi]
mov dword [ebp + 0x10], ebx
cmp bl, 9
jb 0x4327aa
cmp bl, 0x20
ja 0x4327aa
add ecx, 1
mov dword [0x4fa570], ecx
mov ecx, edi
adc edx, 0
mov dword [0x4fa574], edx
call fcn.00437520
cmp eax, 3
jne 0x432719
mov eax, dword [edi + 0x14]
cmp byte [eax], 0x77
jne 0x4326b2
nop
lea ecx, [ebp + 0x54]
push ecx
push dword [ebp + 0x6c]
mov ecx, dword [eax + 0x14]
push 2
call fcn.00432400
mov ecx, dword [ebp + 0x54]
mov edx, eax
mov eax, dword [edi + 0x14]
mov dword [ebp + 0x5c], edx
cmp ecx, eax
je 0x432690
jmp 0x4326ca
lea ecx, [ebp + 0x54]
push ecx
push dword [ebp + 0x6c]
mov ecx, eax
push 3
call fcn.00432400
mov ecx, dword [ebp + 0x54]
mov edx, eax
mov dword [ebp + 0x5c], eax
cmp ecx, edi
je 0x436b2f
cmp dword [ebp + 0x68], 3
je 0x436b5f
cmp edx, 1
jne 0x436b5f
test ecx, ecx
je 0x4326ff
mov eax, dword [ecx + 0x1c]
cmp eax, dword [edi + 0x1c]
jne 0x436b44
mov edi, ecx
mov dword [ebp + 0x58], edi
jmp 0x436b2f
mov edi, dword [edi + 0x18]
mov dword [ebp + 0x58], edi
cmp byte [edi], 0x21
jne 0x436b2f
mov edi, dword [edi + 0x18]
mov dword [ebp + 0x58], edi
jmp 0x436b2f
mov edi, dword [edi + 0x18]
mov dword [ebp + 0x58], edi
cmp byte [edi], 0x21
jne 0x43279b
mov eax, dword [edi + 0x14]
cmp byte [eax], 0x77
jne 0x432752
nop dword [eax]
lea ecx, [ebp + 0x54]
push ecx
push dword [ebp + 0x6c]
mov ecx, dword [eax + 0x14]
push 2
call fcn.00432400
mov ecx, dword [ebp + 0x54]
mov ebx, eax
mov eax, dword [edi + 0x14]
mov dword [ebp + 0x5c], ebx
cmp ecx, eax
je 0x432730
jmp 0x43276a
lea ecx, [ebp + 0x54]
push ecx
push dword [ebp + 0x6c]
mov ecx, eax
push 3
call fcn.00432400
mov ecx, dword [ebp + 0x54]
mov ebx, eax
mov dword [ebp + 0x5c], eax
cmp dword [ebp + 0x68], 3
je 0x436b7a
cmp ebx, 1
jne 0x436b7a
test ecx, ecx
je 0x4335f6
mov eax, dword [ecx + 0x1c]
cmp eax, dword [edi + 0x1c]
jne 0x436b44
mov edi, ecx
mov dword [ebp + 0x58], edi
jmp 0x436b2f
cmp dword [ebp + 0x68], 3
je case.0x4327c2.118
jmp 0x436b2f
movzx eax, bl
add eax, 0xffffffa0
cmp eax, 0x82
ja case.0x4327c2.98
movzx eax, byte [eax + 0x436fb0]
jmp dword [eax*4 + 0x436f64]
mov ecx, edi
call fcn.00437520
cmp eax, 3
je 0x436b84
cmp dword [ebp + 0x68], 3
je 0x432802
mov edi, dword [edi + 0x14]
mov dword [ebp + 0x58], edi
jmp 0x436b2f
mov ecx, edi
call fcn.00437520
cmp eax, 3
jne 0x4327d9
mov eax, dword [edi + 0x18]
test eax, eax
je 0x432802
mov edi, dword [ebp + 0x34]
mov dword [edi], eax
pop edi
pop esi
mov eax, 6
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
add ecx, 1
mov dword [0x4fa570], ecx
adc edx, 0
mov dword [0x4fa574], edx
mov edx, dword [edi + 0x18]
test edx, edx
je 0x43284e
mov esi, dword [ebp + 0x38]
xor ebx, ebx
cmp dword [edi + 0xc], 1
mov dword [ebp + 8], edx
sete bl
jne 0x4328f2
jmp 0x4328d8
mov esi, dword [0x4f9148]
mov ecx, 0x4f9a70
push esi
call fcn.00427670
mov edx, eax
test edx, edx
je 0x436bac
mov eax, dword [edx + 8]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x4328a0
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x43288b
nop word [eax + eax]
cmp ecx, eax
je 0x4328a0
mov eax, dword [eax + 0x1c]
test eax, eax
jne 0x432880
push 0x4cd2cc
push 0
push str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov ecx, edi
call fcn.0043bc60
xor edx, edx
mov dword [ebp + 8], edx
test edx, edx
je 0x436bbb
mov esi, dword [ebp + 0x38]
cmp dword [esi + 0xb4], 0
je 0x4328f0
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x4328d3
cmp dword [eax + 0xc], 1
jne 0x4328cc
cmp byte [eax], 0x77
je 0x4328f0
mov eax, dword [eax + 0x1c]
test eax, eax
jne 0x4328c1
mov ebx, 1
mov eax, dword [esi + 0xb4]
mov dword [esi + 0xb8], eax
mov dword [esi + 0xb4], 0
jmp 0x4328f2
xor ebx, ebx
mov ecx, edx
call fcn.004015f0
mov dword [ebp + 0x5c], eax
test ebx, ebx
je 0x432916
mov eax, dword [esi + 0xb8]
mov dword [esi + 0xb4], eax
mov dword [esi + 0xb8], 0
mov ebx, dword [ebp + 0x5c]
test ebx, ebx
je 0x432937
cmp ebx, 8
je 0x432937
cmp dword [ebp + 0x68], 3
jne case.0x4327c2.115
cmp ebx, 7
mov eax, 1
cmove ebx, eax
pop edi
pop esi
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
add ecx, 1
mov dword [0x4fa570], ecx
adc edx, 0
mov dword [0x4fa574], edx
mov edx, dword [edi + 0x18]
mov dword [ebp + 8], edx
test edx, edx
jne 0x4329c0
mov esi, dword [0x4f9148]
mov ecx, 0x4f9a70
push esi
call fcn.00427670
mov edx, eax
test edx, edx
je 0x436bac
mov ecx, dword [edx + 8]
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
je 0x4329b5
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x4329a0
cmp ecx, eax
je 0x4329b5
mov eax, dword [eax + 0x1c]
test eax, eax
jne 0x432995
push 0x4cd2cc
push 0
push str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov ecx, edi
call fcn.0043bc60
xor edx, edx
mov dword [ebp + 8], edx
test edx, edx
je 0x436bbb
cmp dword [ebp + 0x68], 3
mov eax, dword [ebp + 0x38]
mov dword [eax + 0xbc], edx
je 0x436bd1
mov ecx, dword [edx + 8]
mov eax, dword [edi + 0x1c]
cmp eax, dword [ecx + 0x1c]
jne 0x436bd1
mov edi, ecx
mov dword [ebp + 0x58], edi
jmp 0x436b2f
mov esi, dword [ebp - 0x28]
add ecx, 1
mov dword [0x4fa570], ecx
adc edx, 0
mov dword [0x4fa574], edx
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x432a49
mov edi, dword [0x4f9148]
cmp word [edi], si
jne 0x432a22
mov edi, 1
xor ebx, ebx
mov dword [ebp + 0x5c], edi
jmp 0x432b2c
mov esi, dword [0x4f9a84]
test esi, esi
je 0x432a47
nop dword [eax]
push edi
push dword [esi + 4]
call fcn.004af78f
add esp, 8
test eax, eax
je 0x432a49
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x432a30
xor esi, esi
mov edi, 1
xor ebx, ebx
mov dword [ebp + 0x5c], edi
test esi, esi
je 0x432b2c
mov eax, dword [0x4f914c]
cmp word [eax], bx
je 0x432a7b
push 0x4e30d8
push eax
call fcn.004af78f
add esp, 8
test eax, eax
jne 0x432a7b
mov al, 1
jmp 0x432a7d
xor al, al
lea ecx, [ebp + 8]
push ecx
push 0
push eax
mov ecx, esi
call fcn.00498f90
mov edi, dword [ebp + 8]
mov ebx, eax
test edi, edi
je 0x432b29
mov ecx, dword [ebp + 0x58]
push 0
push edi
call fcn.00450740
test eax, eax
je 0x436bbb
mov edx, dword [ebp + 0x38]
mov ecx, dword [edx + 0xb4]
test ecx, ecx
je 0x432aeb
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x432ad4
cmp dword [eax + 0xc], 1
jne 0x432acd
cmp byte [eax], 0x77
je 0x432aeb
mov eax, dword [eax + 0x1c]
test eax, eax
jne 0x432ac2
mov esi, 1
mov dword [edx + 0xb8], ecx
mov dword [edx + 0xb4], 0
jmp 0x432aed
xor esi, esi
mov ecx, edi
call fcn.004015f0
mov edi, eax
mov dword [ebp + 0x5c], edi
test esi, esi
je 0x432b16
mov ecx, dword [ebp + 0x38]
mov eax, dword [ecx + 0xb8]
mov dword [ecx + 0xb4], eax
mov dword [ecx + 0xb8], 0
test edi, edi
je 0x436bfd
cmp edi, 8
je 0x436bfd
jmp 0x432b2c
mov edi, dword [ebp + 0x5c]
mov ecx, dword [ebp - 0x28]
test ebx, ebx
sete al
movzx eax, al
push eax
call fcn.0043b920
cmp dword [ebp + 0x68], 3
je 0x436bf2
mov edi, dword [ebp + 0x58]
mov edi, dword [edi + 0x14]
mov dword [ebp + 0x58], edi
jmp 0x436b2f
mov ebx, dword [edi + 0xc]
mov eax, ebx
mov dword [ebp + 0x3c], ebx
sub eax, 1
je 0x432ba3
sub eax, 3
je 0x432b8a
sub eax, 5
jne 0x432c12
mov ecx, dword [0x4f914c]
mov edx, esi
push eax
push eax
call fcn.00421390
add esp, 8
mov dword [ebp + 0x18], eax
jmp 0x432c12
mov ecx, dword [0x4f9148]
xor edx, edx
push 0
push 0
call fcn.00421390
add esp, 8
mov dword [ebp + 0x18], eax
jmp 0x432c12
movzx eax, byte [edi + 1]
sub eax, 0
je 0x432c0a
sub eax, 1
je 0x432bcd
push str.Read
push dword [0x4f9148]
call fcn.004af78f
add esp, 8
test eax, eax
jne 0x432be7
lea ebx, [eax + 5]
jmp 0x432c0f
mov ecx, dword [0x4f9148]
mov edx, esi
push 0
push 1
push 1
call fcn.00491c20
add esp, 0xc
test eax, eax
jne 0x432c0a
mov ecx, dword [0x4f9148]
xor edx, edx
push 0
push 0
call fcn.00421390
xor ebx, ebx
mov dword [ebp + 0x18], eax
add esp, 8
cmp eax, ebx
setne bl
add ebx, 3
jmp 0x432c0f
mov ebx, 2
mov dword [ebp + 0x3c], ebx
lea eax, [ebx - 3]
cmp eax, 7
ja case.0x432c25.5
movzx eax, byte [eax + 0x437040]
jmp dword [eax*4 + 0x437034]
mov ecx, dword [0x4f914c]
call fcn.00421c60
mov dword [ebp + 0x1c], eax
test eax, eax
je 0x436c13
mov ecx, dword [0x4f9150]
cmp word [ecx], 0x31
jne 0x432c5e
cmp word [ecx + 2], 0
jne 0x432c5e
mov byte [ebp + 0x14], 1
jmp 0x432d1a
mov byte [ebp + 0x14], 0
jmp 0x432d1a
cmp ebx, 4
jne 0x432c9a
mov ecx, dword [0x4f9150]
call fcn.00421c60
mov esi, eax
mov eax, dword [0x4f9154]
mov dword [ebp + 0x1c], esi
cmp word [eax], 0x31
jne 0x432c94
cmp word [eax + 2], 0
jne 0x432c94
mov byte [ebp + 0x14], 1
jmp 0x432d0c
mov byte [ebp + 0x14], 0
jmp 0x432d0c
mov ebx, dword [0x4f9150]
xor edi, edi
movzx esi, word [ebx]
test esi, 0xffffff80
jne 0x432cbf
push 2
push esi
call fcn.004b15e4
add esp, 8
test eax, eax
je 0x432cbf
and esi, 0xffffffdf
add ebx, 2
cmp esi, 0x56
ja case.0x432cce.1
movzx eax, byte [esi + 0x437060]
jmp dword [eax*4 + 0x437048]
or edi, 1
jmp case.0x432cce.9
or edi, 2
jmp case.0x432cce.9
or edi, 4
jmp case.0x432cce.9
mov esi, edi
mov eax, edi
or esi, 1
and al, 3
cmovne esi, edi
jmp 0x432cf4
xor esi, esi
mov edi, dword [ebp + 0x58]
mov eax, esi
shr eax, 2
and al, 1
mov dword [ebp + 0x1c], esi
mov byte [ebp + 0x14], al
je 0x432d0c
and esi, 0xfffffffb
mov dword [ebp + 0x1c], esi
test esi, esi
je 0x436c3b
mov ecx, dword [0x4f9150]
mov byte [ebp + 0x73], 0
mov dword [ebp + 0x54], 0
mov ebx, dword [edi + 0x18]
mov edx, ebx
mov dword [ebp + 0x40], ebx
mov al, byte [edx]
cmp al, 0x6c
jne 0x432d39
mov edx, dword [edx + 0x14]
mov dword [ebp + 0x40], edx
mov edi, dword [ebp + 0x3c]
xor esi, esi
cmp al, 0x6c
cmovne ebx, esi
mov esi, dword [ebp + 0x38]
mov eax, dword [esi + 8]
mov dword [ebp + 4], eax
mov eax, dword [esi + 0xc]
mov dword [ebp + 0x50], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x58], eax
mov eax, dword [esi + 0x14]
mov dword [ebp], eax
mov eax, dword [esi + 0x18]
mov dword [ebp + 0x10], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp + 0x4c], eax
cmp edi, 8
je 0x432d7d
mov dword [esi + 8], 1
mov dword [esi + 0xc], 0
lea eax, [edi - 2]
cmp eax, 8
ja case.default.0x432d89
jmp dword [eax*4 + 0x4370b8]
mov edi, dword [ebp + 0x58]
cmp byte [edi + 1], 0
jbe 0x432da8
push 0
mov ecx, edi
call fcn.0042e8b0
mov byte [ebp - 0x2c], 0
jmp 0x432dba
xorps xmm0, xmm0
mov byte [ebp - 0x2c], 1
movlpd qword [ebp + 0x24], xmm0
mov edx, dword [ebp + 0x28]
mov eax, dword [ebp + 0x24]
push dword [ebp - 0x2c]
mov ecx, edi
push edx
push eax
push ebx
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x73]
push eax
push dword [ebp + 0x6c]
call fcn.00438fd0
mov edx, dword [ebp + 0x40]
mov ebx, eax
mov dword [ebp + 0x5c], ebx
jmp 0x43305d
mov edi, dword [ebp + 0x58]
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x73]
mov ecx, edi
push eax
push dword [ebp + 0x6c]
call fcn.00439120
mov edx, dword [ebp + 0x40]
mov ebx, eax
mov dword [ebp + 0x5c], ebx
jmp 0x43305d
mov edi, dword [ebp + 0x58]
lea eax, [ebp + 0x54]
push ebx
push eax
lea eax, [ebp + 0x73]
mov ecx, edi
push eax
push dword [ebp + 0x6c]
call fcn.004392c0
mov edx, dword [ebp + 0x40]
mov ebx, eax
mov dword [ebp + 0x5c], ebx
jmp 0x43305d
push 0x4e76b4
push ecx
call fcn.004af78f
mov edi, dword [ebp + 0x58]
add esp, 8
test eax, eax
mov ecx, edi
lea eax, [ebp + 0x54]
push ebx
push eax
lea eax, [ebp + 0x73]
push eax
push dword [ebp + 0x6c]
je 0x432e59
call fcn.0043a2a0
mov edx, dword [ebp + 0x40]
mov ebx, eax
mov dword [ebp + 0x5c], ebx
jmp 0x43305d
call fcn.0043a600
mov edx, dword [ebp + 0x40]
mov ebx, eax
mov dword [ebp + 0x5c], ebx
jmp 0x43305d
lea ecx, [ebp - 0xb4]
call fcn.00421fb0
mov dword [ebp - 0xb4], vtable.TextFile.0
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 4], 0
mov ecx, dword [0x4f914c]
cmp word [ecx], 0
je 0x432ef0
mov eax, dword [esi + 0xfc]
and eax, 0x7fffffff
push eax
push 0x30c
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0048f900
test al, al
je 0x432ef0
push dword [0x4f9150]
mov edi, dword [ebp + 0x58]
lea eax, [ebp - 0xb4]
push eax
push ebx
lea eax, [ebp + 0x54]
mov ecx, edi
push eax
lea eax, [ebp + 0x73]
push eax
push dword [ebp + 0x6c]
call fcn.0043a940
mov ebx, eax
lea ecx, [ebp - 0xb4]
mov dword [ebp + 0x5c], ebx
call fcn.00422010
jmp 0x432efb
mov edi, dword [ebp + 0x58]
mov ebx, 1
mov dword [ebp + 0x5c], ebx
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
call fcn.004220b0
mov edx, dword [ebp + 0x40]
jmp 0x43305d
mov esi, dword [0x4f914c]
cmp edi, 3
push 0x2047c
cmove esi, dword [0x4f9148]
mov dword [ebp + 0x28], 1
call fcn.004abcce
add esp, 4
mov edi, eax
lea eax, [ebp + 0x28]
mov dword [ebp + 0x3c], edi
push eax
push edi
push esi
mov esi, dword [ebp + 0x58]
mov ecx, esi
mov dword [edi + 0x20460], 0
mov dword [edi + 0x20470], 0
call fcn.004397c0
test al, al
je 0x432f87
push edi
push dword [ebp + 0x14]
lea eax, [ebp + 0x54]
mov ecx, esi
push dword [ebp + 0x1c]
push ebx
push eax
lea eax, [ebp + 0x73]
push eax
push dword [ebp + 0x6c]
call fcn.004399b0
mov ebx, eax
mov dword [ebp + 0x5c], eax
jmp 0x432f8d
mov ebx, dword [ebp + 0x28]
mov dword [ebp + 0x5c], ebx
cmp dword [edi + 0x20470], 0
je 0x432fa4
push dword [edi + 0x2045c]
call fcn.004b113e
add esp, 4
push dword [edi + 0x20460]
call fcn.004b113e
push 0x2047c
push edi
call fcn.004aba18
mov edx, dword [ebp + 0x40]
add esp, 0xc
mov esi, dword [ebp + 0x38]
jmp 0x43305a
lea eax, [ebp + 0x33]
push eax
cmp edi, 4
jne 0x432fec
mov ecx, dword [0x4f9148]
xor edx, edx
push 0
call fcn.00421390
mov esi, eax
mov eax, dword [0x4f914c]
mov dword [ebp - 0x30], eax
jmp 0x433005
mov ecx, dword [0x4f914c]
lea eax, [ebp - 0x30]
push eax
mov edx, 1
call fcn.00421390
mov esi, eax
mov eax, dword [ebp - 0x30]
mov edi, dword [ebp + 0x58]
add esp, 8
test esi, esi
je 0x433047
push eax
push esi
push dword [ebp + 0x18]
lea eax, [ebp + 0x54]
mov ecx, edi
push dword [ebp + 0x14]
push dword [ebp + 0x1c]
push ebx
push eax
lea eax, [ebp + 0x73]
push eax
push dword [ebp + 0x6c]
call fcn.00439dc0
cmp byte [ebp + 0x33], 0
mov ebx, eax
mov dword [ebp + 0x5c], ebx
je 0x43303f
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp + 0x40]
mov esi, dword [ebp + 0x38]
jmp 0x43305d
mov edx, dword [ebp + 0x40]
mov ebx, 1
mov esi, dword [ebp + 0x38]
mov dword [ebp + 0x5c], ebx
jmp 0x43305d
mov ebx, dword [ebp + 0x5c]
mov edi, dword [ebp + 0x58]
mov eax, dword [ebp + 4]
mov dword [esi + 8], eax
mov eax, dword [ebp + 0x50]
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 0x58]
mov dword [esi + 0x10], eax
mov eax, dword [ebp]
mov dword [esi + 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [esi + 0x18], eax
mov eax, dword [ebp + 0x4c]
mov dword [esi + 0x1c], eax
test ebx, ebx
je 0x432937
cmp ebx, 7
je 0x432937
cmp ebx, 8
je 0x432937
cmp byte [ebp + 0x73], 0
jne 0x436b2f
mov ecx, dword [ebp + 0x54]
test ecx, ecx
je 0x4330c2
mov eax, dword [ecx + 0x1c]
cmp eax, dword [edi + 0x1c]
jne 0x436c63
mov edi, ecx
mov dword [ebp + 0x58], edi
jmp 0x436b2f
cmp dword [ebp + 0x68], 3
je 0x436bd9
mov edi, edx
mov dword [ebp + 0x58], edi
jmp 0x436b2f
mov esi, dword [ebp + 0x38]
mov edi, dword [esi + 0x100]
mov dword [ebp], edi
cmp bl, 0x72
jne 0x433128
mov ecx, dword [0x4f90f0]
mov eax, dword [esi + 0x104]
mov dword [ebp + 0x4c], eax
mov dword [esi + 0x104], 0
test ecx, ecx
je 0x43310e
push eax
call fcn.004958d0
mov esi, eax
jmp 0x433113
mov esi, 1
lea ecx, [ebp + 0x4c]
call fcn.0043c650
test esi, esi
je 0x436bbb
mov edx, dword [ebp + 0x58]
jmp 0x433147
mov edx, dword [ebp + 0x58]
mov ecx, edi
or ecx, 1
mov dword [esi + 0x100], ecx
mov eax, dword [edx + 0x18]
cmp byte [eax], 0x73
je 0x433147
or ecx, 2
mov dword [esi + 0x100], ecx
mov dword [ebp + 0x54], 0
mov eax, dword [edx + 0x14]
cmp byte [eax], 0x77
jne 0x433186
mov edi, dword [ebp + 0x58]
mov ebx, dword [ebp + 0x6c]
nop dword [eax]
lea ecx, [ebp + 0x54]
push ecx
mov ecx, dword [eax + 0x14]
push ebx
push 2
call fcn.00432400
mov ecx, dword [ebp + 0x54]
mov esi, eax
mov eax, dword [edi + 0x14]
mov dword [ebp + 0x5c], esi
cmp ecx, eax
je 0x433160
mov ebx, dword [ebp + 0x10]
mov edi, dword [ebp]
jmp 0x43319e
lea ecx, [ebp + 0x54]
push ecx
push dword [ebp + 0x6c]
mov ecx, eax
push 3
call fcn.00432400
mov ecx, dword [ebp + 0x54]
mov esi, eax
mov dword [ebp + 0x5c], eax
mov edx, dword [ebp + 0x58]
mov edx, dword [edx + 0x18]
mov dword [ebp + 0x58], edx
cmp bl, 0x71
jne 0x433210
mov ebx, dword [ebp + 0x38]
xor dl, dl
mov dword [ebx + 0x100], edi
mov edi, dword [ebp + 0x58]
mov al, byte [edi]
cmp al, 0x72
jne 0x4331d9
cmp dword [ebx + 0x104], 0
mov dl, 1
jne 0x436b2f
mov eax, dword [edi + 0x18]
mov edi, eax
mov dword [ebp + 0x58], edi
mov al, byte [eax]
cmp al, 0x73
je 0x433228
test dl, dl
jne 0x4332d1
cmp dword [ebx + 0x104], 0
je 0x4332d1
lea ecx, [ebx + 0x104]
call fcn.0043c650
mov ecx, dword [ebp + 0x54]
mov ebx, 1
mov edx, dword [ebp + 0x58]
mov dword [ebp + 0x5c], ebx
jmp 0x4332d7
cmp bl, 0x72
jne 0x4332d4
mov edi, dword [ebp + 0x58]
cmp byte [edi], 0x73
jne 0x4332d1
mov ebx, dword [ebp + 0x38]
cmp esi, 1
jne 0x433235
test ecx, ecx
je 0x436b2f
mov eax, dword [0x4f8460]
mov edi, dword [ebx + 0x104]
mov ecx, dword [ebp + 0x58]
mov dword [ebp + 0x4c], eax
lea eax, [ebp - 0x48]
push eax
push 0
mov dword [ebx + 0x104], 0
mov ebx, dword [0x4f8464]
push 3
mov dword [ebp + 0x10], edi
mov dword [0x4f8464], 0
mov dword [0x4f8460], 0
call fcn.00432400
mov esi, eax
test ebx, ebx
je 0x4332b2
mov eax, dword [0x4f8464]
test eax, eax
je 0x4332a4
push eax
call fcn.004b113e
add esp, 4
cmp dword [0x4f8460], 0x400000
jbe 0x4332a4
dec dword [0x4f845c]
mov eax, dword [ebp + 0x4c]
mov dword [0x4f8464], ebx
mov dword [0x4f8460], eax
cmp esi, 1
jne 0x436c70
cmp dword [ebp - 0x48], 0
jne 0x436c70
mov eax, dword [ebp + 0x38]
mov ecx, dword [ebp + 0x54]
mov dword [eax + 0x104], edi
mov edx, dword [ebp + 0x58]
mov ebx, dword [ebp + 0x5c]
cmp dword [ebp + 0x68], 3
je 0x436b7a
cmp ebx, 1
jne 0x436b7a
test ecx, ecx
je 0x436b2c
mov eax, dword [ecx + 0x1c]
cmp eax, dword [edx + 0x1c]
jne 0x436cb8
mov edi, ecx
mov dword [ebp + 0x58], edi
jmp 0x436b2f
mov ecx, dword [ebp + 0x58]
xor edi, edi
mov esi, dword [0x4f8464]
mov eax, dword [0x4f8460]
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x40], esi
mov dword [ebp + 0x3c], eax
mov dword [0x4f8464], edi
mov dword [0x4f8460], edi
mov dword [ebp - 0x38], edi
cmp dword [ecx + 0xc], edi
jne 0x433346
mov ebx, 0x41
mov dword [ebp + 0x5c], 1
mov dword [ebp - 0x3c], ebx
jmp 0x433387
lea eax, [ebp + 0x3c]
push eax
lea eax, [ebp + 0x40]
push eax
lea eax, [ebp - 0x44]
push eax
push 0
call fcn.0046c8a0
mov esi, dword [ebp + 0x40]
mov ebx, eax
mov dword [ebp + 0x5c], ebx
cmp ebx, 1
jne 0x43356a
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
jne 0x433387
cmp dword [ebp - 0x44], esi
jne 0x433387
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x38], esi
xor esi, esi
mov dword [ebp - 0x4c], eax
mov dword [ebp + 0x40], esi
mov dword [ebp + 0x3c], esi
mov eax, dword [ebp + 0x58]
mov eax, dword [eax + 0x14]
mov edi, dword [eax + 0x14]
cmp byte [edi], 0x76
jne 0x43352a
nop dword [eax]
mov eax, dword [edi + 0xc]
mov dword [ebp + 0x28], eax
test eax, eax
jne 0x4333b5
mov edx, dword [edi + 0x14]
mov dword [ebp + 0x50], edx
jmp 0x433518
xor esi, esi
test eax, eax
jle 0x433518
nop
lea eax, [ebp + 0x3c]
mov ecx, edi
push eax
lea eax, [ebp + 0x40]
push eax
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.0046c8a0
mov dword [ebp + 0x5c], eax
cmp eax, 1
jne 0x43350c
cmp dword [ebp - 0x14], 0
jne 0x4333f4
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x18], 0
cmp ebx, 0x41
jne 0x4334d5
lea ecx, [ebp - 0x1c]
call fcn.004618c0
sub eax, 1
je 0x4334b9
sub eax, 1
mov eax, dword [ebp - 0x14]
je 0x433452
cmp eax, 6
je 0x4334b2
cmp eax, 4
jne 0x43343b
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0x17], 0
jne 0x433432
mov eax, dword [eax + 0xc]
jmp 0x433435
mov eax, dword [ebp - 0x1c]
test byte [eax + 0x15], 2
jne 0x4334b2
xor edx, edx
lea ecx, [ebp - 0x1c]
call fcn.00461b20
xor ebx, ebx
cmp word [eax], bx
setne bl
jmp 0x4334e2
dec eax
cmp eax, 5
ja case.0x433458.3
jmp dword [eax*4 + 0x4370dc]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
call fcn.004c5d50
jmp 0x4334a5
movsd xmm0, qword [ebp - 0x1c]
jmp 0x4334a5
mov ecx, dword [ebp - 0x1c]
push 1
call fcn.00420d50
jmp 0x4334a5
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je case.0x433458.3
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.004c5d50
jmp 0x4334a5
push dword [ebp - 0x1c]
call fcn.004b73c4
fstp qword [ebp + 0x48]
movsd xmm0, qword [ebp + 0x48]
add esp, 4
xorps xmm1, xmm1
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jnp case.0x433458.6
mov ebx, 1
jmp 0x4334e2
mov edx, 1
lea ecx, [ebp - 0x1c]
call fcn.004619e0
or eax, edx
je case.0x433458.6
mov ebx, 1
jmp 0x4334e2
xor ebx, ebx
jmp 0x4334e2
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x44]
call fcn.00461e50
mov ebx, eax
cmp dword [ebp - 0x14], 6
jne 0x4334f1
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test ebx, ebx
jne 0x433504
mov ebx, dword [ebp - 0x3c]
inc esi
cmp esi, dword [ebp + 0x28]
jl 0x4333c0
jmp 0x433518
mov eax, dword [edi + 0x14]
mov dword [ebp + 0x50], eax
jmp 0x433513
mov dword [ebp + 0x50], 0
cmp esi, dword [ebp + 0x28]
jl 0x433527
mov edi, dword [edi + 0x18]
mov ebx, dword [ebp - 0x3c]
cmp byte [edi], 0x76
je 0x4333a0
mov esi, dword [ebp + 0x40]
cmp dword [ebp - 0x3c], 6
jne 0x433539
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov edi, dword [ebp - 0x38]
test edi, edi
je 0x433564
test esi, esi
je 0x43355c
push esi
call fcn.004b113e
add esp, 4
cmp dword [ebp + 0x3c], 0x400000
jbe 0x43355c
dec dword [0x4f845c]
mov eax, dword [ebp - 0x4c]
mov esi, edi
mov dword [ebp + 0x3c], eax
mov edi, dword [ebp + 0x50]
mov ebx, dword [ebp + 0x5c]
test esi, esi
je 0x4335a0
mov eax, dword [0x4f8464]
test eax, eax
je 0x433592
push eax
call fcn.004b113e
add esp, 4
cmp dword [0x4f8460], 0x400000
jbe 0x433592
dec dword [0x4f845c]
mov eax, dword [ebp + 0x3c]
mov dword [0x4f8464], esi
mov dword [0x4f8460], eax
test edi, edi
je 0x4335be
lea eax, [ebp + 0x54]
mov ecx, edi
push eax
push dword [ebp + 0x6c]
push 2
call fcn.00432400
mov ecx, dword [ebp + 0x54]
mov ebx, eax
mov dword [ebp + 0x5c], ebx
jmp 0x4335c3
xor ecx, ecx
mov dword [ebp + 0x54], ecx
cmp ebx, 1
jne 0x436b7a
cmp dword [ebp + 0x68], 3
je 0x436b7a
test ecx, ecx
je 0x4335f3
mov edx, dword [ebp + 0x58]
mov eax, dword [ecx + 0x1c]
cmp eax, dword [edx + 0x1c]
jne 0x436cb8
mov edi, ecx
mov dword [ebp + 0x58], edi
jmp 0x436b2f
mov edi, dword [ebp + 0x58]
mov edi, dword [edi + 0x18]
mov dword [ebp + 0x58], edi
jmp 0x436b2f
cmp dword [edi + 0xc], 1
jne 0x433612
mov edi, dword [edi + 0x18]
mov dword [ebp + 0x58], edi
jmp 0x436b2f
mov ecx, dword [edi + 0x14]
lea eax, [ebp + 0x54]
push eax
push dword [ebp + 0x6c]
push 2
call fcn.00432400
mov ecx, dword [ebp + 0x54]
mov ebx, eax
mov dword [ebp + 0x5c], ebx
cmp ecx, edi
je 0x436b2f
cmp dword [ebp + 0x68], 3
je 0x436b7a
cmp ebx, 1
jne 0x436b7a
test ecx, ecx
je 0x4335f6
mov eax, dword [edi + 0x1c]
cmp eax, dword [ecx + 0x1c]
jne 0x436b44
mov edi, ecx
mov dword [ebp + 0x58], edi
jmp 0x436b2f
mov esi, dword fs:[0x24]
add ecx, 1
mov edi, dword [0x4f90f0]
mov ebx, dword [0x4f48cc]
adc edx, 0
mov dword [0x4fa574], edx
mov edx, dword [ebp + 0x58]
mov dword [0x4fa570], ecx
mov dword [ebp + 0x5c], edi
mov cl, byte [edx]
movzx eax, cl
dec eax
cmp eax, 0xe3
ja case.0x4336a3.8
movzx eax, byte [eax + 0x43737c]
jmp dword [eax*4 + 0x4370f4]
mov edi, dword [ebp + 0x58]
mov ecx, edi
call fcn.0044a310
jmp 0x436af7
cmp byte [edx + 1], 1
mov edx, dword [0x4f914c]
jbe 0x433748
mov eax, dword [ebp + 0x58]
mov eax, dword [eax + 8]
cmp byte [eax + 0x11], 0
je 0x4336e4
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x4336ff
push dword [eax + 4]
mov ecx, edi
push dword [eax]
call fcn.00420be0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov ecx, dword [0x4f90f4]
test ecx, ecx
je 0x433748
cmp word [edx], 0
jne 0x433748
mov al, byte [ecx + 0x17]
test al, al
jne 0x43371c
mov eax, dword [ecx + 0xc]
mov al, byte [eax + 0x17]
movzx eax, al
sub eax, 1
je 0x433738
sub eax, 2
jne 0x433748
mov ecx, edi
call fcn.004959e0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
push ecx
mov ecx, edi
call fcn.00495780
mov edi, dword [ebp + 0x58]
jmp 0x436af7
push 1
push 0
push 0xffffffffffffffff
push edx
mov ecx, edi
call fcn.00495fe0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov eax, dword [edx + 8]
cmp dword [eax + 0x1c], 0
je 0x43377d
cmp byte [eax + 0x11], 0
jne 0x43377d
mov dword [ebp + 0x50], 1
mov edi, 1
xor esi, esi
jmp 0x4337d1
mov esi, dword [0x4f90f4]
mov ecx, dword [0x4f914c]
mov dword [ebp + 0x50], 0
test esi, esi
je 0x4337ba
cmp word [ecx], 0
jne 0x4337ba
mov al, byte [esi + 0x17]
test al, al
jne 0x4337a7
mov eax, dword [esi + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x4337ba
test esi, esi
je 0x4337bc
push 1
mov ecx, esi
call fcn.00420c30
jmp 0x4337cf
xor esi, esi
push 1
push 1
push 0
mov edx, 1
call fcn.00491c20
add esp, 0xc
mov edi, eax
mov ecx, dword [ebp + 0x5c]
push 1
call fcn.00420c30
mov ecx, dword [0x4f9150]
mov ebx, eax
movzx ecx, word [ecx]
test cx, cx
je 0x43396b
call fcn.0040ba80
movzx ecx, ax
push ecx
push str.SMHD
call fcn.004ace17
add esp, 8
test eax, eax
je 0x43396b
test edi, edi
jne 0x433820
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
cmp dword [ebp + 0x50], 0
je 0x43383b
mov edi, dword [ebp + 0x58]
mov eax, dword [edi + 8]
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.004c5d50
jmp 0x433858
test esi, esi
je 0x43384a
push 0
mov ecx, esi
call fcn.00420d50
jmp 0x433855
mov ecx, dword [0x4f914c]
call fcn.00420ba0
mov edi, dword [ebp + 0x58]
mov ebx, dword [ebp + 0x5c]
mov ecx, ebx
push 0
push 1
movsd qword [ebp + 0x48], xmm0
call fcn.00401530
cmp word [eax], 0
je 0x4338b3
push 0
push 1
mov ecx, ebx
call fcn.00401530
push 0
lea edx, [ebp - 0x7c]
mov ecx, eax
call fcn.00491870
add esp, 4
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
test eax, eax
jne 0x4338cb
push 1
push eax
push 0xffffffffffffffff
push 0x4cd2cc
mov ecx, ebx
call fcn.00495fe0
jmp 0x436af7
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov eax, dword [0x4f9150]
mov cx, word [eax]
call fcn.0040ba80
movzx eax, ax
add eax, 0xffffffbc
cmp eax, 0xf
ja case.0x4338ea.69
movzx eax, byte [eax + 0x437474]
jmp dword [eax*4 + 0x437460]
movsd xmm0, qword [ebp + 0x48]
mulsd xmm0, qword [0x4ee900]
jmp 0x433932
movsd xmm0, qword [ebp + 0x48]
mulsd xmm0, qword [0x4ee910]
jmp 0x433932
movsd xmm0, qword [ebp + 0x48]
mulsd xmm0, qword [0x4ee920]
jmp 0x433932
movsd xmm0, qword [ebp + 0x48]
mulsd xmm0, qword [0x4ee928]
jmp 0x433932
movsd xmm0, qword [ebp + 0x48]
mov edi, dword [ebp - 0x20]
call fcn.004c5bff
add dword [ebp - 0x24], eax
lea ecx, [ebp - 0x8d0]
push 0
adc edi, edx
lea edx, [ebp - 0x24]
mov dword [ebp - 0x20], edi
call fcn.00491a70
add esp, 4
mov ecx, ebx
push 1
push 0
push 0xffffffffffffffff
push eax
call fcn.00495fe0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
cmp edi, 2
je 0x4339c9
cmp ebx, 2
je 0x4339c9
cmp dword [ebp + 0x50], 0
je 0x43398b
mov eax, dword [ebp + 0x58]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x1c]
mov esi, dword [eax]
mov edi, dword [eax + 4]
jmp 0x4339a9
test esi, esi
je 0x43399a
push 0
mov ecx, esi
call fcn.00420cc0
jmp 0x4339a5
mov ecx, dword [0x4f914c]
call fcn.0041e0c0
mov edi, edx
mov esi, eax
mov ecx, dword [ebp + 0x5c]
push 0
call fcn.00420cc0
mov ecx, dword [ebp + 0x5c]
add eax, esi
adc edx, edi
push edx
push eax
call fcn.00420be0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
cmp dword [ebp + 0x50], 0
je 0x4339e4
mov edi, dword [ebp + 0x58]
mov eax, dword [edi + 8]
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.004c5d50
jmp 0x433a01
test esi, esi
je 0x4339f3
push 0
mov ecx, esi
call fcn.00420d50
jmp 0x4339fe
mov ecx, dword [0x4f914c]
call fcn.00420ba0
mov edi, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x5c]
push 0
movsd qword [ebp + 0x48], xmm0
call fcn.00420d50
addsd xmm0, qword [ebp + 0x48]
mov ecx, dword [ebp + 0x5c]
movaps xmm1, xmm0
call fcn.00420c00
jmp 0x436af7
mov eax, dword [0x4f9150]
movzx ecx, word [eax]
test cx, cx
je 0x433b1f
call fcn.0040ba80
movzx eax, ax
push eax
push str.SMHD
call fcn.004ace17
add esp, 8
test eax, eax
je 0x433b1c
mov ecx, dword [0x4f90f4]
mov esi, dword [0x4f914c]
test ecx, ecx
je 0x433a8a
cmp word [esi], 0
jne 0x433a8a
mov al, byte [ecx + 0x17]
test al, al
jne 0x433a77
mov eax, dword [ecx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x433a8a
test ecx, ecx
je 0x433a8a
push 0
push 1
call fcn.00401530
mov esi, eax
lea eax, [ebp + 0x23]
mov ecx, edi
push eax
push 0
push 1
call fcn.00401530
mov edx, eax
mov ecx, esi
call fcn.00491b40
add esp, 4
mov esi, eax
cmp byte [ebp + 0x23], 0
mov edi, edx
je 0x433aca
mov ecx, dword [ebp + 0x5c]
push 1
push 0
push 0xffffffffffffffff
push 0x4cd2cc
call fcn.00495fe0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov eax, dword [0x4f9150]
mov cx, word [eax]
call fcn.0040ba80
movzx eax, ax
cmp eax, 0x44
je 0x433af8
cmp eax, 0x48
je 0x433aef
cmp eax, 0x4d
jne 0x433b0a
push 0
push 0x3c
jmp 0x433aff
push 0
push 0xe10
jmp 0x433aff
push 0
push 0x15180
push edi
push esi
call fcn.004c53b0
mov esi, eax
mov edi, edx
mov ecx, dword [ebp + 0x5c]
push edi
push esi
call fcn.00420be0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov edx, dword [ebp + 0x58]
mov eax, dword [edx + 8]
cmp dword [eax + 0x1c], 0
je 0x433b39
cmp byte [eax + 0x11], 0
jne 0x433b39
mov ebx, 1
xor esi, esi
mov edi, ebx
jmp 0x433b87
mov esi, dword [0x4f90f4]
xor ebx, ebx
mov ecx, dword [0x4f914c]
test esi, esi
je 0x433b70
cmp word [ecx], bx
jne 0x433b70
mov al, byte [esi + 0x17]
test al, al
jne 0x433b5d
mov eax, dword [esi + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x433b70
test esi, esi
je 0x433b72
push 1
mov ecx, esi
call fcn.00420c30
jmp 0x433b85
xor esi, esi
push 1
push 1
push 0
mov edx, 1
call fcn.00491c20
add esp, 0xc
mov edi, eax
mov ecx, dword [ebp + 0x5c]
push 1
call fcn.00420c30
cmp edi, 2
je 0x433bed
cmp eax, 2
je 0x433bed
test ebx, ebx
je 0x433baf
mov eax, dword [ebp + 0x58]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x1c]
mov esi, dword [eax]
mov edi, dword [eax + 4]
jmp 0x433bcd
test esi, esi
je 0x433bbe
push 0
mov ecx, esi
call fcn.00420cc0
jmp 0x433bc9
mov ecx, dword [0x4f914c]
call fcn.0041e0c0
mov edi, edx
mov esi, eax
mov ecx, dword [ebp + 0x5c]
push 0
call fcn.00420cc0
mov ecx, dword [ebp + 0x5c]
sub eax, esi
sbb edx, edi
push edx
push eax
call fcn.00420be0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
test ebx, ebx
je 0x433c06
mov edi, dword [ebp + 0x58]
mov eax, dword [edi + 8]
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.004c5d50
jmp 0x433c23
test esi, esi
je 0x433c15
push 0
mov ecx, esi
call fcn.00420d50
jmp 0x433c20
mov ecx, dword [0x4f914c]
call fcn.00420ba0
mov edi, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x5c]
push 0
movsd qword [ebp + 0x48], xmm0
call fcn.00420d50
subsd xmm0, qword [ebp + 0x48]
mov ecx, dword [ebp + 0x5c]
movaps xmm1, xmm0
call fcn.00420c00
jmp 0x436af7
mov eax, dword [edx + 8]
cmp dword [eax + 0x1c], 0
je 0x433c61
cmp byte [eax + 0x11], 0
jne 0x433c61
mov ebx, 1
xor esi, esi
mov edi, ebx
jmp 0x433caf
mov esi, dword [0x4f90f4]
xor ebx, ebx
mov ecx, dword [0x4f914c]
test esi, esi
je 0x433c98
cmp word [ecx], bx
jne 0x433c98
mov al, byte [esi + 0x17]
test al, al
jne 0x433c85
mov eax, dword [esi + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x433c98
test esi, esi
je 0x433c9a
push 1
mov ecx, esi
call fcn.00420c30
jmp 0x433cad
xor esi, esi
push 1
push 1
push 0
mov edx, 1
call fcn.00491c20
add esp, 0xc
mov edi, eax
mov ecx, dword [ebp + 0x5c]
push 1
call fcn.00420c30
cmp edi, 2
je 0x433d1a
cmp eax, 2
je 0x433d1a
test ebx, ebx
je 0x433cd7
mov eax, dword [ebp + 0x58]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x1c]
mov edi, dword [eax]
mov esi, dword [eax + 4]
jmp 0x433cf5
test esi, esi
je 0x433ce6
push 0
mov ecx, esi
call fcn.00420cc0
jmp 0x433cf1
mov ecx, dword [0x4f914c]
call fcn.0041e0c0
mov esi, edx
mov edi, eax
mov ecx, dword [ebp + 0x5c]
push 0
call fcn.00420cc0
push esi
push edi
push edx
push eax
call fcn.004c52a0
mov ecx, dword [ebp + 0x5c]
push edx
push eax
call fcn.00420be0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
test ebx, ebx
je 0x433d33
mov edi, dword [ebp + 0x58]
mov eax, dword [edi + 8]
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.004c5d50
jmp 0x433d50
test esi, esi
je 0x433d42
push 0
mov ecx, esi
call fcn.00420d50
jmp 0x433d4d
mov ecx, dword [0x4f914c]
call fcn.00420ba0
mov edi, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x5c]
push 0
movsd qword [ebp + 0x48], xmm0
call fcn.00420d50
mulsd xmm0, qword [ebp + 0x48]
mov ecx, dword [ebp + 0x5c]
movaps xmm1, xmm0
call fcn.00420c00
jmp 0x436af7
mov eax, dword [edx + 8]
cmp dword [eax + 0x1c], 0
je 0x433d8e
cmp byte [eax + 0x11], 0
jne 0x433d8e
mov ebx, 1
xor esi, esi
mov edi, ebx
jmp 0x433ddc
mov esi, dword [0x4f90f4]
xor ebx, ebx
mov ecx, dword [0x4f914c]
test esi, esi
je 0x433dc5
cmp word [ecx], bx
jne 0x433dc5
mov al, byte [esi + 0x17]
test al, al
jne 0x433db2
mov eax, dword [esi + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x433dc5
test esi, esi
je 0x433dc7
push 1
mov ecx, esi
call fcn.00420c30
jmp 0x433dda
xor esi, esi
push 1
push 1
push 0
mov edx, 1
call fcn.00491c20
add esp, 0xc
mov edi, eax
mov ecx, dword [ebp + 0x5c]
push 1
call fcn.00420c30
cmp edi, 2
je 0x433e62
cmp eax, 2
je 0x433e62
test ebx, ebx
je 0x433e04
mov eax, dword [ebp + 0x58]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x1c]
mov esi, dword [eax]
mov edi, dword [eax + 4]
jmp 0x433e22
test esi, esi
je 0x433e13
push 0
mov ecx, esi
call fcn.00420cc0
jmp 0x433e1e
mov ecx, dword [0x4f914c]
call fcn.0041e0c0
mov edi, edx
mov esi, eax
mov ecx, dword [ebp + 0x5c]
mov eax, esi
or eax, edi
jne 0x433e40
push 1
push 0
push 0xffffffffffffffff
push 0
call fcn.00495fe0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
push 0
call fcn.00420cc0
push edi
push esi
push edx
push eax
call fcn.004c53b0
mov ecx, dword [ebp + 0x5c]
push edx
push eax
call fcn.00420be0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
test ebx, ebx
je 0x433e7b
mov edi, dword [ebp + 0x58]
mov eax, dword [edi + 8]
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.004c5d50
jmp 0x433e98
test esi, esi
je 0x433e8a
push 0
mov ecx, esi
call fcn.00420d50
jmp 0x433e95
mov ecx, dword [0x4f914c]
call fcn.00420ba0
mov edi, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x5c]
xorps xmm1, xmm1
ucomisd xmm0, xmm1
movsd qword [ebp + 0x48], xmm0
lahf
test ah, 0x44
jp 0x433ebf
push 1
push 0
push 0xffffffffffffffff
push 0
call fcn.00495fe0
jmp 0x436af7
push 0
call fcn.00420d50
divsd xmm0, qword [ebp + 0x48]
mov ecx, dword [ebp + 0x5c]
movaps xmm1, xmm0
call fcn.00420c00
jmp 0x436af7
push 2
mov ecx, edx
call fcn.0042e8b0
mov esi, eax
test esi, esi
jns 0x433eee
xor esi, esi
jmp 0x433efd
mov ecx, dword [ebp + 0x58]
push 1
call fcn.0042e830
cmp esi, eax
cmovg esi, eax
sub esp, 8
push esi
push dword [0x4f914c]
mov ecx, edi
call fcn.004014f0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
push 2
mov ecx, edx
call fcn.0042e8b0
mov ecx, dword [ebp + 0x58]
xor esi, esi
test eax, eax
push 1
cmovns esi, eax
call fcn.0042e830
mov ecx, eax
mov eax, dword [0x4f914c]
cmp esi, ecx
cmova esi, ecx
sub esp, 8
sub ecx, esi
push esi
lea eax, [eax + ecx*2]
mov ecx, edi
push eax
call fcn.004014f0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
cmp byte [edx + 1], 4
jb 0x433f8f
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x34]
cmp word [eax], 0
je 0x433f8f
push 3
mov ecx, edx
call fcn.0042e8b0
mov edi, eax
cmp edi, 1
jge 0x433f96
mov ecx, dword [ebp + 0x5c]
push 1
push 0
push 0xffffffffffffffff
push 0
call fcn.00495fe0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov edi, SysReAllocString
jmp 0x433f99
mov edx, dword [ebp + 0x58]
push 2
mov ecx, edx
call fcn.0042e8b0
mov ecx, dword [0x4f9158]
mov esi, eax
mov cx, word [ecx]
call fcn.0040ba80
cmp ax, 0x4c
jne 0x433fd1
cmp esi, 1
jl 0x433f77
mov ebx, 1
mov eax, ebx
sub eax, edi
add esi, eax
cmp esi, ebx
jge 0x433fdc
dec edi
add edi, esi
jmp 0x433fd6
mov ebx, 1
cmp esi, 1
cmovl esi, ebx
mov ecx, dword [ebp + 0x58]
push 1
call fcn.0042e830
mov ecx, eax
cmp ecx, esi
jb 0x433f77
mov eax, dword [0x4f914c]
sub ebx, esi
add ecx, ebx
cmp edi, ecx
cmova edi, ecx
lea eax, [eax + esi*2]
mov ecx, dword [ebp + 0x5c]
sub esp, 8
add eax, 0xfffffffe
push edi
push eax
call fcn.004014f0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
push 2
mov ecx, edx
call fcn.0042e8b0
mov ecx, dword [ebp + 0x58]
xor esi, esi
test eax, eax
push 1
cmovns esi, eax
call fcn.0042e830
cmp esi, eax
mov ecx, edi
cmova esi, eax
sub esp, 8
sub eax, esi
push eax
mov eax, dword [0x4f914c]
lea eax, [eax + esi*2]
push eax
call fcn.004014f0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
push 2
mov ecx, edx
call fcn.0042e8b0
mov ecx, dword [ebp + 0x58]
xor esi, esi
test eax, eax
push 1
cmovns esi, eax
call fcn.0042e830
cmp esi, eax
cmova esi, eax
sub esp, 8
sub eax, esi
push eax
jmp 0x433f01
push 1
push 1
mov ecx, edi
call fcn.00401530
mov esi, eax
cmp esi, dword [0x4f914c]
jne 0x4340a3
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x43409e
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x4340f2
mov ebx, dword [ebp + 0x58]
mov ecx, ebx
push 1
push 0
push 1
call fcn.0042e830
push eax
push 0
mov ecx, edi
call fcn.00495fe0
cmp eax, 1
jne case.0x4336a3.8
push 0
push eax
mov ecx, edi
call fcn.00401530
mov ecx, dword [0x4f914c]
mov esi, eax
mov edx, esi
sub edx, ecx
nop dword [eax]
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx + ecx - 2], ax
test ax, ax
jne 0x4340e0
jmp 0x4340f5
mov ebx, dword [ebp + 0x58]
mov eax, dword [0x4f9150]
movzx ecx, word [eax]
test cx, cx
je 0x434131
call fcn.0040ba80
cmp ax, 0x54
jne 0x434131
mov eax, dword [0x4f9150]
cmp word [eax + 2], 0
jne 0x434131
mov ecx, esi
call fcn.004208b0
push 0
mov ecx, edi
call fcn.00421030
mov edi, dword [ebp + 0x58]
jmp 0x436af7
cmp byte [ebx], 0x31
push esi
jne 0x43414e
call dword [sym.imp.USER32.dll_CharLowerW]
push 0
mov ecx, edi
call fcn.00421030
mov edi, dword [ebp + 0x58]
jmp 0x436af7
call dword [sym.imp.USER32.dll_CharUpperW]
push 0
mov ecx, edi
call fcn.00421030
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov esi, dword [0x4f90f4]
test esi, esi
je 0x4341d4
cmp byte [esi + 0x17], 0
jne 0x43417d
mov eax, dword [esi + 0xc]
mov al, byte [eax + 0x15]
jmp 0x434180
mov al, byte [esi + 0x15]
test al, 1
je 0x4341d4
cmp byte [esi + 0x17], 0
jne 0x43418d
mov esi, dword [esi + 0xc]
cmp byte [esi + 0x17], 1
jne 0x4341b9
test byte [esi + 0x15], 8
je 0x4341a0
mov ecx, esi
call fcn.00401450
lea eax, [esi + 0xc]
mov ecx, edi
mov eax, dword [eax]
shr eax, 1
push 0
push eax
call fcn.00420be0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov eax, 0x4fb9c0
mov ecx, edi
push 0
mov eax, dword [eax]
shr eax, 1
push eax
call fcn.00420be0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
push 1
mov ecx, edx
call fcn.0042e830
push 0
push eax
mov ecx, edi
call fcn.00420be0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov esi, dword [0x4f9154]
mov dword [ebp + 0x4c], esi
mov dword [ebp + 0x40], 0xffffffff
movzx ecx, word [esi]
test cx, cx
je 0x43423f
call fcn.0040ba80
movzx eax, ax
push eax
push 0x4e7790
call fcn.004ace17
add esp, 8
test eax, eax
je 0x43423f
cmp word [esi + 2], 0
lea ecx, [esi + 2]
je 0x43423f
call fcn.00410b20
mov ecx, eax
mov dword [ebp + 0x50], ecx
test ecx, ecx
jle 0x43433b
jmp 0x434246
mov dword [ebp + 0x50], 1
mov eax, dword [0x4f9150]
mov dword [ebp + 0x28], eax
cmp word [eax], 0
jne 0x434260
mov dword [ebp + 0x40], 0
jmp 0x43433b
mov eax, dword [0x4f914c]
mov ecx, dword [ebp + 0x58]
push 4
mov dword [ebp + 0x3c], eax
call fcn.0042e8b0
mov ecx, dword [ebp + 0x58]
xor esi, esi
test eax, eax
push 1
cmovns esi, eax
call fcn.0042e830
mov edi, eax
cmp esi, edi
jge 0x434338
mov eax, dword [ebp + 0x4c]
movzx ecx, word [eax]
cmp ecx, 0x31
je 0x434303
call fcn.0040ba80
cmp ax, 0x52
je 0x434303
mov ecx, dword [ebp + 0x58]
push 2
call fcn.0042e830
mov ebx, dword [ebp + 0x28]
mov edi, 1
mov dword [ebp + 0x4c], eax
mov eax, dword [ebp + 0x3c]
lea ecx, [eax + esi*2]
mov esi, dword [ebp + 0x50]
mov edx, dword [0x4f48cc]
mov dl, byte [edx + 0xf2]
test dl, dl
jne 0x4342da
mov edx, ebx
call fcn.004921b0
jmp 0x4342f2
cmp dl, 2
jne 0x4342e8
mov edx, ebx
call fcn.004923f0
jmp 0x4342f2
push ebx
push ecx
call fcn.004acede
add esp, 8
test eax, eax
je 0x434338
cmp edi, esi
je 0x434325
mov ecx, dword [ebp + 0x4c]
inc edi
lea ecx, [eax + ecx*2]
jmp 0x4342c1
movzx eax, byte [ebx + 0xf2]
sub edi, esi
push dword [ebp + 0x50]
mov ebx, dword [ebp + 0x28]
mov edx, edi
push eax
push ebx
mov ebx, dword [ebp + 0x3c]
mov ecx, ebx
call fcn.00491f80
add esp, 0xc
jmp 0x434328
mov ebx, dword [ebp + 0x3c]
mov edi, dword [ebp + 0x5c]
test eax, eax
je 0x43433b
sub eax, ebx
sar eax, 1
mov dword [ebp + 0x40], eax
jmp 0x43433b
mov edi, dword [ebp + 0x5c]
mov esi, dword [ebp + 0x40]
mov ecx, 0x4cd350
push 1
push 0
test esi, esi
mov eax, 0x4e25ec
push 0xffffffffffffffff
cmovns eax, ecx
mov ecx, dword [0x4f78d0]
push eax
call fcn.00495fe0
push esi
mov ecx, edi
call fcn.00404ac0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov ecx, edi
call fcn.0044a780
jmp 0x436af7
push dword [0x4f9154]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.0043f620
jmp 0x436af7
push dword [0x4f9154]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.0044a900
jmp 0x436af7
push dword [0x4f9148]
mov edi, dword [ebp + 0x58]
mov ecx, edi
call fcn.0044b260
jmp 0x436af7
push dword [0x4f914c]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9148]
call fcn.0044b8c0
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 0
push dword [0x4f9168]
push 7
call fcn.0042e8b0
push eax
push 6
mov ecx, edi
call fcn.0042e8b0
push eax
push 5
mov ecx, edi
call fcn.0042e8b0
push eax
push 4
mov ecx, edi
call fcn.0042e8b0
push eax
push 3
mov ecx, edi
call fcn.0042e8b0
push eax
push 2
mov ecx, edi
call fcn.0042e8b0
push eax
mov ecx, edi
call fcn.00445f60
jmp 0x436af7
push dword [0x4f9160]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 5
call fcn.0042e8b0
push eax
push 4
mov ecx, edi
call fcn.0042e8b0
push eax
push 3
mov ecx, edi
call fcn.0042e8b0
push eax
push 2
mov ecx, edi
call fcn.0042e8b0
push eax
mov ecx, edi
call fcn.00446870
jmp 0x436af7
push dword [0x4f9154]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 2
call fcn.0042e8b0
push eax
push 1
mov ecx, edi
call fcn.0042e8b0
push eax
mov ecx, edi
call fcn.00463ab0
jmp 0x436af7
xor edx, edx
cmp cl, 0x42
push 0
push dword [ebx + 0xd4]
sete dl
mov ecx, dword [0x4f9148]
call fcn.00410e90
add esp, 8
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
xor eax, eax
cmp dword [ebx + 0xd4], 3
push 0
sete al
xor edx, edx
lea eax, [eax*2 + 1]
push eax
jmp 0x4344bf
push 0
push 2
xor edx, edx
jmp 0x4344bf
push 0
push 0
xor edx, edx
jmp 0x4344bf
mov ecx, dword [0x4f9148]
call fcn.00412b00
mov edi, dword [ebp + 0x58]
jmp 0x436af7
push 0x4cd2cc
push 0x4cd2cc
push dword [0x4f9160]
push dword [0x4f915c]
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
mov edx, dword [0x4f9148]
push dword [0x4f914c]
call fcn.00412de0
mov edi, dword [ebp + 0x58]
add esp, 0x20
jmp 0x436af7
push dword [0x4f915c]
push dword [0x4f9154]
push dword [0x4f9160]
push dword [0x4f9158]
push 0x4cd2cc
push 0x4cd2cc
jmp 0x43453b
push 0x4cd2cc
push 0x4cd2cc
push dword [0x4f9154]
mov edx, 0x4cd2cc
push dword [0x4f9150]
push 0x4cd2cc
push 0x4cd2cc
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.00412de0
mov edi, dword [ebp + 0x58]
add esp, 0x20
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 4
call fcn.0042e8b0
push eax
mov ecx, edi
call fcn.00449710
jmp 0x436af7
mov edx, dword [0x4f9148]
cmp cl, 0x7a
push 0
push 0
sete al
mov ecx, ebx
movzx eax, al
push eax
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.00496c60
add esp, 0x18
test eax, eax
je case.0x4336a3.3
mov eax, dword [0x4f48cc]
cmp dword [eax + 0x54], 0xffffffff
jle case.0x4336a3.3
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x4f9a38], eax
je 0x43464d
mov eax, dword [0x4f48cc]
push dword [eax + 0x54]
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
mov ecx, dword [0x4f48cc]
mov edx, 1
mov ecx, dword [ecx + 0x54]
call fcn.00401890
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
push 9
push str.ahk_group
push dword [0x4f9148]
call fcn.004af905
mov edx, dword [0x4f9154]
add esp, 0xc
test eax, eax
jne 0x4346a3
mov eax, dword [0x4f914c]
cmp word [eax], 0
jne 0x4346a3
cmp word [edx], 0
jne 0x4346a3
mov cl, 1
jmp 0x4346a5
xor cl, cl
mov edi, dword [ebp + 0x58]
xor esi, esi
test cl, cl
mov byte [ebp + 0x32], cl
mov eax, 0x14
cmovne eax, esi
mov dword [ebp + 0x50], eax
mov al, byte [edi]
cmp al, 0x86
je 0x4346ce
cmp al, 0x87
je 0x4346ce
mov eax, dword [0x4f9150]
cmp word [eax], si
jmp 0x43470c
mov eax, dword [0x4f9150]
cmp word [eax], si
je 0x434703
push 2
mov ecx, edi
call fcn.0042e960
mulsd xmm0, qword [0x4ee8d8]
mov eax, 0x1f4
mov edx, dword [0x4f9154]
mov cl, byte [ebp + 0x32]
cvttsd2si esi, xmm0
test esi, esi
cmove esi, eax
mov dword [ebp + 0x50], esi
mov eax, dword [0x4f9158]
cmp word [eax], 0
jne 0x434761
test cl, cl
je 0x434761
mov edi, dword [0x4f9148]
add edi, 0x12
nop dword [eax + eax]
movzx eax, word [edi]
cmp eax, 0x20
je 0x43472d
cmp eax, 9
jne 0x434732
add edi, 2
jmp 0x434720
test ax, ax
je 0x43475e
mov esi, dword [0x4f9a84]
test esi, esi
je 0x43475e
push edi
push dword [esi + 4]
call fcn.004af78f
add esp, 8
test eax, eax
je 0x43478b
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x434741
mov edx, dword [0x4f9154]
mov edi, dword [ebp + 0x58]
mov al, byte [edi]
cmp al, 0x86
je 0x4347a1
cmp al, 0x87
je 0x4347a3
push edx
push dword [0x4f9150]
mov ecx, edi
push dword [0x4f914c]
push dword [0x4f9148]
push eax
call fcn.004415a0
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov ecx, esi
push dword [ebp + 0x50]
movzx eax, byte [edi]
push eax
call fcn.00498e10
jmp 0x436af7
cmp al, 0x87
sete al
mov ecx, ebx
movzx eax, al
push eax
push dword [0x4f9158]
push edx
push dword [ebp + 0x50]
mov edx, dword [0x4f9148]
push dword [0x4f914c]
call fcn.00496f60
add esp, 0x14
test eax, eax
je 0x434817
mov eax, dword [0x4f48cc]
cmp dword [eax + 0x54], 0xffffffff
jle 0x434817
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x4f9a38], eax
je 0x434804
mov eax, dword [0x4f48cc]
push dword [eax + 0x54]
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b1a
mov ecx, dword [0x4f48cc]
mov edx, 1
mov ecx, dword [ecx + 0x54]
call fcn.00401890
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b1a
push dword [0x4f914c]
mov edi, dword [ebp + 0x58]
mov ecx, edi
call fcn.004457c0
jmp 0x436af7
push dword [0x4f914c]
push dword [0x4f9148]
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov edi, dword [ebp + 0x58]
test eax, eax
mov ecx, edi
sete al
movzx eax, al
push eax
call fcn.0043b920
jmp 0x436af7
lea eax, [ebp - 0x64]
push eax
push 0x3a98
push 1
push str.Environment
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
jmp 0x43484d
push dword [0x4f914c]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9148]
call fcn.00465400
jmp 0x436af7
mov ecx, dword [0x4f9148]
mov edx, 0x4fa588
push 0xffffffffffffffff
call fcn.0048f6c0
mov ecx, dword [0x4f914c]
mov edx, 0x4fa594
push 0xffffffffffffffff
call fcn.0048f6c0
mov ecx, dword [0x4f9150]
mov edx, 0x4fa5a0
push 0xffffffffffffffff
call fcn.0048f6c0
mov dword [ebp + 0x5c], 1
add esp, 0xc
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
mov ecx, dword [0x4f9150]
mov edx, str.UseErrorLevel
call fcn.004921b0
mov edi, dword [ebp + 0x58]
test eax, eax
mov al, 3
mov ecx, 0x4f9a70
setne bl
mov byte [ebp - 0x50], bl
cmp al, byte [edi + 1]
sbb eax, eax
and eax, dword [0x4f90fc]
push eax
push 1
push dword [ebp - 0x50]
mov al, bl
push 0
push dword [0x4f9150]
xor al, 1
movzx eax, al
push eax
push dword [0x4f914c]
push 0
push dword [0x4f9148]
call fcn.0043cd70
mov ecx, eax
mov dword [ebp + 0x5c], ecx
test bl, bl
je 0x436a54
push 1
test ecx, ecx
mov eax, 0x4cd350
push 0
mov ecx, str.ERROR
cmove eax, ecx
mov ecx, dword [0x4f78d0]
push 0xffffffffffffffff
push eax
call fcn.00495fe0
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov ecx, edi
call fcn.004416c0
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov ecx, edi
cmp byte [edi + 1], 2
jbe 0x4349c6
push dword [0x4f9164]
push dword [0x4f9160]
push dword [0x4f915c]
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.00441e20
jmp 0x436af7
push 0x4cd2cc
push 0x4cd2cc
push 0x4cd2cc
push 0x4cd2cc
push dword [0x4f914c]
push dword [0x4f9148]
push 0x4cd2cc
push 0x4cd2cc
call fcn.00441e20
jmp 0x436af7
push dword [0x4f9170]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f916c]
push dword [0x4f9168]
push dword [0x4f9164]
push dword [0x4f9160]
push dword [0x4f915c]
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.00463ea0
jmp 0x436af7
mov edi, dword [ebp + 0x58]
xor eax, eax
cmp cl, 0x47
mov ecx, edi
sete al
push eax
push dword [0x4f915c]
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.00441f80
jmp 0x436af7
mov ecx, dword [0x4f9154]
mov dl, 1
push 0
call fcn.00410b50
add esp, 4
mov byte [ebp - 0x54], al
test al, al
jne 0x434ab2
push dword [0x4f9154]
push 0
push str.Parameter_4_invalid.
jmp 0x436aed
mov eax, dword [0x4f9158]
mov edi, dword [ebp + 0x58]
cmp word [eax], 0
je 0x434acb
push 4
mov ecx, edi
call fcn.0042e8b0
jmp 0x434ad0
mov eax, 1
push dword [0x4f9164]
mov ecx, edi
push dword [0x4f9160]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
push dword [0x4f915c]
push eax
push dword [ebp - 0x54]
call fcn.00442040
jmp 0x436af7
push dword [0x4f9168]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9164]
push dword [0x4f9160]
push dword [0x4f915c]
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.004426b0
jmp 0x436af7
push dword [0x4f9168]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9164]
push dword [0x4f9160]
push dword [0x4f915c]
push dword [0x4f9158]
call fcn.00442910
jmp 0x436af7
push dword [0x4f9158]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.00442a80
jmp 0x436af7
push dword [0x4f9158]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.00442c60
jmp 0x436af7
push dword [0x4f915c]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.00442db0
jmp 0x436af7
push dword [0x4f915c]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.00442ea0
jmp 0x436af7
push dword [0x4f9160]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f915c]
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.004641d0
jmp 0x436af7
push dword [0x4f9164]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9160]
push dword [0x4f915c]
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.004649c0
jmp 0x436af7
push dword [0x4f915c]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.00443680
jmp 0x436af7
push dword [0x4f9164]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9160]
push dword [0x4f915c]
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.00443700
jmp 0x436af7
mov edi, dword [ebp + 0x58]
cmp cl, 0x94
mov ecx, edi
sete al
movzx eax, al
push eax
call fcn.00443840
jmp 0x436af7
push dword [0x4f9150]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.00443b50
jmp 0x436af7
push dword [0x4f915c]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.00444180
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov ecx, edi
cmp byte [edi + 1], 1
jbe 0x434da0
push dword [0x4f9158]
mov esi, dword [0x4f9150]
push dword [0x4f9154]
push dword [0x4f914c]
push dword [0x4f9148]
jmp 0x434dba
mov esi, dword [0x4f9148]
push 0x4cd2cc
push 0x4cd2cc
push 0x4cd2cc
push 0x4cd2cc
call fcn.004505f0
test eax, eax
je 0x434817
push esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b1a
push dword [0x4f9158]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.00444750
jmp 0x436af7
push dword [0x4f9158]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.004448a0
jmp 0x436af7
push dword [0x4f915c]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.004449a0
jmp 0x436af7
push dword [0x4f9158]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.00445390
jmp 0x436af7
push dword [0x4f9164]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9160]
push dword [0x4f915c]
push dword [0x4f9158]
call fcn.00445650
jmp 0x436af7
push dword [0x4f9150]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f914c]
call fcn.004458b0
jmp 0x436af7
push 0
push 0x1a3
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x434613
push 0
push 0x1a0
jmp 0x434ec9
mov edi, dword [ebp + 0x58]
mov eax, dword [edi + 0xc]
test eax, eax
jne 0x434f25
mov ecx, dword [0x4f9148]
cmp word [ecx], ax
je 0x434f25
push ecx
mov ecx, 0x4f9a70
call fcn.00427670
test eax, eax
jne 0x434f25
push dword [0x4f9148]
push eax
push str.Target_label_does_not_exist.
jmp 0x436af0
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [0x4fa518], eax
jmp 0x436b1a
mov edi, dword [ebp + 0x58]
mov al, 1
mov edx, dword [0x4f914c]
mov ecx, dword [0x4f9148]
cmp al, byte [edi + 1]
sbb eax, eax
and eax, dword [0x4f90f4]
push eax
push dword [edi + 0xc]
push dword [0x4f9150]
call fcn.0040cc10
add esp, 0xc
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov esi, dword [edi + 0xc]
test esi, esi
jne 0x434ffb
push esi
push dword [0x4f90f0]
mov ecx, 0x4f9a70
push dword [0x4f9148]
call fcn.004276c0
mov esi, eax
test esi, esi
jne 0x434ffb
mov eax, dword [0x4f9148]
cmp word [eax], si
je 0x434fad
push eax
push esi
push str.Target_label_does_not_exist.
jmp 0x436af0
cmp byte [edi + 1], 0
jbe 0x434fd0
mov eax, dword [edi + 8]
mov eax, dword [eax + 4]
cmp word [eax], 0
je 0x434fd0
push 0x4cd2cc
push 0
push str.Parameter_1_invalid.
jmp 0x436af0
mov esi, dword [ebx + 0xbc]
test esi, esi
jne 0x434ffb
mov esi, dword [ebx + 0xc0]
test esi, esi
je 0x434fea
mov esi, dword [esi]
test esi, esi
jne 0x434ffb
push 0x4cd2cc
push 0
push str.Parameter_1_must_not_be_blank_in_this_case.
jmp 0x436af0
mov ecx, dword [0x4f914c]
mov edx, 1
push 0
push 1
push 1
call fcn.00491c20
add esp, 0xc
test eax, eax
jne 0x43506e
mov ecx, dword [0x4f914c]
xor edx, edx
call fcn.0040bbc0
mov ecx, eax
test ecx, ecx
jne 0x435070
push str.Delete
push dword [0x4f914c]
call fcn.004af78f
add esp, 8
test eax, eax
jne 0x43505c
push esi
mov ecx, 0x4f9a70
call fcn.00427530
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b1a
push dword [0x4f914c]
push 0
push str.Parameter_2_invalid.
jmp 0x436af0
xor ecx, ecx
lea eax, [ecx - 1]
cmp eax, 1
ja 0x435091
cmp ecx, 1
push 0
sete al
movzx eax, al
push eax
push dword [0x4f9150]
push 0x4cd2cc
jmp 0x4350b4
mov edx, dword [0x4f914c]
mov ecx, dword [0x4f9150]
cmp word [edx], 0
jne 0x4350ad
cmp word [ecx], 0
je 0x4350ad
mov al, 1
jmp 0x4350af
xor al, al
push eax
push 1
push ecx
push edx
push esi
mov ecx, 0x4f9a70
call fcn.00427320
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b1a
mov eax, dword [0x4f9148]
mov esi, 0x10
cmp word [eax], 0
je 0x435106
push 0x4e782c
push eax
call fcn.004af78f
mov edi, dword [ebp + 0x58]
add esp, 8
test eax, eax
je 0x435109
push 0
mov ecx, edi
call fcn.0042e8b0
mov esi, eax
test esi, esi
jne 0x435109
xor cl, cl
jmp 0x43510b
mov edi, dword [ebp + 0x58]
mov cl, 1
mov byte [ebx + 0xee], cl
test cl, cl
je 0x435145
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0xd8], esi
mov byte [ebx + 0xec], 0
mov dword [ebx], 0xffffffff
mov dword [ebx + 4], 0xffffffff
mov dword [ebx + 0x24], 0xffffffff
jmp 0x436b1a
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0xd8], 5
mov byte [ebx + 0xec], 1
jmp 0x436b1a
mov ecx, dword [0x4f9148]
call fcn.00421a00
sub eax, 1
je 0x435201
sub eax, 1
je 0x4351ba
sub eax, 1
jne 0x4351a8
mov eax, dword [0x4f914c]
cmp word [eax], 0
je 0x4351a0
mov ecx, dword [ebp + 0x58]
push 1
call fcn.0042e8b0
or eax, edx
jne 0x4351a0
mov al, 1
jmp 0x4351a2
xor al, al
mov byte [ebx + 0xed], al
mov edi, dword [ebp + 0x58]
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b1a
mov eax, dword [0x4f914c]
mov ebx, dword [ebp + 0x58]
cmp word [eax], 0
je 0x4351d6
push 1
mov ecx, ebx
call fcn.0042e8b0
mov dword [0x4fa57c], eax
mov eax, dword [0x4f9150]
cmp word [eax], 0
je 0x4351a8
push 2
mov ecx, ebx
call fcn.0042e8b0
mov edi, dword [ebp + 0x58]
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [0x4fa578], eax
jmp 0x436b1a
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 1
call fcn.0042e8b0
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0x2c], eax
jmp 0x436b1a
mov edi, dword [ebp + 0x58]
mov esi, dword [edi + 0xc]
test esi, esi
jne 0x435245
push 1
push dword [0x4f9148]
mov ecx, 0x4f9a70
call fcn.0042f800
mov esi, eax
test esi, esi
je case.0x4336a3.8
mov ecx, dword [0x4f9154]
cmp word [ecx], 0
je 0x43527b
mov eax, dword [edi + 0x18]
test eax, eax
jne 0x435278
push ecx
mov ecx, 0x4f9a70
call fcn.00427670
test eax, eax
jne 0x435278
push dword [0x4f9154]
push eax
push str.Target_label_does_not_exist.
jmp 0x436af0
mov dword [esi + 0x10], eax
push dword [0x4f915c]
mov ecx, esi
push dword [0x4f9158]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.00498ab0
jmp 0x436af7
mov esi, dword [edx + 0xc]
test esi, esi
jne 0x4352e9
mov edi, dword [0x4f9148]
cmp word [edi], si
je case.0x4336a3.3
mov esi, dword [0x4f9a84]
test esi, esi
je case.0x4336a3.3
push edi
push dword [esi + 4]
call fcn.004af78f
add esp, 8
test eax, eax
je 0x4352e9
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4352c3
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
mov eax, dword [0x4f914c]
cmp word [eax], 0
je 0x43531f
push 0x4e30d8
push eax
call fcn.004af78f
add esp, 8
test eax, eax
jne 0x43531f
mov al, 1
mov ecx, esi
push eax
call fcn.00499150
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
xor al, al
mov ecx, esi
push eax
call fcn.00499150
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
mov esi, dword [edx + 0xc]
test esi, esi
jne 0x435386
mov edi, dword [0x4f9148]
cmp word [edi], si
je case.0x4336a3.3
mov esi, dword [0x4f9a84]
test esi, esi
je case.0x4336a3.3
nop dword [eax]
push edi
push dword [esi + 4]
call fcn.004af78f
add esp, 8
test eax, eax
je 0x435386
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x435360
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
mov eax, dword [0x4f914c]
cmp word [eax], 0
je 0x4353f5
push 0x4e5a48
push eax
call fcn.004af78f
add esp, 8
test eax, eax
jne 0x4353bf
push eax
push 0x86
mov ecx, esi
call fcn.00498e10
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
mov eax, dword [0x4f914c]
cmp word [eax], 0
je 0x4353f5
push 0x4e30d8
push eax
call fcn.004af78f
add esp, 8
test eax, eax
jne 0x4353f5
mov al, 1
mov ecx, esi
push eax
call fcn.00498ec0
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
xor al, al
mov ecx, esi
push eax
call fcn.00498ec0
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
push dword [0x4f9150]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f914c]
call fcn.0044c130
jmp 0x436af7
test edi, edi
jne 0x43544f
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 1
call fcn.0042e8b0
mov ecx, eax
call fcn.00420630
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b1a
mov ecx, dword [0x4f914c]
mov ebx, 1
push 0
push 1
push 0
mov edx, ebx
call fcn.00491c20
add esp, 0xc
cmp eax, 2
je 0x435513
mov ecx, dword [0x4f9150]
mov edx, ebx
push 0
push ebx
push 0
call fcn.00491c20
add esp, 0xc
cmp eax, 2
je 0x435513
mov eax, dword [0x4f914c]
mov ebx, dword [ebp + 0x58]
cmp word [eax], 0
je 0x4354ac
push 1
mov ecx, ebx
call fcn.0042e8b0
mov edi, eax
jmp 0x4354ae
xor edi, edi
mov eax, dword [0x4f9150]
mov dword [ebp + 0x28], edi
cmp word [eax], 0
je 0x4354c9
push 2
mov ecx, ebx
call fcn.0042e8b0
mov esi, eax
jmp 0x4354ce
mov esi, SysReAllocString
cmp edi, esi
mov ebx, esi
cmovle ebx, edi
call fcn.00420770
mov edi, eax
mov eax, dword [ebp + 0x28]
cmp eax, esi
cmovle eax, esi
cdq
mov esi, eax
mov ecx, edx
mov eax, ebx
cdq
sub esi, eax
sbb ecx, edx
add esi, 1
adc ecx, 0
push ecx
push esi
push 0
push edi
call fcn.004c58a0
mov ecx, dword [ebp + 0x5c]
add eax, ebx
push eax
call fcn.00404ac0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov eax, dword [0x4f914c]
mov ebx, dword [ebp + 0x58]
cmp word [eax], 0
je 0x435531
push 1
mov ecx, ebx
call fcn.0042e960
movsd qword [ebp + 0x48], xmm0
jmp 0x435539
xorps xmm2, xmm2
movsd qword [ebp + 0x48], xmm2
mov eax, dword [0x4f9150]
cmp word [eax], 0
je 0x435557
push 2
mov ecx, ebx
call fcn.0042e960
movaps xmm1, xmm0
movsd qword [ebp + 0xc], xmm0
jmp 0x435564
movsd xmm1, qword [0x4ee918]
movsd qword [ebp + 0xc], xmm1
movsd xmm2, qword [ebp + 0x48]
comisd xmm2, xmm1
jbe 0x43557f
movaps xmm0, xmm2
movaps xmm2, xmm1
movsd qword [ebp + 0x48], xmm2
movsd qword [ebp + 0xc], xmm0
call fcn.004207c0
movsd xmm1, qword [ebp + 0xc]
mov ecx, edi
subsd xmm1, qword [ebp + 0x48]
mulsd xmm0, xmm1
addsd xmm0, qword [ebp + 0x48]
movaps xmm1, xmm0
call fcn.00420c00
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 1
push dword [0x4f914c]
call fcn.0044c240
jmp 0x436af7
push dword [0x4f9150]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.0044c380
jmp 0x436af7
push dword [0x4f9150]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f914c]
call fcn.0044c6c0
jmp 0x436af7
push dword [0x4f9154]
mov eax, dword [0x4f9148]
xor edx, edx
push dword [0x4f9150]
mov edi, dword [ebp + 0x58]
cmp cl, 0x9f
push dword [0x4f914c]
cmove eax, edx
mov ecx, edi
push eax
call fcn.0044cdd0
jmp 0x436af7
mov eax, dword [0x4f914c]
mov edi, dword [ebp + 0x58]
cmp word [eax], 0
je 0x435647
push 1
mov ecx, edi
call fcn.0042e8b0
mov cl, byte [edi]
dec eax
jmp 0x435649
xor eax, eax
cdq
test edx, edx
jg 0x43565f
jl 0x435654
test eax, eax
jae 0x43565f
xorps xmm0, xmm0
movlpd qword [ebp + 0x48], xmm0
mov eax, dword [ebp + 0x48]
cmp cl, 0xa1
mov ecx, edi
push eax
jne 0x435671
call fcn.0044de20
jmp 0x436af7
push dword [0x4f9148]
call fcn.0044df20
jmp 0x436af7
mov eax, dword [0x4f914c]
mov edi, dword [ebp + 0x58]
cmp word [eax], 0
je 0x4356a6
push 1
mov ecx, edi
call fcn.0042e8b0
mov esi, eax
mov eax, 0x96
test esi, esi
cmovs esi, eax
jmp 0x4356ab
mov esi, 0x96
mov eax, dword [0x4f9148]
cmp word [eax], 0
je 0x4356c1
push 0
mov ecx, edi
call fcn.0042e8b0
jmp 0x4356c6
mov eax, 0x20b
push esi
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b1a
mov eax, dword [0x4f914c]
cmp word [eax], 0
je 0x4356ff
push str.wait
push eax
call fcn.004af78f
add esp, 8
test eax, eax
je 0x435715
mov eax, dword [0x4f914c]
push 0x4e25ec
push eax
call fcn.004af78f
add esp, 8
test eax, eax
je 0x435715
xor al, al
jmp 0x435717
mov al, 1
mov edi, dword [ebp + 0x58]
mov ecx, edi
push eax
push dword [0x4f9148]
call fcn.0044e0b0
jmp 0x436af7
mov edi, dword [ebp + 0x58]
cmp byte [edi + 1], 2
jae 0x43573b
mov eax, dword [ebx + 0x18]
jmp 0x43573d
xor eax, eax
push eax
push dword [0x4f9148]
mov ecx, edi
push dword [0x4f914c]
call fcn.0044f410
jmp 0x436af7
push dword [0x4f914c]
mov edi, dword [ebp + 0x58]
mov ecx, edi
call fcn.0044eb60
jmp 0x436af7
push dword [0x4f9150]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f914c]
call fcn.0044f130
jmp 0x436af7
push dword [0x4f9148]
mov edi, dword [ebp + 0x58]
mov ecx, edi
call fcn.0044f750
jmp 0x436af7
push dword [0x4f9148]
mov edi, dword [ebp + 0x58]
mov ecx, edi
call fcn.004660a0
jmp 0x436af7
mov eax, dword [0x4f9148]
xor ecx, ecx
push 7
cmp word [eax], cx
cmovne ecx, eax
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
mov edi, dword [ebp + 0x58]
test eax, eax
mov ecx, edi
setne al
movzx eax, al
push eax
call fcn.0043b920
jmp 0x436af7
push dword [0x4f9150]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.0044f800
jmp 0x436af7
mov edi, dword [ebp + 0x58]
lea eax, [ebx + 0x30]
push eax
push 0
push 2
mov ecx, edi
call fcn.0042e8b0
mov edx, dword [0x4f914c]
cmp eax, 1
mov ecx, dword [0x4f9148]
sete al
movzx eax, al
push eax
call fcn.004666e0
add esp, 0xc
test eax, eax
jne 0x43587f
mov ecx, dword [0x4f78d0]
push 1
push eax
push 0xffffffffffffffff
push 0x4cd350
call fcn.00495fe0
jmp 0x436af7
mov edi, dword [ebp + 0x58]
lea eax, [ebx + 0x30]
push eax
push 1
push 2
mov ecx, edi
call fcn.0042e8b0
mov edx, dword [0x4f914c]
cmp eax, 1
mov ecx, dword [0x4f9148]
sete al
movzx eax, al
push eax
call fcn.004666e0
add esp, 0xc
push eax
mov ecx, edi
call fcn.0043b9d0
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 0
push 2
call fcn.0042e8b0
dec eax
neg eax
sbb eax, eax
inc eax
mov edx, dword [0x4f914c]
mov ecx, dword [0x4f9148]
push eax
call fcn.00466360
add esp, 8
mov ecx, edi
test al, al
sete al
movzx eax, al
push eax
call fcn.0043b920
jmp 0x436af7
mov eax, dword [0x4f9150]
mov cx, word [eax]
call fcn.0040ba80
cmp ax, 0x52
jne 0x4358f4
push dword [0x4f914c]
push dword [0x4f9148]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
jmp 0x43484d
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 1
push 2
call fcn.0042e8b0
jmp 0x4358a0
mov ecx, dword [0x4f9148]
xor edx, edx
call fcn.0044ea70
test al, al
sete byte [ebp - 0x60]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x4f48cc]
push dword [ebp - 0x60]
mov edi, dword [ebp + 0x58]
mov dword [ecx + 0x30], eax
mov ecx, edi
call fcn.0043b920
jmp 0x436af7
mov eax, dword [0x4f9148]
mov edi, dword [ebp + 0x58]
cmp word [eax], 0
je 0x435973
push 1
mov ecx, edi
call fcn.0042e8b0
mov ecx, dword [0x4f9148]
cmp eax, 1
sete dl
call fcn.004665e0
test al, al
je 0x435973
xor al, al
mov ecx, edi
push eax
call fcn.0043b920
jmp 0x436af7
mov al, 1
mov ecx, edi
push eax
call fcn.0043b920
jmp 0x436af7
mov eax, dword [0x4f914c]
cmp word [eax], 0
jne 0x4359ae
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x4359a9
mov edi, dword [ebp + 0x58]
add eax, 0x250
push eax
mov ecx, edi
call fcn.0044f9e0
jmp 0x436af7
mov eax, 0x4cd2cc
mov edi, dword [ebp + 0x58]
mov ecx, edi
push eax
call fcn.0044f9e0
jmp 0x436af7
mov esi, dword [0x4f914c]
cmp word [esi], 0
jne 0x4359dc
mov eax, dword [ebx + 0x10]
lea esi, [eax + 0x250]
test eax, eax
jne 0x4359dc
mov esi, 0x4cd2cc
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 3
call fcn.0042e8b0
mov ecx, dword [0x4f9150]
cmp eax, 1
sete al
movzx eax, al
push eax
call fcn.00421c60
push eax
push esi
push dword [0x4f9148]
mov ecx, edi
call fcn.0044faa0
jmp 0x436af7
mov ecx, dword [0x4f914c]
cmp word [ecx], 0
jne 0x435a2f
mov eax, dword [ebx + 0x10]
lea ecx, [eax + 0x250]
test eax, eax
jne 0x435a2f
mov ecx, 0x4cd2cc
mov eax, dword [0x4f9150]
mov edi, dword [ebp + 0x58]
movzx eax, word [eax]
push eax
push ecx
mov ecx, edi
call fcn.00450120
jmp 0x436af7
mov esi, dword [0x4f914c]
cmp word [esi], 0
jne 0x435a66
mov eax, dword [ebx + 0x10]
lea esi, [eax + 0x250]
test eax, eax
jne 0x435a66
mov esi, 0x4cd2cc
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 4
call fcn.0042e8b0
mov ecx, dword [0x4f9154]
cmp eax, 1
sete al
movzx eax, al
push eax
call fcn.00421c60
push eax
mov eax, dword [0x4f9150]
mov ecx, edi
movzx eax, word [eax]
push eax
push esi
push dword [0x4f9148]
call fcn.00450230
jmp 0x436af7
mov eax, dword [0x4f914c]
cmp word [eax], 0
jne 0x435ac2
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x435abd
add eax, 0x250
jmp 0x435ac2
mov eax, 0x4cd2cc
push dword [0x4f9150]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push eax
call fcn.004503b0
jmp 0x436af7
mov eax, dword [0x4f914c]
cmp word [eax], 0
jne 0x435b04
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x435aff
mov edi, dword [ebp + 0x58]
add eax, 0x250
push eax
mov ecx, edi
call fcn.004661c0
jmp 0x436af7
mov eax, 0x4cd2cc
mov edi, dword [ebp + 0x58]
mov ecx, edi
push eax
call fcn.004661c0
jmp 0x436af7
mov ecx, dword [0x4f9148]
call fcn.0044e2e0
mov edi, dword [ebp + 0x58]
xor ecx, ecx
cmp dword [ebx + 0x104], ecx
mov ebx, ecx
sete bl
jmp 0x436af9
push dword [0x4f9158]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.0044e400
jmp 0x436af7
push dword [0x4f9154]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.004657b0
jmp 0x436af7
push dword [0x4f9148]
mov edi, dword [ebp + 0x58]
mov ecx, edi
call fcn.00465af0
jmp 0x436af7
push dword [0x4f9168]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9164]
push dword [0x4f9160]
push dword [0x4f915c]
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.00465e50
jmp 0x436af7
xor dl, dl
mov ecx, 4
call fcn.004488a0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov ecx, dword [0x4f9148]
mov edx, 7
call fcn.0040bbc0
mov ecx, eax
cmp ecx, 7
jne 0x435c13
xor dl, dl
lea ecx, [eax - 6]
call fcn.004488a0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
cmp byte [ebx + 0xf9], 0
je 0x435c3d
mov eax, dword [0x4f8468]
test eax, eax
jle 0x435c28
dec eax
jmp 0x435c2d
mov eax, 0x18f
mov dword [0x4f8468], eax
mov dword [eax*4 + 0x4f8ab0], 0
cmp ecx, 1
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
sete al
mov byte [ebx + 0xf9], al
jmp 0x436b17
xor dl, dl
mov ecx, 2
call fcn.004488a0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
xor dl, dl
mov ecx, 3
call fcn.004488a0
mov edi, dword [ebp + 0x58]
jmp 0x436af7
lea ecx, [ebx + 0x4c]
call fcn.0046e480
test eax, eax
je 0x435c99
mov eax, dword [0x4f48cc]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 4]
jmp 0x435c9b
xor eax, eax
mov edi, dword [ebp + 0x58]
push eax
mov cl, byte [edi + 1]
test cl, cl
jne 0x435cb7
push 0
xorps xmm3, xmm3
mov edx, 0x10000
mov ecx, str.Press_OK_to_continue.
jmp 0x435cf8
cmp cl, 1
jne 0x435cce
mov ecx, dword [0x4f9148]
xorps xmm3, xmm3
push 0
mov edx, 0x10000
jmp 0x435cf8
push 3
mov ecx, edi
call fcn.0042e960
push dword [0x4f914c]
mov ecx, edi
movsd qword [ebp + 0x48], xmm0
push 0
call fcn.0042e8b0
movsd xmm3, qword [ebp + 0x48]
mov edx, eax
mov ecx, dword [0x4f9150]
call fcn.00497b50
mov esi, eax
add esp, 8
test esi, esi
jne 0x435d24
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x59e
jne 0x435d24
push dword [0x4f9148]
push esi
push str.Parameter_1_invalid.
jmp 0x436af0
xor ebx, ebx
test esi, esi
setne bl
jmp 0x436af9
mov eax, dword [0x4f9164]
cmp word [eax], 0
je 0x435d4c
push 7
mov ecx, edx
call fcn.0042e8b0
mov edx, dword [ebp + 0x58]
mov dword [ebp + 0x28], eax
jmp 0x435d53
mov dword [ebp + 0x28], SysReAllocString
mov eax, dword [0x4f9160]
cmp word [eax], 0
je 0x435d6b
push 6
mov ecx, edx
call fcn.0042e8b0
mov ebx, eax
jmp 0x435d70
mov ebx, SysReAllocString
mov eax, dword [0x4f915c]
mov esi, dword [ebp + 0x58]
cmp word [eax], 0
je 0x435d8b
push 5
mov ecx, esi
call fcn.0042e8b0
mov edi, eax
jmp 0x435d90
mov edi, SysReAllocString
mov eax, dword [0x4f9158]
cmp word [eax], 0
je 0x435da8
push 4
mov ecx, esi
call fcn.0042e8b0
mov esi, eax
jmp 0x435dad
mov esi, SysReAllocString
push dword [0x4f9170]
mov ecx, dword [ebp + 0x58]
push 9
call fcn.0042e960
mov eax, dword [0x4f9168]
sub esp, 8
mov cx, word [eax]
movsd qword [esp], xmm0
call fcn.0040ba80
cmp ax, 0x4c
sete al
movzx eax, al
push eax
push dword [ebp + 0x28]
mov eax, dword [0x4f9154]
push ebx
push edi
push esi
mov cx, word [eax]
call fcn.0040ba80
mov edx, dword [0x4f914c]
cmp ax, 0x48
mov ecx, dword [ebp + 0x5c]
sete al
movzx eax, al
push eax
push dword [0x4f9150]
call fcn.00448aa0
mov edi, dword [ebp + 0x58]
add esp, 0x28
jmp 0x436af7
mov eax, dword [0x4f914c]
mov edi, dword [ebp + 0x58]
cmp word [eax], 0
je 0x435e35
push 1
mov ecx, edi
call fcn.0042e8b0
mov esi, eax
jmp 0x435e37
xor esi, esi
mov eax, dword [0x4f9148]
cmp word [eax], 0
je 0x435e4d
push 0
mov ecx, edi
call fcn.0042e8b0
jmp 0x435e52
mov eax, 0xc8
push dword [0x4f9154]
mov ecx, edi
push dword [0x4f9150]
push esi
push eax
call fcn.00463c30
jmp 0x436af7
mov eax, dword [0x4f83f4]
test eax, eax
je 0x435e8c
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x435e8c
push dword [0x4f83f4]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [0x4f83f4], 0
jmp 0x436b17
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 0
push 0x4cd2cc
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.0043de10
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 1
push dword [0x4f9148]
push dword [0x4f915c]
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.0043de10
jmp 0x436af7
push dword [0x4f9154]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.0043f1c0
jmp 0x436af7
push dword [0x4f9154]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.0043f520
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov ecx, edi
call fcn.004407e0
jmp 0x436af7
mov ecx, dword [0x4f914c]
call fcn.00421d10
mov ecx, dword [0x4f9148]
movzx esi, ax
call fcn.00421d80
movzx ecx, ax
mov eax, 3
shl ax, cl
not ax
shl si, cl
and ax, word [ebx + 0xf0]
or ax, si
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov word [ebx + 0xf0], ax
jmp 0x436b17
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 0
call fcn.0042e8b0
mov byte [ebx + 0xef], al
cmp al, 0x64
jbe 0x435fd2
mov byte [ebx + 0xef], 2
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b1a
mov edx, dword [ebx + 0xd4]
mov ecx, dword [0x4f9148]
call fcn.00421bd0
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0xd4], eax
jmp 0x436b17
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 0
call fcn.0042e8b0
test eax, eax
js 0x436020
cmp eax, 0x64
jg 0x436020
mov cl, 1
jmp 0x436022
xor cl, cl
test cl, cl
je 0x43602c
mov byte [ebx + 0xf6], al
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b1a
push str.Play
push dword [0x4f9150]
call fcn.004af78f
mov esi, dword [ebp + 0x58]
add esp, 8
test eax, eax
mov eax, dword [0x4f9148]
jne 0x436096
cmp word [eax], 0
je 0x43606c
push 0
mov ecx, esi
call fcn.0042e8b0
mov dword [ebx + 0x60], eax
mov eax, dword [0x4f914c]
cmp word [eax], 0
je case.0x4363c4.69
push 1
mov ecx, esi
call fcn.0042e8b0
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0x68], eax
jmp 0x436b17
cmp word [eax], 0
je 0x4360a8
push 0
mov ecx, esi
call fcn.0042e8b0
mov dword [ebx + 0x5c], eax
mov eax, dword [0x4f914c]
cmp word [eax], 0
je case.0x4363c4.69
push 1
mov ecx, esi
call fcn.0042e8b0
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0x64], eax
jmp 0x436b17
push str.Play
push dword [0x4f914c]
call fcn.004af78f
mov edi, dword [ebp + 0x58]
add esp, 8
mov ecx, edi
push 0
test eax, eax
jne 0x436107
call fcn.0042e8b0
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0x70], eax
jmp 0x436b1a
call fcn.0042e8b0
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0x6c], eax
jmp 0x436b1a
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 0
call fcn.0042e8b0
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0x54], eax
jmp 0x436b1a
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 0
call fcn.0042e8b0
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0x58], eax
jmp 0x436b1a
mov ecx, dword [0x4f9148]
mov edx, 0x4e3464
call fcn.004921b0
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 0
test eax, eax
je 0x436199
mov dword [ebx], 0xffffffff
mov dword [ebx + 4], 0xffffffff
call fcn.0042e8b0
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0x24], eax
jmp 0x436b1a
mov dword [ebx + 0x24], 0xffffffff
call fcn.0042e8b0
mov dword [ebx], eax
or eax, edx
mov dword [ebx + 4], edx
jne 0x4361b7
mov dword [ebx], 0xa
mov dword [ebx + 4], eax
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b1a
mov ecx, dword [0x4f9148]
mov edx, 7
call fcn.0040bbc0
cmp eax, 7
je case.0x4363c4.69
cmp eax, 1
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
sete al
mov byte [ebx + 0xf3], al
jmp 0x436b17
mov ecx, dword [0x4f9148]
call fcn.004216b0
dec eax
cmp eax, 5
ja case.default.0x43620f
jmp dword [eax*4 + 0x437484]
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0x20], 1
jmp 0x436b17
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0x20], 2
jmp 0x436b17
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0x20], 4
jmp 0x436b17
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov dword [ebx + 0x20], 3
jmp 0x436b17
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov byte [ebx + 0xe9], 1
jmp 0x436b17
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov byte [ebx + 0xe9], 0
jmp 0x436b17
push 5
push str.Float
push dword [0x4f9148]
call fcn.004af905
add esp, 0xc
test eax, eax
jne 0x43638b
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 1
call fcn.0042e830
cmp eax, 0x1e
jb 0x4362d7
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
jmp 0x436b1a
push 1
mov ecx, edi
call fcn.0042e8b0
push 0x2e
push dword [0x4f914c]
mov edi, eax
mov dword [ebp + 0x4c], edx
call fcn.004ace17
mov esi, eax
add esp, 8
test esi, esi
je 0x436305
lea ecx, [esi + 2]
call fcn.0041e0c0
jmp 0x436313
xorps xmm0, xmm0
movlpd qword [ebp + 0xc], xmm0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
add eax, edi
adc edx, dword [ebp + 0x4c]
add eax, 2
adc edx, 0
mov dword [ebp + 0x4c], edx
js 0x436334
jg case.0x4336a3.3
cmp eax, 0xff
ja case.0x4363c4.69
mov ecx, dword [0x4f914c]
mov edx, 1
push 0
push 1
push 1
call fcn.00491c20
test eax, eax
mov ecx, 0x4e786c
mov eax, 0x4cd2cc
cmove ecx, eax
test esi, esi
push ecx
mov ecx, 0x4e62a8
cmove eax, ecx
push eax
push dword [0x4f914c]
lea eax, [ebx + 0x74]
push 0x4e7870
push eax
call fcn.00405640
mov dword [ebp + 0x5c], 1
add esp, 0x20
mov ecx, dword [ebp + 0x5c]
jmp 0x436b17
push 7
push str.Integer
push dword [0x4f9148]
call fcn.004af905
add esp, 0xc
test eax, eax
jne case.0x4363c4.69
mov ecx, dword [0x4f914c]
movzx eax, word [ecx]
add eax, 0xffffffbc
cmp eax, 0x24
ja case.0x4363c4.69
movzx eax, byte [eax + 0x4374a8]
jmp dword [eax*4 + 0x43749c]
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov byte [ebx + 0xf5], 0x44
jmp 0x436b17
mov al, byte [ecx]
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov byte [ebx + 0xf5], al
jmp 0x436b17
push dword [0x4f9150]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f914c]
call fcn.00449ac0
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov ecx, 4
mov dl, 3
cmp cl, byte [edi + 1]
sbb ecx, ecx
and ecx, dword [0x4f9100]
cmp dl, byte [edi + 1]
push ecx
sbb eax, eax
mov ecx, 0x4f9a70
and eax, dword [0x4f90fc]
push eax
push dword [0x4f915c]
push dword [0x4f9158]
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.0047f150
jmp 0x436af7
push dword [0x4f9154]
mov ecx, 0x4f9a70
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.0046e500
mov edi, dword [ebp + 0x58]
jmp 0x436af7
mov edi, dword [ebp + 0x58]
mov al, 2
mov ecx, edi
cmp al, byte [edi + 1]
sbb eax, eax
and eax, dword [0x4f90f8]
push eax
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.0046ede0
jmp 0x436af7
push dword [0x4f9154]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.0046fed0
jmp 0x436af7
mov esi, dword [0x4f9148]
xor edx, edx
mov ecx, esi
call fcn.0040bc90
test eax, eax
je 0x436500
cmp eax, 7
ja case.0x4336a3.3
jmp 0x436518
push str.Permit
push esi
call fcn.004af78f
add esp, 8
neg eax
sbb eax, eax
and eax, 0xfffffffa
add eax, 6
jmp dword [eax*4 + 0x4374d0]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 1
call fcn.0042e8b0
mov ecx, dword [0x4f9148]
test eax, eax
setne al
xor edx, edx
movzx eax, al
push eax
call fcn.0040bc90
push eax
mov ecx, edi
call fcn.0043b610
jmp 0x436af7
mov ecx, dword [0x4f9148]
mov edx, 7
call fcn.0040bbc0
cmp eax, 7
je case.0x4363c4.69
cmp eax, 1
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
sete al
mov byte [ebx + 0xf4], al
jmp 0x436b17
mov ecx, dword [0x4f9148]
call fcn.00421a60
mov byte [ebx + 0xf2], al
cmp al, 4
jne case.0x4363c4.69
mov dword [ebp + 0x5c], 1
mov ecx, dword [ebp + 0x5c]
mov byte [ebx + 0xf2], 0
jmp 0x436b17
mov ecx, dword [0x4f9148]
mov edx, 7
call fcn.0040bbc0
cmp eax, 7
je case.0x436679.3
cmp eax, 1
sete al
mov byte [ebx + 0xea], al
jmp case.0x436679.3
mov ecx, dword [0x4f9148]
mov edx, 7
call fcn.0040bbc0
cmp eax, 7
je case.0x436679.3
cmp eax, 1
sete al
mov byte [ebx + 0xeb], al
jmp case.0x436679.3
mov ecx, dword [0x4f9148]
call fcn.00421b20
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x436679.3
movzx ecx, byte [ecx + 0x437508]
jmp dword [ecx*4 + 0x4374f0]
push 1
call dword [sym.imp.USER32.dll_BlockInput]
mov byte [0x4f797a], 1
jmp case.0x436679.3
push 0
call dword [sym.imp.USER32.dll_BlockInput]
mov byte [0x4f797a], 0
jmp case.0x436679.3
mov dword [0x4f4dac], eax
jmp case.0x436679.3
mov byte [0x4f78ff], 1
call fcn.0040e3c0
jmp case.0x436679.3
mov byte [0x4f78ff], 0
jmp case.0x436679.3
push dword [0x4f9148]
mov edx, 0x4f5a4c
mov cl, 0x90
call fcn.00450510
mov edi, dword [ebp + 0x58]
add esp, 4
jmp 0x436af7
push dword [0x4f9148]
mov edx, 0x4f5a48
mov cl, 0x14
call fcn.00450510
mov edi, dword [ebp + 0x58]
add esp, 4
jmp 0x436af7
push dword [0x4f9148]
mov edx, 0x4f5a44
mov cl, 0x91
call fcn.00450510
mov edi, dword [ebp + 0x58]
add esp, 4
jmp 0x436af7
push 0
push 0
push 0
push 0
push 0
push 1
push dword [0x4f791c]
mov ecx, 0x4f9a70
push str._restart
push dword [0x4fa55c]
call fcn.0043cd70
jmp case.0x436679.3
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 0
call fcn.0042e8b0
cmp dword [0x4f9a38], esi
je 0x43677f
cmp eax, 0xffffffff
jle 0x43677f
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
mov dword [ebp + 0x5c], ecx
jmp 0x436b1a
mov edx, 1
mov ecx, eax
call fcn.00401890
mov ecx, 1
mov dword [ebp + 0x5c], ecx
jmp 0x436b1a
push dword [0x4f9158]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9154]
push dword [0x4f9150]
push dword [0x4f914c]
call fcn.00489a80
jmp 0x436af7
push dword [0x4f9154]
mov edi, dword [ebp + 0x58]
mov ecx, edi
push dword [0x4f9150]
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.00489b80
jmp 0x436af7
mov edi, dword [ebp + 0x58]
xor ecx, ecx
mov eax, dword [0x4f9150]
cmp byte [edi + 1], 3
cmovb eax, ecx
mov ecx, edi
push eax
push dword [0x4f914c]
push dword [0x4f9148]
call fcn.00489da0
jmp 0x436af7
mov edi, dword [ebp + 0x58]
cmp byte [edi + 1], 2
jae 0x43683a
mov ecx, dword [ebx + 0x14]
test ecx, ecx
je 0x43683a
lea eax, [ecx + 0x808]
push eax
lea eax, [ecx + 8]
push eax
push dword [ecx + 4]
mov ecx, edi
call fcn.00489e20
jmp 0x436af7
mov ecx, dword [0x4f914c]
lea eax, [ebp + 0x47]
push eax
lea eax, [ebp + 0x2c]
mov edx, 2
push eax
call fcn.00421390
mov ecx, dword [ebp + 0x2c]
add esp, 8
mov esi, eax
test ecx, ecx
jne 0x43686e
mov ecx, dword [0x4f9150]
mov eax, dword [0x4f9154]
mov dword [ebp + 0x2c], ecx
jmp 0x436873
mov eax, dword [0x4f9150]
push eax
push ecx
push esi
mov ecx, edi
call fcn.00489e20
cmp byte [ebp + 0x47], 0
mov ebx, eax
mov dword [ebp + 0x5c], ebx
je 0x436afc
test esi, esi
je 0x436afc
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x436afc
mov edi, dword [ebp + 0x58]
cmp byte [edi + 1], 2
jae 0x4368d6
mov ecx, dword [ebx + 0x14]
test ecx, ecx
je 0x4368d6
push dword [0x4f9148]
lea eax, [ecx + 0x808]
push eax
lea eax, [ecx + 8]
push eax
push dword [ecx + 4]
push dword [ecx + 0x1008]
mov ecx, edi
call fcn.0048a1d0
jmp 0x436af7
mov ecx, dword [0x4f914c]
lea eax, [ebp + 0x47]
push eax
lea eax, [ebp + 0x2c]
mov edx, 2
push eax
call fcn.00421390
mov ecx, dword [ebp + 0x2c]
add esp, 8
mov esi, eax
test ecx, ecx
jne 0x436910
mov ecx, dword [0x4f9150]
mov eax, dword [0x4f9154]
mov edx, dword [0x4f9158]
mov dword [ebp + 0x2c], ecx
jmp 0x43691b
mov eax, dword [0x4f9150]
mov edx, dword [0x4f9154]
push edx
push eax
push ecx
mov ecx, dword [0x4f9148]
push esi
call fcn.00421570
push eax
mov ecx, edi
call fcn.0048a1d0
jmp 0x43687d
mov edi, dword [ebp + 0x58]
cmp byte [edi + 1], 1
jae 0x4369d6
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x4369d6
cmp dword [eax + 0x1008], 0xfffffffe
lea ecx, [eax + 8]
jne 0x4369bc
cmp word [ecx], 0
je 0x4369a0
add eax, 0x808
push eax
push ecx
push 0x4e48e8
lea eax, [ebp - 0x8d0]
push 0x400
push eax
call fcn.00491dd0
mov eax, dword [ebx + 0x14]
lea ecx, [ebp - 0x8d0]
add esp, 0x14
mov dword [ebp + 0x2c], ecx
xor edx, edx
push edx
push ecx
push dword [eax + 4]
mov ecx, edi
call fcn.0048a5b0
jmp 0x436af7
lea ecx, [eax + 0x808]
xor edx, edx
push edx
push ecx
push dword [eax + 4]
mov dword [ebp + 0x2c], ecx
mov ecx, edi
call fcn.0048a5b0
jmp 0x436af7
lea edx, [eax + 0x808]
mov dword [ebp + 0x2c], ecx
push edx
push ecx
push dword [eax + 4]
mov ecx, edi
call fcn.0048a5b0
jmp 0x436af7
mov ecx, dword [0x4f9148]
lea eax, [ebp + 0x47]
push eax
lea eax, [ebp + 0x2c]
mov edx, 2
push eax
call fcn.00421390
mov edi, dword [ebp + 0x2c]
add esp, 8
mov ebx, eax
test edi, edi
jne 0x436a0b
mov edi, dword [0x4f914c]
mov esi, dword [0x4f9150]
mov dword [ebp + 0x2c], edi
jmp 0x436a11
mov esi, dword [0x4f914c]
cmp word [esi], 0
jne 0x436a1b
xor ecx, ecx
jmp 0x436a33
push str.ahk_default
push esi
call fcn.004af78f
add esp, 8
mov ecx, 0x4cd2cc
test eax, eax
cmovne ecx, esi
push ecx
push edi
mov edi, dword [ebp + 0x58]
mov ecx, edi
push ebx
call fcn.0048a5b0
cmp byte [ebp + 0x47], 0
mov dword [ebp + 0x5c], eax
je 0x436a54
test ebx, ebx
je 0x436a54
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [ebp + 0x5c]
jmp 0x436afc
mov ecx, dword [0x4f9148]
call fcn.00421600
mov esi, eax
cmp esi, 0xffffffff
je case.default.0x43620f
cmp dword [0x4fa75c], 0
je case.0x436679.3
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [0x4fa75c]
test eax, eax
je case.0x436679.3
cmp dword [ebp - 0x5c], 0
je case.0x436679.3
mov dword [ebx + 0xd0], esi
jmp case.0x436679.3
push dword [0x4f9148]
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp case.0x436679.3
mov edi, dword [ebp + 0x58]
mov ecx, edi
push 0
call fcn.0042e8b0
mov ecx, eax
call fcn.00466c80
xor ebx, ebx
test al, al
setne bl
jmp 0x436af9
mov ecx, dword [0x4f9148]
call fcn.00421e10
cmp eax, 0xffffffff
jne 0x436b09
push dword [0x4f9148]
push 0
push str.Parameter_1_invalid.
mov edi, dword [ebp + 0x58]
mov ecx, edi
call fcn.0043bc60
mov ebx, eax
mov dword [ebp + 0x5c], ebx
mov ecx, dword [ebp + 0x5c]
test ebx, ebx
je 0x436f4e
jmp 0x436b1a
mov dword [ebx + 0xfc], eax
mov ecx, 1
mov dword [ebp + 0x5c], ecx
mov edi, dword [ebp + 0x58]
cmp dword [ebp + 0x68], 3
je 0x436f4e
mov edi, dword [edi + 0x14]
mov dword [ebp + 0x58], edi
jmp 0x436b2f
mov edi, dword [ebp + 0x58]
mov ebx, 1
test edi, edi
je 0x432937
mov esi, dword [ebp - 0x34]
jmp 0x432461
mov edi, dword [ebp + 0x34]
mov dword [edi], ecx
pop edi
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
mov edi, dword [ebp + 0x34]
mov eax, edx
mov dword [edi], ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
mov edi, dword [ebp + 0x34]
mov dword [edi], ecx
jmp 0x432937
mov eax, dword [edi + 0x18]
test eax, eax
je 0x436b93
mov edi, dword [ebp + 0x34]
mov eax, dword [eax + 0x18]
mov dword [edi], eax
pop edi
pop esi
mov eax, 5
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
push esi
push 0
push str.Target_label_does_not_exist.
mov ecx, edi
call fcn.0043bc60
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
mov edi, dword [ebp + 0x34]
mov eax, dword [edx + 8]
mov dword [edi], eax
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
cmp edi, 7
mov eax, 1
cmove edi, eax
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
push dword [0x4f914c]
mov ecx, edi
push 0
push str.Parameter_2_invalid.
call fcn.0043bc60
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
push dword [0x4f9150]
mov ecx, edi
push 0
push str.Parameter_3_invalid.
call fcn.0043bc60
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
mov edi, dword [ebp + 0x34]
mov eax, dword [ebp + 0x54]
mov dword [edi], eax
jmp 0x432937
test edi, edi
je 0x436c7c
lea ecx, [ebp + 0x10]
call fcn.0043c650
test esi, esi
je case.0x4327c2.118
cmp esi, 8
je case.0x4327c2.118
mov ecx, dword [0x4fa0bc]
push 0x4cd2cc
push 0
push str.Jumps_cannot_exit_a_FINALLY_block.
call fcn.0043bc60
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
mov edi, dword [ebp + 0x34]
mov eax, 1
mov dword [edi], ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
mov edx, dword [ebp + 0x6c]
test edx, edx
je 0x436d37
cmp dword [edx + 8], 0
jne 0x436d37
mov ecx, dword [0x4f90f0]
test ecx, ecx
je 0x436d28
cmp byte [ecx + 0x17], 0
jne 0x436cf8
mov eax, dword [ecx + 0xc]
jmp 0x436cfa
mov eax, ecx
test byte [eax + 0x15], 2
je 0x436d28
push edx
call fcn.00420e10
cmp dword [ebp + 0x68], 1
mov eax, 7
pop edi
cmovne esi, eax
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
mov ecx, dword [0x4f9148]
mov dword [edx + 8], 0
mov dword [edx], ecx
cmp dword [ebp + 0x68], 1
mov eax, 7
pop edi
cmovne esi, eax
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
mov eax, dword [edi + 0x18]
test eax, eax
je 0x436b93
mov edi, dword [ebp + 0x34]
mov dword [edi], eax
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
cmp byte [edi + 1], 0
jne 0x436dac
push 0x4cd2cc
push 0
push str.An_exception_was_thrown.
mov ecx, edi
call fcn.0043b880
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
push 0x10
call fcn.004abcce
mov ecx, dword [0x4f8464]
add esp, 4
mov esi, eax
mov dword [ebp + 4], ecx
mov ecx, dword [0x4f8460]
lea eax, [ebp + 0x50]
mov dword [ebp + 0x50], ecx
mov ecx, edi
push eax
lea eax, [ebp + 4]
mov dword [ebp + 0x6c], esi
push eax
push esi
push 0
mov dword [0x4f8464], 0
mov dword [0x4f8460], 0
call fcn.0046c8a0
mov edi, dword [ebp + 4]
mov ebx, eax
cmp ebx, 1
jne 0x436e1b
cmp dword [esi + 8], 0
jne 0x436e1b
cmp dword [esi], edi
jne 0x436e1b
cmp dword [ebp + 0x50], 0x400000
mov dword [esi + 0xc], edi
jbe 0x436e6d
dec dword [0x4f845c]
jmp 0x436e6d
test edi, edi
je 0x436e51
mov eax, dword [0x4f8464]
test eax, eax
je 0x436e43
push eax
call fcn.004b113e
add esp, 4
cmp dword [0x4f8460], 0x400000
jbe 0x436e43
dec dword [0x4f845c]
mov eax, dword [ebp + 0x50]
mov dword [0x4f8464], edi
mov dword [0x4f8460], eax
cmp ebx, 1
je 0x436e66
push 0x10
push esi
call fcn.004aba18
add esp, 8
jmp 0x432937
mov dword [esi + 0xc], 0
mov eax, dword [ebp + 0x38]
test byte [eax + 0x100], 2
mov dword [eax + 0x104], esi
jne 0x436bbb
mov ecx, dword [ebp + 0x58]
call fcn.0043c210
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
cmp byte [0x4f82e6], 1
je 0x436ed8
cmp word [0x4f843c], 0
jne 0x436ed8
cmp dword [0x4f8424], 0
jne 0x436ed8
cmp dword [0x4f790c], 0
jne 0x436ed8
cmp dword [0x4f7908], 0
jne 0x436ed8
cmp byte [0x4f78fd], 0
je case.0x4327c2.226
pop edi
pop esi
mov eax, 8
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
push 0
mov ecx, edi
call fcn.0042e8b0
push eax
push 6
mov ecx, 0x4f9a70
call fcn.004234e0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
cmp dword [ebp + 0x68], 2
je case.0x4327c2.118
push 0x4cd2cc
push 0
push str.A__return__must_be_encountered_prior_to_this___.
mov ecx, edi
call fcn.0043bc60
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc
xor ecx, ecx
pop edi
mov eax, ecx
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
lea esp, [ebp + 0x60]
pop ebp
ret 0xc