Function at 0x431e00
Capabilities:
Check for time delay via gettickcount
Empty the recycle bin
Find taskbar
Move file
Print debug messages
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x4a437b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5a8
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
mov dword [esp + 0xcc], ecx
test eax, eax
jne 0x431e39
lea eax, [esp + 0xbc]
mov ebx, dword [0x4b7a70]
mov edx, eax
mov esi, ecx
mov dword [esp + 0x78], eax
mov dword [edx], 0
mov dword [esp + 0x80], ebx
mov dword [esp + 0x48], esi
test ecx, ecx
je case.0x432198.116
mov edi, dword [esp + 0xbc]
cmp dword [0x4bcb00], 0
je 0x431ea1
cmp dword [0x4bcaf0], 0
je 0x431e8f
mov eax, dword [0x4bcae8]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4bcaf0], 0
call dword [sym.imp.USER32.dll_CloseClipboard]
xor eax, eax
mov dword [0x4bcb00], eax
mov dword [0x4bcae8], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x4b7a70]
mov ecx, eax
sub ecx, dword [0x4bcaa4]
cmp ecx, dword [edx + 0xb8]
jbe 0x431eee
push 0
push 0
push 0
push 0
lea eax, [esp + 0x174]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x431ee3
push 1
push 0xffffffffffffffff
call fcn.004014b0
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4bcaa4], eax
cmp byte [ebx + 0xcc], 0
jne 0x431f1f
cmp byte [ebx + 0xce], 0
jne 0x431f1f
mov edx, dword [0x4bca98]
cmp edx, 0xffffffff
jle 0x431f1f
mov ecx, dword [ebx + 0x28]
cmp ecx, edx
jle 0x431f1b
mov byte [ebx + 0xcc], 1
jmp 0x431f1f
inc ecx
mov dword [ebx + 0x28], ecx
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
cmp ecx, 0xffffffff
jl 0x431f42
jg 0x431f30
cmp edx, 0xffffffff
jbe 0x431f42
cmp dword [0x4bca94], ecx
jg 0x431f54
jl 0x431f42
cmp dword [0x4bca90], edx
jae 0x431f54
mov ecx, dword [ebx + 0x24]
cmp ecx, 0xffffffff
jle 0x431f60
sub eax, dword [0x4bcaa0]
cmp eax, ecx
jb 0x431f60
push 1
push 0xa
call fcn.004014b0
add esp, 8
cmp byte [ebx + 0xd8], 0
je 0x431f88
lea esp, [esp]
push 1
push 0x8000012f
call fcn.004014b0
add esp, 8
cmp byte [ebx + 0xd8], 0
jne 0x431f70
mov dword [0x4bc7d4], esi
cmp byte [ebx + 0xd9], 0
je 0x431fd0
mov ecx, dword [0x4bbd24]
mov dword [ecx*4 + 0x4bbd28], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x4bbd24]
mov dword [ecx*4 + 0x4bad48], eax
inc ecx
mov dword [0x4bbd24], ecx
cmp ecx, 0x190
jl 0x431fd0
mov dword [0x4bbd24], 0
cmp dword [0x4bc3e8], 0xffffffff
je 0x431fe5
cmp byte [esi], 0x6b
je 0x431fe5
mov eax, esi
call fcn.00406380
mov al, byte [esi]
cmp al, 1
je 0x43200e
cmp al, 0x6b
je 0x43200e
cmp al, 0x72
je 0x43200e
mov ebx, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push ebx
push esi
call fcn.00465e10
mov edi, eax
cmp edi, 1
jne 0x4364c8
jmp 0x432011
mov ebx, dword [ebp + 0xc]
mov dl, byte [esi]
mov byte [esp + 0x11c], dl
cmp dl, 9
jb 0x432180
cmp dl, 0x20
ja 0x432180
add dword [0x4bca90], 1
push esi
adc dword [0x4bca94], 0
call fcn.00436e30
cmp eax, 3
jne 0x4320d5
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x75
jne 0x432070
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x5c]
push edx
push ebx
push 2
call fcn.00431e00
mov ecx, dword [esi + 0x14]
mov edi, eax
mov eax, dword [esp + 0x5c]
cmp eax, ecx
je 0x432051
jmp 0x432083
lea eax, [esp + 0x5c]
push eax
push ebx
push 3
call fcn.00431e00
mov edi, eax
mov eax, dword [esp + 0x5c]
cmp eax, esi
je 0x433366
cmp dword [ebp + 8], 3
je 0x4364c2
cmp edi, 1
jne 0x4364c2
test eax, eax
je 0x4320b7
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x4364b7
mov dword [esp + 0x48], eax
jmp 0x433362
mov esi, dword [esi + 0x18]
cmp byte [esi], 0x21
mov dword [esp + 0x48], esi
jne 0x433362
mov edx, esi
mov eax, dword [edx + 0x18]
mov dword [esp + 0x48], eax
jmp 0x433362
mov esi, dword [esi + 0x18]
cmp byte [esi], 0x21
mov dword [esp + 0x48], esi
jne 0x43215a
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x75
jne 0x43210f
lea esp, [esp]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x5c]
push edx
push ebx
push 2
call fcn.00431e00
mov ecx, dword [esi + 0x14]
mov edi, eax
mov eax, dword [esp + 0x5c]
cmp eax, ecx
je 0x4320f0
jmp 0x432122
lea eax, [esp + 0x5c]
push eax
push ebx
push 3
call fcn.00431e00
mov edi, eax
mov eax, dword [esp + 0x5c]
cmp dword [ebp + 8], 3
je 0x4364c2
cmp edi, 1
jne 0x4364c2
test eax, eax
je 0x43214e
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x4364b7
mov dword [esp + 0x48], eax
jmp 0x433362
mov edx, dword [esi + 0x18]
mov dword [esp + 0x48], edx
jmp 0x433362
cmp dword [ebp + 8], 3
jne 0x433362
mov eax, 1
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
movzx eax, dl
add eax, 0xffffffa0
cmp eax, 0x80
ja case.0x432198.98
movzx eax, byte [eax + 0x43694c]
jmp dword [eax*4 + 0x436908]
mov ecx, 1
add dword [0x4bca90], ecx
adc dword [0x4bca94], 0
mov eax, dword [esi + 0x18]
test eax, eax
je 0x43223f
xor ebx, ebx
cmp dword [esi + 0xc], ecx
mov edx, eax
sete bl
mov dword [esp + 0x98], edx
test ebx, ebx
je 0x4321ee
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 0x94]
mov dword [eax + 0x98], ecx
mov dword [eax + 0x94], 0
mov ecx, edx
call fcn.004012f0
mov edi, eax
test ebx, ebx
je 0x432218
mov eax, dword [esp + 0x80]
mov edx, dword [eax + 0x98]
mov dword [eax + 0x94], edx
mov dword [eax + 0x98], 0
test edi, edi
je 0x4364c8
cmp edi, 8
je 0x4364c8
cmp dword [ebp + 8], 3
je 0x4364e1
mov eax, dword [esi + 0x14]
mov dword [esp + 0x48], eax
jmp 0x433362
push esi
mov bl, cl
call fcn.0044e520
mov edx, eax
mov dword [esp + 0x98], edx
test edx, edx
je 0x436816
mov ecx, dword [esp + 0x80]
cmp dword [ecx + 0x94], 0
je 0x43227e
mov eax, dword [edx + 8]
call fcn.0044e5d0
test eax, eax
je 0x43227e
mov ebx, 1
jmp 0x4321d1
xor ebx, ebx
jmp 0x4321ee
add dword [0x4bca90], 1
adc dword [0x4bca94], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x98], eax
test eax, eax
jne 0x4322b8
push esi
mov bl, 1
call fcn.0044e520
mov dword [esp + 0x98], eax
test eax, eax
je 0x436816
cmp dword [ebp + 8], 3
mov ecx, dword [esp + 0x80]
mov dword [ecx + 0x9c], eax
je 0x4322da
mov ecx, dword [eax + 8]
mov edx, dword [esi + 0x1c]
cmp edx, dword [ecx + 0x1c]
je 0x43335e
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x78]
mov dword [eax], edx
jmp case.0x432198.116
add dword [0x4bca90], 1
mov eax, dword [esp + 0xcc]
adc dword [0x4bca94], 0
mov ebx, dword [eax + 0xc]
test ebx, ebx
jne 0x43233a
mov eax, dword [0x4bb3d8]
mov edi, eax
cmp byte [eax], bl
je 0x432338
mov ebx, dword [0x4bc498]
test ebx, ebx
je 0x432338
lea esp, [esp]
mov eax, dword [ebx + 4]
push edi
push eax
call fcn.00492c11
add esp, 8
test eax, eax
je 0x43233a
mov ebx, dword [ebx + 0x14]
test ebx, ebx
jne 0x432320
xor ebx, ebx
xor eax, eax
mov edi, 1
test ebx, ebx
je 0x432448
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
je 0x432369
push 0x4aa668
push eax
call fcn.00492c11
add esp, 8
test eax, eax
jne 0x432369
mov al, 1
jmp 0x43236b
xor al, al
lea ecx, [esp + 0x98]
push ecx
push eax
push ebx
call fcn.00485820
mov edx, dword [esp + 0x98]
mov dword [esp + 0x60], eax
test edx, edx
je 0x432444
mov eax, dword [edx + 8]
mov edi, dword [eax + 0x1c]
test edi, edi
je 0x4323d7
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x4323ab
mov edi, edi
cmp edi, ecx
je 0x4323d7
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x4323a0
push 0x4a7935
push 0
push 0x4aec90
mov ecx, esi
call fcn.0043b4b0
xor eax, eax
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [esp + 0x80]
mov edi, dword [ebx + 0x94]
test edi, edi
je 0x432473
call fcn.0044e5d0
test eax, eax
je 0x432473
mov dword [esp + 0x54], 1
mov dword [ebx + 0x98], edi
mov dword [ebx + 0x94], 0
mov ecx, edx
call fcn.004012f0
cmp dword [esp + 0x54], 0
mov edi, eax
je 0x432433
mov edx, dword [ebx + 0x98]
mov dword [ebx + 0x94], edx
mov dword [ebx + 0x98], 0
test edi, edi
je 0x4364c8
cmp edi, 8
je 0x4364c8
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0xcc]
test eax, eax
sete al
movzx ecx, al
push ecx
call fcn.0043b150
cmp dword [ebp + 8], 3
je 0x4364e1
mov edx, dword [esi + 0x14]
mov dword [esp + 0x48], edx
jmp 0x433362
mov dword [esp + 0x54], 0
jmp 0x43240d
mov eax, dword [esi + 0xc]
mov dword [esp + 0x50], eax
dec eax
je 0x4324d4
sub eax, 3
je 0x4324b3
sub eax, 5
jne 0x43255a
push eax
push eax
mov eax, dword [0x4bb3dc]
push 1
push eax
call fcn.0041cdb0
add esp, 0x10
mov dword [esp + 0x9c], eax
jmp 0x43255a
mov ecx, dword [0x4bb3d8]
push 0
push 0
push 0
push ecx
call fcn.0041cdb0
add esp, 0x10
mov dword [esp + 0x9c], eax
jmp 0x43255a
movzx eax, byte [esi + 1]
sub eax, 0
je 0x432552
dec eax
je 0x432510
mov edx, dword [0x4bb3d8]
push 0x4ac398
push edx
call fcn.00492c11
add esp, 8
test eax, eax
jne 0x432502
mov dword [esp + 0x50], 5
jmp 0x43255a
mov eax, dword [0x4bb3d8]
push 0
push 0
push 0
push eax
jmp 0x432533
mov eax, dword [0x4bb3d8]
push 0
push 1
push 1
push 1
call fcn.0047f5a0
add esp, 0x10
test eax, eax
jne 0x432552
mov edx, dword [0x4bb3d8]
push eax
push eax
push eax
push edx
call fcn.0041cdb0
xor ecx, ecx
add esp, 0x10
test eax, eax
setne cl
mov dword [esp + 0x9c], eax
add ecx, 3
mov dword [esp + 0x50], ecx
jmp 0x43255a
mov dword [esp + 0x50], 2
mov ecx, dword [esp + 0x50]
lea eax, [ecx - 3]
cmp eax, 7
ja case.0x432571.5
movzx edx, byte [eax + 0x4369dc]
jmp dword [edx*4 + 0x4369d0]
mov esi, dword [0x4bb3dc]
call fcn.0041ebd0
mov dword [esp + 0x8c], eax
test eax, eax
je 0x4365e2
mov eax, dword [0x4bb3e0]
cmp byte [eax], 0x31
jne 0x4325b6
cmp byte [eax + 1], 0
jne 0x4325b6
mov esi, dword [esp + 0x48]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0x94], 1
jmp case.0x432571.5
mov esi, dword [esp + 0x48]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0x94], 0
jmp case.0x432571.5
cmp ecx, 4
jne 0x432610
mov esi, dword [0x4bb3e0]
call fcn.0041ebd0
mov dword [esp + 0x8c], eax
mov eax, dword [0x4bb3e4]
cmp byte [eax], 0x31
jne 0x4325ff
cmp byte [eax + 1], 0
jne 0x4325ff
mov esi, dword [esp + 0x48]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0x94], 1
jmp 0x432637
mov esi, dword [esp + 0x48]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0x94], 0
jmp 0x432637
mov eax, dword [0x4bb3e0]
call fcn.0041ec20
mov dword [esp + 0x8c], eax
shr eax, 2
and al, 1
mov byte [esp + 0x94], al
je 0x432637
and dword [esp + 0x8c], 0xfffffffb
cmp dword [esp + 0x8c], 0
je 0x436610
xor edx, edx
mov byte [esp + 0x5b], 0
mov dword [esp + 0x5c], edx
mov eax, dword [esi + 0x18]
cmp byte [eax], 0x6c
mov dword [esp + 0x54], eax
jne 0x432669
mov dword [esp + 0x4c], eax
mov eax, dword [eax + 0x14]
mov dword [esp + 0x54], eax
jmp 0x43266d
mov dword [esp + 0x4c], edx
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 8]
mov dword [esp + 0x108], ecx
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x10c], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x60], ecx
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x7c], ecx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0xb0], ecx
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x50]
cmp ecx, 8
je 0x4326ba
mov dword [eax + 8], 1
mov dword [eax + 0xc], edx
lea eax, [ecx - 2]
cmp eax, 8
ja case.default.0x4326c6
jmp dword [eax*4 + 0x4369e4]
cmp byte [esi + 1], dl
jbe 0x4326e8
xor edi, edi
mov ecx, esi
call fcn.0042e160
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0xe4], 0
jmp 0x4326f4
xor eax, eax
xor edx, edx
mov byte [esp + 0xe4], 1
mov ecx, dword [esp + 0xe4]
push ecx
push edx
mov edx, dword [esp + 0x54]
push eax
push edx
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x6f]
push ecx
push esi
call fcn.004383c0
mov edi, eax
jmp case.default.0x4326c6
lea edx, [esp + 0x5c]
push edx
lea eax, [esp + 0x5f]
push eax
push ebx
mov edi, esi
call fcn.00438590
mov edi, eax
jmp case.default.0x4326c6
mov ecx, dword [esp + 0x4c]
push ecx
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x63]
push eax
push ebx
push esi
call fcn.00438790
mov edi, eax
jmp case.default.0x4326c6
mov ecx, dword [0x4bb3e0]
push 0x4ad45c
push ecx
call fcn.00492c11
mov edx, dword [esp + 0x54]
add esp, 8
push edx
test eax, eax
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x63]
push ecx
push ebx
push esi
je 0x432785
call fcn.00439760
mov edi, eax
jmp case.default.0x4326c6
call fcn.00439a10
mov edi, eax
jmp case.default.0x4326c6
lea esi, [esp + 0x12c]
call fcn.00404210
mov dword [esp + 0x5bc], 0
mov edx, dword [0x4bb3dc]
cmp byte [edx], 0
je 0x432803
mov eax, dword [esp + 0x80]
mov eax, dword [eax + 0xdc]
and eax, 0x7fffffff
push 0x30c
mov ecx, esi
call fcn.0047d190
test al, al
je 0x432803
mov ecx, dword [0x4bb3e0]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x60]
push edx
mov edx, dword [esp + 0x50]
lea eax, [esp + 0x63]
push eax
push ecx
push edx
mov edx, dword [esp + 0x60]
mov ecx, esi
call fcn.00439cd0
mov edi, eax
call fcn.00404180
jmp 0x432808
mov edi, 1
lea ecx, [esp + 0x12c]
mov dword [esp + 0x5bc], 0xffffffff
call fcn.00404260
mov esi, dword [esp + 0x48]
jmp case.default.0x4326c6
cmp dword [esp + 0x50], 3
mov eax, dword [0x4bb3d8]
je 0x432839
mov eax, dword [0x4bb3dc]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x4c]
push eax
mov eax, dword [esp + 0x98]
push eax
push ecx
push edx
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x6f]
push ecx
push ebx
mov ecx, esi
call fcn.00438c40
mov edi, eax
jmp case.default.0x4326c6
cmp dword [esp + 0x50], 4
lea edx, [esp + 0x8b]
push edx
jne 0x432895
mov eax, dword [0x4bb3d8]
push 0
push 0
push eax
call fcn.0041cdb0
mov ecx, dword [0x4bb3dc]
mov dword [esp + 0xd8], ecx
jmp 0x4328ab
mov ecx, dword [0x4bb3dc]
lea eax, [esp + 0xcc]
push eax
push 1
push ecx
call fcn.0041cdb0
add esp, 0x10
mov dword [esp + 0x74], eax
test eax, eax
je 0x432907
mov edx, dword [esp + 0xc8]
mov ecx, dword [esp + 0x9c]
push edx
mov edx, dword [esp + 0x98]
push eax
mov eax, dword [esp + 0x94]
push ecx
mov ecx, dword [esp + 0x58]
push edx
push eax
push ecx
lea edx, [esp + 0x74]
push edx
lea eax, [esp + 0x77]
push eax
push ebx
mov ecx, esi
call fcn.004392e0
cmp byte [esp + 0x8b], 0
mov edi, eax
je case.default.0x4326c6
mov ecx, dword [esp + 0x74]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x4326c6
mov edi, 1
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0x108]
mov ecx, dword [esp + 0x10c]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x60]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 0x10], edx
mov edx, dword [esp + 0xb0]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x68]
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], ecx
test edi, edi
je 0x4364c8
cmp edi, 7
je 0x4364c8
cmp edi, 8
je 0x4364c8
cmp byte [esp + 0x5b], 0
jne 0x433366
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x43298a
mov edx, dword [eax + 0x1c]
cmp edx, dword [esi + 0x1c]
jne 0x4364c2
mov dword [esp + 0x48], eax
mov esi, eax
jmp 0x433366
cmp dword [ebp + 8], 3
je case.0x432198.116
mov eax, dword [esp + 0x54]
mov dword [esp + 0x48], eax
jmp 0x433362
mov ecx, dword [esp + 0x80]
mov eax, dword [ecx + 0xe0]
mov dword [esp + 0xb0], eax
cmp dl, 0x70
jne 0x432a00
mov ebx, dword [0x4bb388]
mov eax, dword [ecx + 0xe4]
mov dword [esp + 0x68], eax
mov dword [ecx + 0xe4], 0
test ebx, ebx
je 0x4329e1
call fcn.00482200
mov edi, eax
jmp 0x4329e6
mov edi, 1
lea esi, [esp + 0x68]
call fcn.0043bc60
test edi, edi
je 0x436816
mov esi, dword [esp + 0x48]
mov ebx, dword [ebp + 0xc]
jmp 0x432a1a
or eax, 1
mov dword [ecx + 0xe0], eax
mov edx, dword [esi + 0x18]
cmp byte [edx], 0x71
je 0x432a1a
or eax, 2
mov dword [ecx + 0xe0], eax
mov dword [esp + 0x5c], 0
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x75
jne 0x432a4f
lea ebx, [ebx]
mov ecx, dword [ecx + 0x14]
lea eax, [esp + 0x5c]
push eax
push ebx
push 2
call fcn.00431e00
mov ecx, dword [esi + 0x14]
mov edx, dword [esp + 0x5c]
mov edi, eax
cmp edx, ecx
je 0x432a30
jmp 0x432a62
lea edx, [esp + 0x5c]
push edx
push ebx
push 3
call fcn.00431e00
mov edx, dword [esp + 0x5c]
mov edi, eax
mov al, byte [esp + 0x11c]
mov esi, dword [esi + 0x18]
mov dword [esp + 0x48], esi
cmp al, 0x6f
jne 0x432ad8
mov eax, dword [esp + 0xb0]
mov ebx, dword [esp + 0x80]
mov dword [ebx + 0xe0], eax
xor al, al
cmp byte [esi], 0x70
jne 0x432aa9
cmp dword [ebx + 0xe4], 0
mov al, 1
jne 0x433362
mov ecx, esi
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x48], ecx
mov esi, ecx
cmp byte [esi], 0x71
je 0x432af0
test al, al
jne 0x432bae
cmp dword [ebx + 0xe4], 0
lea esi, [ebx + 0xe4]
je 0x432bae
call fcn.0043bc60
mov edi, 1
jmp 0x432baa
cmp al, 0x70
jne 0x432bae
cmp byte [esi], 0x71
jne 0x432bae
mov ebx, dword [esp + 0x80]
cmp edi, 1
jne 0x432b01
test edx, edx
je 0x433362
mov esi, dword [esp + 0x48]
mov ecx, dword [0x4bc374]
mov edx, dword [ebx + 0xe4]
mov dword [esp + 0x7c], ecx
xor eax, eax
lea ecx, [esp + 0xfc]
push ecx
mov dword [esp + 0x58], edx
mov edx, dword [0x4bc378]
push eax
push 3
mov ecx, esi
mov dword [ebx + 0xe4], eax
mov dword [esp + 0x74], edx
mov dword [0x4bc374], eax
mov dword [0x4bc378], eax
call fcn.00431e00
cmp dword [esp + 0x7c], 0
mov dword [esp + 0x60], eax
je 0x432b85
mov eax, dword [0x4bc374]
test eax, eax
je 0x432b72
push eax
call fcn.00492c28
add esp, 4
cmp dword [0x4bc378], 0x400000
jbe 0x432b72
dec dword [0x4bc37c]
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x68]
mov dword [0x4bc374], edx
mov dword [0x4bc378], eax
mov eax, dword [esp + 0x60]
cmp eax, 1
jne 0x43663c
cmp dword [esp + 0xfc], 0
jne 0x43663c
mov ecx, dword [esp + 0x54]
mov dword [ebx + 0xe4], ecx
mov edx, dword [esp + 0x5c]
cmp dword [ebp + 8], 3
je 0x43668f
cmp edi, 1
jne 0x43668f
test edx, edx
je 0x433362
mov eax, dword [edx + 0x1c]
mov ecx, dword [esp + 0x48]
cmp eax, dword [ecx + 0x1c]
jne 0x4322dd
mov dword [esp + 0x48], edx
jmp 0x433362
mov ebx, dword [0x4bc374]
mov ecx, dword [0x4bc378]
xor eax, eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], ebx
mov dword [esp + 0x4c], ecx
mov dword [0x4bc374], eax
mov dword [0x4bc378], eax
mov dword [esp + 0xdc], eax
cmp dword [esi + 0xc], eax
jne 0x432c22
mov dword [esp + 0xd8], 0x44
lea edi, [eax + 1]
jmp 0x432c7e
push 5
lea edx, [esp + 0x54]
push edx
push 0
push esi
lea ebx, [esp + 0x5c]
lea esi, [esp + 0xe0]
call fcn.00465820
mov ebx, dword [esp + 0x50]
mov esi, dword [esp + 0x48]
mov edi, eax
cmp edi, 1
jne 0x432f2a
cmp dword [esp + 0xd8], 5
jne 0x432c7e
cmp dword [esp + 0xd0], ebx
jne 0x432c7e
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xdc], ebx
xor ebx, ebx
mov dword [esp + 0xf8], eax
mov dword [esp + 0x50], ebx
mov dword [esp + 0x4c], ebx
mov ecx, dword [esi + 0x14]
mov eax, dword [ecx + 0x14]
cmp byte [eax], 0x74
mov dword [esp + 0x74], eax
jne 0x432ed8
mov ecx, dword [esp + 0x74]
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x60], eax
test eax, eax
jne 0x432cac
mov edx, dword [ecx + 0x14]
mov dword [esp + 0x54], edx
jmp 0x432eba
mov dword [esp + 0x7c], 0
test eax, eax
jle 0x432eba
lea esp, [esp]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x74]
push 5
lea eax, [esp + 0x54]
push eax
push ecx
push edx
lea ebx, [esp + 0x5c]
lea esi, [esp + 0xb0]
call fcn.00465820
mov edi, eax
cmp edi, 1
jne 0x432e97
mov ecx, dword [esp + 0xa8]
test ecx, ecx
jne 0x432d17
mov eax, dword [esp + 0x48]
cmp dword [eax + 0xc], ecx
jne 0x432d17
mov ecx, 5
xor esi, esi
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xa4], esi
jmp 0x432d1e
mov esi, dword [esp + 0xa4]
cmp dword [esp + 0xd8], 0x44
jne 0x432e49
lea ebx, [ecx - 1]
cmp ebx, 4
ja case.0x432d34.3
jmp dword [ebx*4 + 0x436a08]
mov eax, ecx
jmp 0x432d83
mov eax, dword [esp + 0xa0]
push 0
call fcn.0041c3a0
mov ecx, dword [esp + 0xa8]
jmp 0x432d83
test esi, esi
je 0x432d61
mov eax, 1
jmp 0x432d83
mov eax, dword [esp + 0xa0]
push 0
push 1
push 0
push 1
call fcn.0047f5a0
mov ecx, dword [esp + 0xb8]
add esp, 0x10
jmp 0x432d83
xor eax, eax
dec eax
je 0x432e29
dec eax
je 0x432dd1
cmp ecx, 6
je 0x432e3e
cmp ecx, 4
jne 0x432db5
mov eax, dword [esp + 0xa0]
cmp byte [eax + 0x17], 0
jne 0x432dab
mov eax, dword [eax + 0xc]
test byte [eax + 0x15], 2
jne 0x432e3e
xor ecx, ecx
lea eax, [esp + 0xa0]
call fcn.0045ac60
xor ecx, ecx
cmp byte [eax], cl
setne cl
mov eax, ecx
jmp 0x432e60
cmp ebx, 5
ja case.0x432dd6.2
jmp dword [ebx*4 + 0x436a1c]
fild qword [esp + 0xa0]
jmp 0x432e17
fld qword [esp + 0xa0]
jmp 0x432e17
mov eax, dword [esp + 0xa0]
push 1
call fcn.0041c490
jmp 0x432e17
test esi, esi
je case.0x432dd6.2
fild qword [esi]
jmp 0x432e17
mov edx, dword [esp + 0xa0]
push edx
call fcn.004944de
add esp, 4
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp case.0x432dd6.5
mov eax, 1
jmp 0x432e60
push 1
lea ecx, [esp + 0xa4]
call fcn.0045ab20
add esp, 4
or eax, edx
je case.0x432dd6.5
mov eax, 1
jmp 0x432e60
xor eax, eax
jmp 0x432e60
lea eax, [esp + 0xa0]
push eax
lea eax, [esp + 0xd4]
call fcn.0045af80
add esp, 4
test eax, eax
setne bl
cmp dword [esp + 0xa8], 6
jne 0x432e7e
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test bl, bl
jne 0x432ea1
mov eax, dword [esp + 0x7c]
inc eax
mov dword [esp + 0x7c], eax
cmp eax, dword [esp + 0x60]
jl 0x432cc0
jmp 0x432eb6
mov dword [esp + 0x54], 0
jmp 0x432eac
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x7c], edx
jl 0x432ed0
mov esi, dword [esp + 0x48]
mov eax, dword [esp + 0x74]
mov eax, dword [eax + 0x18]
cmp byte [eax], 0x74
mov dword [esp + 0x74], eax
je 0x432c91
jmp 0x432ed4
mov esi, dword [esp + 0x48]
mov ebx, dword [esp + 0x50]
cmp dword [esp + 0xd8], 6
jne 0x432ef1
mov eax, dword [esp + 0xd0]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [esp + 0xdc], 0
je 0x432f2a
test ebx, ebx
je 0x432f18
push ebx
call fcn.00492c28
add esp, 4
cmp dword [esp + 0x4c], 0x400000
jbe 0x432f18
dec dword [0x4bc37c]
mov eax, dword [esp + 0xf8]
mov ebx, dword [esp + 0xdc]
mov dword [esp + 0x4c], eax
test ebx, ebx
je 0x432f68
cmp dword [0x4bc374], 0
je 0x432f58
mov ecx, dword [0x4bc374]
push ecx
call fcn.00492c28
add esp, 4
cmp dword [0x4bc378], 0x400000
jbe 0x432f58
dec dword [0x4bc37c]
mov edx, dword [esp + 0x4c]
mov dword [0x4bc374], ebx
mov dword [0x4bc378], edx
mov ecx, dword [esp + 0x54]
test ecx, ecx
je 0x432f88
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x5c]
push eax
push edx
push 2
call fcn.00431e00
mov edi, eax
mov eax, dword [esp + 0x5c]
jmp 0x432f8e
xor eax, eax
mov dword [esp + 0x5c], eax
cmp edi, 1
jne 0x4364c2
cmp dword [ebp + 8], 3
je 0x4364c2
test eax, eax
je 0x43214e
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x4364b7
mov dword [esp + 0x48], eax
jmp 0x433362
cmp dword [esi + 0xc], 1
jne 0x432fd0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x48], eax
jmp 0x433362
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esi + 0x14]
push ebx
push 2
call fcn.00431e00
mov edi, eax
mov eax, dword [esp + 0x5c]
cmp eax, esi
je 0x433366
cmp dword [ebp + 8], 3
je 0x4368b3
cmp edi, 1
jne 0x4368b3
test eax, eax
je 0x432fc4
mov edx, dword [esi + 0x1c]
cmp edx, dword [eax + 0x1c]
jne 0x4368a8
mov dword [esp + 0x48], eax
mov esi, eax
jmp 0x433366
add dword [0x4bca90], 1
mov eax, dword [0x4bb388]
mov edi, dword [0x4b7a70]
adc dword [0x4bca94], 0
mov cl, byte [esi]
movzx edx, cl
dec edx
mov ebx, eax
mov dword [esp + 0x50], ebx
mov dword [esp + 0x4c], edi
cmp edx, 0xe1
ja case.0x433058.8
movzx edx, byte [edx + 0x436cb8]
jmp dword [edx*4 + 0x436a34]
push esi
call fcn.004480a0
jmp 0x433347
cmp byte [esi + 1], 1
mov edx, dword [0x4bb3dc]
jbe 0x4330da
mov eax, dword [esi + 8]
cmp byte [eax + 0x11], 0
je 0x433089
mov edi, 1
jmp 0x433351
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x43309c
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
jmp 0x433341
mov eax, dword [0x4bb38c]
test eax, eax
je 0x4330da
cmp byte [edx], 0
jne 0x4330da
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x4330b7
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x4330ce
sub ecx, 2
jne 0x4330da
mov eax, ebx
call fcn.00482310
jmp 0x433347
mov ecx, ebx
call fcn.00482080
jmp 0x433347
push 1
push 0
push 0xffffffffffffffff
push edx
push ebx
call fcn.004828b0
jmp 0x433347
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x433108
cmp byte [eax + 0x11], 0
jne 0x433108
mov eax, 1
mov dword [esp + 0x4c], eax
xor edi, edi
jmp 0x433148
mov edi, dword [0x4bb38c]
mov eax, dword [0x4bb3dc]
mov dword [esp + 0x4c], 0
test edi, edi
je 0x433136
cmp byte [eax], 0
jne 0x433136
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x433131
mov edx, dword [edi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x433197
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.0047f5a0
add esp, 0x10
mov dword [esp + 0x54], eax
push 1
mov eax, ebx
call fcn.0041c3a0
mov dword [esp + 0x68], eax
mov eax, dword [0x4bb3e0]
mov al, byte [eax]
test al, al
je 0x4332d2
call fcn.00411280
movsx eax, al
push eax
push 0x4ac380
call fcn.004945a1
add esp, 8
test eax, eax
je 0x4332d2
cmp dword [esp + 0x54], 0
jne 0x4331a6
mov edi, 1
jmp 0x433351
test edi, edi
je 0x433138
push 1
mov eax, edi
call fcn.0041c3a0
jmp 0x433148
cmp dword [esp + 0x4c], 0
je 0x4331b7
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x4331d5
test edi, edi
je 0x4331c6
push 0
mov eax, edi
call fcn.0041c490
jmp 0x4331d5
mov esi, dword [0x4bb3dc]
call fcn.0041c2a0
mov esi, dword [esp + 0x48]
push 0
fstp qword [esp + 0x6c]
push 1
mov ecx, ebx
call fcn.00401270
cmp byte [eax], 0
je 0x43321d
lea eax, [esp + 0xc0]
push eax
push 0
push 1
mov ecx, ebx
call fcn.00401270
call fcn.0047f180
add esp, 4
test eax, eax
jne 0x433241
push 1
push eax
push 0xffffffffffffffff
push 0x4a7935
push ebx
call fcn.004828b0
jmp 0x433347
lea ecx, [esp + 0x120]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea edx, [esp + 0xc0]
push edx
lea eax, [esp + 0x124]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov ecx, dword [0x4bb3e0]
mov al, byte [ecx]
call fcn.00411280
fld qword [esp + 0x68]
cmp al, 0x44
je 0x43326e
cmp al, 0x48
je 0x433266
cmp al, 0x4d
jne 0x433274
fmul qword [0x4b16f8]
jmp 0x433274
fmul qword [0x4b16f0]
jmp 0x433274
fmul qword [0x4b16e8]
mov esi, dword [esp + 0xc0]
mov edi, dword [esp + 0xc4]
call fcn.004a21e6
push 0
push 0x989680
push edx
push eax
call fcn.00497a70
add esi, eax
adc edi, edx
mov dword [esp + 0xc0], esi
push 0
lea eax, [esp + 0xc4]
lea esi, [esp + 0x184]
mov dword [esp + 0xc8], edi
call fcn.0047f410
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
push ebx
call fcn.004828b0
mov esi, dword [esp + 0x48]
jmp 0x433347
mov eax, 2
cmp dword [esp + 0x54], eax
je 0x43337a
cmp dword [esp + 0x68], eax
je 0x43337a
cmp dword [esp + 0x4c], 0
je 0x433306
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xec], eax
jmp 0x43332d
test edi, edi
je 0x433315
push 0
mov eax, edi
call fcn.0041c410
jmp 0x433324
mov esi, dword [0x4bb3dc]
call fcn.004040e0
mov esi, dword [esp + 0x48]
mov dword [esp + 0xec], edx
mov edi, eax
push 0
mov eax, ebx
call fcn.0041c410
add eax, edi
adc edx, dword [esp + 0xec]
push edx
push eax
push ebx
call fcn.0041c340
mov edi, eax
test edi, edi
je 0x4364c8
cmp dword [ebp + 8], 3
je 0x4364c8
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x48], ecx
mov esi, dword [esp + 0x48]
test esi, esi
je case.0x432198.116
mov ebx, dword [esp + 0x80]
jmp 0x431e67
cmp dword [esp + 0x4c], 0
je 0x43338b
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x4333a9
test edi, edi
je 0x43339a
push 0
mov eax, edi
call fcn.0041c490
jmp 0x4333a9
mov esi, dword [0x4bb3dc]
call fcn.0041c2a0
mov esi, dword [esp + 0x48]
push 0
fstp qword [esp + 0x6c]
mov eax, ebx
call fcn.0041c490
fadd qword [esp + 0x68]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.0041c370
jmp 0x433347
mov eax, dword [0x4bb3e0]
mov al, byte [eax]
test al, al
je 0x4334b8
call fcn.00411280
movsx eax, al
push eax
push 0x4ac380
call fcn.004945a1
add esp, 8
test eax, eax
je 0x4334b8
mov ecx, dword [0x4bb38c]
mov edi, dword [0x4bb3dc]
test ecx, ecx
je 0x43342d
cmp byte [edi], 0
jne 0x43342d
mov al, byte [ecx + 0x17]
test al, al
jne 0x43341a
mov edx, dword [ecx + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
jne 0x43342d
test ecx, ecx
je 0x43342d
push 0
push 1
call fcn.00401270
mov edi, eax
push 0
push 1
mov ecx, ebx
call fcn.00401270
push eax
lea ebx, [esp + 0x97]
mov eax, edi
call fcn.0047f4c0
add esp, 4
cmp byte [esp + 0x93], 0
mov edi, eax
mov ebx, edx
je 0x433472
mov eax, dword [esp + 0x50]
push 1
push 0
push 0xffffffffffffffff
push 0x4a7935
push eax
call fcn.004828b0
jmp 0x433347
mov ecx, dword [0x4bb3e0]
mov al, byte [ecx]
call fcn.00411280
cmp al, 0x44
je 0x43349a
cmp al, 0x48
je 0x433491
cmp al, 0x4d
jne 0x4334ac
push 0
push 0x3c
jmp 0x4334a1
push 0
push 0xe10
jmp 0x4334a1
push 0
push 0x15180
push ebx
push edi
call fcn.004a2260
mov edi, eax
mov ebx, edx
mov edx, dword [esp + 0x50]
push ebx
push edi
push edx
jmp 0x433342
mov eax, dword [esi + 8]
xor edx, edx
cmp dword [eax + 0x1c], edx
je 0x4334d6
cmp byte [eax + 0x11], dl
jne 0x4334d6
mov edi, 1
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edx
jmp 0x433528
mov edi, dword [0x4bb38c]
mov eax, dword [0x4bb3dc]
mov dword [esp + 0x4c], edx
cmp edi, edx
je 0x433512
cmp byte [eax], dl
jne 0x433512
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x4334fa
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x433512
mov dword [esp + 0x50], edi
cmp edi, edx
je 0x433516
push 1
mov eax, edi
call fcn.0041c3a0
jmp 0x433526
mov dword [esp + 0x50], edx
push 1
push 1
push 0
push 1
call fcn.0047f5a0
add esp, 0x10
mov edi, eax
push 1
mov eax, ebx
call fcn.0041c3a0
cmp edi, 2
je 0x4335ab
cmp eax, 2
je 0x4335ab
cmp dword [esp + 0x4c], 0
je 0x43356b
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x104], eax
push 0
mov eax, ebx
call fcn.0041c410
sub eax, edi
sbb edx, dword [esp + 0x104]
jmp 0x43333f
mov eax, dword [esp + 0x50]
test eax, eax
je 0x43357c
push 0
call fcn.0041c410
jmp 0x43358b
mov esi, dword [0x4bb3dc]
call fcn.004040e0
mov esi, dword [esp + 0x48]
mov edi, eax
push 0
mov eax, ebx
mov dword [esp + 0x108], edx
call fcn.0041c410
sub eax, edi
sbb edx, dword [esp + 0x104]
jmp 0x43333f
cmp dword [esp + 0x4c], 0
je 0x4335bc
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x4335dc
mov eax, dword [esp + 0x50]
test eax, eax
je 0x4335cd
push 0
call fcn.0041c490
jmp 0x4335dc
mov esi, dword [0x4bb3dc]
call fcn.0041c2a0
mov esi, dword [esp + 0x48]
push 0
fstp qword [esp + 0x6c]
mov eax, ebx
call fcn.0041c490
fsub qword [esp + 0x68]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.0041c370
jmp 0x433347
mov eax, dword [esi + 8]
xor edx, edx
cmp dword [eax + 0x1c], edx
je 0x43361c
cmp byte [eax + 0x11], dl
jne 0x43361c
mov edi, 1
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edx
jmp 0x43366e
mov edi, dword [0x4bb38c]
mov eax, dword [0x4bb3dc]
mov dword [esp + 0x4c], edx
cmp edi, edx
je 0x433658
cmp byte [eax], dl
jne 0x433658
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x433640
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x433658
mov dword [esp + 0x50], edi
cmp edi, edx
je 0x43365c
push 1
mov eax, edi
call fcn.0041c3a0
jmp 0x43366c
mov dword [esp + 0x50], edx
push 1
push 1
push 0
push 1
call fcn.0047f5a0
add esp, 0x10
mov edi, eax
push 1
mov eax, ebx
call fcn.0041c3a0
cmp edi, 2
je 0x4336e3
cmp eax, 2
je 0x4336e3
cmp dword [esp + 0x4c], 0
je 0x43369c
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xf4], eax
jmp 0x4336c5
mov eax, dword [esp + 0x50]
test eax, eax
je 0x4336ad
push 0
call fcn.0041c410
jmp 0x4336bc
mov esi, dword [0x4bb3dc]
call fcn.004040e0
mov esi, dword [esp + 0x48]
mov dword [esp + 0xf4], edx
mov edi, eax
push 0
mov eax, ebx
call fcn.0041c410
mov ecx, dword [esp + 0xf4]
push ecx
push edi
push edx
push eax
call fcn.00497a70
jmp 0x43333f
cmp dword [esp + 0x4c], 0
je 0x4336f4
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x433714
mov eax, dword [esp + 0x50]
test eax, eax
je 0x433705
push 0
call fcn.0041c490
jmp 0x433714
mov esi, dword [0x4bb3dc]
call fcn.0041c2a0
mov esi, dword [esp + 0x48]
push 0
fstp qword [esp + 0x6c]
mov eax, ebx
call fcn.0041c490
fmul qword [esp + 0x68]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.0041c370
jmp 0x433347
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x433752
cmp byte [eax + 0x11], 0
jne 0x433752
mov edi, 1
mov dword [esp + 0x4c], edi
xor ebx, ebx
jmp 0x433794
mov ebx, dword [0x4bb38c]
mov eax, dword [0x4bb3dc]
mov dword [esp + 0x4c], 0
test ebx, ebx
je 0x433780
cmp byte [eax], 0
jne 0x433780
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x43377b
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x4337c5
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.0047f5a0
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x50]
push 1
call fcn.0041c3a0
cmp edi, 2
je 0x43382a
cmp eax, 2
je 0x43382a
cmp dword [esp + 0x4c], 0
je 0x4337d4
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x4337f6
test ebx, ebx
je 0x433782
push 1
mov eax, ebx
call fcn.0041c3a0
jmp 0x433792
test ebx, ebx
je 0x4337e3
push 0
mov eax, ebx
call fcn.0041c410
jmp 0x4337f2
mov esi, dword [0x4bb3dc]
call fcn.004040e0
mov esi, dword [esp + 0x48]
mov ebx, edx
mov edi, eax
mov eax, edi
or eax, ebx
jne 0x43380a
mov ecx, dword [esp + 0x50]
call fcn.0041c2e0
jmp 0x433347
mov eax, dword [esp + 0x50]
push 0
call fcn.0041c410
push ebx
push edi
push edx
push eax
call fcn.004a2260
mov ecx, dword [esp + 0x50]
push edx
push eax
push ecx
jmp 0x433342
cmp dword [esp + 0x4c], 0
je 0x43383b
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x433859
test ebx, ebx
je 0x43384a
push 0
mov eax, ebx
call fcn.0041c490
jmp 0x433859
mov esi, dword [0x4bb3dc]
call fcn.0041c2a0
mov esi, dword [esp + 0x48]
fst qword [esp + 0x68]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x433876
mov ecx, dword [esp + 0x50]
call fcn.0041c2e0
jmp 0x433347
mov edi, dword [esp + 0x50]
push 0
mov eax, edi
call fcn.0041c490
fdiv qword [esp + 0x68]
sub esp, 8
fstp qword [esp]
push edi
call fcn.0041c370
jmp 0x433347
mov edi, 2
mov ecx, esi
call fcn.0042e160
mov ebx, eax
test ebx, ebx
jns 0x4338ae
xor ebx, ebx
jmp 0x4338c0
mov edi, 1
mov ecx, esi
call fcn.0042e0e0
cmp ebx, eax
jle 0x4338c0
mov ebx, eax
push 1
push 0
push ebx
mov ecx, dword [0x4bb3dc]
mov edx, dword [esp + 0x5c]
push ecx
push edx
call fcn.004828b0
jmp 0x433347
mov edi, 2
mov ecx, esi
call fcn.0042e160
mov ebx, eax
test ebx, ebx
jns 0x4338ef
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.0042e0e0
cmp ebx, eax
jbe 0x433901
mov ebx, eax
push 1
sub eax, ebx
add eax, dword [0x4bb3dc]
push 0
push ebx
push eax
mov eax, dword [esp + 0x60]
push eax
call fcn.004828b0
jmp 0x433347
cmp byte [esi + 1], 4
jb 0x433950
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x34]
cmp byte [edx], 0
je 0x433950
mov edi, 3
mov ecx, esi
call fcn.0042e160
mov dword [esp + 0x4c], eax
cmp eax, 1
jge 0x433958
mov ecx, ebx
call fcn.0041c2e0
jmp 0x433347
mov dword [esp + 0x4c], connect
mov edi, 2
mov ecx, esi
call fcn.0042e160
mov ebx, eax
mov eax, dword [0x4bb3e8]
mov al, byte [eax]
call fcn.00411280
cmp al, 0x4c
jne 0x4339a3
cmp ebx, 1
jge 0x433989
mov ecx, dword [esp + 0x50]
call fcn.0041c2e0
jmp 0x433347
mov eax, dword [esp + 0x4c]
mov ecx, 1
sub ecx, eax
add ebx, ecx
cmp ebx, 1
jge 0x4339ad
lea edx, [eax + ebx - 1]
mov dword [esp + 0x4c], edx
cmp ebx, 1
jge 0x4339ad
mov ebx, 1
mov edi, 1
mov ecx, esi
call fcn.0042e0e0
cmp eax, ebx
jae 0x4339cb
mov ecx, dword [esp + 0x50]
call fcn.0041c2e0
jmp 0x433347
mov ecx, edi
sub ecx, ebx
add eax, ecx
cmp dword [esp + 0x4c], eax
jbe 0x4339db
mov dword [esp + 0x4c], eax
mov edx, dword [0x4bb3dc]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
push 1
push 0
push eax
lea ebx, [ebx + edx - 1]
push ebx
push ecx
call fcn.004828b0
jmp 0x433347
mov edi, 2
mov ecx, esi
call fcn.0042e160
mov ebx, eax
test ebx, ebx
jns 0x433a12
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.0042e0e0
cmp ebx, eax
jbe 0x433a24
mov ebx, eax
mov edx, dword [0x4bb3dc]
push 1
push 0
sub eax, ebx
push eax
mov eax, dword [esp + 0x5c]
lea ecx, [ebx + edx]
push ecx
push eax
call fcn.004828b0
jmp 0x433347
mov edi, 2
mov ecx, esi
call fcn.0042e160
mov ebx, eax
test ebx, ebx
jns 0x433a58
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.0042e0e0
cmp ebx, eax
jbe 0x433a6a
mov ebx, eax
push 1
push 0
sub eax, ebx
push eax
jmp 0x4338c5
push 1
push 1
mov ecx, ebx
call fcn.00401270
mov edi, eax
cmp edi, dword [0x4bb3dc]
jne 0x433a9c
mov al, byte [ebx + 0x17]
test al, al
jne 0x433a98
mov eax, dword [ebx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
je 0x433adb
push 1
push 0
mov edi, 1
mov ecx, esi
call fcn.0042e0e0
push eax
push 0
push ebx
call fcn.004828b0
cmp eax, edi
jne case.0x433058.8
push 0
push edi
mov ecx, ebx
call fcn.00401270
mov ecx, dword [0x4bb3dc]
mov edi, eax
mov edx, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x433ad1
mov ecx, dword [0x4bb3e0]
mov al, byte [ecx]
test al, al
je 0x433b11
call fcn.00411280
cmp al, 0x54
jne 0x433b11
mov edx, dword [0x4bb3e0]
cmp byte [edx + 1], 0
jne 0x433b11
mov eax, edi
call fcn.0041bff0
push 0
mov eax, ebx
call fcn.0041c720
jmp 0x433347
cmp byte [esi], 0x31
push edi
jne 0x433b2b
call dword [sym.imp.USER32.dll_CharLowerA]
push 0
mov eax, ebx
call fcn.0041c720
jmp 0x433347
call dword [sym.imp.USER32.dll_CharUpperA]
push 0
mov eax, ebx
call fcn.0041c720
jmp 0x433347
mov eax, dword [0x4bb38c]
test eax, eax
je 0x433b6a
cmp byte [eax + 0x17], 0
jne 0x433b56
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x15]
jmp 0x433b59
mov cl, byte [eax + 0x15]
test cl, 1
je 0x433b6a
call fcn.0041c690
push 0
jmp 0x433340
mov edi, 1
mov ecx, esi
call fcn.0042e0e0
push 0
jmp 0x433340
mov edi, dword [0x4bb3e4]
mov al, byte [edi]
mov dword [esp + 0x68], edi
mov dword [esp + 0x74], 0xffffffff
test al, al
je 0x433c17
call fcn.00411280
movsx eax, al
push eax
push 0x4ad4cc
call fcn.004945a1
add esp, 8
test eax, eax
je 0x433c17
cmp byte [edi + 1], 0
je 0x433c17
lea esi, [edi + 1]
call fcn.00416410
mov esi, dword [esp + 0x48]
mov dword [esp + 0x54], eax
test eax, eax
jle 0x433d0d
mov eax, dword [0x4bb3e0]
cmp byte [eax], 0
jne 0x433c21
mov dword [esp + 0x74], 0
mov eax, 0x4a7950
mov edx, dword [0x4bbc50]
push 1
push 0
push 0xffffffffffffffff
push eax
push edx
call fcn.004828b0
mov eax, dword [esp + 0x74]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x5c]
call fcn.00401130
mov edi, 1
jmp 0x433351
mov dword [esp + 0x54], 1
jmp 0x433bd1
mov edx, dword [0x4bb3dc]
mov edi, 4
mov ecx, esi
mov dword [esp + 0x7c], edx
mov dword [esp + 0x60], eax
call fcn.0042e160
mov ebx, eax
test ebx, ebx
jns 0x433c43
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.0042e0e0
mov edi, eax
cmp ebx, edi
jge 0x433d0d
mov eax, dword [esp + 0x68]
mov al, byte [eax]
cmp al, 0x31
je 0x433cd4
call fcn.00411280
cmp al, 0x52
je 0x433cd4
mov edi, 2
mov ecx, esi
call fcn.0042e0e0
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x68], eax
lea eax, [ecx + ebx]
mov ebx, dword [esp + 0x60]
mov edi, 1
lea esp, [esp]
mov edx, dword [0x4b7a70]
mov cl, byte [edx + 0xd2]
push ebx
test cl, cl
jne 0x433cab
call fcn.0047fa90
add esp, 4
jmp 0x433cc3
cmp cl, 2
jne 0x433cba
call fcn.0047fd10
add esp, 4
jmp 0x433cc3
push eax
call fcn.00494ea8
add esp, 8
test eax, eax
je 0x433d0d
cmp edi, dword [esp + 0x54]
je 0x433cfb
inc edi
add eax, dword [esp + 0x68]
jmp 0x433c90
mov ecx, dword [esp + 0x4c]
movzx edx, byte [ecx + 0xd2]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x7c]
push eax
mov eax, dword [esp + 0x64]
push edx
push eax
mov eax, edi
sub eax, ebx
push ecx
call fcn.0047f890
add esp, 0x10
test eax, eax
je 0x433d0d
sub eax, dword [esp + 0x7c]
mov dword [esp + 0x74], eax
jns 0x433be3
mov eax, 0x4a7dfc
jmp 0x433be8
push esi
call fcn.00448480
jmp 0x433347
mov eax, dword [0x4bb3e4]
mov ecx, dword [0x4bb3e0]
mov edx, dword [0x4bb3dc]
call fcn.0043e800
jmp 0x433347
mov eax, dword [0x4bb3e4]
mov ecx, dword [0x4bb3e0]
push eax
mov eax, dword [0x4bb3d8]
push ecx
mov ecx, dword [0x4bb3dc]
push esi
call fcn.00448690
jmp 0x433347
mov edx, dword [0x4bb3d8]
push edx
mov eax, esi
call fcn.00448df0
jmp 0x433347
mov eax, dword [0x4bb3d8]
mov ecx, dword [0x4bb3dc]
push eax
push esi
call fcn.00449390
jmp 0x433347
push 0
push ecx
mov edi, 7
mov ecx, esi
call fcn.0042e160
add esp, 4
push eax
mov edi, 6
mov ecx, esi
call fcn.0042e160
push eax
push ecx
mov edi, 5
mov ecx, esi
call fcn.0042e160
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.0042e160
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.0042e160
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.0042e160
push eax
mov eax, dword [0x4bb3f8]
push esi
call fcn.004444b0
jmp 0x433347
mov ecx, dword [0x4bb3f0]
push ecx
push ecx
mov edi, 5
mov ecx, esi
call fcn.0042e160
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.0042e160
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.0042e160
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.0042e160
push eax
push esi
call fcn.00444cc0
jmp 0x433347
mov edx, dword [0x4bb3e4]
push edx
push ecx
mov edi, 2
mov ecx, esi
call fcn.0042e160
mov edi, 1
mov ecx, esi
mov ebx, eax
call fcn.0042e160
add esp, 4
mov ecx, eax
push esi
mov eax, ebx
call fcn.0045c190
jmp 0x433347
mov eax, dword [edi + 0xb4]
xor edx, edx
cmp cl, 0x42
sete dl
push 0
push eax
push edx
mov eax, dword [0x4bb3d8]
push eax
call fcn.004169a0
add esp, 0x10
mov edi, 1
jmp 0x433351
mov edx, dword [0x4bb3d8]
xor ecx, ecx
cmp dword [edi + 0xb4], 3
push 0
sete cl
lea ecx, [ecx + ecx + 1]
push ecx
push 0
push edx
call fcn.004169a0
add esp, 0x10
mov edi, 1
jmp 0x433351
push 0
push 2
push 0
jmp 0x433e8a
mov ecx, dword [0x4bb3d8]
push 0
push 0
push 0
push ecx
call fcn.004169a0
add esp, 0x10
mov edi, 1
jmp 0x433351
mov edx, dword [0x4bb3d8]
push edx
call fcn.00418b30
add esp, 4
jmp 0x433347
mov eax, dword [0x4bb3f0]
mov edx, dword [0x4bb3ec]
push 0x4a7935
push eax
mov eax, dword [0x4bb3e8]
push edx
mov edx, dword [0x4bb3e4]
push eax
mov eax, dword [0x4bb3e0]
push edx
mov edx, dword [0x4bb3dc]
push eax
push edx
mov edx, dword [0x4bb3d8]
push ecx
mov eax, 0x4a7935
call fcn.00418dc0
add esp, 0x20
jmp 0x433347
mov eax, dword [0x4bb3ec]
mov edx, dword [0x4bb3f0]
push eax
mov eax, dword [0x4bb3e8]
push edx
mov edx, dword [0x4bb3e0]
push eax
mov eax, dword [0x4bb3dc]
push 0x4a7935
push 0x4a7935
push edx
mov edx, dword [0x4bb3d8]
push eax
mov eax, dword [0x4bb3e4]
push ecx
call fcn.00418dc0
add esp, 0x20
jmp 0x433347
mov edx, dword [0x4bb3e4]
mov eax, dword [0x4bb3e0]
push 0x4a7935
push edx
mov edx, dword [0x4bb3dc]
push eax
mov eax, dword [0x4bb3d8]
push 0x4a7935
push 0x4a7935
push edx
push eax
mov eax, 0x4a7935
push ecx
mov edx, eax
call fcn.00418dc0
add esp, 0x20
jmp 0x433347
mov edi, 4
mov ecx, esi
call fcn.0042e160
push eax
mov ecx, esi
call fcn.00447590
jmp 0x433347
mov eax, dword [0x4bb3dc]
mov ebx, dword [0x4bb3e0]
mov esi, dword [0x4bb3d8]
cmp cl, 0x78
sete cl
movzx edx, cl
push edx
push eax
mov eax, dword [0x4bb3e4]
push edi
call fcn.00483670
add esp, 0xc
test eax, eax
je 0x434031
mov ecx, dword [0x4b7a70]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x434031
push 1
push eax
call fcn.004014b0
add esp, 8
mov esi, dword [esp + 0x48]
mov edi, 1
jmp 0x433351
mov edx, dword [0x4bb3d8]
push 9
push 0x4ad4d0
push edx
call fcn.0049353e
add esp, 0xc
test eax, eax
jne 0x434072
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
jne 0x434072
mov ecx, dword [0x4bb3e4]
cmp byte [ecx], 0
jne 0x434072
mov bl, 1
jmp 0x434074
xor bl, bl
mov al, byte [esi]
xor edx, edx
test bl, bl
setne dl
dec edx
and edx, 0x14
mov dword [esp + 0x54], edx
cmp al, 0x84
je 0x4340d2
cmp al, 0x85
je 0x4340d2
mov eax, dword [0x4bb3e0]
cmp byte [eax], 0
je 0x434113
mov al, byte [esi]
cmp al, 0x84
je 0x43417a
cmp al, 0x85
je 0x43417c
mov edx, dword [0x4bb3e0]
mov ecx, dword [0x4bb3dc]
push edx
mov edx, dword [0x4bb3d8]
push ecx
mov ecx, dword [0x4bb3e4]
push eax
call fcn.00440130
jmp 0x433347
mov ecx, dword [0x4bb3e0]
cmp byte [ecx], 0
je 0x434108
mov edi, 2
mov ecx, esi
call fcn.0042e210
fmul qword [0x4b1660]
call fcn.004a21b0
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x54], eax
test eax, eax
jne 0x434108
mov dword [esp + 0x54], 0x1f4
mov edx, dword [0x4bb3e8]
cmp byte [edx], 0
jne 0x43409b
test bl, bl
je 0x43409b
mov ecx, dword [0x4bb3d8]
add ecx, 9
mov al, byte [ecx]
cmp al, 0x20
je 0x43412a
cmp al, 9
jne 0x43412d
inc ecx
jmp 0x434120
cmp byte [ecx], 0
mov dword [esp + 0x60], ecx
je 0x43409b
mov ebx, dword [0x4bc498]
test ebx, ebx
je 0x43409b
mov ecx, dword [esp + 0x60]
mov eax, dword [ebx + 4]
push ecx
push eax
call fcn.00492c11
add esp, 8
test eax, eax
je 0x434169
mov ebx, dword [ebx + 0x14]
test ebx, ebx
jne 0x434148
jmp 0x43409b
mov edx, dword [esp + 0x54]
mov cl, byte [esi]
push ebx
call fcn.00485630
jmp 0x433347
cmp al, 0x85
mov ecx, dword [0x4bb3e8]
mov ebx, dword [0x4bb3d8]
sete dl
movzx eax, dl
mov edx, dword [esp + 0x54]
push eax
mov eax, dword [0x4bb3dc]
push ecx
push edx
push eax
mov eax, dword [0x4bb3e4]
push edi
call fcn.00483960
add esp, 0x14
test eax, eax
je 0x433e98
mov ecx, dword [0x4b7a70]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x433e98
push 1
push eax
call fcn.004014b0
add esp, 8
mov edi, 1
jmp 0x433351
mov ebx, dword [0x4bb3dc]
call fcn.00443e20
jmp 0x433347
mov edx, dword [0x4bb3dc]
mov eax, dword [0x4bb3d8]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
sete cl
movzx edx, cl
push edx
mov ebx, esi
call fcn.0043b150
jmp 0x433347
lea eax, [esp + 0x128]
push eax
push 0x3a98
push 1
push 0x4ad4dc
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
jmp 0x4341fb
mov eax, dword [0x4bb3dc]
push eax
mov eax, dword [0x4bb3d8]
push esi
call fcn.0045d8b0
jmp 0x433347
mov ecx, dword [0x4bb3d8]
push 0
push 0xffffffffffffffff
push ecx
mov eax, 0x4bcaa8
call fcn.0047c900
mov edx, dword [0x4bb3dc]
add esp, 0xc
push 0
push 0xffffffffffffffff
push edx
mov eax, 0x4bcab4
call fcn.0047c900
mov eax, dword [0x4bb3e0]
add esp, 0xc
push 0
push 0xffffffffffffffff
push eax
mov eax, 0x4bcac0
call fcn.0047c900
add esp, 0xc
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3e0]
push 0x4aa02c
call fcn.0047fa90
add esp, 4
test eax, eax
setne bl
mov cl, 3
cmp cl, byte [esi + 1]
mov ecx, dword [0x4bb3e0]
sbb edx, edx
and edx, dword [0x4bb394]
mov byte [esp + 0x114], bl
mov eax, dword [esp + 0x114]
push edx
push 1
push eax
push 0
test bl, bl
sete dl
push ecx
mov ecx, dword [0x4bb3dc]
movzx eax, dl
mov edx, dword [0x4bb3d8]
push eax
push ecx
push 0
push 0x4bc460
call fcn.0043c410
test bl, bl
je 0x433347
test eax, eax
mov eax, 0x4a7950
jne 0x434313
mov eax, 0x4ad4e8
mov edx, dword [0x4bbc50]
push 1
push 0
push 0xffffffffffffffff
push eax
push edx
call fcn.004828b0
jmp 0x433347
push esi
call fcn.00440210
jmp 0x433347
cmp byte [esi + 1], 2
jbe 0x434378
mov eax, dword [0x4bb3f0]
mov ecx, dword [0x4bb3ec]
mov edx, dword [0x4bb3e8]
push eax
mov eax, dword [0x4bb3e4]
push ecx
mov ecx, dword [0x4bb3e0]
push edx
mov edx, dword [0x4bb3d8]
push eax
mov eax, dword [0x4bb3dc]
push ecx
mov ecx, dword [0x4bb3f4]
call fcn.00440900
jmp 0x433347
mov edx, dword [0x4bb3dc]
mov eax, dword [0x4bb3d8]
push 0x4a7935
push 0x4a7935
push 0x4a7935
push edx
mov ecx, 0x4a7935
push eax
mov eax, ecx
mov edx, ecx
call fcn.00440900
jmp 0x433347
mov ecx, dword [0x4bb400]
mov edx, dword [0x4bb3fc]
mov eax, dword [0x4bb3f8]
push ecx
mov ecx, dword [0x4bb3f4]
push edx
mov edx, dword [0x4bb3f0]
push eax
mov eax, dword [0x4bb3e0]
push ecx
mov ecx, dword [0x4bb3dc]
push edx
mov edx, dword [0x4bb3d8]
push eax
mov eax, dword [0x4bb3e4]
push ecx
mov ecx, dword [0x4bb3e8]
push edx
mov edx, dword [0x4bb3ec]
push esi
call fcn.0045c5e0
jmp 0x433347
mov edx, dword [0x4bb3dc]
xor eax, eax
cmp cl, 0x47
mov ecx, dword [0x4bb3e8]
sete al
push eax
mov eax, dword [0x4bb3d8]
push ecx
mov ecx, dword [0x4bb3ec]
push edx
mov edx, dword [0x4bb3e0]
push eax
mov eax, dword [0x4bb3e4]
push esi
call fcn.00440a20
jmp 0x433347
mov esi, dword [0x4bb3e4]
push 1
xor bl, bl
call fcn.00416440
add esp, 4
mov byte [esp + 0x118], al
test al, al
jne 0x43446f
mov ecx, dword [0x4bb3e4]
push ecx
mov ecx, dword [esp + 0x4c]
push 0
push 0x4ac3ac
call fcn.0043b4b0
mov esi, dword [esp + 0x48]
jmp 0x433347
mov edx, dword [0x4bb3e8]
cmp byte [edx], bl
je 0x434489
mov ecx, dword [esp + 0x48]
mov edi, 4
call fcn.0042e160
jmp 0x43448e
mov eax, 1
mov ecx, dword [0x4bb3f0]
mov edx, dword [0x4bb3d8]
push ecx
mov ecx, dword [0x4bb3ec]
push edx
mov edx, dword [esp + 0x120]
push ecx
mov ecx, dword [0x4bb3f4]
push eax
mov eax, dword [esp + 0x58]
push edx
mov edx, dword [0x4bb3dc]
push eax
mov eax, dword [0x4bb3e0]
call fcn.00440ae0
mov esi, dword [esp + 0x48]
jmp 0x433347
mov ecx, dword [0x4bb3f4]
mov edx, dword [0x4bb3e8]
mov eax, dword [0x4bb3e4]
push ecx
mov ecx, dword [0x4bb3e0]
push edx
mov edx, dword [0x4bb3dc]
push eax
mov eax, dword [0x4bb3d8]
push ecx
mov ecx, dword [0x4bb3f8]
push edx
mov edx, dword [0x4bb3ec]
push eax
mov eax, dword [0x4bb3f0]
push esi
call fcn.00441150
jmp 0x433347
mov ecx, dword [0x4bb3f8]
mov edx, dword [0x4bb3f4]
mov eax, dword [0x4bb3f0]
push ecx
mov ecx, dword [0x4bb3ec]
push edx
mov edx, dword [0x4bb3e8]
push eax
push ecx
push edx
mov ecx, esi
call fcn.00441380
jmp 0x433347
mov eax, dword [0x4bb3e8]
mov ecx, dword [0x4bb3e4]
mov edx, dword [0x4bb3e0]
push eax
mov eax, dword [0x4bb3dc]
push ecx
push edx
push eax
push esi
call fcn.004414d0
jmp 0x433347
mov ecx, dword [0x4bb3e4]
mov edx, dword [0x4bb3d8]
mov eax, dword [0x4bb3e0]
push ecx
mov ecx, dword [0x4bb3e8]
push edx
mov edx, dword [0x4bb3dc]
push esi
call fcn.004416a0
jmp 0x433347
mov eax, dword [0x4bb3e8]
mov ecx, dword [0x4bb3dc]
mov edx, dword [0x4bb3e0]
push eax
mov eax, dword [0x4bb3e4]
push ecx
mov ecx, dword [0x4bb3ec]
push esi
mov esi, dword [0x4bb3d8]
call fcn.004417b0
mov esi, dword [esp + 0x48]
jmp 0x433347
mov edx, dword [0x4bb3e8]
mov eax, dword [0x4bb3dc]
mov ecx, dword [0x4bb3ec]
push edx
mov edx, dword [0x4bb3e0]
push eax
mov eax, dword [0x4bb3e4]
push esi
call fcn.00441870
jmp 0x433347
mov ecx, dword [0x4bb3f0]
mov edx, dword [0x4bb3ec]
mov eax, dword [0x4bb3e8]
push ecx
mov ecx, dword [0x4bb3e4]
push edx
mov edx, dword [0x4bb3e0]
push eax
mov eax, dword [0x4bb3dc]
push ecx
mov ecx, dword [0x4bb3d8]
push edx
push esi
call fcn.0045c920
jmp 0x433347
mov eax, dword [0x4bb3f4]
mov ecx, dword [0x4bb3f0]
mov edx, dword [0x4bb3ec]
push eax
mov eax, dword [0x4bb3e8]
push ecx
mov ecx, dword [0x4bb3e4]
push edx
mov edx, dword [0x4bb3e0]
push eax
push ecx
mov ecx, dword [0x4bb3dc]
push edx
push esi
call fcn.0045d0c0
jmp 0x433347
mov eax, dword [0x4bb3e8]
mov ecx, dword [0x4bb3ec]
mov edx, dword [0x4bb3e0]
mov edi, dword [0x4bb3dc]
push eax
mov eax, dword [0x4bb3e4]
call fcn.00442000
jmp 0x433347
mov ecx, dword [0x4bb3f0]
mov edx, dword [0x4bb3ec]
mov eax, dword [0x4bb3e8]
push ecx
mov ecx, dword [0x4bb3e0]
push edx
mov edx, dword [0x4bb3dc]
push eax
mov eax, dword [0x4bb3d8]
push ecx
mov ecx, dword [0x4bb3f4]
push edx
mov edx, dword [0x4bb3e4]
push eax
call fcn.00442070
jmp 0x433347
cmp cl, 0x92
sete cl
movzx edx, cl
push edx
mov eax, esi
call fcn.004421a0
jmp 0x433347
mov eax, dword [0x4bb3dc]
mov ecx, dword [0x4bb3e0]
mov edx, dword [0x4bb3d8]
push eax
push esi
call fcn.004424b0
jmp 0x433347
mov ecx, dword [0x4bb3ec]
mov edx, dword [0x4bb3e8]
mov eax, dword [0x4bb3e4]
push ecx
mov ecx, dword [0x4bb3e0]
push edx
mov edx, dword [0x4bb3d8]
push eax
push ecx
mov ecx, dword [0x4bb3dc]
push esi
call fcn.00442af0
jmp 0x433347
cmp byte [esi + 1], 1
jbe 0x434756
mov edx, dword [0x4bb3e4]
mov eax, dword [0x4bb3e0]
mov ecx, dword [0x4bb3e8]
push edx
mov edx, dword [0x4bb3d8]
push eax
mov eax, dword [0x4bb3dc]
call fcn.00442f30
jmp 0x433347
mov edi, dword [0x4bb3d8]
mov ecx, 0x4a7935
push 0x4a7935
mov eax, ecx
mov edx, ecx
call fcn.0044e400
test eax, eax
je 0x43477b
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, 1
jmp 0x433347
mov ecx, dword [0x4bb3e4]
mov eax, dword [0x4bb3e0]
mov edx, dword [0x4bb3dc]
push ecx
mov ecx, dword [0x4bb3e8]
call fcn.00442f60
jmp 0x433347
mov edx, dword [0x4bb3e4]
mov ecx, dword [0x4bb3e8]
mov eax, dword [0x4bb3e0]
push edx
mov edx, dword [0x4bb3dc]
call fcn.004430b0
jmp 0x433347
mov eax, dword [0x4bb3e8]
mov ecx, dword [0x4bb3e4]
mov edx, dword [0x4bb3dc]
push eax
push ecx
mov ecx, dword [0x4bb3ec]
push edx
mov edx, dword [0x4bb3e0]
push esi
call fcn.004431d0
jmp 0x433347
mov eax, dword [0x4bb3e4]
mov ecx, dword [0x4bb3e8]
mov edx, dword [0x4bb3dc]
push eax
mov eax, dword [0x4bb3e0]
push esi
call fcn.00443a10
jmp 0x433347
mov ecx, dword [0x4bb3f4]
mov edx, dword [0x4bb3f0]
mov eax, dword [0x4bb3ec]
push ecx
mov ecx, dword [0x4bb3e8]
push edx
push eax
push ecx
mov eax, esi
call fcn.00443ca0
jmp 0x433347
mov edx, dword [0x4bb3e0]
mov ecx, dword [0x4bb3dc]
push edx
push esi
call fcn.00443f00
jmp 0x433347
push 0
push 0x1a3
push 0x111
push 0
push 0x4ab8a8
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [0x4b7a70]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle 0x433e98
push 1
push eax
call fcn.004014b0
add esp, 8
mov edi, 1
jmp 0x433351
push 0
push 0x1a0
push 0x111
push 0
push 0x4ab8a8
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [0x4b7a70]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x433e98
push 1
push eax
call fcn.004014b0
add esp, 8
mov edi, 1
jmp 0x433351
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x43491a
mov edi, dword [0x4bb3d8]
cmp byte [edi], al
je 0x43491a
mov eax, 0x4bc460
call fcn.00425210
test eax, eax
jne 0x43491a
mov edx, dword [0x4bb3d8]
push edx
push eax
push 0x4aa190
mov ecx, esi
call fcn.0043b4b0
jmp 0x433347
mov dword [0x4bca28], eax
mov edi, 1
jmp 0x433351
mov edx, dword [esi + 0xc]
mov al, 1
cmp al, byte [esi + 1]
mov eax, dword [0x4bb3e0]
sbb ecx, ecx
and ecx, dword [0x4bb38c]
push ecx
mov ecx, dword [0x4bb3dc]
push edx
mov edx, dword [0x4bb3d8]
push eax
push ecx
push edx
call fcn.004126e0
add esp, 0x14
jmp 0x433347
mov ebx, dword [esi + 0xc]
test ebx, ebx
jne 0x4349f8
mov ecx, dword [0x4bb3d8]
push 0x4bc460
call fcn.00425250
mov ebx, eax
test ebx, ebx
jne 0x4349f8
mov eax, dword [0x4bb3d8]
cmp byte [eax], bl
je 0x43499d
push eax
push ebx
push 0x4aa190
mov ecx, esi
call fcn.0043b4b0
jmp 0x433347
cmp byte [esi + 1], 0
jbe 0x4349c6
mov eax, dword [esi + 8]
mov eax, dword [eax + 4]
cmp byte [eax], 0
je 0x4349c6
push 0x4a7935
push 0
push 0x4aa44c
mov ecx, esi
call fcn.0043b4b0
jmp 0x433347
mov ebx, dword [edi + 0x9c]
test ebx, ebx
jne 0x4349f8
mov edi, dword [edi + 0xa0]
test edi, edi
je 0x4349e0
mov ebx, dword [edi]
test ebx, ebx
jne 0x4349f8
push 0x4a7935
push 0
push 0x4ac808
mov ecx, esi
call fcn.0043b4b0
jmp 0x433347
mov eax, dword [0x4bb3dc]
push 0
push 1
push 1
push 1
call fcn.0047f5a0
add esp, 0x10
test eax, eax
jne 0x434ab5
mov esi, dword [0x4bb3dc]
push eax
call fcn.00411340
add esp, 4
test eax, eax
jne 0x434a79
mov ecx, dword [0x4bb3dc]
push 0x4a9b14
push ecx
call fcn.00492c11
add esp, 8
test eax, eax
jne 0x434a59
push ebx
push 0x4bc460
call fcn.00425120
mov esi, dword [esp + 0x48]
mov edi, 1
jmp 0x433351
mov edx, dword [0x4bb3dc]
mov ecx, dword [esp + 0x48]
push edx
push 0
push 0x4aa464
call fcn.0043b4b0
mov esi, dword [esp + 0x48]
jmp 0x433347
jle 0x434ab1
cmp eax, 2
jg 0x434ab1
mov edx, dword [0x4bb3e0]
cmp eax, 1
sete al
push 0
movzx ecx, al
push ecx
push edx
push 0x4a7935
push ebx
mov edi, 0x4bc460
call fcn.00424e60
mov esi, dword [esp + 0x48]
mov edi, 1
jmp 0x433351
mov esi, dword [esp + 0x48]
mov ecx, dword [0x4bb3dc]
cmp byte [ecx], 0
mov edx, dword [0x4bb3e0]
jne 0x434acf
cmp byte [edx], 0
je 0x434acf
mov al, 1
jmp 0x434ad1
xor al, al
push eax
push 1
push edx
push ecx
push ebx
mov edi, 0x4bc460
call fcn.00424e60
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3d8]
cmp byte [eax], 0
mov ebx, 0x10
je 0x434b1f
push 0x4ad4f0
push eax
call fcn.00492c11
add esp, 8
test eax, eax
je 0x434b1f
xor edi, edi
mov ecx, esi
call fcn.0042e160
mov edi, dword [esp + 0x4c]
mov ebx, eax
test ebx, ebx
je 0x434b24
mov eax, 1
mov byte [edi + 0xce], al
test al, al
je 0x434b4e
or eax, 0xffffffff
mov dword [edi + 0xb8], ebx
mov byte [edi + 0xcc], 0
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 0x24], eax
lea edi, [eax + 2]
jmp 0x433351
mov dword [edi + 0xb8], 5
mov byte [edi + 0xcc], 1
mov edi, 1
jmp 0x433351
mov esi, dword [0x4bb3d8]
call fcn.0041e0d0
dec eax
je 0x434c1a
dec eax
je 0x434bd0
dec eax
jne 0x434c2f
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
je 0x434bbc
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.0042e160
or eax, edx
jne 0x434bb8
mov esi, dword [esp + 0x48]
mov eax, edi
mov edi, dword [esp + 0x4c]
mov byte [edi + 0xcd], al
mov edi, eax
jmp 0x433351
mov edi, dword [esp + 0x4c]
mov esi, dword [esp + 0x48]
xor eax, eax
mov byte [edi + 0xcd], al
lea edi, [eax + 1]
jmp 0x433351
mov ecx, dword [0x4bb3dc]
cmp byte [ecx], 0
je 0x434bee
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.0042e160
mov dword [0x4bca9c], eax
mov edx, dword [0x4bb3e0]
cmp byte [edx], 0
je 0x434c2f
mov ecx, dword [esp + 0x48]
mov edi, 2
call fcn.0042e160
mov esi, dword [esp + 0x48]
mov dword [0x4bca98], eax
mov edi, 1
jmp 0x433351
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.0042e160
mov ecx, dword [esp + 0x4c]
mov dword [ecx + 0x2c], eax
mov esi, dword [esp + 0x48]
mov edi, 1
jmp 0x433351
mov ebx, dword [esi + 0xc]
test ebx, ebx
jne 0x434c60
mov edx, dword [0x4bb3d8]
push 0x4bc460
mov cl, 1
call fcn.0042ee70
mov ebx, eax
test ebx, ebx
je case.0x433058.8
mov edi, dword [0x4bb3e4]
cmp byte [edi], 0
je 0x434c9c
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x434c99
mov eax, 0x4bc460
call fcn.00425210
test eax, eax
jne 0x434c99
mov edx, dword [0x4bb3e4]
push edx
push eax
push 0x4aa190
mov ecx, esi
call fcn.0043b4b0
jmp 0x433347
mov dword [ebx + 0x10], eax
mov eax, dword [0x4bb3ec]
mov ecx, dword [0x4bb3e8]
mov edx, dword [0x4bb3e0]
push eax
push ecx
mov ecx, dword [0x4bb3dc]
push edx
push ebx
call fcn.00485380
jmp 0x433347
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x434d08
mov eax, dword [0x4bb3d8]
cmp byte [eax], 0
mov ebx, eax
je 0x433e98
mov edi, dword [0x4bc498]
test edi, edi
je 0x433e98
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00492c11
add esp, 8
test eax, eax
je 0x434d08
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x434ce6
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
je 0x434d38
push 0x4aa668
push eax
call fcn.00492c11
add esp, 8
test eax, eax
jne 0x434d38
mov al, 1
mov ecx, edi
push eax
call fcn.00485a20
mov edi, 1
jmp 0x433351
xor al, al
mov ecx, edi
push eax
call fcn.00485a20
mov edi, 1
jmp 0x433351
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x434d93
mov eax, dword [0x4bb3d8]
cmp byte [eax], 0
mov ebx, eax
je 0x433e98
mov edi, dword [0x4bc498]
test edi, edi
je 0x433e98
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00492c11
add esp, 8
test eax, eax
je 0x434d93
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x434d71
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
je 0x434df2
push 0x4ac214
push eax
call fcn.00492c11
add esp, 8
test eax, eax
jne 0x434dc3
push edi
xor edx, edx
mov cl, 0x84
call fcn.00485630
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
je 0x434df2
push 0x4aa668
push eax
call fcn.00492c11
add esp, 8
test eax, eax
jne 0x434df2
mov al, 1
push eax
push edi
call fcn.004856f0
mov edi, 1
jmp 0x433351
xor al, al
push eax
push edi
call fcn.004856f0
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3e0]
mov esi, dword [0x4bb3dc]
push eax
call fcn.00449e50
mov esi, dword [esp + 0x48]
jmp 0x433347
test ebx, ebx
jne 0x434e37
lea edi, [ebx + 1]
mov ecx, esi
call fcn.0042e160
call fcn.0041bcc0
jmp 0x433351
mov eax, dword [0x4bb3dc]
push 0
push 1
push 0
push 1
call fcn.0047f5a0
add esp, 0x10
cmp eax, 2
je 0x434e6f
mov eax, dword [0x4bb3e0]
push 0
push 1
push 0
push 1
call fcn.0047f5a0
add esp, 0x10
cmp eax, 2
jne 0x434f06
mov ecx, dword [0x4bb3dc]
cmp byte [ecx], 0
je 0x434e88
mov edi, 1
mov ecx, esi
call fcn.0042e210
jmp 0x434e8a
fldz
mov edx, dword [0x4bb3e0]
fst qword [esp + 0x68]
cmp byte [edx], 0
je 0x434eca
mov edi, 2
fstp st(0)
mov ecx, esi
call fcn.0042e210
fst qword [esp + 0xb0]
fld qword [esp + 0x68]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x434ed9
fstp qword [esp + 0x68]
fstp qword [esp + 0xb0]
jmp 0x434edd
fld qword [0x4b16e0]
fst qword [esp + 0xb0]
jmp 0x434eb4
fstp st(0)
fstp st(0)
call fcn.0041be30
fld qword [esp + 0xb0]
fld qword [esp + 0x68]
sub esp, 8
fsub st(1), st(0)
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push ebx
call fcn.0041c370
jmp 0x433347
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
je 0x434f24
mov edi, 1
mov ecx, esi
call fcn.0042e160
mov ebx, eax
mov dword [esp + 0x54], eax
jmp 0x434f2a
xor ebx, ebx
mov dword [esp + 0x54], ebx
mov ecx, dword [0x4bb3e0]
cmp byte [ecx], 0
je 0x434f45
mov edi, 2
mov ecx, esi
call fcn.0042e160
mov edi, eax
jmp 0x434f4a
mov edi, closesocket
cmp ebx, edi
jle 0x434f58
mov eax, ebx
mov ebx, edi
mov dword [esp + 0x54], ebx
mov edi, eax
call fcn.0041bde0
mov ecx, eax
mov eax, ebx
cdq
mov ebx, eax
mov dword [esp + 0x68], edx
mov eax, edi
cdq
sub eax, ebx
sbb edx, dword [esp + 0x68]
add eax, 1
adc edx, 0
push edx
push eax
push 0
push ecx
call fcn.004a2b40
add eax, dword [esp + 0x54]
jmp 0x433bff
mov eax, dword [0x4bb3dc]
push 1
push esi
call fcn.00449f60
jmp 0x433347
mov edx, dword [0x4bb3e0]
mov eax, dword [0x4bb3dc]
push edx
mov edx, dword [0x4bb3d8]
mov ecx, esi
call fcn.0044a090
jmp 0x433347
mov eax, dword [0x4bb3e0]
mov ecx, dword [0x4bb3dc]
push esi
call fcn.0044a320
jmp 0x433347
mov eax, dword [0x4bb3e4]
mov edx, dword [0x4bb3dc]
push eax
xor eax, eax
cmp cl, 0x9d
sete al
push edx
push esi
dec eax
and eax, dword [0x4bb3d8]
call fcn.0044a8a0
jmp 0x433347
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
je 0x435010
mov edi, 1
mov ecx, esi
call fcn.0042e160
dec eax
jmp 0x435012
xor eax, eax
cdq
test edx, edx
jg 0x435023
jl 0x43501d
test eax, eax
jae 0x435023
xor eax, eax
mov dword [esp + 0x6c], eax
cmp byte [esi], 0x9f
push eax
mov eax, esi
jne 0x435035
call fcn.0044b9d0
jmp 0x433347
mov edi, dword [0x4bb3d8]
call fcn.0044bac0
jmp 0x433347
mov ecx, dword [0x4bb3dc]
cmp byte [ecx], 0
je 0x435062
mov edi, 1
mov ecx, esi
call fcn.0042e160
mov ebx, eax
test ebx, ebx
jns 0x435067
mov ebx, 0x96
mov edx, dword [0x4bb3d8]
cmp byte [edx], 0
je 0x43508d
xor edi, edi
mov ecx, esi
call fcn.0042e160
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov edi, 1
jmp 0x433351
mov eax, 0x20b
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
je 0x4350c5
push 0x4ac4e4
push eax
call fcn.00492c11
add esp, 8
test eax, eax
je 0x4350eb
mov eax, dword [0x4bb3dc]
push 0x4a7dfc
push eax
call fcn.00492c11
add esp, 8
test eax, eax
je 0x4350eb
xor al, al
mov ecx, esi
push eax
mov eax, dword [0x4bb3d8]
call fcn.0044bc60
jmp 0x433347
mov eax, 1
push eax
mov eax, dword [0x4bb3d8]
mov ecx, esi
call fcn.0044bc60
jmp 0x433347
cmp byte [esi + 1], 2
jae 0x43510d
mov edi, dword [edi + 0x18]
jmp 0x43510f
xor edi, edi
mov eax, dword [0x4bb3d8]
mov ecx, dword [0x4bb3dc]
push edi
push eax
push ecx
push esi
call fcn.0044d020
jmp 0x433347
mov ecx, dword [0x4bb3dc]
push esi
call fcn.0044c6d0
jmp 0x433347
mov edx, dword [0x4bb3dc]
mov ecx, dword [0x4bb3e0]
push edx
push esi
call fcn.0044cc90
jmp 0x433347
mov eax, dword [0x4bb3d8]
mov ecx, esi
call fcn.0044d420
jmp 0x433347
mov eax, dword [0x4bb3d8]
call fcn.0045e570
mov esi, dword [esp + 0x48]
jmp 0x433347
mov ecx, dword [0x4bb3d8]
movsx eax, byte [ecx]
neg eax
sbb eax, eax
push 7
and eax, ecx
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHEmptyRecycleBinA]
test eax, eax
setne al
movzx ecx, al
push ecx
mov ebx, esi
call fcn.0043b150
jmp 0x433347
mov edi, dword [0x4bb3dc]
mov eax, dword [0x4bb3d8]
push esi
mov esi, dword [0x4bb3e0]
call fcn.0044d4b0
mov esi, dword [esp + 0x48]
jmp 0x433347
mov edi, 2
mov ecx, esi
call fcn.0042e160
mov esi, dword [0x4bb3dc]
mov ecx, dword [0x4bb3d8]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [esp + 0x48]
push eax
call fcn.0044d680
mov esi, dword [esp + 0x48]
jmp 0x433347
push 0
push ecx
mov edi, 2
mov ecx, esi
call fcn.0042e160
mov ecx, dword [0x4bb3dc]
mov edx, dword [0x4bb3d8]
add esp, 4
dec eax
neg eax
sbb eax, eax
inc eax
push eax
push ecx
push edx
call fcn.0045e820
add esp, 0x10
test al, al
sete al
movzx ecx, al
push ecx
mov ebx, esi
call fcn.0043b150
jmp 0x433347
mov edx, dword [0x4bb3e0]
mov al, byte [edx]
call fcn.00411280
cmp al, 0x52
jne 0x435275
mov eax, dword [0x4bb3dc]
mov ecx, dword [0x4bb3d8]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
sete dl
movzx eax, dl
push eax
mov ebx, esi
call fcn.0043b150
jmp 0x433347
push 1
push ecx
mov edi, 2
mov ecx, esi
call fcn.0042e160
mov ecx, dword [0x4bb3dc]
mov edx, dword [0x4bb3d8]
add esp, 4
push eax
push ecx
push edx
call fcn.0045e820
add esp, 0x10
test al, al
sete al
movzx ecx, al
push ecx
mov ebx, esi
call fcn.0043b150
jmp 0x433347
mov eax, dword [0x4bb3d8]
call fcn.0044c5e0
test al, al
sete dl
mov byte [esp + 0xbc], dl
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esp + 0xbc]
mov ecx, dword [0x4b7a70]
push edx
mov ebx, esi
mov dword [ecx + 0x30], eax
call fcn.0043b150
jmp 0x433347
mov eax, dword [0x4bb3d8]
cmp byte [eax], 0
je 0x43532b
mov edi, 1
mov ecx, esi
call fcn.0042e160
cmp eax, edi
mov eax, dword [0x4bb3d8]
sete cl
movzx edx, cl
push edx
call fcn.0045eab0
add esp, 4
test al, al
je 0x43532b
xor al, al
mov ebx, esi
push eax
call fcn.0043b150
jmp 0x433347
mov eax, 1
push eax
mov ebx, esi
call fcn.0043b150
jmp 0x433347
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
jne 0x435359
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x140]
test edi, edi
jne 0x435359
mov eax, 0x4a7935
mov ecx, esi
call fcn.0044d730
jmp 0x433347
mov ebx, dword [0x4bb3dc]
cmp byte [ebx], 0
jne 0x435382
mov edi, dword [edi + 0x10]
lea ebx, [edi + 0x140]
test edi, edi
jne 0x435382
mov ebx, 0x4a7935
mov edi, 3
mov ecx, esi
call fcn.0042e160
mov esi, dword [0x4bb3e0]
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.0041ebd0
mov edx, dword [esp + 0x4c]
push eax
mov eax, dword [0x4bb3d8]
push ebx
push edx
call fcn.0044d840
mov esi, dword [esp + 0x48]
jmp 0x433347
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
jne 0x4353d9
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x140]
test edi, edi
jne 0x4353d9
mov eax, 0x4a7935
mov ecx, dword [0x4bb3e0]
movzx edx, byte [ecx]
push edx
mov ecx, esi
call fcn.0044de30
jmp 0x433347
mov ebx, dword [0x4bb3dc]
cmp byte [ebx], 0
jne 0x43540c
mov edi, dword [edi + 0x10]
lea ebx, [edi + 0x140]
test edi, edi
jne 0x43540c
mov ebx, 0x4a7935
mov edi, 4
mov ecx, esi
call fcn.0042e160
mov esi, dword [0x4bb3e4]
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.0041ebd0
mov edx, dword [0x4bb3e0]
mov ecx, dword [esp + 0x4c]
push eax
movzx eax, byte [edx]
push eax
mov eax, dword [0x4bb3d8]
push ebx
call fcn.0044dfb0
mov esi, dword [esp + 0x48]
jmp 0x433347
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
je 0x43546e
mov ecx, dword [0x4bb3e0]
push ecx
mov edi, eax
push esi
call fcn.0044e160
jmp 0x433347
mov edi, dword [edi + 0x10]
test edi, edi
je 0x43548d
mov ecx, dword [0x4bb3e0]
push ecx
add edi, 0x140
push esi
call fcn.0044e160
jmp 0x433347
mov ecx, dword [0x4bb3e0]
push ecx
mov edi, 0x4a7935
push esi
call fcn.0044e160
jmp 0x433347
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
jne 0x4354c0
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x140]
test edi, edi
jne 0x4354c0
mov eax, 0x4a7935
mov ecx, esi
call fcn.0045e670
jmp 0x433347
mov eax, dword [0x4bb3d8]
call fcn.0044be50
xor edx, edx
cmp dword [edi + 0xe4], edx
sete dl
mov edi, edx
jmp 0x433349
mov eax, dword [0x4bb3e8]
mov ecx, dword [0x4bb3e4]
mov edx, dword [0x4bb3dc]
push eax
push ecx
mov ecx, dword [0x4bb3e0]
push edx
push esi
call fcn.0044c060
jmp 0x433347
mov eax, dword [0x4bb3e0]
mov ecx, dword [0x4bb3dc]
push eax
push ecx
mov ecx, dword [0x4bb3e4]
mov edx, esi
call fcn.0045dc30
jmp 0x433347
mov edx, dword [0x4bb3d8]
push edx
push esi
call fcn.0045df50
jmp 0x433347
mov eax, dword [0x4bb3f8]
mov ecx, dword [0x4bb3f0]
mov edx, dword [0x4bb3ec]
mov edi, dword [0x4bb3f4]
push eax
mov eax, dword [0x4bb3e4]
push ecx
mov ecx, dword [0x4bb3dc]
push edx
mov edx, dword [0x4bb3d8]
push eax
mov eax, dword [0x4bb3e8]
push ecx
mov ecx, dword [0x4bb3e0]
push edx
push esi
call fcn.0045e300
jmp 0x433347
push 0
mov ecx, 4
call fcn.004466e0
add esp, 4
jmp 0x433347
mov esi, dword [0x4bb3d8]
push 7
call fcn.00411340
add esp, 4
cmp eax, 7
jne 0x4355c1
push 0
lea ecx, [eax - 6]
call fcn.004466e0
mov esi, dword [esp + 0x4c]
add esp, 4
jmp 0x433347
cmp byte [edi + 0xd9], 0
je 0x4355ed
mov ecx, dword [0x4bbd24]
test ecx, ecx
jle 0x4355d7
dec ecx
jmp 0x4355dc
mov ecx, 0x18f
mov dword [0x4bbd24], ecx
mov dword [ecx*4 + 0x4bbd28], 0
mov esi, dword [esp + 0x48]
cmp eax, 1
sete al
mov byte [edi + 0xd9], al
mov edi, 1
jmp 0x433351
push 0
mov ecx, 2
call fcn.004466e0
add esp, 4
jmp 0x433347
push 0
mov ecx, 3
call fcn.004466e0
add esp, 4
jmp 0x433347
mov ebx, dword [0x4b7a70]
add ebx, 0x4c
call fcn.00466c80
test eax, eax
je 0x43564f
mov ecx, dword [0x4b7a70]
mov edx, dword [ecx + 0x4c]
mov ebx, dword [edx + 4]
jmp 0x435651
xor ebx, ebx
mov al, byte [esi + 1]
test al, al
jne 0x43566f
fldz
sub esp, 8
fstp qword [esp]
push ebx
push 0
push 0x10000
push 0x4ad4f4
jmp 0x4356b6
cmp al, 1
jne 0x43568b
fldz
mov eax, dword [0x4bb3d8]
sub esp, 8
fstp qword [esp]
push ebx
push 0
push 0x10000
push eax
jmp 0x4356b6
mov edi, 3
mov ecx, esi
call fcn.0042e210
mov ecx, dword [0x4bb3dc]
sub esp, 8
fstp qword [esp]
push ebx
push ecx
xor edi, edi
mov ecx, esi
call fcn.0042e160
mov edx, dword [0x4bb3e0]
push eax
push edx
call fcn.00484510
mov edi, eax
add esp, 0x18
test edi, edi
jne 0x4356ea
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x59e
jne 0x4356ea
mov eax, dword [0x4bb3d8]
push eax
push 0
push 0x4aa44c
mov ecx, esi
call fcn.0043b4b0
jmp 0x433347
xor ecx, ecx
test edi, edi
setne cl
mov edi, ecx
jmp 0x433349
mov edx, dword [0x4bb3f4]
cmp byte [edx], 0
je 0x435715
mov edi, 7
mov ecx, esi
call fcn.0042e160
mov dword [esp + 0x60], eax
jmp 0x43571d
mov dword [esp + 0x60], connect
mov eax, dword [0x4bb3f0]
cmp byte [eax], 0
je 0x435739
mov edi, 6
mov ecx, esi
call fcn.0042e160
mov dword [esp + 0x54], eax
jmp 0x435741
mov dword [esp + 0x54], connect
mov ecx, dword [0x4bb3ec]
cmp byte [ecx], 0
je 0x43575e
mov edi, 5
mov ecx, esi
call fcn.0042e160
mov dword [esp + 0x7c], eax
jmp 0x435766
mov dword [esp + 0x7c], connect
mov edx, dword [0x4bb3e8]
cmp byte [edx], 0
je 0x435783
mov edi, 4
mov ecx, esi
call fcn.0042e160
mov dword [esp + 0x74], eax
jmp 0x43578b
mov dword [esp + 0x74], connect
mov edi, 9
mov ecx, esi
call fcn.0042e210
mov eax, dword [0x4bb400]
mov ecx, dword [0x4bb3f8]
sub esp, 8
fstp qword [esp]
push eax
mov al, byte [ecx]
call fcn.00411280
mov ecx, dword [esp + 0x6c]
cmp al, 0x4c
sete dl
movzx eax, dl
mov edx, dword [esp + 0x60]
push eax
mov eax, dword [esp + 0x8c]
push ecx
mov ecx, dword [0x4bb3e4]
push edx
push eax
mov al, byte [ecx]
call fcn.00411280
mov edx, dword [0x4bb3e0]
mov edi, dword [esp + 0x90]
cmp al, 0x48
mov eax, dword [0x4bb3dc]
push edx
push eax
sete cl
push ebx
call fcn.00446980
add esp, 0x28
jmp 0x433347
mov ecx, dword [0x4bb3dc]
cmp byte [ecx], 0
je 0x43581a
mov edi, 1
mov ecx, esi
call fcn.0042e160
mov ebx, eax
jmp 0x43581c
xor ebx, ebx
mov edx, dword [0x4bb3d8]
cmp byte [edx], 0
je 0x435832
xor edi, edi
mov ecx, esi
call fcn.0042e160
jmp 0x435837
mov eax, 0xc8
mov ecx, dword [0x4bb3e4]
mov edx, dword [0x4bb3e0]
push ecx
push edx
push ebx
push eax
call fcn.0045c370
jmp 0x433347
mov eax, dword [0x4bb450]
test eax, eax
je 0x435871
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x435871
mov eax, dword [0x4bb450]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4bb450], 0
mov edi, 1
jmp 0x433351
mov ecx, dword [0x4bb3e8]
mov edx, dword [0x4bb3e4]
mov eax, dword [0x4bb3e0]
push 0
push ecx
mov ecx, dword [0x4bb3dc]
push edx
mov edx, dword [0x4bb3d8]
push eax
push ecx
push edx
push esi
mov ecx, 0x4a7935
call fcn.0043d150
jmp 0x433347
mov eax, dword [0x4bb3ec]
mov ecx, dword [0x4bb3e8]
mov edx, dword [0x4bb3e4]
push 1
push eax
mov eax, dword [0x4bb3e0]
push ecx
mov ecx, dword [0x4bb3dc]
push edx
push eax
push ecx
mov ecx, dword [0x4bb3d8]
push esi
call fcn.0043d150
jmp 0x433347
mov edx, dword [0x4bb3e0]
mov eax, dword [0x4bb3dc]
mov ecx, dword [0x4bb3d8]
push edx
push eax
push ecx
mov ecx, dword [0x4bb3e4]
push esi
call fcn.0043e330
jmp 0x433347
mov edx, dword [0x4bb3dc]
mov eax, dword [0x4bb3d8]
mov edi, dword [0x4bb3e4]
mov esi, dword [0x4bb3e0]
push edx
push eax
call fcn.0043e700
mov esi, dword [esp + 0x48]
jmp 0x433347
mov ecx, esi
call fcn.0043f410
jmp 0x433347
mov esi, dword [0x4bb3dc]
call fcn.0041ee70
mov esi, dword [0x4bb3d8]
movzx ebx, ax
call fcn.0041eee0
movzx ecx, ax
cmp ecx, 0xffffffff
je 0x43598a
cmp ebx, 0xffffffff
je 0x43598a
mov eax, 3
shl ax, cl
shl bx, cl
not ax
and ax, word [edi + 0xd0]
or ax, bx
mov word [edi + 0xd0], ax
mov esi, dword [esp + 0x48]
mov edi, 1
jmp 0x433351
xor edi, edi
mov ecx, esi
call fcn.0042e160
mov ecx, dword [esp + 0x4c]
mov byte [ecx + 0xcf], al
cmp al, 0x64
jbe case.0x435d9b.69
mov byte [ecx + 0xcf], 2
mov edi, 1
jmp 0x433351
mov ecx, dword [edi + 0xb4]
mov eax, dword [0x4bb3d8]
push ecx
call fcn.0041eb40
mov dword [edi + 0xb4], eax
add esp, 4
mov edi, 1
jmp 0x433351
xor edi, edi
mov ecx, esi
call fcn.0042e160
cmp eax, 0x64
ja case.0x435d9b.69
mov edx, dword [esp + 0x4c]
mov byte [edx + 0xd6], al
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3e0]
push 0x4ab668
push eax
call fcn.00492c11
add esp, 8
test eax, eax
jne 0x435a65
mov ecx, dword [0x4bb3d8]
cmp byte [ecx], al
je 0x435a3f
xor edi, edi
mov ecx, esi
call fcn.0042e160
mov edx, dword [esp + 0x4c]
mov dword [edx + 0x60], eax
mov eax, dword [0x4bb3dc]
cmp byte [eax], 0
je case.0x435d9b.69
mov edi, 1
mov ecx, esi
call fcn.0042e160
mov ecx, dword [esp + 0x4c]
mov dword [ecx + 0x68], eax
jmp 0x433351
mov edx, dword [0x4bb3d8]
cmp byte [edx], 0
je 0x435a80
xor edi, edi
mov ecx, esi
call fcn.0042e160
mov ecx, dword [esp + 0x4c]
mov dword [ecx + 0x5c], eax
mov edx, dword [0x4bb3dc]
cmp byte [edx], 0
je case.0x435d9b.69
mov edi, 1
mov ecx, esi
call fcn.0042e160
mov ecx, dword [esp + 0x4c]
mov dword [ecx + 0x64], eax
jmp 0x433351
mov edx, dword [0x4bb3dc]
push 0x4ab668
push edx
call fcn.00492c11
add esp, 8
xor edi, edi
mov ecx, esi
test eax, eax
jne 0x435ad9
call fcn.0042e160
mov ecx, dword [esp + 0x4c]
mov dword [ecx + 0x70], eax
mov edi, 1
jmp 0x433351
call fcn.0042e160
mov edx, dword [esp + 0x4c]
mov dword [edx + 0x6c], eax
mov edi, 1
jmp 0x433351
xor edi, edi
mov ecx, esi
call fcn.0042e160
mov ecx, dword [esp + 0x4c]
mov dword [ecx + 0x54], eax
mov edi, 1
jmp 0x433351
xor edi, edi
mov ecx, esi
call fcn.0042e160
mov edx, dword [esp + 0x4c]
mov dword [edx + 0x58], eax
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3d8]
push 0x4ac4c4
call fcn.0047fa90
add esp, 4
mov ecx, esi
test eax, eax
je 0x435b60
mov dword [edi], 0xffffffff
mov dword [edi + 4], 0xffffffff
xor edi, edi
call fcn.0042e160
mov ecx, dword [esp + 0x4c]
mov dword [ecx + 0x24], eax
mov edi, 1
jmp 0x433351
mov dword [edi + 0x24], 0xffffffff
xor edi, edi
call fcn.0042e160
mov ecx, dword [esp + 0x4c]
mov dword [ecx + 4], edx
mov edx, eax
or edx, dword [ecx + 4]
mov dword [ecx], eax
jne case.0x435d9b.69
mov dword [ecx + 4], edi
mov dword [ecx], 0xa
lea edi, [edx + 1]
jmp 0x433351
mov esi, dword [0x4bb3d8]
push 7
call fcn.00411340
add esp, 4
cmp eax, 7
je 0x435bb4
cmp eax, 1
sete al
mov byte [edi + 0xd3], al
mov esi, dword [esp + 0x48]
mov edi, 1
jmp 0x433351
mov esi, dword [0x4bb3d8]
call fcn.0041d400
dec eax
cmp eax, 5
ja case.default.0x435bd7
jmp dword [eax*4 + 0x436d9c]
mov esi, dword [esp + 0x48]
mov dword [edi + 0x20], 1
mov edi, 1
jmp 0x433351
mov esi, dword [esp + 0x48]
mov dword [edi + 0x20], 2
mov edi, 1
jmp 0x433351
mov esi, dword [esp + 0x48]
mov dword [edi + 0x20], 4
mov edi, 1
jmp 0x433351
mov esi, dword [esp + 0x48]
mov dword [edi + 0x20], 3
mov edi, 1
jmp 0x433351
mov esi, dword [esp + 0x48]
mov byte [edi + 0xc9], 1
mov edi, 1
jmp 0x433351
mov esi, dword [esp + 0x48]
mov byte [edi + 0xc9], 0
mov edi, 1
jmp 0x433351
mov ecx, dword [0x4bb3d8]
push ecx
mov ecx, dword [esp + 0x4c]
push 0
push 0x4aa44c
call fcn.0043b4b0
mov esi, dword [esp + 0x48]
jmp 0x433347
mov edx, dword [0x4bb3d8]
push 5
push 0x4ab720
push edx
call fcn.0049353e
add esp, 0xc
test eax, eax
jne 0x435d60
lea edi, [eax + 1]
mov ecx, esi
call fcn.0042e0e0
cmp eax, 0x1e
jae 0x433351
mov ecx, esi
call fcn.0042e160
mov edi, eax
mov eax, dword [0x4bb3dc]
push 0x2e
push eax
mov ebx, edx
call fcn.004945a1
add esp, 8
mov dword [esp + 0x60], eax
test eax, eax
je 0x435cde
mov esi, eax
inc esi
call fcn.004040e0
mov esi, dword [esp + 0x48]
jmp 0x435ce2
xor eax, eax
xor edx, edx
add edi, eax
adc ebx, edx
add edi, 2
adc ebx, 0
mov dword [esp + 0x6c], ebx
js 0x435d04
jg case.0x435d9b.69
cmp edi, 0xff
ja case.0x435d9b.69
mov eax, dword [0x4bb3dc]
push 0
push 1
push 1
push 1
call fcn.0047f5a0
add esp, 0x10
mov ecx, 0x4ad50c
test eax, eax
jne 0x435d27
mov ecx, 0x4a7935
cmp dword [esp + 0x60], 0
mov eax, 0x4a7935
jne 0x435d38
mov eax, 0x4acb80
mov edx, dword [esp + 0x4c]
push ecx
mov ecx, dword [0x4bb3dc]
push eax
push ecx
add edx, 0x74
push str.___s_s_s
push edx
call fcn.00493c7e
add esp, 0x14
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3d8]
push 7
push 0x4ab718
push eax
call fcn.0049353e
add esp, 0xc
test eax, eax
jne case.0x435d9b.69
mov ecx, dword [0x4bb3dc]
mov al, byte [ecx]
movsx ecx, al
add ecx, 0xffffffbc
cmp ecx, 0x24
ja case.0x435d9b.69
movzx edx, byte [ecx + 0x436dc0]
jmp dword [edx*4 + 0x436db4]
mov byte [edi + 0xd5], 0x44
mov edi, 1
jmp 0x433351
mov byte [edi + 0xd5], al
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3e0]
mov ecx, dword [0x4bb3dc]
push eax
call fcn.00447960
jmp 0x433347
mov al, byte [esi + 1]
mov cl, 4
cmp cl, al
sbb edx, edx
and edx, dword [0x4bb398]
mov cl, 3
push edx
cmp cl, al
mov eax, dword [0x4bb3ec]
mov ecx, dword [0x4bb3e8]
sbb edx, edx
and edx, dword [0x4bb394]
push edx
mov edx, dword [0x4bb3e4]
push eax
mov eax, dword [0x4bb3e0]
push ecx
mov ecx, dword [0x4bb3d8]
push edx
push eax
mov eax, dword [0x4bb3dc]
push ecx
push 0x4bc460
call fcn.00474d60
jmp 0x433347
mov edx, dword [0x4bb3e4]
mov eax, dword [0x4bb3e0]
mov ecx, dword [0x4bb3dc]
push edx
push eax
push ecx
mov ecx, dword [0x4bb3d8]
push 0x4bc460
call fcn.00466cf0
jmp 0x433347
mov ecx, dword [0x4bb3dc]
mov dl, 2
cmp dl, byte [esi + 1]
mov edx, dword [0x4bb3d8]
sbb eax, eax
and eax, dword [0x4bb390]
push eax
mov eax, dword [0x4bb3e0]
push ecx
push edx
push esi
call fcn.00467640
jmp 0x433347
mov eax, dword [0x4bb3e4]
mov ecx, dword [0x4bb3e0]
mov edx, dword [0x4bb3dc]
push eax
push ecx
push edx
push esi
call fcn.00468600
jmp 0x433347
mov eax, dword [0x4bb3d8]
call fcn.0041ea30
cmp eax, 7
ja case.0x435d9b.69
jmp dword [eax*4 + 0x436de8]
cmp byte [0x4bb5a8], 0
jne case.0x435d9b.69
call fcn.0043ada0
mov edi, 1
jmp 0x433351
cmp byte [0x4bb5a8], 0
je case.0x435d9b.69
call fcn.0043ada0
mov edi, 1
jmp 0x433351
mov edi, 1
mov ecx, esi
call fcn.0042e160
test eax, eax
mov eax, dword [0x4bb3d8]
setne cl
movzx edx, cl
push edx
call fcn.004113b0
push eax
push esi
call fcn.0043adf0
jmp 0x433347
mov esi, dword [0x4bb3d8]
push 7
call fcn.00411340
add esp, 4
cmp eax, 7
je 0x435f3d
cmp eax, 1
sete al
mov byte [edi + 0xd4], al
mov esi, dword [esp + 0x48]
mov edi, 1
jmp 0x433351
mov esi, dword [0x4bb3d8]
call fcn.0041e9c0
mov byte [edi + 0xd2], al
cmp al, 4
jne 0x435f67
mov byte [edi + 0xd2], 0
mov esi, dword [esp + 0x48]
mov edi, 1
jmp 0x433351
mov esi, dword [0x4bb3d8]
push 7
call fcn.00411340
add esp, 4
cmp eax, 7
je 0x435f96
cmp eax, 1
sete cl
mov byte [edi + 0xca], cl
mov esi, dword [esp + 0x48]
mov edi, 1
jmp 0x433351
mov esi, dword [0x4bb3d8]
push 7
call fcn.00411340
add esp, 4
cmp eax, 7
je 0x435fc5
cmp eax, 1
sete dl
mov byte [edi + 0xcb], dl
mov esi, dword [esp + 0x48]
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3d8]
call fcn.0041ea90
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x435d9b.69
movzx ecx, byte [ecx + 0x436e20]
jmp dword [ecx*4 + 0x436e08]
push 1
call dword [sym.imp.USER32.dll_BlockInput]
mov byte [0x4bbc5c], 1
mov edi, 1
jmp 0x433351
push 0
call dword [sym.imp.USER32.dll_BlockInput]
mov byte [0x4bbc5c], 0
mov edi, 1
jmp 0x433351
mov dword [0x4b7a80], eax
mov edi, 1
jmp 0x433351
or byte [0x4bbc5e], 2
cmp dword [0x4bb57c], 0
mov byte [0x4bbc5d], 1
jne case.0x435d9b.69
mov edx, dword [0x4b8c98]
movzx eax, word [edx]
push eax
call fcn.0040fa70
add esp, 4
mov edi, 1
jmp 0x433351
mov byte [0x4bbc5d], 0
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3d8]
mov edi, str._a_a_a_v
mov cl, 0x90
call fcn.0044e320
jmp 0x433347
mov eax, dword [0x4bb3d8]
mov edi, 0x4b7a78
mov cl, 0x14
call fcn.0044e320
jmp 0x433347
mov eax, dword [0x4bb3d8]
mov edi, 0x4b7a7c
mov cl, 0x91
call fcn.0044e320
jmp 0x433347
mov ebx, 0x4bc460
call fcn.00420570
mov edi, 1
jmp 0x433351
push 1
mov ebx, 0x4bc460
call fcn.00420700
mov edi, 1
jmp 0x433351
xor edi, edi
mov ecx, esi
call fcn.0042e160
push 1
push eax
call fcn.004014b0
add esp, 8
mov edi, 1
jmp 0x433351
mov ecx, dword [0x4bb3e4]
mov edx, dword [0x4bb3e0]
push ecx
mov ecx, dword [0x4bb3e8]
push edx
mov edx, dword [0x4bb3dc]
call fcn.0047bbb0
jmp 0x433347
mov eax, dword [0x4bb3d8]
mov ecx, dword [0x4bb3e0]
mov edx, dword [0x4bb3dc]
push eax
mov eax, dword [0x4bb3e4]
push esi
call fcn.0047bcb0
jmp 0x433347
cmp byte [esi + 1], 3
mov edx, dword [0x4bb3dc]
sbb ecx, ecx
not ecx
and ecx, dword [0x4bb3e0]
mov ebx, esi
push ecx
push edx
mov edx, dword [0x4bb3d8]
call fcn.0047bdd0
jmp 0x433347
cmp byte [esi + 1], 2
jae 0x43619e
mov edi, dword [edi + 0x14]
test edi, edi
je 0x43619e
lea eax, [edi + 0x408]
push eax
mov eax, dword [edi + 4]
lea ecx, [edi + 8]
push ecx
push esi
call fcn.0047be40
jmp 0x433347
mov ecx, dword [0x4bb3dc]
lea edx, [esp + 0x67]
push edx
lea eax, [esp + 0x88]
push eax
push 2
push ecx
call fcn.0041cdb0
mov ebx, eax
mov eax, dword [esp + 0x94]
add esp, 0x10
test eax, eax
jne 0x4361dd
mov eax, dword [0x4bb3e0]
mov ecx, dword [0x4bb3e4]
mov dword [esp + 0x84], eax
jmp 0x4361e3
mov ecx, dword [0x4bb3e0]
push ecx
push eax
push esi
mov eax, ebx
call fcn.0047be40
cmp byte [esp + 0x67], 0
mov edi, eax
je 0x433349
test ebx, ebx
je 0x433349
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x433349
cmp byte [esi + 1], 2
jae 0x436241
mov edi, dword [edi + 0x14]
test edi, edi
je 0x436241
mov ecx, dword [edi + 0x808]
lea edx, [edi + 0x408]
push edx
lea eax, [edi + 8]
push eax
mov eax, dword [edi + 4]
push ecx
mov ecx, dword [0x4bb3d8]
push esi
call fcn.0047c170
jmp 0x433347
mov ecx, dword [0x4bb3dc]
lea edx, [esp + 0x67]
push edx
lea eax, [esp + 0x88]
push eax
push 2
push ecx
call fcn.0041cdb0
mov ebx, eax
mov eax, dword [esp + 0x94]
add esp, 0x10
test eax, eax
jne 0x436286
mov eax, dword [0x4bb3e0]
mov ecx, dword [0x4bb3e4]
mov edi, dword [0x4bb3e8]
mov dword [esp + 0x84], eax
jmp 0x436292
mov ecx, dword [0x4bb3e0]
mov edi, dword [0x4bb3e4]
mov esi, dword [0x4bb3d8]
push ecx
push eax
call fcn.0041cf60
mov edx, dword [esp + 0x50]
push eax
push edx
mov ecx, edi
mov eax, ebx
call fcn.0047c170
cmp byte [esp + 0x67], 0
mov edi, eax
je 0x4362c2
test ebx, ebx
je 0x4362c2
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [esp + 0x48]
jmp 0x433349
cmp byte [esi + 1], 1
jae 0x436345
mov eax, dword [edi + 0x14]
test eax, eax
je 0x436345
cmp dword [eax + 0x808], 0xfffffffe
lea ecx, [eax + 8]
jne 0x436325
cmp byte [ecx], 0
je 0x43631b
add eax, 0x408
push eax
push ecx
push 0x4ad51c
mov esi, 0x400
lea edi, [esp + 0x18c]
call fcn.0047f710
mov esi, dword [esp + 0x54]
add esp, 0xc
mov ecx, edi
mov edi, dword [esp + 0x4c]
xor eax, eax
jmp 0x43632a
lea ecx, [eax + 0x408]
xor eax, eax
jmp 0x43632a
add eax, 0x408
push eax
mov eax, dword [edi + 0x14]
mov eax, dword [eax + 4]
push esi
mov edi, ecx
mov dword [esp + 0x8c], ecx
call fcn.0047c5a0
jmp 0x433347
mov eax, dword [0x4bb3d8]
lea ecx, [esp + 0x67]
push ecx
lea edx, [esp + 0x88]
push edx
push 2
push eax
call fcn.0041cdb0
add esp, 0x10
cmp dword [esp + 0x84], 0
mov ebx, eax
jne 0x436383
mov ecx, dword [0x4bb3dc]
mov edi, dword [0x4bb3e0]
mov dword [esp + 0x84], ecx
jmp 0x436389
mov edi, dword [0x4bb3dc]
cmp byte [edi], 0
jne 0x436392
xor edi, edi
jmp 0x4363a9
push 0x4ad524
push edi
call fcn.00492c11
add esp, 8
test eax, eax
jne 0x4363a9
mov edi, 0x4a7935
push edi
mov edi, dword [esp + 0x88]
push esi
mov eax, ebx
call fcn.0047c5a0
cmp byte [esp + 0x67], 0
mov edi, eax
je 0x433349
test ebx, ebx
je 0x433349
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x433349
mov esi, dword [0x4bb3d8]
call fcn.0041cfe0
mov esi, eax
cmp esi, 0xffffffff
jne 0x4363f8
mov edx, dword [0x4bb3d8]
push edx
jmp 0x435c63
call fcn.00480b60
test eax, eax
je 0x436407
mov dword [edi + 0xb0], esi
mov esi, dword [esp + 0x48]
mov edi, 1
jmp 0x433351
mov eax, dword [0x4bb3d8]
push eax
mov ecx, 0x4bc3d8
call fcn.0040a8b0
test al, al
jne case.0x435d9b.69
mov ecx, dword [0x4bb3d8]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edi, 1
jmp 0x433351
xor edi, edi
mov ecx, esi
call fcn.0042e160
push eax
call fcn.0045f040
xor edx, edx
add esp, 4
test al, al
setne dl
mov edi, edx
jmp 0x433349
mov eax, dword [0x4bb3d8]
call fcn.0041f0a0
cmp eax, 0xffffffff
jne 0x43648c
mov eax, dword [0x4bb3d8]
push eax
push 0
push 0x4aa44c
mov ecx, esi
call fcn.0043b4b0
jmp 0x433347
mov dword [edi + 0xdc], eax
mov edi, 1
jmp 0x433351
xor edi, edi
mov eax, edi
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x78]
mov dword [edx], eax
jmp case.0x432198.116
mov ecx, dword [esp + 0x78]
mov dword [ecx], eax
mov eax, edi
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, 1
cmp edi, 7
je 0x432169
mov eax, edi
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test ebx, ebx
je 0x436568
cmp dword [ebx + 8], 0
jne 0x436568
mov ecx, dword [0x4bb388]
test ecx, ecx
je 0x436559
cmp byte [ecx + 0x17], 0
jne 0x436527
mov eax, dword [ecx + 0xc]
jmp 0x436529
mov eax, ecx
test byte [eax + 0x15], 2
je 0x436559
mov eax, ebx
call fcn.0041c540
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [ebx + 8], 0
mov ecx, dword [0x4bb3d8]
mov dword [ebx], ecx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x43659d
mov edx, dword [esp + 0x78]
mov dword [edx], esi
jmp case.0x432198.116
mov eax, 5
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x4365c6
mov eax, dword [esp + 0x78]
mov dword [eax], esi
mov eax, 6
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4bb3dc]
push ecx
mov ecx, dword [esp + 0x4c]
push 0
push 0x4aa464
call fcn.0043b4b0
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4bb3e0]
push edx
push 0
push 0x4aa47c
mov ecx, esi
call fcn.0043b4b0
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [esp + 0x54], 0
je 0x436650
lea esi, [esp + 0x54]
call fcn.0043bc60
mov eax, dword [esp + 0x60]
test eax, eax
je 0x432169
cmp eax, 8
je 0x432169
mov ecx, dword [0x4bc7d4]
push 0x4a7935
push 0
push 0x4ad1c8
call fcn.0043b4b0
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x78]
mov dword [ecx], edx
mov eax, edi
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [esi + 1], 0
jne 0x4366de
push 0x4a7935
push 0
push 0x4ad460
mov ebx, esi
call fcn.0043b050
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x10
call fcn.00493892
mov edi, eax
xor eax, eax
add esp, 4
cmp edi, eax
jne 0x436719
push 0x4a7935
push eax
push 0x4aa228
mov ecx, esi
call fcn.0043b4b0
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4bc374]
mov ecx, dword [0x4bc378]
push eax
mov dword [esp + 0x64], edx
lea edx, [esp + 0x64]
push edx
push eax
push esi
lea ebx, [esp + 0x64]
mov esi, edi
mov dword [esp + 0x64], ecx
mov dword [0x4bc374], eax
mov dword [0x4bc378], eax
call fcn.00465820
mov ebx, dword [esp + 0x60]
mov esi, eax
cmp esi, 1
jne 0x4367a0
cmp dword [edi + 8], 0
jne 0x4367a0
cmp dword [edi], ebx
jne 0x4367a0
cmp dword [esp + 0x54], 0x400000
mov dword [edi + 0xc], ebx
jbe 0x436805
mov ecx, dword [esp + 0x48]
mov esi, dword [esp + 0x80]
dec dword [0x4bc37c]
push ecx
call fcn.0043b110
xor eax, eax
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test ebx, ebx
je 0x4367d7
mov eax, dword [0x4bc374]
test eax, eax
je 0x4367c8
push eax
call fcn.00492c28
add esp, 4
cmp dword [0x4bc378], 0x400000
jbe 0x4367c8
dec dword [0x4bc37c]
mov eax, dword [esp + 0x54]
mov dword [0x4bc374], ebx
mov dword [0x4bc378], eax
cmp esi, 1
je 0x4367fe
push edi
call fcn.00492988
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 0xc], 0
mov ecx, dword [esp + 0x48]
mov esi, dword [esp + 0x80]
push ecx
call fcn.0043b110
xor eax, eax
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4b8c98]
cmp word [edx], 0
jne 0x43685f
cmp dword [0x4bbcbc], 0
jne 0x43685f
cmp dword [0x4bb578], 0
jne 0x43685f
cmp dword [0x4bb57c], 0
jne 0x43685f
cmp byte [0x4bb585], 0
je case.0x432198.224
mov eax, 8
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor edi, edi
mov ecx, esi
call fcn.0042e160
push eax
push 6
mov ecx, 0x4bc460
call fcn.00420790
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x78]
mov dword [ecx], eax
jmp case.0x432198.116
mov edx, dword [esp + 0x78]
mov dword [edx], eax
mov eax, edi
mov ecx, dword [esp + 0x5b4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je case.0x432198.116
push 0x4a7935
push 0
push 0x4ad47c
mov ecx, esi
call fcn.0043b4b0
mov ecx, dword [esp + 0x5b4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc