Function at 0x4016b8
Capabilities:
Copy file
Create shortcut via ishelllink
Delete file
Delete registry value
Enumerate files on windows
Get file attributes
Move file
Query environment variable
Query or enumerate registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Set current directory
Set file attributes
Set registry value

Disassembly:
push ebp
mov ecx, 7
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x284]
push ebx
sub esp, 0x2bc
mov esi, dword [ebp + 8]
mov eax, dword [0x43cb08]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x2a4], eax
mov ebx, dword [ebp - 0x280]
mov esi, dword [ebp - 0x27c]
mov edi, dword [ebp - 0x284]
mov eax, ebx
shl eax, 0xb
add eax, dword [0x40c8f4]
mov dword [ebp - 0x29c], eax
mov eax, esi
shl eax, 0xb
add eax, dword [0x40c8f4]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x280]
mov dword [0x41405c], eax
lea eax, [edi - 2]
cmp eax, 0x43
ja case.0x40172a.66
jmp dword [eax*4 + 0x40c008]
mov dword [esp + 4], 0
mov dword [esp], ebx
jmp 0x401d3c
inc dword [0x43db20]
cmp dword [ebp - 0x2a4], 0
mov ebx, 0x7fffffff
je case.0x40172a.2
mov dword [esp], 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push esi
jmp case.0x40172a.2
mov dword [esp], ebx
call fcn.00401675
push edx
dec eax
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00403ba8
mov ebx, eax
push ecx
push ecx
jmp case.0x40172a.2
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.004073f5
jmp 0x402663
xor eax, eax
call fcn.0040146a
mov edx, 1
test eax, eax
cmovle eax, edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4017cf
mov eax, dword [ebp - 0x2a4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push eax
jmp case.0x40172a.66
mov edi, dword [ebp - 0x278]
test edi, edi
jne 0x401809
mov eax, dword [ebx*4 + 0x43ca20]
mov dword [ebx*4 + 0x43c9e0], eax
mov eax, 1
call fcn.0040146a
mov edx, dword [ebp - 0x280]
mov dword [edx*4 + 0x43ca20], eax
jmp 0x403b94
mov eax, dword [ebx*4 + 0x43c9e0]
mov dword [ebx*4 + 0x43ca20], eax
jmp case.0x40172a.66
mov edx, dword [ebp - 0x278]
xor ecx, ecx
mov eax, dword [edx*4 + 0x43ca20]
test eax, eax
sete cl
and eax, dword [ebp - 0x274]
mov ebx, dword [ebp + ecx*4 - 0x280]
mov dword [edx*4 + 0x43ca20], eax
jmp case.0x40172a.2
mov eax, dword [esi*4 + 0x43ca20]
jmp 0x402802
mov eax, dword [0x43db24]
test eax, eax
je 0x40186d
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push eax
push eax
mov eax, dword [0x43db28]
test eax, eax
je case.0x40172a.66
mov edx, dword [ebp - 0x280]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x402663
mov dword [esp], 0xfffffff0
call fcn.00401414
mov edx, dword [ebp - 0x27c]
push edi
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
jmp 0x401b6e
mov dword [esp], 0xfffffff0
xor edi, edi
call fcn.00401414
push ebx
mov ebx, eax
mov dword [esp], eax
call fcn.00407d79
push esi
test eax, eax
je 0x40195b
mov dword [esp + 4], 0x5c
mov dword [esp], eax
call fcn.00407cd9
mov esi, eax
push ecx
push ecx
mov ax, word [eax]
mov word [esi], 0
mov word [ebp - 0x29c], ax
test ax, ax
jne 0x40191d
cmp dword [ebp - 0x278], 0
je 0x40191d
call fcn.00408fdb
test eax, eax
je 0x40191d
mov dword [esp], ebx
call fcn.00407ad8
jmp 0x401925
mov dword [esp], ebx
call fcn.00407b6c
push edx
test eax, eax
je 0x401947
cmp eax, 0xb7
je 0x401934
inc edi
jmp 0x401947
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
and eax, 0x10
push ecx
cmp eax, 1
adc edi, 0
mov ecx, dword [ebp - 0x29c]
lea eax, [esi + 2]
mov word [esi], cx
test cx, cx
jmp 0x4018d3
cmp dword [ebp - 0x27c], 0
je 0x40199e
mov dword [esp], 0xffffffe6
call fcn.00401699
mov eax, dword [0x40c8f4]
push esi
add eax, 0xb000
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00408447
push eax
push eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
cmp eax, 1
push edx
adc edi, 0
jmp 0x403b94
mov dword [esp], 0xfffffff5
jmp 0x4038bb
mov dword [esp], 0
call fcn.00401414
push ecx
mov dword [esp], eax
call fcn.00408b8e
jmp 0x4023c5
mov dword [esp], 0xffffffd0
call fcn.00401414
push ecx
mov ebx, eax
mov dword [esp], 0xffffffdf
call fcn.00401414
push esi
mov esi, eax
mov dword [esp], 0x13
call fcn.00401414
push edi
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov edi, eax
push edx
push edx
test eax, eax
je 0x401a10
mov dword [esp], 0xffffffe3
jmp 0x402caf
cmp dword [ebp - 0x278], 0
je 0x403aca
mov dword [esp], ebx
call fcn.00408b8e
push edx
test eax, eax
je 0x403aca
mov dword [esp], ebx
mov dword [esp + 4], esi
call fcn.00408b49
push ebx
push ebx
mov dword [esp], 0xffffffe4
jmp 0x4038bb
mov dword [esp], 0
call fcn.00401414
push ecx
mov ebx, eax
lea eax, [ebp - 0x268]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 4], 0x400
mov dword [esp + 8], eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
test eax, eax
je 0x401abb
mov eax, dword [ebp - 0x268]
xor edi, edi
cmp eax, ebx
jbe 0x401acb
cmp word [eax], 0
je 0x401acb
mov dword [esp], ebx
call fcn.00408b8e
push edx
test eax, eax
je 0x401abb
add eax, 0x2c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x268]
mov dword [esp], eax
call fcn.00408447
push esi
push esi
jmp 0x401acb
mov eax, dword [ebp - 0x2a0]
mov edi, 1
mov word [eax], 0
cmp dword [ebp - 0x278], 0
jne 0x403b94
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 8], 0x400
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
sub esp, 0xc
jmp 0x403b94
mov dword [esp], 0xffffffff
xor edi, edi
call fcn.00401414
mov ecx, dword [ebp - 0x29c]
lea edx, [ebp - 0x268]
push ebx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], 0x400
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
sub esp, 0x18
test eax, eax
jne 0x403b94
jmp 0x4036a4
mov dword [esp], 0xffffffef
call fcn.00401414
push ecx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00407f90
push edx
push edx
jmp 0x403341
mov dword [esp], 0x31
call fcn.00401414
push ebx
mov ebx, dword [ebp - 0x280]
mov esi, eax
and ebx, 7
mov dword [esp], eax
call fcn.00407d46
push edi
test eax, eax
je 0x401bac
mov dword [esp + 4], esi
mov dword [esp], 0x414060
call fcn.00408447
jmp 0x401bdd
mov eax, dword [0x40c8f4]
mov dword [esp], 0x414060
add eax, 0xb000
mov dword [esp + 4], eax
call fcn.00408447
push edx
push edx
mov dword [esp], eax
call fcn.0040847b
push ecx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.KERNEL32.dll_lstrcatW
push ecx
push ecx
mov dword [esp], 0x414060
call fcn.00408510
push edi
cmp ebx, 2
jle 0x401c2f
mov dword [esp], 0x414060
call fcn.00408b8e
push edx
mov edx, eax
xor eax, eax
test edx, edx
je 0x401c1e
lea eax, [ebp - 0x274]
add edx, 0x14
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
push edi
push edi
sub ebx, 3
or ebx, 0x80000000
test ebx, eax
sete bl
movzx ebx, bl
test ebx, ebx
jne 0x401c44
mov dword [esp], 0x414060
call fcn.00407e95
push ebx
xor ebx, ebx
jmp 0x401c53
mov eax, 1
cmp ebx, 1
je 0x401c58
mov ebx, 2
mov eax, 2
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40000000
mov dword [esp], 0x414060
call fcn.00407f38
sub esp, 0xc
mov edi, eax
cmp eax, 0xffffffff
jne 0x401d4d
test ebx, ebx
je 0x401c9c
mov dword [esp + 4], esi
mov dword [esp], 0xffffffe2
call fcn.004073f5
cmp ebx, 2
push ecx
push ecx
jmp 0x4035b8
mov eax, dword [0x40c8f4]
mov dword [esp], 0x415060
mov dword [esp + 4], eax
call fcn.00408447
push eax
push eax
mov eax, dword [0x40c8f4]
mov dword [esp + 4], 0x414060
mov dword [esp], eax
call fcn.00408447
push eax
push eax
mov eax, dword [ebp - 0x26c]
mov dword [esp], 0x414860
mov dword [esp + 4], eax
call fcn.004085ed
push eax
push eax
mov eax, dword [0x40c8f4]
mov dword [esp + 4], 0x415060
mov dword [esp], eax
call fcn.00408447
push eax
push eax
mov eax, dword [ebp - 0x280]
sar eax, 3
mov dword [esp + 4], eax
mov dword [esp], 0x414860
call fcn.00407c6d
push edx
push edx
cmp eax, 4
je 0x401c33
cmp eax, 5
jne 0x401d2d
inc dword [0x43ca28]
jmp case.0x40172a.2
mov dword [esp + 4], 0x414060
mov dword [esp], 0xfffffffa
call fcn.004073f5
mov ebx, 0x7fffffff
push eax
push eax
jmp case.0x40172a.2
mov dword [esp + 4], esi
mov dword [esp], 0xffffffea
call fcn.004073f5
inc dword [0x43ca54]
push eax
push eax
mov eax, dword [ebp - 0x278]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00403e34
dec dword [0x43ca54]
mov ebx, eax
mov eax, dword [ebp - 0x274]
and eax, dword [ebp - 0x270]
sub esp, 0x10
inc eax
je 0x401dc3
lea eax, [ebp - 0x274]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
sub esp, 0x10
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
test ebx, ebx
jns case.0x40172a.66
cmp ebx, 0xfffffffe
jne 0x401e02
mov dword [esp + 4], 0xffffffe9
mov dword [esp], 0x414060
call fcn.004085ed
push ebx
push ebx
mov dword [esp + 4], esi
mov dword [esp], 0x414060
call sub.KERNEL32.dll_lstrcatW
jmp 0x401e16
mov dword [esp + 4], 0xffffffee
mov dword [esp], 0x414060
call fcn.004085ed
push ecx
push ecx
mov dword [esp + 4], 0x200010
mov dword [esp], 0x414060
jmp 0x4021b2
mov dword [esp], 0
jmp 0x401e88
mov dword [esp], 0x31
call fcn.00401414
mov edx, dword [ebp - 0x280]
push edi
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00407c6d
push edx
push edx
test eax, eax
je 0x403aca
cmp dword [ebp - 0x278], eax
je 0x40205d
cmp dword [ebp - 0x270], eax
jne case.0x40172a.66
mov ebx, dword [ebp - 0x26c]
jmp case.0x40172a.2
mov dword [esp], 0xfffffff0
call fcn.00401414
mov edx, dword [ebp - 0x27c]
push esi
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00408c7a
jmp 0x402663
mov dword [esp], 1
call fcn.00401414
push ebx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
jmp 0x402628
mov eax, 2
call fcn.0040146a
mov ebx, eax
mov eax, 3
mov edi, edx
call fcn.0040146a
mov dword [esp], 1
mov esi, eax
call fcn.00401414
push edx
mov dword [ebp - 0x2a0], eax
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
test edi, edi
cmove ebx, eax
push ecx
mov ecx, dword [ebp - 0x29c]
mov word [ecx], 0
test ebx, ebx
je case.0x40172a.66
test esi, esi
mov edx, dword [ebp - 0x2a0]
jns 0x401f1f
add esi, eax
js case.0x40172a.66
cmp eax, esi
cmovg eax, esi
add eax, eax
add eax, edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408447
push edi
push edi
test ebx, ebx
jns 0x401f53
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
push esi
add ebx, eax
js 0x401f61
cmp ebx, 0x3ff
jg case.0x40172a.66
jmp 0x401f63
xor ebx, ebx
mov eax, dword [ebp - 0x29c]
mov word [eax + ebx*2], 0
jmp case.0x40172a.66
mov dword [esp], 0x20
call fcn.00401414
push edx
mov ebx, eax
mov dword [esp], 0x31
call fcn.00401414
cmp dword [ebp - 0x270], 0
push ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
jne 0x401fa8
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
jmp 0x401fae
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push edi
push edi
test eax, eax
jne 0x40205d
jmp 0x4023d5
mov dword [esp], 1
call fcn.00401414
push esi
mov ebx, eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], 0x400
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
sub esp, 0xc
test eax, eax
jne 0x402000
mov eax, dword [ebp - 0x29c]
mov edi, 1
mov word [eax], 0
jmp 0x402028
cmp dword [ebp - 0x278], 0
jne 0x40200d
xor edi, edi
jmp 0x402028
mov eax, dword [ebp - 0x29c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push ebx
push ebx
test eax, eax
je 0x401fee
jmp 0x402009
mov eax, dword [ebp - 0x29c]
mov word [eax + 0x7fe], 0
jmp 0x403b94
xor eax, eax
mov esi, dword [ebp - 0x26c]
call fcn.0040146a
mov ebx, eax
mov eax, 1
call fcn.0040146a
test esi, esi
jne 0x402079
cmp ebx, eax
jge 0x402068
mov ebx, dword [ebp - 0x274]
jmp case.0x40172a.2
jle 0x4023d5
mov ebx, dword [ebp - 0x270]
jmp case.0x40172a.2
cmp ebx, eax
jb 0x40205d
jbe 0x4023d5
jmp 0x40206e
mov eax, 1
call fcn.0040146a
mov ebx, eax
mov eax, 2
call fcn.0040146a
mov edi, dword [ebp - 0x274]
mov ecx, eax
mov esi, eax
cmp edi, 0xd
ja case.default.0x4020ae
jmp dword [edi*4 + 0x40c118]
lea ecx, [eax + ebx]
jmp 0x402132
mov ecx, ebx
sub ecx, eax
jmp 0x402130
mov ecx, eax
imul ecx, ebx
jmp 0x402130
mov edi, 1
test eax, eax
je 0x402132
mov eax, ebx
cdq
idiv ecx
mov ecx, eax
jmp 0x402130
mov ecx, eax
or ecx, ebx
jmp 0x402130
mov ecx, eax
and ecx, ebx
jmp 0x402130
mov ecx, eax
xor ecx, ebx
jmp 0x402130
test ebx, ebx
sete cl
jmp 0x4020f7
or ebx, eax
setne cl
movzx ecx, cl
jmp 0x402130
test ebx, ebx
setne cl
xor edx, edx
test esi, esi
setne dl
and ecx, edx
jmp 0x402130
mov edi, 1
test eax, eax
je 0x402132
mov eax, ebx
cdq
idiv ecx
mov ecx, edx
jmp 0x402130
mov ecx, eax
shl ebx, cl
jmp case.default.0x4020ae
mov ecx, eax
sar ebx, cl
jmp case.default.0x4020ae
mov ecx, eax
shr ebx, cl
mov ecx, ebx
xor edi, edi
mov dword [esp + 4], ecx
jmp 0x4023aa
mov dword [esp], 1
call fcn.00401414
push ecx
mov ebx, eax
mov eax, 2
call fcn.0040146a
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_wsprintfW]
jmp case.0x40172a.66
mov edi, dword [ebp - 0x278]
mov ebx, dword [0x416860]
mov ecx, edi
test edi, edi
je 0x4021fc
dec ecx
test ebx, ebx
je 0x402191
mov ebx, dword [ebx]
test ecx, ecx
jne 0x402182
test ebx, ebx
jne 0x4021bc
mov dword [esp + 4], 0xffffffe8
mov dword [esp], 0
call fcn.004085ed
push edx
push edx
mov dword [esp + 4], 0x200010
mov dword [esp], eax
call fcn.00407c6d
jmp 0x401d41
add ebx, 4
mov dword [esp], 0x414060
mov dword [esp + 4], ebx
call fcn.00408447
push eax
push eax
mov eax, dword [0x416860]
add eax, 4
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00408447
push eax
push eax
mov eax, dword [0x416860]
add eax, 4
mov dword [esp + 4], 0x414060
jmp 0x4036d3
test esi, esi
je 0x40222b
test ebx, ebx
je 0x403aca
lea eax, [ebx + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408447
push eax
push eax
mov eax, dword [ebx]
mov dword [0x416860], eax
jmp 0x402952
mov dword [esp + 4], 0x804
mov dword [esp], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push esi
mov ebx, eax
mov eax, dword [ebp - 0x280]
push esi
mov dword [esp + 4], eax
lea eax, [ebx + 4]
mov dword [esp], eax
call fcn.004085ed
push eax
push eax
mov eax, dword [0x416860]
mov dword [ebx], eax
mov dword [0x416860], ebx
jmp 0x403b94
mov eax, 3
call fcn.0040146a
mov ebx, eax
mov eax, 4
call fcn.0040146a
mov esi, eax
test byte [ebp - 0x26c], 1
je 0x40229d
mov dword [esp], 0x33
call fcn.00401414
push ebx
mov ebx, eax
test byte [ebp - 0x26c], 2
je 0x4022b5
mov dword [esp], 0x44
call fcn.00401414
push ecx
mov esi, eax
cmp dword [ebp - 0x284], 0x21
jne 0x402347
mov eax, 1
call fcn.0040146a
mov dword [ebp - 0x2a0], eax
mov eax, 2
call fcn.0040146a
mov edi, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x2a0]
sar edi, 2
je 0x402327
lea edx, [ebp - 0x268]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
sub esp, 0x1c
test eax, eax
sete al
movzx eax, al
mov edi, eax
jmp 0x402393
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
mov dword [ebp - 0x268], eax
jmp 0x402393
mov dword [esp], 1
call fcn.00401414
push edi
mov edi, eax
mov dword [esp], 0x12
call fcn.00401414
push edx
cmp word [eax], 0
jne 0x40236b
xor eax, eax
cmp word [edi], 0
jne 0x402373
xor edi, edi
mov dword [esp + 8], edi
xor edi, edi
mov dword [esp + 0xc], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [ebp - 0x268], eax
sub esp, 0x10
cmp dword [ebp - 0x280], 0
js 0x403b94
mov eax, dword [ebp - 0x268]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
jmp 0x4039d7
xor eax, eax
call fcn.0040146a
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsWindow]
push esi
test eax, eax
je 0x4023d5
mov ebx, dword [ebp - 0x27c]
jmp case.0x40172a.2
mov ebx, dword [ebp - 0x278]
jmp case.0x40172a.2
mov eax, 2
call fcn.0040146a
mov ebx, eax
mov eax, 1
call fcn.0040146a
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push ebx
jmp 0x402802
xor eax, eax
add esi, dword [0x43cac8]
call fcn.0040146a
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffffeb
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x403b8f
test byte [ebp - 0x273], 1
je 0x402446
mov eax, 2
call fcn.0040146a
jmp 0x402461
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push ecx
push ecx
mov ebx, eax
mov eax, dword [ebp - 0x274]
mov ecx, eax
mov edx, eax
mov edi, eax
and ecx, 4
shr edx, 0x1e
and edi, 3
mov dword [ebp - 0x2a4], ecx
mov esi, edx
mov ecx, eax
shr ecx, 0x1f
and esi, 1
bt eax, 0x10
mov dword [ebp - 0x2a8], ecx
jae 0x4024a3
mov dword [esp], 0x11
call fcn.00401414
push edx
jmp 0x4024aa
movzx eax, word [ebp - 0x27c]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x268]
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [ebp - 0x274]
mov edx, dword [ebp - 0x25c]
push eax
imul edx, esi
push eax
and ecx, 0xfef0
mov eax, dword [ebp - 0x2a8]
xor esi, esi
imul eax, dword [ebp - 0x260]
cmp dword [ebp - 0x2a4], 0
je 0x4024f8
mov esi, dword [0x43cb0c]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp], esi
mov dword [esp + 8], edi
mov dword [esp + 4], eax
call dword [sym.imp.USER32.dll_LoadImageW]
sub esp, 0x18
mov esi, eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0x172
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
test eax, eax
je 0x40254e
test edi, edi
jne 0x40254e
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push eax
cmp dword [ebp - 0x280], 0
js case.0x40172a.66
mov dword [esp + 4], esi
jmp 0x402806
mov eax, dword [ebp - 0x2a4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDC]
push ecx
mov ebx, eax
mov dword [esp + 4], 0x5a
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push esi
push esi
mov esi, eax
mov eax, 2
call fcn.0040146a
mov dword [esp + 8], 0x48
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
sub esp, 0xc
mov dword [section..bss], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, 3
push edi
push edi
call fcn.0040146a
mov dword [esp], 0x41401c
mov dword [0x414010], eax
mov eax, dword [ebp - 0x270]
mov byte [0x414017], 1
mov edx, eax
and edx, 1
mov byte [0x414014], dl
mov edx, eax
and eax, 4
mov byte [0x414016], al
mov eax, dword [ebp - 0x27c]
and edx, 2
mov byte [0x414015], dl
mov dword [esp + 4], eax
call fcn.004085ed
push eax
push eax
mov dword [esp], section..bss
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push edx
jmp 0x402802
xor eax, eax
call fcn.0040146a
mov ebx, eax
mov eax, 1
call fcn.0040146a
mov edi, dword [ebp - 0x274]
mov dword [esp], ebx
mov dword [esp + 4], eax
test edi, edi
jne 0x40265d
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x403a13
call dword [sym.imp.USER32.dll_EnableWindow]
push eax
push eax
jmp case.0x40172a.66
mov dword [esp], 0
call fcn.00401414
push esi
mov esi, eax
mov dword [esp], 0x31
call fcn.00401414
push edi
mov edi, eax
mov dword [esp], 0x22
call fcn.00401414
push edx
mov ebx, eax
mov dword [esp], 0x15
call fcn.00401414
push ecx
mov dword [esp], 0xffffffec
call fcn.00401699
push eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x24c], eax
cmp word [esi], 0
jne 0x4026dd
xor esi, esi
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x258], edi
cmp word [ebx], 0
jne 0x4026f1
xor ebx, ebx
mov eax, dword [0x40c8f4]
mov dword [ebp - 0x254], ebx
mov edi, 1
add eax, 0xb000
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x268]
mov dword [esp], eax
call fcn.00407c1c
push ebx
test eax, eax
je 0x403b94
xor edi, edi
test byte [ebp - 0x264], 0x40
je 0x403b94
mov eax, dword [ebp - 0x230]
mov dword [esp], eax
call fcn.00409094
mov eax, dword [ebp - 0x230]
push ecx
mov dword [esp], eax
jmp 0x4027c1
mov dword [esp], 0
call fcn.00401414
push edi
mov ebx, eax
mov dword [esp + 4], eax
mov dword [esp], 0xffffffeb
call fcn.004073f5
push eax
push eax
mov dword [esp], ebx
call fcn.00407b9a
mov ebx, eax
push edx
test eax, eax
je 0x403aca
mov edi, dword [ebp - 0x278]
test edi, edi
je 0x4027be
mov dword [esp], eax
call fcn.00409094
cmp dword [ebp - 0x27c], 0
push esi
js 0x4027b4
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
xor edi, edi
mov dword [esp], eax
call fcn.00408362
push ecx
push ecx
jmp 0x4027be
test eax, eax
setne al
movzx eax, al
mov edi, eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40308f
mov dword [esp], 2
call fcn.00401414
push edi
mov dword [esp], eax
call fcn.00408b8e
mov ebx, eax
push edx
test eax, eax
je 0x402811
mov eax, dword [eax + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408362
push esi
push esi
mov eax, dword [ebx + 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
jmp 0x403b2e
mov eax, dword [ebp - 0x29c]
mov word [eax], 0
jmp 0x403abf
mov dword [esp], 0xffffffee
call fcn.00401414
push esi
mov edi, eax
mov dword [esp], 0xa
call fcn.00408f8f
push edx
lea edx, [ebp - 0x28c]
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
mov esi, eax
mov eax, dword [ebp - 0x29c]
push ecx
push ecx
mov word [eax], 0
mov eax, dword [ebp - 0x2a0]
mov word [eax], 0
test esi, esi
je 0x403aca
mov dword [esp + 4], esi
mov dword [esp], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push ebx
push ebx
mov ebx, eax
test eax, eax
je 0x403aca
mov dword [esp], 0xb
call fcn.00408f8f
push edx
mov dword [ebp - 0x2a8], eax
mov dword [esp], 0xc
call fcn.00408f8f
mov edx, dword [ebp - 0x2a8]
push ecx
mov dword [ebp - 0x2a4], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], edi
call edx
mov ecx, dword [ebp - 0x2a4]
sub esp, 0x10
test eax, eax
jne 0x4028e0
mov edi, 1
jmp 0x402952
lea eax, [ebp - 0x268]
mov dword [esp + 4], 0x40c000
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 8], eax
mov dword [esp], ebx
call ecx
sub esp, 0x10
test eax, eax
je 0x4028d9
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x288]
mov eax, dword [eax + edx*4 + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408362
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x288]
push edi
push edi
mov eax, dword [eax + edx*4 + 0xc]
xor edi, edi
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408362
push eax
push eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x40308f
cmp dword [0x43ca60], 0
js 0x402a88
mov dword [esp], 0xfffffff0
call fcn.00401414
push ebx
mov edi, eax
mov dword [esp], 1
call fcn.00401414
cmp dword [ebp - 0x270], 0
push esi
mov esi, eax
jne 0x4029bb
mov dword [esp + 8], 8
mov dword [esp + 4], 0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
sub esp, 0xc
mov ebx, eax
test eax, eax
jne 0x4029cb
jmp 0x402a7c
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ebx, eax
push ecx
test eax, eax
je 0x402994
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.0040904c
push edx
push edx
test eax, eax
je 0x402a39
mov edi, dword [ebp - 0x278]
test edi, edi
je 0x402a0a
mov dword [esp], edi
mov dword [ebp - 0x29c], eax
call fcn.00401699
mov eax, dword [ebp - 0x29c]
push edi
call eax
test eax, eax
setne al
movzx eax, al
mov edi, eax
jmp 0x402a50
mov ecx, dword [0x40c8f4]
mov dword [esp + 0x10], 0x40b000
mov dword [esp + 0xc], 0x416860
mov dword [esp + 8], ecx
mov ecx, dword [ebp - 0x2a4]
mov dword [esp + 4], 0x400
mov dword [esp], ecx
call eax
jmp 0x402a50
mov dword [esp + 4], esi
mov edi, 1
mov dword [esp], 0xfffffff7
call fcn.004073f5
push esi
push esi
cmp dword [ebp - 0x274], 0
jne 0x403b94
mov dword [esp], ebx
call fcn.00404cbb
push ecx
test eax, eax
je 0x403b94
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x40308f
mov dword [esp], 0xfffffff6
jmp 0x402b4c
mov dword [esp], 0xffffffe7
jmp 0x402b4c
mov dword [esp], 0xfffffff0
call fcn.00401414
push esi
mov dword [ebp - 0x2a0], eax
mov dword [esp], 0xffffffdf
call fcn.00401414
push edi
mov esi, eax
mov dword [esp], 2
call fcn.00401414
push edx
mov dword [ebp - 0x2a4], eax
mov dword [esp], 0xffffffcd
call fcn.00401414
push ecx
mov dword [ebp - 0x29c], eax
mov dword [esp], 0x45
call fcn.00401414
mov edi, dword [ebp - 0x270]
push ebx
mov dword [ebp - 0x2a8], eax
mov dword [esp], esi
call fcn.00407d46
push edx
test eax, eax
jne 0x402b0f
mov dword [esp], 0x21
call fcn.00401414
push ebx
lea eax, [ebp - 0x288]
mov dword [esp + 0xc], 0x4127f0
mov dword [esp + 0x10], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x40def0
call dword [sym.imp.ole32.dll_CoCreateInstance]
sub esp, 0x14
test eax, eax
jns 0x402b57
mov dword [esp], 0xfffffff0
call fcn.00401699
push ecx
jmp 0x403aca
mov eax, dword [ebp - 0x288]
lea ecx, [ebp - 0x268]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 4], 0x411df0
mov dword [esp], eax
call dword [edx]
sub esp, 0xc
mov ebx, eax
test eax, eax
js 0x402c91
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [edx + 0x50]
bt edi, 0xf
mov ebx, eax
push edx
push edx
jb 0x402bbd
mov edx, dword [ebp - 0x288]
mov eax, dword [0x40c8f4]
mov ecx, dword [edx]
add eax, 0xb000
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [ecx + 0x24]
push eax
push eax
mov eax, edi
sar eax, 0xc
and eax, 7
je 0x402bdb
mov edx, dword [ebp - 0x288]
mov ecx, dword [edx]
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [ecx + 0x3c]
push eax
push eax
mov eax, dword [ebp - 0x288]
mov ecx, edi
shr ecx, 0x10
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x34]
push eax
push eax
mov eax, dword [ebp - 0x29c]
cmp word [eax], 0
je 0x402c25
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x29c]
and edi, 0xfff
mov edx, dword [eax]
mov dword [esp + 8], edi
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x44]
sub esp, 0xc
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x2c]
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2a8]
push edi
push edi
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x1c]
push eax
push eax
test ebx, ebx
js 0x402c82
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [eax]
mov dword [esp + 8], 1
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x18]
sub esp, 0xc
mov ebx, eax
mov eax, dword [ebp - 0x268]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push esi
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push ecx
test ebx, ebx
js 0x402b45
mov dword [esp], 0xfffffff4
call fcn.00401699
jmp 0x4017cf
mov dword [esp], 0
call fcn.00401414
push edi
mov ebx, eax
mov dword [esp], 0x11
call fcn.00401414
push edx
mov esi, eax
mov dword [esp], 0x23
call fcn.00401414
push ecx
mov edi, eax
mov dword [esp], ebx
call fcn.00408b8e
push edx
test eax, eax
je 0x402d78
mov dword [esp], ebx
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x268], eax
call sub.KERNEL32.dll_lstrlenW
push edx
mov word [ebx + eax*2 + 2], 0
mov dword [esp], esi
call sub.KERNEL32.dll_lstrlenW
push ecx
mov word [esi + eax*2 + 2], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x260], ebx
mov dword [esp + 4], edi
mov dword [esp], 0
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x24e], edi
mov word [ebp - 0x258], ax
call fcn.004073f5
lea eax, [ebp - 0x268]
push ebx
push ebx
mov dword [esp], eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov edi, eax
push esi
test eax, eax
je 0x403b94
mov dword [esp + 4], 0
mov dword [esp], 0xfffffff9
call fcn.004073f5
push edi
push edi
jmp 0x403aca
cmp ebx, 0xbadf00d
jne 0x402191
inc dword [0x43ca34]
jmp case.0x40172a.66
xor esi, esi
test ebx, ebx
je 0x402dbf
mov dword [esp], 0
call fcn.00401414
push esi
mov esi, eax
xor edi, edi
cmp dword [ebp - 0x27c], 0
je 0x402dd9
mov dword [esp], 0x11
call fcn.00401414
push ebx
mov edi, eax
xor ebx, ebx
cmp dword [ebp - 0x270], 0
je 0x402df3
mov dword [esp], 0x22
call fcn.00401414
push ecx
mov ebx, eax
mov dword [esp], 0xffffffcd
call fcn.00401414
push edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
sub esp, 0x10
jmp 0x403341
mov dword [esp], 1
mov eax, dword [0x40c004]
mov dword [ebp - 0x268], eax
call fcn.00401414
push ecx
mov ebx, eax
mov dword [esp], 0x12
call fcn.00401414
push esi
mov esi, eax
mov dword [esp], 0xffffffdd
call fcn.00401414
push edi
xor edi, edi
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0x10], 0x3ff
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x268]
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [ebp - 0x29c]
sub esp, 0x18
cmp word [eax], 0xa
jne 0x403b94
jmp 0x403ac5
cmp dword [ebp - 0x270], 0
jne 0x402ee4
mov dword [esp], 2
call fcn.00401612
mov ebx, eax
push edx
test eax, eax
je 0x403aca
mov dword [esp], 0x33
call fcn.00401414
push esi
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push edi
mov esi, eax
push edi
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push eax
jmp 0x402f5d
mov dword [esp], 0x22
call fcn.00401414
push ebx
mov ebx, eax
mov eax, dword [ebp - 0x270]
sar eax, 1
mov dword [ebp - 0x268], eax
cmp word [ebx], 0
je 0x403aca
or eax, 0x100020
mov dword [ebp - 0x268], eax
test esi, esi
js 0x402f26
add esi, dword [0x43ca24]
sub esi, 0x7fffffff
lea eax, [ebp - 0x268]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.00408175
push ecx
push ecx
test eax, eax
je 0x403aca
mov edx, dword [ebp - 0x268]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], edx
call fcn.0040149f
sub esp, 0xc
mov esi, eax
test esi, esi
setne al
movzx eax, al
mov edi, eax
jmp 0x403b94
mov dword [esp], 2
mov esi, dword [ebp - 0x270]
mov edi, dword [ebp - 0x26c]
call fcn.00401414
push ecx
mov dword [ebp - 0x29c], eax
mov dword [esp], 0x11
call fcn.00401414
push edx
test ebx, ebx
js 0x402fa8
add ebx, dword [0x43ca24]
sub ebx, 0x7fffffff
lea edx, [ebp - 0x268]
mov dword [esp + 8], 0x100022
mov dword [esp + 0xc], edx
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00408244
sub esp, 0x10
test eax, eax
jne 0x403aca
mov ebx, dword [ebp - 0x268]
test ebx, ebx
je 0x403aca
cmp esi, 1
jne 0x403003
mov dword [esp], 0x23
call fcn.00401414
push esi
mov dword [esp], 0x415060
call sub.KERNEL32.dll_lstrlenW
inc eax
push edx
add eax, eax
jmp 0x40304e
cmp esi, 4
je 0x40303a
xor eax, eax
cmp esi, 3
jne 0x40304e
mov eax, dword [ebp - 0x274]
mov dword [esp + 0xc], 0x1800
mov dword [esp + 8], 0x415060
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00403e34
sub esp, 0x10
jmp 0x40304e
mov eax, 3
call fcn.0040146a
mov dword [0x415060], eax
mov eax, 4
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0x415060
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
sub esp, 0x18
test eax, eax
setne al
movzx eax, al
mov edi, eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
jmp 0x403b94
mov dword [esp], 0x20019
call fcn.00401612
push edx
mov ebx, eax
mov dword [esp], 0x33
call fcn.00401414
push ecx
mov ecx, dword [ebp - 0x29c]
mov word [ecx], 0
test ebx, ebx
je 0x403aca
lea edx, [ebp - 0x288]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x268]
mov dword [ebp - 0x288], 0x800
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x403115
mov eax, dword [ebp - 0x268]
lea edx, [eax - 1]
cmp edx, 1
jbe 0x40312a
cmp eax, 4
je 0x40312a
mov eax, dword [ebp - 0x29c]
mov edi, 1
mov word [eax], 0
jmp 0x403086
mov edi, dword [ebp - 0x270]
cmp eax, 4
jne 0x4031c0
xor eax, eax
test edi, edi
sete al
mov edi, eax
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408362
push eax
push eax
jmp 0x403086
mov dword [esp], 0x20019
call fcn.00401612
push esi
mov ebx, eax
mov eax, 3
call fcn.0040146a
mov ecx, dword [ebp - 0x29c]
mov word [ecx], 0
test ebx, ebx
je 0x403aca
cmp dword [ebp - 0x270], 0
mov dword [ebp - 0x268], 0x3ff
je 0x4031d4
mov dword [esp + 0xc], 0x3ff
xor edi, edi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
sub esp, 0x10
mov eax, dword [ebp - 0x29c]
mov word [eax + 0x7fe], 0
jmp 0x403086
mov ecx, dword [ebp - 0x29c]
lea edx, [ebp - 0x268]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
sub esp, 0x20
test eax, eax
setne al
movzx eax, al
mov edi, eax
jmp 0x4031c0
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408387
push ebx
test eax, eax
je case.0x40172a.66
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4017cf
mov dword [esp], 0xffffffed
call fcn.00401414
mov edx, dword [ebp - 0x278]
push ecx
mov dword [esp + 8], edx
mov edx, dword [ebp - 0x27c]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00407f38
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x402802
jmp 0x4036a4
mov ebx, dword [ebp - 0x278]
test ebx, ebx
je 0x4032aa
mov eax, 1
call fcn.0040146a
mov word [0x414860], ax
xor eax, eax
cmp edi, 0x38
setne al
mov esi, eax
inc esi
jmp 0x403303
cmp edi, 0x38
jne 0x4032ea
mov dword [esp], 0x21
call fcn.00401414
push eax
mov dword [esp + 8], 0x400
mov dword [esp + 4], 0x414860
mov dword [esp], 0x415060
call fcn.004084c3
mov dword [esp], 0x414860
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
push edx
jmp 0x403303
mov dword [esp], 0x11
call fcn.00401414
push ecx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
push esi
lea esi, [eax + eax]
mov eax, dword [ebp - 0x29c]
cmp word [eax], 0
je 0x403aca
mov dword [esp], eax
call fcn.00408387
push edx
mov edx, eax
xor eax, eax
cmp edi, 0x38
sete al
or eax, ebx
je 0x403348
mov dword [esp + 8], esi
mov dword [esp + 4], 0x414860
mov dword [esp], edx
call fcn.00408047
sub esp, 0xc
test eax, eax
jmp 0x4035b8
cmp dword [ebp - 0x274], 0
je 0x40332a
mov dword [esp + 4], edx
mov dword [esp], edx
mov dword [ebp - 0x29c], edx
call fcn.0040808d
mov edx, dword [ebp - 0x29c]
test eax, eax
push ebx
push ebx
jns 0x40332a
jmp 0x403aca
mov eax, 2
call fcn.0040146a
mov dword [ebp - 0x2a4], eax
test eax, eax
jle case.0x40172a.66
mov eax, dword [ebp - 0x29c]
xor ebx, ebx
cmp word [eax], 0
je 0x4035aa
mov dword [esp], eax
mov edi, 2
call fcn.00408387
mov word [ebp - 0x29c], 0
push ecx
mov esi, eax
cmp dword [ebp - 0x284], 0x39
mov edx, dword [ebp - 0x274]
jne 0x4034a8
lea eax, [ebp - 0x268]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov eax, 2
sub eax, edx
mov dword [esp], esi
mov dword [esp + 8], eax
lea eax, [ebp - 0x288]
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x4035aa
mov edi, dword [ebp - 0x268]
test edi, edi
je 0x4035aa
movzx eax, byte [ebp - 0x288]
cmp dword [ebp - 0x274], 0
mov word [ebp - 0x28c], ax
jne 0x4034ef
lea eax, [ebp - 0x28c]
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x268]
mov dword [esp + 4], 8
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 8], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
sub esp, 0x18
test eax, eax
jne 0x4034ef
dec dword [ebp - 0x268]
mov word [ebp - 0x28c], 0xfffd
je 0x4034ef
dec edi
mov dword [esp + 0xc], 1
mov eax, edi
mov dword [esp + 8], 0
neg eax
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
jmp 0x40342e
or edx, ebx
je 0x4034d2
lea eax, [ebp - 0x28c]
mov dword [esp + 8], 2
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00408001
sub esp, 0xc
test eax, eax
jne 0x4034ef
jmp 0x4035aa
mov dword [esp + 4], 0
mov dword [esp], esi
call fcn.0040808d
push edx
push edx
test eax, eax
jns 0x4034ac
xor ebx, ebx
jmp 0x4035aa
cmp dword [ebp - 0x274], 0
movzx eax, word [ebp - 0x28c]
je 0x403518
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408362
push eax
push eax
jmp 0x403b9a
lea edx, [ebx + ebx]
add edx, dword [ebp - 0x2a0]
cmp word [ebp - 0x29c], 0xd
je 0x403535
cmp word [ebp - 0x29c], 0xa
jne 0x403574
cmp word [ebp - 0x29c], ax
je 0x40354a
cmp ax, 0xd
je 0x40356e
cmp ax, 0xa
je 0x40356e
neg edi
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
jmp 0x4035aa
inc ebx
mov word [edx], ax
jmp 0x4035aa
mov ecx, dword [ebp - 0x2a0]
inc ebx
mov word [ecx + ebx*2 - 2], ax
test ax, ax
je 0x4035aa
mov word [ebp - 0x29c], ax
mov eax, 0x3ff
cmp dword [ebp - 0x2a4], 0x3ff
cmovle eax, dword [ebp - 0x2a4]
cmp ebx, eax
jl 0x4033b7
mov eax, dword [ebp - 0x2a0]
test ebx, ebx
mov word [eax + ebx*2], 0
sete al
jmp 0x402f62
mov eax, dword [ebp - 0x29c]
cmp word [eax], 0
je case.0x40172a.66
mov eax, 2
mov ebx, dword [ebp - 0x274]
call fcn.0040146a
mov esi, eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408387
push edi
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
cmp dword [ebp - 0x27c], 0
js case.0x40172a.66
jmp 0x403b24
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408387
push ebx
test eax, eax
je case.0x40172a.66
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x4017cf
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408387
push ecx
test eax, eax
je 0x4036a4
lea edx, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push edx
push edx
test eax, eax
je 0x4036a4
jmp 0x4036c3
mov dword [esp], 2
call fcn.00401414
lea edx, [ebp - 0x268]
push esi
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push edi
push edi
cmp eax, 0xffffffff
jne 0x4036af
mov eax, dword [ebp - 0x2a0]
mov word [eax], 0
mov eax, dword [ebp - 0x29c]
jmp 0x403ac5
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408362
push ebx
push ebx
lea eax, [ebp - 0x23c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408447
jmp 0x402663
mov dword [esp], 0xfffffff0
call fcn.00401414
push edx
mov esi, eax
mov dword [esp], eax
call fcn.00407d46
push ecx
test eax, eax
jne 0x403709
mov dword [esp], 0xffffffed
call fcn.00401414
push eax
mov dword [esp], esi
call fcn.00407e95
push edi
mov dword [esp + 8], 2
mov dword [esp + 4], 0x40000000
mov dword [esp], esi
call fcn.00407f38
sub esp, 0xc
mov dword [ebp - 0x29c], eax
inc eax
jne 0x40374f
mov dword [esp], esi
mov edi, 1
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, 0xffffffef
push ebx
jmp 0x4038b8
cmp dword [ebp - 0x278], 0
mov edx, dword [ebp - 0x27c]
je 0x403872
mov eax, dword [0x43caec]
mov dword [ebp - 0x2a4], edx
mov dword [esp], 0x40
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x2a0], eax
mov dword [esp + 4], eax
call edi
mov edx, dword [ebp - 0x2a4]
test eax, eax
push ecx
mov ebx, eax
push ecx
je 0x403872
mov dword [esp], 0
call fcn.00403e02
push eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00403dda
push eax
push eax
mov eax, dword [ebp - 0x278]
mov dword [esp], 0x40
mov dword [esp + 4], eax
call edi
mov edi, eax
push edx
push edx
test eax, eax
je 0x403846
mov eax, dword [ebp - 0x278]
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.00403e34
mov eax, edi
sub esp, 0x10
cmp byte [eax], 0
je 0x40383c
mov ecx, dword [eax]
lea edx, [eax + 8]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [ebp - 0x2a8], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2a4], edx
add ecx, ebx
mov dword [esp], ecx
call fcn.00407e78
mov edx, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x2a8]
sub esp, 0xc
lea eax, [edx + ecx]
jmp 0x4037fd
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408047
sub esp, 0xc
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
or edx, 0xffffffff
push eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], edx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
call fcn.00403e34
mov ebx, eax
mov eax, dword [ebp - 0x29c]
sub esp, 0x10
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
test ebx, ebx
js 0x403736
mov eax, 0xfffffff3
xor edi, edi
mov dword [esp], eax
call fcn.00401699
jmp 0x40308f
xor eax, eax
call fcn.0040146a
mov ebx, eax
cmp eax, dword [0x43caac]
jae 0x403aca
mov edi, dword [ebp - 0x278]
imul esi, eax, 0x818
add esi, dword [0x43caa8]
test edi, edi
js 0x403914
jne 0x40390c
mov eax, dword [ebp - 0x2a0]
add esi, 0x18
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00408447
jmp 0x403a13
mov eax, dword [esi + edi*4]
jmp 0x403b24
mov ecx, edi
not ecx
mov dword [ebp - 0x278], ecx
test ecx, ecx
je 0x403934
mov eax, 1
call fcn.0040146a
mov dword [ebp - 0x27c], eax
jmp 0x403952
mov eax, dword [ebp - 0x270]
mov dword [esp + 4], eax
lea eax, [esi + 0x18]
mov dword [esp], eax
call fcn.004085ed
push edi
push edi
or dword [esi + 8], 0x100
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x278]
mov dword [esi + eax*4], edx
cmp dword [ebp - 0x274], 0
je case.0x40172a.66
mov dword [esp], ebx
call fcn.00401230
jmp 0x4017cf
xor eax, eax
call fcn.0040146a
cmp eax, 0x1f
ja 0x403aca
cmp dword [ebp - 0x274], 0
mov edi, dword [ebp - 0x278]
je 0x4039e1
test edi, edi
je 0x4039c0
mov dword [esp], eax
call fcn.00401343
push ecx
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0040128f
jmp 0x402663
mov dword [esp], 0
call fcn.00401392
push edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408362
jmp 0x403a13
test edi, edi
mov edx, dword [0x43ca80]
lea eax, [eax + 0x24]
je 0x4039fd
mov ecx, dword [ebp - 0x27c]
mov dword [edx + eax*4 + 4], ecx
jmp case.0x40172a.66
mov eax, dword [edx + eax*4 + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.004085ed
push eax
push eax
jmp 0x403b94
mov edi, dword [ebp - 0x274]
test edi, edi
je 0x403a30
dec edi
je 0x403ad4
jmp case.0x40172a.66
mov dword [esp], 5
call fcn.00408f8f
push ecx
mov ebx, eax
mov dword [esp], 0x22
call fcn.00401414
push esi
test ebx, ebx
je 0x403abf
lea esi, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 4], esi
call dword [sym.imp.ole32.dll_IIDFromString]
push edx
push edx
test eax, eax
js 0x403abf
lea eax, [ebp - 0x288]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x274]
mov dword [esp], esi
mov dword [esp + 4], eax
call ebx
sub esp, 0x10
test eax, eax
js 0x403abf
mov eax, dword [ebp - 0x288]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408447
push eax
push eax
mov eax, dword [ebp - 0x288]
mov dword [esp], eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x40308f
mov eax, dword [ebp - 0x2a0]
mov word [eax], 0
mov edi, 1
jmp 0x403b94
mov eax, 2
call fcn.0040146a
mov ebx, eax
mov eax, 4
call fcn.0040146a
mov dword [ebp - 0x268], 0
movzx edx, al
shr eax, 0x18
test ebx, ebx
jne 0x403b03
mov ebx, 0x43ca20
add eax, ebx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [ebp - 0x268]
mov dword [esp], eax
call fcn.00407e78
mov eax, dword [ebp - 0x268]
sub esp, 0xc
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408362
jmp 0x402663
mov eax, dword [ebp - 0x2a4]
and ebx, dword [0x434ca0]
mov dword [esp + 0xc], 0
mov dword [esp + 8], ebx
mov dword [esp + 4], 0xb
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
cmp dword [ebp - 0x280], 0
je case.0x40172a.66
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_InvalidateRect]
sub esp, 0xc
xor edi, edi
add dword [0x43ca28], edi
xor ebx, ebx
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 4