Function at 0x423860
Capabilities:
Encode data using base64
Get common file path
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a15c0
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0xc7b8
call fcn.00493aa0
mov eax, dword [0x4b2a8c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 0xc]
push 0x9000
push 0
push 0x24b9010
mov dword [ebp - 0xc798], eax
call fcn.0048f0e0
add esp, 0xc
push 0
push 0
push 0
push 0x80d3
push 0
push 0
call fcn.00483c77
add esp, 4
push eax
push 0
mov ecx, str.STDIN
call fcn.00407900
add esp, 0x1c
push 0
push 0
push 0
push 0x80d3
mov ebx, 1
push ebx
push ebx
call fcn.00483c77
add esp, 4
push eax
push ebx
mov ecx, str.STDOUT
call fcn.00407900
add esp, 0x1c
push 0
push 0
push 0
push 0x80d3
push ebx
push 2
call fcn.00483c77
add esp, 4
push eax
push 2
mov ecx, str.STDERR
call fcn.00407900
add esp, 0x1c
push 0x180
push 0x8302
push 0x4a7724
call fcn.004839c6
add esp, 0xc
cmp eax, 3
jne 0x423962
push 0
push 0
push 0
push 0x80c0
push 2
push 0
push eax
mov ecx, str.STDAUX
call fcn.00407900
add esp, 0x1c
push 0x180
push 0x8301
push 0x4a7724
call fcn.004839c6
add esp, 0xc
cmp eax, 4
jne 0x423999
push ebx
push 0
push 0
push 0x80a0
push ebx
push 0
push eax
mov ecx, str.STDPRN
call fcn.00407900
add esp, 0x1c
push 0x1b
push 0
call fcn.00483019
push 0x1c
push ebx
call fcn.00483019
push 0x1d
push 2
call fcn.00483019
push 0x1e
push 3
call fcn.00483019
push 0x1f
push 4
call fcn.00483019
push 0xb4
push 0
push 0x25f24a8
call fcn.0048f0e0
mov ecx, dword [0x4b8bdc]
mov eax, dword [0x4b802c]
add esp, 0x34
lea edx, [ecx*8 - 8]
lea ecx, [eax*8 - 8]
push 0x18
push ebx
mov byte [0x25f24a8], bl
mov dword [0x25f24ac], ebx
mov dword [0x25f24b0], ebx
mov dword [0x25f24c4], edx
mov dword [0x25f24c8], ecx
mov dword [0x25f24d4], 8
mov dword [0x25f24d8], 0x10
call fcn.00483970
push 0x3380
push 0
push 0x25f25f8
mov dword [0x26112d8], eax
mov dword [eax + 4], 0x110000
mov dword [eax + 8], 0x7bc0
mov dword [0x4b80c4], 0
call fcn.0048f0e0
add esp, 0x14
mov eax, 0x4b83cc
mov dword [eax], 0xffffffff
add eax, 0x10
cmp eax, 0x4b8bcc
jl 0x423a62
push 0x2000010
push 0
push 0x4b9000
call fcn.0048f0e0
add esp, 0xc
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
lea edx, [ebp - 0xc7bc]
mov edi, eax
push edx
push edi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov eax, dword [0x4b802c]
imul eax, dword [0x4b8bdc]
add eax, eax
cmp eax, 0x8000
jl 0x423ab8
mov eax, 0x8000
cmp eax, 0x4000
lea ecx, [eax + 0xb8000]
mov dword [0x24c21d4], ecx
movzx ecx, byte [0x4b9462]
lea edx, [eax + 0xf8000]
mov dword [0x4b8020], edx
lea edx, [ecx + ecx + 0x450]
mov dword [0x4b80c8], 0xb8000
mov dword [0x25f24a0], 0xf8000
mov dword [0x4b8bd8], edx
jle 0x423b0c
mov esi, 0x8000
mov dword [0x4b80dc], ebx
jmp 0x423b4b
cmp eax, 0x2000
jle 0x423b24
mov esi, 0x4000
mov dword [0x4b80dc], 2
jmp 0x423b4b
cmp eax, 0x1000
jle 0x423b3c
mov esi, 0x2000
mov dword [0x4b80dc], 4
jmp 0x423b4b
mov esi, 0x1000
mov dword [0x4b80dc], 8
mov eax, 0x3f8
mov word [0x4b9400], ax
mov ecx, 0x2f8
mov edx, 0x3e8
mov eax, 0x2e8
mov word [0x4b9402], cx
mov word [0x4b9404], dx
mov word [0x4b9406], ax
mov ecx, 0x378
mov edx, 0x278
mov eax, 0x3bc
mov word [0x4b9408], cx
mov word [0x4b940a], dx
mov word [0x4b940c], ax
call fcn.004208e0
mov ecx, 0x2e0
mov word [0x4b9413], cx
movzx ecx, word [ebp - 0xc7bc]
mov edx, 0x1e
mov word [0x4b9410], ax
mov eax, edx
mov word [0x4b941a], dx
mov word [0x4b944a], cx
mov cl, byte [ebp - 0xc7b6]
sub cl, byte [0x25f2560]
xor edx, edx
mov word [0x4b941c], ax
mov al, byte [ebp - 0xc7b8]
mov word [0x4b944e], dx
mov byte [0x4b9462], dl
mov edx, 0x3d4
mov byte [0x4b9449], 3
mov word [0x4b944c], si
mov byte [0x4b9450], al
mov byte [0x4b9451], cl
mov byte [0x4b9460], 7
mov byte [0x4b9461], 7
mov word [0x4b9463], dx
mov byte [0x4b9465], 9
call dword [sym.imp.WINMM.dll_timeGetTime]
call fcn.0040c170
mov dword [0x4b946c], eax
mov eax, 0x4321
mov edx, 0x3e
mov word [0x4b9482], dx
mov word [0x4b9472], ax
mov ax, word [ebp - 0xc7ac]
mov ecx, 0x1e
mov word [0x4b9480], cx
mov cx, word [ebp - 0xc7b0]
mov dl, al
sub dl, cl
mov byte [0x4b9484], dl
mov dx, word [0x4b60e0]
mov word [0x4b9485], dx
mov dl, 0x60
mov byte [0x4b9487], dl
mov byte [0x4b94b1], dl
xor edx, edx
mov word [ebp - 0xc7a2], cx
mov ecx, dword [ebp - 0xc7bc]
mov word [ebp - 0xc7a4], dx
dec ecx
lea edx, [ebp - 0xc7a4]
push edx
mov word [ebp - 0xc79e], ax
mov eax, dword [0x4b8038]
push eax
mov word [ebp - 0xc7a0], cx
mov ecx, dword [0x4b8008]
push ecx
push 0x24c2200
mov esi, 0xa
push edi
mov byte [0x4b9496], 0x10
mov word [0x4b94ac], si
mov byte [0x4b94ae], 0xfc
mov byte [0x4b94af], 0
mov dword [0x4b94b2], 0x40
call dword [sym.imp.KERNEL32.dll_ReadConsoleOutputA]
xor ebx, ebx
cmp dword [0x4b802c], ebx
mov eax, 0xb8000
mov ecx, 0xf8000
jle 0x423d72
jmp 0x423d20
cmp dword [0x4b8bdc], 0
jle 0x423d69
movsx esi, word [0x4b8008]
mov edi, dword [0x4b8bdc]
imul esi, ebx
lea esi, [esi*4 + 0x24c2202]
mov dl, byte [esi - 2]
mov byte [ecx + 0x4b9000], dl
mov byte [eax + 0x4b9000], dl
mov dl, byte [esi]
inc ecx
inc eax
mov byte [ecx + 0x4b9000], dl
mov byte [eax + 0x4b9000], dl
inc eax
inc ecx
add esi, 4
sub edi, 1
jne 0x423d40
inc ebx
cmp ebx, dword [0x4b802c]
jl 0x423d20
push 0x100
mov edx, 8
mov eax, 0x38
push 0xcf
push 0x4bb050
mov byte [0x4bb040], 0x4d
mov word [0x4bb041], dx
mov word [0x4bb043], ax
mov dword [0x2611204], 0x2050
call fcn.0048f0e0
add esp, 0xc
xor ecx, ecx
mov eax, 0x4bb151
mov dl, 0xea
lea ebx, [ebx]
mov byte [eax - 1], dl
mov word [eax], cx
mov esi, 0x205
mov word [eax + 2], si
add eax, 5
inc ecx
cmp eax, 0x4bb3d1
jl 0x423dc0
mov ecx, 8
mov edx, 0x1c
push 0x1fff
mov word [0x4bb3d3], dx
mov eax, ecx
mov word [0x4bb3d1], cx
lea edx, [ebp - 0xa6c7]
mov ecx, 0x200
push 0
push edx
mov byte [0x4bb3d0], 0x4d
mov dword [0x26112a8], 0x23e0
mov byte [0x4bb5a0], 0x4d
mov word [0x4bb5a1], ax
mov word [0x4bb5a3], cx
mov dword [ebp - 0xc780], 0
mov byte [ebp - 0xa6c8], 0
call fcn.0048f0e0
add esp, 0xc
push 0x1fff
lea eax, [ebp - 0xc6c7]
push 0
push eax
mov byte [ebp - 0xc78c], 0
mov byte [ebp - 0xc781], 0
mov byte [ebp - 0xc789], 0
mov byte [ebp - 0xc6c8], 0
call fcn.0048f0e0
add esp, 0xc
push 0x1fff
lea ecx, [ebp - 0x86c7]
push 0
push ecx
mov byte [ebp - 0x86c8], 0
call fcn.0048f0e0
add esp, 0xc
push 0x1fff
lea edx, [ebp - 0x66c7]
push 0
push edx
mov byte [ebp - 0xc78a], 0
mov byte [ebp - 0xc78b], 0
mov byte [ebp - 0x66c8], 0
call fcn.0048f0e0
add esp, 0xc
push str.MSDOS_APPEND
mov byte [ebp - 0xc791], 0
mov byte [ebp - 0xc787], 0
mov byte [ebp - 0xc779], 0
call fcn.00488b65
add esp, 4
test eax, eax
je 0x423f0a
mov ecx, eax
call fcn.00406200
test eax, eax
je 0x423f0a
cmp byte [eax], 0
je 0x423f0a
lea edx, [ebp - 0xa6c8]
sub edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x423f00
push 0x4a7bec
call fcn.00488b65
add esp, 4
test eax, eax
je 0x423f7c
mov ecx, eax
call fcn.00406200
test eax, eax
je 0x423f7c
cmp byte [eax], 0
je 0x423f7c
cmp byte [ebp - 0xa6c8], 0
je 0x423f52
lea edi, [ebp - 0xa6c8]
dec edi
jmp 0x423f40
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x423f40
mov cx, word [0x4a75ac]
mov word [edi], cx
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x423f54
lea edi, [ebp - 0xa6c8]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x423f64
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edx, dword [ebp - 0xc798]
mov eax, dword [edx]
push eax
lea ecx, [ebp - 0x86c8]
call fcn.004072a0
add esp, 4
test eax, eax
je 0x423fba
mov ecx, eax
call fcn.00406200
test eax, eax
je 0x423fba
cmp byte [eax], 0
je 0x423fba
mov edx, str.C:COMMAND.COM
sub edx, eax
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x423fb0
push str.MSDOS_COMSPEC
call fcn.00488b65
mov esi, eax
add esp, 4
test esi, esi
je 0x423ffd
push 0
push esi
call fcn.0048402f
add esp, 8
test eax, eax
jne 0x423ffd
mov ecx, esi
call fcn.00406200
test eax, eax
je 0x423ffd
cmp byte [eax], 0
je 0x423ffd
mov edx, str.C:COMMAND.COM
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x423ff3
push 0x4a7c04
call fcn.00488b65
add esp, 4
test eax, eax
je 0x42404a
mov ecx, eax
call fcn.00406200
test eax, eax
je 0x42404a
cmp byte [eax], 0
je 0x42404a
lea esi, [ebp - 0xc6c8]
mov ecx, eax
sub esi, eax
mov dl, byte [ecx]
mov byte [esi + ecx], dl
inc ecx
test dl, dl
jne 0x424028
lea edx, [ebp - 0x86c8]
sub edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x424040
push 0x4a77c8
call fcn.00488b65
add esp, 4
test eax, eax
je 0x4240bc
mov ecx, eax
call fcn.00406200
test eax, eax
je 0x4240bc
cmp byte [eax], 0
je 0x4240bc
cmp byte [ebp - 0x86c8], 0
je 0x424092
lea edi, [ebp - 0x86c8]
dec edi
jmp 0x424080
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x424080
mov cx, word [0x4a75ac]
mov word [edi], cx
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x424094
lea edi, [ebp - 0x86c8]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4240a4
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edx, [ebp - 0x66c8]
push edx
push 0x2000
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x4240ed
lea ecx, [ebp - 0x66c8]
call fcn.00406200
lea edx, [ebp - 0x66c8]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4240e3
mov edi, 0x4b6100
mov eax, dword [edi]
push eax
call fcn.00488b65
mov esi, eax
add esp, 4
test esi, esi
je 0x424122
push 0
push esi
call fcn.0048402f
add esp, 8
test eax, eax
jne 0x424122
mov ecx, esi
call fcn.00406200
test eax, eax
je 0x424122
cmp byte [eax], 0
jne 0x42412f
add edi, 4
cmp edi, str.sqrt
jl 0x4240f2
jmp 0x424141
lea edx, [ebp - 0x66c8]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x424137
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp - 0xc780]
mov dword [ebp - 0xc790], eax
test eax, eax
je 0x4245b5
mov bl, 0x3d
lea ebx, [ebx]
mov ecx, dword [ebp - 0xc790]
mov eax, dword [ecx]
test eax, eax
je 0x4245a8
lea edx, [ebp - 0x22c8]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x424178
xor ecx, ecx
cmp byte [ebp - 0x22c8], bl
je 0x4241b2
lea esp, [esp]
mov al, byte [ebp + ecx - 0x22c8]
cmp al, 0x61
jl 0x4241a8
cmp al, 0x7a
jg 0x4241a8
sub al, 0x20
mov byte [ebp + ecx - 0x22c8], al
inc ecx
cmp byte [ebp + ecx - 0x22c8], bl
jne 0x424190
lea edx, [ebp - 0x22c8]
push edx
lea eax, [ebp - 0x42c8]
lea esi, [ebp + ecx - 0x22c8]
push str.__s_
push eax
mov byte [esi], 0
call fcn.00483265
lea ecx, [ebp - 0x42c8]
add esp, 0xc
push ecx
call fcn.00485f27
add esp, 4
lea edx, [ebp - 0x42c8]
push edx
push str._MSDOS_APPEND_MSDOS_COMSPEC_MSDOS_LASTDRIVE_MSDOS_TEMP_MSDOS_TMP_MSDOS_TZ_
mov byte [esi], bl
call fcn.00483ce0
add esp, 8
test eax, eax
jne 0x42459b
cmp dword [ebp + 0x14], eax
je 0x424225
lea eax, [ebp - 0x42c8]
push eax
push str._APPEND_COMSPEC_LASTDRIVE_MSDOS_PATH_PATH_PROMPT_TEMP_TMP_TZ_
call fcn.00483ce0
add esp, 8
test eax, eax
je 0x42459b
push 7
lea ecx, [ebp - 0x22c8]
push str.APPEND
push ecx
call fcn.00483689
add esp, 0xc
test eax, eax
jne 0x42429a
cmp byte [ebp - 0xa6c8], al
je 0x42426e
lea edx, [ebp - 0xa6c8]
push edx
lea eax, [ebp - 0x22c8]
push str.APPEND_s
push eax
call fcn.00483265
add esp, 0xc
mov byte [ebp - 0xc78c], 1
jmp 0x424554
lea ecx, [ebp - 0x22c1]
call fcn.00406200
push eax
lea ecx, [ebp - 0x22c8]
push str.APPEND_s
push ecx
call fcn.00483265
add esp, 0xc
mov byte [ebp - 0xc78c], 1
jmp 0x424554
push 8
lea edx, [ebp - 0x22c8]
push 0x4a7cb8
push edx
call fcn.00483689
add esp, 0xc
test eax, eax
jne 0x4242db
mov ecx, 5
mov esi, str.COMSPECC:COMMAND.COM
lea edi, [ebp - 0x22c8]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0xc780]
mov byte [ebp - 0xc781], 1
jmp 0x424554
push 0xa
lea eax, [ebp - 0x22c8]
push 0x4a7cdc
push eax
call fcn.00483689
add esp, 0xc
test eax, eax
jne 0x424327
push str.MSDOS_LASTDRIVE
call fcn.00488b65
add esp, 4
test eax, eax
je 0x42431b
push eax
lea ecx, [ebp - 0x22c8]
push str.LASTDRIVE_s
push ecx
call fcn.00483265
add esp, 0xc
mov byte [ebp - 0xc789], 1
jmp 0x424554
push 0xb
lea edx, [ebp - 0x22c8]
push str.MSDOS_PATH
push edx
call fcn.00483689
add esp, 0xc
test eax, eax
jne 0x42438e
cmp byte [ebp - 0xc6c8], al
je 0x424369
lea eax, [ebp - 0xc6c8]
push eax
lea ecx, [ebp - 0x22c8]
push str.MSDOS_PATH_s
push ecx
call fcn.00483265
add esp, 0xc
jmp 0x424554
lea ecx, [ebp - 0x22bd]
call fcn.00406200
push eax
lea edx, [ebp - 0x22c8]
push str.MSDOS_PATH_s
push edx
call fcn.00483265
add esp, 0xc
jmp 0x424554
push 5
lea eax, [ebp - 0x22c8]
push str.PATH
push eax
call fcn.00483689
add esp, 0xc
test eax, eax
jne 0x424403
cmp byte [ebp - 0x86c8], al
je 0x4243d7
lea ecx, [ebp - 0x86c8]
push ecx
lea edx, [ebp - 0x22c8]
push str.PATH_s
push edx
call fcn.00483265
add esp, 0xc
mov byte [ebp - 0xc78a], 1
jmp 0x424554
lea ecx, [ebp - 0x22c3]
call fcn.00406200
push eax
lea eax, [ebp - 0x22c8]
push str.PATH_s
push eax
call fcn.00483265
add esp, 0xc
mov byte [ebp - 0xc78a], 1
jmp 0x424554
push 7
lea ecx, [ebp - 0x22c8]
push 0x4a7d34
push ecx
call fcn.00483689
add esp, 0xc
test eax, eax
jne 0x424429
mov byte [ebp - 0xc78b], 1
jmp 0x424554
push 5
lea edx, [ebp - 0x22c8]
push str.TEMP
push edx
call fcn.00483689
add esp, 0xc
test eax, eax
jne 0x42449e
cmp byte [ebp - 0x66c8], al
je 0x424472
lea eax, [ebp - 0x66c8]
push eax
lea ecx, [ebp - 0x22c8]
push str.TEMP_s
push ecx
call fcn.00483265
add esp, 0xc
mov byte [ebp - 0xc791], 1
jmp 0x424554
lea ecx, [ebp - 0x22c3]
call fcn.00406200
push eax
lea edx, [ebp - 0x22c8]
push str.TEMP_s
push edx
call fcn.00483265
add esp, 0xc
mov byte [ebp - 0xc791], 1
jmp 0x424554
push 4
lea eax, [ebp - 0x22c8]
push str.TMP
push eax
call fcn.00483689
add esp, 0xc
test eax, eax
jne 0x42450d
cmp byte [ebp - 0x66c8], al
je 0x4244e4
lea ecx, [ebp - 0x66c8]
push ecx
lea edx, [ebp - 0x22c8]
push str.TMP_s
push edx
call fcn.00483265
add esp, 0xc
mov byte [ebp - 0xc787], 1
jmp 0x424554
lea ecx, [ebp - 0x22c4]
call fcn.00406200
push eax
lea eax, [ebp - 0x22c8]
push str.TMP_s
push eax
call fcn.00483265
add esp, 0xc
mov byte [ebp - 0xc787], 1
jmp 0x424554
push 3
lea ecx, [ebp - 0x22c8]
push 0x4a7d5c
push ecx
call fcn.00483689
add esp, 0xc
test eax, eax
jne 0x424554
push str.MSDOS_TZ
call fcn.00488b65
add esp, 4
test eax, eax
je 0x42454d
push eax
lea edx, [ebp - 0x22c8]
push str.TZ_s
push edx
call fcn.00483265
add esp, 0xc
mov byte [ebp - 0xc779], 1
lea eax, [ebp - 0x22c8]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x424560
sub eax, edx
mov esi, eax
lea eax, [esi + edi + 0x11]
cmp eax, 0x2000
jg 0x424607
push esi
lea ecx, [ebp - 0x22c8]
push ecx
lea edx, [edi + 0x4bb5b0]
push edx
call fcn.004904e0
lea edi, [esi + edi + 1]
add esp, 0xc
mov dword [ebp - 0xc780], edi
add dword [ebp - 0xc790], 4
jne 0x424160
cmp byte [ebp - 0xc78c], 0
jne 0x42464a
cmp byte [ebp - 0xa6c8], 0
je 0x42464a
lea eax, [ebp - 0xa6c8]
push eax
push 0x4a7bec
lea ecx, [ebp - 0x42c8]
push str._s_s
push ecx
call fcn.00483265
lea eax, [ebp - 0x42c8]
add esp, 0x10
lea edx, [eax + 1]
jmp 0x4245f0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4245f0
sub eax, edx
mov esi, eax
lea edx, [esi + edi + 0x11]
cmp edx, 0x2000
jle 0x424629
push str.too_many_environments_n
call fcn.00483d66
add eax, 0x40
push eax
call fcn.00485ba5
add esp, 8
call fcn.00402430
push 1
call fcn.004898c9
push esi
lea eax, [ebp - 0x42c8]
push eax
lea ecx, [edi + 0x4bb5b0]
push ecx
call fcn.004904e0
lea edi, [esi + edi + 1]
add esp, 0xc
mov dword [ebp - 0xc780], edi
cmp byte [ebp - 0xc781], 0
jne 0x4246bb
push 0x4a7568
push str.COMSPEC
lea edx, [ebp - 0x42c8]
push str._s_s
push edx
call fcn.00483265
lea eax, [ebp - 0x42c8]
add esp, 0x10
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x424680
sub eax, edx
mov esi, eax
lea eax, [esi + edi + 0x11]
cmp eax, 0x2000
jg 0x424607
push esi
lea ecx, [ebp - 0x42c8]
push ecx
lea edx, [edi + 0x4bb5b0]
push edx
call fcn.004904e0
lea edi, [esi + edi + 1]
add esp, 0xc
mov dword [ebp - 0xc780], edi
cmp byte [ebp - 0xc789], 0
jne 0x42472c
push 0x4a7d94
push str.LASTDRIVE
lea eax, [ebp - 0x42c8]
push str._s_s
push eax
call fcn.00483265
lea eax, [ebp - 0x42c8]
add esp, 0x10
lea edx, [eax + 1]
jmp 0x4246f0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4246f0
sub eax, edx
mov esi, eax
lea ecx, [esi + edi + 0x11]
cmp ecx, 0x2000
jg 0x424607
push esi
lea edx, [ebp - 0x42c8]
push edx
lea eax, [edi + 0x4bb5b0]
push eax
call fcn.004904e0
lea edi, [esi + edi + 1]
add esp, 0xc
mov dword [ebp - 0xc780], edi
cmp byte [ebp - 0xc78a], 0
jne 0x42479b
lea ecx, [ebp - 0x86c8]
push ecx
push 0x4a77c8
lea edx, [ebp - 0x42c8]
push str._s_s
push edx
call fcn.00483265
lea eax, [ebp - 0x42c8]
add esp, 0x10
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x424760
sub eax, edx
mov esi, eax
lea eax, [esi + edi + 0x11]
cmp eax, 0x2000
jg 0x424607
push esi
lea ecx, [ebp - 0x42c8]
push ecx
lea edx, [edi + 0x4bb5b0]
push edx
call fcn.004904e0
lea edi, [esi + edi + 1]
add esp, 0xc
mov dword [ebp - 0xc780], edi
cmp byte [ebp - 0xc78b], 0
jne 0x42480c
push str._P_G
push str.PROMPT
lea eax, [ebp - 0x42c8]
push str._s_s
push eax
call fcn.00483265
lea eax, [ebp - 0x42c8]
add esp, 0x10
lea edx, [eax + 1]
jmp 0x4247d0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4247d0
sub eax, edx
mov esi, eax
lea ecx, [esi + edi + 0x11]
cmp ecx, 0x2000
jg 0x424607
push esi
lea edx, [ebp - 0x42c8]
push edx
lea eax, [edi + 0x4bb5b0]
push eax
call fcn.004904e0
lea edi, [esi + edi + 1]
add esp, 0xc
mov dword [ebp - 0xc780], edi
cmp byte [ebp - 0xc791], 0
jne 0x42487b
lea ecx, [ebp - 0x66c8]
push ecx
push 0x4a75a0
lea edx, [ebp - 0x42c8]
push str._s_s
push edx
call fcn.00483265
lea eax, [ebp - 0x42c8]
add esp, 0x10
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x424840
sub eax, edx
mov esi, eax
lea eax, [esi + edi + 0x11]
cmp eax, 0x2000
jg 0x424607
push esi
lea ecx, [ebp - 0x42c8]
push ecx
lea edx, [edi + 0x4bb5b0]
push edx
call fcn.004904e0
lea edi, [esi + edi + 1]
add esp, 0xc
mov dword [ebp - 0xc780], edi
cmp byte [ebp - 0xc787], 0
jne 0x4248ec
lea eax, [ebp - 0x66c8]
push eax
push 0x4a75a8
lea ecx, [ebp - 0x42c8]
push str._s_s
push ecx
call fcn.00483265
lea eax, [ebp - 0x42c8]
add esp, 0x10
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4248b0
sub eax, edx
mov esi, eax
lea edx, [esi + edi + 0x11]
cmp edx, 0x2000
jg 0x424607
push esi
lea eax, [ebp - 0x42c8]
push eax
lea ecx, [edi + 0x4bb5b0]
push ecx
call fcn.004904e0
lea edi, [esi + edi + 1]
add esp, 0xc
mov dword [ebp - 0xc780], edi
cmp byte [ebp - 0xc779], 0
jne 0x424c25
mov edx, dword [0x4a5f50]
mov eax, dword [0x4a5f24]
lea ecx, [ebp - 0xc778]
xor ebx, ebx
push ecx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ebx
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
test eax, eax
push 0x4a583f
push 2
setne byte [ebp - 0xc787]
call fcn.00487f92
push 0x40
lea edx, [ebp - 0xc774]
push edx
lea eax, [ebp - 0x88]
push eax
call fcn.00487139
add esp, 0x14
lea ecx, [ebp - 0xc79c]
push ecx
push 0x20019
push ebx
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionTime_Zones
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x424b38
lea edx, [ebp - 0xc7c4]
push edx
mov edx, dword [ebp - 0xc79c]
push 0
push 0
push 0
lea eax, [ebp - 0xc790]
push eax
lea ecx, [ebp - 0x1c8]
push ecx
push ebx
mov esi, 0x100
push edx
mov dword [ebp - 0xc790], esi
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
jne 0x424b16
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x46c8]
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionTime_Zones_s
push ecx
call fcn.00483265
add esp, 0xc
lea edx, [ebp - 0xc794]
push edx
push 1
push 0
lea eax, [ebp - 0x46c8]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x424b1d
lea ecx, [ebp - 0xc790]
push ecx
lea edx, [ebp - 0x2c8]
push edx
push eax
push eax
mov eax, dword [ebp - 0xc794]
push 0x4a7e28
push eax
mov dword [ebp - 0xc790], esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x424b07
lea ecx, [ebp - 0x88]
lea eax, [ebp - 0x2c8]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x424a50
test dl, dl
je 0x424a4c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x424a50
add eax, 2
add ecx, 2
test dl, dl
jne 0x424a30
xor eax, eax
jmp 0x424a55
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x424b07
xor esi, esi
mov edi, 0x4a625c
mov ecx, dword [edi - 4]
lea eax, [ebp - 0x1c8]
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x424a90
test dl, dl
je 0x424a8c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x424a90
add eax, 2
add ecx, 2
test dl, dl
jne 0x424a70
xor eax, eax
jmp 0x424a95
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x424aa7
cmp dword [edi], eax
je 0x424ac5
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
cmp dword [edi], eax
je 0x424ac5
inc esi
add edi, 0x10
cmp esi, 0x48
jb 0x424a64
mov ecx, dword [ebp - 0xc794]
mov edi, dword [ebp - 0xc780]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x424b1d
shl esi, 4
mov eax, dword [esi + 0x4a6260]
test eax, eax
je 0x424ae1
lea edx, [ebp - 0x1c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x424ad7
mov eax, dword [esi + 0x4a6264]
test eax, eax
je 0x424afa
lea edx, [ebp - 0x24]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x424af0
mov edi, dword [ebp - 0xc780]
mov byte [ebp - 0xc779], 1
mov ecx, dword [ebp - 0xc794]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x424b1d
cmp eax, 0x103
je 0x424b2b
inc ebx
cmp byte [ebp - 0xc779], 0
je 0x424971
mov edx, dword [ebp - 0xc79c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [ebp - 0xc778]
mov eax, 0x88888889
imul esi
add edx, esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, ecx
shl edx, 4
sub edx, ecx
add edx, edx
add edx, edx
mov eax, esi
sub eax, edx
je 0x424b80
cdq
xor eax, edx
sub eax, edx
push eax
push ecx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x44]
push str._s_d:_2d
push ecx
call fcn.00483265
add esp, 0x14
jmp 0x424b96
push ecx
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x44]
push str._s_d
push eax
call fcn.00483265
add esp, 0x10
cmp byte [ebp - 0xc787], 0
je 0x424bcf
lea eax, [ebp - 0x24]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x424ba4
lea edi, [ebp - 0x44]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x424bb1
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0xc780]
lea ecx, [ebp - 0x44]
push ecx
push 0x4a7e40
lea edx, [ebp - 0x42c8]
push str._s_s
push edx
call fcn.00483265
lea eax, [ebp - 0x42c8]
add esp, 0x10
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x424bf5
sub eax, edx
lea ecx, [eax + edi + 0x11]
cmp ecx, 0x2000
jg 0x424607
push eax
lea edx, [ebp - 0x42c8]
push edx
lea eax, [edi + 0x4bb5b0]
push eax
call fcn.004904e0
add esp, 0xc
push 0x25b
mov eax, 0x45c
mov ecx, 8
mov edx, 0x10
push 0x46c
push eax
mov edi, 0xffff
mov byte [0x4bd5b0], 0x4d
mov word [0x4bd5b1], cx
mov word [0x4bd5b3], dx
mov word [0x4b8be8], ax
call fcn.00409d40
xor edx, edx
mov ecx, 0x45c
mov word [eax + 0x16], cx
mov word [0x4bd6c1], dx
mov edx, 8
mov word [0x570ff1], dx
mov edx, dword [0x4b34b4]
mov eax, 0xb392
mov word [0x4bd6c3], ax
xor eax, eax
mov dword [0x570ff8], eax
mov word [0x570ff3], ax
mov dword [0x570ffc], eax
shr edx, 4
mov ecx, 0x46c
mov word [0x24c21fc], cx
mov cx, word [0x4a7860]
mov word [0x570ff8], cx
mov byte [0x4bd6c0], 0x4d
mov byte [0x570ff0], 0x5a
mov eax, edx
shl eax, 4
add eax, 0x4b9000
mov byte [eax], 0x4d
mov ecx, 8
mov word [eax + 1], cx
xor ecx, ecx
mov word [eax + 3], cx
lea eax, [edx + 1]
shl eax, 4
add eax, 0x4b9000
xor esi, esi
mov ecx, 0xf7fe
sub ecx, edx
mov word [eax + 1], si
mov esi, dword [0x2611204]
mov word [eax + 3], cx
mov byte [eax], 0x5a
add esp, 0xc
xor eax, eax
shr esi, 4
mov ecx, 0x100
mov edi, edi
cmp eax, 0x3f
jle 0x424d33
cmp eax, 0x70
jl 0x424d2f
cmp eax, 0x77
jle 0x424d33
mov edi, eax
jmp 0x424d35
mov edi, ecx
mov word [eax*4 + 0x4b9000], di
mov word [eax*4 + 0x4b9002], si
add ecx, 5
inc eax
cmp ecx, 0x600
jl 0x424d20
mov eax, 0x18
mov word [0x4b9020], ax
xor eax, eax
mov word [0x4b9088], ax
mov ecx, 0xfffc
mov word [0x4b9022], cx
mov eax, 0x12
mov word [0x4b919c], ax
mov eax, dword [0x26112a8]
shr eax, 4
mov ecx, 0xffff
mov word [0x4b908a], cx
xor ecx, ecx
mov dword [ebp - 0xc790], eax
mov word [0x4b919e], ax
mov word [0x4b91d0], cx
mov eax, 0xfffc
mov ecx, 0xbd
mov word [0x4b91d2], ax
xor eax, eax
mov word [0x4b92f8], cx
xor ecx, ecx
mov word [0x4b92fc], ax
mov word [0x4b92fe], cx
mov eax, 0x4b971a
mov dword [ebp - 0xc79c], 0xc
lea esi, [ecx + ecx*8]
lea esi, [esi + esi + 0x28]
mov word [eax - 4], si
lea edi, [eax - 4]
mov esi, 0x70
mov word [eax - 2], si
mov si, word [ecx*8 + 0x4a7e48]
mov word [eax], si
mov esi, 0xf9
mov word [eax + 2], si
mov esi, 0xff
mov word [eax + 4], si
mov esi, dword [ecx*8 + 0x4a7e4c]
mov ebx, dword [esi]
mov dword [eax + 6], ebx
mov esi, dword [esi + 4]
mov dword [eax + 0xa], esi
inc ecx
add eax, 0x12
sub dword [ebp - 0xc79c], 1
jne 0x424ddb
cmp byte [0x26112f0], 0
je 0x424e42
mov cx, word [ebp - 0xc790]
xor eax, eax
jmp 0x424e49
mov eax, 0xffff
mov ecx, eax
mov word [edi + 2], cx
mov word [edi], ax
mov edi, 1
mov word [0x4b9804], di
mov edi, 0x204
mov word [0x4b9824], di
xor edi, edi
mov word [0x4b9826], di
mov edi, 0x90
mov word [0x4b9828], di
xor edi, edi
mov word [0x4b982a], di
mov edi, 0xf0
mov word [0x4b982c], di
mov edi, 0x4c
mov word [0x4b982e], di
mov edi, 0x70
mov word [0x4b9830], di
mov edi, 0x16
mov word [0x4b9832], di
mov edi, 0x70
mov word [0x4b9834], di
mov edi, 0x200
mov word [0x4b9836], di
mov edi, 0x6d
mov word [0x4b9838], di
mov edi, 0x80
mov word [0x4b983a], di
xor edi, edi
mov word [0x4b983c], di
mov edi, 0x13d
mov word [0x4b983e], di
xor edi, edi
mov word [0x4b9840], di
mov edi, 0x1cc
mov word [0x4b9842], di
mov eax, dword [0x4a7ea8]
mov si, word [0x4a7eac]
mov cl, byte [0x4a7eae]
mov edi, 0x14
mov word [0x4b9865], di
xor edi, edi
mov word [0x4b9867], di
mov edi, 0x16
mov word [0x4b9848], di
mov edi, 0x70
mov word [0x4b984a], di
mov edi, 0x8004
mov word [0x4b984c], di
mov edi, 0xf9
mov word [0x4b984e], di
mov edi, 0xff
mov word [0x4b9850], di
mov edi, dword [str.NUL]
mov dword [0x4b9852], edi
mov edi, dword [0x4a7eb4]
mov dword [0x4b9856], edi
xor edi, edi
cmp byte [0x570ff0], 0x4d
mov word [0x4b986d], di
mov word [0x4b988c], dx
sete bl
mov edx, 0x204
mov edi, 0x13b
push str.LASTDRIVE
mov dword [0x4b97f9], eax
mov word [0x4b97fd], si
mov byte [0x4b97ff], cl
mov byte [0x4b9847], 0x1a
mov byte [0x4b9869], 3
mov word [0x4b986f], di
mov byte [0x4b9889], bl
mov word [0x4b988e], dx
mov dword [0x4b98f9], eax
mov word [0x4b98fd], si
mov byte [0x4b98ff], cl
call fcn.00488b65
add esp, 4
test eax, eax
je 0x425023
mov al, byte [eax]
cmp al, 0x41
jl 0x425014
cmp al, 0x5a
jg 0x425014
sub al, 0x40
jmp 0x42501e
cmp al, 0x61
jl 0x425023
cmp al, 0x7a
jg 0x425023
sub al, 0x60
mov byte [0x4b9847], al
push str.windir
call fcn.00488b65
add esp, 4
test eax, eax
je 0x425051
mov al, byte [eax]
cmp al, 0x41
jl 0x425042
cmp al, 0x5a
jg 0x425042
sub al, 0x40
jmp 0x42504c
cmp al, 0x61
jl 0x425051
cmp al, 0x7a
jg 0x425051
sub al, 0x60
mov byte [0x4b9869], al
cmp byte [0x26112f0], 0
mov eax, 0x7c00
mov word [0x4b986b], ax
mov eax, dword [0x26112a8]
mov byte [0x4b986a], 1
je 0x4250da
mov ecx, 0xffff
mov word [eax + 0x4b9000], cx
mov edx, ecx
mov ecx, 0xc000
mov word [eax + 0x4b9004], cx
mov word [eax + 0x4b9002], dx
mov ecx, 0x1bf
mov word [eax + 0x4b9008], cx
mov ecx, dword [0x4a76dc]
mov edx, 0x1b9
mov word [eax + 0x4b9006], dx
mov edx, dword [str.EMMXXXX0]
mov dword [eax + 0x4b900e], ecx
mov dword [eax + 0x4b900a], edx
mov cl, 0xcd
mov byte [eax + 0x4b9012], cl
mov byte [eax + 0x4b9013], 0x65
mov byte [eax + 0x4b9014], 0xcf
jmp 0x4250e3
mov byte [eax + 0x4b9012], 0xcf
mov cl, 0xcd
cmp byte [0x26112f1], 0
mov dl, 0xcb
je 0x425103
mov byte [eax + 0x4b9015], cl
mov byte [eax + 0x4b9016], 0x66
mov byte [eax + 0x4b9017], dl
jmp 0x425109
mov byte [eax + 0x4b9015], dl
mov esi, dword [0x4a7ea8]
mov dword [eax + 0x4b91b9], esi
mov si, word [0x4a7eac]
mov word [eax + 0x4b91bd], si
mov bl, byte [0x4a7eae]
mov byte [eax + 0x4b91bf], bl
mov esi, dword [0x2611204]
mov eax, esi
shr eax, 4
mov byte [0x5b8fdd], al
mov eax, esi
shr eax, 0xc
mov byte [0x5b8fc0], cl
mov byte [0x5b8fc7], cl
mov byte [0x5b8fca], cl
mov byte [0x5b8fcc], dl
mov byte [0x5b8fcd], cl
mov byte [0x5b8fcf], dl
mov byte [0x5b8fd0], cl
mov byte [0x5b8fd2], dl
mov byte [0x5b8fd7], dl
mov byte [0x5b8fd8], cl
mov byte [0x5b8fe4], cl
mov byte [0x5b8fe6], dl
mov byte [0x5b8fe7], cl
mov byte [0x5b8fe9], dl
mov byte [0x5b8fea], cl
mov byte [0x5b8fec], dl
mov dl, 0x30
mov cl, 0x31
mov bl, 0xff
mov byte [0x5b8fde], al
mov al, 0x2f
mov byte [0x5b8ff5], dl
mov byte [0x5b8ff6], cl
mov byte [0x5b8ff8], dl
mov byte [0x5b8ff9], cl
xor ecx, ecx
mov edx, 0x2c
mov byte [0x5b8ff7], al
mov byte [0x5b8ffa], al
mov eax, 0x50
mov word [0x4b9500], cx
mov word [0x4b9502], dx
mov ecx, 0x18
mov edx, eax
mov byte [0x5b8fc1], 0x69
mov byte [0x5b8fc2], 0x9a
mov byte [0x5b8fc3], bl
mov byte [0x5b8fc4], bl
mov byte [0x5b8fc5], bl
mov byte [0x5b8fc6], bl
mov byte [0x5b8fc8], 0x6b
mov byte [0x5b8fc9], 0xcf
mov byte [0x5b8fcb], 0x6c
mov byte [0x5b8fce], 0x6d
mov byte [0x5b8fd1], 0x6e
mov byte [0x5b8fd3], 0xe6
mov byte [0x5b8fd4], 0xf7
mov byte [0x5b8fd5], 0x78
mov byte [0x5b8fd6], 0xfc
mov byte [0x5b8fd9], 0x1c
mov byte [0x5b8fda], 0xea
mov byte [0x5b8fdb], 8
mov byte [0x5b8fdc], 0
mov byte [0x5b8fdf], 0x9a
mov byte [0x5b8fe0], bl
mov byte [0x5b8fe1], bl
mov byte [0x5b8fe2], bl
mov byte [0x5b8fe3], bl
mov byte [0x5b8fe5], 0x6f
mov byte [0x5b8fe8], 0x29
mov byte [0x5b8feb], 0x65
mov byte [0x5b8ff0], 0xf4
mov byte [0x5b8ffb], 0x39
mov byte [0x5b8ffc], 0x32
mov byte [0x5b8ffe], 0xfc
mov byte [0x5b8fff], 0x55
mov word [0x4b9504], ax
mov word [0x4b9506], cx
mov word [0x4b9508], dx
mov edi, dword [ebp + 8]
cmp edi, 1
mov eax, ecx
mov word [0x4b950a], ax
mov eax, 0x20202020
mov ecx, edx
mov word [0x4b950c], cx
mov dword [0x4b9518], eax
mov dword [0x4b951c], eax
mov dword [0x4b9520], eax
mov dword [0x4b9524], eax
mov dword [0x4b9528], eax
jle 0x42539b
mov edx, dword [ebp - 0xc798]
mov eax, dword [edx + 4]
push eax
push 0x4a7ec4
push 0x4b952d
call fcn.00483265
mov esi, 2
add esp, 0xc
cmp edi, esi
jle 0x425387
mov ecx, dword [ebp - 0xc798]
mov edx, dword [ecx + esi*4]
push edx
push 0x4b952d
lea eax, [ebp - 0xc8]
push str._s__s
push eax
call fcn.00483265
add esp, 0x10
xor eax, eax
jmp 0x425370
mov cl, byte [ebp + eax - 0xc8]
mov byte [eax + 0x4b952d], cl
inc eax
test cl, cl
jne 0x425370
inc esi
cmp esi, edi
jl 0x425340
mov eax, 0x4b952d
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x425390
sub eax, edx
jmp 0x42539d
xor al, al
movzx ecx, al
mov byte [0x4b952c], al
mov byte [ecx + 0x4b952d], 0xd
mov eax, 0xffffffff
mov edx, 0x14
mov ecx, 0xffff
mov dword [0x4b9f00], eax
mov word [0x4b9f04], dx
mov dword [0x4ba3bd], eax
mov dword [0x4bacc0], eax
xor eax, eax
mov edx, ecx
mov byte [0x4ba3b4], bl
mov word [0x4ba3b0], cx
mov word [0x4ba3b2], dx
mov byte [0x4ba3ba], 1
mov word [0x4bacc4], ax
xor ebx, ebx
mov edi, 0x4b9919
mov esi, 0x4ba415
lea ecx, [ebx + 0x41]
push ecx
lea edx, [esi - 0x45]
push str._c:_
push edx
call fcn.00483265
mov eax, 0x4000
mov word [esi - 2], ax
mov eax, ebx
imul eax, eax, 0x3b
mov edx, 0xffff
mov ecx, 0x90
mov word [esi + 2], cx
mov word [esi], ax
mov word [esi + 8], dx
mov ecx, edx
mov word [esi + 6], cx
mov word [esi + 4], dx
mov ecx, 2
mov word [esi + 0xa], cx
add eax, 0x3b
mov edx, 0x90
mov byte [edi - 0x19], bl
mov byte [edi - 0x18], bl
mov word [edi], ax
mov word [edi + 2], dx
add esi, 0x58
add esp, 0xc
inc ebx
add edi, 0x3b
cmp esi, 0x4ba4c5
jl 0x425402
mov esi, ecx
push esi
call fcn.00405870
add esp, 4
lea eax, [ebp - 0xc788]
push eax
lea ecx, [ebp - 0xc794]
push ecx
push esi
mov eax, 1
call fcn.0040bdc0
inc esi
add esp, 0xc
cmp esi, 0x1a
jl 0x425473
call fcn.00405be0
mov esi, dword [ebp - 0xc798]
xor edi, edi
push 1
mov dword [ebp - 4], edi
mov ecx, dword [esi]
push edi
push 0x4b9500
call fcn.00409e80
add esp, 0xc
cmp eax, edi
je 0x4254e2
mov edx, dword [esi]
push edx
push str._s_not_found_n
call fcn.00483d66
add eax, 0x40
push eax
call fcn.00485ba5
add esp, 0xc
jmp 0x42461d
mov dword [0x26112ac], edi
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00482caa
mov esp, ebp
pop ebp
ret