Function at 0x425ba0
Capabilities:
Check for time delay via gettickcount
Find taskbar
Move file
Print debug messages
Resolve function by parsing pe exports
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x49876b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x928
mov eax, dword [ebp + 0x10]
push ebx
push esi
xor esi, esi
push edi
mov dword [esp + 0x54], ecx
cmp eax, esi
jne 0x425bd5
lea eax, [esp + 0x64]
mov edi, dword [0x4be3fc]
mov edx, eax
mov ebx, ecx
mov dword [esp + 0x40], eax
mov dword [edx], esi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x1c], ebx
cmp ecx, esi
je 0x425ec9
cmp dword [0x4c4b18], esi
je 0x425c29
cmp dword [0x4c4b08], esi
je 0x425c17
mov eax, dword [0x4c4b00]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4c4b08], esi
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x4c4b18], esi
mov dword [0x4c4b00], esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov edx, dword [0x4be3fc]
mov ecx, eax
sub ecx, dword [0x4c4abc]
cmp ecx, dword [edx + 0xd0]
jbe 0x425c74
push 0
push 0
push 0
push 0
lea eax, [esp + 0xf4]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x425c6d
push 1
push 0xffffffffffffffff
call fcn.004012b0
add esp, 8
call esi
mov dword [0x4c4abc], eax
cmp byte [edi + 0xe4], 0
jne 0x425ca5
cmp byte [edi + 0xe6], 0
jne 0x425ca5
mov edx, dword [0x4c4ab0]
cmp edx, 0xffffffff
jle 0x425ca5
mov ecx, dword [edi + 0x28]
cmp ecx, edx
jle 0x425ca1
mov byte [edi + 0xe4], 1
jmp 0x425ca5
inc ecx
mov dword [edi + 0x28], ecx
mov ecx, dword [edi + 4]
mov edx, dword [edi]
cmp ecx, 0xffffffff
jl 0x425cc8
jg 0x425cb6
cmp edx, 0xffffffff
jbe 0x425cc8
cmp dword [0x4c4aac], ecx
jg 0x425cda
jl 0x425cc8
cmp dword [0x4c4aa8], edx
jae 0x425cda
mov ecx, dword [edi + 0x24]
cmp ecx, 0xffffffff
jle 0x425ce6
sub eax, dword [0x4c4ab8]
cmp eax, ecx
jb 0x425ce6
push 1
push 0xa
call fcn.004012b0
add esp, 8
cmp byte [edi + 0xef], 0
je 0x425d08
nop
push 1
push 0x8000012f
call fcn.004012b0
add esp, 8
cmp byte [edi + 0xef], 0
jne 0x425cf0
mov dword [0x4c4624], ebx
cmp byte [edi + 0xf0], 0
je 0x425d4c
mov ecx, dword [0x4c3f50]
mov dword [ecx*4 + 0x4c3910], ebx
call esi
mov ecx, dword [0x4c3f50]
mov dword [ecx*4 + 0x4c17b8], eax
inc ecx
mov dword [0x4c3f50], ecx
cmp ecx, 0x190
jl 0x425d4c
mov dword [0x4c3f50], 0
mov al, byte [ebx]
cmp al, 1
je 0x425d77
cmp al, 0x6a
je 0x425d77
cmp al, 0x70
je 0x425d77
mov esi, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push esi
push ebx
call fcn.00458020
mov dword [esp + 0x20], eax
cmp eax, 1
jne 0x425ece
jmp 0x425d7a
mov esi, dword [ebp + 0xc]
mov cl, byte [ebx]
mov byte [esp + 0x8c], cl
cmp cl, 0xa
jb 0x425ee5
cmp cl, 0x21
ja 0x425ee5
add dword [0x4c4aa8], 1
push ebx
adc dword [0x4c4aac], 0
call fcn.0042a5f0
mov edi, 3
cmp eax, edi
jne 0x425e48
mov ecx, dword [ebx + 0x14]
cmp byte [ecx], 0x71
jne 0x425de1
mov edi, edi
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x2c]
push edx
push esi
push 2
call fcn.00425ba0
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x2c]
cmp eax, ecx
je 0x425dc0
jmp 0x425df5
lea eax, [esp + 0x2c]
push eax
push esi
push edi
call fcn.00425ba0
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x429bf5
cmp dword [ebp + 8], edi
je 0x429c17
cmp dword [esp + 0x20], 1
jne 0x429c17
test eax, eax
je 0x425e2a
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [ebx + 0x1c]
jne 0x429c0c
mov dword [esp + 0x1c], eax
jmp 0x429bf5
mov eax, dword [ebx + 0x18]
cmp byte [eax], 9
mov dword [esp + 0x1c], eax
jne 0x429bf5
mov edx, eax
mov eax, dword [edx + 0x18]
mov dword [esp + 0x1c], eax
jmp 0x429bf5
mov ecx, dword [esp + 0x1c]
mov ebx, dword [ecx + 0x18]
cmp byte [ebx], 9
mov dword [esp + 0x1c], ebx
jne 0x425ec0
mov ecx, dword [ebx + 0x14]
cmp byte [ecx], 0x71
jne 0x425e81
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x2c]
push edx
push esi
push 2
call fcn.00425ba0
mov ecx, dword [ebx + 0x14]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x20], eax
cmp edx, ecx
je 0x425e60
jmp 0x425e95
lea eax, [esp + 0x2c]
push eax
push esi
push edi
call fcn.00425ba0
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x20], eax
cmp dword [ebp + 8], edi
je 0x429e09
cmp eax, 1
jne 0x429e09
test edx, edx
je 0x4267d5
mov ecx, dword [edx + 0x1c]
cmp ecx, dword [ebx + 0x1c]
jne 0x429c49
jmp 0x429bf1
cmp dword [ebp + 8], edi
jne 0x429bf5
mov eax, 1
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
movzx eax, cl
add eax, 0xfffffff8
cmp eax, 0xd3
ja case.0x425efd.9
movzx eax, byte [eax + 0x42a0ec]
jmp dword [eax*4 + 0x42a0b4]
add dword [0x4c4aa8], 1
adc dword [0x4c4aac], 0
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x425f94
xor ecx, ecx
cmp dword [ebx + 0xc], 1
mov edx, eax
sete cl
mov dword [esp + 0x5c], edx
mov esi, ecx
test esi, esi
je 0x425f44
mov eax, dword [edi + 0xb4]
mov dword [edi + 0xb8], eax
mov dword [edi + 0xb4], 0
mov ecx, edx
call fcn.00401240
mov dword [esp + 0x20], eax
test esi, esi
je 0x425f69
mov ecx, dword [edi + 0xb8]
mov dword [edi + 0xb4], ecx
mov dword [edi + 0xb8], 0
test eax, eax
je 0x425ece
cmp eax, 8
je 0x425ece
cmp dword [ebp + 8], 3
je 0x429c38
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 0x14]
mov dword [esp + 0x1c], eax
jmp 0x429bf5
mov edx, dword [esp + 0x1c]
push edx
mov bl, 1
call fcn.00442940
mov edx, eax
mov dword [esp + 0x5c], edx
test edx, edx
je 0x429df0
cmp dword [edi + 0xb4], 0
je 0x425fcd
mov eax, dword [edx + 4]
call fcn.004429f0
test eax, eax
je 0x425fcd
mov esi, 1
jmp 0x425f2e
xor esi, esi
jmp 0x425f44
add dword [0x4c4aa8], 1
adc dword [0x4c4aac], 0
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x5c], eax
test eax, eax
jne 0x426005
mov ecx, dword [esp + 0x1c]
push ecx
mov bl, 1
call fcn.00442940
mov dword [esp + 0x5c], eax
test eax, eax
je 0x429df0
cmp dword [ebp + 8], 3
mov dword [edi + 0xbc], eax
je 0x429c46
mov edx, dword [esp + 0x1c]
mov ecx, dword [eax + 4]
mov edx, dword [edx + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x429c46
mov dword [esp + 0x1c], ecx
jmp 0x429bf5
add dword [0x4c4aa8], 1
mov eax, dword [esp + 0x54]
adc dword [0x4c4aac], 0
mov esi, dword [eax + 0xc]
test esi, esi
jne 0x42605e
mov ecx, dword [0x4c1df8]
push esi
push ecx
mov ecx, 0x4c4000
call fcn.00422f80
mov esi, eax
mov ebx, 1
mov dword [esp + 0x20], ebx
mov dword [esp + 0x34], 0
test esi, esi
je 0x426177
mov eax, dword [0x4c1dfc]
cmp word [eax], 0
je 0x426098
push 0x49e7a8
push eax
call fcn.004881a9
add esp, 8
test eax, eax
jne 0x426098
mov al, bl
jmp 0x42609a
xor al, al
lea edx, [esp + 0x5c]
push edx
push eax
push esi
xor eax, eax
call fcn.004748d0
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x34], eax
test edi, edi
je 0x426177
mov eax, dword [edi + 4]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x426107
mov esi, dword [esp + 0x1c]
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x4260db
lea ecx, [ecx]
cmp edx, ecx
je 0x426107
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x4260d0
push 0x4a59a4
push 0
push str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov ecx, esi
call fcn.0042ed60
xor eax, eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [esp + 0x4c]
mov edx, dword [ebx + 0xb4]
test edx, edx
je 0x4261a7
call fcn.004429f0
test eax, eax
je 0x4261a7
mov esi, 1
mov dword [ebx + 0xb8], edx
mov dword [ebx + 0xb4], 0
mov ecx, edi
call fcn.00401240
mov ebx, eax
mov dword [esp + 0x20], ebx
test esi, esi
je 0x426166
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax + 0xb8]
mov dword [eax + 0xb4], ecx
mov dword [eax + 0xb8], 0
test ebx, ebx
je 0x429c62
cmp ebx, 8
je 0x429c62
cmp dword [esp + 0x34], 0
mov ecx, dword [esp + 0x54]
sete dl
movzx eax, dl
push eax
push ecx
call fcn.0042eb20
cmp dword [ebp + 8], 3
je 0x429c54
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 0x14]
mov dword [esp + 0x1c], eax
jmp 0x429bf5
xor esi, esi
jmp 0x42613b
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x28], eax
cmp eax, 4
jne 0x4261d4
mov ebx, dword [0x4c1df8]
push 0
call fcn.00413340
mov ebx, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0x68], eax
jmp 0x4262c7
cmp eax, 1
ja 0x42627a
movzx eax, byte [ebx + 1]
sub eax, 0
je 0x426247
dec eax
je 0x42622e
mov ecx, dword [0x4c1df8]
push str.Read
push ecx
call fcn.004881a9
add esp, 8
test eax, eax
jne 0x42620e
mov dword [esp + 0x28], 5
jmp 0x426311
mov ebx, dword [0x4c1df8]
push 0
call fcn.00413340
xor edx, edx
add esp, 4
test eax, eax
setne dl
mov dword [esp + 0x68], eax
lea eax, [edx + 3]
jmp 0x426272
mov eax, dword [0x4c1df8]
push 0
push 1
push 1
push 1
call fcn.0046ef80
add esp, 0x10
test eax, eax
je 0x426254
mov dword [esp + 0x28], 2
jmp 0x426311
mov ebx, dword [0x4c1df8]
push 0
call fcn.00413340
xor ecx, ecx
add esp, 4
test eax, eax
setne cl
mov dword [esp + 0x68], eax
lea eax, [ecx + 3]
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x28], eax
cmp eax, 3
jne 0x4262c2
cmp byte [ebx + 1], 1
ja 0x42628f
mov dword [esp + 0x60], 1
jmp 0x4262a9
mov esi, dword [0x4c1dfc]
call fcn.00413fb0
mov dword [esp + 0x60], eax
test eax, eax
je 0x429d51
mov esi, dword [ebp + 0xc]
mov eax, dword [0x4c1e00]
cmp word [eax], 0x31
jne 0x426308
cmp word [eax + 2], 0
jne 0x426308
mov byte [esp + 0x58], 1
jmp 0x42630d
cmp eax, 4
jne 0x426311
cmp byte [ebx + 1], 2
ja 0x4262d7
mov dword [esp + 0x60], 1
jmp 0x4262f1
mov esi, dword [0x4c1e00]
call fcn.00413fb0
mov dword [esp + 0x60], eax
test eax, eax
je 0x429d7e
mov esi, dword [ebp + 0xc]
mov eax, dword [0x4c1e04]
cmp word [eax], 0x31
jne 0x426308
cmp word [eax + 2], 0
mov byte [esp + 0x58], 1
je 0x42630d
mov byte [esp + 0x58], 0
mov ebx, dword [esp + 0x1c]
mov byte [esp + 0x26], 0
mov dword [esp + 0x2c], 0
mov eax, dword [ebx + 0x18]
cmp byte [eax], 0x6b
mov dword [esp + 0x34], eax
jne 0x426339
mov edi, eax
mov edx, dword [edi + 0x14]
mov dword [esp + 0x48], edi
mov dword [esp + 0x34], edx
jmp 0x426345
mov dword [esp + 0x48], 0
mov edi, dword [esp + 0x48]
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [esp + 0x78], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x44], ecx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x7c], edx
mov edx, dword [eax + 0x14]
mov dword [esp + 0x80], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x94], edx
mov edx, dword [eax + 0x1c]
mov dword [esp + 0x38], edx
cmp ecx, 8
je 0x426390
mov dword [eax + 8], 1
mov dword [eax + 0xc], 0
lea eax, [ecx - 2]
cmp eax, 6
ja case.default.0x42639c
jmp dword [eax*4 + 0x42a1c0]
mov ebx, dword [esp + 0x1c]
cmp byte [ebx + 1], 0
jbe 0x4263d2
xor edi, edi
mov ecx, ebx
call fcn.0041fd60
cmp byte [ebx], 8
jne 0x4263c7
mov ecx, eax
or ecx, edx
jne 0x4263c7
mov edi, dword [esp + 0x48]
jmp 0x4263d6
mov edi, dword [esp + 0x48]
mov byte [esp + 0x6c], 0
jmp 0x4263db
xor eax, eax
xor edx, edx
mov byte [esp + 0x6c], 1
mov ecx, dword [esp + 0x6c]
push ecx
push edx
push eax
push edi
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x3a]
push eax
push esi
mov edi, ebx
call fcn.0042c1a0
mov dword [esp + 0x20], eax
jmp case.default.0x42639c
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x2a]
mov ebx, esi
mov esi, dword [esp + 0x20]
push edx
call fcn.0042c2f0
mov dword [esp + 0x20], eax
jmp case.default.0x42639c
mov edx, dword [esp + 0x1c]
push edi
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x2e]
push ecx
push esi
push edx
call fcn.0042c4e0
mov dword [esp + 0x20], eax
jmp case.default.0x42639c
mov eax, dword [0x4c1e00]
push 0x4a24a4
push eax
call fcn.004881a9
add esp, 8
push edi
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x2e]
push edx
test eax, eax
mov eax, dword [esp + 0x28]
push esi
push eax
je 0x426471
call fcn.0042d1c0
mov dword [esp + 0x20], eax
jmp case.default.0x42639c
call fcn.0042d490
mov dword [esp + 0x20], eax
jmp case.default.0x42639c
lea esi, [esp + 0xb0]
call fcn.004145a0
mov dword [esp + 0x93c], 0
mov eax, dword [0x4c1dfc]
cmp word [eax], 0
je 0x42652e
mov ecx, dword [esp + 0x4c]
mov esi, dword [ecx + 0xf4]
mov edx, dword [esp + 0xb0]
push 0x30c
push eax
mov eax, dword [edx + 4]
lea ecx, [esp + 0xb8]
and esi, 0x7fffffff
mov dword [esp + 0xc0], 0
call eax
test al, al
je 0x42652e
mov eax, esi
mov ebx, 0x30c
lea ecx, [esp + 0xb0]
call fcn.0046cd90
test al, al
je 0x42652e
lea ecx, [esp + 0xb0]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x30]
push edx
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x2e]
push eax
push ecx
mov ecx, dword [0x4c1e00]
push edx
mov edx, edi
call fcn.0042d780
lea esi, [esp + 0xb0]
mov dword [esp + 0x20], eax
call fcn.004144b0
jmp 0x426536
mov dword [esp + 0x20], 1
lea ecx, [esp + 0xb0]
mov dword [esp + 0x93c], 0xffffffff
call fcn.004145f0
jmp case.default.0x42639c
mov eax, dword [0x4c1df8]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x60]
push eax
push ecx
push edx
push edi
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x3a]
push ecx
mov ecx, dword [esp + 0x34]
push esi
call fcn.0042c880
mov dword [esp + 0x20], eax
jmp case.default.0x42639c
mov ebx, dword [0x4c1df8]
lea edx, [esp + 0x52]
push edx
call fcn.00413340
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x4265d5
mov eax, dword [0x4c1dfc]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x58]
push eax
mov eax, dword [esp + 0x64]
push ebx
push ecx
push edx
push eax
push edi
lea ecx, [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x38]
lea edx, [esp + 0x42]
push edx
push esi
call fcn.0042cdc0
cmp byte [esp + 0x52], 0
mov dword [esp + 0x20], eax
je case.default.0x42639c
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x42639c
mov dword [esp + 0x20], 1
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x94]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x14], edx
mov edx, dword [esp + 0x38]
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], edx
mov eax, dword [esp + 0x20]
test eax, eax
je 0x425ece
cmp eax, 7
je 0x425ece
cmp eax, 8
je 0x425ece
cmp byte [esp + 0x26], 0
jne 0x429bf5
cmp dword [ebp + 8], 3
mov eax, dword [esp + 0x2c]
je 0x429dac
test eax, eax
je 0x426665
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 0x1c]
cmp ecx, dword [edx + 0x1c]
jne 0x429db7
mov dword [esp + 0x1c], eax
jmp 0x429bf5
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1c], eax
jmp 0x429bf5
mov dl, byte [edi + 0x100]
mov byte [esp + 0x33], dl
cmp cl, 0x6f
jne 0x4266ed
mov edi, dword [0x4c1e48]
test edi, edi
je 0x4266a2
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + 0xf8]
call fcn.00471610
test eax, eax
je 0x429dd8
mov ebx, dword [esp + 0x4c]
mov eax, dword [ebx + 0xf8]
cmp dword [eax + 8], 5
jne 0x4266bc
mov eax, dword [eax]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebx + 0xf8]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4266d2
push eax
call fcn.004897ff
add esp, 4
mov ecx, dword [ebx + 0xf8]
push ecx
call fcn.00489c59
add esp, 4
mov dword [ebx + 0xf8], 0
jmp 0x4266fa
mov edx, dword [esp + 0x4c]
mov byte [edx + 0x100], 1
mov ebx, edx
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x2c], 0
mov ecx, dword [edi + 0x14]
cmp byte [ecx], 0x71
jne 0x426731
mov edi, edi
mov ecx, dword [ecx + 0x14]
lea eax, [esp + 0x2c]
push eax
push esi
push 2
call fcn.00425ba0
mov ecx, dword [edi + 0x14]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x20], eax
cmp edx, ecx
je 0x426710
jmp 0x426746
lea edx, [esp + 0x2c]
push edx
push esi
push 3
call fcn.00425ba0
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x20], eax
cmp byte [esp + 0x8c], 0x6e
mov esi, dword [edi + 0x18]
mov dword [esp + 0x1c], esi
jne 0x42679f
mov cl, byte [esp + 0x33]
mov byte [ebx + 0x100], cl
cmp byte [esi], 0x6f
jne 0x42677e
cmp dword [ebx + 0xf8], 0
jne 0x429bf5
mov ecx, esi
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x1c], ecx
jmp 0x42679f
cmp dword [ebx + 0xf8], 0
lea esi, [ebx + 0xf8]
je 0x42679f
call fcn.0042f440
mov edx, dword [esp + 0x2c]
mov eax, 1
mov dword [esp + 0x20], eax
cmp dword [ebp + 8], 3
je 0x429e09
cmp eax, 1
jne 0x429e09
test edx, edx
je 0x429bf5
mov eax, dword [edx + 0x1c]
mov ecx, dword [esp + 0x1c]
cmp eax, dword [ecx + 0x1c]
jne 0x429c49
jmp 0x429bf1
cmp dword [ebx + 0xc], 1
jne 0x4267dd
mov edx, dword [ebx + 0x18]
jmp 0x429bf1
mov ecx, dword [ebx + 0x14]
lea eax, [esp + 0x2c]
push eax
push esi
push 2
call fcn.00425ba0
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x429bf5
cmp dword [ebp + 8], 3
je 0x429c17
cmp dword [esp + 0x20], 1
jne 0x429c17
test eax, eax
je 0x4267d5
mov ecx, dword [ebx + 0x1c]
cmp ecx, dword [eax + 0x1c]
jne 0x429c0c
mov dword [esp + 0x1c], eax
jmp 0x429bf5
add dword [0x4c4aa8], 1
mov esi, dword [esp + 0x1c]
mov edi, dword [0x4c1e48]
mov ebx, dword [0x4be3fc]
mov edx, 0
adc dword [0x4c4aac], edx
mov al, byte [esi]
movzx ecx, al
dec ecx
mov dword [esp + 0x20], edi
cmp ecx, 0xdc
ja case.0x42686a.8
movzx ecx, byte [ecx + 0x42a458]
jmp dword [ecx*4 + 0x42a1dc]
push esi
call fcn.0043c190
jmp 0x429bd4
cmp byte [esi + 1], 1
mov edx, dword [0x4c1dfc]
jbe 0x4268f2
mov eax, dword [esi + 8]
cmp byte [eax + 0x11], 0
je 0x42689b
mov eax, 1
jmp 0x429bd4
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x4268b4
mov edx, dword [eax + 4]
mov eax, dword [eax]
push edx
push eax
push edi
call fcn.00412750
jmp 0x429bd4
mov eax, dword [0x4c1e4c]
test eax, eax
je 0x4268f2
cmp word [edx], 0
jne 0x4268f2
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x4268d0
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x4268e6
sub ecx, 2
jne 0x4268f2
push edi
call fcn.004716d0
jmp 0x429bd4
mov ecx, edi
call fcn.004714b0
jmp 0x429bd4
push 1
push 0
push 0xffffffffffffffff
push edx
mov ecx, edi
call fcn.00471c00
jmp 0x429bd4
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], edx
je 0x426923
cmp byte [eax + 0x11], dl
jne 0x426923
mov dword [esp + 0x28], 1
mov ebx, 1
xor esi, esi
jmp 0x426961
mov esi, dword [0x4c1e4c]
mov eax, dword [0x4c1dfc]
mov dword [esp + 0x28], edx
test esi, esi
je 0x42694d
cmp word [eax], dx
jne 0x42694d
mov cl, byte [esi + 0x17]
test cl, cl
jne 0x426948
mov edx, dword [esi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x4269a7
xor esi, esi
push 1
push 1
push 0
push 1
call fcn.0046ef80
add esp, 0x10
mov ebx, eax
push 1
mov eax, edi
call fcn.00412860
mov edi, eax
mov eax, dword [0x4c1e00]
movzx eax, word [eax]
test ax, ax
je 0x426b5c
call fcn.00408f10
movzx ecx, ax
push ecx
push str.SMHD
call fcn.00488f71
add esp, 8
test eax, eax
je 0x426b5c
test ebx, ebx
jne 0x4269b6
lea eax, [ebx + 1]
jmp 0x429bd4
test esi, esi
je 0x42694f
push 1
mov eax, esi
call fcn.00412860
jmp 0x42695f
cmp dword [esp + 0x28], 0
je 0x4269cb
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 0x1c]
fild qword [ecx]
jmp 0x4269e5
test esi, esi
je 0x4269da
push 0
mov eax, esi
call fcn.004129c0
jmp 0x4269e5
mov esi, dword [0x4c1dfc]
call fcn.00412710
mov edi, dword [esp + 0x20]
fstp qword [esp + 0x38]
cmp byte [edi + 0x17], 0
jne 0x4269f8
mov esi, dword [edi + 0xc]
jmp 0x4269fa
mov esi, edi
mov bl, 8
test byte [esi + 0x15], bl
je 0x426a08
mov eax, esi
call fcn.00401160
mov al, byte [esi + 0x17]
cmp al, 1
jne 0x426a21
test byte [esi + 0x15], 4
je 0x426a1c
mov eax, esi
call fcn.0042f5b0
mov eax, dword [esi + 8]
jmp 0x426a31
cmp al, 2
jne 0x426a2c
call fcn.00401000
jmp 0x426a31
mov eax, 0x4c3fa8
cmp word [eax], 0
je 0x426aa0
cmp byte [edi + 0x17], 0
jne 0x426a42
mov esi, dword [edi + 0xc]
jmp 0x426a44
mov esi, edi
test byte [esi + 0x15], bl
je 0x426a50
mov eax, esi
call fcn.00401160
mov al, byte [esi + 0x17]
cmp al, 1
jne 0x426a69
test byte [esi + 0x15], 4
je 0x426a64
mov eax, esi
call fcn.0042f5b0
mov eax, dword [esi + 8]
jmp 0x426a79
cmp al, 2
jne 0x426a74
call fcn.00401000
jmp 0x426a79
mov eax, 0x4c3fa8
lea edx, [esp + 0x70]
push edx
call fcn.0046eb40
add esp, 4
test eax, eax
jne 0x426ac1
push 1
push eax
push 0xffffffffffffffff
push 0x4a59a4
mov ecx, edi
call fcn.00471c00
jmp 0x429bd4
lea eax, [esp + 0x98]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea ecx, [esp + 0x70]
push ecx
lea edx, [esp + 0x9c]
push edx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov eax, dword [0x4c1e00]
mov ax, word [eax]
call fcn.00408f10
movzx eax, ax
add eax, 0xffffffbc
cmp eax, 0xf
ja case.0x426ae0.69
movzx ecx, byte [eax + 0x42a54c]
jmp dword [ecx*4 + 0x42a538]
fld qword [esp + 0x38]
fmul qword [0x4b89f8]
jmp 0x426b1b
fld qword [esp + 0x38]
fmul qword [0x4b89f0]
jmp 0x426b1b
fld qword [esp + 0x38]
fmul qword [0x4b89e8]
jmp 0x426b1b
fld qword [esp + 0x38]
fmul qword [0x4b89e0]
jmp 0x426b1b
fld qword [esp + 0x38]
mov esi, dword [esp + 0x70]
mov ebx, dword [esp + 0x74]
call fcn.00496816
add esi, eax
adc ebx, edx
mov dword [esp + 0x70], esi
push 0
lea eax, [esp + 0x74]
lea esi, [esp + 0x104]
mov dword [esp + 0x78], ebx
call fcn.0046edf0
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
mov ecx, edi
call fcn.00471c00
jmp 0x429bd4
cmp ebx, 2
je 0x426bba
cmp edi, 2
je 0x426bba
cmp dword [esp + 0x28], 0
je 0x426b7e
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x1c]
mov esi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x426b9c
test esi, esi
je 0x426b8d
push 0
mov eax, esi
call fcn.00412900
jmp 0x426b98
mov esi, dword [0x4c1dfc]
call fcn.004126e0
mov ebx, edx
mov esi, eax
mov edi, dword [esp + 0x20]
push 0
mov eax, edi
call fcn.00412900
add eax, esi
adc edx, ebx
push edx
push eax
push edi
call fcn.00412750
jmp 0x429bd4
cmp dword [esp + 0x28], 0
je 0x426bcf
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426be9
test esi, esi
je 0x426bde
push 0
mov eax, esi
call fcn.004129c0
jmp 0x426be9
mov esi, dword [0x4c1dfc]
call fcn.00412710
mov esi, dword [esp + 0x20]
fstp qword [esp + 0x38]
push 0
mov eax, esi
call fcn.004129c0
fadd qword [esp + 0x38]
sub esp, 8
fstp qword [esp]
push esi
call fcn.00412780
jmp 0x429bd4
mov ecx, dword [0x4c1e00]
movzx eax, word [ecx]
cmp ax, dx
je 0x426d73
call fcn.00408f10
movzx edx, ax
push edx
push str.SMHD
call fcn.00488f71
add esp, 8
test eax, eax
je 0x426d73
mov esi, dword [0x4c1e4c]
mov edi, dword [0x4c1dfc]
test esi, esi
je 0x426cab
cmp word [edi], 0
jne 0x426cab
mov al, byte [esi + 0x17]
test al, al
jne 0x426c62
mov eax, dword [esi + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x426cab
test esi, esi
je 0x426cab
cmp byte [esi + 0x17], 0
jne 0x426c73
mov esi, dword [esi + 0xc]
test byte [esi + 0x15], 8
je 0x426c80
mov eax, esi
call fcn.00401160
mov al, byte [esi + 0x17]
cmp al, 1
jne 0x426c99
test byte [esi + 0x15], 4
je 0x426c94
mov eax, esi
call fcn.0042f5b0
mov edi, dword [esi + 8]
jmp 0x426cab
cmp al, 2
jne 0x426ca6
call fcn.00401000
mov edi, eax
jmp 0x426cab
mov edi, 0x4c3fa8
mov esi, dword [esp + 0x20]
cmp byte [esi + 0x17], 0
jne 0x426cb8
mov esi, dword [esi + 0xc]
test byte [esi + 0x15], 8
je 0x426cc5
mov eax, esi
call fcn.00401160
mov al, byte [esi + 0x17]
cmp al, 1
jne 0x426cde
test byte [esi + 0x15], 4
je 0x426cd9
mov eax, esi
call fcn.0042f5b0
mov eax, dword [esi + 8]
jmp 0x426cee
cmp al, 2
jne 0x426ce9
call fcn.00401000
jmp 0x426cee
mov eax, 0x4c3fa8
push eax
lea ebx, [esp + 0x57]
mov eax, edi
call fcn.0046eea0
add esp, 4
cmp byte [esp + 0x53], 0
mov esi, eax
mov ebx, edx
je 0x426d21
mov ecx, dword [esp + 0x20]
push 1
push 0
push 0xffffffffffffffff
push 0x4a59a4
call fcn.00471c00
jmp 0x429bd4
mov ecx, dword [0x4c1e00]
mov ax, word [ecx]
call fcn.00408f10
movzx eax, ax
cmp eax, 0x44
je 0x426d50
cmp eax, 0x48
je 0x426d47
cmp eax, 0x4d
jne 0x426d62
push 0
push 0x3c
jmp 0x426d57
push 0
push 0xe10
jmp 0x426d57
push 0
push 0x15180
push ebx
push esi
call fcn.00496890
mov esi, eax
mov ebx, edx
mov edx, dword [esp + 0x20]
push ebx
push esi
push edx
call fcn.00412750
jmp 0x429bd4
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x426d93
cmp byte [eax + 0x11], 0
jne 0x426d93
mov dword [esp + 0x28], 1
mov esi, 1
xor ebx, ebx
jmp 0x426dd6
mov ebx, dword [0x4c1e4c]
mov eax, dword [0x4c1dfc]
mov dword [esp + 0x28], 0
test ebx, ebx
je 0x426dc2
cmp word [eax], 0
jne 0x426dc2
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x426dbd
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x426e01
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.0046ef80
add esp, 0x10
mov esi, eax
push 1
mov eax, edi
call fcn.00412860
cmp esi, 2
je 0x426e48
cmp eax, 2
je 0x426e48
cmp dword [esp + 0x28], 0
je 0x426e10
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x1c]
mov esi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x426e2e
test ebx, ebx
je 0x426dc4
push 1
mov eax, ebx
call fcn.00412860
jmp 0x426dd4
test ebx, ebx
je 0x426e1f
push 0
mov eax, ebx
call fcn.00412900
jmp 0x426e2a
mov esi, dword [0x4c1dfc]
call fcn.004126e0
mov ebx, edx
mov esi, eax
push 0
mov eax, edi
call fcn.00412900
sub eax, esi
sbb edx, ebx
push edx
push eax
push edi
call fcn.00412750
jmp 0x429bd4
cmp dword [esp + 0x28], 0
je 0x426e5d
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426e77
test ebx, ebx
je 0x426e6c
push 0
mov eax, ebx
call fcn.004129c0
jmp 0x426e77
mov esi, dword [0x4c1dfc]
call fcn.00412710
push 0
fstp qword [esp + 0x3c]
mov eax, edi
call fcn.004129c0
fsub qword [esp + 0x38]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412780
jmp 0x429bd4
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], edx
je 0x426eb7
cmp byte [eax + 0x11], dl
jne 0x426eb7
mov dword [esp + 0x28], 1
mov esi, 1
xor ebx, ebx
jmp 0x426ef5
mov ebx, dword [0x4c1e4c]
mov eax, dword [0x4c1dfc]
mov dword [esp + 0x28], edx
cmp ebx, edx
je 0x426ee1
cmp word [eax], dx
jne 0x426ee1
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x426edc
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x426f20
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.0046ef80
add esp, 0x10
mov esi, eax
push 1
mov eax, edi
call fcn.00412860
cmp esi, 2
je 0x426f6c
cmp eax, 2
je 0x426f6c
cmp dword [esp + 0x28], 0
je 0x426f2f
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x1c]
mov esi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x426f4d
cmp ebx, edx
je 0x426ee3
push 1
mov eax, ebx
call fcn.00412860
jmp 0x426ef3
test ebx, ebx
je 0x426f3e
push 0
mov eax, ebx
call fcn.00412900
jmp 0x426f49
mov esi, dword [0x4c1dfc]
call fcn.004126e0
mov ebx, edx
mov esi, eax
push 0
mov eax, edi
call fcn.00412900
push ebx
push esi
push edx
push eax
call fcn.0048e400
push edx
push eax
push edi
call fcn.00412750
jmp 0x429bd4
cmp dword [esp + 0x28], 0
je 0x426f81
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426f9b
test ebx, ebx
je 0x426f90
push 0
mov eax, ebx
call fcn.004129c0
jmp 0x426f9b
mov esi, dword [0x4c1dfc]
call fcn.00412710
push 0
fstp qword [esp + 0x3c]
mov eax, edi
call fcn.004129c0
fmul qword [esp + 0x38]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412780
jmp 0x429bd4
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], edx
je 0x426fdb
cmp byte [eax + 0x11], dl
jne 0x426fdb
mov dword [esp + 0x28], 1
mov esi, 1
xor ebx, ebx
jmp 0x427019
mov ebx, dword [0x4c1e4c]
mov eax, dword [0x4c1dfc]
mov dword [esp + 0x28], edx
cmp ebx, edx
je 0x427005
cmp word [eax], dx
jne 0x427005
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x427000
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x427048
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.0046ef80
add esp, 0x10
mov esi, eax
push 1
mov eax, edi
call fcn.00412860
cmp esi, 2
je 0x4270ac
cmp eax, 2
je 0x4270ac
cmp dword [esp + 0x28], 0
je 0x427057
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x1c]
mov esi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x427075
cmp ebx, edx
je 0x427007
push 1
mov eax, ebx
call fcn.00412860
jmp 0x427017
test ebx, ebx
je 0x427066
push 0
mov eax, ebx
call fcn.00412900
jmp 0x427071
mov esi, dword [0x4c1dfc]
call fcn.004126e0
mov ebx, edx
mov esi, eax
mov ecx, esi
or ecx, ebx
jne 0x42708d
push 1
push ecx
push 0xffffffffffffffff
push ecx
mov ecx, edi
call fcn.00471c00
jmp 0x429bd4
push 0
mov eax, edi
call fcn.00412900
push ebx
push esi
push edx
push eax
call fcn.00496890
push edx
push eax
push edi
call fcn.00412750
jmp 0x429bd4
cmp dword [esp + 0x28], 0
je 0x4270c1
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 0x1c]
fild qword [ecx]
jmp 0x4270db
test ebx, ebx
je 0x4270d0
push 0
mov eax, ebx
call fcn.004129c0
jmp 0x4270db
mov esi, dword [0x4c1dfc]
call fcn.00412710
fst qword [esp + 0x38]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x4270fe
push 1
push 0
push 0xffffffffffffffff
push 0
mov ecx, edi
call fcn.00471c00
jmp 0x429bd4
push 0
mov eax, edi
call fcn.004129c0
fdiv qword [esp + 0x38]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412780
jmp 0x429bd4
mov ebx, dword [esp + 0x1c]
mov edi, 2
mov ecx, ebx
call fcn.0041fd60
mov esi, eax
test esi, esi
jns 0x427136
xor esi, esi
jmp 0x427148
mov edi, 1
mov ecx, ebx
call fcn.0041fcd0
cmp esi, eax
jle 0x427148
mov esi, eax
mov edx, dword [0x4c1dfc]
mov ecx, dword [esp + 0x20]
push 1
push 0
push esi
push edx
call fcn.00471c00
jmp 0x429bd4
mov ebx, dword [esp + 0x1c]
mov edi, 2
mov ecx, ebx
call fcn.0041fd60
mov esi, eax
test esi, esi
jns 0x42717a
xor esi, esi
mov edi, 1
mov ecx, ebx
call fcn.0041fcd0
cmp esi, eax
jbe 0x42718c
mov esi, eax
mov ecx, dword [0x4c1dfc]
push 1
push 0
sub eax, esi
lea eax, [ecx + eax*2]
mov ecx, dword [esp + 0x28]
push esi
push eax
call fcn.00471c00
jmp 0x429bd4
cmp byte [esi + 1], 4
jb 0x4271e7
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x34]
cmp word [ecx], dx
je 0x4271e7
mov ecx, dword [esp + 0x1c]
mov edi, 3
call fcn.0041fd60
mov ebx, eax
cmp ebx, 1
jge 0x4271ec
mov ecx, dword [esp + 0x20]
push 1
push 0
push 0xffffffffffffffff
push 0
call fcn.00471c00
jmp 0x429bd4
mov ebx, SysReAllocString
mov ecx, dword [esp + 0x1c]
mov edi, 2
call fcn.0041fd60
mov edx, dword [0x4c1e08]
mov esi, eax
mov ax, word [edx]
call fcn.00408f10
cmp ax, 0x4c
jne 0x427227
cmp esi, 1
jl 0x4271d1
mov eax, 1
sub eax, ebx
add esi, eax
cmp esi, 1
jge 0x427231
lea ebx, [ebx + esi - 1]
cmp esi, 1
jge 0x427231
mov esi, 1
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fcd0
cmp eax, esi
jb 0x4271d1
mov ecx, edi
sub ecx, esi
add eax, ecx
cmp ebx, eax
jbe 0x42724f
mov ebx, eax
mov edx, dword [0x4c1dfc]
mov ecx, dword [esp + 0x20]
push 1
push 0
lea esi, [edx + esi*2 - 2]
push ebx
push esi
call fcn.00471c00
jmp 0x429bd4
mov ebx, dword [esp + 0x1c]
mov edi, 2
mov ecx, ebx
call fcn.0041fd60
mov esi, eax
test esi, esi
jns 0x427285
xor esi, esi
mov edi, 1
mov ecx, ebx
call fcn.0041fcd0
cmp esi, eax
jbe 0x427297
mov esi, eax
mov ecx, dword [0x4c1dfc]
push 1
push 0
sub eax, esi
lea ecx, [ecx + esi*2]
push eax
push ecx
mov ecx, dword [esp + 0x30]
call fcn.00471c00
jmp 0x429bd4
mov ebx, dword [esp + 0x1c]
mov edi, 2
mov ecx, ebx
call fcn.0041fd60
mov esi, eax
test esi, esi
jns 0x4272ce
xor esi, esi
mov edi, 1
mov ecx, ebx
call fcn.0041fcd0
cmp esi, eax
jbe 0x4272e0
mov esi, eax
mov edx, dword [0x4c1dfc]
mov ecx, dword [esp + 0x20]
push 1
push 0
sub eax, esi
push eax
push edx
call fcn.00471c00
jmp 0x429bd4
cmp byte [edi + 0x17], dl
jne 0x427306
mov esi, dword [edi + 0xc]
jmp 0x427308
mov esi, edi
mov bl, 8
test byte [esi + 0x15], bl
je 0x427316
mov eax, esi
call fcn.00401160
mov al, byte [esi + 0x17]
cmp al, 1
jne 0x427322
mov esi, dword [esi + 8]
jmp 0x427334
cmp al, 2
jne 0x42732f
call fcn.00401000
mov esi, eax
jmp 0x427334
mov esi, 0x4c3fa8
cmp esi, dword [0x4c1dfc]
jne 0x427351
mov al, byte [edi + 0x17]
test al, al
jne 0x427349
mov eax, dword [edi + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
je 0x4273d7
mov ecx, dword [esp + 0x1c]
push 1
push 0
mov edi, 1
call fcn.0041fcd0
mov edi, dword [esp + 0x28]
push eax
push 0
mov ecx, edi
call fcn.00471c00
cmp eax, 1
jne case.0x42686a.8
cmp byte [edi + 0x17], 0
jne 0x427385
mov esi, dword [edi + 0xc]
jmp 0x427387
mov esi, edi
test byte [esi + 0x15], bl
je 0x427393
mov eax, esi
call fcn.00401160
mov al, byte [esi + 0x17]
cmp al, 1
jne 0x4273ac
test byte [esi + 0x15], 4
je 0x4273a7
mov eax, esi
call fcn.0042f5b0
mov esi, dword [esi + 8]
jmp 0x4273be
cmp al, 2
jne 0x4273b9
call fcn.00401000
mov esi, eax
jmp 0x4273be
mov esi, 0x4c3fa8
mov ecx, dword [0x4c1dfc]
mov edx, esi
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x4273c6
mov ecx, dword [0x4c1e00]
movzx eax, word [ecx]
test ax, ax
je 0x427406
call fcn.00408f10
cmp ax, 0x54
jne 0x427406
mov edx, dword [0x4c1e00]
cmp word [edx + 2], 0
jne 0x427406
mov eax, esi
call fcn.004124c0
jmp 0x42741e
mov eax, dword [esp + 0x1c]
cmp byte [eax], 0x31
push esi
jne 0x427418
call dword [sym.imp.USER32.dll_CharLowerW]
jmp 0x42741e
call dword [sym.imp.USER32.dll_CharUpperW]
cmp byte [edi + 0x17], 0
jne 0x427429
mov eax, dword [edi + 0xc]
jmp 0x42742b
mov eax, edi
cmp byte [eax + 0x17], 2
jne 0x427449
cmp dword [0x4c4b0c], 0
je 0x427449
mov ecx, 0x4c4b00
call fcn.00403ca0
jmp 0x429bd4
and byte [eax + 0x15], 0x86
mov eax, 1
jmp 0x429bd4
mov eax, dword [0x4c1e4c]
cmp eax, edx
je 0x427488
cmp byte [eax + 0x17], dl
jne 0x42746d
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x15]
jmp 0x427470
mov cl, byte [eax + 0x15]
test cl, 1
je 0x427488
call fcn.00412c70
push 0
push eax
push edi
call fcn.00412750
jmp 0x429bd4
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fcd0
mov edi, dword [esp + 0x20]
push 0
push eax
push edi
call fcn.00412750
jmp 0x429bd4
mov esi, dword [0x4c1e04]
movzx eax, word [esi]
mov dword [esp + 0x38], esi
mov dword [esp + 0x28], 0xffffffff
test ax, ax
je 0x427540
call fcn.00408f10
movzx edx, ax
push edx
push 0x4a2594
call fcn.00488f71
add esp, 8
test eax, eax
je 0x427540
add esi, 2
cmp word [esi], 0
je 0x427540
call fcn.0040c940
mov dword [esp + 0x48], eax
test eax, eax
jle 0x42763c
mov eax, dword [0x4c1e00]
cmp word [eax], 0
jne 0x42754a
mov dword [esp + 0x28], 0
mov eax, 0x49b8c0
mov ecx, dword [0x4c26a8]
push 1
push 0
push 0xffffffffffffffff
push eax
call fcn.00471c00
mov eax, dword [esp + 0x28]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x2c]
call fcn.004010e0
mov eax, 1
jmp 0x429bd4
mov dword [esp + 0x48], 1
jmp 0x4274fa
mov ecx, dword [0x4c1dfc]
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x1c]
mov edi, 4
mov dword [esp + 0x44], eax
call fcn.0041fd60
mov esi, eax
test esi, esi
jns 0x42756e
xor esi, esi
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fcd0
mov edi, eax
cmp esi, edi
jge 0x42763c
mov edx, dword [esp + 0x38]
movzx eax, word [edx]
cmp eax, 0x31
je 0x427605
call fcn.00408f10
cmp ax, 0x52
je 0x427605
mov ecx, dword [esp + 0x1c]
mov edi, 2
call fcn.0041fcd0
mov ebx, eax
mov eax, dword [esp + 0x34]
lea ecx, [eax + esi*2]
mov esi, dword [esp + 0x44]
mov edi, 1
mov edx, dword [0x4be3fc]
mov al, byte [edx + 0xea]
test al, al
jne 0x4275da
mov eax, esi
call fcn.0046f4b0
jmp 0x4275f5
cmp al, 2
jne 0x4275eb
push ecx
mov eax, esi
call fcn.0046f720
add esp, 4
jmp 0x4275f5
push esi
push ecx
call fcn.00488f98
add esp, 8
test eax, eax
je 0x42763c
cmp edi, dword [esp + 0x48]
je 0x427628
inc edi
lea ecx, [eax + ebx*2]
jmp 0x4275c1
movzx ecx, byte [ebx + 0xea]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
push eax
push ecx
mov ecx, dword [esp + 0x3c]
push edx
mov eax, edi
sub eax, esi
push ecx
call fcn.0046f2a0
add esp, 0x10
test eax, eax
je 0x42763c
sub eax, dword [esp + 0x34]
sar eax, 1
mov dword [esp + 0x28], eax
jns 0x42750d
mov eax, 0x49e334
jmp 0x427512
push esi
call fcn.0043c620
jmp 0x429bd4
mov edx, dword [0x4c1e00]
mov eax, dword [0x4c1e04]
mov ecx, dword [0x4c1dfc]
push edx
call fcn.00432650
jmp 0x429bd4
mov eax, dword [0x4c1e04]
mov ecx, dword [0x4c1e00]
push eax
mov eax, dword [0x4c1df8]
push ecx
mov ecx, dword [0x4c1dfc]
push esi
call fcn.0043c870
jmp 0x429bd4
mov edx, dword [0x4c1df8]
push edx
mov eax, esi
call fcn.0043cbb0
jmp 0x429bd4
mov eax, dword [0x4c1df8]
mov ecx, dword [0x4c1dfc]
push eax
push esi
call fcn.0043d230
jmp 0x429bd4
mov esi, dword [esp + 0x1c]
push 0
push ecx
mov edi, 7
mov ecx, esi
call fcn.0041fd60
add esp, 4
push eax
mov edi, 6
mov ecx, esi
call fcn.0041fd60
push eax
push ecx
mov edi, 5
mov ecx, esi
call fcn.0041fd60
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.0041fd60
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.0041fd60
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.0041fd60
mov ecx, dword [0x4c1e18]
push eax
push esi
call fcn.00438740
jmp 0x429bd4
mov ecx, dword [0x4c1e10]
mov esi, dword [esp + 0x1c]
push ecx
push ecx
mov edi, 5
mov ecx, esi
call fcn.0041fd60
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.0041fd60
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.0041fd60
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.0041fd60
push eax
push esi
call fcn.00438e70
jmp 0x429bd4
mov edx, dword [0x4c1e04]
mov esi, dword [esp + 0x1c]
push edx
push ecx
mov edi, 2
mov ecx, esi
call fcn.0041fd60
mov edi, 1
mov ecx, esi
mov ebx, eax
call fcn.0041fd60
add esp, 4
mov ecx, eax
push esi
mov eax, ebx
call fcn.0044f240
jmp 0x429bd4
mov ecx, dword [ebx + 0xcc]
push edx
cmp al, 0x42
sete dl
push ecx
mov ecx, dword [0x4c1df8]
movzx eax, dl
push eax
push ecx
call fcn.0040cf90
add esp, 0x10
mov eax, 1
jmp 0x429bd4
mov ecx, dword [0x4c1df8]
xor eax, eax
cmp dword [ebx + 0xcc], 3
push edx
sete al
lea eax, [eax + eax + 1]
push eax
push edx
push ecx
call fcn.0040cf90
add esp, 0x10
mov eax, 1
jmp 0x429bd4
push edx
push 2
push edx
mov edx, dword [0x4c1df8]
push edx
call fcn.0040cf90
add esp, 0x10
mov eax, 1
jmp 0x429bd4
mov eax, dword [0x4c1df8]
push edx
push edx
push edx
push eax
call fcn.0040cf90
add esp, 0x10
mov eax, 1
jmp 0x429bd4
mov ecx, dword [0x4c1df8]
push ecx
call fcn.0040f200
add esp, 4
jmp 0x429bd4
mov edx, dword [0x4c1e10]
mov ecx, dword [0x4c1e08]
push 0x4a59a4
push 0x4a59a4
push edx
mov edx, dword [0x4c1e04]
push ecx
mov ecx, dword [0x4c1e00]
push edx
mov edx, dword [0x4c1dfc]
push ecx
push edx
mov edx, dword [0x4c1df8]
push eax
mov eax, dword [0x4c1e0c]
call fcn.0040f470
add esp, 0x20
jmp 0x429bd4
mov ecx, dword [0x4c1e0c]
mov edx, dword [0x4c1e04]
push ecx
mov ecx, dword [0x4c1e10]
push edx
mov edx, dword [0x4c1e00]
push ecx
mov ecx, dword [0x4c1dfc]
push 0x4a59a4
push 0x4a59a4
push edx
mov edx, dword [0x4c1df8]
push ecx
push eax
mov eax, dword [0x4c1e08]
call fcn.0040f470
add esp, 0x20
jmp 0x429bd4
mov edx, dword [0x4c1e04]
mov ecx, dword [0x4c1dfc]
push 0x4a59a4
push 0x4a59a4
push edx
mov edx, dword [0x4c1df8]
push 0x4a59a4
push 0x4a59a4
push ecx
push edx
push eax
mov eax, dword [0x4c1e00]
mov edx, 0x4a59a4
call fcn.0040f470
add esp, 0x20
jmp 0x429bd4
mov esi, dword [esp + 0x1c]
mov edi, 4
mov ecx, esi
call fcn.0041fd60
push eax
mov ecx, esi
call fcn.0043b580
jmp 0x429bd4
mov ecx, dword [0x4c1e00]
push edx
push edx
cmp al, 0x74
mov eax, dword [0x4c1e04]
push eax
mov eax, dword [0x4c1dfc]
push ecx
mov ecx, dword [0x4c1df8]
sete dl
push eax
call fcn.00472850
add esp, 0x14
test eax, eax
je 0x427986
mov ecx, dword [0x4be3fc]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x427986
push 1
push eax
call fcn.004012b0
add esp, 8
mov eax, 1
jmp 0x429bd4
mov edx, dword [0x4c1df8]
push 9
push str.ahk_group
push edx
call fcn.004889e2
add esp, 0xc
test eax, eax
jne 0x4279c6
mov eax, dword [0x4c1dfc]
cmp word [eax], 0
jne 0x4279c6
mov ecx, dword [0x4c1e04]
cmp word [ecx], 0
mov byte [esp + 0x33], 1
je 0x4279cb
mov byte [esp + 0x33], 0
mov eax, dword [esp + 0x1c]
mov al, byte [eax]
xor edx, edx
cmp byte [esp + 0x33], dl
setne dl
lea esi, [edx - 1]
and esi, 0x14
cmp al, 0x80
je 0x427a33
cmp al, 0x81
je 0x427a33
mov ecx, dword [0x4c1e00]
cmp word [ecx], 0
je 0x427a6e
mov edx, dword [esp + 0x1c]
mov al, byte [edx]
cmp al, 0x80
je 0x427aaa
cmp al, 0x81
je 0x427aac
mov ecx, dword [0x4c1e00]
mov edx, dword [0x4c1dfc]
push ecx
mov ecx, dword [0x4c1df8]
push edx
mov edx, dword [0x4c1e04]
push eax
call fcn.00434160
jmp 0x429bd4
mov edx, dword [0x4c1e00]
cmp word [edx], 0
je 0x427a63
mov ecx, dword [esp + 0x1c]
mov edi, 2
call fcn.0041fe10
fmul qword [0x4b8958]
call fcn.004967e0
mov esi, eax
test esi, esi
jne 0x427a63
mov esi, 0x1f4
mov eax, dword [0x4c1e08]
cmp word [eax], 0
jne 0x4279f8
cmp byte [esp + 0x33], 0
je 0x4279f8
mov eax, dword [0x4c1df8]
push 0
add eax, 0x12
call fcn.00408f90
push eax
mov ecx, 0x4c4000
call fcn.00422f80
test eax, eax
je 0x4279f8
mov ecx, dword [esp + 0x1c]
mov cl, byte [ecx]
push eax
mov edx, esi
call fcn.00474700
jmp 0x429bd4
cmp al, 0x81
mov edx, dword [0x4c1e08]
sete al
movzx ecx, al
mov eax, dword [0x4c1dfc]
push ecx
push edx
push esi
push eax
mov eax, dword [0x4c1e04]
push ebx
mov ebx, dword [0x4c1df8]
call fcn.00472b50
add esp, 0x14
test eax, eax
je 0x427986
mov ecx, dword [0x4be3fc]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x427986
push 1
push eax
call fcn.004012b0
add esp, 8
mov eax, 1
jmp 0x429bd4
mov ecx, dword [0x4c1dfc]
call fcn.00438080
jmp 0x429bd4
mov edx, dword [0x4c1dfc]
mov eax, dword [0x4c1df8]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042eb20
jmp 0x429bd4
lea eax, [esp + 0xac]
push eax
push 0x3a98
push 1
push str.Environment
push edx
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042eb20
jmp 0x429bd4
mov eax, dword [0x4c1dfc]
mov ecx, dword [0x4c1df8]
push eax
push ecx
push esi
call fcn.00450aa0
jmp 0x429bd4
mov eax, dword [0x4c1df8]
mov ecx, 0x4c4ac0
call fcn.0046c940
mov eax, dword [0x4c1dfc]
mov ecx, 0x4c4acc
call fcn.0046c940
mov eax, dword [0x4c1e00]
mov ecx, 0x4c4ad8
call fcn.0046c940
mov eax, 1
jmp 0x429bd4
mov ecx, dword [0x4c1e00]
mov eax, str.UseErrorLevel
call fcn.0046f4b0
test eax, eax
setne bl
mov dl, 3
cmp dl, byte [esi + 1]
mov edx, dword [0x4c1e00]
sbb eax, eax
and eax, dword [0x4c1e54]
mov byte [esp + 0x90], bl
mov ecx, dword [esp + 0x90]
push eax
push 1
push ecx
push 0
push edx
mov edx, dword [0x4c1dfc]
test bl, bl
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4c1df8]
push 0
push 0x4c4000
call fcn.0042faf0
test bl, bl
je 0x429bd4
test eax, eax
mov eax, 0x49b8c0
jne 0x427c35
mov eax, str.ERROR
mov ecx, dword [0x4c26a8]
push 1
push 0
push 0xffffffffffffffff
push eax
call fcn.00471c00
jmp 0x429bd4
push esi
call fcn.00434240
jmp 0x429bd4
cmp byte [esi + 1], 2
jbe 0x427c99
mov eax, dword [0x4c1e10]
mov ecx, dword [0x4c1e0c]
mov edx, dword [0x4c1e08]
push eax
mov eax, dword [0x4c1e04]
push ecx
mov ecx, dword [0x4c1e00]
push edx
mov edx, dword [0x4c1e14]
push eax
mov eax, dword [0x4c1dfc]
push ecx
mov ecx, dword [0x4c1df8]
call fcn.00434900
jmp 0x429bd4
mov edx, dword [0x4c1dfc]
mov eax, dword [0x4c1df8]
push 0x4a59a4
push 0x4a59a4
push 0x4a59a4
push edx
mov edx, 0x4a59a4
push eax
mov eax, edx
mov ecx, edx
call fcn.00434900
jmp 0x429bd4
mov ecx, dword [0x4c1e20]
mov edx, dword [0x4c1e1c]
mov eax, dword [0x4c1e18]
push ecx
mov ecx, dword [0x4c1e14]
push edx
mov edx, dword [0x4c1e10]
push eax
mov eax, dword [0x4c1e04]
push ecx
mov ecx, dword [0x4c1e00]
push edx
mov edx, dword [0x4c1dfc]
push eax
mov eax, dword [0x4c1df8]
push ecx
mov ecx, dword [0x4c1e08]
push edx
mov edx, dword [0x4c1e0c]
push eax
push esi
call fcn.0044f6a0
jmp 0x429bd4
cmp al, 0x47
mov eax, dword [0x4c1e08]
sete cl
movzx edx, cl
mov ecx, dword [0x4c1e04]
push edx
mov edx, dword [0x4c1dfc]
push eax
mov eax, dword [0x4c1df8]
push ecx
mov ecx, dword [0x4c1e00]
push edx
mov edx, dword [0x4c1e0c]
push eax
push esi
call fcn.00434a20
jmp 0x429bd4
mov esi, dword [0x4c1e04]
push 1
xor bl, bl
call fcn.0040c970
add esp, 4
mov byte [esp + 0x64], al
test al, al
jne 0x427d8b
mov ecx, dword [0x4c1e04]
push ecx
mov ecx, dword [esp + 0x20]
push 0
push str.Parameter_4_invalid.
call fcn.0042ed60
jmp 0x429bd4
mov edx, dword [0x4c1e08]
cmp word [edx], 0
je 0x427da7
mov ecx, dword [esp + 0x1c]
mov edi, 4
call fcn.0041fd60
jmp 0x427dac
mov eax, 1
mov ecx, dword [0x4c1e10]
mov edx, dword [0x4c1e00]
push ecx
mov ecx, dword [0x4c1df8]
push edx
mov edx, dword [0x4c1e0c]
push ecx
mov ecx, dword [esp + 0x28]
push edx
mov edx, dword [0x4c1e14]
push eax
mov eax, dword [esp + 0x78]
push eax
push ecx
mov ecx, dword [0x4c1dfc]
call fcn.00434ae0
jmp 0x429bd4
mov edx, dword [0x4c1e14]
mov eax, dword [0x4c1e10]
mov ecx, dword [0x4c1e08]
push edx
mov edx, dword [0x4c1e04]
push eax
mov eax, dword [0x4c1e00]
push ecx
mov ecx, dword [0x4c1dfc]
push edx
mov edx, dword [0x4c1df8]
push eax
push ecx
mov ecx, dword [0x4c1e0c]
push edx
mov edx, dword [0x4c1e18]
push esi
call fcn.004350d0
jmp 0x429bd4
mov eax, dword [0x4c1e18]
mov ecx, dword [0x4c1e14]
mov edx, dword [0x4c1e10]
push eax
mov eax, dword [0x4c1e0c]
push ecx
mov ecx, dword [0x4c1e08]
push edx
push eax
push ecx
mov ecx, esi
call fcn.004352f0
jmp 0x429bd4
mov edx, dword [0x4c1e08]
mov eax, dword [0x4c1e04]
mov ecx, dword [0x4c1e00]
push edx
mov edx, dword [0x4c1dfc]
push eax
push ecx
push edx
push esi
call fcn.00435460
jmp 0x429bd4
mov eax, dword [0x4c1e04]
mov ecx, dword [0x4c1e00]
mov edx, dword [0x4c1df8]
push eax
push ecx
mov ecx, dword [0x4c1dfc]
push edx
mov edx, dword [0x4c1e08]
push esi
call fcn.00435670
jmp 0x429bd4
mov eax, dword [0x4c1e08]
mov ecx, dword [0x4c1e04]
mov edx, dword [0x4c1dfc]
mov esi, dword [0x4c1df8]
push eax
mov eax, dword [esp + 0x20]
push ecx
mov ecx, dword [0x4c1e00]
push edx
mov edx, dword [0x4c1e0c]
push eax
call fcn.00435790
jmp 0x429bd4
mov ecx, dword [0x4c1e08]
mov edx, dword [0x4c1dfc]
mov eax, dword [0x4c1e04]
push ecx
mov ecx, dword [0x4c1e00]
push edx
mov edx, dword [0x4c1e0c]
push esi
call fcn.00435850
jmp 0x429bd4
mov eax, dword [0x4c1e10]
mov ecx, dword [0x4c1e0c]
mov edx, dword [0x4c1e08]
push eax
mov eax, dword [0x4c1e04]
push ecx
mov ecx, dword [0x4c1e00]
push edx
mov edx, dword [0x4c1df8]
push eax
push ecx
mov ecx, dword [0x4c1dfc]
push esi
call fcn.0044f980
jmp 0x429bd4
mov edx, dword [0x4c1e14]
mov eax, dword [0x4c1e10]
mov ecx, dword [0x4c1e0c]
push edx
mov edx, dword [0x4c1e08]
push eax
mov eax, dword [0x4c1e04]
push ecx
mov ecx, dword [0x4c1e00]
push edx
push eax
push ecx
mov ecx, dword [0x4c1dfc]
push esi
call fcn.004501b0
jmp 0x429bd4
mov edx, dword [0x4c1e08]
mov eax, dword [0x4c1e04]
mov ecx, dword [0x4c1e00]
mov edi, dword [0x4c1dfc]
push edx
mov edx, dword [0x4c1e0c]
call fcn.004360d0
jmp 0x429bd4
mov eax, dword [0x4c1e10]
mov ecx, dword [0x4c1e0c]
mov edx, dword [0x4c1e08]
push eax
mov eax, dword [0x4c1e00]
push ecx
mov ecx, dword [0x4c1dfc]
push edx
mov edx, dword [0x4c1df8]
push eax
push ecx
mov ecx, dword [0x4c1e04]
push edx
mov edx, dword [0x4c1e14]
call fcn.00436140
jmp 0x429bd4
cmp al, 0x8e
sete al
movzx ecx, al
push ecx
mov eax, esi
call fcn.00436270
jmp 0x429bd4
mov edx, dword [0x4c1dfc]
mov ecx, dword [0x4c1e00]
push edx
mov edx, dword [0x4c1df8]
push esi
call fcn.00436590
jmp 0x429bd4
mov eax, dword [0x4c1e0c]
mov ecx, dword [0x4c1e08]
mov edx, dword [0x4c1e04]
push eax
mov eax, dword [0x4c1e00]
push ecx
mov ecx, dword [0x4c1dfc]
push edx
mov edx, dword [0x4c1df8]
push eax
push esi
call fcn.00436bf0
jmp 0x429bd4
cmp byte [esi + 1], 1
jbe 0x428076
mov ecx, dword [0x4c1e04]
mov edx, dword [0x4c1e00]
mov eax, dword [0x4c1dfc]
push ecx
mov ecx, dword [0x4c1df8]
push edx
mov edx, dword [0x4c1e08]
call fcn.00437020
jmp 0x429bd4
mov esi, dword [0x4c1df8]
mov edx, 0x4a59a4
push 0x4a59a4
mov eax, edx
mov ecx, edx
call fcn.00442800
test eax, eax
je 0x42809b
push esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, 1
jmp 0x429bd4
mov eax, dword [0x4c1e04]
mov edx, dword [0x4c1e08]
mov ecx, dword [0x4c1dfc]
push eax
mov eax, dword [0x4c1e00]
call fcn.00437050
jmp 0x429bd4
mov ecx, dword [0x4c1e04]
mov edx, dword [0x4c1e08]
mov eax, dword [0x4c1e00]
push ecx
mov ecx, dword [0x4c1dfc]
call fcn.00437260
jmp 0x429bd4
mov edx, dword [0x4c1e08]
mov eax, dword [0x4c1e04]
mov ecx, dword [0x4c1dfc]
push edx
mov edx, dword [0x4c1e00]
push eax
push ecx
mov ecx, dword [0x4c1e0c]
push esi
call fcn.00437390
jmp 0x429bd4
mov edx, dword [0x4c1e04]
mov eax, dword [0x4c1e00]
mov ecx, dword [0x4c1dfc]
push edx
mov edx, dword [0x4c1e08]
push esi
call fcn.00437c50
jmp 0x429bd4
mov eax, dword [0x4c1e14]
mov ecx, dword [0x4c1e10]
mov edx, dword [0x4c1e0c]
push eax
mov eax, dword [0x4c1e08]
push ecx
push edx
push eax
mov eax, esi
call fcn.00437f00
jmp 0x429bd4
mov ecx, dword [0x4c1e00]
push ecx
mov ecx, dword [0x4c1dfc]
push esi
call fcn.004380d0
jmp 0x429bd4
push edx
push 0x1a3
push 0x111
push edx
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [0x4be3fc]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle 0x427986
push 1
push eax
call fcn.004012b0
add esp, 8
mov eax, 1
jmp 0x429bd4
push edx
push 0x1a0
push 0x111
push edx
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [0x4be3fc]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle 0x427986
push 1
push eax
call fcn.004012b0
add esp, 8
mov eax, 1
jmp 0x429bd4
mov ecx, dword [0x4c1df8]
cmp word [ecx], dx
jne 0x428218
mov dword [0x4c4a54], edx
mov eax, 1
jmp 0x429bd4
mov eax, dword [esi + 0xc]
cmp eax, edx
jne 0x42824a
mov edi, ecx
mov eax, 0x4c4000
call fcn.00419930
test eax, eax
jne 0x42824a
mov ecx, dword [0x4c1df8]
push ecx
mov ecx, dword [esp + 0x20]
push eax
push 0x49e338
call fcn.0042ed60
jmp 0x429bd4
mov dword [0x4c4a54], eax
mov eax, 1
jmp 0x429bd4
mov edx, dword [0x4c1e00]
mov eax, dword [0x4c1dfc]
mov ecx, dword [0x4c1df8]
push edx
push eax
push ecx
mov ecx, dword [esi + 0xc]
call fcn.0040a020
add esp, 0xc
jmp 0x429bd4
mov edx, dword [esp + 0x1c]
mov edi, dword [edx + 0xc]
test edi, edi
jne 0x4282c6
mov eax, dword [0x4c1df8]
cmp word [eax], di
je 0x4282a7
mov edi, eax
mov eax, 0x4c4000
call fcn.00419930
mov edi, eax
mov eax, dword [0x4c1df8]
jmp 0x4282ad
mov edi, dword [ebx + 0xbc]
test edi, edi
jne 0x4282c6
mov ecx, dword [esp + 0x1c]
push eax
push edi
push 0x49e338
call fcn.0042ed60
jmp 0x429bd4
mov esi, dword [0x4c1dfc]
cmp word [esi], 0
je 0x428341
push 0
call fcn.00413cc0
add esp, 4
test eax, eax
jne 0x428317
push eax
mov eax, dword [0x4c1dfc]
push 1
push 1
push 1
call fcn.0046ef80
add esp, 0x10
test eax, eax
jne 0x428337
mov eax, dword [0x4c1dfc]
mov ecx, dword [esp + 0x1c]
push eax
push 0
push str.Parameter_2_invalid.
call fcn.0042ed60
jmp 0x429bd4
jle 0x428337
cmp eax, 2
jg 0x428337
cmp eax, 1
mov eax, dword [0x4c1e00]
sete cl
push 0
movzx edx, cl
push edx
push eax
push 0x4a59a4
jmp 0x42835a
mov esi, dword [0x4c1dfc]
cmp word [esi], 0
mov ecx, dword [0x4c1e00]
jne 0x428353
cmp word [ecx], 0
je 0x428353
mov al, 1
jmp 0x428355
xor al, al
push eax
push 1
push ecx
push esi
mov ecx, edi
mov edx, 0x4c4000
call fcn.00419680
mov eax, 1
jmp 0x429bd4
mov eax, dword [0x4c1df8]
mov esi, 0x10
cmp word [eax], dx
je 0x4283a2
push 0x49ef0c
push eax
call fcn.004881a9
add esp, 8
test eax, eax
je 0x4283a2
mov ecx, dword [esp + 0x1c]
xor edi, edi
call fcn.0041fd60
mov esi, eax
test esi, esi
je 0x4283a7
mov eax, 1
mov byte [ebx + 0xe6], al
test al, al
je 0x4283d3
or eax, 0xffffffff
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 0x24], eax
mov dword [ebx + 0xd0], esi
mov byte [ebx + 0xe4], 0
mov eax, 1
jmp 0x429bd4
mov dword [ebx + 0xd0], 5
mov byte [ebx + 0xe4], 1
mov eax, 1
jmp 0x429bd4
mov esi, dword [0x4c1df8]
call fcn.00413c60
dec eax
je 0x428489
dec eax
je 0x428444
dec eax
jne 0x42849a
mov ecx, dword [0x4c1dfc]
cmp word [ecx], ax
je 0x428432
mov ecx, dword [esp + 0x1c]
lea edi, [eax + 1]
call fcn.0041fd60
or eax, edx
jne 0x428432
mov eax, edi
mov byte [ebx + 0xe5], al
jmp 0x429bd4
xor eax, eax
mov byte [ebx + 0xe5], al
mov eax, 1
jmp 0x429bd4
mov edx, dword [0x4c1df8]
cmp word [edx], 0
je 0x428463
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fd60
mov dword [0x4c4ab4], eax
mov eax, dword [0x4c1dfc]
cmp word [eax], 0
je 0x42849a
mov ecx, dword [esp + 0x1c]
mov edi, 2
call fcn.0041fd60
mov dword [0x4c4ab0], eax
lea eax, [edi - 1]
jmp 0x429bd4
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fd60
mov dword [ebx + 0x2c], eax
mov eax, 1
jmp 0x429bd4
mov edi, dword [esp + 0x1c]
mov esi, dword [edi + 0xc]
test esi, esi
jne 0x4284cc
mov ecx, dword [0x4c1df8]
push 1
push ecx
mov ecx, 0x4c4000
call fcn.00422f80
mov esi, eax
test esi, esi
je case.0x42686a.8
mov ecx, dword [0x4c1e04]
cmp word [ecx], 0
je 0x42850d
mov eax, dword [edi + 0x18]
test eax, eax
jne 0x42850a
mov edi, ecx
mov eax, 0x4c4000
call fcn.00419930
test eax, eax
jne 0x42850a
mov edx, dword [0x4c1e04]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 0x49e338
call fcn.0042ed60
jmp 0x429bd4
mov dword [esi + 0x10], eax
mov eax, dword [0x4c1e0c]
mov ecx, dword [0x4c1e08]
mov edx, dword [0x4c1dfc]
push eax
push ecx
mov ecx, dword [0x4c1e00]
push edx
push esi
call fcn.004744c0
jmp 0x429bd4
mov eax, dword [esp + 0x1c]
mov esi, dword [eax + 0xc]
test esi, esi
jne 0x428555
mov ecx, dword [0x4c1df8]
push esi
push ecx
mov ecx, 0x4c4000
call fcn.00422f80
mov esi, eax
test esi, esi
je 0x428590
mov eax, dword [0x4c1dfc]
cmp word [eax], 0
je 0x428586
push 0x49e7a8
push eax
call fcn.004881a9
add esp, 8
test eax, eax
jne 0x428586
mov al, 1
mov ecx, esi
push eax
call fcn.00474a40
mov eax, 1
jmp 0x429bd4
xor al, al
mov ecx, esi
push eax
call fcn.00474a40
mov eax, 1
jmp 0x429bd4
mov edx, dword [esp + 0x1c]
mov esi, dword [edx + 0xc]
test esi, esi
jne 0x4285c0
mov eax, dword [0x4c1df8]
push esi
push eax
mov ecx, 0x4c4000
call fcn.00422f80
mov esi, eax
test esi, esi
je 0x42862a
mov eax, dword [0x4c1dfc]
cmp word [eax], 0
je 0x428621
push 0x4a03a8
push eax
call fcn.004881a9
add esp, 8
test eax, eax
jne 0x4285f1
push esi
xor edx, edx
mov cl, 0x80
call fcn.00474700
mov eax, 1
jmp 0x429bd4
mov eax, dword [0x4c1dfc]
cmp word [eax], 0
je 0x428621
push 0x49e7a8
push eax
call fcn.004881a9
add esp, 8
test eax, eax
jne 0x428621
mov al, 1
push eax
push esi
call fcn.004747c0
mov eax, 1
jmp 0x429bd4
xor al, al
push eax
push esi
call fcn.004747c0
mov eax, 1
jmp 0x429bd4
mov ecx, dword [0x4c1e00]
mov esi, dword [0x4c1dfc]
push ecx
call fcn.0043dee0
jmp 0x429bd4
cmp edi, edx
jne 0x428669
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fd60
call fcn.00412190
mov eax, edi
jmp 0x429bd4
mov eax, dword [0x4c1dfc]
push edx
push 1
push edx
push 1
call fcn.0046ef80
add esp, 0x10
cmp eax, 2
je 0x42869f
mov eax, dword [0x4c1e00]
push 0
push 1
push 0
push 1
call fcn.0046ef80
add esp, 0x10
cmp eax, 2
jne 0x42873f
mov edx, dword [0x4c1dfc]
cmp word [edx], 0
je 0x4286bb
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fe10
jmp 0x4286bd
fldz
mov eax, dword [0x4c1e00]
fst qword [esp + 0x38]
cmp word [eax], 0
je 0x4286ff
mov ecx, dword [esp + 0x1c]
fstp st(0)
mov edi, 2
call fcn.0041fe10
fst qword [esp + 0x80]
fld qword [esp + 0x38]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x42870e
fstp qword [esp + 0x38]
fstp qword [esp + 0x80]
jmp 0x428712
fld qword [0x4b8988]
fst qword [esp + 0x80]
jmp 0x4286e9
fstp st(0)
fstp st(0)
call fcn.00412300
fld qword [esp + 0x80]
fld qword [esp + 0x38]
mov ecx, dword [esp + 0x20]
fsub st(1), st(0)
sub esp, 8
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push ecx
call fcn.00412780
jmp 0x429bd4
mov edx, dword [0x4c1dfc]
cmp word [edx], 0
je 0x42875d
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fd60
mov esi, eax
jmp 0x42875f
xor esi, esi
mov eax, dword [0x4c1e00]
cmp word [eax], 0
je 0x42877c
mov ecx, dword [esp + 0x1c]
mov edi, 2
call fcn.0041fd60
mov edi, eax
jmp 0x428781
mov edi, SysReAllocString
cmp esi, edi
jle 0x42878b
mov eax, esi
mov esi, edi
mov edi, eax
call fcn.004122b0
mov ecx, eax
mov eax, edi
cdq
mov edi, eax
mov ebx, edx
mov eax, esi
cdq
sub edi, eax
sbb ebx, edx
add edi, 1
adc ebx, 0
push ebx
push edi
push 0
push ecx
call fcn.00497170
add eax, esi
jmp 0x427528
mov eax, dword [0x4c1dfc]
push esi
mov bl, 1
call fcn.0043e0b0
jmp 0x429bd4
mov edx, dword [0x4c1e00]
mov eax, dword [0x4c1dfc]
mov ecx, dword [0x4c1df8]
push edx
push esi
call fcn.0043e290
jmp 0x429bd4
mov eax, dword [0x4c1e00]
mov ecx, dword [0x4c1dfc]
push esi
call fcn.0043e540
jmp 0x429bd4
mov eax, dword [0x4c1e04]
cmp word [eax], dx
je 0x428817
mov ecx, dword [esp + 0x1c]
mov edi, 3
call fcn.0041fd60
dec eax
jmp 0x428819
xor eax, eax
cdq
mov ebx, eax
test edx, edx
jg 0x42882c
jl 0x428826
test ebx, ebx
jae 0x42882c
xor ebx, ebx
mov dword [esp + 0x3c], ebx
mov edi, dword [0x4c1dfc]
cmp word [edi], 0
mov dword [esp + 0x44], 1
je 0x428851
lea ecx, [esp + 0x44]
push ecx
call fcn.00413560
add esp, 4
mov edi, eax
jmp 0x428856
mov edi, 4
mov esi, dword [0x4c1e00]
cmp word [esi], 0
je 0x428869
call fcn.00413780
jmp 0x42886e
mov eax, 0x50030001
mov edx, dword [esp + 0x44]
push ebx
push eax
mov eax, dword [esp + 0x24]
xor ecx, ecx
cmp byte [eax], 0x99
push edx
sete cl
push edi
dec ecx
and ecx, dword [0x4c1df8]
push ecx
push eax
call fcn.0043eb20
jmp 0x429bd4
mov eax, dword [0x4c1dfc]
mov ebx, dword [esp + 0x1c]
cmp word [eax], dx
je 0x4288b2
mov edi, 1
mov ecx, ebx
call fcn.0041fd60
dec eax
jmp 0x4288b4
xor eax, eax
cdq
test edx, edx
jg 0x4288c5
jl 0x4288bf
test eax, eax
jae 0x4288c5
xor eax, eax
mov dword [esp + 0x3c], eax
cmp byte [ebx], 0x9b
push eax
jne 0x4288d6
push ebx
call fcn.0043f0b0
jmp 0x429bd4
mov edi, dword [0x4c1df8]
call fcn.0043f180
jmp 0x429bd4
mov ecx, dword [0x4c1dfc]
cmp word [ecx], dx
je 0x428903
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fd60
mov esi, eax
jmp 0x428908
mov esi, 0x96
mov edx, dword [0x4c1df8]
cmp word [edx], 0
je 0x42892f
mov ecx, dword [esp + 0x1c]
xor edi, edi
call fcn.0041fd60
push esi
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
lea eax, [edi + 1]
jmp 0x429bd4
mov eax, 0x20b
push esi
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov eax, 1
jmp 0x429bd4
mov eax, dword [0x4c1dfc]
cmp word [eax], dx
je 0x428967
push str.wait
push eax
call fcn.004881a9
add esp, 8
test eax, eax
je 0x42898c
mov eax, dword [0x4c1dfc]
push 0x49e334
push eax
call fcn.004881a9
add esp, 8
test eax, eax
je 0x42898c
xor al, al
push eax
mov eax, dword [0x4c1df8]
push esi
call fcn.0043f320
jmp 0x429bd4
mov eax, 1
push eax
mov eax, dword [0x4c1df8]
push esi
call fcn.0043f320
jmp 0x429bd4
cmp byte [esi + 1], 2
jae 0x4289ad
mov ebx, dword [ebx + 0x18]
jmp 0x4289af
xor ebx, ebx
mov eax, dword [0x4c1df8]
mov ecx, dword [0x4c1dfc]
push ebx
push eax
push ecx
push esi
call fcn.004407d0
jmp 0x429bd4
mov ecx, dword [0x4c1dfc]
push esi
call fcn.0043fe50
jmp 0x429bd4
mov edx, dword [0x4c1dfc]
mov ecx, dword [0x4c1e00]
push edx
push esi
call fcn.004403f0
jmp 0x429bd4
push esi
call fcn.004411d0
jmp 0x429bd4
mov eax, dword [0x4c1df8]
mov esi, dword [esp + 0x1c]
call fcn.00451770
jmp 0x429bd4
mov eax, dword [esp + 0x1c]
mov edi, dword [0x4c1df8]
push eax
call fcn.00451880
jmp 0x429bd4
mov eax, dword [0x4c1e00]
mov ecx, dword [0x4c1dfc]
mov edx, dword [0x4c1df8]
push esi
call fcn.004414b0
jmp 0x429bd4
mov esi, dword [esp + 0x1c]
add ebx, 0x30
push ebx
push 0
mov edi, 2
mov ecx, esi
call fcn.0041fd60
cmp eax, 1
mov eax, dword [0x4c1dfc]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4c1df8]
push eax
call fcn.00451f50
add esp, 0x10
test eax, eax
jne 0x428a92
mov ecx, dword [0x4c26a8]
push 1
push eax
push 0xffffffffffffffff
push 0x49b8c0
call fcn.00471c00
jmp 0x429bd4
cmp byte [0x4c4a9f], 0
je 0x428aea
mov ecx, dword [0x4c26a8]
push 1
push 0
push 0xffffffffffffffff
push 0x49e334
call fcn.00471c00
jmp 0x429bd4
mov esi, dword [esp + 0x1c]
add ebx, 0x30
push ebx
push 1
mov edi, 2
mov ecx, esi
call fcn.0041fd60
cmp eax, 1
mov eax, dword [0x4c1dfc]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4c1df8]
push eax
call fcn.00451f50
add esp, 0x10
push eax
push esi
call fcn.0042ebe0
jmp 0x429bd4
mov esi, dword [esp + 0x1c]
mov edi, 2
mov ecx, esi
call fcn.0041fd60
cmp eax, 1
mov eax, dword [0x4c1dfc]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4c1df8]
push eax
call fcn.00451ac0
add esp, 8
test al, al
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042eb20
jmp 0x429bd4
mov eax, dword [0x4c1e00]
mov ax, word [eax]
call fcn.00408f10
cmp ax, 0x52
jne 0x428b73
mov ecx, dword [0x4c1dfc]
mov edx, dword [0x4c1df8]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
sete al
movzx ecx, al
push ecx
push esi
call fcn.0042eb20
jmp 0x429bd4
mov esi, dword [esp + 0x1c]
mov edi, 2
mov ecx, esi
call fcn.0041fd60
mov edx, dword [0x4c1dfc]
push edx
mov edx, dword [0x4c1df8]
mov edi, eax
call fcn.00451c90
add esp, 4
test al, al
sete al
movzx ecx, al
push ecx
push esi
call fcn.0042eb20
jmp 0x429bd4
mov edx, dword [0x4c1df8]
push edx
mov ecx, esi
call fcn.0043fc80
jmp 0x429bd4
mov eax, dword [0x4c1df8]
cmp word [eax], dx
je 0x428c06
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fd60
cmp eax, edi
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4c1df8]
call fcn.00451e60
add esp, 4
test al, al
je 0x428c06
xor al, al
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.0042eb20
jmp 0x429bd4
mov eax, 1
push eax
mov eax, dword [esp + 0x20]
push eax
call fcn.0042eb20
jmp 0x429bd4
mov eax, dword [0x4c1dfc]
cmp word [eax], dx
jne 0x428c34
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
cmp ebx, edx
jne 0x428c34
mov eax, 0x4a59a4
mov edi, dword [esp + 0x1c]
call fcn.00441650
jmp 0x429bd4
mov eax, dword [0x4c1dfc]
cmp word [eax], dx
je 0x428c52
mov dword [esp + 0x34], eax
jmp 0x428c6a
mov eax, dword [ebx + 0x10]
cmp eax, edx
je 0x428c62
add eax, 0x2c
mov dword [esp + 0x34], eax
jmp 0x428c6a
mov dword [esp + 0x34], 0x4a59a4
push 0
push ecx
mov ecx, dword [esp + 0x24]
mov edi, 3
call fcn.0041fd60
mov esi, dword [0x4c1e00]
add esp, 4
cmp eax, 1
sete cl
movzx edx, cl
push edx
call fcn.00413fb0
mov ecx, dword [0x4c1df8]
push eax
mov eax, dword [esp + 0x40]
push eax
push ecx
mov ecx, dword [esp + 0x30]
call fcn.00441730
xor eax, eax
cmp dword [ebx + 0xf8], eax
sete al
jmp 0x429bd4
mov eax, dword [0x4c1dfc]
cmp word [eax], dx
jne 0x428cd2
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
cmp ebx, edx
jne 0x428cd2
mov eax, 0x4a59a4
mov edx, dword [0x4c1e00]
movzx ecx, word [edx]
mov edi, dword [esp + 0x1c]
push ecx
call fcn.00441e60
jmp 0x429bd4
mov eax, dword [0x4c1dfc]
cmp word [eax], dx
je 0x428cfa
mov dword [esp + 0x34], eax
jmp 0x428d12
mov eax, dword [ebx + 0x10]
cmp eax, edx
je 0x428d0a
add eax, 0x2c
mov dword [esp + 0x34], eax
jmp 0x428d12
mov dword [esp + 0x34], 0x4a59a4
push 0
push ecx
mov ecx, dword [esp + 0x24]
mov edi, 4
call fcn.0041fd60
mov esi, dword [0x4c1e04]
add esp, 4
cmp eax, 1
sete dl
movzx eax, dl
push eax
call fcn.00413fb0
mov ecx, dword [0x4c1e00]
movzx edx, word [ecx]
mov ecx, dword [0x4c1df8]
push eax
mov eax, dword [esp + 0x40]
push edx
push eax
push ecx
mov ecx, dword [esp + 0x34]
call fcn.00441fc0
xor eax, eax
cmp dword [ebx + 0xf8], eax
sete al
jmp 0x429bd4
mov eax, dword [0x4c1dfc]
cmp word [eax], dx
jne 0x428d84
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
cmp ebx, edx
jne 0x428d84
mov eax, 0x4a59a4
mov edx, dword [0x4c1e00]
push edx
mov ecx, esi
call fcn.004425d0
jmp 0x429bd4
mov eax, dword [0x4c1dfc]
cmp word [eax], dx
jne 0x428db0
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
cmp ebx, edx
jne 0x428db0
mov eax, 0x4a59a4
push esi
call fcn.00451930
jmp 0x429bd4
mov edi, dword [0x4c1df8]
call fcn.0043f530
xor eax, eax
cmp dword [ebx + 0xf8], eax
sete al
jmp 0x429bd4
mov eax, dword [0x4c1e08]
mov ecx, dword [0x4c1e04]
mov edx, dword [0x4c1dfc]
push eax
push ecx
mov ecx, dword [0x4c1e00]
push edx
push esi
call fcn.0043f620
jmp 0x429bd4
mov eax, dword [0x4c1e04]
mov ecx, dword [0x4c1e00]
mov edx, dword [0x4c1dfc]
push eax
push ecx
push edx
mov ecx, esi
call fcn.00450e80
jmp 0x429bd4
mov eax, dword [0x4c1df8]
push eax
push esi
call fcn.004511a0
jmp 0x429bd4
mov ecx, dword [0x4c1e18]
mov edx, dword [0x4c1e10]
mov eax, dword [0x4c1e0c]
mov ebx, dword [0x4c1e14]
mov edi, dword [0x4c1e04]
push ecx
mov ecx, dword [0x4c1e08]
push edx
mov edx, dword [0x4c1dfc]
push eax
mov eax, dword [0x4c1df8]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push eax
push ecx
mov ecx, dword [0x4c1e00]
call fcn.00451560
jmp 0x429bd4
push edx
mov ecx, 4
call fcn.0043a780
add esp, 4
jmp 0x429bd4
mov esi, dword [0x4c1df8]
push 7
call fcn.00413cc0
add esp, 4
cmp eax, 7
jne 0x428eaf
push 0
lea ecx, [eax - 6]
call fcn.0043a780
add esp, 4
jmp 0x429bd4
cmp byte [ebx + 0xf0], 0
je 0x428edb
mov ecx, dword [0x4c3f50]
test ecx, ecx
jle 0x428ec5
dec ecx
jmp 0x428eca
mov ecx, 0x18f
mov dword [0x4c3f50], ecx
mov dword [ecx*4 + 0x4c3910], 0
cmp eax, 1
sete dl
mov byte [ebx + 0xf0], dl
mov eax, 1
jmp 0x429bd4
push edx
mov ecx, 2
call fcn.0043a780
add esp, 4
jmp 0x429bd4
push edx
mov ecx, 3
call fcn.0043a780
add esp, 4
jmp 0x429bd4
mov ebx, dword [0x4be3fc]
add ebx, 0x4c
call fcn.00459390
test eax, eax
je 0x428f36
mov eax, dword [0x4be3fc]
mov ecx, dword [eax + 0x4c]
mov eax, dword [ecx + 4]
jmp 0x428f38
xor eax, eax
mov cl, byte [esi + 1]
push eax
test cl, cl
jne 0x428f56
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push str.Press_OK_to_continue.
jmp 0x428f9f
cmp cl, 1
jne 0x428f73
fldz
mov edx, dword [0x4c1df8]
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push edx
jmp 0x428f9f
mov esi, dword [esp + 0x20]
push ecx
mov edi, 3
mov ecx, esi
call fcn.0041fe10
mov eax, dword [0x4c1dfc]
push ecx
fstp qword [esp]
push eax
xor edi, edi
mov ecx, esi
call fcn.0041fd60
mov ecx, dword [0x4c1e00]
push eax
push ecx
call fcn.004736d0
xor edx, edx
add esp, 0x18
test eax, eax
setne dl
mov eax, edx
jmp 0x429bd4
mov eax, dword [0x4c1e14]
mov ebx, dword [esp + 0x1c]
cmp word [eax], dx
je 0x428fda
mov edi, 7
mov ecx, ebx
call fcn.0041fd60
mov dword [esp + 0x44], eax
mov esi, SysReAllocString
jmp 0x428fe3
mov esi, SysReAllocString
mov dword [esp + 0x44], esi
mov ecx, dword [0x4c1e10]
cmp word [ecx], 0
je 0x429001
mov edi, 6
mov ecx, ebx
call fcn.0041fd60
mov dword [esp + 0x34], eax
jmp 0x429005
mov dword [esp + 0x34], esi
mov edx, dword [0x4c1e0c]
cmp word [edx], 0
je 0x429023
mov edi, 5
mov ecx, ebx
call fcn.0041fd60
mov dword [esp + 0x48], eax
jmp 0x429027
mov dword [esp + 0x48], esi
mov eax, dword [0x4c1e08]
cmp word [eax], 0
je 0x429040
mov edi, 4
mov ecx, ebx
call fcn.0041fd60
mov esi, eax
mov edi, 9
mov ecx, ebx
call fcn.0041fe10
mov ecx, dword [0x4c1e20]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x34]
sub esp, 8
fstp qword [esp]
push ecx
mov ecx, dword [0x4c1e04]
push edx
push eax
mov ax, word [ecx]
call fcn.00408f10
mov ecx, dword [0x4c1dfc]
mov edi, dword [esp + 0x5c]
cmp ax, 0x48
mov eax, dword [0x4c1e00]
push eax
mov eax, dword [esp + 0x38]
push ecx
sete dl
push eax
mov ecx, esi
call fcn.0043a9b0
add esp, 0x20
jmp 0x429bd4
mov ecx, dword [0x4c1dfc]
cmp word [ecx], dx
je 0x4290ba
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fd60
mov esi, eax
jmp 0x4290bc
xor esi, esi
mov edx, dword [0x4c1df8]
cmp word [edx], 0
je 0x4290d5
mov ecx, dword [esp + 0x1c]
xor edi, edi
call fcn.0041fd60
jmp 0x4290da
mov eax, 0xc8
mov ecx, dword [0x4c1e04]
mov edx, dword [0x4c1e00]
push ecx
push edx
push eax
mov eax, esi
call fcn.0044f420
jmp 0x429bd4
mov eax, dword [0x4c1eb0]
cmp eax, edx
je 0x429115
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x429115
mov eax, dword [0x4c1eb0]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4c1eb0], 0
mov eax, 1
jmp 0x429bd4
mov ecx, dword [0x4c1e08]
mov eax, dword [0x4c1e00]
push edx
mov edx, dword [0x4c1e04]
push ecx
mov ecx, dword [0x4c1dfc]
push edx
mov edx, dword [0x4c1df8]
push eax
push ecx
push edx
push esi
mov ecx, 0x4a59a4
call fcn.00431030
jmp 0x429bd4
mov eax, dword [0x4c1e0c]
mov ecx, dword [0x4c1e08]
mov edx, dword [0x4c1e04]
push 1
push eax
mov eax, dword [0x4c1e00]
push ecx
mov ecx, dword [0x4c1dfc]
push edx
push eax
push ecx
mov ecx, dword [0x4c1df8]
push esi
call fcn.00431030
jmp 0x429bd4
mov edx, dword [0x4c1e00]
mov eax, dword [0x4c1dfc]
mov ecx, dword [0x4c1df8]
push edx
push eax
push ecx
mov ecx, dword [0x4c1e04]
push esi
call fcn.00432240
jmp 0x429bd4
mov edx, dword [0x4c1dfc]
mov eax, dword [0x4c1df8]
mov edi, dword [0x4c1e04]
mov esi, dword [0x4c1e00]
push edx
push eax
call fcn.00432550
jmp 0x429bd4
push esi
call fcn.004338d0
jmp 0x429bd4
mov esi, dword [0x4c1dfc]
call fcn.00414160
mov esi, dword [0x4c1df8]
movzx edi, ax
call fcn.004141d0
movzx ecx, ax
cmp ecx, 0xffffffff
je case.0x4295e2.69
cmp edi, 0xffffffff
je case.0x4295e2.69
mov eax, 3
shl ax, cl
shl di, cl
not ax
and ax, word [ebx + 0xe8]
or ax, di
mov word [ebx + 0xe8], ax
mov eax, 1
jmp 0x429bd4
mov ecx, dword [esp + 0x1c]
xor edi, edi
call fcn.0041fd60
mov byte [ebx + 0xe7], al
cmp al, 0x64
jbe case.0x4295e2.69
mov byte [ebx + 0xe7], 2
lea eax, [edi + 1]
jmp 0x429bd4
mov ecx, dword [ebx + 0xcc]
mov eax, dword [0x4c1df8]
push ecx
call fcn.00413f20
mov dword [ebx + 0xcc], eax
add esp, 4
mov eax, 1
jmp 0x429bd4
mov edx, dword [0x4c1e00]
push str.Play
push edx
call fcn.004881a9
add esp, 8
test eax, eax
jne 0x4292df
mov eax, dword [0x4c1df8]
cmp word [eax], 0
je 0x4292b7
mov ecx, dword [esp + 0x1c]
xor edi, edi
call fcn.0041fd60
mov dword [ebx + 0x60], eax
mov ecx, dword [0x4c1dfc]
cmp word [ecx], 0
je case.0x4295e2.69
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fd60
mov dword [ebx + 0x68], eax
mov eax, edi
jmp 0x429bd4
mov edx, dword [0x4c1df8]
cmp word [edx], 0
je 0x4292f9
mov ecx, dword [esp + 0x1c]
xor edi, edi
call fcn.0041fd60
mov dword [ebx + 0x5c], eax
mov eax, dword [0x4c1dfc]
cmp word [eax], 0
je case.0x4295e2.69
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fd60
mov dword [ebx + 0x64], eax
mov eax, edi
jmp 0x429bd4
mov ecx, dword [0x4c1dfc]
push str.Play
push ecx
call fcn.004881a9
mov ecx, dword [esp + 0x24]
add esp, 8
xor edi, edi
test eax, eax
jne 0x42934e
call fcn.0041fd60
mov dword [ebx + 0x70], eax
lea eax, [edi + 1]
jmp 0x429bd4
call fcn.0041fd60
mov dword [ebx + 0x6c], eax
mov eax, 1
jmp 0x429bd4
mov ecx, dword [esp + 0x1c]
xor edi, edi
call fcn.0041fd60
mov dword [ebx + 0x54], eax
lea eax, [edi + 1]
jmp 0x429bd4
mov ecx, dword [esp + 0x1c]
xor edi, edi
call fcn.0041fd60
mov dword [ebx + 0x58], eax
lea eax, [edi + 1]
jmp 0x429bd4
mov ecx, dword [0x4c1df8]
mov eax, 0x4a260c
call fcn.0046f4b0
mov ecx, dword [esp + 0x1c]
xor edi, edi
test eax, eax
je 0x4293c3
mov dword [ebx], 0xffffffff
mov dword [ebx + 4], 0xffffffff
call fcn.0041fd60
mov dword [ebx + 0x24], eax
lea eax, [edi + 1]
jmp 0x429bd4
mov dword [ebx + 0x24], 0xffffffff
call fcn.0041fd60
mov dword [ebx + 4], edx
mov edx, eax
or edx, dword [ebx + 4]
mov dword [ebx], eax
jne case.0x4295e2.69
mov dword [ebx], 0xa
mov dword [ebx + 4], edi
lea eax, [edx + 1]
jmp 0x429bd4
mov esi, dword [0x4c1df8]
push 7
call fcn.00413cc0
add esp, 4
cmp eax, 7
je case.0x4295e2.69
cmp eax, 1
sete al
mov byte [ebx + 0xeb], al
mov eax, 1
jmp 0x429bd4
mov esi, dword [0x4c1df8]
call fcn.00413930
dec eax
cmp eax, 5
ja case.default.0x429434
jmp dword [eax*4 + 0x42a55c]
mov eax, 1
mov dword [ebx + 0x20], eax
jmp 0x429bd4
mov dword [ebx + 0x20], 2
mov eax, 1
jmp 0x429bd4
mov dword [ebx + 0x20], 4
mov eax, 1
jmp 0x429bd4
mov dword [ebx + 0x20], 3
mov eax, 1
jmp 0x429bd4
mov byte [ebx + 0xe1], 1
mov eax, 1
jmp 0x429bd4
mov byte [ebx + 0xe1], 0
mov eax, 1
jmp 0x429bd4
mov ecx, dword [0x4c1df8]
push ecx
mov ecx, dword [esp + 0x20]
push 0
push str.Parameter_1_invalid.
call fcn.0042ed60
jmp 0x429bd4
mov edx, dword [0x4c1df8]
push 5
push str.Float
push edx
call fcn.004889e2
add esp, 0xc
test eax, eax
jne 0x4295a8
mov esi, dword [esp + 0x1c]
lea edi, [eax + 1]
mov ecx, esi
call fcn.0041fcd0
cmp eax, 0x1e
jb 0x4294f1
mov eax, edi
jmp 0x429bd4
mov ecx, esi
call fcn.0041fd60
mov edi, eax
mov eax, dword [0x4c1dfc]
push 0x2e
push eax
mov dword [esp + 0xac], edx
call fcn.00488f71
mov esi, eax
add esp, 8
mov dword [esp + 0x38], esi
test esi, esi
je 0x429529
add esi, 2
call fcn.004126e0
mov esi, dword [esp + 0x38]
jmp 0x42952d
xor eax, eax
xor edx, edx
add eax, edi
adc edx, dword [esp + 0xa4]
add eax, 2
adc edx, 0
mov dword [esp + 0x3c], edx
js 0x429553
jg case.0x4295e2.69
cmp eax, 0xff
ja case.0x4295e2.69
mov eax, dword [0x4c1dfc]
push 0
push 1
push 1
push 1
call fcn.0046ef80
add esp, 0x10
mov ecx, 0x4a2614
test eax, eax
jne 0x429576
mov ecx, 0x4a59a4
mov eax, 0x4a59a4
test esi, esi
jne 0x429584
mov eax, 0x4a0b88
push ecx
mov ecx, dword [0x4c1dfc]
push eax
push ecx
push 0x4a2618
add ebx, 0x74
push ebx
call fcn.004885b3
add esp, 0x14
mov eax, 1
jmp 0x429bd4
mov edx, dword [0x4c1df8]
push 7
push str.Integer
push edx
call fcn.004889e2
add esp, 0xc
test eax, eax
jne case.0x4295e2.69
mov ecx, dword [0x4c1dfc]
movzx eax, word [ecx]
add eax, 0xffffffbc
cmp eax, 0x24
ja case.0x4295e2.69
movzx eax, byte [eax + 0x42a580]
jmp dword [eax*4 + 0x42a574]
mov byte [ebx + 0xed], 0x44
mov eax, 1
jmp 0x429bd4
mov cl, byte [ecx]
mov byte [ebx + 0xed], cl
mov eax, 1
jmp 0x429bd4
mov edx, dword [0x4c1e00]
mov ecx, dword [0x4c1dfc]
push edx
call fcn.0043b960
jmp 0x429bd4
mov eax, dword [0x4c1e0c]
mov ecx, dword [0x4c1e08]
mov edx, dword [0x4c1e04]
push eax
mov eax, dword [0x4c1e00]
push ecx
mov ecx, dword [0x4c1df8]
push edx
push eax
push ecx
mov ecx, dword [0x4c1dfc]
mov edx, 0x4c4000
call fcn.004660f0
jmp 0x429bd4
mov edx, dword [0x4c1e04]
mov eax, dword [0x4c1e00]
mov ecx, dword [0x4c1dfc]
push edx
push eax
push ecx
mov ecx, dword [0x4c1df8]
push 0x4c4000
call fcn.00459400
jmp 0x429bd4
mov edx, dword [0x4c1dfc]
mov eax, dword [0x4c1df8]
push edx
push eax
mov eax, dword [0x4c1e00]
push esi
call fcn.00459d00
jmp 0x429bd4
mov ecx, dword [0x4c1e04]
mov edx, dword [0x4c1e00]
mov eax, dword [0x4c1dfc]
push ecx
push edx
push eax
push esi
call fcn.0045ac60
jmp 0x429bd4
mov esi, dword [0x4c1df8]
call fcn.00413dc0
cmp eax, 7
ja case.0x4295e2.69
jmp dword [eax*4 + 0x42a5a8]
cmp byte [0x4c1fff], 0
jne case.0x4295e2.69
call fcn.0042e730
mov eax, 1
jmp 0x429bd4
cmp byte [0x4c1fff], 0
je case.0x4295e2.69
call fcn.0042e730
mov eax, 1
jmp 0x429bd4
mov ecx, dword [esp + 0x1c]
mov edi, 1
call fcn.0041fd60
mov esi, dword [0x4c1df8]
test eax, eax
setne dl
movzx eax, dl
push eax
call fcn.00413d10
mov ecx, dword [esp + 0x20]
push eax
push ecx
call fcn.0042e780
jmp 0x429bd4
mov esi, dword [0x4c1df8]
push 7
call fcn.00413cc0
add esp, 4
cmp eax, 7
je case.0x4295e2.69
cmp eax, 1
sete dl
mov byte [ebx + 0xec], dl
mov eax, 1
jmp 0x429bd4
mov esi, dword [0x4c1df8]
call fcn.00413d70
mov byte [ebx + 0xea], al
cmp al, 4
jne case.0x4295e2.69
mov byte [ebx + 0xea], 0
mov eax, 1
jmp 0x429bd4
mov esi, dword [0x4c1df8]
push 7
call fcn.00413cc0
add esp, 4
cmp eax, 7
je case.0x4295e2.69
cmp eax, 1
sete al
mov byte [ebx + 0xe2], al
mov eax, 1
jmp 0x429bd4
mov esi, dword [0x4c1df8]
push 7
call fcn.00413cc0
add esp, 4
cmp eax, 7
je case.0x4295e2.69
cmp eax, 1
sete cl
mov byte [ebx + 0xe3], cl
mov eax, 1
jmp 0x429bd4
mov esi, dword [0x4c1df8]
call fcn.00413e40
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x4295e2.69
movzx edx, byte [ecx + 0x42a5e0]
jmp dword [edx*4 + 0x42a5c8]
mov bl, 1
call fcn.0042e880
mov eax, 1
jmp 0x429bd4
xor bl, bl
call fcn.0042e880
mov eax, 1
jmp 0x429bd4
mov dword [0x4be4d8], eax
mov eax, 1
jmp 0x429bd4
or byte [0x4c28e8], 2
cmp dword [0x4c1fdc], 0
mov byte [0x4c28bb], 1
jne case.0x4295e2.69
mov eax, dword [0x4bf608]
movzx ecx, word [eax]
push ecx
call fcn.004079e0
add esp, 4
mov eax, 1
jmp 0x429bd4
mov byte [0x4c28bb], 0
mov eax, 1
jmp 0x429bd4
mov esi, dword [0x4c1df8]
push str._a_a_a_v
mov al, 0x90
call fcn.00442750
add esp, 4
jmp 0x429bd4
mov esi, dword [0x4c1df8]
push 0x4be4d0
mov al, 0x14
call fcn.00442750
add esp, 4
jmp 0x429bd4
mov esi, dword [0x4c1df8]
push 0x4be4d4
mov al, 0x91
call fcn.00442750
add esp, 4
jmp 0x429bd4
mov al, 1
mov edx, 0x4c4000
call fcn.004157f0
mov eax, 1
jmp 0x429bd4
mov ecx, dword [esp + 0x1c]
xor edi, edi
call fcn.0041fd60
push 1
push eax
call fcn.004012b0
add esp, 8
lea eax, [edi + 1]
jmp 0x429bd4
mov edx, dword [0x4c1dfc]
mov ecx, dword [0x4c1e08]
mov edi, dword [0x4c1e04]
mov ebx, dword [0x4c1e00]
push edx
call fcn.0046b990
jmp 0x429bd4
mov eax, dword [0x4c1e04]
mov ecx, dword [0x4c1e00]
mov edx, dword [0x4c1dfc]
push eax
push ecx
mov ecx, dword [0x4c1df8]
push esi
call fcn.0046bbd0
jmp 0x429bd4
cmp byte [esi + 1], 3
mov eax, dword [0x4c1dfc]
sbb edx, edx
not edx
and edx, dword [0x4c1e00]
push edx
mov edx, dword [0x4c1df8]
push eax
push esi
call fcn.0046bd30
jmp 0x429bd4
mov al, byte [esi + 1]
cmp al, 2
jae 0x4299ad
mov ebx, dword [ebx + 0x14]
cmp ebx, edx
je 0x4299ad
lea ecx, [ebx + 0x808]
push ecx
mov ecx, dword [ebx + 4]
lea edx, [ebx + 8]
push edx
push esi
call fcn.0046bdc0
jmp 0x429bd4
cmp al, 4
ja 0x4299ea
mov esi, dword [0x4c1dfc]
call fcn.004134e0
test eax, eax
jne 0x4299ea
mov ebx, dword [0x4c1dfc]
lea eax, [esp + 0x27]
push eax
call fcn.00413340
mov ecx, dword [0x4c1e04]
mov edx, dword [0x4c1e00]
add esp, 4
push ecx
mov esi, eax
mov eax, dword [esp + 0x20]
push edx
push eax
jmp 0x429a11
mov ebx, dword [0x4c1e00]
lea ecx, [esp + 0x27]
push ecx
call fcn.00413340
mov edx, dword [0x4c1e08]
mov ecx, dword [esp + 0x20]
add esp, 4
mov esi, eax
mov eax, dword [0x4c1e04]
push edx
push eax
push ecx
mov ecx, esi
call fcn.0046bdc0
cmp byte [esp + 0x27], 0
mov edi, eax
je 0x429a2c
test esi, esi
je 0x429a2c
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
jmp 0x429bd4
cmp byte [esi + 1], 2
jae 0x429a66
mov ebx, dword [ebx + 0x14]
cmp ebx, edx
je 0x429a66
mov ecx, dword [ebx + 4]
lea edx, [ebx + 0x808]
push edx
mov edx, dword [ebx + 0x1008]
lea eax, [ebx + 8]
push eax
push ecx
mov ecx, dword [0x4c1df8]
push esi
call fcn.0046c180
jmp 0x429bd4
mov ebx, dword [0x4c1dfc]
lea edx, [esp + 0x27]
push edx
call fcn.00413340
mov ecx, dword [0x4c1e00]
mov esi, dword [0x4c1df8]
mov edi, eax
mov eax, dword [0x4c1e04]
add esp, 4
push eax
push ecx
push edi
call fcn.004134e0
mov edx, dword [esp + 0x28]
mov ecx, dword [0x4c1e08]
push edx
mov edx, eax
call fcn.0046c180
cmp byte [esp + 0x27], 0
mov esi, eax
je 0x429aba
test edi, edi
je 0x429aba
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, esi
jmp 0x429bd4
cmp byte [esi + 1], 1
jae 0x429b2a
mov ecx, dword [ebx + 0x14]
cmp ecx, edx
je 0x429b2a
cmp dword [ecx + 0x1008], 0xfffffffe
lea eax, [ecx + 0x808]
jne 0x429b18
push eax
add ecx, 8
push ecx
push 0x49f258
mov esi, 0x400
lea edi, [esp + 0x10c]
call fcn.0046f100
mov ecx, dword [ebx + 0x14]
mov edx, dword [ecx + 4]
mov eax, dword [esp + 0x28]
add esp, 0xc
push edx
push eax
mov eax, 0x4a59a4
mov ebx, edi
call fcn.0046c500
jmp 0x429bd4
lea ebx, [ecx + 8]
mov ecx, dword [ecx + 4]
push ecx
push esi
call fcn.0046c500
jmp 0x429bd4
mov ebx, dword [0x4c1df8]
lea edx, [esp + 0x27]
push edx
call fcn.00413340
mov ebx, dword [0x4c1dfc]
mov esi, eax
mov eax, dword [esp + 0x20]
add esp, 4
push esi
push eax
mov eax, dword [0x4c1e00]
call fcn.0046c500
cmp byte [esp + 0x27], 0
mov ebx, eax
je 0x429b69
test esi, esi
je 0x429b69
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x429bd4
mov ecx, dword [0x4c1df8]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, 1
jmp 0x429bd4
mov ecx, dword [esp + 0x1c]
xor edi, edi
call fcn.0041fd60
push eax
call fcn.00452870
xor edx, edx
add esp, 4
test al, al
setne dl
mov eax, edx
jmp 0x429bd4
mov eax, dword [0x4c1df8]
call fcn.00414390
cmp eax, 0xffffffff
jne 0x429bc5
mov eax, dword [0x4c1df8]
push eax
push 0
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042ed60
jmp 0x429bd4
mov dword [ebx + 0xf4], eax
mov eax, 1
jmp 0x429bd4
xor eax, eax
mov dword [esp + 0x20], eax
test eax, eax
je 0x425ece
cmp dword [ebp + 8], 3
je 0x425ece
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + 0x14]
mov dword [esp + 0x1c], edx
mov ebx, dword [esp + 0x1c]
test ebx, ebx
je 0x425ec9
mov edi, dword [esp + 0x4c]
xor esi, esi
jmp 0x425bf5
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
jmp 0x425ec9
mov edx, dword [esp + 0x40]
mov dword [edx], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp eax, 7
jne 0x425ece
jmp 0x425ec9
mov edx, dword [eax + 4]
mov eax, dword [esp + 0x40]
mov dword [eax], edx
jmp 0x425ec9
mov eax, 1
cmp ebx, 7
je 0x425ece
mov eax, ebx
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test esi, esi
je 0x429cd9
cmp dword [esi + 8], 0
jne 0x429cd9
mov eax, dword [0x4c1e48]
test eax, eax
je 0x429cca
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x429c9b
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x429cca
mov edi, esi
call fcn.00412aa0
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [esi + 8], 0
mov edx, dword [0x4c1df8]
mov dword [esi], edx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x429d0c
mov eax, dword [eax + 0x18]
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
mov eax, 5
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x429d35
mov edx, dword [esp + 0x40]
mov dword [edx], eax
mov eax, 6
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4c1dfc]
mov ecx, dword [esp + 0x1c]
push eax
push 0
push str.Parameter_2_invalid.
call fcn.0042ed60
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4c1e00]
push ecx
mov ecx, dword [esp + 0x20]
push 0
push str.Parameter_3_invalid.
call fcn.0042ed60
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x40]
mov dword [edx], eax
jmp 0x425ec9
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x4c]
cmp byte [eax + 0x100], 0
jne 0x429df0
lea esi, [eax + 0xf8]
call fcn.0042f440
xor eax, eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x40]
mov dword [ecx], edx
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [ebx + 1], 0
jne 0x429e56
push 0x4a59a4
push 0
push str.An_exception_was_thrown.
mov ecx, ebx
call fcn.0042ea30
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x10
call fcn.00489f2b
mov esi, eax
add esp, 4
test esi, esi
jne 0x429e8f
push 0x4a59a4
push eax
push str.Out_of_memory.
mov ecx, ebx
call fcn.0042ed60
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4c3f58]
test eax, eax
jne 0x429ef3
mov edx, dword [ebx + 8]
movzx eax, word [edx + 2]
mov ecx, 0xff
mov ebx, ecx
cmp ax, cx
jb 0x429ead
mov ebx, eax
inc ebx
lea edx, [ebx + ebx]
push edx
call fcn.00488234
add esp, 4
mov dword [0x4c3f58], eax
test eax, eax
jne 0x429ef9
mov ecx, dword [esp + 0x1c]
push 0x4a59a4
push eax
push str.Out_of_memory.
mov dword [0x4c3f5c], eax
call fcn.0042ed60
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [0x4c3f5c]
xor ecx, ecx
push ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x68], eax
lea eax, [esp + 0x7c]
push eax
lea edx, [esp + 0x5c]
push edx
lea eax, [esp + 0x50]
push eax
lea edx, [esp + 0x74]
push edx
push esi
lea eax, [esp + 0x38]
push eax
mov dword [0x4c3f58], ecx
mov dword [0x4c3f5c], ecx
push ecx
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], ecx
mov ecx, dword [esp + 0x3c]
push ecx
mov dword [esp + 0x78], ebx
mov dword [esi + 8], 0x40
call fcn.00455920
mov edi, dword [esp + 0x44]
mov ebx, eax
cmp ebx, edi
jne 0x429f5d
mov dword [esi + 0xc], ebx
jmp 0x429f9c
mov dword [esi + 0xc], 0
test edi, edi
je 0x429f9c
mov eax, dword [0x4c3f58]
test eax, eax
je 0x429f8c
push eax
call fcn.004897ff
add esp, 4
cmp dword [0x4c3f5c], 0x400000
jbe 0x429f8c
dec dword [0x4c3f60]
mov edx, dword [esp + 0x54]
mov dword [0x4c3f58], edi
mov dword [0x4c3f5c], edx
test ebx, ebx
jne 0x429fc4
push esi
call fcn.00489c59
mov eax, dword [esp + 0x24]
add esp, 4
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [esi + 8], 0x40
jne 0x429fd3
mov dword [esi + 8], 0
mov dword [esi], ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x1c]
mov dword [eax + 0xfc], ecx
mov dword [eax + 0xf8], esi
xor eax, eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4bf608]
cmp word [edx], 0
jne 0x42a030
cmp dword [0x4c38b0], 0
jne 0x42a030
cmp dword [0x4c1fd8], 0
jne 0x42a030
cmp dword [0x4c1fdc], 0
jne 0x42a030
cmp byte [0x4c1fcb], 0
je case.0x425efd.219
mov eax, 8
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x1c]
xor edi, edi
call fcn.0041fd60
push eax
push 0x4c4000
xor eax, eax
lea ecx, [edi + 9]
call fcn.00415820
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je 0x425ec9
push 0x4a59a4
push 0
push str.A__return__must_be_encountered_prior_to_this___.
mov ecx, ebx
call fcn.0042ed60
mov ecx, dword [esp + 0x934]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc