Function at 0x437678
Capabilities:
Create process on windows
Get file attributes
Get graphical window text
Parse pe header

Disassembly:
push ebp
push ebx
mov edx, 0xd
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x43767f
call fcn.0045e790
call fcn.0040596b
push edx
call fcn.0045e620
pop edx
push eax
push 0
push 0x10ca0001
push edx
call fcn.0045e620
pop edx
push eax
mov edx, 0x463292
push edx
call fcn.0045e6f0
push edx
call fcn.0045e620
pop edx
push eax
push 0x46ba58
mov ebp, dword [0x47356c]
push dword [ebp + 4]
call fcn.00422512
pop eax
call fcn.0045e850
push 0x1e3
push 0x23a
push 0
push 0
push 0
call fcn.0044e2d2
add dword [esp + 0x14], edx
call fcn.00407b76
call fcn.0044e2f0
call fcn.00446423
mov ebp, dword [0x473558]
push dword [ebp + 0x50]
mov edx, 0x46105e
pop ecx
call fcn.0044e300
jne 0x437785
lea ebp, [esp + 0x14]
mov dword [ebp], 0x222
mov dword [ebp + 4], 0x10f
push 0
mov ebp, dword [0x4734ac]
push dword [ebp + 0x18]
mov ebp, dword [0x4734ac]
push dword [ebp + 0x18]
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0x50]
push 0
call fcn.0042b522
push eax
push 0x18
push 0x18
push 0
push 0x222
push 0x33
call fcn.0040c3ad
jmp 0x4377bd
lea ebp, [esp + 0x14]
mov dword [ebp], 0x23a
mov dword [ebp + 4], 0x11b
push 0
xor eax, eax
push eax
push 0x18
push 0x18
push 0
push 0x258
push 0x33
call fcn.00410862
mov ebp, dword [0x4734ac]
mov ebx, dword [ebp + 0x1c8]
imul ebx, ebx, 0x48
mov eax, ebx
mov ecx, 0x60
cdq
idiv ecx
mov ebx, eax
neg ebx
mov dword [esp + 0x2c], ebx
mov ebp, dword [0x4734ac]
fld qword [ebp + 0x10]
mov ebp, dword [0x4734ac]
fdiv qword [ebp + 8]
mov ebp, dword [0x4734ac]
fstp qword [ebp + 0x10]
mov ebp, dword [0x4734ac]
lea eax, [ebp + 0x1c8]
push eax
call sub.gdi32.dll_CreateFontIndirectW
mov dword [esp + 0x30], eax
push dword [esp + 0x30]
push 0xffffffff
call fcn.0045418d
push edx
call fcn.0045e620
pop edx
push eax
mov ebp, dword [0x4734ac]
fld qword [ebp + 0x10]
fadd qword [0x46e040]
push eax
fistp dword [esp]
mov ebp, dword [0x4734ac]
lea edx, [ebp + 0x1e4]
push edx
call fcn.0045e620
pop edx
push eax
push 0x20
push edx
call fcn.0045e880
call fcn.0045e850
push 0
call fcn.0044e2d2
add dword [esp + 4], edx
call fcn.0045b112
call fcn.0044e2f0
push edx
call fcn.0045e620
pop edx
push eax
push 0x200
mov ebp, dword [0x4734ac]
fld qword [ebp + 0x10]
fadd qword [0x46e048]
push eax
fistp dword [esp]
mov ebp, dword [0x4734ac]
lea edx, [ebp + 0x1e4]
push edx
call fcn.0045e620
pop edx
push eax
push 0x20
push edx
call fcn.0045e880
call fcn.0045e850
push 1
call fcn.0044e2d2
add dword [esp + 4], edx
call fcn.0045b049
call fcn.0044e2f0
push 0x17
lea ebp, [esp + 0x18]
push dword [ebp]
push 0
push 0
push 0
call fcn.0040701b
push 0xfffffff0
push 0
call fcn.00451677
push eax
call sub.user32.dll_GetWindowLongW
mov ebx, eax
or ebx, 0x400
push ebx
push 0xfffffff0
push 0
call fcn.00451677
push eax
call sub.user32.dll_SetWindowLongW
lea ebp, [esp + 0x14]
mov ebx, dword [ebp + 4]
mov dword [esp - 4], ebx
fild dword [esp - 4]
fmul qword [0x47349c]
push eax
fistp dword [esp]
push 0
push 0x1329
push 0
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
mov ebp, dword [0x473568]
push dword [ebp + 0x34]
mov eax, str.Windows_2000_XP_2003
push eax
push 1
push 0
call fcn.004515af
mov ebp, dword [0x473568]
push dword [ebp + 0x38]
mov eax, str.Windows_Vista_7_8_10_2008_2012
push eax
push 2
push 0
call fcn.004515af
call fcn.0045702e
push 0
push 0
push 0x10
push 0x10
push 0x84
push 0x21d
push 7
call fcn.0041251a
push 0
push 0
push 0x10
push 0x10
push 0x95
push 0x21d
push 8
call fcn.0041251a
push 0
push 0
push 0x10
push 0x10
push 0xa5
push 0x21d
push 6
call fcn.0041251a
push 0
push 0
push 0x10
push 0x10
push 0x84
push 0x21d
push 0x38
call fcn.0041251a
push 0
push 0
push 0x10
push 0x10
push 0x95
push 0x21d
push 0x39
call fcn.0041251a
push 0
push 0
push 0x10
push 0x10
push 0xa5
push 0x21d
push 0x37
call fcn.0041251a
push 0x102
mov eax, 0x4692ee
push eax
push 0x11
push 0x64
push 0x86
push 0x1b3
push 3
call fcn.00417ea2
push 0x102
mov eax, str.NTLDR_PBR
push eax
push 0x11
push 0x64
push 0x97
push 0x1b3
push 4
call fcn.00417ea2
push 0x102
mov eax, str.BOOT_FLAG
push eax
push 0x11
push 0x64
push 0xa8
push 0x1b3
push 5
call fcn.00417ea2
push 0x102
mov eax, 0x4692ee
push eax
push 0x11
push 0x64
push 0x86
push 0x1b3
push 0x34
call fcn.00417ea2
push 0x102
mov eax, str.BOOTMGR_PBR
push eax
push 0x11
push 0x64
push 0x97
push 0x1b3
push 0x35
call fcn.00417ea2
push 0x102
mov eax, str.BOOT_FLAG
push eax
push 0x11
push 0x64
push 0xa8
push 0x1b3
push 0x36
call fcn.00417ea2
push 0
mov eax, 0x462452
push eax
push 0x14
push 0x14
push 0xbc
push 0x1b8
push 0x2c
call fcn.00410862
push 0
mov eax, 0x462452
push eax
push 0x14
push 0x14
push 0x120
push 0x1b8
push 0x2d
call fcn.00410862
push 0
push 0x46105e
push 0x14
push 0x19a
push 0x58
push 0x32
push 9
call fcn.0040f80d
push 0
push 0x46105e
push 0x14
push 0x186
push 0xbc
push 0x32
push 0xa
call fcn.0040f80d
push 0
push 0x46105e
push 0x14
push 0x186
push 0x120
push 0x32
push 0xb
call fcn.0040f80d
push 0
push 0x46105e
push 0x14
push 0x19a
push 0x58
push 0x32
push 0x3a
call fcn.0040f80d
push 0
push 0x46105e
push 0x14
push 0x186
push 0xbc
push 0x32
push 0x3b
call fcn.0040f80d
push 0
push 0x46105e
push 0x14
push 0x186
push 0x120
push 0x32
push 0x3c
call fcn.0040f80d
push 0
push 0x46105e
push 0x64
push 0x226
push 0x17
push 0xa
push 0x2e
call fcn.0041334e
push 0
push 0x46105e
push 0x64
push 0x226
push 0x7b
push 0xa
push 0x2f
call fcn.0041334e
push 0
push 0x46105e
push 0x64
push 0x226
push 0xdf
push 0xa
push 0x30
call fcn.0041334e
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x25c]
push 0x6e
push 0x226
push 0x143
push 0xa
push 0x31
call fcn.0041334e
push 0
push 0x46105e
push 0x28
push 0x226
push 0x1b1
push 0xa
push 0x32
call fcn.0041334e
push 0
push 0x46105e
push 0x18
push 0x1c2
push 0x3f
push 0x46
push 0xc
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp]
push 0x14
push 0x12c
push 0x2b
push 0x46
push 0x28
call fcn.00417ea2
push 0
call fcn.0045b13a
push eax
push 0x28
call fcn.0045418d
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x14]
push 0x17
push 0x4b
push 0x58
push 0x1d3
push 0xf
call fcn.00410862
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x14]
push 0x17
push 0x4b
push 0x58
push 0x1d3
push 0x40
call fcn.00410862
push 0
mov ebp, dword [0x473568]
push dword [ebp + 4]
push 0x28
push 0x28
push 0x2b
push 0x14
push 0x10
call fcn.0040c3ad
push 0
push 0x46105e
push 0x18
push 0x1c2
push 0x3f
push 0x46
push 0x3d
call fcn.00417ea2
push 0
mov ebp, dword [0x473568]
push dword [ebp + 8]
push 0x28
push 0x28
push 0x2b
push 0x14
push 0x41
call fcn.0040c3ad
push 0
push 0x46105e
push 0x18
push 0x15e
push 0xa3
push 0x46
push 0xd
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 4]
push 0x14
push 0x12c
push 0x8f
push 0x46
push 0x29
call fcn.00417ea2
push 0
call fcn.0045b13a
push eax
push 0x29
call fcn.0045418d
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x14]
push 0x17
push 0x4b
push 0xbc
push 0x1d3
push 0x21
call fcn.00410862
push 0
mov ebp, dword [0x473568]
push dword [ebp + 0x4c]
push 0x28
push 0x28
push 0x8f
push 0x14
push 0x22
call fcn.0040c3ad
push 0
push 0
push 0x10
push 0x10
push 0xa4
push 0x40
push 0x53
call fcn.0041251a
mov ebp, dword [0x473568]
push dword [ebp + 0x14]
push 1
push 0x172
push 0x53
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
push 1
push 0x53
call fcn.004525a9
push 0
push 0x10
push 0x10
push 0x58
push 0x20
push 0x52
call fcn.0045479b
mov ebp, dword [0x473568]
push dword [ebp + 0x28]
push 1
push 0x172
push 0x52
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
push 1
push 0x52
call fcn.004525a9
push 0
push 0
push 0x10
push 0x10
push 0x108
push 0x40
push 0x54
call fcn.0041251a
mov ebp, dword [0x473568]
push dword [ebp + 0xc]
push 1
push 0x172
push 0x54
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
push 1
push 0x54
call fcn.004525a9
push 0
push 0x46105e
push 0x18
push 0x15e
push 0xa3
push 0x46
push 0x3e
call fcn.00417ea2
push 0
push 0x46105e
push 0x18
push 0x15e
push 0x107
push 0x46
push 0xe
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0xc]
push 0x14
push 0x12c
push 0xf3
push 0x46
push 0x2a
call fcn.00417ea2
push 0
call fcn.0045b13a
push eax
push 0x2a
call fcn.0045418d
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x14]
push 0x17
push 0x4b
push 0x120
push 0x1d3
push 0x23
call fcn.00410862
push 0
mov ebp, dword [0x473568]
push dword [ebp + 0x50]
push 0x28
push 0x28
push 0xf3
push 0x14
push 0x24
call fcn.0040c3ad
push 0
push 0x46105e
push 0x18
push 0x15e
push 0x107
push 0x46
push 0x3f
call fcn.00417ea2
push 0x2e
call fcn.0041332b
push 0x2f
call fcn.0041332b
push 0x30
call fcn.0041332b
push 0x31
call fcn.0041332b
push 0x32
call fcn.0041332b
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x70]
push 0x14
push 0xdc
push 0x169
push 0x14a
push 0x11
call fcn.0041deef
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x30]
push 0x14
push 0x123
push 0x169
push 0x14
push 0x12
call fcn.0041deef
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x38]
push 0x14
push 0x5a
push 0x180
push 0x14
push 0x13
call fcn.0041deef
push 0
push 0x46105e
push 0x12
push 0xbe
push 0x182
push 0x6e
push 0x1a
call fcn.0040f80d
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x4c]
push 0x14
push 0x5a
push 0x197
push 0x14
push 0x14
call fcn.0041deef
push 0
push 0x46105e
push 0x12
push 0xbe
push 0x197
push 0x6e
push 0x1b
call fcn.0040f80d
push 0
mov eax, 0x46341c
push eax
push 0x15
push 0x14
push 0x181
push 0x12c
push 0x18
call fcn.00410862
push 0
mov eax, 0x46341c
push eax
push 0x15
push 0x14
push 0x196
push 0x12c
push 0x19
call fcn.00410862
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x54]
push 0x14
push 0xa0
push 0x152
push 0x14a
push 0x15
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x64]
push 0x14
push 0xdc
push 0x180
push 0x14a
push 0x17
call fcn.0041deef
push 0x10000000
push 0x14
push 0x32
push 0x150
push 0x1f9
push 0x1d
call fcn.00411346
push 0x10000000
push 0x14
push 0x32
push 0x150
push 0x1f9
push 0x47
call fcn.00411346
mov edx, 0x46165c
lea ecx, [esp]
call fcn.0044e008
mov eax, dword [esp]
push eax
pop eax
mov dword [esp + 0x1c], eax
mov dword [esp + 8], 0x41
jmp 0x4383ec
mov eax, 0x5a
cmp eax, dword [esp + 8]
jl 0x438440
push 0
push dword [esp + 4]
push 0xffffffff
push 0x1d
call fcn.004515af
push 0
push dword [esp + 4]
push 0xffffffff
push 0x47
call fcn.004515af
mov ebp, dword [esp + 0x1c]
movzx ebx, word [ebp]
inc ebx
push ebx
mov ebp, dword [esp + 0x20]
pop eax
mov word [ebp], ax
inc dword [esp + 8]
jno 0x4383ec
push 0
mov eax, 0x46190e
push eax
push 0xffffffff
push 0x1d
call fcn.004515af
push 2
push 0x1d
call fcn.00451614
push 0
mov eax, str.WINDOWS
push eax
push 0x10
push 0xbe
push 0x152
push 0x6e
push 0x1c
call fcn.0040f80d
push 1
push 0x1c
call fcn.0045164c
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x5c]
push 0x14
push 0x46
push 0x152
push 0x14
push 0x16
call fcn.0041deef
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0xec]
push 0x14
push 0x46
push 0x154
push 0x14
push 0x20
call fcn.00417ea2
push 0x10000000
push 0x14
push 0xff
push 0x14f
push 0x41
push 0x1e
call fcn.00411346
push 1
push 0x1e
call fcn.0045164c
push 1
push 0x1e
call fcn.004525a9
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x30]
push 0x14
push 0x123
push 0x169
push 0x14
push 0x43
call fcn.0041deef
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x38]
push 0x14
push 0x5a
push 0x180
push 0x14
push 0x44
call fcn.0041deef
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x4c]
push 0x14
push 0x5a
push 0x197
push 0x14
push 0x45
call fcn.0041deef
push 0
mov eax, 0x46341c
push eax
push 0x15
push 0x14
push 0x181
push 0x12c
push 0x48
call fcn.00410862
push 0
mov eax, 0x46341c
push eax
push 0x15
push 0x14
push 0x196
push 0x12c
push 0x49
call fcn.00410862
push 0
push 0x46105e
push 0x12
push 0xbe
push 0x182
push 0x6e
push 0x4a
call fcn.0040f80d
push 0
push 0x46105e
push 0x12
push 0xbe
push 0x197
push 0x6e
push 0x4b
call fcn.0040f80d
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0xec]
push 0x14
push 0x46
push 0x154
push 0x14
push 0x4c
call fcn.00417ea2
push 0x10000000
push 0x14
push 0xff
push 0x14f
push 0x41
push 0x4f
call fcn.00411346
push 1
push 0x4f
call fcn.0045164c
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x54]
push 0x14
push 0xa0
push 0x152
push 0x14a
push 0x46
call fcn.00417ea2
push 0
mov eax, 0x46190e
push eax
push 0xffffffff
push 0x47
call fcn.004515af
push 2
push 0x47
call fcn.00451614
push 1
call fcn.0045b13a
push eax
push 0xc
call fcn.0045418d
push 1
call fcn.0045b13a
push eax
push 0xd
call fcn.0045418d
push 1
call fcn.0045b13a
push eax
push 0xe
call fcn.0045418d
push 1
call fcn.0045b13a
push eax
push 0x3d
call fcn.0045418d
push 1
call fcn.0045b13a
push eax
push 0x3e
call fcn.0045418d
push 1
call fcn.0045b13a
push eax
push 0x3f
call fcn.0045418d
push 0x606060
push 1
push 0xc
call fcn.00455543
push 0x606060
push 1
push 0xd
call fcn.00455543
push 0x606060
push 1
push 0xe
call fcn.00455543
push 0x606060
push 1
push 0x3d
call fcn.00455543
push 0x606060
push 1
push 0x3e
call fcn.00455543
push 0x606060
push 1
push 0x3f
call fcn.00455543
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x70]
push 0x14
push 0xdc
push 0x169
push 0x14a
push 0x42
call fcn.0041deef
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x4d8]
push 0x14
push 0x3c
push 0x180
push 0x14a
push 0x4d
call fcn.0041deef
push 0x10000000
push 0x14
push 0x9b
push 0x180
push 0x190
push 0x4e
call fcn.00411346
push 0
mov eax, str.Wimboot
push eax
push 0xffffffff
push 0x4e
call fcn.004515af
push 0
mov eax, str.Compact:NONE
push eax
push 0xffffffff
push 0x4e
call fcn.004515af
push 0
mov eax, str.Compact:XPRESS4K
push eax
push 0xffffffff
push 0x4e
call fcn.004515af
push 0
mov eax, str.Compact:XPRESS8K
push eax
push 0xffffffff
push 0x4e
call fcn.004515af
push 0
mov eax, str.Compact:XPRESS16K
push eax
push 0xffffffff
push 0x4e
call fcn.004515af
push 0
mov eax, str.Compact:LZX
push eax
push 0xffffffff
push 0x4e
call fcn.004515af
push 0
push 0x4e
call fcn.00451614
push 1
push 0x4e
call fcn.0045164c
mov dword [esp + 8], 0
jmp 0x438951
mov eax, 5
cmp eax, dword [esp + 8]
jl 0x438979
mov ebp, dword [0x473568]
push dword [ebp + 0x28]
push dword [esp + 0xc]
push 0x4e
call fcn.00455bed
inc dword [esp + 8]
jno 0x438951
fld qword [0x47349c]
fmul qword [0x46e050]
push eax
fistp dword [esp]
fld qword [0x47349c]
fmul qword [0x46e058]
push eax
fistp dword [esp]
fld qword [0x47349c]
fmul qword [0x46e060]
push eax
fistp dword [esp]
fld qword [0x47349c]
fmul qword [0x46e068]
push eax
fistp dword [esp]
push 0x4e
call fcn.00455930
mov ebp, dword [0x473558]
cmp dword [ebp + 0x9c], 0
je 0x4389d6
xor eax, eax
jmp 0x4389db
mov eax, 1
and eax, eax
je 0x4389fd
push 1
push 0x4e
call fcn.004525a9
push 1
push 0x4d
call fcn.004525a9
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0xe0]
push 0x14
push 0x96
push 0x197
push 0x14a
push 0x2b
call fcn.00410862
push 1
mov ebp, dword [0x893880]
push dword [ebp + 0xe8]
push 0x17
push 0x4b
push 0x1bd
push 0x1d6
push 0x25
call fcn.00410862
push 1
mov ebp, dword [0x893880]
push dword [ebp + 0xdc]
push 0x17
push 0xb4
push 0x1c0
push 0xc
push 0x27
call fcn.00417ea2
push 0
push 0x64
push 0
push 0x14
push 0xb4
push 0x1bf
push 0xca
push 0x26
call fcn.00435034
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0xe4]
push 0x14
push 0x41
push 0x197
push 0x1ea
push 0x51
call fcn.00410862
mov ebp, dword [0x473558]
cmp dword [ebp + 0xa8], 0
je 0x438d43
mov ebp, dword [0x893880]
push dword [ebp + 0x1c]
push 7
call fcn.00451693
push dword [ebp + 0x20]
push 8
call fcn.00451693
push dword [ebp + 0x24]
push 6
call fcn.00451693
push dword [ebp + 0x1c]
push 0x38
call fcn.00451693
push dword [ebp + 0x20]
push 0x39
call fcn.00451693
push dword [ebp + 0x24]
push 0x37
call fcn.00451693
push dword [ebp + 0x1c]
push 3
call fcn.00451693
call fcn.0042b9cf
mov ebp, dword [0x893880]
push dword [ebp + 0x20]
push 4
call fcn.00451693
push dword [ebp + 0x24]
push 5
call fcn.00451693
push dword [ebp + 0x1c]
push 0x34
call fcn.00451693
push dword [ebp + 0x20]
push 0x35
call fcn.00451693
push dword [ebp + 0x24]
push 0x36
call fcn.00451693
push dword [ebp + 0x78]
push 0x2c
call fcn.00451693
push dword [ebp + 0x78]
push 0x2d
call fcn.00451693
push dword [ebp + 0x18]
push 0xf
call fcn.00451693
push dword [ebp + 0x18]
push 0x10
call fcn.00451693
push dword [ebp + 0x48]
push 0x40
call fcn.00451693
push dword [ebp + 0x48]
push 0x41
call fcn.00451693
push dword [ebp + 8]
push 0x21
call fcn.00451693
push dword [ebp + 8]
push 0x22
call fcn.00451693
push dword [ebp + 0xf0]
push 0x53
call fcn.00451693
mov ebp, dword [0x473558]
push dword [ebp + 0x54]
mov ebx, 1
cmp ebx, dword [esp]
jne 0x438c49
mov ebp, dword [0x893880]
push dword [ebp + 0x4b8]
push 0x52
call fcn.00451693
jmp 0x438c66
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x438c66
mov ebp, dword [0x893880]
push dword [ebp + 0x4bc]
push 0x52
call fcn.00451693
pop eax
mov ebp, dword [0x893880]
push dword [ebp + 0x3e0]
push 0x54
call fcn.00451693
push dword [ebp + 0x10]
push 0x23
call fcn.00451693
push dword [ebp + 0x10]
push 0x24
call fcn.00451693
push dword [ebp + 0x2c]
push 0x11
call fcn.00451693
push dword [ebp + 0x34]
push 0x12
call fcn.00451693
push dword [ebp + 0x3c]
push 0x13
call fcn.00451693
push dword [ebp + 0x50]
push 0x14
call fcn.00451693
push dword [ebp + 0x58]
push 0x15
call fcn.00451693
push dword [ebp + 0x68]
push 0x17
call fcn.00451693
push dword [ebp + 0x60]
push 0x16
call fcn.00451693
push dword [ebp + 0x34]
push 0x43
call fcn.00451693
push dword [ebp + 0x40]
push 0x44
call fcn.00451693
push dword [ebp + 0x50]
push 0x45
call fcn.00451693
push dword [ebp + 0x58]
push 0x46
call fcn.00451693
push dword [ebp + 0x2c]
push 0x42
call fcn.00451693
push dword [ebp + 0x3d8]
push 0x51
call fcn.00451693
push edx
call fcn.0045e620
pop edx
push eax
push 2
push edx
call fcn.0045e620
pop edx
push eax
call fcn.004051a0
call fcn.0045e850
push 0x14
push 0xc8
push 0x2b
push 0x15e
push 0x1f
call fcn.0044e2d2
add dword [esp + 0x14], edx
call fcn.00417ea2
call fcn.0044e2f0
push 0x606060
push 1
push 0x1f
call fcn.00455543
push edx
call fcn.0045e620
pop edx
push eax
push 2
push edx
call fcn.0045e620
pop edx
push eax
call fcn.0042ec61
call fcn.0045e850
push 0x14
push 0xc8
push 0x2b
push 0x15e
push 0x50
call fcn.0044e2d2
add dword [esp + 0x14], edx
call fcn.00417ea2
call fcn.0044e2f0
push 0x606060
push 1
push 0x50
call fcn.00455543
mov ebp, dword [0x47356c]
mov ebx, dword [ebp + 0x20]
cmp ebx, 0x1b58
jge 0x438e21
push 1
push 0x51
call fcn.0045164c
call sub.user32.dll_CreatePopupMenu
push eax
mov ebp, dword [0x473558]
pop eax
mov dword [ebp + 0xb4], eax
mov ebp, dword [0x893880]
push dword [ebp + 0x3dc]
push 1
push 0x400
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0xb4]
call sub.user32.dll_InsertMenuW
mov ebp, dword [0x473558]
cmp dword [ebp + 0x68], 0
je 0x438e87
push 0x408
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0xb4]
call sub.user32.dll_CheckMenuItem
push 2
call fcn.004356d0
push 1
push 0
call fcn.00451614
push edx
call fcn.0045e620
pop edx
push eax
call fcn.0040fc55
lea eax, [esp + 4]
push eax
call fcn.0045e660
push dword [esp]
mov edx, 0x46105e
pop ecx
call fcn.0044e300
je 0x438ee8
push edx
call fcn.0045e620
pop edx
push eax
push 0
push 0
call fcn.00401f41
lea eax, [esp + 4]
push eax
call fcn.0045e660
push dword [esp]
mov edx, 0x46105e
pop ecx
call fcn.0044e300
je 0x438f39
mov ebp, dword [0x473558]
mov edx, dword [ebp + 0xac]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
lea eax, [esp + 4]
push eax
call fcn.0045e660
push dword [esp]
mov edx, 0x46105e
pop ecx
call fcn.0044e300
je 0x438f39
mov edx, 0x462f70
lea ecx, [esp]
call fcn.0044e008
push dword [esp]
push 0xa
call fcn.0040b6d3
push dword [esp]
push 0x3b
call fcn.0040b6d3
call fcn.00434712
push eax
mov ebp, dword [0x473558]
pop eax
mov dword [ebp + 0x6c], eax
push 1
push 0x1a
call fcn.0045164c
push 1
push 0x18
call fcn.0045164c
push 1
push 0x1b
call fcn.0045164c
push 1
push 0x19
call fcn.0045164c
push 1
push 0x4a
call fcn.0045164c
push 1
push 0x48
call fcn.0045164c
push 1
push 0x4b
call fcn.0045164c
push 1
push 0x49
call fcn.0045164c
lea eax, [0x445a52]
push eax
call fcn.00458bb1
push 0
push 0
call fcn.004587e7
push 0
call fcn.004584dd
push eax
mov ebp, dword [0x473558]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x473558]
push dword [ebp]
call fcn.0044dc90
push eax
mov ebp, dword [0x473558]
pop eax
mov dword [ebp + 0x5c], eax
push 0x3ea
push 0x70
push 0
call fcn.004584f9
push 0x3ee
push 0xd
push 0
call fcn.004584f9
push 0x3e8
push 0x2004c
push 0
call fcn.004584f9
push 0x3e9
push 0x20053
push 0
call fcn.004584f9
push 0x3eb
push 0x20009
push 0
call fcn.004584f9
push 0x3ec
push 0x30056
push 0
call fcn.004584f9
push 0x3ef
push 0x3004f
push 0
call fcn.004584f9
push 0x3f0
push 0x10079
push 0
call fcn.004584f9
push 0x3f1
push 0x20031
push 0
call fcn.004584f9
push 0x3f2
push 0x20032
push 0
call fcn.004584f9
push 0x3f3
push 0x20033
push 0
call fcn.004584f9
push 0x3f1
push 0x20061
push 0
call fcn.004584f9
push 0x3f2
push 0x20062
push 0
call fcn.004584f9
push 0x3f3
push 0x20063
push 0
call fcn.004584f9
push 0x3f4
push 0x20054
push 0
call fcn.004584f9
push 0x3f5
push 0x20045
push 0
call fcn.004584f9
push 0x3f6
push 0x30057
push 0
call fcn.004584f9
mov ebp, dword [0x473558]
cmp dword [ebp + 0xe0], 0
je 0x4391a0
push 0x3f7
push 0x30044
push 0
call fcn.004584f9
mov ebp, dword [0x473548]
mov dword [ebp], 2
mov ebp, dword [0x47355c]
mov dword [ebp], 2
push 0
mov ebp, dword [0x47356c]
push dword [ebp + 0x1c]
call fcn.0041e288
push 0
call fcn.00428419
call fcn.00458d3f
and eax, eax
je 0x4391e2
jmp 0x4391d7
push 0xd
push 0xa
call fcn.004449bc
push 0xe
push 0xb
call fcn.004449bc
push 0x3e
push 0x3b
call fcn.004449bc
push 0x3f
push 0x3c
call fcn.004449bc
push 0x4f
call fcn.00451677
push eax
call sub.user32.dll_SetFocus
mov ebp, dword [0x473554]
cmp dword [ebp + 0x20], 0
je 0x439253
push 0x300
push 0x4f
push 0
push 0x332c
call fcn.0045cd08
mov ebp, dword [0x473554]
cmp dword [ebp + 0x30], 0
jne 0x43926d
mov ebp, dword [0x473554]
cmp dword [ebp + 0x34], 0
jne 0x43926d
jmp 0x439274
mov eax, 1
jmp 0x439276
xor eax, eax
and eax, eax
je 0x4392a6
mov ebp, dword [0x473558]
mov ebx, dword [ebp + 0x64]
cmp ebx, 1
jne 0x439298
call fcn.0042f23c
and eax, eax
je 0x439296
call fcn.00413a43
jmp 0x4392a6
call fcn.00412653
and eax, eax
je 0x4392a6
call fcn.004359ee
mov ebp, dword [0x473558]
cmp dword [ebp + 0xc], 0
je 0x439490
push 1
push 0
call fcn.004587f9
cmp dword [0x893874], 0
je 0x4392ec
push 0
push 0x1f4
push 0x29e
push 4
call fcn.00407903
jmp 0x4393b0
mov dword [0x893874], 1
push 0
push 0x80cc0000
mov eax, str.WinNTSetup___Help
push eax
push 0x1f4
push 0x29e
push 4
call fcn.0042b613
mov ebp, dword [0x473568]
push dword [ebp + 0x18]
push 0
push pe_nt_image_headers32
push 4
call fcn.004584dd
push eax
call sub.user32.dll_SendMessageW
push 0
push 0x1f4
push 0x29e
push 0
push 0
push 0x6e
call fcn.00412fb1
push edx
call fcn.0045e620
pop edx
push eax
push 0
push edx
call fcn.0045e620
pop edx
push eax
call fcn.00420e8d
call fcn.0045e850
push 1
push 0x6e
call fcn.0044e2d2
add dword [esp + 8], edx
call fcn.004515af
call fcn.0044e2f0
push 0x3ed
push 0x1b
push 4
call fcn.004584f9
push 0x6e
call fcn.00451677
push eax
call sub.user32.dll_SetFocus
push 0
push 0
push 0xb1
push 0x6e
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
call fcn.0045872d
push eax
mov ebx, 0x333e
cmp ebx, dword [esp]
jne 0x439425
push 4
call fcn.00458db2
mov ebx, eax
add ebx, 0xfffffff6
push ebx
push 4
call fcn.00458e01
mov ebx, eax
add ebx, 0xfffffff6
push ebx
push 0
push 0
push 0x6e
call fcn.00455930
jmp 0x439454
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x439436
add esp, 4
jmp 0x439457
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x439454
call fcn.0045ccea
mov ebx, eax
cmp ebx, 0x3ed
jne 0x439454
add esp, 4
jmp 0x439457
pop eax
jmp 0x4393df
push 1
push 4
call fcn.004587e7
push 0
push 0
call fcn.004587f9
mov ebp, dword [0x473558]
push dword [ebp]
call sub.user32.dll_SetForegroundWindow
mov ebp, dword [0x473558]
mov dword [ebp + 0xc], 0
mov ebp, dword [0x473558]
cmp dword [ebp + 0x10], 0
je 0x4394da
push 1
push 0
call fcn.004587f9
call fcn.00433422
push 0
push 0
call fcn.004587f9
mov ebp, dword [0x473558]
push dword [ebp]
call sub.user32.dll_SetForegroundWindow
mov ebp, dword [0x473558]
mov dword [ebp + 0x10], 0
mov ebp, dword [0x473558]
cmp dword [ebp + 4], 0
je 0x439524
push 1
push 0
call fcn.004587f9
call fcn.00412212
push 0
push 0
call fcn.004587f9
mov ebp, dword [0x473558]
push dword [ebp]
call sub.user32.dll_SetForegroundWindow
mov ebp, dword [0x473558]
mov dword [ebp + 4], 0
mov ebp, dword [0x473558]
cmp dword [ebp + 8], 0
je 0x439674
push edx
call fcn.0045e620
pop edx
push eax
mov ebp, dword [0x47356c]
mov edx, dword [ebp + 8]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov edx, str.Lang
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.004451b5
call fcn.0044e2f0
push edx
call fcn.0045e620
pop edx
push eax
push 0
call fcn.004584dd
push eax
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
mov ebp, dword [0x47356c]
mov eax, dword [ebp + 0x2c]
cdq
push edx
push eax
call fcn.0044f300
call fcn.0045e850
push 0
mov eax, str.Language_files__._.dll
push eax
mov ebp, dword [0x47356c]
mov edx, dword [ebp + 8]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov edx, str.Lang_
push edx
call fcn.0045e6f0
call fcn.0045e850
mov eax, str.Save_Language.dll
push eax
call fcn.0044e2d2
add dword [esp + 4], edx
call fcn.0044e2d2
add dword [esp + 0x10], edx
call fcn.0044d4c8
lea eax, [esp + 4]
push eax
call fcn.0045e660
mov edx, dword [esp]
xor ecx, ecx
call fcn.0044e300
jne 0x439667
mov eax, 0x46730e
push eax
mov eax, dword [esp + 4]
push eax
call sub.shlwapi.dll_PathMatchSpecW
and eax, eax
je 0x439626
xor eax, eax
jmp 0x43962b
mov eax, 1
and eax, eax
je 0x439655
mov edx, dword [esp]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov edx, str..dll
push edx
call fcn.0045e6f0
lea eax, [esp + 4]
push eax
call fcn.0045e660
mov ebp, dword [0x47356c]
push dword [ebp + 0x2c]
push dword [esp + 4]
call fcn.004019fa
mov ebp, dword [0x473558]
mov dword [ebp + 8], 0
mov ebp, dword [0x473558]
cmp dword [ebp + 0xe4], 0
je 0x43971e
push edx
call fcn.0045e620
pop edx
push eax
push 0
call fcn.004584dd
push eax
mov eax, 0x46105e
push eax
push 0
mov eax, str.DiskPart_Scripts__.txt_.scr_.txt_.scr
push eax
mov ebp, dword [0x47356c]
mov edx, dword [ebp]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov edx, str.ToolsDiskPart
push edx
call fcn.0045e6f0
call fcn.0045e850
mov ebp, dword [0x893880]
push dword [ebp + 0x4dc]
call fcn.0044e2d2
add dword [esp + 4], edx
call fcn.0044d0d9
lea eax, [esp + 4]
push eax
call fcn.0045e660
push dword [esp]
mov edx, 0x46105e
pop ecx
call fcn.0044e300
jne 0x43970e
push dword [esp]
call fcn.0042bc38
mov ebp, dword [0x473558]
mov dword [ebp + 0xe4], 0
call fcn.0045872d
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
mov ebp, dword [0x473560]
cmp dword [ebp + 0x20], 0
je 0x439740
jmp 0x43b872
mov ebp, dword [0x473558]
push dword [ebp + 0x80]
call fcn.0044f161
and eax, eax
je 0x4397b1
mov ebx, dword [esp + 0xc]
cmp ebx, 0x332c
jne 0x4397ac
call fcn.0045ccf9
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x10]
cmp ebx, 0x25
jne 0x4397ac
mov ebp, dword [0x473558]
push dword [ebp]
mov ebp, dword [0x893880]
push dword [ebp + 0x268]
push dword [ebp + 0x264]
push 0x24
call fcn.0040e5f6
mov ebx, eax
cmp ebx, 6
jne 0x4397ac
mov ebp, dword [0x473558]
mov dword [ebp + 0x58], 1
jmp 0x43b872
mov ebp, dword [0x473558]
push dword [ebp + 0x7c]
call fcn.0044f161
and eax, eax
je 0x43981f
mov ebx, dword [esp + 0xc]
cmp ebx, 0x332c
jne 0x43981a
call fcn.0045ccf9
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x10]
cmp ebx, 0x25
jne 0x43981a
mov ebp, dword [0x473558]
push dword [ebp]
mov ebp, dword [0x893880]
push dword [ebp + 0x268]
push dword [ebp + 0x264]
push 0x24
call fcn.0040e5f6
mov ebx, eax
cmp ebx, 6
jne 0x43981a
mov ebp, dword [0x473558]
mov dword [ebp + 0x58], 1
jmp 0x43b872
push dword [esp + 0xc]
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x439842
mov ebp, dword [0x473558]
mov dword [ebp + 0xb8], 1
jmp 0x43a157
mov ebx, 0x204
cmp ebx, dword [esp]
jne 0x439e64
call sub.user32.dll_GetMessagePos
mov dword [esp + 0x28], eax
mov ebx, dword [esp + 0x28]
and ebx, 0xffff
push ebx
lea ebp, [esp + 0x1c]
pop eax
mov dword [ebp], eax
mov ebx, dword [esp + 0x28]
sar ebx, 0x10
and ebx, 0xffff
push ebx
pop eax
mov dword [ebp + 4], eax
lea eax, [esp + 0x18]
push eax
pop eax
mov dword [esp + 0x24], eax
mov ebp, dword [esp + 0x24]
lea eax, [ebp]
push dword [eax + 4]
push dword [eax]
call sub.user32.dll_WindowFromPoint
push eax
push 0xf
call fcn.00451677
cmp eax, dword [esp]
je 0x4398bc
push 0x10
call fcn.00451677
cmp eax, dword [esp]
jne 0x43998b
push edx
call fcn.0045e620
pop edx
push eax
push 0
call fcn.004584dd
push eax
mov eax, 0x46105e
push eax
push 0
mov eax, str.Images__.iso_.wim_.swm_.esd_.iso_.wim_.swm_.esd
push eax
mov ebp, dword [0x473558]
push dword [ebp + 0x1c]
mov eax, 0x46105e
push eax
call fcn.0044d0d9
lea eax, [esp + 0xc]
push eax
call fcn.0045e660
push dword [esp + 8]
mov edx, 0x46105e
pop ecx
call fcn.0044e300
jne 0x439986
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0x10]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x1c]
push eax
call fcn.0045e660
push dword [esp + 8]
call fcn.0040b4c5
and eax, eax
je 0x439948
xor eax, eax
jmp 0x43994d
mov eax, 1
and eax, eax
je 0x439973
mov eax, str.AMD64NTDETECT.COM
push eax
mov eax, str.I386NTDETECT.COM
push eax
mov eax, 0x46105e
push eax
push 9
push dword [esp + 0x18]
call fcn.0043b902
jmp 0x439981
push dword [esp + 8]
push 9
call fcn.00451564
call fcn.0041147b
jmp 0x439e5e
push 0x40
call fcn.00451677
cmp eax, dword [esp]
je 0x4399ad
push 0x41
call fcn.00451677
cmp eax, dword [esp]
jne 0x439a50
push edx
call fcn.0045e620
pop edx
push eax
push 0
call fcn.004584dd
push eax
mov eax, 0x46105e
push eax
push 0
mov eax, str.ISO_Files__.iso_.iso
push eax
mov ebp, dword [0x473558]
push dword [ebp + 0x20]
mov eax, 0x46105e
push eax
call fcn.0044d0d9
lea eax, [esp + 0xc]
push eax
call fcn.0045e660
push dword [esp + 8]
mov edx, 0x46105e
pop ecx
call fcn.0044e300
jne 0x439a4b
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0x10]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x20]
push eax
call fcn.0045e660
push 0x46105e
push 0x46105e
mov eax, str._sourcesinstall.wim
push eax
push 0x3a
push dword [esp + 0x18]
call fcn.0043b902
call fcn.004133ca
jmp 0x439e5e
push 0x51
call fcn.00451677
cmp eax, dword [esp]
jne 0x439afd
push 0
mov ebp, dword [0x473558]
push dword [ebp]
push 0
lea ebp, [esp + 0x28]
push dword [ebp + 4]
push dword [ebp]
push 0x100
mov ebp, dword [0x473558]
push dword [ebp + 0xb4]
call sub.user32.dll_TrackPopupMenu
and eax, eax
je 0x439af8
mov ebp, dword [0x473558]
cmp dword [ebp + 0x68], 0
je 0x439ad0
mov ebp, dword [0x473558]
mov dword [ebp + 0x68], 0
push 0x400
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0xb4]
call sub.user32.dll_CheckMenuItem
jmp 0x439af8
mov ebp, dword [0x473558]
mov dword [ebp + 0x68], 1
push 0x408
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0xb4]
call sub.user32.dll_CheckMenuItem
jmp 0x439e5e
push 0x13
call fcn.00451677
cmp eax, dword [esp]
jne 0x439bc3
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x1a
call fcn.004514fc
call fcn.0044e2d2
add dword [esp], edx
call fcn.00417bc9
call fcn.0044e2f0
and eax, eax
je 0x439bbe
push edx
call fcn.0045e620
pop edx
push eax
push 0xa
push 0
push edx
call fcn.0045e620
pop edx
push eax
mov edx, 0x461740
push edx
call fcn.0045e6f0
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x1a
call fcn.004514fc
pop eax
mov edx, 0x461740
push edx
call fcn.0045e6f0
call fcn.0045e850
mov ebp, dword [0x473558]
push dword [ebp + 0x44]
push 0
push 0
call fcn.0044e2d2
add dword [esp + 0xc], edx
call sub.shell32.dll_ShellExecuteW
call fcn.0044e2f0
jmp 0x439e5e
push 0x44
call fcn.00451677
cmp eax, dword [esp]
jne 0x439c89
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x4a
call fcn.004514fc
call fcn.0044e2d2
add dword [esp], edx
call fcn.00417bc9
call fcn.0044e2f0
and eax, eax
je 0x439c84
push edx
call fcn.0045e620
pop edx
push eax
push 0xa
push 0
push edx
call fcn.0045e620
pop edx
push eax
mov edx, 0x461740
push edx
call fcn.0045e6f0
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x4a
call fcn.004514fc
pop eax
mov edx, 0x461740
push edx
call fcn.0045e6f0
call fcn.0045e850
mov ebp, dword [0x473558]
push dword [ebp + 0x48]
push 0
push 0
call fcn.0044e2d2
add dword [esp + 0xc], edx
call sub.shell32.dll_ShellExecuteW
call fcn.0044e2f0
jmp 0x439e5e
push 0x14
call fcn.00451677
cmp eax, dword [esp]
jne 0x439d76
mov ebp, dword [0x473548]
mov ebx, dword [ebp + 0x4c]
and ebx, ebx
jne 0x439ced
mov ebp, dword [0x893880]
push dword [ebp + 0x4f0]
push 0x27
call fcn.00451564
mov ebp, dword [0x473548]
mov dword [ebp + 0x4c], 1
push 0
push 3
push 0x410
push 0x26
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
jmp 0x439d2f
mov ebp, dword [0x893880]
push dword [ebp + 0x4f4]
push 0x27
call fcn.00451564
mov ebp, dword [0x473548]
mov dword [ebp + 0x4c], 0
push 0
push 1
push 0x410
push 0x26
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
mov ebx, dword [0x4734c4]
and ebx, ebx
jne 0x439d58
lea eax, [0x40ae8a]
push eax
push 0x190
push 0
mov ebp, dword [0x473558]
push dword [ebp]
call sub.user32.dll_SetTimer
mov dword [0x4734c4], 3
push 0x64
push 0x26
call fcn.00451614
jmp 0x439e5e
push 0x45
call fcn.00451677
cmp eax, dword [esp]
jne 0x439e5e
mov ebp, dword [0x47355c]
mov ebx, dword [ebp + 0x58]
and ebx, ebx
jne 0x439dda
mov ebp, dword [0x893880]
push dword [ebp + 0x4f0]
push 0x27
call fcn.00451564
mov ebp, dword [0x47355c]
mov dword [ebp + 0x58], 1
push 0
push 3
push 0x410
push 0x26
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
jmp 0x439e1c
mov ebp, dword [0x893880]
push dword [ebp + 0x4f4]
push 0x27
call fcn.00451564
mov ebp, dword [0x47355c]
mov dword [ebp + 0x58], 0
push 0
push 1
push 0x410
push 0x26
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
mov ebx, dword [0x4734c4]
and ebx, ebx
jne 0x439e45
lea eax, [0x40ae8a]
push eax
push 0x190
push 0
mov ebp, dword [0x473558]
push dword [ebp]
call sub.user32.dll_SetTimer
mov dword [0x4734c4], 3
push 0x64
push 0x26
call fcn.00451614
pop eax
jmp 0x43a157
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x439e7c
call fcn.0045ccf9
mov dword [esp + 0x14], eax
jmp 0x43a157
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x43a157
call fcn.0045ccea
push eax
mov ebx, 0x3eb
cmp ebx, dword [esp]
jne 0x439ee4
mov dword [esp + 0x18], 0
push 0
call fcn.004514cf
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x439ec5
push 1
push 0
call fcn.00451614
jmp 0x439ede
mov ebx, 1
cmp ebx, dword [esp]
jne 0x439ede
push 0
push 0
call fcn.00451614
pop eax
jmp 0x43a156
mov ebx, 0x3e8
cmp ebx, dword [esp]
jne 0x439f10
push 0
push 0x70
push 0x112
mov ebp, dword [0x473558]
push dword [ebp]
call sub.user32.dll_PostMessageW
jmp 0x43a156
mov ebx, 0x3e9
cmp ebx, dword [esp]
jne 0x439f3c
push 0
push pe_nt_image_headers32
push 0x112
mov ebp, dword [0x473558]
push dword [ebp]
call sub.user32.dll_PostMessageW
jmp 0x43a156
mov ebx, 0x3ea
cmp ebx, dword [esp]
jne 0x439f58
mov ebp, dword [0x473558]
mov dword [ebp + 0xc], 1
jmp 0x43a156
mov ebx, 0x3ec
cmp ebx, dword [esp]
jne 0x439f7b
push 1
push 0
call fcn.004587f9
call fcn.00402db8
jmp 0x43a156
mov ebx, 0x3ef
cmp ebx, dword [esp]
jne 0x439f97
mov ebp, dword [0x473558]
mov dword [ebp + 0x10], 1
jmp 0x43a156
mov ebx, 0x3f0
cmp ebx, dword [esp]
jne 0x439fc3
push 0
push 0x50
push 0x112
mov ebp, dword [0x473558]
push dword [ebp]
call sub.user32.dll_PostMessageW
jmp 0x43a156
mov ebx, 0x3ee
cmp ebx, dword [esp]
jne 0x439feb
push 0
push 0x25
push 0
push 0x332c
call fcn.0045cd08
jmp 0x43a156
mov ebx, 0x3f1
cmp ebx, dword [esp]
jne 0x43a032
mov ebp, dword [0x473558]
mov ebx, dword [ebp + 0x64]
cmp ebx, 1
jne 0x43a00d
mov dword [esp + 0xc], 0xf
jmp 0x43a015
mov dword [esp + 0xc], 0x40
push 0
push dword [esp + 0x10]
push 0
push 0x332c
call fcn.0045cd08
jmp 0x43a156
mov ebx, 0x3f2
cmp ebx, dword [esp]
jne 0x43a05a
push 0
push 0x21
push 0
push 0x332c
call fcn.0045cd08
jmp 0x43a156
mov ebx, 0x3f3
cmp ebx, dword [esp]
jne 0x43a082
push 0
push 0x23
push 0
push 0x332c
call fcn.0045cd08
jmp 0x43a156
mov ebx, 0x3f4
cmp ebx, dword [esp]
jne 0x43a0aa
push 0
push 0x2b
push 0
push 0x332c
call fcn.0045cd08
jmp 0x43a156
mov ebx, 0x3f5
cmp ebx, dword [esp]
jne 0x43a0e6
mov ebp, dword [0x473558]
mov ebx, dword [ebp + 0x64]
cmp ebx, 1
jne 0x43a0d4
push 0x1e
call fcn.00451677
push eax
call sub.user32.dll_SetFocus
jmp 0x43a0e4
push 0x4f
call fcn.00451677
push eax
call sub.user32.dll_SetFocus
jmp 0x43a156
mov ebx, 0x3f6
cmp ebx, dword [esp]
jne 0x43a12f
mov ebp, dword [0x473558]
cmp dword [ebp + 0xa0], 0
je 0x43a109
mov dword [esp + 0xc], 0xd0
jmp 0x43a111
mov dword [esp + 0xc], 0xc0
push 0
push dword [esp + 0x10]
push 0x112
mov ebp, dword [0x473558]
push dword [ebp]
call sub.user32.dll_PostMessageW
jmp 0x43a156
mov ebx, 0x3f7
cmp ebx, dword [esp]
jne 0x43a156
push 0
push 0xf0
push 0x112
mov ebp, dword [0x473558]
push dword [ebp]
call sub.user32.dll_PostMessageW
pop eax
pop eax
push dword [esp + 0x10]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x43a19b
push 0
call fcn.004514cf
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x43a181
push 1
call fcn.004356d0
jmp 0x43a195
mov ebx, 1
cmp ebx, dword [esp]
jne 0x43a195
push 2
call fcn.004356d0
pop eax
jmp 0x43b871
mov ebx, 0x4f
cmp ebx, dword [esp]
jne 0x43a24d
call fcn.0045cd6c
push eax
mov ebx, 0x300
cmp ebx, dword [esp]
jne 0x43a247
push 0x4f
call fcn.004514cf
mov ebx, eax
inc ebx
mov dword [esp + 0xc], ebx
mov ebp, dword [0x473550]
push ebp
mov eax, dword [esp + 0x10]
shl eax, 6
pop ebp
add ebp, eax
push dword [ebp + 0x44]
push 0x3d
call fcn.0040b6d3
mov ebp, dword [0x473550]
push ebp
mov eax, dword [esp + 0x10]
shl eax, 6
pop ebp
add ebp, eax
push dword [ebp + 0x3c]
mov ebp, dword [0x473550]
push ebp
mov eax, dword [esp + 0x14]
shl eax, 6
pop ebp
add ebp, eax
push dword [ebp + 0x48]
mov ebp, dword [0x473550]
push ebp
mov eax, dword [esp + 0x18]
shl eax, 6
pop ebp
add ebp, eax
push dword [ebp + 0x28]
call fcn.0044f890
push eax
mov ebp, dword [0x473550]
push ebp
mov eax, dword [esp + 0x1c]
shl eax, 6
pop ebp
add ebp, eax
push dword [ebp + 0x1c]
call fcn.0042271e
pop eax
jmp 0x43b871
mov ebx, 9
cmp ebx, dword [esp]
jne 0x43a272
call fcn.0045cd6c
push eax
mov ebx, 0x300
cmp ebx, dword [esp]
jne 0x43a26c
call fcn.0041147b
pop eax
jmp 0x43b871
mov ebx, 0x3a
cmp ebx, dword [esp]
jne 0x43a297
call fcn.0045cd6c
push eax
mov ebx, 0x300
cmp ebx, dword [esp]
jne 0x43a291
call fcn.004133ca
pop eax
jmp 0x43b871
mov ebx, 0xa
cmp ebx, dword [esp]
jne 0x43a2c6
call fcn.0045cd6c
push eax
mov ebx, 0x300
cmp ebx, dword [esp]
jne 0x43a2c0
push 0xd
push 0xa
call fcn.004449bc
pop eax
jmp 0x43b871
mov ebx, 0x3b
cmp ebx, dword [esp]
jne 0x43a2f5
call fcn.0045cd6c
push eax
mov ebx, 0x300
cmp ebx, dword [esp]
jne 0x43a2ef
push 0x3e
push 0x3b
call fcn.004449bc
pop eax
jmp 0x43b871
mov ebx, 0xb
cmp ebx, dword [esp]
jne 0x43a324
call fcn.0045cd6c
push eax
mov ebx, 0x300
cmp ebx, dword [esp]
jne 0x43a31e
push 0xe
push 0xb
call fcn.004449bc
pop eax
jmp 0x43b871
mov ebx, 0x3c
cmp ebx, dword [esp]
jne 0x43a353
call fcn.0045cd6c
push eax
mov ebx, 0x300
cmp ebx, dword [esp]
jne 0x43a34d
push 0x3f
push 0x3c
call fcn.004449bc
pop eax
jmp 0x43b871
mov ebx, 0x33
cmp ebx, dword [esp]
jne 0x43a389
push 5
push 0
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0x50]
push 0
push 0
call sub.shell32.dll_ShellExecuteW
jmp 0x43b871
mov ebx, 0xf
cmp ebx, dword [esp]
je 0x43a3a1
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x43a454
push edx
call fcn.0045e620
pop edx
push eax
push 0x46105e
push 0
call fcn.004584dd
push eax
mov eax, 0x46105e
push eax
push 0
mov eax, str.::20D04FE0_3AEA_1069_A2D8_08002B30309D
push eax
mov ebp, dword [0x893880]
push dword [ebp + 0x8c]
call fcn.0044d930
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.0044e300
jne 0x43a44f
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
mov eax, 0x4622e0
push eax
push dword [esp + 0x14]
call fcn.0044f770
call fcn.0045e850
push 9
call fcn.0044e2d2
add dword [esp + 4], edx
call fcn.00451564
call fcn.0044e2f0
push 0x300
push 9
push 0
push 0x332c
call fcn.0045cd08
jmp 0x43b871
mov ebx, 0x21
cmp ebx, dword [esp]
je 0x43a46c
mov ebx, 0x22
cmp ebx, dword [esp]
jne 0x43a54c
push edx
call fcn.0045e620
pop edx
push eax
push 0x46105e
push 0
call fcn.004584dd
push eax
mov eax, 0x46105e
push eax
push 0
mov eax, str.::20D04FE0_3AEA_1069_A2D8_08002B30309D
push eax
mov ebp, dword [0x893880]
push dword [ebp + 0x90]
call fcn.0044d930
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.0044e300
jne 0x43a547
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 2
push dword [esp + 0x10]
call fcn.0044f540
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov ebp, dword [0x473558]
mov ebx, dword [ebp + 0x64]
cmp ebx, 1
jne 0x43a520
push dword [esp + 4]
push 0xa
call fcn.00451564
push 0x300
push 0xa
push 0
push 0x332c
call fcn.0045cd08
jmp 0x43a547
push dword [esp + 4]
push 0x3b
call fcn.00451564
push 0x300
push 0x3b
push 0
push 0x332c
call fcn.0045cd08
jmp 0x43b871
mov ebx, 0x23
cmp ebx, dword [esp]
je 0x43a564
mov ebx, 0x24
cmp ebx, dword [esp]
jne 0x43a644
push edx
call fcn.0045e620
pop edx
push eax
push 0x46105e
push 0
call fcn.004584dd
push eax
mov eax, 0x46105e
push eax
push 0
mov eax, str.::20D04FE0_3AEA_1069_A2D8_08002B30309D
push eax
mov ebp, dword [0x893880]
push dword [ebp + 0x94]
call fcn.0044d930
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.0044e300
jne 0x43a63f
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 2
push dword [esp + 0x10]
call fcn.0044f540
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov ebp, dword [0x473558]
mov ebx, dword [ebp + 0x64]
cmp ebx, 1
jne 0x43a618
push dword [esp + 4]
push 0xb
call fcn.00451564
push 0x300
push 0xb
push 0
push 0x332c
call fcn.0045cd08
jmp 0x43a63f
push dword [esp + 4]
push 0x3c
call fcn.00451564
push 0x300
push 0x3c
push 0
push 0x332c
call fcn.0045cd08
jmp 0x43b871
mov ebx, 0x19
cmp ebx, dword [esp]
jne 0x43a754
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x1b
call fcn.004514fc
lea eax, [esp + 8]
push eax
call fcn.0045e660
push dword [esp + 4]
call fcn.0044f9d0
mov ebx, eax
cmp ebx, 3
jge 0x43a6ac
push dword [esp + 4]
call sub.kernel32.dll_GetFileAttributesW
mov ebx, eax
and ebx, 0x10
and ebx, ebx
je 0x43a69c
xor eax, eax
jmp 0x43a6a1
mov eax, 1
and eax, eax
je 0x43a6ac
mov eax, 1
jmp 0x43a6ae
xor eax, eax
and eax, eax
je 0x43a6c5
mov ebp, dword [0x473558]
mov edx, str.::20D04FE0_3AEA_1069_A2D8_08002B30309D
lea ecx, [ebp + 0x24]
call fcn.0044e008
push edx
call fcn.0045e620
pop edx
push eax
push 0x46105e
push 0
call fcn.004584dd
push eax
mov eax, 0x46105e
push eax
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0x24]
mov ebp, dword [0x893880]
push dword [ebp + 0x98]
call fcn.0044d930
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.0044e300
jne 0x43a74f
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0xc]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x24]
push eax
call fcn.0045e660
push dword [esp + 4]
push 0x1b
call fcn.00451564
jmp 0x43b871
mov ebx, 0x18
cmp ebx, dword [esp]
jne 0x43a81b
push edx
call fcn.0045e620
pop edx
push eax
push 0
call fcn.004584dd
push eax
mov eax, str.winnt.sif
push eax
push 0
mov eax, str.SIF_files__.sif_.txt_.sif_.txt
push eax
mov ebp, dword [0x473558]
push dword [ebp + 0x14]
mov eax, 0x46105e
push eax
call fcn.0044d0d9
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.0044e300
jne 0x43a816
mov eax, str..txt_.sif
push eax
mov eax, dword [esp + 8]
push eax
call sub.shlwapi.dll_PathMatchSpecW
and eax, eax
je 0x43a7c9
xor eax, eax
jmp 0x43a7ce
mov eax, 1
and eax, eax
je 0x43a7e0
mov edx, 0x46105e
lea ecx, [esp + 4]
call fcn.0044e008
push dword [esp + 4]
push 0x1a
call fcn.00451564
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0xc]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x14]
push eax
call fcn.0045e660
jmp 0x43b871
mov ebx, 0x40
cmp ebx, dword [esp]
je 0x43a833
mov ebx, 0x41
cmp ebx, dword [esp]
jne 0x43a907
push edx
call fcn.0045e620
pop edx
push eax
push 0
call fcn.004584dd
push eax
mov eax, 0x465c66
push eax
push 0
mov eax, str.Images__.iso_.wim_.swm_.esd_.iso_.wim_.swm_.esd
push eax
mov ebp, dword [0x473558]
push dword [ebp + 0x20]
mov ebp, dword [0x893880]
push dword [ebp + 0x9c]
call fcn.0044d0d9
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.0044e300
jne 0x43a902
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0xc]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x20]
push eax
call fcn.0045e660
push dword [esp + 4]
call fcn.0040b4c5
and eax, eax
je 0x43a8c1
xor eax, eax
jmp 0x43a8c6
mov eax, 1
and eax, eax
je 0x43a8ef
push 0x46105e
push 0x46105e
mov eax, str._sourcesinstall.wim
push eax
push 0x3a
push dword [esp + 0x14]
call fcn.0043b902
call fcn.004133ca
jmp 0x43a902
push dword [esp + 4]
push 0x3a
call fcn.00451564
call fcn.004133ca
jmp 0x43b871
mov ebx, 0x49
cmp ebx, dword [esp]
jne 0x43aac6
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x4b
call fcn.004514fc
lea eax, [esp + 8]
push eax
call fcn.0045e660
push dword [esp + 4]
call fcn.0044f9d0
mov ebx, eax
cmp ebx, 3
jge 0x43a96f
push dword [esp + 4]
call sub.kernel32.dll_GetFileAttributesW
mov ebx, eax
and ebx, 0x10
and ebx, ebx
je 0x43a95f
xor eax, eax
jmp 0x43a964
mov eax, 1
and eax, eax
je 0x43a96f
mov eax, 1
jmp 0x43a971
xor eax, eax
and eax, eax
je 0x43a988
mov ebp, dword [0x473558]
mov edx, str.::20D04FE0_3AEA_1069_A2D8_08002B30309D
lea ecx, [ebp + 0x28]
call fcn.0044e008
push edx
call fcn.0045e620
pop edx
push eax
push 0x46105e
push 0
call fcn.004584dd
push eax
mov eax, 0x46105e
push eax
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0x28]
mov ebp, dword [0x893880]
push dword [ebp + 0x98]
call fcn.0044d930
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.0044e300
jne 0x43aa17
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0xc]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x28]
push eax
call fcn.0045e660
push dword [esp + 4]
push 0x4b
call fcn.00451564
jmp 0x43aac1
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x4b
call fcn.004514fc
call fcn.0045e850
mov edx, 0x46105e
pop ecx
push ecx
call fcn.0044e340
mov ecx, eax
call fcn.0044e300
jne 0x43aa87
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x4b
call fcn.004514fc
call fcn.0044e2d2
add dword [esp], edx
call fcn.0041a2ad
call fcn.0044e2f0
mov ebx, eax
and ebx, ebx
je 0x43aa87
jmp 0x43aa8e
mov eax, 1
jmp 0x43aa90
xor eax, eax
and eax, eax
je 0x43aac1
push 0
push 0x45
call fcn.00451614
push 1
push 0x4b
call fcn.0045164c
push 1
push 0x49
call fcn.0045164c
jmp 0x43b871
mov ebx, 0x48
cmp ebx, dword [esp]
jne 0x43abf0
push edx
call fcn.0045e620
pop edx
push eax
push 0
call fcn.004584dd
push eax
mov eax, str.unattend.xml
push eax
push 0
mov eax, str.XML_files__.xml_.xml
push eax
mov ebp, dword [0x473558]
push dword [ebp + 0x18]
mov eax, 0x46105e
push eax
call fcn.0044d0d9
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.0044e300
jne 0x43ab8a
mov eax, str..xml
push eax
mov eax, dword [esp + 8]
push eax
call sub.shlwapi.dll_PathMatchSpecW
and eax, eax
je 0x43ab3b
xor eax, eax
jmp 0x43ab40
mov eax, 1
and eax, eax
je 0x43ab52
mov edx, 0x46105e
lea ecx, [esp + 4]
call fcn.0044e008
push dword [esp + 4]
push 0x4a
call fcn.00451564
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0xc]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x18]
push eax
call fcn.0045e660
jmp 0x43abeb
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x4a
call fcn.004514fc
call fcn.0045e850
mov edx, 0x46105e
pop ecx
push ecx
call fcn.0044e340
mov ecx, eax
call fcn.0044e300
je 0x43abeb
push 0
push 0x44
call fcn.00451614
push 1
push 0x4a
call fcn.0045164c
push 1
push 0x48
call fcn.0045164c
jmp 0x43b871
mov ebx, 0x2c
cmp ebx, dword [esp]
jne 0x43ae2a
mov ebp, dword [0x473558]
mov ebx, dword [ebp + 0x64]
cmp ebx, 1
jne 0x43ad1d
push edx
call fcn.0045e620
pop edx
push eax
mov ebp, dword [0x473558]
push dword [ebp]
push 0
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0xa
call fcn.004514fc
call fcn.0044e2d2
add dword [esp], edx
call fcn.0042fb75
call fcn.0044e2f0
push edx
call fcn.0045e620
pop edx
push eax
push 0xd
push 0xa
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0xa
call fcn.004514fc
mov edx, 0x4622e0
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.0042b7fe
call fcn.0044e2f0
push edx
call fcn.0045e620
pop edx
push eax
push 0xe
push 0xb
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0xb
call fcn.004514fc
mov edx, 0x4622e0
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.0042b7fe
call fcn.0044e2f0
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0xa
call fcn.004514fc
call fcn.0044e2d2
add dword [esp], edx
call fcn.004460a0
call fcn.0044e2f0
jmp 0x43ae25
push edx
call fcn.0045e620
pop edx
push eax
mov ebp, dword [0x473558]
push dword [ebp]
push 0
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x3b
call fcn.004514fc
call fcn.0044e2d2
add dword [esp], edx
call fcn.0042fb75
call fcn.0044e2f0
push edx
call fcn.0045e620
pop edx
push eax
push 0x3e
push 0x3b
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x3b
call fcn.004514fc
mov edx, 0x4622e0
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.0042b7fe
call fcn.0044e2f0
push edx
call fcn.0045e620
pop edx
push eax
push 0x3f
push 0x3c
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x3c
call fcn.004514fc
mov edx, 0x4622e0
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.0042b7fe
call fcn.0044e2f0
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x3b
call fcn.004514fc
call fcn.0044e2d2
add dword [esp], edx
call fcn.00418d5e
call fcn.0044e2f0
jmp 0x43b871
mov ebx, 0x2d
cmp ebx, dword [esp]
jne 0x43affc
mov ebp, dword [0x473558]
mov ebx, dword [ebp + 0x64]
cmp ebx, 1
jne 0x43af23
push edx
call fcn.0045e620
pop edx
push eax
mov ebp, dword [0x473558]
push dword [ebp]
push 0
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0xb
call fcn.004514fc
call fcn.0044e2d2
add dword [esp], edx
call fcn.0042fb75
call fcn.0044e2f0
push edx
call fcn.0045e620
pop edx
push eax
push 0xd
push 0xa
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0xa
call fcn.004514fc
mov edx, 0x4622e0
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.0042b7fe
call fcn.0044e2f0
push edx
call fcn.0045e620
pop edx
push eax
push 0xe
push 0xb
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0xb
call fcn.004514fc
mov edx, 0x4622e0
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.0042b7fe
call fcn.0044e2f0
jmp 0x43aff7
push edx
call fcn.0045e620
pop edx
push eax
mov ebp, dword [0x473558]
push dword [ebp]
push 0
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x3c
call fcn.004514fc
call fcn.0044e2d2
add dword [esp], edx
call fcn.0042fb75
call fcn.0044e2f0
push edx
call fcn.0045e620
pop edx
push eax
push 0x3f
push 0x3c
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x3c
call fcn.004514fc
mov edx, 0x4622e0
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.0042b7fe
call fcn.0044e2f0
push edx
call fcn.0045e620
pop edx
push eax
push 0x3e
push 0x3b
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x3b
call fcn.004514fc
mov edx, 0x4622e0
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.0042b7fe
call fcn.0044e2f0
jmp 0x43b871
mov ebx, 0x2b
cmp ebx, dword [esp]
jne 0x43b05d
push 1
push 0
call fcn.004587f9
mov ebp, dword [0x473558]
mov ebx, dword [ebp + 0x64]
cmp ebx, 1
jne 0x43b02a
call fcn.00407bf6
jmp 0x43b058
mov ebp, dword [0x473550]
push ebp
push 0x4f
call fcn.004514cf
mov ebx, eax
inc ebx
mov eax, ebx
shl eax, 6
pop ebp
add ebp, eax
push dword [ebp + 0x1c]
mov ebp, dword [0x47355c]
pop eax
mov dword [ebp + 0x40], eax
call fcn.00409863
jmp 0x43b871
mov ebx, 0x51
cmp ebx, dword [esp]
jne 0x43b080
push 1
push 0
call fcn.004587f9
call fcn.00402db8
jmp 0x43b871
mov ebx, 0x13
cmp ebx, dword [esp]
jne 0x43b20b
push 0x13
call fcn.004514cf
mov ebx, eax
cmp ebx, 1
jne 0x43b1e8
push 0
push 0x1a
call fcn.0045164c
push 0
push 0x18
call fcn.0045164c
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x1a
call fcn.004514fc
lea eax, [esp + 8]
push eax
call fcn.0045e660
push dword [esp + 4]
call fcn.00417bc9
and eax, eax
je 0x43b0f6
xor eax, eax
jmp 0x43b0fb
mov eax, 1
and eax, eax
je 0x43b1e6
push edx
call fcn.0045e620
pop edx
push eax
push 0
call fcn.004584dd
push eax
mov eax, str.winnt.sif
push eax
push 0
mov eax, str.SIF_files__.sif_.txt_.sif_.txt
push eax
mov ebp, dword [0x473558]
push dword [ebp + 0x14]
mov eax, 0x46105e
push eax
call fcn.0044d0d9
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.0044e300
jne 0x43b1b9
mov eax, str..txt_.sif
push eax
mov eax, dword [esp + 8]
push eax
call sub.shlwapi.dll_PathMatchSpecW
and eax, eax
je 0x43b16a
xor eax, eax
jmp 0x43b16f
mov eax, 1
and eax, eax
je 0x43b181
mov edx, 0x46105e
lea ecx, [esp + 4]
call fcn.0044e008
push dword [esp + 4]
push 0x1a
call fcn.00451564
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0xc]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x14]
push eax
call fcn.0045e660
jmp 0x43b1e6
push 0
push 0x13
call fcn.00451614
push 1
push 0x1a
call fcn.0045164c
push 1
push 0x18
call fcn.0045164c
jmp 0x43b206
push 1
push 0x1a
call fcn.0045164c
push 1
push 0x18
call fcn.0045164c
jmp 0x43b871
mov ebx, 0x14
cmp ebx, dword [esp]
jne 0x43b37f
push 0x14
call fcn.004514cf
mov ebx, eax
cmp ebx, 1
jne 0x43b35c
push 0
push 0x1b
call fcn.0045164c
push 0
push 0x19
call fcn.0045164c
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x1b
call fcn.004514fc
lea eax, [esp + 8]
push eax
call fcn.0045e660
push dword [esp + 4]
call fcn.0044f9d0
mov ebx, eax
cmp ebx, 3
jge 0x43b35a
push edx
call fcn.0045e620
pop edx
push eax
push 0x46105e
push 0
call fcn.004584dd
push eax
mov eax, 0x46105e
push eax
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0x24]
mov ebp, dword [0x893880]
push dword [ebp + 0x98]
call fcn.0044d930
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.0044e300
jne 0x43b2e8
push dword [esp + 4]
push 0x1b
call fcn.00451564
jmp 0x43b35a
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x1b
call fcn.004514fc
call fcn.0044e2d2
add dword [esp], edx
call fcn.0041a2ad
call fcn.0044e2f0
and eax, eax
je 0x43b324
xor eax, eax
jmp 0x43b329
mov eax, 1
and eax, eax
je 0x43b35a
push 0
push 0x14
call fcn.00451614
push 1
push 0x1b
call fcn.0045164c
push 1
push 0x19
call fcn.0045164c
jmp 0x43b37a
push 1
push 0x1b
call fcn.0045164c
push 1
push 0x19
call fcn.0045164c
jmp 0x43b871
mov ebx, 0x16
cmp ebx, dword [esp]
jne 0x43b3bf
push 0x16
call fcn.004514cf
mov ebx, eax
cmp ebx, 1
jne 0x43b3ab
push 0
push 0x1c
call fcn.0045164c
jmp 0x43b3ba
push 1
push 0x1c
call fcn.0045164c
jmp 0x43b871
mov ebx, 0x15
cmp ebx, dword [esp]
jne 0x43b3ff
push 0x15
call fcn.004514cf
mov ebx, eax
cmp ebx, 1
jne 0x43b3eb
push 0
push 0x1d
call fcn.0045164c
jmp 0x43b3fa
push 1
push 0x1d
call fcn.0045164c
jmp 0x43b871
mov ebx, 0x44
cmp ebx, dword [esp]
jne 0x43b583
push 0x44
call fcn.004514cf
mov ebx, eax
cmp ebx, 1
jne 0x43b560
push 0
push 0x4a
call fcn.0045164c
push 0
push 0x48
call fcn.0045164c
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x4a
call fcn.004514fc
lea eax, [esp + 8]
push eax
call fcn.0045e660
push dword [esp + 4]
call fcn.00417bc9
and eax, eax
je 0x43b475
xor eax, eax
jmp 0x43b47a
mov eax, 1
and eax, eax
je 0x43b55e
push edx
call fcn.0045e620
pop edx
push eax
push 0
call fcn.004584dd
push eax
mov eax, str.unattend.xml
push eax
push 0
mov eax, str.XML_files__.xml_.xml
push eax
mov ebp, dword [0x473558]
push dword [ebp + 0x18]
mov eax, 0x46105e
push eax
call fcn.0044d0d9
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.0044e300
jne 0x43b531
mov eax, str..xml
push eax
mov eax, dword [esp + 8]
push eax
call sub.shlwapi.dll_PathMatchSpecW
and eax, eax
je 0x43b4e9
xor eax, eax
jmp 0x43b4ee
mov eax, 1
and eax, eax
je 0x43b500
mov edx, 0x46105e
lea ecx, [esp + 4]
call fcn.0044e008
push dword [esp + 4]
push 0x4a
call fcn.00451564
mov edx, dword [esp + 4]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov ebp, dword [0x473558]
lea eax, [ebp + 0x18]
push eax
call fcn.0045e660
jmp 0x43b55e
push 0
push 0x44
call fcn.00451614
push 1
push 0x4a
call fcn.0045164c
push 1
push 0x48
call fcn.0045164c
jmp 0x43b57e
push 1
push 0x4a
call fcn.0045164c
push 1
push 0x48
call fcn.0045164c
jmp 0x43b871
mov ebx, 0x45
cmp ebx, dword [esp]
jne 0x43b6f7
push 0x45
call fcn.004514cf
mov ebx, eax
cmp ebx, 1
jne 0x43b6d4
push 0
push 0x4b
call fcn.0045164c
push 0
push 0x49
call fcn.0045164c
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x4b
call fcn.004514fc
lea eax, [esp + 8]
push eax
call fcn.0045e660
push dword [esp + 4]
call fcn.0044f9d0
mov ebx, eax
cmp ebx, 3
jge 0x43b6d2
push edx
call fcn.0045e620
pop edx
push eax
push 0x46105e
push 0
call fcn.004584dd
push eax
mov eax, 0x46105e
push eax
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0x28]
mov ebp, dword [0x893880]
push dword [ebp + 0x98]
call fcn.0044d930
lea eax, [esp + 8]
push eax
call fcn.0045e660
mov edx, dword [esp + 4]
xor ecx, ecx
call fcn.0044e300
jne 0x43b660
push dword [esp + 4]
push 0x4b
call fcn.00451564
jmp 0x43b6d2
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x4b
call fcn.004514fc
call fcn.0044e2d2
add dword [esp], edx
call fcn.0041a2ad
call fcn.0044e2f0
and eax, eax
je 0x43b69c
xor eax, eax
jmp 0x43b6a1
mov eax, 1
and eax, eax
je 0x43b6d2
push 0
push 0x45
call fcn.00451614
push 1
push 0x4b
call fcn.0045164c
push 1
push 0x49
call fcn.0045164c
jmp 0x43b6f2
push 1
push 0x4b
call fcn.0045164c
push 1
push 0x49
call fcn.0045164c
jmp 0x43b871
mov ebx, 0x4d
cmp ebx, dword [esp]
jne 0x43b737
push 0x4d
call fcn.004514cf
mov ebx, eax
cmp ebx, 1
jne 0x43b723
push 0
push 0x4e
call fcn.0045164c
jmp 0x43b732
push 1
push 0x4e
call fcn.0045164c
jmp 0x43b871
mov ebx, 0x25
cmp ebx, dword [esp]
jne 0x43b772
mov ebp, dword [0x473558]
mov ebx, dword [ebp + 0x64]
cmp ebx, 1
jne 0x43b75f
call fcn.0042f23c
and eax, eax
je 0x43b75d
call fcn.00413a43
jmp 0x43b76d
call fcn.00412653
and eax, eax
je 0x43b76d
call fcn.004359ee
jmp 0x43b871
mov ebx, 0x54
cmp ebx, dword [esp]
jne 0x43b871
call fcn.0045cd6c
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x43b7ef
push edx
call fcn.0045e620
pop edx
push eax
push 1
push 0x46105e
push edx
call fcn.0045e620
pop edx
push eax
mov edx, str.explorer__Select__
push edx
call fcn.0045e6f0
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x3c
call fcn.004514fc
pop eax
mov edx, 0x461740
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.004130d4
call fcn.0044e2f0
jmp 0x43b870
mov ebx, 1
cmp ebx, dword [esp]
jne 0x43b870
push edx
call fcn.0045e620
pop edx
push eax
push 1
push 0x46105e
push edx
call fcn.0045e620
pop edx
push eax
mov edx, str.explorer__Select__
push edx
call fcn.0045e6f0
push edx
call fcn.0045e620
pop edx
push eax
push 0
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push 0x3c
call fcn.004514fc
call fcn.0044e2d2
add dword [esp], edx
call fcn.004474ed
pop eax
mov edx, 0x461740
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.004130d4
call fcn.0044e2f0
pop eax
pop eax
mov ebp, dword [0x473558]
mov ebx, dword [ebp + 0xb8]
cmp ebx, 1
jne 0x4392a6
mov ebp, dword [0x473558]
push dword [ebp + 0x5c]
call fcn.0044dc00
push dword [0x4734b8]
call sub.kernel32.dll_FreeLibrary
push edx
call fcn.0045e620
pop edx
push eax
mov ebp, dword [0x47356c]
mov edx, dword [ebp + 0x10]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov edx, 0x462e6c
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.0040cfad
call fcn.0044e2f0
call fcn.00402cc4
mov ebp, dword [0x473558]
push dword [ebp + 0xbc]
jmp 0x401806