Function at 0x4016dc
Capabilities:
Copy file
Create shortcut via ishelllink
Delete file
Delete registry value
Enumerate files on windows
Get file attributes
Move file
Query environment variable
Query or enumerate registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Set current directory
Set file attributes
Set registry value

Disassembly:
push ebp
mov ecx, 7
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x284]
push ebx
sub esp, 0x2cc
mov esi, dword [ebp + 8]
mov eax, dword [0x44024c]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x2a0], eax
mov esi, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x284]
mov eax, esi
mov dword [ebp - 0x2a4], ecx
shl eax, 0xe
add eax, dword [0x40d9d4]
mov edi, eax
mov eax, dword [ebp - 0x27c]
mov ebx, eax
shl ebx, 0xe
add ebx, dword [0x40d9d4]
mov dword [ebp - 0x29c], ebx
lea ebx, [ebp - 0x280]
mov dword [0x4180fc], ebx
lea ebx, [ecx - 2]
cmp ebx, 0x44
ja case.0x401751.67
jmp dword [ebx*4 + 0x40cca0]
mov dword [esp + 4], esi
mov dword [esp], str.Jump:__d
call fcn.00409477
mov edi, dword [ebp - 0x280]
jmp 0x404171
mov dword [esp], 0
call fcn.00401461
push edx
mov dword [esp + 4], eax
mov dword [esp], str.Aborting:___s_
call fcn.00409477
mov eax, dword [ebp - 0x280]
mov dword [esp + 4], 0
mov dword [esp], eax
jmp 0x401f84
inc dword [0x44c29c]
cmp dword [ebp - 0x2a0], 0
mov edi, 0x7fffffff
je 0x404171
mov dword [esp], 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push eax
jmp 0x404171
mov dword [esp], esi
call fcn.00401699
push esi
lea ebx, [eax - 1]
mov dword [esp + 4], ebx
mov dword [esp], str.Call:__d
call fcn.00409477
mov dword [esp + 4], 0
mov dword [esp], ebx
call fcn.0040417d
push edi
push edi
mov edi, eax
jmp 0x404171
mov dword [esp], 0
call fcn.00401461
push ebx
mov dword [esp + 4], eax
mov dword [esp], str.DetailPrint:__s
call fcn.00409477
mov eax, dword [ebp - 0x280]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.004079dc
jmp 0x402930
xor eax, eax
call fcn.0040142c
mov dword [esp], str.Sleep__d_
mov dword [esp + 4], eax
mov ebx, eax
call fcn.00409477
test ebx, ebx
mov eax, 1
cmovle ebx, eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x401bcd
mov dword [esp], str.BringToFront
call fcn.00409477
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x401bcd
mov edx, esi
mov esi, dword [ebp - 0x278]
test esi, esi
jne 0x4018d4
mov eax, dword [edx*4 + 0x418060]
mov dword [edx*4 + 0x418020], eax
mov eax, 1
call fcn.0040142c
mov edx, dword [ebp - 0x280]
mov dword [esp], str.SetFlag:__d_d
mov dword [esp + 8], eax
mov dword [edx*4 + 0x418060], eax
mov dword [esp + 4], edx
jmp 0x401ea1
mov eax, dword [edx*4 + 0x418020]
mov dword [edx*4 + 0x418060], eax
jmp case.0x401751.67
mov edx, dword [ebp - 0x278]
xor ecx, ecx
mov eax, dword [edx*4 + 0x418060]
test eax, eax
sete cl
and eax, dword [ebp - 0x274]
mov dword [edx*4 + 0x418060], eax
mov edi, dword [ebp + ecx*4 - 0x280]
jmp 0x404171
mov eax, dword [eax*4 + 0x418060]
jmp 0x402b34
mov edx, dword [0x44c288]
test edx, edx
je 0x401939
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [sym.imp.USER32.dll_ShowWindow]
push ecx
push ecx
mov eax, dword [0x44c290]
test eax, eax
je case.0x401751.67
mov edx, dword [ebp - 0x280]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x402930
mov dword [esp], 0xfffffff0
call fcn.00401461
push edi
mov ebx, eax
mov eax, dword [ebp - 0x27c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp], str.SetFileAttributes:___s_:_08X
call fcn.00409477
mov eax, dword [ebp - 0x27c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push edx
push edx
test eax, eax
jne case.0x401751.67
mov dword [esp], str.SetFileAttributes_failed.
jmp 0x402de5
mov dword [esp], 0xfffffff0
call fcn.00401461
push ebx
mov ebx, eax
mov eax, dword [ebp - 0x27c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp], str.CreateDirectory:___s____d_
call fcn.00409477
mov dword [esp], ebx
call fcn.00408398
push esi
xor esi, esi
test eax, eax
je 0x401a9f
mov dword [esp + 4], 0x5c
mov dword [esp], eax
call fcn.004082f9
mov edi, eax
push ecx
push ecx
mov ax, word [eax]
mov word [edi], 0
mov word [ebp - 0x29c], ax
test ax, ax
jne 0x401a30
cmp dword [ebp - 0x278], 0
je 0x401a30
call fcn.00409978
test eax, eax
je 0x401a30
mov dword [esp], ebx
call fcn.004080f8
jmp 0x401a38
mov dword [esp], ebx
call fcn.0040818c
push edx
test eax, eax
je 0x401a7b
cmp eax, 0xb7
je 0x401a5a
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], str.CreateDirectory:_cant_create___s___err_d_
call fcn.00409477
jmp 0x401a78
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push ecx
test al, 0x10
jne 0x401a8b
mov dword [esp + 4], ebx
mov dword [esp], str.CreateDirectory:_cant_create___s____a_file_already_exists
call fcn.00409477
inc esi
jmp 0x401a8b
mov dword [esp + 4], ebx
mov dword [esp], str.CreateDirectory:___s__created
call fcn.00409477
mov ecx, dword [ebp - 0x29c]
lea eax, [edi + 2]
mov word [edi], cx
test cx, cx
jmp 0x4019e6
cmp dword [ebp - 0x27c], 0
je 0x401aff
mov dword [esp], 0xffffffe6
call fcn.004016bd
mov eax, dword [0x40d9d4]
push edi
add eax, 0x58000
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00408a65
push eax
push eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push edx
test eax, eax
jne 0x404169
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 4], ebx
inc esi
mov dword [esp + 8], eax
mov dword [esp], str.SetCurrentDirectory__s__failed___d_
call fcn.00409477
jmp 0x404169
mov dword [esp], 0xfffffff5
jmp 0x403e99
mov dword [esp], 0
call fcn.00401461
push ebx
mov ebx, eax
mov dword [esp], eax
call fcn.004094c8
push esi
test eax, eax
je 0x401b46
mov eax, dword [ebp - 0x27c]
mov dword [esp + 4], ebx
mov dword [esp], str.IfFileExists:_file___s__exists__jumping__d
mov dword [esp + 8], eax
call fcn.00409477
jmp 0x402667
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], ebx
mov dword [esp], str.IfFileExists:_file___s__does_not_exist__jumping__d
mov dword [esp + 8], eax
call fcn.00409477
jmp 0x402672
mov dword [esp], 0xffffffd0
call fcn.00401461
push ebx
mov edi, eax
mov dword [esp], 0xffffffdf
call fcn.00401461
push esi
mov dword [ebp - 0x29c], eax
mov dword [esp], 0x13
call fcn.00401461
push edx
mov ebx, eax
mov dword [esp + 4], eax
mov dword [esp], str.Rename:__s
call fcn.00409477
mov eax, dword [ebp - 0x29c]
mov dword [esp], edi
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov esi, eax
push ecx
push ecx
test eax, eax
je 0x401bd3
mov dword [esp], 0xffffffe3
call fcn.004016bd
push ecx
jmp case.0x401751.67
cmp dword [ebp - 0x278], 0
je 0x401c1a
mov dword [esp], edi
call fcn.004094c8
push edx
test eax, eax
je 0x401c1a
mov eax, dword [ebp - 0x29c]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00409183
push edi
push edi
mov dword [esp], 0xffffffe4
call fcn.004016bd
push eax
mov dword [esp + 4], ebx
mov dword [esp], str.Rename_on_reboot:__s
jmp 0x403f0f
mov dword [esp + 4], ebx
mov dword [esp], str.Rename_failed:__s
jmp 0x402dc7
mov dword [esp], 0
call fcn.00401461
push ecx
mov ebx, eax
lea eax, [ebp - 0x268]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 4], 0x2000
mov dword [esp + 8], eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
test eax, eax
je 0x401c9d
mov eax, dword [ebp - 0x268]
xor esi, esi
cmp eax, ebx
jbe 0x401cad
cmp word [eax], 0
je 0x401cad
mov dword [esp], ebx
call fcn.004094c8
push edx
test eax, eax
je 0x401c9d
add eax, 0x2c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x268]
mov dword [esp], eax
call fcn.00408a65
push edi
push edi
jmp 0x401cad
mov eax, dword [ebp - 0x29c]
mov esi, 1
mov word [eax], 0
cmp dword [ebp - 0x278], 0
jne 0x404169
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], 0x2000
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
sub esp, 0xc
jmp 0x404169
mov dword [esp], 0xffffffff
xor esi, esi
call fcn.00401461
lea edx, [ebp - 0x268]
push ebx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0x2000
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
sub esp, 0x18
test eax, eax
jmp 0x4032ef
mov dword [esp], 0xffffffef
call fcn.00401461
push edx
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.004085af
push ecx
push ecx
jmp 0x40391d
mov dword [esp], 0x31
call fcn.00401461
push ebx
mov ebx, eax
mov eax, dword [ebp - 0x280]
mov edi, eax
sar eax, 3
and eax, 2
and edi, 7
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], str.File:_overwriteflag_d__allowskipfilesflag_d__name__s_
call fcn.00409477
mov dword [esp], ebx
call fcn.00408365
push esi
test eax, eax
je 0x401d9c
mov dword [esp + 4], ebx
mov dword [esp], 0x418100
call fcn.00408a65
jmp 0x401dcd
mov eax, dword [0x40d9d4]
mov dword [esp], 0x418100
add eax, 0x58000
mov dword [esp + 4], eax
call fcn.00408a65
push edx
push edx
mov dword [esp], eax
call fcn.00408a99
push ecx
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrcatW
push esi
push esi
mov dword [esp], 0x418100
call fcn.00408b2d
push eax
cmp edi, 2
jle 0x401e1d
mov dword [esp], 0x418100
call fcn.004094c8
xor edx, edx
push ecx
test eax, eax
je 0x401e0e
lea edx, [ebp - 0x274]
add eax, 0x14
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
push edx
push edx
mov edx, eax
sub edi, 3
or edi, 0x80000000
test edi, edx
je 0x401e3e
jmp 0x401e21
test edi, edi
jne 0x401e32
mov dword [esp], 0x418100
xor edi, edi
call fcn.004084b4
push eax
jmp 0x401e37
cmp edi, 1
je 0x401e3e
mov eax, 2
jmp 0x401e48
mov edi, 1
mov eax, 1
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40000000
mov dword [esp], 0x418100
call fcn.00408557
sub esp, 0xc
mov esi, eax
cmp eax, 0xffffffff
jne 0x401f95
test edi, edi
je 0x401eab
mov dword [esp + 4], ebx
mov dword [esp], 0xffffffe2
call fcn.004079dc
push eax
push eax
xor eax, eax
cmp edi, 2
sete al
mov esi, eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0x418100
mov dword [esp], str.File:_skipped:___s___overwriteflag_d_
call fcn.00409477
jmp 0x404169
mov dword [esp + 4], 0x418100
mov dword [esp], str.File:_error_creating___s_
call fcn.00409477
mov eax, dword [0x40d9d4]
mov dword [esp], 0x420100
mov dword [esp + 4], eax
call fcn.00408a65
push eax
push eax
mov eax, dword [0x40d9d4]
mov dword [esp + 4], 0x418100
mov dword [esp], eax
call fcn.00408a65
push eax
push eax
mov eax, dword [ebp - 0x26c]
mov dword [esp], 0x41c100
mov dword [esp + 4], eax
call fcn.00408c0a
mov eax, dword [0x40d9d4]
push edx
push edx
mov dword [esp + 4], 0x420100
mov dword [esp], eax
call fcn.00408a65
mov eax, dword [ebp - 0x280]
push ecx
push ecx
sar eax, 3
mov dword [esp + 4], eax
mov dword [esp], 0x41c100
call fcn.0040828d
push esi
push esi
cmp eax, 4
je 0x401f58
cmp eax, 5
jne 0x401f69
mov dword [esp], str.File:_error__user_cancel
call fcn.00409477
inc dword [0x418068]
jmp 0x404171
mov dword [esp], str.File:_error__user_retry
call fcn.00409477
jmp 0x401e21
mov dword [esp], str.File:_error__user_abort
call fcn.00409477
mov dword [esp + 4], 0x418100
mov dword [esp], 0xfffffffa
call fcn.004079dc
mov edi, 0x7fffffff
push eax
push eax
jmp 0x404171
mov dword [esp + 4], ebx
mov dword [esp], 0xffffffea
call fcn.004079dc
inc dword [0x418094]
push eax
push eax
mov eax, dword [ebp - 0x278]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00404406
dec dword [0x418094]
sub esp, 0x10
mov edi, eax
mov dword [esp + 4], eax
mov dword [esp + 8], 0x418100
mov dword [esp], str.File:_wrote__d_to___s_
call fcn.00409477
mov eax, dword [ebp - 0x274]
and eax, dword [ebp - 0x270]
inc eax
je 0x402023
lea eax, [ebp - 0x274]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
sub esp, 0x10
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
test edi, edi
jns case.0x401751.67
cmp edi, 0xfffffffe
jne 0x402062
mov dword [esp + 4], 0xffffffe9
mov dword [esp], 0x418100
call fcn.00408c0a
push esi
push esi
mov dword [esp + 4], ebx
mov dword [esp], 0x418100
call sub.KERNEL32.dll_lstrcatW
jmp 0x402076
mov dword [esp + 4], 0xffffffee
mov dword [esp], 0x418100
call fcn.00408c0a
push ebx
push ebx
mov dword [esp + 4], 0x418100
mov dword [esp], 0x40c5cc
call fcn.00409477
mov dword [esp + 4], 0x200010
mov dword [esp], 0x418100
jmp 0x40319d
mov dword [esp], 0
call fcn.00401461
push ecx
mov ebx, eax
mov dword [esp + 4], eax
mov dword [esp], str.Delete:___s_
jmp 0x402141
mov dword [esp], 0x31
call fcn.00401461
push edi
mov ebx, eax
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x280]
mov dword [esp], str.MessageBox:__d___s_
mov dword [esp + 4], eax
call fcn.00409477
mov eax, dword [ebp - 0x280]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040828d
push edx
push edx
test eax, eax
je 0x402f21
cmp dword [ebp - 0x278], eax
je 0x4022ef
cmp dword [ebp - 0x270], eax
jne case.0x401751.67
mov edi, dword [ebp - 0x26c]
jmp 0x404171
mov dword [esp], 0xfffffff0
call fcn.00401461
push esi
mov ebx, eax
mov dword [esp + 4], eax
mov dword [esp], str.RMDir:___s_
call fcn.00409477
mov eax, dword [ebp - 0x27c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004095b4
jmp 0x402930
mov dword [esp], 1
call fcn.00401461
push ebx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
jmp 0x4028de
mov eax, 2
call fcn.0040142c
mov ebx, eax
mov eax, 3
mov dword [ebp - 0x2a0], edx
call fcn.0040142c
mov dword [esp], 1
mov esi, eax
call fcn.00401461
push edx
mov dword [ebp - 0x29c], eax
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
push ecx
mov ecx, dword [ebp - 0x2a0]
mov word [edi], 0
test ecx, ecx
cmove ebx, eax
test ebx, ebx
je case.0x401751.67
test esi, esi
mov edx, dword [ebp - 0x29c]
jns 0x4021db
add esi, eax
js case.0x401751.67
cmp eax, esi
mov dword [esp], edi
cmovg eax, esi
add eax, eax
add edx, eax
mov dword [esp + 4], edx
call fcn.00408a65
push esi
push esi
test ebx, ebx
jns 0x402203
mov dword [esp], edi
call sub.KERNEL32.dll_lstrlenW
push ecx
add ebx, eax
js 0x402211
cmp ebx, 0x1fff
jg case.0x401751.67
jmp 0x402213
xor ebx, ebx
mov word [edi + ebx*2], 0
jmp case.0x401751.67
mov dword [esp], 0x20
call fcn.00401461
push edi
mov ebx, eax
mov dword [esp], 0x31
call fcn.00401461
cmp dword [ebp - 0x270], 0
push edx
mov dword [esp + 4], eax
mov dword [esp], ebx
jne 0x402252
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
jmp 0x402258
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push esi
push esi
test eax, eax
jne 0x4022ef
jmp 0x402672
mov dword [esp], 1
call fcn.00401461
push ebx
mov ebx, eax
mov dword [esp + 8], 0x2000
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
sub esp, 0xc
test eax, eax
jne 0x40229e
mov word [edi], 0
mov esi, 1
jmp 0x4022c0
cmp dword [ebp - 0x278], 0
jne 0x4022ab
xor esi, esi
jmp 0x4022c0
mov dword [esp + 4], edi
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push ecx
push ecx
test eax, eax
je 0x402292
jmp 0x4022a7
mov word [edi + 0x3ffe], 0
jmp 0x404169
xor eax, eax
mov esi, dword [ebp - 0x26c]
call fcn.0040142c
mov ebx, eax
mov eax, 1
call fcn.0040142c
test esi, esi
jne 0x40230b
cmp ebx, eax
jge 0x4022fa
mov edi, dword [ebp - 0x274]
jmp 0x404171
jle 0x402672
mov edi, dword [ebp - 0x270]
jmp 0x404171
cmp ebx, eax
jb 0x4022ef
jbe 0x402672
jmp 0x402300
mov eax, 1
call fcn.0040142c
mov ebx, eax
mov eax, 2
call fcn.0040142c
mov esi, dword [ebp - 0x274]
mov ecx, eax
mov edx, eax
cmp esi, 0xd
ja case.default.0x402340
jmp dword [esi*4 + 0x40cdb4]
mov ecx, eax
add ecx, ebx
jmp 0x4023c9
mov ecx, ebx
sub ecx, eax
jmp 0x4023c7
mov ecx, eax
imul ecx, ebx
jmp 0x4023c7
mov esi, 1
test eax, eax
je 0x4023c9
mov eax, ebx
mov ecx, edx
cdq
idiv ecx
mov ecx, eax
jmp 0x4023c7
mov ecx, eax
or ecx, ebx
jmp 0x4023c7
mov ecx, eax
and ecx, ebx
jmp 0x4023c7
mov ecx, eax
xor ecx, ebx
jmp 0x4023c7
test ebx, ebx
sete cl
jmp 0x40238c
or ebx, eax
setne cl
movzx ecx, cl
jmp 0x4023c7
test ebx, ebx
setne cl
xor edx, edx
test eax, eax
setne dl
and ecx, edx
jmp 0x4023c7
mov esi, 1
test eax, eax
je 0x4023c9
mov eax, ebx
mov ecx, edx
cdq
idiv ecx
mov ecx, edx
jmp 0x4023c7
mov ecx, eax
shl ebx, cl
jmp case.default.0x402340
mov ecx, eax
sar ebx, cl
jmp case.default.0x402340
mov ecx, eax
shr ebx, cl
mov ecx, ebx
xor esi, esi
mov dword [esp + 4], ecx
jmp 0x40264a
mov dword [esp], 1
call fcn.00401461
push edx
mov ebx, eax
mov eax, 2
call fcn.0040142c
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp], edi
call dword [sym.imp.USER32.dll_wsprintfW]
jmp case.0x401751.67
mov esi, dword [ebp - 0x278]
mov ebx, dword [0x42c100]
test esi, esi
je 0x40247a
mov eax, esi
dec eax
test ebx, ebx
je 0x402422
mov ebx, dword [ebx]
test eax, eax
jne 0x402413
test ebx, ebx
jne 0x402437
mov dword [esp + 4], esi
mov dword [esp], str.Exch:_stack____d_elements
call fcn.00409477
jmp 0x40317c
add ebx, 4
mov dword [esp], 0x418100
mov dword [esp + 4], ebx
call fcn.00408a65
push eax
push eax
mov eax, dword [0x42c100]
add eax, 4
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00408a65
push eax
push eax
mov eax, dword [0x42c100]
add eax, 4
mov dword [esp + 4], 0x418100
mov dword [esp], eax
jmp 0x403cb1
test eax, eax
je 0x4024ab
test ebx, ebx
jne 0x40248e
mov dword [esp], str.Pop:_stack_empty
jmp 0x402de5
lea eax, [ebx + 4]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00408a65
push eax
push eax
mov eax, dword [ebx]
mov dword [0x42c100], eax
jmp 0x402c71
mov dword [esp + 4], 0x4004
mov dword [esp], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push ecx
mov ebx, eax
mov eax, dword [ebp - 0x280]
push ecx
mov dword [esp + 4], eax
lea eax, [ebx + 4]
mov dword [esp], eax
call fcn.00408c0a
mov eax, dword [0x42c100]
push edi
push edi
mov dword [ebx], eax
mov dword [0x42c100], ebx
jmp 0x404169
mov eax, 3
call fcn.0040142c
mov ebx, eax
mov eax, 4
call fcn.0040142c
mov esi, eax
test byte [ebp - 0x26c], 1
je 0x40251d
mov dword [esp], 0x33
call fcn.00401461
push edx
mov ebx, eax
mov ecx, esi
test byte [ebp - 0x26c], 2
je 0x402537
mov dword [esp], 0x44
call fcn.00401461
push esi
mov ecx, eax
cmp dword [ebp - 0x284], 0x21
jne 0x4025db
mov eax, 1
mov dword [ebp - 0x2a0], ecx
call fcn.0040142c
mov dword [ebp - 0x29c], eax
mov eax, 2
call fcn.0040142c
mov esi, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x2a0]
sar esi, 2
je 0x4025b5
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
lea edx, [ebp - 0x268]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 8], ebx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
sub esp, 0x1c
test eax, eax
sete al
movzx eax, al
mov esi, eax
jmp 0x402633
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], ebx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x268], eax
sub esp, 0x10
jmp 0x402633
mov dword [esp], 1
mov dword [ebp - 0x29c], ecx
call fcn.00401461
push edx
mov esi, eax
mov dword [esp], 0x12
call fcn.00401461
push ecx
cmp word [eax], 0
mov ecx, dword [ebp - 0x29c]
jne 0x40260b
xor eax, eax
cmp word [esi], 0
jne 0x402613
xor esi, esi
mov dword [esp + 8], esi
xor esi, esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], ecx
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [ebp - 0x268], eax
sub esp, 0x10
cmp dword [ebp - 0x280], 0
js 0x404169
mov eax, dword [ebp - 0x268]
mov dword [esp + 4], eax
mov dword [esp], edi
jmp 0x40402f
xor eax, eax
call fcn.0040142c
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsWindow]
push esi
test eax, eax
je 0x402672
mov edi, dword [ebp - 0x27c]
jmp 0x404171
mov edi, dword [ebp - 0x278]
jmp 0x404171
mov eax, 2
call fcn.0040142c
mov ebx, eax
mov eax, 1
call fcn.0040142c
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push ebx
jmp 0x402b34
add eax, dword [0x42c168]
mov ebx, eax
xor eax, eax
call fcn.0040142c
mov dword [esp + 8], ebx
mov dword [esp + 4], 0xffffffeb
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x404164
test byte [ebp - 0x273], 1
je 0x4026e5
mov eax, 2
call fcn.0040142c
jmp 0x402700
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push ecx
push ecx
mov ebx, eax
mov eax, dword [ebp - 0x274]
mov ecx, eax
mov edx, eax
and ecx, 3
shr edx, 0x1e
mov dword [ebp - 0x29c], ecx
mov ecx, eax
and edx, 1
and ecx, 4
mov esi, edx
mov dword [ebp - 0x2a4], ecx
mov ecx, eax
shr ecx, 0x1f
bt eax, 0x10
mov dword [ebp - 0x2a8], ecx
jae 0x402748
mov dword [esp], 0x11
call fcn.00401461
push edx
jmp 0x40274f
movzx eax, word [ebp - 0x27c]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x268]
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [ebp - 0x274]
mov edx, dword [ebp - 0x25c]
push eax
imul edx, esi
push eax
and ecx, 0xfef0
mov eax, dword [ebp - 0x2a8]
xor esi, esi
imul eax, dword [ebp - 0x260]
cmp dword [ebp - 0x2a4], 0
je 0x40279d
mov esi, dword [0x440248]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0x14], ecx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 0x10], edx
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [sym.imp.USER32.dll_LoadImageW]
sub esp, 0x18
mov esi, eax
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 4], 0x172
mov dword [esp + 8], eax
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
test eax, eax
je 0x402804
cmp dword [ebp - 0x29c], 0
jne 0x402804
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push eax
cmp dword [ebp - 0x280], 0
js case.0x401751.67
mov dword [esp + 4], esi
jmp 0x402b38
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDC]
push esi
mov ebx, eax
mov dword [esp + 4], 0x5a
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edx
mov esi, eax
mov eax, 2
push edx
call fcn.0040142c
mov dword [esp + 8], 0x48
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
sub esp, 0xc
mov dword [0x4180a0], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, 3
push ecx
push ecx
call fcn.0040142c
mov dword [esp], 0x4180bc
mov dword [0x4180b0], eax
mov eax, dword [ebp - 0x270]
mov byte [0x4180b7], 1
mov edx, eax
and edx, 1
mov byte [0x4180b4], dl
mov edx, eax
and eax, 4
mov byte [0x4180b6], al
mov eax, dword [ebp - 0x27c]
and edx, 2
mov byte [0x4180b5], dl
mov dword [esp + 4], eax
call fcn.00408c0a
push ebx
push ebx
mov dword [esp], 0x4180a0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push ebx
jmp 0x402b34
xor eax, eax
call fcn.0040142c
mov ebx, eax
mov eax, 1
call fcn.0040142c
cmp dword [ebp - 0x278], 0
mov edi, eax
je 0x40290e
mov dword [esp], str.HideWindow
call fcn.00409477
mov esi, dword [ebp - 0x274]
mov dword [esp + 4], edi
mov dword [esp], ebx
test esi, esi
jne 0x40292a
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x404068
call dword [sym.imp.USER32.dll_EnableWindow]
push ecx
push ecx
jmp case.0x401751.67
mov dword [esp], 0
call fcn.00401461
push edx
mov ebx, eax
mov dword [esp], 0x31
call fcn.00401461
push ecx
mov edi, eax
mov dword [esp], 0x22
call fcn.00401461
push esi
mov esi, eax
mov dword [esp], 0x15
call fcn.00401461
push eax
mov dword [esp], 0xffffffec
call fcn.004016bd
push eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x24c], eax
xor eax, eax
cmp word [ebx], 0
mov edx, eax
mov dword [ebp - 0x258], edi
cmovne edx, ebx
mov dword [ebp - 0x25c], edx
cmp word [esi], 0
cmovne eax, esi
mov dword [ebp - 0x254], eax
mov eax, dword [0x40d9d4]
add eax, 0x58000
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x268]
mov dword [esp], eax
call fcn.0040823c
push edx
test eax, eax
jne 0x402a10
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp], str.ExecShell:_warning:_error____s_:_file:__s__params:__s___d
call fcn.00409477
jmp 0x402f21
test byte [ebp - 0x264], 0x40
je 0x402a38
mov eax, dword [ebp - 0x230]
mov dword [esp], eax
call fcn.00409a31
push eax
mov eax, dword [ebp - 0x230]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp], str.ExecShell:_success____s_:_file:__s__params:__s__
call fcn.00409477
jmp case.0x401751.67
mov dword [esp], 0
call fcn.00401461
push edx
mov esi, eax
mov dword [esp + 4], eax
mov dword [esp], str.Exec:_command__s_
call fcn.00409477
mov dword [esp + 4], esi
mov dword [esp], 0xffffffeb
call fcn.004079dc
push ecx
push ecx
mov dword [esp], esi
call fcn.004081ba
push ebx
mov ebx, eax
mov dword [esp + 4], esi
test eax, eax
je 0x402af2
mov dword [esp], str.Exec:_success____s__
call fcn.00409477
mov esi, dword [ebp - 0x278]
test esi, esi
je 0x402ae3
mov dword [esp], ebx
call fcn.00409a31
cmp dword [ebp - 0x27c], 0
push edi
js 0x402ad9
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408981
push esi
push esi
xor esi, esi
jmp 0x402ae3
test eax, eax
setne al
movzx eax, al
mov esi, eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
jmp 0x404169
mov dword [esp], str.Exec:_failed_createprocess____s__
jmp 0x402dc7
mov dword [esp], 2
call fcn.00401461
push edx
mov dword [esp], eax
call fcn.004094c8
mov ebx, eax
push ecx
test eax, eax
je 0x402b40
mov eax, dword [eax + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408981
push esi
push esi
mov eax, dword [ebx + 0x18]
mov dword [esp + 4], eax
mov dword [esp], edi
jmp 0x403bfd
mov word [edi], 0
jmp 0x4040fe
mov dword [esp], 0xffffffee
call fcn.00401461
push esi
mov dword [ebp - 0x2a0], eax
mov dword [esp], 0xa
call fcn.0040992c
mov ecx, dword [ebp - 0x2a0]
push edx
lea edx, [ebp - 0x28c]
mov dword [esp], ecx
mov dword [esp + 4], edx
call eax
mov esi, eax
mov eax, dword [ebp - 0x29c]
push ecx
push ecx
mov word [edi], 0
mov word [eax], 0
test esi, esi
je 0x402f21
mov dword [esp + 4], esi
mov dword [esp], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push ebx
push ebx
mov ebx, eax
test eax, eax
je 0x402f21
mov dword [esp], 0xb
call fcn.0040992c
push edx
mov dword [ebp - 0x2a4], eax
mov dword [esp], 0xc
call fcn.0040992c
push ecx
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 0xc], ebx
mov dword [esp], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 8], esi
mov dword [esp + 4], 0
call eax
mov ecx, dword [ebp - 0x2a8]
sub esp, 0x10
test eax, eax
jne 0x402c13
mov esi, 1
jmp 0x402c71
lea eax, [ebp - 0x268]
mov dword [esp + 4], 0x40c804
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 8], eax
mov dword [esp], ebx
call ecx
sub esp, 0x10
test eax, eax
je 0x402c0c
mov eax, dword [ebp - 0x288]
xor esi, esi
mov eax, dword [eax + 8]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00408981
push eax
push eax
mov eax, dword [ebp - 0x288]
mov eax, dword [eax + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408981
push eax
push eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x402aec
cmp dword [section..bss], 0
js 0x402dd1
mov dword [esp], 0xfffffff0
call fcn.00401461
push ebx
mov esi, eax
mov dword [esp], 1
call fcn.00401461
cmp dword [ebp - 0x270], 0
push edi
mov edi, eax
jne 0x402cda
mov dword [esp + 8], 8
mov dword [esp + 4], 0
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
sub esp, 0xc
mov ebx, eax
test eax, eax
jne 0x402cea
jmp 0x402daf
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ebx, eax
push ecx
test eax, eax
je 0x402cb3
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.004099e9
push edx
push edx
test eax, eax
je 0x402d58
mov esi, dword [ebp - 0x278]
test esi, esi
je 0x402d29
mov dword [esp], esi
mov dword [ebp - 0x29c], eax
call fcn.004016bd
push eax
mov eax, dword [ebp - 0x29c]
call eax
test eax, eax
setne al
movzx eax, al
mov esi, eax
jmp 0x402d83
mov ecx, dword [0x40d9d4]
mov dword [esp + 0x10], 0x40b000
mov dword [esp + 0xc], 0x42c100
mov dword [esp + 8], ecx
mov ecx, dword [ebp - 0x2a0]
mov dword [esp + 4], 0x2000
mov dword [esp], ecx
call eax
jmp 0x402d83
mov dword [esp + 4], edi
mov dword [esp], 0xfffffff7
call fcn.004079dc
push eax
push eax
mov dword [esp + 8], esi
mov esi, 1
mov dword [esp + 4], edi
mov dword [esp], 0x40c808
call fcn.00409477
cmp dword [ebp - 0x274], 0
jne 0x404169
mov dword [esp], ebx
call fcn.004051af
push edi
test eax, eax
je 0x404169
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x402aec
mov dword [esp], 0xfffffff6
call fcn.004016bd
push ebx
mov dword [esp + 4], esi
mov dword [esp], str.Error_registering_DLL:_Could_not_load__s
call fcn.00409477
jmp 0x402f21
mov dword [esp], 0xffffffe7
call fcn.004016bd
push ecx
mov dword [esp], str.Error_registering_DLL:_Could_not_initialize_OLE
call fcn.00409477
jmp 0x402f21
mov dword [esp], 0xfffffff0
call fcn.00401461
push esi
mov dword [ebp - 0x2a4], eax
mov dword [esp], 0xffffffdf
call fcn.00401461
push edi
mov esi, eax
mov dword [esp], 2
call fcn.00401461
push edx
mov dword [ebp - 0x2a8], eax
mov dword [esp], 0xffffffcd
call fcn.00401461
push ecx
mov edi, eax
mov dword [esp], 0x45
call fcn.00401461
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x270]
push ebx
mov dword [ebp - 0x29c], eax
and eax, 0xfff
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], esi
sar eax, 0xc
and eax, 7
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x29c]
shr eax, 0x10
mov dword [ebp - 0x2b0], eax
call fcn.00408365
push edx
test eax, eax
jne 0x402e98
mov dword [esp], 0x21
call fcn.00401461
push ebx
mov eax, dword [ebp - 0x2b0]
mov dword [esp + 0x10], edi
mov dword [esp + 8], esi
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], str.CreateShortcut:_out:___s___in:___s__s___icon:__s__d__sw_d__hk_d
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x2ac]
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x2a8]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 4], eax
call fcn.00409477
lea eax, [ebp - 0x288]
mov dword [esp + 0xc], 0x4138c4
mov dword [esp + 0x10], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x40eee4
call dword [sym.imp.ole32.dll_CoCreateInstance]
sub esp, 0x14
test eax, eax
jns 0x402f2b
mov dword [esp], 0xfffffff0
call fcn.004016bd
push ecx
mov esi, 1
jmp 0x404169
mov eax, dword [ebp - 0x288]
lea ecx, [ebp - 0x268]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 4], 0x412ec4
mov dword [esp], eax
call dword [edx]
sub esp, 0xc
mov ebx, eax
test eax, eax
js 0x403063
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [edx + 0x50]
bt dword [ebp - 0x29c], 0xf
mov ebx, eax
push edx
push edx
jb 0x402f95
mov edx, dword [ebp - 0x288]
mov eax, dword [0x40d9d4]
mov ecx, dword [edx]
add eax, 0x58000
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [ecx + 0x24]
push eax
push eax
cmp dword [ebp - 0x2a0], 0
je 0x402fb8
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x3c]
push eax
push eax
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2b0]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x34]
push eax
push eax
cmp word [edi], 0
je 0x402ff7
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [edx + 0x44]
sub esp, 0xc
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x2c]
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2b4]
push edi
push edi
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x1c]
push eax
push eax
test ebx, ebx
js 0x403054
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [eax]
mov dword [esp + 8], 1
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x18]
sub esp, 0xc
mov ebx, eax
mov eax, dword [ebp - 0x268]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push esi
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push ecx
test ebx, ebx
js 0x402f14
mov dword [esp], 0xfffffff4
jmp 0x401bc8
mov dword [esp], 0
call fcn.00401461
push edi
mov ebx, eax
mov dword [esp], 0x11
call fcn.00401461
push edx
mov esi, eax
mov dword [esp], 0x23
call fcn.00401461
push ecx
mov edi, eax
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], str.CopyFiles___s_____s_
call fcn.00409477
mov dword [esp], ebx
call fcn.004094c8
push edx
test eax, eax
je 0x403159
mov dword [esp], ebx
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x268], eax
call sub.KERNEL32.dll_lstrlenW
push edx
mov word [ebx + eax*2 + 2], 0
mov dword [esp], esi
call sub.KERNEL32.dll_lstrlenW
push ecx
mov word [esi + eax*2 + 2], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x25c], esi
mov dword [esp + 4], edi
mov dword [esp], 0
mov dword [ebp - 0x260], ebx
mov word [ebp - 0x258], ax
mov dword [ebp - 0x24e], edi
call fcn.004079dc
lea eax, [ebp - 0x268]
push ebx
push ebx
mov dword [esp], eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
push esi
mov esi, eax
test eax, eax
je 0x404169
mov dword [esp + 4], 0
mov dword [esp], 0xfffffff9
call fcn.004079dc
push eax
push eax
jmp 0x402f21
cmp esi, 0xbadf00d
je 0x4031a7
mov dword [esp + 4], 0xffffffe8
mov dword [esp], 0
call fcn.00408c0a
push edi
push edi
mov dword [esp + 4], 0x200010
mov dword [esp], eax
call fcn.0040828d
jmp 0x401f89
inc dword [0x418074]
jmp case.0x401751.67
mov dword [esp + 4], str._RM_
mov dword [esp], 0x41c100
call fcn.00408a65
push ebx
push ebx
xor ebx, ebx
mov dword [esp + 4], 0x41c100
mov dword [esp], 0x420100
call fcn.00408a65
cmp dword [ebp - 0x280], 0
push esi
push esi
je 0x4031f8
mov dword [esp], 0
call fcn.00401461
push ecx
mov ebx, eax
xor esi, esi
cmp dword [ebp - 0x27c], 0
je 0x403212
mov dword [esp], 0x11
call fcn.00401461
push edx
mov esi, eax
xor edi, edi
cmp dword [ebp - 0x270], 0
je 0x40322c
mov dword [esp], 0x22
call fcn.00401461
push edi
mov edi, eax
mov dword [esp], 0xffffffcd
call fcn.00401461
push ecx
mov dword [ebp - 0x29c], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x420100
mov dword [esp + 8], 0x41c100
mov dword [esp + 4], 0x418100
mov dword [esp], str.WriteINIStr:_wrote___s___s_s_in__s
call fcn.00409477
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp + 0xc], eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
sub esp, 0x10
jmp 0x40391d
mov dword [esp], 1
mov dword [ebp - 0x268], 0xa
call fcn.00401461
push edx
mov esi, eax
mov dword [esp], 0x12
call fcn.00401461
push ecx
mov ebx, eax
mov dword [esp], 0xffffffdd
call fcn.00401461
push edx
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x268]
mov dword [esp], esi
xor esi, esi
mov dword [esp + 0x10], 0x1fff
mov dword [esp + 0xc], edi
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
sub esp, 0x18
cmp word [edi], 0xa
jne 0x404169
jmp 0x403c86
mov dword [esp], eax
mov edi, eax
call fcn.004092bc
cmp dword [ebp - 0x270], 0
mov esi, eax
jne 0x40337b
mov dword [esp], 2
call fcn.004014b3
push edi
mov edi, eax
test eax, eax
je 0x402f21
mov dword [esp], 0x33
call fcn.00401461
push ecx
mov dword [ebp - 0x29c], eax
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov edx, dword [ebp - 0x29c]
push ebx
push ebx
mov ebx, eax
mov dword [esp + 4], esi
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x420100
mov dword [esp], str.DeleteRegValue:___s_s____s_
call fcn.00409477
mov dword [esp], edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push esi
jmp 0x40340a
mov dword [esp], 0x22
call fcn.00401461
push edx
mov ebx, eax
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], str.DeleteRegKey:___s_s_
call fcn.00409477
mov edx, dword [ebp - 0x270]
sar edx, 1
mov dword [ebp - 0x268], edx
cmp word [ebx], 0
je 0x402f21
or edx, 0x100020
mov dword [ebp - 0x268], edx
test edi, edi
js 0x4033d3
mov eax, dword [0x418064]
add eax, edi
lea edi, [eax - 0x7fffffff]
lea eax, [ebp - 0x268]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00408791
push esi
push esi
test eax, eax
je 0x402f21
mov edx, dword [ebp - 0x268]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], edx
call fcn.00401517
sub esp, 0xc
mov ebx, eax
test ebx, ebx
setne al
jmp 0x403922
mov eax, dword [ebp - 0x270]
mov dword [esp], 2
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x2a0], eax
call fcn.00401461
push ecx
mov edi, eax
mov dword [esp], 0x11
call fcn.00401461
push ebx
mov ebx, eax
mov dword [esp], esi
call fcn.004092bc
mov dword [ebp - 0x29c], eax
test esi, esi
js 0x40346a
mov ecx, dword [0x418064]
add ecx, esi
lea esi, [ecx - 0x7fffffff]
lea eax, [ebp - 0x268]
mov dword [esp + 8], 0x100022
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.00408863
sub esp, 0x10
test eax, eax
jne 0x403672
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x2a8], eax
test eax, eax
je 0x403672
cmp dword [ebp - 0x2a4], 1
jne 0x40350c
mov dword [esp], 0x23
call fcn.00401461
push esi
mov dword [esp], 0x420100
call sub.KERNEL32.dll_lstrlenW
push edx
lea esi, [eax + 1]
mov eax, dword [ebp - 0x29c]
add esi, esi
cmp dword [ebp - 0x2a0], 1
mov dword [esp + 0x10], 0x420100
mov dword [esp + 0xc], edi
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
jne 0x4034fb
mov dword [esp], str.WriteRegStr:___s_s____s___s_
jmp 0x403502
mov dword [esp], str.WriteRegExpandStr:___s_s____s___s_
call fcn.00409477
jmp 0x403607
cmp dword [ebp - 0x2a4], 4
je 0x403525
xor esi, esi
cmp dword [ebp - 0x2a4], 3
je 0x403560
jmp 0x403607
mov eax, 3
mov esi, 4
call fcn.0040142c
mov dword [esp + 0xc], edi
mov dword [0x420100], eax
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], str.WriteRegDWORD:___s_s____s__0x_08x_
call fcn.00409477
jmp 0x403607
cmp dword [ebp - 0x2a0], 0
mov edx, str.WriteRegNone
je 0x403582
cmp dword [ebp - 0x2a0], 7
mov edx, str.WriteRegMultiStr
mov eax, str.WriteRegBin
cmovne edx, eax
mov eax, dword [ebp - 0x274]
mov dword [esp + 0xc], 0xc000
mov dword [esp + 8], 0x420100
mov dword [esp + 4], 0
mov dword [esp], eax
mov dword [ebp - 0x2a4], edx
call fcn.00404406
sub esp, 0x10
mov esi, eax
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 8], 0x420100
mov dword [esp + 4], pe_nt_image_headers32
call fcn.004093f2
lea eax, [ebp - 0x268]
mov edx, dword [ebp - 0x2a4]
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], str._s:___s_s____s___s_
call fcn.00409477
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x420100
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a8]
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
sub esp, 0x18
mov esi, eax
test eax, eax
je 0x403664
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], edi
mov esi, 1
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], str.WriteReg:_error_writing_into___s_s____s_
call fcn.00409477
mov eax, dword [ebp - 0x2a8]
mov dword [esp], eax
jmp 0x4037a3
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], ebx
mov dword [esp], str.WriteReg:_error_creating_key___s_s_
mov dword [esp + 4], eax
call fcn.00409477
jmp 0x402f21
mov dword [esp], 0x20019
call fcn.004014b3
push edx
mov ebx, eax
mov dword [esp], 0x33
call fcn.00401461
push ecx
mov word [edi], 0
test ebx, ebx
je 0x402f21
lea edx, [ebp - 0x288]
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x268]
mov dword [ebp - 0x288], 0x4000
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x40370b
mov eax, dword [ebp - 0x268]
lea edx, [eax - 1]
cmp edx, 1
jbe 0x40371a
cmp eax, 4
je 0x40371a
mov word [edi], 0
mov esi, 1
jmp 0x4037a0
mov esi, dword [ebp - 0x270]
cmp eax, 4
jne 0x403797
xor eax, eax
test esi, esi
sete al
mov esi, eax
mov eax, dword [edi]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00408981
push edi
push edi
jmp 0x4037a0
mov dword [esp], 0x20019
call fcn.004014b3
push esi
mov ebx, eax
mov eax, 3
call fcn.0040142c
mov word [edi], 0
test ebx, ebx
je 0x402f21
cmp dword [ebp - 0x270], 0
mov dword [ebp - 0x268], 0x1fff
je 0x4037ae
mov dword [esp + 0xc], 0x1fff
xor esi, esi
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
sub esp, 0x10
mov word [edi + 0x3ffe], 0
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x402aec
lea edx, [ebp - 0x268]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
sub esp, 0x20
test eax, eax
setne al
movzx eax, al
mov esi, eax
jmp 0x403797
mov dword [esp], edi
call fcn.004089a6
push ebx
test eax, eax
je case.0x401751.67
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x401bcd
mov dword [esp], 0xffffffed
call fcn.00401461
mov edx, dword [ebp - 0x278]
push ecx
mov dword [esp + 8], edx
mov edx, dword [ebp - 0x27c]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00408557
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x402b34
jmp 0x403c86
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x29c], eax
test eax, eax
je 0x403880
mov eax, 1
xor ebx, ebx
call fcn.0040142c
cmp dword [ebp - 0x2a4], 0x38
setne bl
mov word [0x41c100], ax
inc ebx
jmp 0x4038dd
cmp dword [ebp - 0x2a4], 0x38
jne 0x4038c4
mov dword [esp], 0x21
call fcn.00401461
push esi
mov dword [esp + 8], 0x2000
mov dword [esp + 4], 0x41c100
mov dword [esp], 0x420100
call fcn.00408ae0
mov dword [esp], 0x41c100
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebx, eax
push edx
jmp 0x4038dd
mov dword [esp], 0x11
call fcn.00401461
push ecx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
push ebx
lea ebx, [eax + eax]
cmp word [edi], 0
je 0x402f21
mov dword [esp], edi
call fcn.004089a6
mov esi, eax
xor eax, eax
cmp dword [ebp - 0x2a4], 0x38
push edx
sete al
or eax, dword [ebp - 0x29c]
je 0x40392c
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x41c100
mov dword [esp], esi
call fcn.00408663
sub esp, 0xc
test eax, eax
sete al
movzx eax, al
mov esi, eax
jmp 0x404169
cmp dword [ebp - 0x274], 0
je 0x403906
mov dword [esp + 4], esi
mov dword [esp], esi
call fcn.004086a9
push edi
push edi
test eax, eax
jns 0x403906
jmp 0x402f21
mov eax, 2
call fcn.0040142c
test eax, eax
jle case.0x401751.67
mov dword [ebp - 0x2a0], 0
cmp word [edi], 0
je 0x403b89
mov edx, 0x1fff
mov dword [esp], edi
mov edi, 2
cmp eax, edx
cmovle edx, eax
xor ebx, ebx
mov dword [ebp - 0x2a0], edx
call fcn.004089a6
mov word [ebp - 0x2a4], 0
push ecx
mov esi, eax
cmp dword [ebp - 0x284], 0x39
mov edx, dword [ebp - 0x274]
jne 0x403a90
lea eax, [ebp - 0x268]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov eax, 2
sub eax, edx
mov dword [esp], esi
mov dword [esp + 8], eax
lea eax, [ebp - 0x288]
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x403b83
mov eax, dword [ebp - 0x268]
test eax, eax
je 0x403b83
mov edi, eax
movzx eax, byte [ebp - 0x288]
cmp dword [ebp - 0x274], 0
mov word [ebp - 0x28c], ax
jne 0x403ad7
lea eax, [ebp - 0x28c]
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x268]
mov dword [esp + 4], 8
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 8], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
sub esp, 0x18
test eax, eax
jne 0x403ad7
dec dword [ebp - 0x268]
mov word [ebp - 0x28c], 0xfffd
je 0x403ad7
dec edi
mov dword [esp + 0xc], 1
mov eax, edi
mov dword [esp + 8], 0
neg eax
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
jmp 0x403a16
or edx, ebx
je 0x403aba
lea eax, [ebp - 0x28c]
mov dword [esp + 8], 2
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.0040861d
sub esp, 0xc
test eax, eax
jne 0x403ad7
jmp 0x403b83
mov dword [esp + 4], 0
mov dword [esp], esi
call fcn.004086a9
push edx
push edx
test eax, eax
jns 0x403a94
xor ebx, ebx
jmp 0x403b83
cmp dword [ebp - 0x274], 0
movzx eax, word [ebp - 0x28c]
je 0x403b00
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408981
push eax
push eax
jmp 0x40416f
lea edx, [ebx + ebx]
add edx, dword [ebp - 0x29c]
cmp word [ebp - 0x2a4], 0xd
je 0x403b1d
cmp word [ebp - 0x2a4], 0xa
jne 0x403b5e
cmp word [ebp - 0x2a4], ax
je 0x403b32
cmp ax, 0xd
je 0x403b58
cmp ax, 0xa
je 0x403b58
mov eax, edi
mov dword [esp + 0xc], 1
neg eax
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
jmp 0x403b83
mov word [edx], ax
inc ebx
jmp 0x403b83
mov ecx, dword [ebp - 0x29c]
inc ebx
mov word [ecx + ebx*2 - 2], ax
test ax, ax
je 0x403b83
cmp dword [ebp - 0x2a0], ebx
je 0x403b89
mov word [ebp - 0x2a4], ax
jmp 0x40399d
mov dword [ebp - 0x2a0], ebx
mov ecx, dword [ebp - 0x2a0]
mov eax, dword [ebp - 0x29c]
test ecx, ecx
mov word [eax + ecx*2], 0
jmp 0x40391f
cmp word [edi], 0
je case.0x401751.67
mov eax, 2
mov esi, dword [ebp - 0x274]
call fcn.0040142c
mov dword [esp], edi
mov ebx, eax
call fcn.004089a6
push edi
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
cmp dword [ebp - 0x27c], 0
js case.0x401751.67
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408981
jmp 0x402930
mov dword [esp], edi
call fcn.004089a6
push esi
test eax, eax
je case.0x401751.67
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x401bcd
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.004089a6
push ebx
test eax, eax
je 0x403c86
lea edx, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push ecx
push ecx
test eax, eax
je 0x403c86
jmp 0x403ca4
mov dword [esp], 2
call fcn.00401461
lea edx, [ebp - 0x268]
push esi
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push edx
push edx
cmp eax, 0xffffffff
jne 0x403c90
mov eax, dword [ebp - 0x29c]
mov word [eax], 0
mov word [edi], 0
jmp 0x402f21
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408981
push ebx
push ebx
lea eax, [ebp - 0x23c]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00408a65
jmp 0x402930
mov dword [esp], 0xfffffff0
call fcn.00401461
push edx
mov edi, eax
mov dword [esp], eax
call fcn.00408365
push ecx
test eax, eax
jne 0x403ce4
mov dword [esp], 0xffffffed
call fcn.00401461
push eax
mov dword [esp], edi
call fcn.004084b4
push esi
mov esi, 0xfffffd66
mov dword [esp + 8], 2
mov dword [esp + 4], 0x40000000
mov dword [esp], edi
call fcn.00408557
mov dword [ebp - 0x29c], eax
sub esp, 0xc
inc eax
je 0x403e61
mov eax, dword [0x42c128]
mov dword [esp], 0x40
mov dword [ebp - 0x2a0], eax
mov dword [esp + 4], eax
mov eax, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x2a4], eax
call eax
push ebx
push ebx
mov ebx, eax
test eax, eax
je 0x403e51
mov dword [esp], 0
call fcn.004043d4
push eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004043ac
mov eax, dword [ebp - 0x278]
push edx
push edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp], 0x40
call eax
mov esi, eax
push ecx
push ecx
test eax, eax
je 0x403dfd
mov eax, dword [ebp - 0x278]
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.00404406
mov eax, esi
sub esp, 0x10
cmp byte [eax], 0
je 0x403df3
mov edx, dword [eax]
lea ecx, [eax + 8]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [ebp - 0x2a4], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2a8], edx
add ecx, ebx
mov dword [esp], ecx
call fcn.00408497
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [ebp - 0x2a8]
sub esp, 0xc
lea eax, [ecx + edx]
jmp 0x403db4
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408663
sub esp, 0xc
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0xffffffff
call fcn.00404406
sub esp, 0x10
mov esi, eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp], str.created_uninstaller:__d____s_
call fcn.00409477
test esi, esi
jns 0x403e8f
mov dword [esp], edi
mov esi, 1
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push eax
mov eax, 0xffffffef
jmp 0x403e96
mov eax, 0xfffffff3
xor esi, esi
mov dword [esp], eax
call fcn.004016bd
jmp 0x402aec
test esi, esi
je 0x403ef7
mov dword [esp + 4], eax
mov dword [esp], str.settings_logging_to__d
call fcn.00409477
mov eax, dword [ebp - 0x27c]
mov dword [esp], str.logging_set_to__d
mov dword [esp + 4], eax
mov dword [0x46d360], eax
call fcn.00409477
mov esi, dword [ebp - 0x27c]
test esi, esi
je 0x403ee6
call fcn.004064ce
jmp case.0x401751.67
mov dword [esp], 1
call fcn.004091c8
jmp 0x402aec
mov dword [esp], 1
call fcn.00401461
push edi
mov dword [esp + 4], eax
mov dword [esp], 0x40c5cc
call fcn.00409477
jmp 0x404169
xor eax, eax
call fcn.0040142c
mov edi, eax
cmp eax, dword [0x42c14c]
jae 0x402f21
imul esi, eax, 0x4018
mov ebx, dword [0x42c148]
add ebx, esi
mov esi, dword [ebp - 0x278]
test esi, esi
js 0x403f69
mov eax, dword [ebx + esi*4]
jne 0x403bf0
lea eax, [ebx + 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408a65
jmp 0x404068
mov ecx, esi
not ecx
mov dword [ebp - 0x278], ecx
test ecx, ecx
je 0x403f89
mov eax, 1
call fcn.0040142c
mov dword [ebp - 0x27c], eax
jmp 0x403fa7
mov eax, dword [ebp - 0x270]
mov dword [esp + 4], eax
lea eax, [ebx + 0x18]
mov dword [esp], eax
call fcn.00408c0a
push esi
push esi
or dword [ebx + 8], 0x100
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x278]
mov dword [ebx + eax*4], edx
cmp dword [ebp - 0x274], 0
je case.0x401751.67
mov dword [esp], edi
call fcn.00401240
jmp 0x401bcd
xor eax, eax
call fcn.0040142c
cmp eax, 0x1f
ja 0x402f21
cmp dword [ebp - 0x274], 0
mov esi, dword [ebp - 0x278]
je 0x404036
test esi, esi
je 0x404015
mov dword [esp], eax
call fcn.00401354
push ecx
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0040129f
jmp 0x402930
mov dword [esp], 0
call fcn.004013ad
push edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408981
jmp 0x404068
test esi, esi
mov edx, dword [0x42c130]
lea eax, [eax + 0x24]
je 0x404052
mov ecx, dword [ebp - 0x27c]
mov dword [edx + eax*4 + 4], ecx
jmp case.0x401751.67
mov eax, dword [edx + eax*4 + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408c0a
push edi
push edi
jmp 0x404169
mov dword [esp], 5
call fcn.0040992c
push ecx
mov ebx, eax
mov dword [esp], 0x22
call fcn.00401461
push esi
test ebx, ebx
je 0x4040fe
lea esi, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 4], esi
call dword [sym.imp.ole32.dll_IIDFromString]
push edx
push edx
test eax, eax
js 0x4040fe
lea eax, [ebp - 0x288]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x274]
mov dword [esp], esi
mov dword [esp + 4], eax
call ebx
sub esp, 0x10
test eax, eax
js 0x4040fe
mov eax, dword [ebp - 0x288]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408a65
push eax
push eax
mov eax, dword [ebp - 0x288]
mov dword [esp], eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x401bcd
mov eax, dword [ebp - 0x29c]
mov word [eax], 0
jmp 0x402f21
mov ecx, dword [0x44c2a0]
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0xb
and ecx, esi
mov dword [esp], eax
mov dword [esp + 8], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
cmp dword [ebp - 0x280], 0
je case.0x401751.67
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_InvalidateRect]
sub esp, 0xc
xor esi, esi
add dword [0x418068], esi
xor edi, edi
lea esp, [ebp - 0xc]
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret 4