Function at 0x4262b2
Capabilities:
Get common file path
Link many functions at runtime

Disassembly:
push ebp
lea ebp, [esp - 0x5d0]
sub esp, 0x650
mov eax, dword [0x47e5d0]
xor eax, ebp
mov dword [ebp + 0x5cc], eax
push ebx
mov ebx, dword [ebp + 0x5d8]
push esi
mov esi, dword [ebp + 0x5dc]
push edi
xor edi, edi
push 0x2c
lea eax, [ebp - 0x64]
push edi
push eax
mov dword [ebp - 0x6c], ebx
mov dword [ebp + 0xbc], esi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x68], edi
call fcn.00452e00
push 0x17f
lea eax, [ebp + 0xc1]
push edi
push eax
mov byte [ebp + 0xc0], 0
call fcn.00452e00
push 0x207
lea eax, [ebp + 0x345]
push edi
push eax
mov byte [ebp + 0x344], 0
call fcn.00452e00
push 0x103
lea eax, [ebp + 0x241]
push edi
push eax
mov byte [ebp + 0x240], 0
call fcn.00452e00
push 0x7f
lea eax, [ebp + 0x54d]
push edi
push eax
mov byte [ebp + 0x54c], 0
call fcn.00452e00
mov eax, 0x464700
add esp, 0x3c
mov dword [ebp + 0x68], 0x4693d0
mov dword [ebp + 0x6c], str.GDI32.DLL
mov dword [ebp + 0x70], str.KERNEL32.DLL
mov dword [ebp + 0x74], str.SHELL32.DLL
mov dword [ebp + 0x78], str.COMCTL32.DLL
mov dword [ebp + 0x7c], str.COMDLG32.DLL
mov dword [ebp + 0x80], str.ADVAPI32.DLL
mov dword [ebp + 0x84], str.WSOCK32.DLL
mov dword [ebp + 0x88], str.WS2_32.DLL
mov dword [ebp + 0x8c], str.WININET.DLL
mov dword [ebp + 0x90], str.ODBC32.DLL
mov dword [ebp + 0x94], str.OLE32.DLL
mov dword [ebp + 0x98], str.OLEAUT32.DLL
mov dword [ebp + 0x9c], str.MPR.DLL
mov dword [ebp + 0xa0], str.WINMM.DLL
mov dword [ebp + 0xa4], str.MFC40.DLL
mov dword [ebp + 0xa8], eax
mov dword [ebp + 0xac], eax
mov dword [ebp - 0x80], edi
cmp esi, edi
je 0x4266ea
cmp byte [esi], 0
je 0x4266ea
cmp ebx, edi
je 0x42642e
cmp byte [ebx], 0
je 0x42642e
push 0xc
lea eax, [ebp + 0x240]
push eax
push ebx
call fcn.00411eca
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call ebx
lea ecx, [eax + 1]
push 0x7f
pop eax
cmp ecx, eax
jg 0x426445
push esi
call ebx
inc eax
push eax
push esi
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [ebp + 0x54c]
mov cl, byte [eax]
test cl, cl
je 0x42646d
cmp cl, 0x28
je 0x426468
inc eax
jmp 0x42645a
mov byte [eax], 0
jmp 0x42645a
lea eax, [ebp + 0x54c]
push eax
call ebx
jmp 0x426498
lea ecx, [ebp + eax + 0x54c]
mov dl, byte [ecx]
cmp dl, 0x20
je 0x426495
cmp dl, 9
je 0x426495
cmp dl, 0xd
je 0x426495
cmp dl, 0xa
jne 0x42649d
mov byte [ecx], 0
dec eax
cmp eax, edi
jg 0x426478
mov al, byte [ebp + 0x54c]
test al, al
je 0x4264da
cmp al, 0x20
je 0x4264b7
cmp al, 9
je 0x4264b7
cmp al, 0xd
je 0x4264b7
cmp al, 0xa
jne 0x4264da
lea eax, [ebp + 0x54d]
push eax
call ebx
inc eax
push eax
lea eax, [ebp + 0x54d]
push eax
lea eax, [ebp + 0x54c]
push eax
call fcn.00452ea0
add esp, 0xc
jmp 0x42649d
lea eax, [ebp + 0x54c]
push eax
call ebx
dec eax
mov dword [ebp - 0x7c], eax
js 0x42654c
mov cl, byte [ebp + eax + 0x54c]
test cl, cl
je 0x426522
cmp cl, 0x61
jl 0x4264fe
cmp cl, 0x7a
jle 0x42651c
cmp cl, 0x41
jl 0x426508
cmp cl, 0x5a
jle 0x42651c
cmp cl, 0x30
jl 0x426512
cmp cl, 0x39
jle 0x42651c
cmp cl, 0x5f
je 0x42651c
cmp cl, 0x2d
jne 0x426522
dec eax
mov dword [ebp - 0x7c], eax
jns 0x4264e9
cmp eax, edi
jl 0x42654c
lea eax, [ebp + eax + 0x54c]
push eax
call ebx
inc eax
push eax
mov eax, dword [ebp - 0x7c]
lea eax, [ebp + eax + 0x54d]
push eax
lea eax, [ebp + 0x54c]
push eax
call fcn.00452ea0
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x7c], edi
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp dword [ebp - 0x80], 0
jne 0x4266c3
cmp dword [ebp - 0x7c], 0
jne 0x426589
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x426580
cmp byte [eax], 0
je 0x426580
cmp byte [ebp + 0x240], 0
jne 0x4265f9
mov dword [ebp - 0x7c], 3
jmp 0x4265e1
cmp dword [ebp - 0x7c], 1
jne 0x4265a3
push 0x104
lea eax, [ebp + 0x344]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
jmp 0x4265bb
cmp dword [ebp - 0x7c], 2
jne 0x4265db
push 0x104
lea eax, [ebp + 0x344]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x4648e0
lea eax, [ebp + 0x344]
push eax
call edi
lea eax, [ebp + 0x240]
push eax
lea eax, [ebp + 0x344]
push eax
call edi
jmp 0x426607
cmp dword [ebp - 0x7c], 3
jl 0x426607
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 + 0x5c]
test eax, eax
je 0x4266c3
cmp byte [eax], 0
je 0x4266c3
push eax
lea eax, [ebp + 0x344]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [ebp + 0x344], 0
je 0x426622
lea eax, [ebp + 0x344]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x30], eax
jmp 0x426626
and dword [ebp - 0x30], 0
cmp dword [ebp - 0x30], 0
je 0x4266b6
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
mov dword [ebp - 0x80], eax
test eax, eax
jne 0x4266b6
push 0x46988c
lea eax, [ebp + 0x54c]
push eax
call edi
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
mov dword [ebp - 0x80], eax
test eax, eax
jne 0x4266b6
lea eax, [ebp + 0x54c]
push eax
call ebx
lea ecx, [ebp + 0x54c]
mov byte [eax + ecx - 1], 0
push 0x469888
mov eax, ecx
push eax
call edi
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
mov dword [ebp - 0x80], eax
test eax, eax
jne 0x4266b6
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
and dword [ebp - 0x30], 0
lea eax, [ebp + 0x54c]
push eax
call ebx
lea ecx, [ebp + 0x54c]
mov byte [eax + ecx - 3], 0
inc dword [ebp - 0x7c]
cmp dword [ebp - 0x30], 0
je 0x42655b
cmp dword [ebp - 0x30], 0
jne 0x426709
cmp dword [ebp - 0x80], 0
jne 0x426709
lea eax, [ebp + 0x54c]
push eax
push str.The_function_call___s__could_not_be_located
push dword [0x481960]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, 0x69f6f36
mov ecx, dword [ebp + 0x5cc]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00452dee
add ebp, 0x5d0
leave
ret 0x10
and dword [ebp - 0x80], 0
push 0x28
push dword [ebp + 0xbc]
call fcn.00452d30
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x426974
inc ebx
mov dword [ebp - 0x6c], ebx
je 0x426974
lea eax, [ebp + 0xc0]
mov dword [ebp - 0x34], eax
mov al, byte [ebx]
test al, al
je 0x426935
cmp al, 0x20
je 0x426753
cmp al, 9
je 0x426753
cmp al, 0xd
je 0x426753
cmp al, 0xa
jne 0x42675d
inc ebx
mov al, byte [ebx]
mov dword [ebp - 0x6c], ebx
test al, al
jne 0x426743
cmp byte [ebx], 0x25
jne 0x42682a
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebx
call edi
lea ecx, [eax + 1]
push 0x1f
pop eax
cmp ecx, eax
jg 0x42677d
push ebx
call edi
inc eax
mov edi, dword [ebp - 0x34]
push eax
push ebx
push edi
call fcn.00452790
add esp, 0xc
inc edi
cmp dword [ebp - 0x34], 0
mov byte [edi + 0x1e], 0
je 0x4267e2
mov edx, dword [ebp - 0x34]
mov al, byte [edx]
test al, al
je 0x4267c6
cmp al, 0x20
je 0x4267af
cmp al, 9
je 0x4267af
cmp al, 0xd
je 0x4267af
cmp al, 0xa
jne 0x4267c6
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push edi
push dword [ebp - 0x34]
call fcn.00452ea0
add esp, 0xc
jmp 0x426796
mov ecx, edx
mov al, byte [ecx]
test al, al
je 0x4267e5
cmp al, 0x20
je 0x4267dd
cmp al, 0x2c
je 0x4267dd
cmp al, 0x29
je 0x4267dd
inc ecx
jmp 0x4267c8
mov byte [ecx], 0
jmp 0x4267c8
mov edx, dword [ebp - 0x34]
xor ecx, ecx
inc ecx
cmp byte [edi], 0
jmp 0x426825
cmp byte [edx], 0
je 0x42682a
mov al, byte [edx + ecx]
cmp al, 0x30
jl 0x4267fd
cmp al, 0x39
jle 0x426820
cmp al, 0x41
jl 0x426805
cmp al, 0x5a
jle 0x426820
cmp al, 0x61
jl 0x42680d
cmp al, 0x7a
jle 0x426820
cmp al, 0x5f
je 0x426820
cmp al, 0x2e
je 0x426820
cmp al, 0x5b
je 0x426820
cmp al, 0x5d
je 0x426820
mov byte [edx], 0
inc ecx
cmp byte [edx + ecx], 0
mov dword [ebp - 0x7c], ecx
jne 0x4267ed
push 1
push 0x100000
call fcn.00452b24
mov edi, eax
mov eax, dword [ebp - 0x80]
pop ecx
pop ecx
mov dword [ebp + eax*4 - 0x68], edi
test edi, edi
je 0x42830a
xor cl, cl
and dword [ebp - 0x7c], 0
jmp 0x42688c
cmp dword [ebp - 0x7c], 0xfffff
jge 0x426892
cmp al, 0x2c
jne 0x426862
test cl, cl
je 0x426892
mov edx, dword [ebp - 0x7c]
mov byte [edi + edx], al
test cl, cl
jne 0x42687a
mov al, byte [ebx]
cmp al, 0x22
je 0x426876
cmp al, 0x27
jne 0x426880
mov cl, al
jmp 0x426880
cmp byte [ebx], cl
jne 0x426880
xor cl, cl
inc ebx
cmp byte [ebx], 0
mov dword [ebp - 0x6c], ebx
je 0x426892
inc dword [ebp - 0x7c]
mov al, byte [ebx]
test al, al
jne 0x426851
cmp byte [edi], 0
je 0x4268ae
push 4
push str.VOID
push edi
call fcn.00452ccd
add esp, 0xc
test eax, eax
jne 0x4268ae
and dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x426908
push str.0123456789____.___r_n_t___
push edi
call fcn.00454a80
pop ecx
pop ecx
push edi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp ebx, eax
jb 0x4268fc
push 0x46984c
push edi
call fcn.00454980
pop ecx
pop ecx
test eax, eax
je 0x4268fc
push 0
push 0
push edi
call fcn.0041e488
add esp, 0xc
push 0xf
push ecx
push ecx
fstp qword [esp]
push edi
call fcn.0041c447
add esp, 0x10
inc dword [ebp - 0x80]
add dword [ebp - 0x34], 0x20
mov ebx, dword [ebp - 0x6c]
jmp 0x426917
push edi
call fcn.00452756
mov eax, dword [ebp - 0x80]
and dword [ebp + eax*4 - 0x68], 0
pop ecx
mov al, byte [ebx]
test al, al
je 0x42692d
cmp al, 0x2c
jne 0x426924
inc ebx
jmp 0x42692a
cmp al, 0x29
jne 0x42692d
xor ebx, ebx
mov dword [ebp - 0x6c], ebx
test ebx, ebx
jne 0x426739
cmp dword [ebp - 0x80], 1
jl 0x426974
mov eax, dword [ebp - 0x80]
mov edi, dword [ebp + eax*4 - 0x6c]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
test edi, edi
je 0x426974
push edi
call ebx
cmp byte [eax + edi - 1], 0x3b
jne 0x42695e
push edi
call ebx
mov byte [eax + edi - 1], 0
test edi, edi
je 0x426974
push edi
call ebx
cmp byte [eax + edi - 1], 0x29
jne 0x426974
push edi
call ebx
mov byte [eax + edi - 1], 0
and dword [ebp - 0x34], 0
and dword [ebp - 0x6c], 0
mov ebx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x6c]
mov edi, dword [ebp + eax - 0x68]
test edi, edi
je 0x426a9a
cmp byte [edi], 0x25
je 0x426a9a
push str.NULL
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4269b8
push 0x466c54
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x426a9a
mov al, byte [edi]
cmp al, 0x22
je 0x426a26
cmp al, 0x27
je 0x426a26
push str.0123456789.___t_r_n
push edi
call fcn.00454a80
pop ecx
pop ecx
push edi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp ebx, eax
jb 0x426a23
push 0x5f
push edi
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
jne 0x426a0c
push 0x3078
push edi
call fcn.00452d30
pop ecx
pop ecx
test eax, eax
jne 0x426a0c
push 0x469208
push edi
call fcn.004526d0
pop ecx
pop ecx
test eax, eax
je 0x426a12
push edi
call fcn.00441b66
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x469070]
or dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x74]
jmp 0x426a9a
mov ebx, dword [ebp - 0x74]
mov al, byte [edi]
cmp al, 0x22
je 0x426a30
cmp al, 0x27
jne 0x426a49
lea ebx, [edi + 1]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push ebx
push edi
call fcn.00452ea0
mov ebx, dword [ebp - 0x74]
add esp, 0xc
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
jmp 0x426a6d
mov cl, byte [edi + eax]
cmp cl, 0x20
je 0x426a69
cmp cl, 9
je 0x426a69
cmp cl, 0xd
je 0x426a69
cmp cl, 0xa
jne 0x426a72
mov byte [edi + eax], 0
dec eax
test eax, eax
jg 0x426a52
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [eax + edi - 1], 0x22
je 0x426a8e
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [eax + edi - 1], 0x27
jne 0x426a9a
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov byte [eax + edi - 1], 0
add dword [ebp - 0x6c], 4
cmp dword [ebp - 0x6c], 0x30
jl 0x42697f
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiA]
push str.RunScript
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x427235
push 0x469818
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426b03
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x64]
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427250
push str.MessageBoxExA
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426b4c
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x64]
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427250
push 0x4697f8
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426b81
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
push eax
jmp 0x426ae6
push 0x4697e8
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x426b5e
push str.CreateWindowA
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426c0f
push eax
push dword [ebp - 0x44]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x48]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x4c]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x50]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x64]
lea eax, [ebp + 0x54c]
push dword [ebp - 0x68]
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427250
push 0x4697c8
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426c95
push eax
push dword [ebp - 0x40]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x44]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x48]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x4c]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x50]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x64]
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427250
push 0x4697bc
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426cb6
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
push eax
jmp 0x427238
push 0x4697ac
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426ce5
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427250
push 0x46979c
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426d20
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
push eax
push 0
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427250
push 0x469794
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426d4f
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427252
push 0x469788
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x426ca7
push 0x469778
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426d89
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x64]
jmp 0x426d03
push 0x469768
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x427235
push 0x469758
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426e0a
push dword [ebp - 0x50]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427250
push 0x469748
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426e35
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
push eax
jmp 0x426d03
push 0x469738
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x426ca7
push 0x46972c
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x426ca7
push 0x469720
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426ebc
mov ebx, dword [ebp - 0x64]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpA]
test ebx, ebx
je 0x426e95
cmp byte [ebx], al
je 0x426e95
push 0x466c54
push ebx
call edi
test eax, eax
je 0x426e95
mov dword [ebp - 0x74], ebx
jmp 0x426e99
and dword [ebp - 0x74], 0
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x426eb1
cmp byte [ebx], 0
je 0x426eb1
push 0x466c54
push ebx
call edi
test eax, eax
jne 0x426eb3
xor ebx, ebx
push dword [ebp - 0x74]
push ebx
jmp 0x427242
push 0x469714
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x426cc8
push 0x469704
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x426cc8
push str.MoveWindow
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426f49
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427250
push 0x4697bc
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x426ca7
push 0x4696ec
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x426ca7
push 0x4696d8
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
jne 0x426f9a
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427250
push 0x4696c4
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
je 0x426f8d
push 0x4696b8
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
je 0x426f8d
push 0x4696a8
push eax
call edi
test eax, eax
je 0x426cc8
push str.GetWindowPlacement
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x426fee
mov eax, dword [ebp - 0x64]
mov dword [eax], 0x2c
jmp 0x426cb0
push 0x46968c
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x426cc8
push 0x469680
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x426ca7
push str.TextOutA
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x427052
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
push eax
jmp 0x426b2f
push 0x469668
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x427087
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
push eax
jmp 0x426b2c
push 0x469658
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x427235
push 0x469648
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x427235
push 0x469638
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x426ca7
push 0x469628
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
jne 0x4270e9
push dword [ebp - 0x68]
jmp 0x426cd8
push 0x469618
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
je 0x426f8d
push 0x46960c
push eax
call edi
test eax, eax
jne 0x4271a0
push dword [ebp - 0x50]
call fcn.00424428
pop ecx
push eax
push dword [ebp - 0x54]
call fcn.00424428
pop ecx
push eax
push dword [ebp - 0x58]
call fcn.00424428
pop ecx
push eax
xor esi, esi
push esi
push dword [ebp - 0x60]
call fcn.00424428
pop ecx
push eax
push dword [ebp - 0x64]
call fcn.00424428
pop ecx
push eax
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x427252
cmp byte [0x4840a0], 0
je 0x427252
push esi
push 0x7ff
push dword [0x481960]
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push 0x1200
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push dword [0x481960]
push str.Function_Error:__s
call fcn.0042604a
pop ecx
pop ecx
jmp 0x427252
push 0x4695ec
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x428385
push str.WriteFileEx
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x428385
push 0x4695d4
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x428318
push str.ReadFileEx
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x428318
push 0x4695b8
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x42721b
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
push eax
push 0
jmp 0x426b72
push 0x4695ac
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x427305
or dword [ebp - 0x34], 2
push dword [ebp - 0x64]
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
mov ebx, eax
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, 0x469658
push esi
call edi
push eax
lea eax, [ebp + 0x54c]
push esi
push eax
call fcn.004549c0
add esp, 0xc
test eax, eax
je 0x4284a0
mov esi, 0x469648
push esi
call edi
push eax
lea eax, [ebp + 0x54c]
push esi
push eax
call fcn.004549c0
add esp, 0xc
test eax, eax
je 0x4284a0
push 0x469628
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x428393
and dword [ebp + 0xb8], eax
lea edi, [ebp + 0xbc]
stosd dword es:[edi], eax
cmp dword [ebp - 0x68], eax
je 0x4272e3
push 8
push dword [ebp - 0x68]
lea eax, [ebp + 0xb8]
push eax
call fcn.00452790
add esp, 0xc
push dword [ebp + 0xbc]
push dword [ebp + 0xb8]
push str._d__d
push dword [ebp - 0x68]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x4284f5
push 0x469598
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
je 0x426cc8
push 0x46958c
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
je 0x4270e1
push 0x469580
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
jne 0x427354
push dword [ebp - 0x64]
push dword [ebp - 0x68]
jmp 0x427248
push 0x469574
push eax
call edi
test eax, eax
jne 0x427375
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x64]
push dword [ebp - 0x68]
jmp 0x426d0d
push 0x469560
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x4273a4
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ecx, 0xfffff
cmp eax, ecx
jle 0x426d77
mov eax, ecx
jmp 0x426d80
push 0x469550
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x42741b
mov ecx, dword [ebp - 0x58]
mov al, byte [ecx]
test al, al
je 0x4273c8
cmp al, 0x30
je 0x4273c8
mov dword [ebp - 0x74], ecx
jmp 0x4273cc
and dword [ebp - 0x74], 0
mov ecx, dword [ebp - 0x5c]
mov al, byte [ecx]
test al, al
je 0x4273de
cmp al, 0x30
je 0x4273de
mov dword [ebp - 0x6c], ecx
jmp 0x4273e2
and dword [ebp - 0x6c], 0
mov ecx, dword [ebp - 0x60]
mov al, byte [ecx]
test al, al
je 0x4273f3
cmp al, 0x30
je 0x4273f3
mov ebx, ecx
jmp 0x4273f5
xor ebx, ebx
mov edi, dword [ebp - 0x64]
mov al, byte [edi]
test al, al
je 0x427402
cmp al, 0x30
jne 0x427404
xor edi, edi
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x74]
push dword [ebp - 0x6c]
push ebx
push edi
jmp 0x426f2c
push 0x469538
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
jne 0x427466
push dword [ebp - 0x4c]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x64]
push dword [ebp - 0x68]
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427250
push 0x469524
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
je 0x427349
push 0x469514
push eax
call edi
test eax, eax
jne 0x42749c
mov eax, dword [ebp - 0x68]
mov dword [eax], 0x94
jmp 0x426cd1
push str.StrStrA
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
je 0x427349
push str.lstrcpy
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
je 0x427349
push str.lstrcpyn
push eax
call edi
test eax, eax
je 0x427360
push str.lstrcat
lea eax, [ebp + 0x54c]
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
je 0x427349
push str.lstrcmp
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
je 0x427349
push str.lstrlen
push eax
call edi
test eax, eax
lea eax, [ebp + 0x54c]
je 0x4270e1
push 0x4694d4
push eax
call edi
test eax, eax
jne 0x427654
test dword [ebp - 0x34], 0x800
mov esi, dword [ebp - 0x40]
je 0x42754b
push esi
call fcn.0040109c
pop ecx
jmp 0x42754e
mov eax, dword [ebp - 0x3c]
test dword [ebp - 0x34], 0x400
mov dword [ebp - 0x74], eax
je 0x427566
push esi
call fcn.0040109c
pop ecx
mov dword [ebp - 0x6c], eax
jmp 0x427569
mov dword [ebp - 0x6c], esi
test dword [ebp - 0x34], 0x200
je 0x42757d
push dword [ebp - 0x44]
call fcn.0040109c
pop ecx
jmp 0x427580
mov eax, dword [ebp - 0x44]
test dword [ebp - 0x34], 0x100
mov dword [ebp - 0x80], eax
je 0x427597
push dword [ebp - 0x48]
call fcn.0040109c
pop ecx
jmp 0x42759a
mov eax, dword [ebp - 0x48]
test byte [ebp - 0x34], 0x80
mov dword [ebp - 0x78], eax
je 0x4275ae
push dword [ebp - 0x4c]
call fcn.0040109c
pop ecx
jmp 0x4275b1
mov eax, dword [ebp - 0x4c]
test byte [ebp - 0x34], 0x40
mov dword [ebp - 0x70], eax
je 0x4275c5
push dword [ebp - 0x50]
call fcn.0040109c
pop ecx
jmp 0x4275c8
mov eax, dword [ebp - 0x50]
test byte [ebp - 0x34], 0x20
mov dword [ebp - 0x38], eax
je 0x4275dc
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
jmp 0x4275df
mov eax, dword [ebp - 0x54]
test byte [ebp - 0x34], 0x10
mov dword [ebp + 0xbc], eax
je 0x4275f8
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x4275fb
mov edi, dword [ebp - 0x58]
test byte [ebp - 0x34], 8
je 0x42760e
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
mov esi, eax
jmp 0x427611
mov esi, dword [ebp - 0x5c]
test byte [ebp - 0x34], 4
je 0x427622
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
jmp 0x427625
mov eax, dword [ebp - 0x60]
push dword [ebp - 0x74]
push dword [ebp - 0x6c]
push dword [ebp - 0x80]
push dword [ebp - 0x78]
push dword [ebp - 0x70]
push dword [ebp - 0x38]
push dword [ebp + 0xbc]
push edi
push esi
push eax
push dword [ebp - 0x64]
push dword [ebp - 0x68]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x30
jmp 0x427252
mov eax, dword [ebp - 0x80]
xor edi, edi
cmp eax, edi
jne 0x42767c
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
cmp dword [ebp + 0x5e0], edi
je 0x426f93
call eax
jmp 0x427250
cmp eax, 1
jne 0x4276c3
cmp dword [ebp + 0x5e0], edi
je 0x4276b1
test byte [ebp - 0x34], al
je 0x427699
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x42769c
mov eax, dword [ebp - 0x68]
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
pop ecx
jmp 0x427250
test byte [ebp - 0x34], 1
jne 0x426cc8
mov eax, dword [ebp - 0x68]
jmp 0x426cd1
cmp eax, 2
jne 0x42773c
cmp dword [ebp + 0x5e0], edi
je 0x42770c
test byte [ebp - 0x34], al
je 0x4276e2
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x4276e5
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x4276f6
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x4276f9
mov eax, dword [ebp - 0x68]
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
pop ecx
jmp 0x4276ab
test byte [ebp - 0x34], 2
je 0x42771f
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x427722
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x427733
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x427736
mov eax, dword [ebp - 0x68]
push edi
jmp 0x427241
cmp eax, 3
jne 0x4277ed
cmp dword [ebp + 0x5e0], edi
je 0x4277a6
test byte [ebp - 0x34], 4
je 0x427760
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x427763
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x427776
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x427779
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x42778a
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x42778d
mov eax, dword [ebp - 0x68]
push ebx
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
add esp, 0xc
jmp 0x427250
test byte [ebp - 0x34], 4
je 0x4277b9
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x4277bc
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x4277cf
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x4277d2
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x4277e3
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x4277e6
mov eax, dword [ebp - 0x68]
push ebx
push edi
jmp 0x426d0c
cmp eax, 4
jne 0x4278de
cmp dword [ebp + 0x5e0], edi
je 0x427877
test byte [ebp - 0x34], 8
je 0x42780f
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x427812
mov eax, dword [ebp - 0x5c]
test byte [ebp - 0x34], 4
mov dword [ebp + 0xbc], eax
je 0x42782b
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x42782e
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x427841
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x427844
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x427855
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x427858
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push ebx
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
add esp, 0x10
jmp 0x427250
test byte [ebp - 0x34], 8
je 0x427888
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x42788b
mov eax, dword [ebp - 0x5c]
test byte [ebp - 0x34], 4
mov dword [ebp + 0xbc], eax
je 0x4278a4
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x4278a7
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x4278ba
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x4278bd
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x4278ce
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x4278d1
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push ebx
push edi
jmp 0x426aef
cmp eax, 5
jne 0x427a07
cmp dword [ebp + 0x5e0], edi
je 0x427986
test byte [ebp - 0x34], 0x10
je 0x427904
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
jmp 0x427907
mov eax, dword [ebp - 0x58]
test byte [ebp - 0x34], 8
mov dword [ebp + 0xbc], eax
je 0x42791e
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x427921
mov eax, dword [ebp - 0x5c]
test byte [ebp - 0x34], 4
mov dword [ebp - 0x38], eax
je 0x427937
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x42793a
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x42794d
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x427950
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x427961
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x427964
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push dword [ebp - 0x38]
push ebx
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
add esp, 0x14
jmp 0x427250
test byte [ebp - 0x34], 0x10
je 0x427997
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
jmp 0x42799a
mov eax, dword [ebp - 0x58]
test byte [ebp - 0x34], 8
mov dword [ebp + 0xbc], eax
je 0x4279b1
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x4279b4
mov eax, dword [ebp - 0x5c]
test byte [ebp - 0x34], 4
mov dword [ebp - 0x38], eax
je 0x4279ca
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x4279cd
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x4279e0
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x4279e3
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x4279f4
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x4279f7
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push dword [ebp - 0x38]
push ebx
push edi
jmp 0x426b38
cmp eax, 6
jne 0x427b5f
mov bl, byte [ebp - 0x34]
cmp dword [ebp + 0x5e0], edi
je 0x427ac8
test bl, 0x20
je 0x427a2f
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
jmp 0x427a32
mov eax, dword [ebp - 0x54]
mov dword [ebp + 0xbc], eax
test bl, 0x10
je 0x427a48
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
jmp 0x427a4b
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x38], eax
test bl, 8
je 0x427a5e
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x427a61
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x70], eax
test bl, 4
je 0x427a76
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x427a79
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x427a8c
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x427a8f
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x427aa0
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x427aa3
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push dword [ebp - 0x38]
push dword [ebp - 0x70]
push ebx
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
add esp, 0x18
jmp 0x427250
test bl, 0x20
je 0x427ad8
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
jmp 0x427adb
mov eax, dword [ebp - 0x54]
mov dword [ebp + 0xbc], eax
test bl, 0x10
je 0x427af1
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
jmp 0x427af4
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x38], eax
test bl, 8
je 0x427b07
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x427b0a
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x70], eax
test bl, 4
je 0x427b1f
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x427b22
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x427b35
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x427b38
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x427b49
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x427b4c
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push dword [ebp - 0x38]
push dword [ebp - 0x70]
push ebx
push edi
jmp 0x426f35
cmp eax, 7
jne 0x427ce9
mov bl, byte [ebp - 0x34]
cmp dword [ebp + 0x5e0], edi
je 0x427c39
test bl, 0x40
je 0x427b87
push dword [ebp - 0x50]
call fcn.0040109c
pop ecx
jmp 0x427b8a
mov eax, dword [ebp - 0x50]
mov dword [ebp + 0xbc], eax
test bl, 0x20
je 0x427ba0
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
jmp 0x427ba3
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x38], eax
test bl, 0x10
je 0x427bb6
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
jmp 0x427bb9
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x70], eax
test bl, 8
je 0x427bcc
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x427bcf
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x78], eax
test bl, 4
je 0x427be4
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x427be7
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x427bfa
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x427bfd
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x427c0e
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x427c11
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push dword [ebp - 0x38]
push dword [ebp - 0x70]
push dword [ebp - 0x78]
push ebx
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
add esp, 0x1c
jmp 0x427250
test bl, 0x40
je 0x427c49
push dword [ebp - 0x50]
call fcn.0040109c
pop ecx
jmp 0x427c4c
mov eax, dword [ebp - 0x50]
mov dword [ebp + 0xbc], eax
test bl, 0x20
je 0x427c62
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
jmp 0x427c65
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x38], eax
test bl, 0x10
je 0x427c78
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
jmp 0x427c7b
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x70], eax
test bl, 8
je 0x427c8e
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x427c91
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x78], eax
test bl, 4
je 0x427ca6
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x427ca9
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x427cbc
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x427cbf
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x427cd0
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x427cd3
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push dword [ebp - 0x38]
push dword [ebp - 0x70]
push dword [ebp - 0x78]
push ebx
push edi
jmp 0x426df6
cmp eax, 8
jne 0x427ea4
mov bl, byte [ebp - 0x34]
cmp dword [ebp + 0x5e0], edi
je 0x427ddb
test bl, bl
jns 0x427d10
push dword [ebp - 0x4c]
call fcn.0040109c
pop ecx
jmp 0x427d13
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 0xbc], eax
test bl, 0x40
je 0x427d29
push dword [ebp - 0x50]
call fcn.0040109c
pop ecx
jmp 0x427d2c
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x38], eax
test bl, 0x20
je 0x427d3f
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
jmp 0x427d42
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x70], eax
test bl, 0x10
je 0x427d55
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
jmp 0x427d58
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x78], eax
test bl, 8
je 0x427d6b
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x427d6e
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x74], eax
test bl, 4
je 0x427d83
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x427d86
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x427d99
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x427d9c
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x427dad
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x427db0
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push dword [ebp - 0x38]
push dword [ebp - 0x70]
push dword [ebp - 0x78]
push dword [ebp - 0x74]
push ebx
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
add esp, 0x20
jmp 0x427250
test bl, bl
jns 0x427dea
push dword [ebp - 0x4c]
call fcn.0040109c
pop ecx
jmp 0x427ded
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 0xbc], eax
test bl, 0x40
je 0x427e03
push dword [ebp - 0x50]
call fcn.0040109c
pop ecx
jmp 0x427e06
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x38], eax
test bl, 0x20
je 0x427e19
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
jmp 0x427e1c
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x70], eax
test bl, 0x10
je 0x427e2f
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
jmp 0x427e32
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x78], eax
test bl, 8
je 0x427e45
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x427e48
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x74], eax
test bl, 4
je 0x427e5d
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x427e60
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x427e73
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x427e76
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x427e87
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x427e8a
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push dword [ebp - 0x38]
push dword [ebp - 0x70]
push dword [ebp - 0x78]
push dword [ebp - 0x74]
push ebx
push edi
push eax
jmp 0x427453
cmp eax, 9
jne 0x4280a5
mov ebx, dword [ebp - 0x34]
cmp dword [ebp + 0x5e0], edi
je 0x427fb2
test ebx, 0x100
je 0x427ecf
push dword [ebp - 0x48]
call fcn.0040109c
pop ecx
jmp 0x427ed2
mov eax, dword [ebp - 0x48]
mov dword [ebp + 0xbc], eax
test bl, bl
jns 0x427ee7
push dword [ebp - 0x4c]
call fcn.0040109c
pop ecx
jmp 0x427eea
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x38], eax
test bl, 0x40
je 0x427efd
push dword [ebp - 0x50]
call fcn.0040109c
pop ecx
jmp 0x427f00
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x70], eax
test bl, 0x20
je 0x427f13
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
jmp 0x427f16
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x78], eax
test bl, 0x10
je 0x427f29
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
jmp 0x427f2c
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x74], eax
test bl, 8
je 0x427f3f
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x427f42
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x6c], eax
test bl, 4
je 0x427f57
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x427f5a
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x427f6d
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x427f70
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x427f81
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x427f84
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push dword [ebp - 0x38]
push dword [ebp - 0x70]
push dword [ebp - 0x78]
push dword [ebp - 0x74]
push dword [ebp - 0x6c]
push ebx
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
add esp, 0x24
jmp 0x427250
test ebx, 0x100
je 0x427fc5
push dword [ebp - 0x48]
call fcn.0040109c
pop ecx
jmp 0x427fc8
mov eax, dword [ebp - 0x48]
mov dword [ebp + 0xbc], eax
test bl, bl
jns 0x427fdd
push dword [ebp - 0x4c]
call fcn.0040109c
pop ecx
jmp 0x427fe0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x38], eax
test bl, 0x40
je 0x427ff3
push dword [ebp - 0x50]
call fcn.0040109c
pop ecx
jmp 0x427ff6
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x70], eax
test bl, 0x20
je 0x428009
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
jmp 0x42800c
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x78], eax
test bl, 0x10
je 0x42801f
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
jmp 0x428022
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x74], eax
test bl, 8
je 0x428035
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x428038
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x6c], eax
test bl, 4
je 0x42804d
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x428050
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x428063
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x428066
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x428077
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x42807a
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push dword [ebp - 0x38]
push dword [ebp - 0x70]
push dword [ebp - 0x78]
push dword [ebp - 0x74]
push dword [ebp - 0x6c]
push ebx
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427250
cmp eax, 0xa
jne 0x4282de
mov ebx, dword [ebp - 0x34]
cmp dword [ebp + 0x5e0], edi
je 0x4281cf
test ebx, 0x200
je 0x4280d0
push dword [ebp - 0x44]
call fcn.0040109c
pop ecx
jmp 0x4280d3
mov eax, dword [ebp - 0x44]
mov dword [ebp + 0xbc], eax
test ebx, 0x100
je 0x4280ec
push dword [ebp - 0x48]
call fcn.0040109c
pop ecx
jmp 0x4280ef
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
test bl, bl
jns 0x428101
push dword [ebp - 0x4c]
call fcn.0040109c
pop ecx
jmp 0x428104
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x70], eax
test bl, 0x40
je 0x428117
push dword [ebp - 0x50]
call fcn.0040109c
pop ecx
jmp 0x42811a
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x78], eax
test bl, 0x20
je 0x42812d
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
jmp 0x428130
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x74], eax
test bl, 0x10
je 0x428143
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
jmp 0x428146
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x6c], eax
test bl, 8
je 0x428159
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x42815c
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x80], eax
test bl, 4
je 0x428171
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x428174
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x428187
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x42818a
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x42819b
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x42819e
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push dword [ebp - 0x38]
push dword [ebp - 0x70]
push dword [ebp - 0x78]
push dword [ebp - 0x74]
push dword [ebp - 0x6c]
push dword [ebp - 0x80]
push ebx
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
add esp, 0x28
jmp 0x427250
test ebx, 0x200
je 0x4281e2
push dword [ebp - 0x44]
call fcn.0040109c
pop ecx
jmp 0x4281e5
mov eax, dword [ebp - 0x44]
mov dword [ebp + 0xbc], eax
test ebx, 0x100
je 0x4281fe
push dword [ebp - 0x48]
call fcn.0040109c
pop ecx
jmp 0x428201
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
test bl, bl
jns 0x428213
push dword [ebp - 0x4c]
call fcn.0040109c
pop ecx
jmp 0x428216
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x70], eax
test bl, 0x40
je 0x428229
push dword [ebp - 0x50]
call fcn.0040109c
pop ecx
jmp 0x42822c
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x78], eax
test bl, 0x20
je 0x42823f
push dword [ebp - 0x54]
call fcn.0040109c
pop ecx
jmp 0x428242
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x74], eax
test bl, 0x10
je 0x428255
push dword [ebp - 0x58]
call fcn.0040109c
pop ecx
jmp 0x428258
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x6c], eax
test bl, 8
je 0x42826b
push dword [ebp - 0x5c]
call fcn.0040109c
pop ecx
jmp 0x42826e
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x80], eax
test bl, 4
je 0x428283
push dword [ebp - 0x60]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x428286
mov ebx, dword [ebp - 0x60]
test byte [ebp - 0x34], 2
je 0x428299
push dword [ebp - 0x64]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x42829c
mov edi, dword [ebp - 0x64]
test byte [ebp - 0x34], 1
je 0x4282ad
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
jmp 0x4282b0
mov eax, dword [ebp - 0x68]
push dword [ebp + 0xbc]
push dword [ebp - 0x38]
push dword [ebp - 0x70]
push dword [ebp - 0x78]
push dword [ebp - 0x74]
push dword [ebp - 0x6c]
push dword [ebp - 0x80]
push ebx
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
jmp 0x427250
push eax
push str.Parameter_count_incorrect___d_
push dword [0x481960]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
xor esi, esi
mov eax, dword [ebp + esi*4 - 0x68]
cmp eax, edi
je 0x428304
push eax
call fcn.00452756
pop ecx
inc esi
cmp esi, 0xc
jl 0x4282f5
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x4266ea
mov edi, dword [ebp - 0x60]
or dword [ebp - 0x34], 0xd
push edi
call fcn.0040109c
pop ecx
mov ecx, 0xfffff
cmp eax, ecx
jle 0x428333
mov eax, ecx
jmp 0x42833a
push edi
call fcn.0040109c
pop ecx
push 0
push dword [ebp - 0x5c]
push eax
push dword [ebp - 0x64]
push dword [ebp - 0x68]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp - 0x30]
call esi
call eax
push edi
mov ebx, eax
call fcn.0040109c
pop ecx
cmp eax, 0xfffff
jle 0x428372
mov eax, 0xfffff
jmp 0x428379
push edi
call fcn.0040109c
pop ecx
mov ecx, dword [ebp - 0x64]
mov byte [eax + ecx], 0
jmp 0x427252
or dword [ebp - 0x34], 0xd
push 0
push dword [ebp - 0x5c]
jmp 0x427078
mov esi, str.GetVersionEx
push esi
call edi
push eax
lea eax, [ebp + 0x54c]
push esi
push eax
call fcn.004549c0
add esp, 0xc
test eax, eax
jne 0x428409
xor esi, esi
push 0x90
lea eax, [ebp - 0x28]
push esi
push eax
mov dword [ebp - 0x2c], esi
call fcn.00452e00
add esp, 0xc
cmp dword [ebp - 0x68], esi
je 0x4283e0
push 0x94
push dword [ebp - 0x68]
lea eax, [ebp - 0x2c]
push eax
call fcn.00452790
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push str._lu__lu__lu__lu__lu__s
push dword [ebp - 0x68]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
jmp 0x4284f5
mov esi, str.GetWindowPlacement
push esi
call edi
push eax
lea eax, [ebp + 0x54c]
push esi
push eax
call fcn.004549c0
add esp, 0xc
test eax, eax
jne 0x4284f5
and dword [ebp + 0x84], eax
push 0xa
pop ecx
lea edi, [ebp + 0x88]
rep stosd dword es:[edi], eax
cmp dword [ebp - 0x64], eax
je 0x428454
push 0x2c
push dword [ebp - 0x64]
lea eax, [ebp + 0x84]
push eax
call fcn.00452790
add esp, 0xc
sub esp, 0x10
mov edi, esp
push dword [ebp + 0x9c]
lea esi, [ebp + 0xa0]
push dword [ebp + 0x98]
movsd dword es:[edi], dword [esi]
push dword [ebp + 0x94]
movsd dword es:[edi], dword [esi]
push dword [ebp + 0x90]
movsd dword es:[edi], dword [esi]
push dword [ebp + 0x8c]
movsd dword es:[edi], dword [esi]
push dword [ebp + 0x88]
push dword [ebp + 0x84]
push str._d__d__d__d__d__d
push dword [ebp - 0x64]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x34
jmp 0x4284f5
and dword [ebp + 0xb0], 0
xor eax, eax
cmp dword [ebp - 0x64], 0
lea edi, [ebp + 0xb4]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
je 0x4284cc
push 0x10
push dword [ebp - 0x64]
lea eax, [ebp + 0xb0]
push eax
call fcn.00452790
add esp, 0xc
push dword [ebp + 0xbc]
push dword [ebp + 0xb8]
push dword [ebp + 0xb4]
push dword [ebp + 0xb0]
push str._d__d__d__d
push dword [ebp - 0x64]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp dword [ebp + 0x5e4], 1
jne 0x4285e1
xor esi, esi
mov ecx, esi
shl ecx, 5
lea eax, [ebp + ecx + 0xc0]
mov dl, byte [eax]
test dl, dl
je 0x4285a6
cmp dl, 0x25
jne 0x428526
lea eax, [ebp + ecx + 0xc1]
push eax
lea eax, [ebp + 0x240]
push str.SOFTWARE_vTaskUserVariables_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
xor eax, eax
add esp, 0xc
inc eax
test esi, esi
je 0x428547
mov ecx, esi
shl eax, cl
test dword [ebp - 0x34], eax
jne 0x42855a
mov edi, dword [ebp + esi*4 - 0x68]
mov al, byte [edi]
cmp al, 0x20
jl 0x42855a
cmp al, 0x7f
jle 0x428594
mov edi, dword [ebp + esi*4 - 0x68]
push 4
lea eax, [ebp - 0x7c]
push edi
push eax
call fcn.00452790
push dword [ebp - 0x7c]
lea eax, [ebp + 0x344]
push 0x464bf8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
test edi, edi
je 0x428594
lea eax, [ebp + 0x344]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp + 0x240]
push eax
push 0
push edi
call fcn.0044dba4
add esp, 0xc
lea edi, [esi + 1]
push edi
lea eax, [ebp + 0x344]
push str.parameter_d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push dword [ebp + esi*4 - 0x68]
lea eax, [ebp + 0x344]
push eax
push str.SOFTWARE_vTaskUserVariables
push 0
call fcn.00424726
mov esi, edi
add esp, 0x1c
cmp esi, 0xc
jl 0x428504
xor edi, edi
lea esi, [ebp + edi*4 - 0x68]
mov eax, dword [esi]
test eax, eax
je 0x4285f7
push eax
call fcn.00452756
and dword [esi], 0
pop ecx
inc edi
cmp edi, 0xc
jl 0x4285e3
mov eax, ebx
jmp 0x4266ef