Function at 0x4205d6
Capabilities:
Get common file path
Link many functions at runtime

Disassembly:
push ebp
lea ebp, [esp - 0x5d0]
sub esp, 0x650
mov eax, dword [0x4705d0]
xor eax, ebp
mov dword [ebp + 0x5cc], eax
push ebx
mov ebx, dword [ebp + 0x5d8]
push esi
mov esi, dword [ebp + 0x5dc]
push edi
xor edi, edi
push 0x2c
lea eax, [ebp - 0x1c]
push edi
push eax
mov dword [ebp + 0x18], ebx
mov dword [ebp - 0x2c], esi
mov dword [ebp + 0x28], edi
mov dword [ebp - 0x28], edi
mov dword [ebp + 0x14], edi
mov dword [ebp - 0x20], edi
call fcn.004464f0
push 0x17f
lea eax, [ebp + 0xc1]
push edi
push eax
mov byte [ebp + 0xc0], 0
call fcn.004464f0
push 0x207
lea eax, [ebp + 0x345]
push edi
push eax
mov byte [ebp + 0x344], 0
call fcn.004464f0
push 0x103
lea eax, [ebp + 0x241]
push edi
push eax
mov byte [ebp + 0x240], 0
call fcn.004464f0
push 0x7f
lea eax, [ebp + 0x54d]
push edi
push eax
mov byte [ebp + 0x54c], 0
call fcn.004464f0
mov eax, 0x459620
add esp, 0x3c
mov dword [ebp - 0x80], str.USER32.DLL
mov dword [ebp - 0x7c], str.GDI32.DLL
mov dword [ebp - 0x78], 0x45c384
mov dword [ebp - 0x74], str.SHELL32.DLL
mov dword [ebp - 0x70], str.COMCTL32.DLL
mov dword [ebp - 0x6c], str.COMDLG32.DLL
mov dword [ebp - 0x68], str.ADVAPI32.DLL
mov dword [ebp - 0x64], str.WSOCK32.DLL
mov dword [ebp - 0x60], str.WS2_32.DLL
mov dword [ebp - 0x5c], str.WININET.DLL
mov dword [ebp - 0x58], str.ODBC32.DLL
mov dword [ebp - 0x54], str.OLE32.DLL
mov dword [ebp - 0x50], str.OLEAUT32.DLL
mov dword [ebp - 0x4c], str.MPR.DLL
mov dword [ebp - 0x48], str.WINMM.DLL
mov dword [ebp - 0x44], str.MFC40.DLL
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x24], edi
cmp esi, edi
je 0x4209f0
cmp byte [esi], 0
je 0x4209f0
cmp ebx, edi
je 0x42072b
cmp byte [ebx], 0
je 0x42072b
push 0xc
lea eax, [ebp + 0x240]
push eax
push ebx
call fcn.0040dac4
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call ebx
mov ecx, eax
push 0x7f
inc ecx
pop eax
cmp ecx, eax
jg 0x420742
push esi
call ebx
inc eax
push eax
push esi
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [ebp + 0x54c]
mov cl, byte [eax]
test cl, cl
je 0x42076a
cmp cl, 0x28
je 0x420765
inc eax
jmp 0x420757
mov byte [eax], 0
jmp 0x420757
lea eax, [ebp + 0x54c]
push eax
call ebx
jmp 0x420795
lea ecx, [ebp + eax + 0x54c]
mov dl, byte [ecx]
cmp dl, 0x20
je 0x420792
cmp dl, 9
je 0x420792
cmp dl, 0xd
je 0x420792
cmp dl, 0xa
jne 0x42079a
mov byte [ecx], 0
dec eax
cmp eax, edi
jg 0x420775
mov al, byte [ebp + 0x54c]
test al, al
je 0x4207d7
cmp al, 0x20
je 0x4207b4
cmp al, 9
je 0x4207b4
cmp al, 0xd
je 0x4207b4
cmp al, 0xa
jne 0x4207d7
lea eax, [ebp + 0x54d]
push eax
call ebx
inc eax
push eax
lea eax, [ebp + 0x54d]
push eax
lea eax, [ebp + 0x54c]
push eax
call fcn.00446570
add esp, 0xc
jmp 0x42079a
lea eax, [ebp + 0x54c]
push eax
call ebx
dec eax
mov dword [ebp - 0x28], eax
js 0x420849
mov cl, byte [ebp + eax + 0x54c]
test cl, cl
je 0x42081f
cmp cl, 0x61
jl 0x4207fb
cmp cl, 0x7a
jle 0x420819
cmp cl, 0x41
jl 0x420805
cmp cl, 0x5a
jle 0x420819
cmp cl, 0x30
jl 0x42080f
cmp cl, 0x39
jle 0x420819
cmp cl, 0x5f
je 0x420819
cmp cl, 0x2d
jne 0x42081f
dec eax
mov dword [ebp - 0x28], eax
jns 0x4207e6
cmp eax, edi
jl 0x420849
lea eax, [ebp + eax + 0x54c]
push eax
call ebx
inc eax
push eax
mov eax, dword [ebp - 0x28]
lea eax, [ebp + eax + 0x54d]
push eax
lea eax, [ebp + 0x54c]
push eax
call fcn.00446570
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x28], edi
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp dword [ebp - 0x24], 0
jne 0x4209c9
cmp dword [ebp - 0x28], 0
jne 0x420886
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x42087d
cmp byte [eax], 0
je 0x42087d
cmp byte [ebp + 0x240], 0
jne 0x4208f9
mov dword [ebp - 0x28], 3
jmp 0x4208de
cmp dword [ebp - 0x28], 1
jne 0x4208a0
push 0x104
lea eax, [ebp + 0x344]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
jmp 0x4208b8
cmp dword [ebp - 0x28], 2
jne 0x4208d8
push 0x104
lea eax, [ebp + 0x344]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x45a954
lea eax, [ebp + 0x344]
push eax
call edi
lea eax, [ebp + 0x240]
push eax
lea eax, [ebp + 0x344]
push eax
call edi
jmp 0x420907
cmp dword [ebp - 0x28], 3
jl 0x420907
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x8c]
test eax, eax
je 0x4209c9
cmp byte [eax], 0
je 0x4209c9
push eax
lea eax, [ebp + 0x344]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [ebp + 0x344], 0
je 0x420922
lea eax, [ebp + 0x344]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp + 0x28], eax
jmp 0x420926
and dword [ebp + 0x28], 0
cmp dword [ebp + 0x28], 0
je 0x4209bc
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x4209bc
push 0x45dff8
lea eax, [ebp + 0x54c]
push eax
call edi
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x4209bc
lea eax, [ebp + 0x54c]
push eax
call ebx
lea ecx, [ebp + 0x54c]
dec ecx
mov byte [eax + ecx], 0
push 0x45dff4
lea eax, [ebp + 0x54c]
push eax
call edi
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x4209bc
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
and dword [ebp + 0x28], 0
lea eax, [ebp + 0x54c]
push eax
call ebx
lea ecx, [ebp + 0x54c]
sub ecx, 3
mov byte [eax + ecx], 0
inc dword [ebp - 0x28]
cmp dword [ebp + 0x28], 0
je 0x420858
cmp dword [ebp + 0x28], 0
jne 0x420a0f
cmp dword [ebp - 0x24], 0
jne 0x420a0f
lea eax, [ebp + 0x54c]
push eax
push str.The_function_call___s__could_not_be_located
push dword [0x473bbc]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, 0x69f6f36
mov ecx, dword [ebp + 0x5cc]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004464bf
add ebp, 0x5d0
leave
ret 0x10
and dword [ebp - 0x24], 0
push 0x28
push dword [ebp - 0x2c]
call fcn.00445cc0
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x420c84
inc ebx
mov dword [ebp + 0x24], ebx
je 0x420c84
and dword [ebp + 0x18], 0
mov al, byte [ebx]
test al, al
je 0x420c45
cmp al, 0x20
je 0x420a51
cmp al, 9
je 0x420a51
cmp al, 0xd
je 0x420a51
cmp al, 0xa
jne 0x420a5b
inc ebx
mov al, byte [ebx]
mov dword [ebp + 0x24], ebx
test al, al
jne 0x420a41
cmp byte [ebx], 0x25
jne 0x420b3a
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebx
call edi
mov ecx, eax
push 0x1f
inc ecx
pop eax
cmp ecx, eax
jg 0x420a7b
push ebx
call edi
inc eax
mov edi, dword [ebp + 0x18]
push eax
lea edi, [ebp + edi + 0xc0]
push ebx
push edi
call fcn.00445ea0
add esp, 0xc
mov byte [edi + 0x1f], 0
test edi, edi
je 0x420af4
mov al, byte [edi]
test al, al
je 0x420ad2
cmp al, 0x20
je 0x420aae
cmp al, 9
je 0x420aae
cmp al, 0xd
je 0x420aae
cmp al, 0xa
jne 0x420ad2
mov ebx, dword [ebp + 0x18]
lea ebx, [ebp + ebx + 0xc1]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
push ebx
push edi
call fcn.00446570
mov ebx, dword [ebp + 0x24]
add esp, 0xc
test edi, edi
jne 0x420a98
test edi, edi
je 0x420af4
mov ecx, edi
mov al, byte [ecx]
test al, al
je 0x420af4
cmp al, 0x20
je 0x420aed
cmp al, 0x2c
je 0x420aed
cmp al, 0x29
je 0x420aed
inc ecx
jmp 0x420af0
mov byte [ecx], 0
test edi, edi
jne 0x420ad8
xor ecx, ecx
inc ecx
cmp byte [edi + 1], 0
jmp 0x420b35
cmp byte [edi], 0
je 0x420b3a
mov al, byte [edi + ecx]
cmp al, 0x30
jl 0x420b0d
cmp al, 0x39
jle 0x420b30
cmp al, 0x41
jl 0x420b15
cmp al, 0x5a
jle 0x420b30
cmp al, 0x61
jl 0x420b1d
cmp al, 0x7a
jle 0x420b30
cmp al, 0x5f
je 0x420b30
cmp al, 0x2e
je 0x420b30
cmp al, 0x5b
je 0x420b30
cmp al, 0x5d
je 0x420b30
mov byte [edi], 0
inc ecx
cmp byte [edi + ecx], 0
mov dword [ebp - 0x28], ecx
jne 0x420afd
push 1
push 0x100000
call fcn.004462a8
mov edi, eax
mov eax, dword [ebp - 0x24]
pop ecx
pop ecx
mov dword [ebp + eax*4 - 0x20], edi
test edi, edi
je 0x42264d
xor cl, cl
and dword [ebp - 0x28], 0
jmp 0x420b9c
cmp dword [ebp - 0x28], 0xfffff
jge 0x420ba2
cmp al, 0x2c
jne 0x420b72
test cl, cl
je 0x420ba2
mov edx, dword [ebp - 0x28]
mov byte [edi + edx], al
test cl, cl
jne 0x420b8a
mov al, byte [ebx]
cmp al, 0x22
je 0x420b86
cmp al, 0x27
jne 0x420b90
mov cl, al
jmp 0x420b90
cmp byte [ebx], cl
jne 0x420b90
xor cl, cl
inc ebx
cmp byte [ebx], 0
mov dword [ebp + 0x24], ebx
je 0x420ba2
inc dword [ebp - 0x28]
mov al, byte [ebx]
test al, al
jne 0x420b61
cmp byte [edi], 0
je 0x420bbe
push 4
push str.VOID
push edi
call fcn.00446461
add esp, 0xc
test eax, eax
jne 0x420bbe
and dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x420c18
push str.0123456789____.___r_n_t___
push edi
call fcn.004481e0
pop ecx
pop ecx
push edi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp ebx, eax
jb 0x420c0c
push 0x45dfb8
push edi
call fcn.00448020
pop ecx
pop ecx
test eax, eax
je 0x420c0c
push 0
push 0
push edi
call fcn.00418a96
add esp, 0xc
push 0xf
push ecx
push ecx
fstp qword [esp]
push edi
call fcn.00416b8a
add esp, 0x10
inc dword [ebp - 0x24]
add dword [ebp + 0x18], 0x20
mov ebx, dword [ebp + 0x24]
jmp 0x420c27
push edi
call fcn.00445e06
mov eax, dword [ebp - 0x24]
and dword [ebp + eax*4 - 0x20], 0
pop ecx
mov al, byte [ebx]
test al, al
je 0x420c3d
cmp al, 0x2c
jne 0x420c34
inc ebx
jmp 0x420c3a
cmp al, 0x29
jne 0x420c3d
xor ebx, ebx
mov dword [ebp + 0x24], ebx
test ebx, ebx
jne 0x420a37
cmp dword [ebp - 0x24], 1
jl 0x420c84
mov eax, dword [ebp - 0x24]
mov edi, dword [ebp + eax*4 - 0x24]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
test edi, edi
je 0x420c84
push edi
call ebx
cmp byte [eax + edi - 1], 0x3b
jne 0x420c6e
push edi
call ebx
mov byte [eax + edi - 1], 0
test edi, edi
je 0x420c84
push edi
call ebx
cmp byte [eax + edi - 1], 0x29
jne 0x420c84
push edi
call ebx
mov byte [eax + edi - 1], 0
and dword [ebp + 0x24], 0
and dword [ebp + 0x18], 0
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x18]
mov edi, dword [ebp + eax - 0x20]
test edi, edi
je 0x420daa
cmp byte [edi], 0x25
je 0x420daa
push str.NULL
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x420cc8
push 0x45b754
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x420daa
mov al, byte [edi]
cmp al, 0x22
je 0x420d36
cmp al, 0x27
je 0x420d36
push str.0123456789.___t_r_n
push edi
call fcn.004481e0
pop ecx
pop ecx
push edi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp ebx, eax
jb 0x420d33
push 0x5f
push edi
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
jne 0x420d1c
push 0x3078
push edi
call fcn.00445cc0
pop ecx
pop ecx
test eax, eax
jne 0x420d1c
push 0x45d970
push edi
call fcn.00445d80
pop ecx
pop ecx
test eax, eax
je 0x420d22
push edi
call fcn.00438d80
mov eax, dword [ebp + 0x18]
mov eax, dword [eax + 0x45d808]
or dword [ebp + 0x24], eax
mov ebx, dword [ebp + 0x14]
jmp 0x420daa
mov ebx, dword [ebp + 0x14]
mov al, byte [edi]
cmp al, 0x22
je 0x420d40
cmp al, 0x27
jne 0x420d59
lea eax, [edi + 1]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
lea eax, [edi + 1]
push eax
push edi
call fcn.00446570
add esp, 0xc
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
jmp 0x420d7d
mov cl, byte [edi + eax]
cmp cl, 0x20
je 0x420d79
cmp cl, 9
je 0x420d79
cmp cl, 0xd
je 0x420d79
cmp cl, 0xa
jne 0x420d82
mov byte [edi + eax], 0
dec eax
test eax, eax
jg 0x420d62
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [eax + edi - 1], 0x22
je 0x420d9e
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [eax + edi - 1], 0x27
jne 0x420daa
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov byte [eax + edi - 1], 0
add dword [ebp + 0x18], 4
cmp dword [ebp + 0x18], 0x30
jl 0x420c8f
push str.RunScript
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov edi, dword [ebp - 0x1c]
test eax, eax
je 0x42134c
push 0x45df84
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x420e16
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x18]
push edi
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421365
push str.MessageBoxExA
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x420e61
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x18]
push edi
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421365
push 0x45df64
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x420e98
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
push eax
push edi
call fcn.0040109c
pop ecx
push eax
jmp 0x420df9
push 0x45df54
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420e77
push str.CreateWindowA
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x420f2c
push eax
push dword [ebp + 4]
call fcn.0040109c
pop ecx
push eax
push dword [ebp]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 4]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 8]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
push eax
push edi
push dword [ebp - 0x20]
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421365
push 0x45df34
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x420fb4
push eax
push dword [ebp + 8]
call fcn.0040109c
pop ecx
push eax
push dword [ebp + 4]
call fcn.0040109c
pop ecx
push eax
push dword [ebp]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 4]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 8]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x18]
push edi
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421365
push 0x45df28
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x420fd7
push edi
call fcn.0040109c
pop ecx
push eax
jmp 0x42134d
push 0x45df18
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x42100a
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421365
push 0x45df08
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x421049
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
push eax
push 0
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421365
push 0x45df00
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x42107c
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421367
push 0x45def4
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420fca
push 0x45dee4
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4210bc
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
push eax
push edi
jmp 0x42102c
push 0x45ded4
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x42134c
push 0x45dec4
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x421143
push dword [ebp - 8]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
push eax
push edi
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421365
push 0x45deb4
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x421170
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
push eax
push edi
call fcn.0040109c
pop ecx
push eax
jmp 0x42102c
push 0x45dea4
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420fca
push 0x45de98
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420fca
push 0x45de8c
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4211fb
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpA]
test edi, edi
je 0x4211d4
cmp byte [edi], al
je 0x4211d4
push 0x45b754
push edi
call ebx
test eax, eax
jne 0x4211d6
xor edi, edi
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x4211f3
cmp byte [eax], 0
je 0x4211f3
push 0x45b754
push eax
call ebx
test eax, eax
je 0x4211f3
mov eax, dword [ebp - 0x20]
jmp 0x4211f5
xor eax, eax
push edi
jmp 0x421356
push 0x45de80
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420fed
push 0x45de70
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420fed
push str.MoveWindow
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x421292
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
push eax
push edi
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421365
push 0x45df28
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420fca
push 0x45de58
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420fca
push 0x45de44
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
jne 0x4212ec
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421365
push 0x45de30
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
je 0x4212e2
push 0x45de24
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
je 0x4212e2
push 0x45de14
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420fed
push str.GetWindowPlacement
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x42140b
mov dword [edi], 0x2c
push edi
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
mov ebx, eax
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, 0x45ddf0
push edi
call esi
push eax
lea eax, [ebp + 0x54c]
push edi
push eax
call fcn.00448060
add esp, 0xc
test eax, eax
je 0x4227c1
mov edi, 0x45dde0
push edi
call esi
push eax
lea eax, [ebp + 0x54c]
push edi
push eax
call fcn.00448060
add esp, 0xc
test eax, eax
je 0x4227c1
push 0x45ddd0
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4226d5
and dword [ebp - 0x30], eax
lea edi, [ebp - 0x2c]
stosd dword es:[edi], eax
cmp dword [ebp - 0x20], eax
je 0x4213ef
push 8
push dword [ebp - 0x20]
lea eax, [ebp - 0x30]
push eax
call fcn.00445ea0
add esp, 0xc
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push str._d__d
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x422801
push 0x45ddc0
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420fed
push 0x45ddb4
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420fca
push str.TextOutA
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x421479
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
push eax
push edi
call fcn.0040109c
pop ecx
push eax
jmp 0x420e44
push 0x45dd9c
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4214b2
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
push eax
jmp 0x420e43
push 0x45ddf0
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x42134c
push 0x45dde0
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x42134c
push 0x45dd8c
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420fca
push 0x45ddd0
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
jne 0x421524
push dword [ebp - 0x20]
jmp 0x420ffd
push 0x45dd7c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
je 0x4212e2
push 0x45dd70
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4215e1
push dword [ebp - 8]
call fcn.0041e747
pop ecx
push eax
push dword [ebp - 0xc]
call fcn.0041e747
pop ecx
push eax
push dword [ebp - 0x10]
call fcn.0041e747
pop ecx
push eax
xor esi, esi
push esi
push dword [ebp - 0x18]
call fcn.0041e747
pop ecx
push eax
push edi
call fcn.0041e747
pop ecx
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x421367
cmp byte [0x476258], 0
je 0x421367
push esi
push 0x7ff
push dword [0x473bbc]
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push 0x1200
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push dword [0x473bbc]
push str.Function_Error:__s
call fcn.0042036e
pop ecx
pop ecx
jmp 0x421367
push 0x45dd50
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x4226c7
push str.WriteFileEx
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x4226c7
push 0x45dd38
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x42265b
push str.ReadFileEx
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x42265b
push 0x45dd1c
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x421670
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
push eax
push 0
jmp 0x420e8b
push 0x45dd10
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x42168f
or dword [ebp + 0x24], 2
jmp 0x42134c
push 0x45dd04
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x420fed
push 0x45dcf8
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
je 0x42151c
push 0x45dcec
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
jne 0x4216e8
push edi
push dword [ebp - 0x20]
jmp 0x42135d
push 0x45dce0
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x42170b
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
push eax
push edi
push dword [ebp - 0x20]
jmp 0x421036
push 0x45dccc
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x42173e
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
mov ecx, 0xfffff
cmp eax, ecx
jle 0x4210ac
mov eax, ecx
jmp 0x4210b5
push 0x45dcbc
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4217bf
mov ecx, dword [ebp - 0x10]
mov al, byte [ecx]
test al, al
je 0x421766
cmp al, 0x30
je 0x421766
mov dword [ebp + 0x14], ecx
jmp 0x42176a
and dword [ebp + 0x14], 0
mov ecx, dword [ebp - 0x14]
mov al, byte [ecx]
test al, al
je 0x42177c
cmp al, 0x30
je 0x42177c
mov dword [ebp + 0x18], ecx
jmp 0x421780
and dword [ebp + 0x18], 0
mov ecx, dword [ebp - 0x18]
mov al, byte [ecx]
test al, al
je 0x421792
cmp al, 0x30
je 0x421792
mov dword [ebp - 0x24], ecx
jmp 0x421796
and dword [ebp - 0x24], 0
mov al, byte [edi]
test al, al
je 0x4217a4
cmp al, 0x30
je 0x4217a4
mov ebx, edi
jmp 0x4217a6
xor ebx, ebx
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
push eax
push dword [ebp + 0x14]
push dword [ebp + 0x18]
push dword [ebp - 0x24]
push ebx
jmp 0x421275
push 0x45dca4
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x42180c
push dword [ebp - 4]
call fcn.0040109c
pop ecx
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
push eax
push edi
push dword [ebp - 0x20]
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421365
push 0x45dc90
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
je 0x4216df
push 0x45dc80
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x42184a
mov eax, dword [ebp - 0x20]
mov dword [eax], 0x94
jmp 0x420ff6
push str.StrStrA
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
je 0x4216df
push str.lstrcpy
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
je 0x4216df
push str.lstrcpyn
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x4216f8
push str.lstrcat
lea eax, [ebp + 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
je 0x4216df
push str.lstrcmp
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
je 0x4216df
push str.lstrlen
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea eax, [ebp + 0x54c]
je 0x42151c
push 0x45dc40
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x421a18
test dword [ebp + 0x24], 0x800
mov esi, dword [ebp + 8]
je 0x421915
push esi
call fcn.0040109c
pop ecx
jmp 0x421918
mov eax, dword [ebp + 0xc]
test dword [ebp + 0x24], 0x400
mov dword [ebp + 0x14], eax
je 0x421930
push esi
call fcn.0040109c
pop ecx
mov dword [ebp + 0x18], eax
jmp 0x421933
mov dword [ebp + 0x18], esi
test dword [ebp + 0x24], 0x200
je 0x421947
push dword [ebp + 4]
call fcn.0040109c
pop ecx
jmp 0x42194a
mov eax, dword [ebp + 4]
test dword [ebp + 0x24], 0x100
mov dword [ebp - 0x24], eax
je 0x421961
push dword [ebp]
call fcn.0040109c
pop ecx
jmp 0x421964
mov eax, dword [ebp]
test byte [ebp + 0x24], 0x80
mov dword [ebp + 0x10], eax
je 0x421978
push dword [ebp - 4]
call fcn.0040109c
pop ecx
jmp 0x42197b
mov eax, dword [ebp - 4]
test byte [ebp + 0x24], 0x40
mov dword [ebp + 0x1c], eax
je 0x42198f
push dword [ebp - 8]
call fcn.0040109c
pop ecx
jmp 0x421992
mov eax, dword [ebp - 8]
test byte [ebp + 0x24], 0x20
mov dword [ebp + 0x20], eax
je 0x4219a6
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
jmp 0x4219a9
mov eax, dword [ebp - 0xc]
test byte [ebp + 0x24], 0x10
mov dword [ebp - 0x2c], eax
je 0x4219bf
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x4219c2
mov edi, dword [ebp - 0x10]
test byte [ebp + 0x24], 8
je 0x4219d5
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
mov esi, eax
jmp 0x4219d8
mov esi, dword [ebp - 0x14]
test byte [ebp + 0x24], 4
je 0x4219e9
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
jmp 0x4219ec
mov eax, dword [ebp - 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x18]
push dword [ebp - 0x24]
push dword [ebp + 0x10]
push dword [ebp + 0x1c]
push dword [ebp + 0x20]
push dword [ebp - 0x2c]
push edi
push esi
push eax
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x30
jmp 0x421367
mov eax, dword [ebp - 0x24]
xor ebx, ebx
cmp eax, ebx
jne 0x421a40
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
cmp dword [ebp + 0x5e0], ebx
je 0x4212e8
call eax
jmp 0x421365
cmp eax, 1
jne 0x421a87
cmp dword [ebp + 0x5e0], ebx
je 0x421a75
test byte [ebp + 0x24], al
je 0x421a5d
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x421a60
mov eax, dword [ebp - 0x20]
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
pop ecx
jmp 0x421365
test byte [ebp + 0x24], 1
jne 0x420fed
mov eax, dword [ebp - 0x20]
jmp 0x420ff6
cmp eax, 2
jne 0x421af0
cmp dword [ebp + 0x5e0], ebx
je 0x421ac9
test byte [ebp + 0x24], al
je 0x421aa2
push edi
call fcn.0040109c
pop ecx
mov edi, eax
test byte [ebp + 0x24], 1
je 0x421ab3
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x421ab6
mov eax, dword [ebp - 0x20]
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
pop ecx
jmp 0x421a6f
test byte [ebp + 0x24], 2
je 0x421ad8
push edi
call fcn.0040109c
pop ecx
mov edi, eax
test byte [ebp + 0x24], 1
je 0x4211ee
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x4211f5
cmp eax, 3
jne 0x421b93
cmp dword [ebp + 0x5e0], ebx
je 0x421b53
test byte [ebp + 0x24], 4
je 0x421b14
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x421b17
mov ebx, dword [ebp - 0x18]
test byte [ebp + 0x24], 2
je 0x421b26
push edi
call fcn.0040109c
pop ecx
mov edi, eax
test byte [ebp + 0x24], 1
je 0x421b37
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x421b3a
mov eax, dword [ebp - 0x20]
push ebx
push edi
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
add esp, 0xc
jmp 0x421365
test byte [ebp + 0x24], 4
je 0x421b66
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x421b69
mov ebx, dword [ebp - 0x18]
test byte [ebp + 0x24], 2
je 0x421b78
push edi
call fcn.0040109c
pop ecx
mov edi, eax
test byte [ebp + 0x24], 1
je 0x421b89
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x421b8c
mov eax, dword [ebp - 0x20]
push ebx
push edi
jmp 0x421035
cmp eax, 4
jne 0x421c78
cmp dword [ebp + 0x5e0], ebx
je 0x421c17
test byte [ebp + 0x24], 8
je 0x421bb5
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x421bb8
mov eax, dword [ebp - 0x14]
test byte [ebp + 0x24], 4
mov dword [ebp - 0x2c], eax
je 0x421bcc
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
jmp 0x421bcf
mov eax, dword [ebp - 0x18]
test byte [ebp + 0x24], 2
mov dword [ebp + 0x20], eax
je 0x421be3
push edi
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x421be5
mov ebx, edi
test byte [ebp + 0x24], 1
je 0x421bf6
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x421bf9
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push ebx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
add esp, 0x10
jmp 0x421365
test byte [ebp + 0x24], 8
je 0x421c28
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x421c2b
mov eax, dword [ebp - 0x14]
test byte [ebp + 0x24], 4
mov dword [ebp - 0x2c], eax
je 0x421c3f
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
jmp 0x421c42
mov eax, dword [ebp - 0x18]
test byte [ebp + 0x24], 2
mov dword [ebp + 0x20], eax
je 0x421c56
push edi
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x421c58
mov ebx, edi
test byte [ebp + 0x24], 1
je 0x421c69
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x421c6c
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push ebx
jmp 0x420e02
cmp eax, 5
jne 0x421d90
cmp dword [ebp + 0x5e0], ebx
mov bl, byte [ebp + 0x24]
je 0x421d19
test bl, 0x10
je 0x421ca0
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
jmp 0x421ca3
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
test bl, 8
je 0x421cb6
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x421cb9
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x20], eax
test bl, 4
je 0x421ccc
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
jmp 0x421ccf
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0x1c], eax
test bl, 2
je 0x421ce2
push edi
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x421ce4
mov ebx, edi
test byte [ebp + 0x24], 1
je 0x421cf5
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x421cf8
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push ebx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
add esp, 0x14
jmp 0x421365
test bl, 0x10
je 0x421d29
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
jmp 0x421d2c
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
test bl, 8
je 0x421d3f
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x421d42
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x20], eax
test bl, 4
je 0x421d55
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
jmp 0x421d58
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0x1c], eax
test bl, 2
je 0x421d6b
push edi
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x421d6d
mov ebx, edi
test byte [ebp + 0x24], 1
je 0x421d7e
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x421d81
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push ebx
jmp 0x420e4d
cmp eax, 6
jne 0x421eda
cmp dword [ebp + 0x5e0], ebx
mov bl, byte [ebp + 0x24]
je 0x421e4a
test bl, 0x20
je 0x421db8
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
jmp 0x421dbb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
test bl, 0x10
je 0x421dce
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
jmp 0x421dd1
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x20], eax
test bl, 8
je 0x421de4
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x421de7
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x1c], eax
test bl, 4
je 0x421dfa
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
jmp 0x421dfd
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0x10], eax
test bl, 2
je 0x421e10
push edi
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x421e12
mov ebx, edi
test byte [ebp + 0x24], 1
je 0x421e23
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x421e26
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
push ebx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
add esp, 0x18
jmp 0x421365
test bl, 0x20
je 0x421e5a
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
jmp 0x421e5d
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
test bl, 0x10
je 0x421e70
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
jmp 0x421e73
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x20], eax
test bl, 8
je 0x421e86
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x421e89
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x1c], eax
test bl, 4
je 0x421e9c
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
jmp 0x421e9f
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0x10], eax
test bl, 2
je 0x421eb2
push edi
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x421eb4
mov ebx, edi
test byte [ebp + 0x24], 1
je 0x421ec5
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x421ec8
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
push ebx
jmp 0x42127e
cmp eax, 7
jne 0x422056
cmp dword [ebp + 0x5e0], ebx
mov bl, byte [ebp + 0x24]
je 0x421fad
test bl, 0x40
je 0x421f02
push dword [ebp - 8]
call fcn.0040109c
pop ecx
jmp 0x421f05
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2c], eax
test bl, 0x20
je 0x421f18
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
jmp 0x421f1b
mov eax, dword [ebp - 0xc]
mov dword [ebp + 0x20], eax
test bl, 0x10
je 0x421f2e
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
jmp 0x421f31
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x1c], eax
test bl, 8
je 0x421f44
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x421f47
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x10], eax
test bl, 4
je 0x421f5a
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
jmp 0x421f5d
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0x14], eax
test bl, 2
je 0x421f70
push edi
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x421f72
mov ebx, edi
test byte [ebp + 0x24], 1
je 0x421f83
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x421f86
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
push dword [ebp + 0x14]
push ebx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
add esp, 0x1c
jmp 0x421365
test bl, 0x40
je 0x421fbd
push dword [ebp - 8]
call fcn.0040109c
pop ecx
jmp 0x421fc0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2c], eax
test bl, 0x20
je 0x421fd3
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
jmp 0x421fd6
mov eax, dword [ebp - 0xc]
mov dword [ebp + 0x20], eax
test bl, 0x10
je 0x421fe9
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
jmp 0x421fec
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x1c], eax
test bl, 8
je 0x421fff
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x422002
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x10], eax
test bl, 4
je 0x422015
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
jmp 0x422018
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0x14], eax
test bl, 2
je 0x42202b
push edi
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x42202d
mov ebx, edi
test byte [ebp + 0x24], 1
je 0x42203e
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x422041
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
push dword [ebp + 0x14]
push ebx
jmp 0x42112f
cmp eax, 8
jne 0x422203
cmp dword [ebp + 0x5e0], ebx
mov bl, byte [ebp + 0x24]
je 0x422141
test bl, bl
jns 0x42207d
push dword [ebp - 4]
call fcn.0040109c
pop ecx
jmp 0x422080
mov eax, dword [ebp - 4]
mov dword [ebp - 0x2c], eax
test bl, 0x40
je 0x422093
push dword [ebp - 8]
call fcn.0040109c
pop ecx
jmp 0x422096
mov eax, dword [ebp - 8]
mov dword [ebp + 0x20], eax
test bl, 0x20
je 0x4220a9
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
jmp 0x4220ac
mov eax, dword [ebp - 0xc]
mov dword [ebp + 0x1c], eax
test bl, 0x10
je 0x4220bf
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
jmp 0x4220c2
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x10], eax
test bl, 8
je 0x4220d5
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x4220d8
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x14], eax
test bl, 4
je 0x4220eb
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
jmp 0x4220ee
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0x18], eax
test bl, 2
je 0x422101
push edi
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x422103
mov ebx, edi
test byte [ebp + 0x24], 1
je 0x422114
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x422117
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
push dword [ebp + 0x14]
push dword [ebp + 0x18]
push ebx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
add esp, 0x20
jmp 0x421365
test bl, bl
jns 0x422150
push dword [ebp - 4]
call fcn.0040109c
pop ecx
jmp 0x422153
mov eax, dword [ebp - 4]
mov dword [ebp - 0x2c], eax
test bl, 0x40
je 0x422166
push dword [ebp - 8]
call fcn.0040109c
pop ecx
jmp 0x422169
mov eax, dword [ebp - 8]
mov dword [ebp + 0x20], eax
test bl, 0x20
je 0x42217c
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
jmp 0x42217f
mov eax, dword [ebp - 0xc]
mov dword [ebp + 0x1c], eax
test bl, 0x10
je 0x422192
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
jmp 0x422195
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x10], eax
test bl, 8
je 0x4221a8
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x4221ab
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x14], eax
test bl, 4
je 0x4221be
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
jmp 0x4221c1
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0x18], eax
test bl, 2
je 0x4221d4
push edi
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x4221d6
mov ebx, edi
test byte [ebp + 0x24], 1
je 0x4221e7
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x4221ea
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
push dword [ebp + 0x14]
push dword [ebp + 0x18]
push ebx
push eax
jmp 0x4217f9
cmp eax, 9
jne 0x4223f6
cmp dword [ebp + 0x5e0], ebx
mov ebx, dword [ebp + 0x24]
je 0x42230a
test ebx, 0x100
je 0x42222e
push dword [ebp]
call fcn.0040109c
pop ecx
jmp 0x422231
mov eax, dword [ebp]
mov dword [ebp - 0x2c], eax
test bl, bl
jns 0x422243
push dword [ebp - 4]
call fcn.0040109c
pop ecx
jmp 0x422246
mov eax, dword [ebp - 4]
mov dword [ebp + 0x20], eax
test bl, 0x40
je 0x422259
push dword [ebp - 8]
call fcn.0040109c
pop ecx
jmp 0x42225c
mov eax, dword [ebp - 8]
mov dword [ebp + 0x1c], eax
test bl, 0x20
je 0x42226f
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
jmp 0x422272
mov eax, dword [ebp - 0xc]
mov dword [ebp + 0x10], eax
test bl, 0x10
je 0x422285
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
jmp 0x422288
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x14], eax
test bl, 8
je 0x42229b
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x42229e
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x18], eax
test bl, 4
je 0x4222b1
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
jmp 0x4222b4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
test bl, 2
je 0x4222c7
push edi
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x4222c9
mov ebx, edi
test byte [ebp + 0x24], 1
je 0x4222da
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x4222dd
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
push dword [ebp + 0x14]
push dword [ebp + 0x18]
push dword [ebp - 0x24]
push ebx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
add esp, 0x24
jmp 0x421365
test ebx, 0x100
je 0x42231d
push dword [ebp]
call fcn.0040109c
pop ecx
jmp 0x422320
mov eax, dword [ebp]
mov dword [ebp - 0x2c], eax
test bl, bl
jns 0x422332
push dword [ebp - 4]
call fcn.0040109c
pop ecx
jmp 0x422335
mov eax, dword [ebp - 4]
mov dword [ebp + 0x20], eax
test bl, 0x40
je 0x422348
push dword [ebp - 8]
call fcn.0040109c
pop ecx
jmp 0x42234b
mov eax, dword [ebp - 8]
mov dword [ebp + 0x1c], eax
test bl, 0x20
je 0x42235e
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
jmp 0x422361
mov eax, dword [ebp - 0xc]
mov dword [ebp + 0x10], eax
test bl, 0x10
je 0x422374
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
jmp 0x422377
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x14], eax
test bl, 8
je 0x42238a
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x42238d
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x18], eax
test bl, 4
je 0x4223a2
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x4223a5
mov edi, dword [ebp - 0x18]
test bl, 2
je 0x4223b7
push dword [ebp - 0x1c]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x4223ba
mov ebx, dword [ebp - 0x1c]
test byte [ebp + 0x24], 1
je 0x4223cb
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x4223ce
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
push dword [ebp + 0x14]
push dword [ebp + 0x18]
push edi
push ebx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421365
cmp eax, 0xa
jne 0x422621
cmp dword [ebp + 0x5e0], ebx
mov ebx, dword [ebp + 0x24]
je 0x422519
test ebx, 0x200
je 0x422421
push dword [ebp + 4]
call fcn.0040109c
pop ecx
jmp 0x422424
mov eax, dword [ebp + 4]
mov dword [ebp - 0x2c], eax
test ebx, 0x100
je 0x42243a
push dword [ebp]
call fcn.0040109c
pop ecx
jmp 0x42243d
mov eax, dword [ebp]
mov dword [ebp + 0x20], eax
test bl, bl
jns 0x42244f
push dword [ebp - 4]
call fcn.0040109c
pop ecx
jmp 0x422452
mov eax, dword [ebp - 4]
mov dword [ebp + 0x1c], eax
test bl, 0x40
je 0x422465
push dword [ebp - 8]
call fcn.0040109c
pop ecx
jmp 0x422468
mov eax, dword [ebp - 8]
mov dword [ebp + 0x10], eax
test bl, 0x20
je 0x42247b
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
jmp 0x42247e
mov eax, dword [ebp - 0xc]
mov dword [ebp + 0x14], eax
test bl, 0x10
je 0x422491
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
jmp 0x422494
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x18], eax
test bl, 8
je 0x4224a7
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x4224aa
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
test bl, 4
je 0x4224bf
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x4224c2
mov edi, dword [ebp - 0x18]
test bl, 2
je 0x4224d4
push dword [ebp - 0x1c]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x4224d7
mov ebx, dword [ebp - 0x1c]
test byte [ebp + 0x24], 1
je 0x4224e8
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x4224eb
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
push dword [ebp + 0x14]
push dword [ebp + 0x18]
push dword [ebp - 0x24]
push edi
push ebx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
add esp, 0x28
jmp 0x421365
test ebx, 0x200
je 0x42252c
push dword [ebp + 4]
call fcn.0040109c
pop ecx
jmp 0x42252f
mov eax, dword [ebp + 4]
mov dword [ebp - 0x2c], eax
test ebx, 0x100
je 0x422545
push dword [ebp]
call fcn.0040109c
pop ecx
jmp 0x422548
mov eax, dword [ebp]
mov dword [ebp + 0x20], eax
test bl, bl
jns 0x42255a
push dword [ebp - 4]
call fcn.0040109c
pop ecx
jmp 0x42255d
mov eax, dword [ebp - 4]
mov dword [ebp + 0x1c], eax
test bl, 0x40
je 0x422570
push dword [ebp - 8]
call fcn.0040109c
pop ecx
jmp 0x422573
mov eax, dword [ebp - 8]
mov dword [ebp + 0x10], eax
test bl, 0x20
je 0x422586
push dword [ebp - 0xc]
call fcn.0040109c
pop ecx
jmp 0x422589
mov eax, dword [ebp - 0xc]
mov dword [ebp + 0x14], eax
test bl, 0x10
je 0x42259c
push dword [ebp - 0x10]
call fcn.0040109c
pop ecx
jmp 0x42259f
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x18], eax
test bl, 8
je 0x4225b2
push dword [ebp - 0x14]
call fcn.0040109c
pop ecx
jmp 0x4225b5
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
test bl, 4
je 0x4225ca
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
mov edi, eax
jmp 0x4225cd
mov edi, dword [ebp - 0x18]
test bl, 2
je 0x4225df
push dword [ebp - 0x1c]
call fcn.0040109c
pop ecx
mov ebx, eax
jmp 0x4225e2
mov ebx, dword [ebp - 0x1c]
test byte [ebp + 0x24], 1
je 0x4225f3
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
jmp 0x4225f6
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x10]
push dword [ebp + 0x14]
push dword [ebp + 0x18]
push dword [ebp - 0x24]
push edi
push ebx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
jmp 0x421365
push eax
push str.Parameter_count_incorrect___d_
push dword [0x473bbc]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
xor esi, esi
mov eax, dword [ebp + esi*4 - 0x20]
cmp eax, ebx
je 0x422647
push eax
call fcn.00445e06
pop ecx
inc esi
cmp esi, 0xc
jl 0x422638
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x4209f0
push dword [ebp - 0x18]
or dword [ebp + 0x24], 0xd
call fcn.0040109c
mov edi, 0xfffff
cmp eax, edi
pop ecx
jle 0x422675
mov eax, edi
jmp 0x42267e
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
push 0
push dword [ebp - 0x14]
push eax
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.0040109c
pop ecx
push eax
lea eax, [ebp + 0x54c]
push eax
push dword [ebp + 0x28]
call esi
call eax
push dword [ebp - 0x18]
mov ebx, eax
call fcn.0040109c
cmp eax, edi
pop ecx
jle 0x4226b2
mov eax, edi
jmp 0x4226bb
push dword [ebp - 0x18]
call fcn.0040109c
pop ecx
mov ecx, dword [ebp - 0x1c]
mov byte [eax + ecx], 0
jmp 0x421367
or dword [ebp + 0x24], 0xd
push 0
push dword [ebp - 0x14]
jmp 0x4214a3
mov edi, str.GetVersionEx
push edi
call esi
push eax
lea eax, [ebp + 0x54c]
push edi
push eax
call fcn.00448060
add esp, 0xc
test eax, eax
jne 0x42274b
xor esi, esi
push 0x90
lea eax, [ebp + 0x30]
push esi
push eax
mov dword [ebp + 0x2c], esi
call fcn.004464f0
add esp, 0xc
cmp dword [ebp - 0x20], esi
je 0x422722
push 0x94
push dword [ebp - 0x20]
lea eax, [ebp + 0x2c]
push eax
call fcn.00445ea0
add esp, 0xc
lea eax, [ebp + 0x40]
push eax
push dword [ebp + 0x3c]
push dword [ebp + 0x38]
push dword [ebp + 0x34]
push dword [ebp + 0x30]
push dword [ebp + 0x2c]
push str._lu__lu__lu__lu__lu__s
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
jmp 0x422801
mov edi, str.GetWindowPlacement
push edi
call esi
push eax
lea eax, [ebp + 0x54c]
push edi
push eax
call fcn.00448060
add esp, 0xc
test eax, eax
jne 0x422801
and dword [ebp - 0x64], eax
push 0xa
pop ecx
lea edi, [ebp - 0x60]
rep stosd dword es:[edi], eax
cmp dword [ebp - 0x1c], eax
je 0x42278d
push 0x2c
push dword [ebp - 0x1c]
lea eax, [ebp - 0x64]
push eax
call fcn.00445ea0
add esp, 0xc
sub esp, 0x10
mov edi, esp
push dword [ebp - 0x4c]
lea esi, [ebp - 0x48]
push dword [ebp - 0x50]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x54]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x58]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
push str._d__d__d__d__d__d
push dword [ebp - 0x1c]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x34
jmp 0x422801
and dword [ebp - 0x38], 0
xor eax, eax
cmp dword [ebp - 0x1c], 0
lea edi, [ebp - 0x34]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
je 0x4227e4
push 0x10
push dword [ebp - 0x1c]
lea eax, [ebp - 0x38]
push eax
call fcn.00445ea0
add esp, 0xc
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push str._d__d__d__d
push dword [ebp - 0x1c]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp dword [ebp + 0x5e4], 1
jne 0x4228ef
xor esi, esi
mov ecx, esi
shl ecx, 5
lea eax, [ebp + ecx + 0xc0]
mov dl, byte [eax]
test dl, dl
je 0x4228b4
cmp dl, 0x25
jne 0x422832
lea eax, [ebp + ecx + 0xc1]
push eax
lea eax, [ebp + 0x240]
push str.SOFTWARE_vTaskUserVariables_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
xor eax, eax
add esp, 0xc
inc eax
test esi, esi
je 0x422853
mov ecx, esi
shl eax, cl
mov ecx, dword [ebp + 0x24]
test ecx, eax
jne 0x422868
mov edi, dword [ebp + esi*4 - 0x20]
mov al, byte [edi]
cmp al, 0x20
jl 0x422868
cmp al, 0x7f
jle 0x4228a2
mov edi, dword [ebp + esi*4 - 0x20]
push 4
lea eax, [ebp - 0x28]
push edi
push eax
call fcn.00445ea0
push dword [ebp - 0x28]
lea eax, [ebp + 0x344]
push 0x45aac0
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
test edi, edi
je 0x4228a2
lea eax, [ebp + 0x344]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp + 0x240]
push eax
push 0
push edi
call fcn.00444117
add esp, 0xc
lea edi, [esi + 1]
push edi
lea eax, [ebp + 0x344]
push str.parameter_d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push dword [ebp + esi*4 - 0x20]
lea eax, [ebp + 0x344]
push eax
push str.SOFTWARE_vTaskUserVariables
push 0
call fcn.0041e956
mov esi, edi
add esp, 0x1c
cmp esi, 0xc
jl 0x422810
xor edi, edi
lea esi, [ebp + edi*4 - 0x20]
mov eax, dword [esi]
test eax, eax
je 0x422905
push eax
call fcn.00445e06
and dword [esi], 0
pop ecx
inc edi
cmp edi, 0xc
jl 0x4228f1
mov eax, ebx
jmp 0x4209f5