Function at 0x4309f0
Capabilities:
Check for time delay via gettickcount
Empty the recycle bin
Find taskbar
Move file
Print debug messages
Resolve function by parsing pe exports
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x4acb3b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x968
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
mov dword [esp + 0x94], ecx
test eax, eax
jne 0x430a29
lea eax, [esp + 0x84]
mov ebx, dword [0x4d5b14]
mov edx, eax
mov esi, ecx
mov dword [esp + 0x40], eax
mov dword [edx], 0
mov dword [esp + 0x48], ebx
mov dword [esp + 0x10], esi
test ecx, ecx
je case.0x430d88.116
mov edi, dword [esp + 0x84]
cmp dword [0x4db290], 0
je 0x430a8e
cmp dword [0x4db280], 0
je 0x430a7c
mov eax, dword [0x4db278]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4db280], 0
call dword [sym.imp.USER32.dll_CloseClipboard]
xor eax, eax
mov dword [0x4db290], eax
mov dword [0x4db278], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x4d5b14]
mov ecx, eax
sub ecx, dword [0x4db234]
cmp ecx, dword [edx + 0xd8]
jbe 0x430adb
push 0
push 0
push 0
push 0
lea eax, [esp + 0x134]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x430ad0
push 1
push 0xffffffffffffffff
call fcn.004014c0
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4db234], eax
cmp byte [ebx + 0xec], 0
jne 0x430b0c
cmp byte [ebx + 0xee], 0
jne 0x430b0c
mov edx, dword [0x4db228]
cmp edx, 0xffffffff
jle 0x430b0c
mov ecx, dword [ebx + 0x28]
cmp ecx, edx
jle 0x430b08
mov byte [ebx + 0xec], 1
jmp 0x430b0c
inc ecx
mov dword [ebx + 0x28], ecx
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
cmp ecx, 0xffffffff
jl 0x430b2f
jg 0x430b1d
cmp edx, 0xffffffff
jbe 0x430b2f
cmp dword [0x4db224], ecx
jg 0x430b41
jl 0x430b2f
cmp dword [0x4db220], edx
jae 0x430b41
mov ecx, dword [ebx + 0x24]
cmp ecx, 0xffffffff
jle 0x430b4d
sub eax, dword [0x4db230]
cmp eax, ecx
jb 0x430b4d
push 1
push 0xa
call fcn.004014c0
add esp, 8
cmp byte [ebx + 0xf8], 0
je 0x430b78
jmp 0x430b60
push 1
push 0x8000012f
call fcn.004014c0
add esp, 8
cmp byte [ebx + 0xf8], 0
jne 0x430b60
mov dword [0x4dad5c], esi
cmp byte [ebx + 0xf9], 0
je 0x430bc0
mov ecx, dword [0x4da628]
mov dword [ecx*4 + 0x4d9fe8], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x4da628]
mov dword [ecx*4 + 0x4d9008], eax
inc ecx
mov dword [0x4da628], ecx
cmp ecx, 0x190
jl 0x430bc0
mov dword [0x4da628], 0
cmp dword [0x4da6b0], 0xffffffff
je 0x430bd5
cmp byte [esi], 0x6b
je 0x430bd5
mov ecx, esi
call fcn.00406023
mov al, byte [esi]
cmp al, 1
je 0x430bfe
cmp al, 0x6b
je 0x430bfe
cmp al, 0x72
je 0x430bfe
mov ebx, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push ebx
push esi
call fcn.00466130
mov edi, eax
cmp edi, 1
jne 0x435021
jmp 0x430c01
mov ebx, dword [ebp + 0xc]
mov dl, byte [esi]
mov byte [esp + 0xdc], dl
cmp dl, 9
jb 0x430d70
cmp dl, 0x20
ja 0x430d70
add dword [0x4db220], 1
push esi
adc dword [0x4db224], 0
call fcn.00435990
cmp eax, 3
jne 0x430cc5
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x75
jne 0x430c60
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x24]
push edx
push ebx
push 2
call fcn.004309f0
mov ecx, dword [esi + 0x14]
mov edi, eax
mov eax, dword [esp + 0x24]
cmp eax, ecx
je 0x430c41
jmp 0x430c73
lea eax, [esp + 0x24]
push eax
push ebx
push 3
call fcn.004309f0
mov edi, eax
mov eax, dword [esp + 0x24]
cmp eax, esi
je 0x431eca
cmp dword [ebp + 8], 3
je 0x43501b
cmp edi, 1
jne 0x43501b
test eax, eax
je 0x430ca7
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x431b0c
mov dword [esp + 0x10], eax
jmp 0x431ec6
mov esi, dword [esi + 0x18]
cmp byte [esi], 0x21
mov dword [esp + 0x10], esi
jne 0x431ec6
mov edx, esi
mov eax, dword [edx + 0x18]
mov dword [esp + 0x10], eax
jmp 0x431ec6
mov esi, dword [esi + 0x18]
cmp byte [esi], 0x21
mov dword [esp + 0x10], esi
jne 0x430d4a
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x75
jne 0x430cff
lea esp, [esp]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x24]
push edx
push ebx
push 2
call fcn.004309f0
mov ecx, dword [esi + 0x14]
mov edi, eax
mov eax, dword [esp + 0x24]
cmp eax, ecx
je 0x430ce0
jmp 0x430d12
lea eax, [esp + 0x24]
push eax
push ebx
push 3
call fcn.004309f0
mov edi, eax
mov eax, dword [esp + 0x24]
cmp dword [ebp + 8], 3
je 0x43501b
cmp edi, 1
jne 0x43501b
test eax, eax
je 0x430d3e
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x431b0c
mov dword [esp + 0x10], eax
jmp 0x431ec6
mov edx, dword [esi + 0x18]
mov dword [esp + 0x10], edx
jmp 0x431ec6
cmp dword [ebp + 8], 3
jne 0x431ec6
mov eax, 1
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
movzx eax, dl
add eax, 0xffffffa0
cmp eax, 0x80
ja case.0x430d88.98
movzx eax, byte [eax + 0x4354a0]
jmp dword [eax*4 + 0x43545c]
mov ecx, 1
add dword [0x4db220], ecx
adc dword [0x4db224], 0
mov eax, dword [esi + 0x18]
test eax, eax
je 0x430e22
xor ebx, ebx
cmp dword [esi + 0xc], ecx
mov edx, eax
sete bl
mov dword [esp + 0x60], edx
test ebx, ebx
je 0x430dd4
mov eax, dword [esp + 0x48]
mov ecx, dword [eax + 0xb4]
mov dword [eax + 0xb8], ecx
mov dword [eax + 0xb4], 0
mov ecx, edx
call fcn.00401300
mov edi, eax
test ebx, ebx
je 0x430dfb
mov eax, dword [esp + 0x48]
mov edx, dword [eax + 0xb8]
mov dword [eax + 0xb4], edx
mov dword [eax + 0xb8], 0
test edi, edi
je 0x435021
cmp edi, 8
je 0x435021
cmp dword [ebp + 8], 3
je 0x43503a
mov eax, dword [esi + 0x14]
mov dword [esp + 0x10], eax
jmp 0x431ec6
push esi
mov bl, cl
call fcn.0044df90
mov edx, eax
mov dword [esp + 0x60], edx
test edx, edx
je 0x435369
mov ecx, dword [esp + 0x48]
cmp dword [ecx + 0xb4], 0
je 0x430e5b
mov eax, dword [edx + 8]
call fcn.0044e050
test eax, eax
je 0x430e5b
mov ebx, 1
jmp 0x430dba
xor ebx, ebx
jmp 0x430dd4
add dword [0x4db220], 1
adc dword [0x4db224], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x60], eax
test eax, eax
jne 0x430e8f
push esi
mov bl, 1
call fcn.0044df90
mov dword [esp + 0x60], eax
test eax, eax
je 0x435369
cmp dword [ebp + 8], 3
mov ecx, dword [esp + 0x48]
mov dword [ecx + 0xbc], eax
je 0x430eae
mov ecx, dword [eax + 8]
mov edx, dword [esi + 0x1c]
cmp edx, dword [ecx + 0x1c]
je 0x431ec2
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x40]
mov dword [eax], edx
jmp case.0x430d88.116
add dword [0x4db220], 1
mov eax, dword [esp + 0x94]
adc dword [0x4db224], 0
mov ebx, dword [eax + 0xc]
test ebx, ebx
jne 0x430f0a
mov eax, dword [0x4d9698]
mov edi, eax
cmp word [eax], bx
je 0x430f08
mov ebx, dword [0x4da760]
test ebx, ebx
je 0x430f08
mov edi, edi
mov ecx, dword [ebx + 4]
push edi
push ecx
call fcn.00499c29
add esp, 8
test eax, eax
je 0x430f0a
mov ebx, dword [ebx + 0x14]
test ebx, ebx
jne 0x430ef0
xor ebx, ebx
xor eax, eax
mov edi, 1
test ebx, ebx
je 0x431011
mov eax, dword [0x4d969c]
cmp word [eax], 0
je 0x430f3a
push 0x4b4138
push eax
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x430f3a
mov al, 1
jmp 0x430f3c
xor al, al
lea edx, [esp + 0x60]
push edx
push eax
push ebx
call fcn.004863a0
mov edx, dword [esp + 0x60]
mov dword [esp + 0x3c], eax
test edx, edx
je 0x43100d
mov eax, dword [edx + 8]
mov edi, dword [eax + 0x1c]
test edi, edi
je 0x430fa7
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x430f7b
lea esp, [esp]
cmp edi, ecx
je 0x430fa7
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x430f70
push 0x4b0cf8
push 0
push 0x4bc1c8
mov ecx, esi
call fcn.0043a140
xor eax, eax
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [esp + 0x48]
mov edi, dword [ebx + 0xb4]
test edi, edi
je 0x43102b
call fcn.0044e050
test eax, eax
je 0x43102b
mov dword [esp + 0x1c], 1
mov dword [ebx + 0xb8], edi
mov dword [ebx + 0xb4], 0
mov ecx, edx
call fcn.00401300
cmp dword [esp + 0x1c], 0
mov edi, eax
je 0x430ffc
mov eax, dword [ebx + 0xb8]
mov dword [ebx + 0xb4], eax
mov dword [ebx + 0xb8], 0
test edi, edi
je 0x435021
cmp edi, 8
je 0x435021
mov eax, dword [esp + 0x3c]
mov ebx, dword [esp + 0x94]
test eax, eax
sete cl
movzx edx, cl
push edx
call fcn.00439dd0
jmp 0x430e0c
mov dword [esp + 0x1c], 0
jmp 0x430fd6
mov eax, dword [esi + 0xc]
mov dword [esp + 0x18], eax
dec eax
je 0x43108a
sub eax, 3
je 0x43106c
sub eax, 5
jne 0x431126
mov ecx, dword [0x4d969c]
push eax
push eax
push ecx
mov eax, 1
call fcn.0041afd0
add esp, 0xc
mov dword [esp + 0x64], eax
jmp 0x431126
mov edx, dword [0x4d9698]
push 0
push 0
push edx
xor eax, eax
call fcn.0041afd0
add esp, 0xc
mov dword [esp + 0x64], eax
jmp 0x431126
movzx eax, byte [esi + 1]
sub eax, 0
je 0x43111e
dec eax
mov eax, dword [0x4d9698]
je 0x4310e4
push 0x4b77a0
push eax
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x4310bb
mov dword [esp + 0x18], 5
jmp 0x431126
mov ecx, dword [0x4d9698]
push 0
push 0
push ecx
xor eax, eax
call fcn.0041afd0
xor edx, edx
add esp, 0xc
test eax, eax
setne dl
mov dword [esp + 0x64], eax
add edx, 3
mov dword [esp + 0x18], edx
jmp 0x431126
push 0
push 1
push 1
push 1
call fcn.0047fe10
add esp, 0x10
test eax, eax
jne 0x43111e
push eax
push eax
mov eax, dword [0x4d9698]
push eax
xor eax, eax
call fcn.0041afd0
xor ecx, ecx
add esp, 0xc
test eax, eax
setne cl
mov dword [esp + 0x64], eax
add ecx, 3
mov dword [esp + 0x18], ecx
jmp 0x431126
mov dword [esp + 0x18], 2
mov ecx, dword [esp + 0x18]
lea eax, [ecx - 3]
cmp eax, 7
ja case.0x43113d.5
movzx edx, byte [eax + 0x435530]
jmp dword [edx*4 + 0x435524]
mov esi, dword [0x4d969c]
call fcn.0041cea0
mov dword [esp + 0x54], eax
test eax, eax
je 0x43513b
mov eax, dword [0x4d96a0]
cmp word [eax], 0x31
jne 0x43117b
cmp word [eax + 2], 0
jne 0x43117b
mov esi, dword [esp + 0x10]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0x5c], 1
jmp case.0x43113d.5
mov esi, dword [esp + 0x10]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0x5c], 0
jmp case.0x43113d.5
cmp ecx, 4
jne 0x4311cb
mov esi, dword [0x4d96a0]
call fcn.0041cea0
mov dword [esp + 0x54], eax
mov eax, dword [0x4d96a4]
cmp word [eax], 0x31
jne 0x4311bd
cmp word [eax + 2], 0
jne 0x4311bd
mov esi, dword [esp + 0x10]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0x5c], 1
jmp 0x4311e9
mov esi, dword [esp + 0x10]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0x5c], 0
jmp 0x4311e9
mov eax, dword [0x4d96a0]
call fcn.0041cef0
mov dword [esp + 0x54], eax
shr eax, 2
and al, 1
mov byte [esp + 0x5c], al
je 0x4311e9
and dword [esp + 0x54], 0xfffffffb
cmp dword [esp + 0x54], 0
je 0x435169
xor edx, edx
mov byte [esp + 0x23], 0
mov dword [esp + 0x24], edx
mov eax, dword [esi + 0x18]
cmp byte [eax], 0x6c
mov dword [esp + 0x1c], eax
jne 0x431218
mov dword [esp + 0x14], eax
mov eax, dword [eax + 0x14]
mov dword [esp + 0x1c], eax
jmp 0x43121c
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x48]
mov ecx, dword [eax + 8]
mov dword [esp + 0xb0], ecx
mov ecx, dword [eax + 0xc]
mov dword [esp + 0xb4], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x3c], ecx
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x44], ecx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x78], ecx
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x18]
cmp ecx, 8
je 0x431263
mov dword [eax + 8], 1
mov dword [eax + 0xc], edx
lea eax, [ecx - 2]
cmp eax, 8
ja case.default.0x43126f
jmp dword [eax*4 + 0x435538]
cmp byte [esi + 1], dl
jbe 0x431291
xor edi, edi
mov ecx, esi
call fcn.0042cc50
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0xac], 0
jmp 0x43129d
xor eax, eax
xor edx, edx
mov byte [esp + 0xac], 1
mov ecx, dword [esp + 0xac]
push ecx
push edx
mov edx, dword [esp + 0x1c]
push eax
push edx
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x37]
push ecx
push ebx
mov edi, esi
call fcn.00437070
mov edi, eax
jmp case.default.0x43126f
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x27]
push eax
push ebx
mov edi, esi
call fcn.004371e0
mov edi, eax
jmp case.default.0x43126f
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x2b]
push eax
push ebx
push esi
call fcn.004373e0
mov edi, eax
jmp case.default.0x43126f
mov ecx, dword [0x4d96a0]
push 0x4b97e4
push ecx
call fcn.00499c29
mov edx, dword [esp + 0x1c]
add esp, 8
push edx
test eax, eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x2b]
push ecx
push ebx
push esi
je 0x431330
call fcn.00438330
mov edi, eax
jmp case.default.0x43126f
call fcn.00438630
mov edi, eax
jmp case.default.0x43126f
lea esi, [esp + 0xec]
call fcn.00404140
mov dword [esp + 0x97c], 0
mov edx, dword [0x4d969c]
cmp word [edx], 0
je 0x4313ab
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 0xfc]
and eax, 0x7fffffff
push 0x30c
mov ecx, esi
call fcn.0047da40
test al, al
je 0x4313ab
mov ecx, dword [0x4d96a0]
mov ebx, dword [esp + 0x10]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x28]
push edx
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x2b]
push eax
push ecx
mov ecx, esi
call fcn.00438940
mov edi, eax
call fcn.0041d4c0
jmp 0x4313b0
mov edi, 1
lea ecx, [esp + 0xec]
mov dword [esp + 0x97c], 0xffffffff
call fcn.00404190
mov esi, dword [esp + 0x10]
jmp case.default.0x43126f
cmp dword [esp + 0x18], 3
mov eax, dword [0x4d9698]
je 0x4313e1
mov eax, dword [0x4d969c]
mov edx, dword [esp + 0x5c]
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x58]
push edx
push eax
push ecx
lea edx, [esp + 0x34]
push edx
lea eax, [esp + 0x37]
push eax
push ebx
mov ecx, esi
call fcn.00437890
mov edi, eax
jmp case.default.0x43126f
cmp dword [esp + 0x18], 4
lea ecx, [esp + 0x53]
push ecx
jne 0x431438
mov edx, dword [0x4d9698]
push 0
push edx
xor eax, eax
call fcn.0041afd0
mov dword [esp + 0x34], eax
mov eax, dword [0x4d969c]
mov dword [esp + 0x9c], eax
jmp 0x431454
mov eax, dword [0x4d969c]
lea edx, [esp + 0x94]
push edx
push eax
mov eax, 1
call fcn.0041afd0
mov dword [esp + 0x34], eax
add esp, 0xc
cmp dword [esp + 0x28], 0
je 0x4314a7
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x64]
push ecx
mov ecx, dword [esp + 0x60]
push edx
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x20]
push ecx
push edx
push eax
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x3f]
push edx
push ebx
mov ecx, esi
call fcn.00437f20
cmp byte [esp + 0x53], 0
mov edi, eax
je case.default.0x43126f
mov eax, dword [esp + 0x28]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x43126f
mov edi, 1
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x44]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0x14], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], edx
test edi, edi
je 0x435021
cmp edi, 7
je 0x435021
cmp edi, 8
je 0x435021
cmp byte [esp + 0x23], 0
jne 0x431eca
mov eax, dword [esp + 0x24]
test eax, eax
je 0x431524
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x43501b
mov dword [esp + 0x10], eax
mov esi, eax
jmp 0x431eca
cmp dword [ebp + 8], 3
je case.0x430d88.116
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x10], edx
jmp 0x431ec6
mov ecx, dword [esp + 0x48]
mov eax, dword [ecx + 0x100]
mov dword [esp + 0x78], eax
cmp dl, 0x70
jne 0x431594
mov ebx, dword [0x4d9648]
mov eax, dword [ecx + 0x104]
mov dword [esp + 0x30], eax
mov dword [ecx + 0x104], 0
test ebx, ebx
je 0x431575
call fcn.00482c40
mov edi, eax
jmp 0x43157a
mov edi, 1
lea esi, [esp + 0x30]
call fcn.0043a930
test edi, edi
je 0x435369
mov esi, dword [esp + 0x10]
mov ebx, dword [ebp + 0xc]
jmp 0x4315ae
or eax, 1
mov dword [ecx + 0x100], eax
mov edx, dword [esi + 0x18]
cmp byte [edx], 0x71
je 0x4315ae
or eax, 2
mov dword [ecx + 0x100], eax
mov dword [esp + 0x24], 0
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x75
jne 0x4315df
mov edi, edi
mov ecx, dword [ecx + 0x14]
lea eax, [esp + 0x24]
push eax
push ebx
push 2
call fcn.004309f0
mov ecx, dword [esi + 0x14]
mov edx, dword [esp + 0x24]
mov edi, eax
cmp edx, ecx
je 0x4315c0
jmp 0x4315f2
lea edx, [esp + 0x24]
push edx
push ebx
push 3
call fcn.004309f0
mov edx, dword [esp + 0x24]
mov edi, eax
mov al, byte [esp + 0xdc]
mov esi, dword [esi + 0x18]
mov dword [esp + 0x10], esi
cmp al, 0x6f
jne 0x431662
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x48]
mov dword [ebx + 0x100], eax
xor al, al
cmp byte [esi], 0x70
jne 0x431633
cmp dword [ebx + 0x104], 0
mov al, 1
jne 0x431ec6
mov ecx, esi
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x10], ecx
mov esi, ecx
cmp byte [esi], 0x71
je 0x431677
test al, al
jne 0x431735
cmp dword [ebx + 0x104], 0
lea esi, [ebx + 0x104]
je 0x431735
call fcn.0043a930
mov edi, 1
jmp 0x431731
cmp al, 0x70
jne 0x431735
cmp byte [esi], 0x71
jne 0x431735
mov ebx, dword [esp + 0x48]
cmp edi, 1
jne 0x431688
test edx, edx
je 0x431ec6
mov esi, dword [esp + 0x10]
mov ecx, dword [0x4da638]
mov edx, dword [ebx + 0x104]
mov dword [esp + 0x44], ecx
xor eax, eax
lea ecx, [esp + 0xc4]
push ecx
mov dword [esp + 0x20], edx
mov edx, dword [0x4da63c]
push eax
push 3
mov ecx, esi
mov dword [ebx + 0x104], eax
mov dword [esp + 0x3c], edx
mov dword [0x4da638], eax
mov dword [0x4da63c], eax
call fcn.004309f0
cmp dword [esp + 0x44], 0
mov dword [esp + 0x3c], eax
je 0x43170c
mov eax, dword [0x4da638]
test eax, eax
je 0x4316f9
push eax
call fcn.0049a18d
add esp, 4
cmp dword [0x4da63c], 0x400000
jbe 0x4316f9
dec dword [0x4da640]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x30]
mov dword [0x4da638], edx
mov dword [0x4da63c], eax
mov eax, dword [esp + 0x3c]
cmp eax, 1
jne 0x435195
cmp dword [esp + 0xc4], 0
jne 0x435195
mov ecx, dword [esp + 0x1c]
mov dword [ebx + 0x104], ecx
mov edx, dword [esp + 0x24]
cmp dword [ebp + 8], 3
je 0x4351e8
cmp edi, 1
jne 0x4351e8
test edx, edx
je 0x431ec6
mov eax, dword [edx + 0x1c]
mov ecx, dword [esp + 0x10]
cmp eax, dword [ecx + 0x1c]
jne 0x430eb1
mov dword [esp + 0x10], edx
jmp 0x431ec6
mov edx, dword [esi + 0x14]
mov dword [esp + 0x10], edx
jmp 0x431ec6
mov ebx, dword [0x4da638]
mov ecx, dword [0x4da63c]
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], ecx
mov dword [0x4da638], eax
mov dword [0x4da63c], eax
mov dword [esp + 0xa4], eax
cmp dword [esi + 0xc], eax
jne 0x4317b5
mov dword [esp + 0xa0], 0x44
lea edi, [eax + 1]
jmp 0x431811
push 5
lea edx, [esp + 0x1c]
push edx
push 0
push esi
lea ebx, [esp + 0x24]
lea esi, [esp + 0xa8]
call fcn.00465b80
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x10]
mov edi, eax
cmp edi, 1
jne 0x431a81
cmp dword [esp + 0xa0], 5
jne 0x431811
cmp dword [esp + 0x98], ebx
jne 0x431811
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa4], ebx
xor ebx, ebx
mov dword [esp + 0xd4], eax
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], ebx
mov ecx, dword [esi + 0x14]
mov eax, dword [ecx + 0x14]
cmp byte [eax], 0x74
mov dword [esp + 0x28], eax
jne 0x431a2f
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x3c], eax
test eax, eax
jne 0x43183f
mov edx, dword [ecx + 0x14]
mov dword [esp + 0x1c], edx
jmp 0x431a11
mov dword [esp + 0x44], 0
test eax, eax
jle 0x431a11
nop
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x28]
push 5
lea eax, [esp + 0x1c]
push eax
push ecx
push edx
lea ebx, [esp + 0x24]
lea esi, [esp + 0x78]
call fcn.00465b80
mov edi, eax
cmp edi, 1
jne 0x4319ee
mov ecx, dword [esp + 0x70]
test ecx, ecx
jne 0x43189b
mov eax, dword [esp + 0x10]
cmp dword [eax + 0xc], ecx
jne 0x43189b
mov ecx, 5
xor esi, esi
mov dword [esp + 0x70], ecx
mov dword [esp + 0x6c], esi
jmp 0x43189f
mov esi, dword [esp + 0x6c]
cmp dword [esp + 0xa0], 0x44
jne 0x4319a9
lea ebx, [ecx - 1]
cmp ebx, 4
ja case.0x4318b5.3
jmp dword [ebx*4 + 0x43555c]
mov eax, ecx
jmp 0x4318fb
mov eax, dword [esp + 0x68]
push 0
call fcn.0041a4f0
mov ecx, dword [esp + 0x70]
jmp 0x4318fb
test esi, esi
je 0x4318dc
mov eax, 1
jmp 0x4318fb
mov eax, dword [esp + 0x68]
push 0
push 1
push 0
push 1
call fcn.0047fe10
mov ecx, dword [esp + 0x80]
add esp, 0x10
jmp 0x4318fb
xor eax, eax
dec eax
je 0x43198c
dec eax
je 0x431940
cmp ecx, 6
je 0x43199e
cmp ecx, 4
jne 0x431926
mov eax, dword [esp + 0x68]
cmp byte [eax + 0x17], 0
jne 0x431920
mov eax, dword [eax + 0xc]
test byte [eax + 0x15], 2
jne 0x43199e
xor ecx, ecx
lea eax, [esp + 0x68]
call fcn.0045ad90
xor ecx, ecx
cmp word [eax], cx
setne cl
mov eax, ecx
jmp 0x4319bd
cmp ebx, 5
ja case.0x431945.2
jmp dword [ebx*4 + 0x435570]
fild qword [esp + 0x68]
jmp 0x43197a
fld qword [esp + 0x68]
jmp 0x43197a
mov eax, dword [esp + 0x68]
push 1
call fcn.0041a5e0
jmp 0x43197a
test esi, esi
je case.0x431945.2
fild qword [esi]
jmp 0x43197a
mov edx, dword [esp + 0x68]
push edx
call fcn.0049c2f2
add esp, 4
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp case.0x431945.5
mov eax, 1
jmp 0x4319bd
push 1
lea ecx, [esp + 0x6c]
call fcn.0045ac50
add esp, 4
or eax, edx
je case.0x431945.5
mov eax, 1
jmp 0x4319bd
xor eax, eax
jmp 0x4319bd
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x9c]
call fcn.0045b0c0
add esp, 4
test eax, eax
setne bl
cmp dword [esp + 0x70], 6
jne 0x4319d5
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test bl, bl
jne 0x4319f8
mov eax, dword [esp + 0x44]
inc eax
mov dword [esp + 0x44], eax
cmp eax, dword [esp + 0x3c]
jl 0x431850
jmp 0x431a0d
mov dword [esp + 0x1c], 0
jmp 0x431a03
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x3c]
cmp dword [esp + 0x44], edx
jl 0x431a27
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0x18]
cmp byte [eax], 0x74
mov dword [esp + 0x28], eax
je 0x431824
jmp 0x431a2b
mov esi, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
cmp dword [esp + 0xa0], 6
jne 0x431a48
mov eax, dword [esp + 0x98]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [esp + 0xa4], 0
je 0x431a81
test ebx, ebx
je 0x431a6f
push ebx
call fcn.0049a18d
add esp, 4
cmp dword [esp + 0x14], 0x400000
jbe 0x431a6f
dec dword [0x4da640]
mov eax, dword [esp + 0xd4]
mov ebx, dword [esp + 0xa4]
mov dword [esp + 0x14], eax
test ebx, ebx
je 0x431abf
cmp dword [0x4da638], 0
je 0x431aaf
mov ecx, dword [0x4da638]
push ecx
call fcn.0049a18d
add esp, 4
cmp dword [0x4da63c], 0x400000
jbe 0x431aaf
dec dword [0x4da640]
mov edx, dword [esp + 0x14]
mov dword [0x4da638], ebx
mov dword [0x4da63c], edx
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x431adf
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x24]
push eax
push edx
push 2
call fcn.004309f0
mov edi, eax
mov eax, dword [esp + 0x24]
jmp 0x431ae5
xor eax, eax
mov dword [esp + 0x24], eax
cmp edi, 1
jne 0x43501b
cmp dword [ebp + 8], 3
je 0x43501b
test eax, eax
je 0x430d3e
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
je 0x430e19
mov edx, dword [esp + 0x40]
mov dword [edx], eax
jmp case.0x430d88.116
cmp dword [esi + 0xc], 1
jne 0x431b29
mov eax, dword [esi + 0x18]
mov dword [esp + 0x10], eax
jmp 0x431ec6
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esi + 0x14]
push ebx
push 2
call fcn.004309f0
mov edi, eax
mov eax, dword [esp + 0x24]
cmp eax, esi
je 0x431eca
cmp dword [ebp + 8], 3
je 0x435406
cmp edi, 1
jne 0x435406
test eax, eax
je 0x431b1d
mov edx, dword [esi + 0x1c]
cmp edx, dword [eax + 0x1c]
jne 0x4353fb
mov dword [esp + 0x10], eax
mov esi, eax
jmp 0x431eca
add dword [0x4db220], 1
mov ebx, dword [0x4d9648]
mov edi, dword [0x4d5b14]
adc dword [0x4db224], 0
mov cl, byte [esi]
movzx edx, cl
dec edx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], edi
cmp edx, 0xe1
ja case.0x431bb0.8
movzx edx, byte [edx + 0x43580c]
jmp dword [edx*4 + 0x435588]
push esi
call fcn.00447780
jmp 0x431eab
cmp byte [esi + 1], 1
mov edx, dword [0x4d969c]
jbe 0x431c33
mov eax, dword [esi + 8]
cmp byte [eax + 0x11], 0
je 0x431be1
mov edi, 1
jmp 0x431eb5
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x431bf4
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
jmp 0x431ea5
mov eax, dword [0x4d964c]
test eax, eax
je 0x431c33
cmp word [edx], 0
jne 0x431c33
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x431c10
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x431c27
sub ecx, 2
jne 0x431c33
mov eax, ebx
call fcn.00482d50
jmp 0x431eab
mov ecx, ebx
call fcn.00482ab0
jmp 0x431eab
push 1
push 0
push 0xffffffffffffffff
push edx
push ebx
call fcn.00483320
jmp 0x431eab
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x431c61
cmp byte [eax + 0x11], 0
jne 0x431c61
mov eax, 1
mov dword [esp + 0x14], eax
xor edi, edi
jmp 0x431ca2
mov edi, dword [0x4d964c]
mov eax, dword [0x4d969c]
mov dword [esp + 0x14], 0
test edi, edi
je 0x431c90
cmp word [eax], 0
jne 0x431c90
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x431c8b
mov edx, dword [edi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x431cf3
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.0047fe10
add esp, 0x10
mov dword [esp + 0x1c], eax
push 1
mov eax, ebx
call fcn.0041a4f0
mov dword [esp + 0x30], eax
mov eax, dword [0x4d96a0]
movzx eax, word [eax]
test ax, ax
je 0x431e36
call fcn.0040ef10
movzx ecx, ax
push ecx
push 0x4b7774
call fcn.0049a90e
add esp, 8
test eax, eax
je 0x431e36
cmp dword [esp + 0x1c], 0
jne 0x431d02
mov edi, 1
jmp 0x431eb5
test edi, edi
je 0x431c92
push 1
mov eax, edi
call fcn.0041a4f0
jmp 0x431ca2
cmp dword [esp + 0x14], 0
je 0x431d13
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x431d31
test edi, edi
je 0x431d22
push 0
mov eax, edi
call fcn.0041a5e0
jmp 0x431d31
mov esi, dword [0x4d969c]
call fcn.0041a3c0
mov esi, dword [esp + 0x10]
push 0
fstp qword [esp + 0x34]
push 1
mov ecx, ebx
call fcn.00401280
cmp word [eax], 0
je 0x431d7a
lea ecx, [esp + 0x88]
push ecx
push 0
push 1
mov ecx, ebx
call fcn.00401280
call fcn.0047f9d0
add esp, 4
test eax, eax
jne 0x431d9e
push 1
push eax
push 0xffffffffffffffff
push 0x4b0cf8
push ebx
call fcn.00483320
jmp 0x431eab
lea edx, [esp + 0xe0]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0xe4]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov edx, dword [0x4d96a0]
mov ax, word [edx]
call fcn.0040ef10
fld qword [esp + 0x30]
movzx eax, ax
cmp eax, 0x44
je 0x431dd2
cmp eax, 0x48
je 0x431dca
cmp eax, 0x4d
jne 0x431dd8
fmul qword [0x4cee90]
jmp 0x431dd8
fmul qword [0x4cee88]
jmp 0x431dd8
fmul qword [0x4cee80]
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x8c]
call fcn.004aaac6
push 0
push 0x989680
push edx
push eax
call fcn.0049e6e0
add esi, eax
adc edi, edx
mov dword [esp + 0x88], esi
push 0
lea eax, [esp + 0x8c]
lea esi, [esp + 0x144]
mov dword [esp + 0x90], edi
call fcn.0047fc80
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
push ebx
call fcn.00483320
mov esi, dword [esp + 0x10]
jmp 0x431eab
mov eax, 2
cmp dword [esp + 0x1c], eax
je 0x431edb
cmp dword [esp + 0x30], eax
je 0x431edb
cmp dword [esp + 0x14], 0
je 0x431e6a
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x1c]
mov ecx, dword [eax + 4]
mov edi, dword [eax]
mov dword [esp + 0xcc], ecx
jmp 0x431e91
test edi, edi
je 0x431e79
push 0
mov eax, edi
call fcn.0041a560
jmp 0x431e88
mov esi, dword [0x4d969c]
call fcn.00404070
mov esi, dword [esp + 0x10]
mov dword [esp + 0xcc], edx
mov edi, eax
push 0
mov eax, ebx
call fcn.0041a560
add eax, edi
adc edx, dword [esp + 0xcc]
push edx
push eax
push ebx
call fcn.0041a460
mov edi, eax
test edi, edi
je 0x435021
cmp dword [ebp + 8], 3
je 0x435021
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x10], ecx
mov esi, dword [esp + 0x10]
test esi, esi
je case.0x430d88.116
mov ebx, dword [esp + 0x48]
jmp 0x430a54
cmp dword [esp + 0x14], 0
je 0x431eec
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x431f0a
test edi, edi
je 0x431efb
push 0
mov eax, edi
call fcn.0041a5e0
jmp 0x431f0a
mov esi, dword [0x4d969c]
call fcn.0041a3c0
mov esi, dword [esp + 0x10]
push 0
fstp qword [esp + 0x34]
mov eax, ebx
call fcn.0041a5e0
fadd qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.0041a490
jmp 0x431eab
mov ecx, dword [0x4d96a0]
movzx eax, word [ecx]
test ax, ax
je 0x43201b
call fcn.0040ef10
movzx edx, ax
push edx
push 0x4b7774
call fcn.0049a90e
add esp, 8
test eax, eax
je 0x43201b
mov ecx, dword [0x4d964c]
mov edi, dword [0x4d969c]
test ecx, ecx
je 0x431f8f
cmp word [edi], 0
jne 0x431f8f
mov al, byte [ecx + 0x17]
test al, al
jne 0x431f7c
mov eax, dword [ecx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x431f8f
test ecx, ecx
je 0x431f8f
push 0
push 1
call fcn.00401280
mov edi, eax
push 0
push 1
mov ecx, ebx
call fcn.00401280
push eax
lea ebx, [esp + 0x5f]
mov eax, edi
call fcn.0047fd30
add esp, 4
cmp byte [esp + 0x5b], 0
mov edi, eax
mov ebx, edx
je 0x431fce
mov ecx, dword [esp + 0x18]
push 1
push 0
push 0xffffffffffffffff
push 0x4b0cf8
push ecx
call fcn.00483320
jmp 0x431eab
mov edx, dword [0x4d96a0]
mov ax, word [edx]
call fcn.0040ef10
movzx eax, ax
cmp eax, 0x44
je 0x431ffd
cmp eax, 0x48
je 0x431ff4
cmp eax, 0x4d
jne 0x43200f
push 0
push 0x3c
jmp 0x432004
push 0
push 0xe10
jmp 0x432004
push 0
push 0x15180
push ebx
push edi
call fcn.004aab40
mov edi, eax
mov ebx, edx
mov eax, dword [esp + 0x18]
push ebx
push edi
push eax
jmp 0x431ea6
mov eax, dword [esi + 8]
xor edx, edx
cmp dword [eax + 0x1c], edx
je 0x432039
cmp byte [eax + 0x11], dl
jne 0x432039
mov edi, 1
mov dword [esp + 0x14], edi
mov dword [esp + 0x28], edx
jmp 0x43208c
mov edi, dword [0x4d964c]
mov eax, dword [0x4d969c]
mov dword [esp + 0x14], edx
cmp edi, edx
je 0x432076
cmp word [eax], dx
jne 0x432076
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x43205e
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x432076
mov dword [esp + 0x28], edi
cmp edi, edx
je 0x43207a
push 1
mov eax, edi
call fcn.0041a4f0
jmp 0x43208a
mov dword [esp + 0x28], edx
push 1
push 1
push 0
push 1
call fcn.0047fe10
add esp, 0x10
mov edi, eax
push 1
mov eax, ebx
call fcn.0041a4f0
cmp edi, 2
je 0x43210f
cmp eax, 2
je 0x43210f
cmp dword [esp + 0x14], 0
je 0x4320cf
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xbc], eax
push 0
mov eax, ebx
call fcn.0041a560
sub eax, edi
sbb edx, dword [esp + 0xbc]
jmp 0x431ea3
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4320e0
push 0
call fcn.0041a560
jmp 0x4320ef
mov esi, dword [0x4d969c]
call fcn.00404070
mov esi, dword [esp + 0x10]
mov edi, eax
push 0
mov eax, ebx
mov dword [esp + 0xc0], edx
call fcn.0041a560
sub eax, edi
sbb edx, dword [esp + 0xbc]
jmp 0x431ea3
cmp dword [esp + 0x14], 0
je 0x432120
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x432140
mov eax, dword [esp + 0x28]
test eax, eax
je 0x432131
push 0
call fcn.0041a5e0
jmp 0x432140
mov esi, dword [0x4d969c]
call fcn.0041a3c0
mov esi, dword [esp + 0x10]
push 0
fstp qword [esp + 0x34]
mov eax, ebx
call fcn.0041a5e0
fsub qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.0041a490
jmp 0x431eab
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x43217e
cmp byte [eax + 0x11], 0
jne 0x43217e
mov edi, 1
mov dword [esp + 0x14], edi
xor ebx, ebx
jmp 0x4321c1
mov ebx, dword [0x4d964c]
mov eax, dword [0x4d969c]
mov dword [esp + 0x14], 0
test ebx, ebx
je 0x4321ad
cmp word [eax], 0
jne 0x4321ad
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x4321a8
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x4321ea
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.0047fe10
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x18]
push 1
call fcn.0041a4f0
cmp edi, 2
je 0x43223b
cmp eax, 2
je 0x43223b
cmp dword [esp + 0x14], 0
je 0x4321f9
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x43221b
test ebx, ebx
je 0x4321af
push 1
mov eax, ebx
call fcn.0041a4f0
jmp 0x4321bf
test ebx, ebx
je 0x432208
push 0
mov eax, ebx
call fcn.0041a560
jmp 0x432217
mov esi, dword [0x4d969c]
call fcn.00404070
mov esi, dword [esp + 0x10]
mov ebx, edx
mov edi, eax
mov eax, dword [esp + 0x18]
push 0
call fcn.0041a560
push ebx
push edi
push edx
push eax
call fcn.0049e6e0
push edx
push eax
mov eax, dword [esp + 0x20]
push eax
jmp 0x431ea6
cmp dword [esp + 0x14], 0
je 0x43224c
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x43226a
test ebx, ebx
je 0x43225b
push 0
mov eax, ebx
call fcn.0041a5e0
jmp 0x43226a
mov esi, dword [0x4d969c]
call fcn.0041a3c0
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x18]
fstp qword [esp + 0x30]
push 0
mov eax, edi
call fcn.0041a5e0
fmul qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push edi
call fcn.0041a490
jmp 0x431eab
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x4322ac
cmp byte [eax + 0x11], 0
jne 0x4322ac
mov edi, 1
mov dword [esp + 0x14], edi
xor ebx, ebx
jmp 0x4322ef
mov ebx, dword [0x4d964c]
mov eax, dword [0x4d969c]
mov dword [esp + 0x14], 0
test ebx, ebx
je 0x4322db
cmp word [eax], 0
jne 0x4322db
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x4322d6
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x43231c
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.0047fe10
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x18]
push 1
call fcn.0041a4f0
cmp edi, 2
je 0x432381
cmp eax, 2
je 0x432381
cmp dword [esp + 0x14], 0
je 0x43232b
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x43234d
test ebx, ebx
je 0x4322dd
push 1
mov eax, ebx
call fcn.0041a4f0
jmp 0x4322ed
test ebx, ebx
je 0x43233a
push 0
mov eax, ebx
call fcn.0041a560
jmp 0x432349
mov esi, dword [0x4d969c]
call fcn.00404070
mov esi, dword [esp + 0x10]
mov ebx, edx
mov edi, eax
mov eax, edi
or eax, ebx
jne 0x432361
mov ecx, dword [esp + 0x18]
call fcn.0041a400
jmp 0x431eab
mov eax, dword [esp + 0x18]
push 0
call fcn.0041a560
push ebx
push edi
push edx
push eax
call fcn.004aab40
mov ecx, dword [esp + 0x18]
push edx
push eax
push ecx
jmp 0x431ea6
cmp dword [esp + 0x14], 0
je 0x432392
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x4323b0
test ebx, ebx
je 0x4323a1
push 0
mov eax, ebx
call fcn.0041a5e0
jmp 0x4323b0
mov esi, dword [0x4d969c]
call fcn.0041a3c0
mov esi, dword [esp + 0x10]
fst qword [esp + 0x30]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x4323cd
mov ecx, dword [esp + 0x18]
call fcn.0041a400
jmp 0x431eab
mov edi, dword [esp + 0x18]
push 0
mov eax, edi
call fcn.0041a5e0
fdiv qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push edi
call fcn.0041a490
jmp 0x431eab
mov edi, 2
mov ecx, esi
call fcn.0042cc50
mov ebx, eax
test ebx, ebx
jns 0x432405
xor ebx, ebx
jmp 0x432417
mov edi, 1
mov ecx, esi
call fcn.0042cbc0
cmp ebx, eax
jle 0x432417
mov ebx, eax
push 1
push 0
push ebx
mov ecx, dword [0x4d969c]
mov edx, dword [esp + 0x24]
push ecx
push edx
call fcn.00483320
jmp 0x431eab
mov edi, 2
mov ecx, esi
call fcn.0042cc50
mov ebx, eax
test ebx, ebx
jns 0x432446
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.0042cbc0
cmp ebx, eax
jbe 0x432458
mov ebx, eax
mov ecx, dword [0x4d969c]
mov edx, dword [esp + 0x18]
push 1
push 0
sub eax, ebx
push ebx
lea eax, [ecx + eax*2]
push eax
push edx
call fcn.00483320
jmp 0x431eab
cmp byte [esi + 1], 4
jb 0x4324ab
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x34]
cmp word [ecx], 0
je 0x4324ab
mov edi, 3
mov ecx, esi
call fcn.0042cc50
mov dword [esp + 0x14], eax
cmp eax, 1
jge 0x4324b3
mov ecx, ebx
call fcn.0041a400
jmp 0x431eab
mov dword [esp + 0x14], connect
mov edi, 2
mov ecx, esi
call fcn.0042cc50
mov edx, dword [0x4d96a8]
mov ebx, eax
mov ax, word [edx]
call fcn.0040ef10
cmp ax, 0x4c
jne 0x432502
cmp ebx, 1
jge 0x4324e8
mov ecx, dword [esp + 0x18]
call fcn.0041a400
jmp 0x431eab
mov eax, dword [esp + 0x14]
mov ecx, 1
sub ecx, eax
add ebx, ecx
cmp ebx, 1
jge 0x43250c
lea edx, [eax + ebx - 1]
mov dword [esp + 0x14], edx
cmp ebx, 1
jge 0x43250c
mov ebx, 1
mov edi, 1
mov ecx, esi
call fcn.0042cbc0
cmp eax, ebx
jae 0x43252a
mov ecx, dword [esp + 0x18]
call fcn.0041a400
jmp 0x431eab
mov ecx, edi
sub ecx, ebx
add eax, ecx
cmp dword [esp + 0x14], eax
jbe 0x43253a
mov dword [esp + 0x14], eax
mov edx, dword [0x4d969c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push 1
push 0
push eax
lea ebx, [edx + ebx*2 - 2]
push ebx
push ecx
call fcn.00483320
jmp 0x431eab
mov edi, 2
mov ecx, esi
call fcn.0042cc50
mov ebx, eax
test ebx, ebx
jns 0x432571
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.0042cbc0
cmp ebx, eax
jbe 0x432583
mov ebx, eax
mov edx, dword [0x4d969c]
push 1
push 0
sub eax, ebx
push eax
mov eax, dword [esp + 0x24]
lea ecx, [edx + ebx*2]
push ecx
push eax
call fcn.00483320
jmp 0x431eab
mov edi, 2
mov ecx, esi
call fcn.0042cc50
mov ebx, eax
test ebx, ebx
jns 0x4325b7
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.0042cbc0
cmp ebx, eax
jbe 0x4325c9
mov ebx, eax
push 1
push 0
sub eax, ebx
push eax
jmp 0x43241c
push 1
push 1
mov ecx, ebx
call fcn.00401280
mov edi, eax
cmp edi, dword [0x4d969c]
jne 0x4325fb
mov al, byte [ebx + 0x17]
test al, al
jne 0x4325f7
mov eax, dword [ebx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
je 0x432641
push 1
push 0
mov edi, 1
mov ecx, esi
call fcn.0042cbc0
push eax
push 0
push ebx
call fcn.00483320
cmp eax, edi
jne case.0x431bb0.8
push 0
push edi
mov ecx, ebx
call fcn.00401280
mov ecx, dword [0x4d969c]
mov edi, eax
mov edx, edi
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x432630
mov ecx, dword [0x4d96a0]
movzx eax, word [ecx]
test ax, ax
je 0x432670
call fcn.0040ef10
cmp ax, 0x54
jne 0x432670
mov edx, dword [0x4d96a0]
cmp word [edx + 2], 0
jne 0x432670
mov eax, edi
call fcn.0041a130
jmp 0x432684
cmp byte [esi], 0x31
push edi
jne 0x43267e
call dword [sym.imp.USER32.dll_CharLowerW]
jmp 0x432684
call dword [sym.imp.USER32.dll_CharUpperW]
cmp byte [ebx + 0x17], 0
jne 0x43268d
mov ebx, dword [ebx + 0xc]
cmp byte [ebx + 0x17], 2
jne 0x4326ab
cmp dword [0x4db284], 0
je 0x4326ab
mov ecx, 0x4db278
call fcn.00405160
jmp 0x431eab
and byte [ebx + 0x15], 0x86
mov eax, 1
jmp 0x431eab
mov eax, dword [0x4d964c]
test eax, eax
je 0x4326e4
cmp byte [eax + 0x17], 0
jne 0x4326d0
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x15]
jmp 0x4326d3
mov cl, byte [eax + 0x15]
test cl, 1
je 0x4326e4
call fcn.0041a840
push 0
jmp 0x431ea4
mov edi, 1
mov ecx, esi
call fcn.0042cbc0
push 0
jmp 0x431ea4
mov edi, dword [0x4d96a4]
movzx eax, word [edi]
mov dword [esp + 0x30], edi
mov dword [esp + 0x28], 0xffffffff
test ax, ax
je 0x432795
call fcn.0040ef10
movzx edx, ax
push edx
push 0x4b98b4
call fcn.0049a90e
add esp, 8
test eax, eax
je 0x432795
cmp word [edi + 2], 0
je 0x432795
lea esi, [edi + 2]
call fcn.004142c0
mov esi, dword [esp + 0x10]
mov dword [esp + 0x1c], eax
test eax, eax
jle 0x432893
mov eax, dword [0x4d96a0]
cmp word [eax], 0
jne 0x43279f
mov dword [esp + 0x28], 0
mov eax, 0x4af9a8
mov edx, dword [0x4d9f14]
push 1
push 0
push 0xffffffffffffffff
push eax
push edx
call fcn.00483320
mov eax, dword [esp + 0x28]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x24]
call fcn.00401140
mov edi, 1
jmp 0x431eb5
mov dword [esp + 0x1c], 1
jmp 0x43274e
mov ecx, dword [0x4d969c]
mov dword [esp + 0x44], ecx
mov edi, 4
mov ecx, esi
mov dword [esp + 0x3c], eax
call fcn.0042cc50
mov ebx, eax
test ebx, ebx
jns 0x4327c1
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.0042cbc0
mov edi, eax
cmp ebx, edi
jge 0x432893
mov edx, dword [esp + 0x30]
movzx eax, word [edx]
cmp eax, 0x31
je 0x432858
call fcn.0040ef10
cmp ax, 0x52
je 0x432858
mov edi, 2
mov ecx, esi
call fcn.0042cbc0
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x44]
lea ecx, [eax + ebx*2]
mov ebx, dword [esp + 0x3c]
mov edi, 1
mov edi, edi
mov edx, dword [0x4d5b14]
mov al, byte [edx + 0xf2]
test al, al
jne 0x432829
mov eax, ebx
call fcn.00480360
jmp 0x432844
cmp al, 2
jne 0x43283a
push ecx
mov eax, ebx
call fcn.004805d0
add esp, 4
jmp 0x432844
push ebx
push ecx
call fcn.0049b9f3
add esp, 8
test eax, eax
je 0x432893
cmp edi, dword [esp + 0x1c]
je 0x43287f
mov ecx, dword [esp + 0x30]
inc edi
lea ecx, [eax + ecx*2]
jmp 0x432810
mov eax, dword [esp + 0x14]
movzx ecx, byte [eax + 0xf2]
mov edx, dword [esp + 0x1c]
push edx
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x4c]
push edx
mov eax, edi
sub eax, ebx
push ecx
call fcn.00480150
add esp, 0x10
test eax, eax
je 0x432893
sub eax, dword [esp + 0x44]
sar eax, 1
mov dword [esp + 0x28], eax
jns 0x432761
mov eax, 0x4b35d4
jmp 0x432766
push esi
call fcn.00447b90
jmp 0x431eab
mov eax, dword [0x4d96a0]
mov ecx, dword [0x4d969c]
push eax
mov eax, dword [0x4d96a4]
call fcn.0043d700
jmp 0x431eab
mov ecx, dword [0x4d96a4]
mov edx, dword [0x4d96a0]
mov eax, dword [0x4d9698]
push ecx
mov ecx, dword [0x4d969c]
push edx
push esi
call fcn.00447da0
jmp 0x431eab
mov eax, dword [0x4d9698]
push eax
mov eax, esi
call fcn.00448530
jmp 0x431eab
mov ecx, dword [0x4d9698]
push ecx
mov ecx, dword [0x4d969c]
push esi
call fcn.00448b70
jmp 0x431eab
push 0
push ecx
mov edi, 7
mov ecx, esi
call fcn.0042cc50
add esp, 4
push eax
mov edi, 6
mov ecx, esi
call fcn.0042cc50
push eax
push ecx
mov edi, 5
mov ecx, esi
call fcn.0042cc50
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.0042cc50
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.0042cc50
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.0042cc50
push eax
mov eax, dword [0x4d96b8]
push esi
call fcn.00443ad0
jmp 0x431eab
mov edx, dword [0x4d96b0]
push edx
push ecx
mov edi, 5
mov ecx, esi
call fcn.0042cc50
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.0042cc50
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.0042cc50
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.0042cc50
push eax
push esi
call fcn.004442e0
jmp 0x431eab
mov eax, dword [0x4d96a4]
push eax
push ecx
mov edi, 2
mov ecx, esi
call fcn.0042cc50
mov edi, 1
mov ecx, esi
mov ebx, eax
call fcn.0042cc50
add esp, 4
mov ecx, eax
push esi
mov eax, ebx
call fcn.0045c3a0
jmp 0x431eab
mov edx, dword [edi + 0xd4]
xor eax, eax
cmp cl, 0x42
mov ecx, dword [0x4d9698]
sete al
push 0
push edx
push eax
push ecx
call fcn.00414870
add esp, 0x10
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d9698]
xor edx, edx
cmp dword [edi + 0xd4], 3
push 0
sete dl
lea edx, [edx + edx + 1]
push edx
push 0
push eax
call fcn.00414870
add esp, 0x10
mov edi, 1
jmp 0x431eb5
mov ecx, dword [0x4d9698]
push 0
push 2
push 0
push ecx
call fcn.00414870
add esp, 0x10
mov edi, 1
jmp 0x431eb5
mov edx, dword [0x4d9698]
push 0
push 0
push 0
push edx
call fcn.00414870
add esp, 0x10
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d9698]
push eax
call fcn.00416a60
add esp, 4
jmp 0x431eab
mov edx, dword [0x4d96b0]
mov eax, dword [0x4d96ac]
push 0x4b0cf8
push edx
mov edx, dword [0x4d96a8]
push eax
mov eax, dword [0x4d96a4]
push edx
mov edx, dword [0x4d96a0]
push eax
mov eax, dword [0x4d969c]
push edx
mov edx, dword [0x4d9698]
push eax
push ecx
mov eax, 0x4b0cf8
call fcn.00416cf0
add esp, 0x20
jmp 0x431eab
mov edx, dword [0x4d96ac]
mov eax, dword [0x4d96b0]
push edx
mov edx, dword [0x4d96a8]
push eax
mov eax, dword [0x4d96a0]
push edx
mov edx, dword [0x4d969c]
push 0x4b0cf8
push 0x4b0cf8
push eax
mov eax, dword [0x4d96a4]
push edx
mov edx, dword [0x4d9698]
push ecx
call fcn.00416cf0
add esp, 0x20
jmp 0x431eab
mov eax, dword [0x4d96a4]
mov edx, dword [0x4d96a0]
push 0x4b0cf8
push eax
mov eax, dword [0x4d969c]
push edx
mov edx, dword [0x4d9698]
push 0x4b0cf8
push 0x4b0cf8
push eax
push edx
mov eax, 0x4b0cf8
push ecx
mov edx, eax
call fcn.00416cf0
add esp, 0x20
jmp 0x431eab
mov edi, 4
mov ecx, esi
call fcn.0042cc50
push eax
mov ecx, esi
call fcn.00446bc0
jmp 0x431eab
mov edx, dword [0x4d969c]
mov ebx, dword [0x4d96a0]
mov esi, dword [0x4d9698]
cmp cl, 0x78
sete al
movzx ecx, al
mov eax, dword [0x4d96a4]
push ecx
push edx
push edi
call fcn.00484030
add esp, 0xc
test eax, eax
je 0x432bce
mov eax, dword [0x4d5b14]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle 0x432bce
push 1
push eax
call fcn.004014c0
add esp, 8
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
mov ecx, dword [0x4d9698]
push 9
push 0x4b98bc
push ecx
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x432c10
mov edx, dword [0x4d969c]
cmp word [edx], ax
jne 0x432c10
mov eax, dword [0x4d96a4]
cmp word [eax], 0
jne 0x432c10
mov bl, 1
jmp 0x432c12
xor bl, bl
mov al, byte [esi]
xor ecx, ecx
test bl, bl
setne cl
dec ecx
and ecx, 0x14
mov dword [esp + 0x1c], ecx
cmp al, 0x84
je 0x432c6e
cmp al, 0x85
je 0x432c6e
mov edx, dword [0x4d96a0]
cmp word [edx], 0
je 0x432cb0
mov al, byte [esi]
cmp al, 0x84
je 0x432d12
cmp al, 0x85
je 0x432d14
mov ecx, dword [0x4d96a0]
mov edx, dword [0x4d969c]
push ecx
mov ecx, dword [0x4d96a4]
push edx
mov edx, dword [0x4d9698]
push eax
call fcn.0043f680
jmp 0x431eab
mov eax, dword [0x4d96a0]
cmp word [eax], 0
je 0x432ca4
mov edi, 2
mov ecx, esi
call fcn.0042cd00
fmul qword [0x4cedf0]
call fcn.004aaa90
mov edi, dword [esp + 0x14]
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x432ca4
mov dword [esp + 0x1c], 0x1f4
mov ecx, dword [0x4d96a8]
cmp word [ecx], 0
jne 0x432c37
test bl, bl
je 0x432c37
mov eax, dword [0x4d9698]
add eax, 0x12
call fcn.00403ff0
cmp word [eax], 0
mov dword [esp + 0x30], eax
je 0x432c37
mov ebx, dword [0x4da760]
test ebx, ebx
je 0x432c37
lea ecx, [ecx]
mov edx, dword [esp + 0x30]
mov eax, dword [ebx + 4]
push edx
push eax
call fcn.00499c29
add esp, 8
test eax, eax
je 0x432d01
mov ebx, dword [ebx + 0x14]
test ebx, ebx
jne 0x432ce0
jmp 0x432c37
mov edx, dword [esp + 0x1c]
mov cl, byte [esi]
push ebx
call fcn.004861b0
jmp 0x431eab
cmp al, 0x85
mov edx, dword [0x4d96a8]
mov ebx, dword [0x4d9698]
sete al
movzx ecx, al
mov eax, dword [esp + 0x1c]
push ecx
mov ecx, dword [0x4d969c]
push edx
push eax
mov eax, dword [0x4d96a4]
push ecx
push edi
call fcn.00484330
add esp, 0x14
test eax, eax
je 0x432d5f
mov edx, dword [0x4d5b14]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle 0x432d5f
push 1
push eax
call fcn.004014c0
add esp, 8
mov edi, 1
jmp 0x431eb5
mov ebx, dword [0x4d969c]
call fcn.00443430
jmp 0x431eab
mov eax, dword [0x4d969c]
mov ecx, dword [0x4d9698]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
sete dl
movzx eax, dl
push eax
mov ebx, esi
call fcn.00439dd0
jmp 0x431eab
lea ecx, [esp + 0xe8]
push ecx
push 0x3a98
push 1
push 0x4b98d0
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
jmp 0x432d8c
mov ecx, dword [0x4d969c]
mov eax, dword [0x4d9698]
push ecx
push esi
call fcn.0045db90
jmp 0x431eab
mov eax, dword [0x4d9698]
mov esi, 0x4db238
call fcn.0047d4a0
mov eax, dword [0x4d969c]
mov esi, 0x4db244
call fcn.0047d4a0
mov eax, dword [0x4d96a0]
mov esi, 0x4db250
call fcn.0047d4a0
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
mov ecx, dword [0x4d96a0]
mov eax, 0x4b35a4
call fcn.00480360
test eax, eax
setne bl
mov dl, 3
cmp dl, byte [esi + 1]
mov edx, dword [0x4d96a0]
sbb eax, eax
and eax, dword [0x4d9654]
mov byte [esp + 0xd0], bl
mov ecx, dword [esp + 0xd0]
push eax
push 1
push ecx
push 0
push edx
mov edx, dword [0x4d969c]
test bl, bl
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4d9698]
push 0
push 0x4da728
call fcn.0043b100
test bl, bl
je 0x431eab
test eax, eax
mov eax, 0x4af9a8
jne 0x432e8d
mov eax, 0x4b98e8
push 1
push 0
push 0xffffffffffffffff
push eax
mov eax, dword [0x4d9f14]
push eax
call fcn.00483320
jmp 0x431eab
push esi
call fcn.0043f760
jmp 0x431eab
cmp byte [esi + 1], 2
jbe 0x432ef2
mov ecx, dword [0x4d96b0]
mov edx, dword [0x4d96ac]
mov eax, dword [0x4d96a8]
push ecx
mov ecx, dword [0x4d96a4]
push edx
mov edx, dword [0x4d96a0]
push eax
mov eax, dword [0x4d969c]
push ecx
mov ecx, dword [0x4d96b4]
push edx
mov edx, dword [0x4d9698]
call fcn.0043fe60
jmp 0x431eab
mov eax, dword [0x4d969c]
mov ecx, dword [0x4d9698]
push 0x4b0cf8
push 0x4b0cf8
push 0x4b0cf8
push eax
push ecx
mov ecx, 0x4b0cf8
mov eax, ecx
mov edx, ecx
call fcn.0043fe60
jmp 0x431eab
mov edx, dword [0x4d96c0]
mov eax, dword [0x4d96bc]
mov ecx, dword [0x4d96b8]
push edx
mov edx, dword [0x4d96b4]
push eax
mov eax, dword [0x4d96b0]
push ecx
mov ecx, dword [0x4d96a0]
push edx
mov edx, dword [0x4d969c]
push eax
mov eax, dword [0x4d9698]
push ecx
mov ecx, dword [0x4d96a8]
push edx
mov edx, dword [0x4d96ac]
push eax
mov eax, dword [0x4d96a4]
push esi
call fcn.0045c7e0
jmp 0x431eab
mov eax, dword [0x4d96a8]
xor edx, edx
cmp cl, 0x47
mov ecx, dword [0x4d969c]
sete dl
push edx
mov edx, dword [0x4d9698]
push eax
mov eax, dword [0x4d96a4]
push ecx
mov ecx, dword [0x4d96ac]
push edx
mov edx, dword [0x4d96a0]
push esi
call fcn.0043ff80
jmp 0x431eab
mov esi, dword [0x4d96a4]
push 1
xor bl, bl
call fcn.004142f0
add esp, 4
mov byte [esp + 0xd8], al
test al, al
jne 0x432fe7
mov eax, dword [0x4d96a4]
mov ecx, dword [esp + 0x10]
push eax
push 0
push 0x4b77c0
call fcn.0043a140
mov esi, dword [esp + 0x10]
jmp 0x431eab
mov ecx, dword [0x4d96a8]
cmp word [ecx], 0
je 0x433003
mov ecx, dword [esp + 0x10]
mov edi, 4
call fcn.0042cc50
jmp 0x433008
mov eax, 1
mov edx, dword [0x4d96b0]
mov ecx, dword [0x4d9698]
push edx
mov edx, dword [0x4d96ac]
push ecx
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [0x4d969c]
push eax
mov eax, dword [esp + 0xe8]
push eax
mov eax, dword [0x4d96a0]
push ecx
mov ecx, dword [0x4d96b4]
call fcn.00440040
mov esi, dword [esp + 0x10]
jmp 0x431eab
mov edx, dword [0x4d96b4]
mov eax, dword [0x4d96a8]
mov ecx, dword [0x4d96a4]
push edx
mov edx, dword [0x4d96a0]
push eax
mov eax, dword [0x4d969c]
push ecx
mov ecx, dword [0x4d9698]
push edx
mov edx, dword [0x4d96ac]
push eax
mov eax, dword [0x4d96b0]
push ecx
mov ecx, dword [0x4d96b8]
push esi
call fcn.004406d0
jmp 0x431eab
mov edx, dword [0x4d96b8]
mov eax, dword [0x4d96b4]
mov ecx, dword [0x4d96b0]
push edx
mov edx, dword [0x4d96ac]
push eax
mov eax, dword [0x4d96a8]
push ecx
push edx
push eax
mov ecx, esi
call fcn.00440900
jmp 0x431eab
mov ecx, dword [0x4d96a8]
mov edx, dword [0x4d96a4]
mov eax, dword [0x4d96a0]
push ecx
mov ecx, dword [0x4d969c]
push edx
push eax
push ecx
push esi
call fcn.00440a50
jmp 0x431eab
mov edx, dword [0x4d96a4]
mov eax, dword [0x4d9698]
mov ecx, dword [0x4d96a8]
push edx
mov edx, dword [0x4d969c]
push eax
mov eax, dword [0x4d96a0]
push esi
call fcn.00440c30
jmp 0x431eab
mov ecx, dword [0x4d96a8]
mov edx, dword [0x4d969c]
mov eax, dword [0x4d96a4]
push ecx
mov ecx, dword [0x4d96ac]
push edx
mov edx, dword [0x4d96a0]
push esi
mov esi, dword [0x4d9698]
call fcn.00440d40
mov esi, dword [esp + 0x10]
jmp 0x431eab
mov eax, dword [0x4d96a8]
mov ecx, dword [0x4d969c]
mov edx, dword [0x4d96a0]
push eax
mov eax, dword [0x4d96a4]
push ecx
mov ecx, dword [0x4d96ac]
push esi
call fcn.00440e00
jmp 0x431eab
mov edx, dword [0x4d96b0]
mov eax, dword [0x4d96ac]
mov ecx, dword [0x4d96a8]
push edx
mov edx, dword [0x4d96a4]
push eax
mov eax, dword [0x4d96a0]
push ecx
mov ecx, dword [0x4d9698]
push edx
push eax
mov eax, dword [0x4d969c]
push esi
call fcn.0045cb40
jmp 0x431eab
mov ecx, dword [0x4d96b4]
mov edx, dword [0x4d96b0]
mov eax, dword [0x4d96ac]
push ecx
mov ecx, dword [0x4d96a8]
push edx
mov edx, dword [0x4d96a4]
push eax
mov eax, dword [0x4d96a0]
push ecx
mov ecx, dword [0x4d969c]
push edx
push eax
push esi
call fcn.0045d310
jmp 0x431eab
mov ecx, dword [0x4d96a8]
mov eax, dword [0x4d96a4]
mov edx, dword [0x4d96a0]
mov edi, dword [0x4d969c]
push ecx
mov ecx, dword [0x4d96ac]
call fcn.004415a0
jmp 0x431eab
mov edx, dword [0x4d96b0]
mov eax, dword [0x4d96ac]
mov ecx, dword [0x4d96a8]
push edx
mov edx, dword [0x4d96a0]
push eax
mov eax, dword [0x4d969c]
push ecx
mov ecx, dword [0x4d9698]
push edx
mov edx, dword [0x4d96a4]
push eax
push ecx
mov ecx, dword [0x4d96b4]
call fcn.00441610
jmp 0x431eab
cmp cl, 0x92
sete dl
movzx eax, dl
push eax
mov eax, esi
call fcn.00441750
jmp 0x431eab
mov ecx, dword [0x4d969c]
mov edx, dword [0x4d9698]
push ecx
mov ecx, dword [0x4d96a0]
push esi
call fcn.00441a70
jmp 0x431eab
mov edx, dword [0x4d96ac]
mov eax, dword [0x4d96a8]
mov ecx, dword [0x4d96a4]
push edx
mov edx, dword [0x4d96a0]
push eax
push ecx
mov ecx, dword [0x4d969c]
push edx
mov edx, dword [0x4d9698]
push esi
call fcn.004420f0
jmp 0x431eab
cmp byte [esi + 1], 1
jbe 0x4332d1
mov eax, dword [0x4d96a4]
mov ecx, dword [0x4d96a0]
mov edx, dword [0x4d9698]
push eax
mov eax, dword [0x4d969c]
push ecx
mov ecx, dword [0x4d96a8]
call fcn.00442530
jmp 0x431eab
mov edi, dword [0x4d9698]
mov ecx, 0x4b0cf8
push 0x4b0cf8
mov eax, ecx
mov edx, ecx
call fcn.0044de50
test eax, eax
je 0x4332f6
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, 1
jmp 0x431eab
mov edx, dword [0x4d96a4]
mov ecx, dword [0x4d96a8]
mov eax, dword [0x4d96a0]
push edx
mov edx, dword [0x4d969c]
call fcn.00442560
jmp 0x431eab
mov eax, dword [0x4d96a4]
mov ecx, dword [0x4d96a8]
mov edx, dword [0x4d969c]
push eax
mov eax, dword [0x4d96a0]
call fcn.004426c0
jmp 0x431eab
mov ecx, dword [0x4d96a8]
mov edx, dword [0x4d96a4]
mov eax, dword [0x4d969c]
push ecx
mov ecx, dword [0x4d96ac]
push edx
mov edx, dword [0x4d96a0]
push eax
push esi
call fcn.004427e0
jmp 0x431eab
mov ecx, dword [0x4d96a4]
mov eax, dword [0x4d96a0]
mov edx, dword [0x4d969c]
push ecx
mov ecx, dword [0x4d96a8]
push esi
call fcn.00443050
jmp 0x431eab
mov edx, dword [0x4d96b4]
mov eax, dword [0x4d96b0]
mov ecx, dword [0x4d96ac]
push edx
mov edx, dword [0x4d96a8]
push eax
push ecx
push edx
mov eax, esi
call fcn.004432b0
jmp 0x431eab
mov eax, dword [0x4d96a0]
mov ecx, dword [0x4d969c]
push eax
push esi
call fcn.00443510
jmp 0x431eab
push 0
push 0x1a3
push 0x111
push 0
push 0x4b62ac
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [0x4d5b14]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x432d5f
push 1
push eax
call fcn.004014c0
add esp, 8
mov edi, 1
jmp 0x431eb5
push 0
push 0x1a0
push 0x111
push 0
push 0x4b62ac
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [0x4d5b14]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle 0x432d5f
push 1
push eax
call fcn.004014c0
add esp, 8
mov edi, 1
jmp 0x431eb5
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x433496
mov edi, dword [0x4d9698]
cmp word [edi], ax
je 0x433496
mov eax, 0x4da728
call fcn.00423920
test eax, eax
jne 0x433496
mov eax, dword [0x4d9698]
push eax
push 0
push 0x4b3858
mov ecx, esi
call fcn.0043a140
jmp 0x431eab
mov dword [0x4db1b8], eax
mov edi, 1
jmp 0x431eb5
mov eax, dword [esi + 0xc]
mov cl, 1
cmp cl, byte [esi + 1]
mov ecx, dword [0x4d96a0]
sbb edx, edx
and edx, dword [0x4d964c]
push edx
mov edx, dword [0x4d969c]
push eax
mov eax, dword [0x4d9698]
push ecx
push edx
push eax
call fcn.00410430
add esp, 0x14
jmp 0x431eab
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x43357d
push edi
mov edi, dword [0x4d9698]
mov eax, ebx
mov ebx, 0x4da728
call fcn.00423960
mov edi, eax
test edi, edi
jne 0x43357d
mov eax, dword [0x4d9698]
cmp word [eax], di
je 0x43351d
push eax
push edi
push 0x4b3858
mov ecx, esi
call fcn.0043a140
jmp 0x431eab
cmp byte [esi + 1], 0
jbe 0x433547
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 4]
cmp word [eax], 0
je 0x433547
push 0x4b0cf8
push 0
push 0x4b3d84
mov ecx, esi
call fcn.0043a140
jmp 0x431eab
mov eax, dword [esp + 0x14]
mov edi, dword [eax + 0xbc]
test edi, edi
jne 0x43357d
mov eax, dword [eax + 0xc0]
test eax, eax
je 0x433565
mov edi, dword [eax]
test edi, edi
jne 0x43357d
push 0x4b0cf8
push 0
push 0x4b8050
mov ecx, esi
call fcn.0043a140
jmp 0x431eab
mov eax, dword [0x4d969c]
push 0
push 1
push 1
push 1
call fcn.0047fe10
add esp, 0x10
test eax, eax
jne 0x433638
mov esi, dword [0x4d969c]
push eax
call fcn.0040efc0
add esp, 4
test eax, eax
jne 0x4335fd
mov edx, dword [0x4d969c]
push 0x4b2bbc
push edx
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x4335de
push edi
push 0x4da728
call fcn.00423830
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d969c]
mov ecx, dword [esp + 0x10]
push eax
push 0
push 0x4b3db0
call fcn.0043a140
mov esi, dword [esp + 0x10]
jmp 0x431eab
jle 0x433634
cmp eax, 2
jg 0x433634
cmp eax, 1
mov eax, dword [0x4d96a0]
sete cl
push 0
movzx edx, cl
push edx
push eax
push 0x4b0cf8
push edi
mov edi, 0x4da728
call fcn.00423550
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
mov esi, dword [esp + 0x10]
mov ecx, dword [0x4d969c]
cmp word [ecx], 0
mov edx, dword [0x4d96a0]
jne 0x433654
cmp word [edx], 0
je 0x433654
mov al, 1
jmp 0x433656
xor al, al
push eax
push 1
push edx
push ecx
push edi
mov edi, 0x4da728
call fcn.00423550
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d9698]
cmp word [eax], 0
mov ebx, 0x10
je 0x4336a5
push 0x4b98f4
push eax
call fcn.00499c29
add esp, 8
test eax, eax
je 0x4336a5
xor edi, edi
mov ecx, esi
call fcn.0042cc50
mov edi, dword [esp + 0x14]
mov ebx, eax
test ebx, ebx
je 0x4336aa
mov eax, 1
mov byte [edi + 0xee], al
test al, al
je 0x4336d4
or eax, 0xffffffff
mov dword [edi + 0xd8], ebx
mov byte [edi + 0xec], 0
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 0x24], eax
lea edi, [eax + 2]
jmp 0x431eb5
mov dword [edi + 0xd8], 5
mov byte [edi + 0xec], 1
mov edi, 1
jmp 0x431eb5
mov esi, dword [0x4d9698]
call fcn.0041c380
dec eax
je 0x4337a0
dec eax
je 0x433755
dec eax
jne 0x4337b5
mov ecx, dword [0x4d969c]
cmp word [ecx], ax
je 0x433741
mov ecx, dword [esp + 0x10]
lea edi, [eax + 1]
call fcn.0042cc50
or eax, edx
jne 0x43373d
mov esi, dword [esp + 0x10]
mov eax, edi
mov edi, dword [esp + 0x14]
mov byte [edi + 0xed], al
mov edi, eax
jmp 0x431eb5
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
xor eax, eax
mov byte [edi + 0xed], al
lea edi, [eax + 1]
jmp 0x431eb5
mov edx, dword [0x4d969c]
cmp word [edx], 0
je 0x433774
mov ecx, dword [esp + 0x10]
mov edi, 1
call fcn.0042cc50
mov dword [0x4db22c], eax
mov eax, dword [0x4d96a0]
cmp word [eax], 0
je 0x4337b5
mov ecx, dword [esp + 0x10]
mov edi, 2
call fcn.0042cc50
mov esi, dword [esp + 0x10]
mov dword [0x4db228], eax
mov edi, 1
jmp 0x431eb5
mov ecx, dword [esp + 0x10]
mov edi, 1
call fcn.0042cc50
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x2c], eax
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
mov ebx, dword [esi + 0xc]
test ebx, ebx
jne 0x4337e6
mov edi, dword [0x4d9698]
push 1
push 0x4da728
call fcn.0042d9c0
mov ebx, eax
test ebx, ebx
je case.0x431bb0.8
mov edi, dword [0x4d96a4]
cmp word [edi], 0
je 0x433823
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x433820
mov eax, 0x4da728
call fcn.00423920
test eax, eax
jne 0x433820
mov edx, dword [0x4d96a4]
push edx
push eax
push 0x4b3858
mov ecx, esi
call fcn.0043a140
jmp 0x431eab
mov dword [ebx + 0x10], eax
mov eax, dword [0x4d96ac]
mov ecx, dword [0x4d96a8]
mov edx, dword [0x4d96a0]
push eax
mov eax, dword [0x4d969c]
push ecx
push edx
push eax
push ebx
call fcn.00485e80
jmp 0x431eab
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x433887
mov eax, dword [0x4d9698]
mov ebx, eax
cmp word [eax], di
je 0x4338c2
mov edi, dword [0x4da760]
test edi, edi
je 0x4338c2
mov ecx, dword [edi + 4]
push ebx
push ecx
call fcn.00499c29
add esp, 8
test eax, eax
je 0x433887
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x433865
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d969c]
cmp word [eax], 0
je 0x4338b8
push 0x4b4138
push eax
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x4338b8
mov al, 1
mov ecx, edi
push eax
call fcn.004865a0
mov edi, 1
jmp 0x431eb5
xor al, al
mov ecx, edi
push eax
call fcn.004865a0
mov edi, 1
jmp 0x431eb5
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x433913
mov eax, dword [0x4d9698]
mov ebx, eax
cmp word [eax], di
je 0x43397d
mov edi, dword [0x4da760]
test edi, edi
je 0x43397d
mov edx, dword [edi + 4]
push ebx
push edx
call fcn.00499c29
add esp, 8
test eax, eax
je 0x433913
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x4338f1
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d969c]
cmp word [eax], 0
je 0x433974
push 0x4b74b0
push eax
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x433944
push edi
xor edx, edx
mov cl, 0x84
call fcn.004861b0
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d969c]
cmp word [eax], 0
je 0x433974
push 0x4b4138
push eax
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x433974
mov al, 1
push eax
push edi
call fcn.00486270
mov edi, 1
jmp 0x431eb5
xor al, al
push eax
push edi
call fcn.00486270
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d96a0]
push eax
mov eax, dword [0x4d969c]
call fcn.004496f0
jmp 0x431eab
test ebx, ebx
jne 0x4339b4
lea edi, [ebx + 1]
mov ecx, esi
call fcn.0042cc50
call fcn.00419e10
jmp 0x431eb5
mov eax, dword [0x4d969c]
push 0
push 1
push 0
push 1
call fcn.0047fe10
add esp, 0x10
cmp eax, 2
je 0x4339ec
mov eax, dword [0x4d96a0]
push 0
push 1
push 0
push 1
call fcn.0047fe10
add esp, 0x10
cmp eax, 2
jne 0x433a79
mov ecx, dword [0x4d969c]
cmp word [ecx], 0
je 0x433a06
mov edi, 1
mov ecx, esi
call fcn.0042cd00
jmp 0x433a08
fldz
mov edx, dword [0x4d96a0]
fst qword [esp + 0x30]
cmp word [edx], 0
je 0x433a43
mov edi, 2
fstp st(0)
mov ecx, esi
call fcn.0042cd00
fst qword [esp + 0x78]
fld qword [esp + 0x30]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x433a4f
fstp qword [esp + 0x30]
fstp qword [esp + 0x78]
jmp 0x433a53
fld qword [0x4cee78]
fst qword [esp + 0x78]
jmp 0x433a30
fstp st(0)
fstp st(0)
call fcn.00419f80
fld qword [esp + 0x78]
fld qword [esp + 0x30]
sub esp, 8
fsub st(1), st(0)
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push ebx
call fcn.0041a490
jmp 0x431eab
mov eax, dword [0x4d969c]
cmp word [eax], 0
je 0x433a98
mov edi, 1
mov ecx, esi
call fcn.0042cc50
mov ebx, eax
mov dword [esp + 0x1c], eax
jmp 0x433a9e
xor ebx, ebx
mov dword [esp + 0x1c], ebx
mov ecx, dword [0x4d96a0]
cmp word [ecx], 0
je 0x433aba
mov edi, 2
mov ecx, esi
call fcn.0042cc50
mov edi, eax
jmp 0x433abf
mov edi, closesocket
cmp ebx, edi
jle 0x433acd
mov eax, ebx
mov ebx, edi
mov dword [esp + 0x1c], ebx
mov edi, eax
call fcn.00419f30
mov ecx, eax
mov eax, ebx
cdq
mov ebx, eax
mov dword [esp + 0x30], edx
mov eax, edi
cdq
sub eax, ebx
sbb edx, dword [esp + 0x30]
add eax, 1
adc edx, 0
push edx
push eax
push 0
push ecx
call fcn.004ab440
add eax, dword [esp + 0x1c]
jmp 0x43277d
mov eax, dword [0x4d969c]
push 1
push esi
call fcn.00449810
jmp 0x431eab
mov edx, dword [0x4d96a0]
mov eax, dword [0x4d969c]
push edx
mov edx, dword [0x4d9698]
mov ecx, esi
call fcn.00449960
jmp 0x431eab
mov ecx, dword [0x4d96a0]
mov edx, dword [0x4d969c]
push esi
call fcn.00449c00
jmp 0x431eab
mov eax, dword [0x4d96a4]
mov edx, dword [0x4d969c]
push eax
xor eax, eax
cmp cl, 0x9d
sete al
push edx
push esi
dec eax
and eax, dword [0x4d9698]
call fcn.0044a220
jmp 0x431eab
mov eax, dword [0x4d969c]
cmp word [eax], 0
je 0x433b87
mov edi, 1
mov ecx, esi
call fcn.0042cc50
dec eax
jmp 0x433b89
xor eax, eax
cdq
test edx, edx
jg 0x433b9a
jl 0x433b94
test eax, eax
jae 0x433b9a
xor eax, eax
mov dword [esp + 0x34], eax
cmp byte [esi], 0x9f
push eax
mov eax, esi
jne 0x433bac
call fcn.0044b370
jmp 0x431eab
mov edi, dword [0x4d9698]
call fcn.0044b460
jmp 0x431eab
mov ecx, dword [0x4d969c]
cmp word [ecx], 0
je 0x433bda
mov edi, 1
mov ecx, esi
call fcn.0042cc50
mov ebx, eax
test ebx, ebx
jns 0x433bdf
mov ebx, 0x96
mov edx, dword [0x4d9698]
cmp word [edx], 0
je 0x433c06
xor edi, edi
mov ecx, esi
call fcn.0042cc50
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov edi, 1
jmp 0x431eb5
mov eax, 0x20b
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d969c]
cmp word [eax], 0
je 0x433c3f
push 0x4b7a20
push eax
call fcn.00499c29
add esp, 8
test eax, eax
je 0x433c65
mov eax, dword [0x4d969c]
push 0x4b35d4
push eax
call fcn.00499c29
add esp, 8
test eax, eax
je 0x433c65
xor al, al
mov ecx, esi
push eax
mov eax, dword [0x4d9698]
call fcn.0044b600
jmp 0x431eab
mov eax, 1
push eax
mov eax, dword [0x4d9698]
mov ecx, esi
call fcn.0044b600
jmp 0x431eab
cmp byte [esi + 1], 2
jae 0x433c87
mov edi, dword [edi + 0x18]
jmp 0x433c89
xor edi, edi
mov eax, dword [0x4d9698]
mov ecx, dword [0x4d969c]
push edi
push eax
push ecx
push esi
call fcn.0044c9c0
jmp 0x431eab
mov ecx, dword [0x4d969c]
push esi
call fcn.0044c070
jmp 0x431eab
mov edx, dword [0x4d969c]
mov ecx, dword [0x4d96a0]
push edx
push esi
call fcn.0044c630
jmp 0x431eab
mov eax, dword [0x4d9698]
mov ecx, esi
call fcn.0044cdd0
jmp 0x431eab
mov eax, dword [0x4d9698]
mov ecx, esi
call fcn.0045e810
jmp 0x431eab
mov ecx, dword [0x4d9698]
movzx eax, word [ecx]
neg eax
sbb eax, eax
push 7
and eax, ecx
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHEmptyRecycleBinW]
test eax, eax
setne al
movzx ecx, al
push ecx
mov ebx, esi
call fcn.00439dd0
jmp 0x431eab
mov edi, dword [0x4d969c]
mov eax, dword [0x4d9698]
push esi
mov esi, dword [0x4d96a0]
call fcn.0044ce80
mov esi, dword [esp + 0x10]
jmp 0x431eab
mov edi, 2
mov ecx, esi
call fcn.0042cc50
mov esi, dword [0x4d969c]
mov ecx, dword [0x4d9698]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [esp + 0x10]
push eax
call fcn.0044d060
mov esi, dword [esp + 0x10]
jmp 0x431eab
push 0
push ecx
mov edi, 2
mov ecx, esi
call fcn.0042cc50
mov ecx, dword [0x4d969c]
mov edx, dword [0x4d9698]
add esp, 4
dec eax
neg eax
sbb eax, eax
inc eax
push eax
push ecx
push edx
call fcn.0045eae0
add esp, 0x10
test al, al
sete al
movzx ecx, al
push ecx
mov ebx, esi
call fcn.00439dd0
jmp 0x431eab
mov edx, dword [0x4d96a0]
mov ax, word [edx]
call fcn.0040ef10
cmp ax, 0x52
jne 0x433de0
mov eax, dword [0x4d969c]
mov ecx, dword [0x4d9698]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
jmp 0x432d8c
push 1
push ecx
mov edi, 2
mov ecx, esi
call fcn.0042cc50
mov ecx, dword [0x4d969c]
mov edx, dword [0x4d9698]
add esp, 4
push eax
push ecx
push edx
call fcn.0045eae0
add esp, 0x10
test al, al
sete al
movzx ecx, al
push ecx
mov ebx, esi
call fcn.00439dd0
jmp 0x431eab
mov edx, dword [0x4d9698]
push edx
call fcn.0044bf70
add esp, 4
test al, al
sete al
mov byte [esp + 0x84], al
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esp + 0x84]
mov ecx, dword [0x4d5b14]
push edx
mov ebx, esi
mov dword [ecx + 0x30], eax
call fcn.00439dd0
jmp 0x431eab
mov eax, dword [0x4d9698]
cmp word [eax], 0
je 0x433e9c
mov edi, 1
mov ecx, esi
call fcn.0042cc50
cmp eax, edi
mov eax, dword [0x4d9698]
sete cl
movzx edx, cl
push edx
call fcn.0045edb0
add esp, 4
test al, al
je 0x433e9c
xor al, al
mov ebx, esi
push eax
call fcn.00439dd0
jmp 0x431eab
mov eax, 1
push eax
mov ebx, esi
call fcn.00439dd0
jmp 0x431eab
mov eax, dword [0x4d969c]
cmp word [eax], 0
jne 0x433ecb
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x250]
test edi, edi
jne 0x433ecb
mov eax, 0x4b0cf8
mov ecx, esi
call fcn.0044d110
jmp 0x431eab
mov ebx, dword [0x4d969c]
cmp word [ebx], 0
jne 0x433ef5
mov edi, dword [edi + 0x10]
lea ebx, [edi + 0x250]
test edi, edi
jne 0x433ef5
mov ebx, 0x4b0cf8
mov edi, 3
mov ecx, esi
call fcn.0042cc50
mov esi, dword [0x4d96a0]
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.0041cea0
mov edx, dword [esp + 0x14]
push eax
mov eax, dword [0x4d9698]
push ebx
push edx
call fcn.0044d220
mov esi, dword [esp + 0x10]
jmp 0x431eab
mov eax, dword [0x4d969c]
cmp word [eax], 0
jne 0x433f4d
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x250]
test edi, edi
jne 0x433f4d
mov eax, 0x4b0cf8
mov ecx, dword [0x4d96a0]
movzx edx, word [ecx]
push edx
mov ecx, esi
call fcn.0044d870
jmp 0x431eab
mov ebx, dword [0x4d969c]
cmp word [ebx], 0
jne 0x433f81
mov edi, dword [edi + 0x10]
lea ebx, [edi + 0x250]
test edi, edi
jne 0x433f81
mov ebx, 0x4b0cf8
mov edi, 4
mov ecx, esi
call fcn.0042cc50
mov esi, dword [0x4d96a4]
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.0041cea0
mov edx, dword [0x4d96a0]
mov ecx, dword [esp + 0x14]
push eax
movzx eax, word [edx]
push eax
mov eax, dword [0x4d9698]
push ebx
call fcn.0044d9f0
mov esi, dword [esp + 0x10]
jmp 0x431eab
mov eax, dword [0x4d969c]
cmp word [eax], 0
je 0x433fe4
mov ecx, dword [0x4d96a0]
push ecx
mov edi, eax
push esi
call fcn.0044dbb0
jmp 0x431eab
mov edi, dword [edi + 0x10]
test edi, edi
je 0x434003
mov ecx, dword [0x4d96a0]
push ecx
add edi, 0x250
push esi
call fcn.0044dbb0
jmp 0x431eab
mov ecx, dword [0x4d96a0]
push ecx
mov edi, 0x4b0cf8
push esi
call fcn.0044dbb0
jmp 0x431eab
mov eax, dword [0x4d969c]
cmp word [eax], 0
jne 0x434037
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x250]
test edi, edi
jne 0x434037
mov eax, 0x4b0cf8
mov ecx, esi
call fcn.0045e930
jmp 0x431eab
mov eax, dword [0x4d9698]
call fcn.0044b830
xor edx, edx
cmp dword [edi + 0x104], edx
sete dl
mov edi, edx
jmp 0x431ead
mov eax, dword [0x4d96a8]
mov ecx, dword [0x4d96a4]
mov edx, dword [0x4d969c]
push eax
push ecx
mov ecx, dword [0x4d96a0]
push edx
push esi
call fcn.0044b990
jmp 0x431eab
mov eax, dword [0x4d96a0]
mov ecx, dword [0x4d969c]
push eax
push ecx
mov ecx, dword [0x4d96a4]
mov edx, esi
call fcn.0045df10
jmp 0x431eab
mov edx, dword [0x4d9698]
push edx
push esi
call fcn.0045e220
jmp 0x431eab
mov eax, dword [0x4d96b8]
mov ecx, dword [0x4d96b0]
mov edx, dword [0x4d96ac]
mov edi, dword [0x4d96b4]
push eax
mov eax, dword [0x4d96a4]
push ecx
mov ecx, dword [0x4d969c]
push edx
mov edx, dword [0x4d9698]
push eax
mov eax, dword [0x4d96a8]
push ecx
mov ecx, dword [0x4d96a0]
push edx
push esi
call fcn.0045e5b0
jmp 0x431eab
push 0
mov ecx, 4
call fcn.00445d30
add esp, 4
jmp 0x431eab
mov esi, dword [0x4d9698]
push 7
call fcn.0040efc0
add esp, 4
cmp eax, 7
jne 0x434138
push 0
lea ecx, [eax - 6]
call fcn.00445d30
mov esi, dword [esp + 0x14]
add esp, 4
jmp 0x431eab
cmp byte [edi + 0xf9], 0
je 0x434164
mov ecx, dword [0x4da628]
test ecx, ecx
jle 0x43414e
dec ecx
jmp 0x434153
mov ecx, 0x18f
mov dword [0x4da628], ecx
mov dword [ecx*4 + 0x4d9fe8], 0
mov esi, dword [esp + 0x10]
cmp eax, 1
sete al
mov byte [edi + 0xf9], al
mov edi, 1
jmp 0x431eb5
push 0
mov ecx, 2
call fcn.00445d30
add esp, 4
jmp 0x431eab
push 0
mov ecx, 3
call fcn.00445d30
add esp, 4
jmp 0x431eab
mov ebx, dword [0x4d5b14]
add ebx, 0x4c
call fcn.00466f40
test eax, eax
je 0x4341c6
mov ecx, dword [0x4d5b14]
mov edx, dword [ecx + 0x4c]
mov ebx, dword [edx + 4]
jmp 0x4341c8
xor ebx, ebx
mov al, byte [esi + 1]
test al, al
jne 0x4341e6
fldz
sub esp, 8
fstp qword [esp]
push ebx
push 0
push 0x10000
push 0x4b98fc
jmp 0x43422d
cmp al, 1
jne 0x434202
fldz
mov eax, dword [0x4d9698]
sub esp, 8
fstp qword [esp]
push ebx
push 0
push 0x10000
push eax
jmp 0x43422d
mov edi, 3
mov ecx, esi
call fcn.0042cd00
mov ecx, dword [0x4d969c]
sub esp, 8
fstp qword [esp]
push ebx
push ecx
xor edi, edi
mov ecx, esi
call fcn.0042cc50
mov edx, dword [0x4d96a0]
push eax
push edx
call fcn.00484f30
mov edi, eax
add esp, 0x18
test edi, edi
jne 0x434260
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x59e
jne 0x434260
mov eax, dword [0x4d9698]
push eax
push edi
push 0x4b3d84
mov ecx, esi
call fcn.0043a140
jmp 0x431eab
xor ecx, ecx
test edi, edi
setne cl
mov edi, ecx
jmp 0x431ead
mov edx, dword [0x4d96b4]
cmp word [edx], 0
je 0x43428c
mov edi, 7
mov ecx, esi
call fcn.0042cc50
mov dword [esp + 0x3c], eax
jmp 0x434294
mov dword [esp + 0x3c], connect
mov eax, dword [0x4d96b0]
cmp word [eax], 0
je 0x4342b1
mov edi, 6
mov ecx, esi
call fcn.0042cc50
mov dword [esp + 0x1c], eax
jmp 0x4342b9
mov dword [esp + 0x1c], connect
mov ecx, dword [0x4d96ac]
cmp word [ecx], 0
je 0x4342d7
mov edi, 5
mov ecx, esi
call fcn.0042cc50
mov dword [esp + 0x44], eax
jmp 0x4342df
mov dword [esp + 0x44], connect
mov edx, dword [0x4d96a8]
cmp word [edx], 0
je 0x4342fd
mov edi, 4
mov ecx, esi
call fcn.0042cc50
mov dword [esp + 0x28], eax
jmp 0x434305
mov dword [esp + 0x28], connect
mov edi, 9
mov ecx, esi
call fcn.0042cd00
mov eax, dword [0x4d96c0]
mov ecx, dword [0x4d96b8]
sub esp, 8
fstp qword [esp]
push eax
mov ax, word [ecx]
call fcn.0040ef10
mov ecx, dword [esp + 0x48]
cmp ax, 0x4c
sete dl
movzx eax, dl
mov edx, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x54]
push ecx
mov ecx, dword [0x4d96a4]
push edx
push eax
mov ax, word [ecx]
call fcn.0040ef10
mov edx, dword [0x4d96a0]
mov edi, dword [esp + 0x44]
cmp ax, 0x48
mov eax, dword [0x4d969c]
push edx
push eax
sete cl
push ebx
call fcn.00446000
add esp, 0x28
jmp 0x431eab
mov ecx, dword [0x4d969c]
cmp word [ecx], 0
je 0x434395
mov edi, 1
mov ecx, esi
call fcn.0042cc50
mov ebx, eax
jmp 0x434397
xor ebx, ebx
mov edx, dword [0x4d9698]
cmp word [edx], 0
je 0x4343ae
xor edi, edi
mov ecx, esi
call fcn.0042cc50
jmp 0x4343b3
mov eax, 0xc8
mov ecx, dword [0x4d96a4]
mov edx, dword [0x4d96a0]
push ecx
push edx
push ebx
push eax
call fcn.0045c570
jmp 0x431eab
mov eax, dword [0x4d9714]
test eax, eax
je 0x4343ed
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4343ed
mov eax, dword [0x4d9714]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4d9714], 0
mov edi, 1
jmp 0x431eb5
mov ecx, dword [0x4d96a8]
mov edx, dword [0x4d96a4]
mov eax, dword [0x4d96a0]
push 0
push ecx
mov ecx, dword [0x4d969c]
push edx
mov edx, dword [0x4d9698]
push eax
push ecx
push edx
push esi
mov ecx, 0x4b0cf8
call fcn.0043bfe0
jmp 0x431eab
mov eax, dword [0x4d96ac]
mov ecx, dword [0x4d96a8]
mov edx, dword [0x4d96a4]
push 1
push eax
mov eax, dword [0x4d96a0]
push ecx
mov ecx, dword [0x4d969c]
push edx
push eax
push ecx
mov ecx, dword [0x4d9698]
push esi
call fcn.0043bfe0
jmp 0x431eab
mov edx, dword [0x4d96a0]
mov eax, dword [0x4d969c]
mov ecx, dword [0x4d9698]
push edx
push eax
push ecx
mov ecx, dword [0x4d96a4]
push esi
call fcn.0043d240
jmp 0x431eab
mov edx, dword [0x4d969c]
mov eax, dword [0x4d9698]
mov edi, dword [0x4d96a4]
mov esi, dword [0x4d96a0]
push edx
push eax
call fcn.0043d600
mov esi, dword [esp + 0x10]
jmp 0x431eab
mov ecx, esi
call fcn.0043e930
jmp 0x431eab
mov esi, dword [0x4d969c]
call fcn.0041d130
mov esi, dword [0x4d9698]
movzx ebx, ax
call fcn.0041d1a0
movzx ecx, ax
cmp ecx, 0xffffffff
je 0x434506
cmp ebx, 0xffffffff
je 0x434506
mov eax, 3
shl ax, cl
shl bx, cl
not ax
and ax, word [edi + 0xf0]
or ax, bx
mov word [edi + 0xf0], ax
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
xor edi, edi
mov ecx, esi
call fcn.0042cc50
mov ecx, dword [esp + 0x14]
mov byte [ecx + 0xef], al
cmp al, 0x64
jbe case.0x434919.69
mov byte [ecx + 0xef], 2
mov edi, 1
jmp 0x431eb5
mov ecx, dword [edi + 0xd4]
mov eax, dword [0x4d9698]
push ecx
call fcn.0041ce10
mov dword [edi + 0xd4], eax
add esp, 4
mov edi, 1
jmp 0x431eb5
xor edi, edi
mov ecx, esi
call fcn.0042cc50
cmp eax, 0x64
ja case.0x434919.69
mov edx, dword [esp + 0x14]
mov byte [edx + 0xf6], al
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d96a0]
push 0x4b5ecc
push eax
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x4345e3
mov ecx, dword [0x4d9698]
cmp word [ecx], ax
je 0x4345bc
xor edi, edi
mov ecx, esi
call fcn.0042cc50
mov edx, dword [esp + 0x14]
mov dword [edx + 0x60], eax
mov eax, dword [0x4d969c]
cmp word [eax], 0
je case.0x434919.69
mov edi, 1
mov ecx, esi
call fcn.0042cc50
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x68], eax
jmp 0x431eb5
mov edx, dword [0x4d9698]
cmp word [edx], 0
je 0x4345ff
xor edi, edi
mov ecx, esi
call fcn.0042cc50
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x5c], eax
mov edx, dword [0x4d969c]
cmp word [edx], 0
je case.0x434919.69
mov edi, 1
mov ecx, esi
call fcn.0042cc50
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x64], eax
jmp 0x431eb5
mov edx, dword [0x4d969c]
push 0x4b5ecc
push edx
call fcn.00499c29
add esp, 8
xor edi, edi
mov ecx, esi
test eax, eax
jne 0x434659
call fcn.0042cc50
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x70], eax
mov edi, 1
jmp 0x431eb5
call fcn.0042cc50
mov edx, dword [esp + 0x14]
mov dword [edx + 0x6c], eax
mov edi, 1
jmp 0x431eb5
xor edi, edi
mov ecx, esi
call fcn.0042cc50
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x54], eax
mov edi, 1
jmp 0x431eb5
xor edi, edi
mov ecx, esi
call fcn.0042cc50
mov edx, dword [esp + 0x14]
mov dword [edx + 0x58], eax
mov edi, 1
jmp 0x431eb5
mov ecx, dword [0x4d9698]
mov eax, 0x4b79e4
call fcn.00480360
mov ecx, esi
test eax, eax
je 0x4346de
mov dword [edi], 0xffffffff
mov dword [edi + 4], 0xffffffff
xor edi, edi
call fcn.0042cc50
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x24], eax
mov edi, 1
jmp 0x431eb5
mov dword [edi + 0x24], 0xffffffff
xor edi, edi
call fcn.0042cc50
mov ecx, dword [esp + 0x14]
mov dword [ecx + 4], edx
mov edx, eax
or edx, dword [ecx + 4]
mov dword [ecx], eax
jne case.0x434919.69
mov dword [ecx + 4], edi
mov dword [ecx], 0xa
lea edi, [edx + 1]
jmp 0x431eb5
mov esi, dword [0x4d9698]
push 7
call fcn.0040efc0
add esp, 4
cmp eax, 7
je 0x434732
cmp eax, 1
sete al
mov byte [edi + 0xf3], al
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
mov esi, dword [0x4d9698]
call fcn.0041b6a0
dec eax
cmp eax, 5
ja case.default.0x434755
jmp dword [eax*4 + 0x4358f0]
mov esi, dword [esp + 0x10]
mov dword [edi + 0x20], 1
mov edi, 1
jmp 0x431eb5
mov esi, dword [esp + 0x10]
mov dword [edi + 0x20], 2
mov edi, 1
jmp 0x431eb5
mov esi, dword [esp + 0x10]
mov dword [edi + 0x20], 4
mov edi, 1
jmp 0x431eb5
mov esi, dword [esp + 0x10]
mov dword [edi + 0x20], 3
mov edi, 1
jmp 0x431eb5
mov esi, dword [esp + 0x10]
mov byte [edi + 0xe9], 1
mov edi, 1
jmp 0x431eb5
mov esi, dword [esp + 0x10]
mov byte [edi + 0xe9], 0
mov edi, 1
jmp 0x431eb5
mov ecx, dword [0x4d9698]
push ecx
mov ecx, dword [esp + 0x14]
push 0
push 0x4b3d84
call fcn.0043a140
mov esi, dword [esp + 0x10]
jmp 0x431eab
mov edx, dword [0x4d9698]
push 5
push 0x4b600c
push edx
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x4348e0
lea edi, [eax + 1]
mov ecx, esi
call fcn.0042cbc0
cmp eax, 0x1e
jae 0x431eb5
mov ecx, esi
call fcn.0042cc50
mov edi, eax
mov eax, dword [0x4d969c]
push 0x2e
push eax
mov ebx, edx
call fcn.0049a90e
add esp, 8
mov dword [esp + 0x3c], eax
test eax, eax
je 0x43485e
mov esi, eax
add esi, 2
call fcn.00404070
mov esi, dword [esp + 0x10]
jmp 0x434862
xor eax, eax
xor edx, edx
add edi, eax
adc ebx, edx
add edi, 2
adc ebx, 0
mov dword [esp + 0x34], ebx
js 0x434884
jg case.0x434919.69
cmp edi, 0xff
ja case.0x434919.69
mov eax, dword [0x4d969c]
push 0
push 1
push 1
push 1
call fcn.0047fe10
add esp, 0x10
mov ecx, 0x4b9928
test eax, eax
jne 0x4348a7
mov ecx, 0x4b0cf8
cmp dword [esp + 0x3c], 0
mov eax, 0x4b0cf8
jne 0x4348b8
mov eax, 0x4b8700
mov edx, dword [esp + 0x14]
push ecx
mov ecx, dword [0x4d969c]
push eax
push ecx
add edx, 0x74
push 0x4b992c
push edx
call fcn.0049a830
add esp, 0x14
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d9698]
push 7
push 0x4b5ffc
push eax
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne case.0x434919.69
mov ecx, dword [0x4d969c]
movzx eax, word [ecx]
add eax, 0xffffffbc
cmp eax, 0x24
ja case.0x434919.69
movzx edx, byte [eax + 0x435914]
jmp dword [edx*4 + 0x435908]
mov byte [edi + 0xf5], 0x44
mov edi, 1
jmp 0x431eb5
mov al, byte [ecx]
mov byte [edi + 0xf5], al
mov edi, 1
jmp 0x431eb5
mov ecx, dword [0x4d96a0]
push ecx
mov ecx, dword [0x4d969c]
call fcn.00446f90
jmp 0x431eab
movzx eax, byte [esi + 1]
mov dl, 4
cmp dl, al
sbb ecx, ecx
and ecx, dword [0x4d9658]
mov dl, 3
push ecx
mov ecx, dword [0x4d96ac]
cmp dl, al
mov edx, dword [0x4d96a8]
sbb eax, eax
and eax, dword [0x4d9654]
push eax
mov eax, dword [0x4d96a4]
push ecx
mov ecx, dword [0x4d96a0]
push edx
mov edx, dword [0x4d9698]
push eax
push ecx
mov ecx, dword [0x4d969c]
push edx
push 0x4da728
call fcn.00475350
jmp 0x431eab
mov eax, dword [0x4d96a4]
mov ecx, dword [0x4d96a0]
mov edx, dword [0x4d969c]
push eax
push ecx
mov ecx, dword [0x4d9698]
push edx
push 0x4da728
call fcn.00466fb0
jmp 0x431eab
mov edx, dword [0x4d969c]
mov al, 2
cmp al, byte [esi + 1]
mov eax, dword [0x4d9698]
sbb ecx, ecx
and ecx, dword [0x4d9650]
push ecx
push edx
push eax
mov eax, dword [0x4d96a0]
push esi
call fcn.00467910
jmp 0x431eab
mov ecx, dword [0x4d96a4]
mov edx, dword [0x4d96a0]
mov eax, dword [0x4d969c]
push ecx
push edx
push eax
push esi
call fcn.004688d0
jmp 0x431eab
mov esi, dword [0x4d9698]
call fcn.0041cd30
cmp eax, 7
ja case.0x434a32.3
jmp dword [eax*4 + 0x43593c]
cmp byte [0x4d986d], 0
jne case.0x434a32.3
call fcn.00439a20
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
cmp byte [0x4d986d], 0
je case.0x434a32.3
call fcn.00439a20
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
mov edi, 1
mov ecx, esi
call fcn.0042cc50
test eax, eax
setne dl
movzx eax, dl
push eax
mov eax, dword [0x4d9698]
call fcn.0040f080
push eax
push esi
call fcn.00439a70
jmp 0x431eab
mov esi, dword [0x4d9698]
push 7
call fcn.0040efc0
add esp, 4
cmp eax, 7
je 0x434abd
cmp eax, 1
sete cl
mov byte [edi + 0xf4], cl
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
mov esi, dword [0x4d9698]
call fcn.0041cc70
mov byte [edi + 0xf2], al
cmp al, 4
jne 0x434ae7
mov byte [edi + 0xf2], 0
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
mov esi, dword [0x4d9698]
push 7
call fcn.0040efc0
add esp, 4
cmp eax, 7
je 0x434b16
cmp eax, 1
sete dl
mov byte [edi + 0xea], dl
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
mov esi, dword [0x4d9698]
push 7
call fcn.0040efc0
add esp, 4
cmp eax, 7
je 0x434b45
cmp eax, 1
sete al
mov byte [edi + 0xeb], al
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d9698]
call fcn.0041cd60
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x434919.69
movzx ecx, byte [ecx + 0x435974]
jmp dword [ecx*4 + 0x43595c]
push 1
call dword [sym.imp.USER32.dll_BlockInput]
mov byte [0x4d9f21], 1
mov edi, 1
jmp 0x431eb5
push 0
call dword [sym.imp.USER32.dll_BlockInput]
mov byte [0x4d9f21], 0
mov edi, 1
jmp 0x431eb5
mov dword [0x4d5b24], eax
mov edi, 1
jmp 0x431eb5
or byte [0x4d9f23], 2
cmp dword [0x4d9840], 0
mov byte [0x4d9f22], 1
jne case.0x434919.69
mov edx, dword [0x4d6d3c]
movzx eax, word [edx]
push eax
call fcn.0040d6c0
add esp, 4
mov edi, 1
jmp 0x431eb5
mov byte [0x4d9f22], 0
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d9698]
mov edi, str._a_a_a_v
mov cl, 0x90
call fcn.0044dd70
jmp 0x431eab
mov eax, dword [0x4d9698]
mov edi, 0x4d5b1c
mov cl, 0x14
call fcn.0044dd70
jmp 0x431eab
mov eax, dword [0x4d9698]
mov edi, 0x4d5b20
mov cl, 0x91
call fcn.0044dd70
jmp 0x431eab
mov ebx, 0x4da728
call fcn.0041e900
mov edi, 1
jmp 0x431eb5
push 1
mov ebx, 0x4da728
call fcn.0041eab0
mov edi, 1
jmp 0x431eb5
xor edi, edi
mov ecx, esi
call fcn.0042cc50
push 1
push eax
call fcn.004014c0
add esp, 8
mov edi, 1
jmp 0x431eb5
mov ecx, dword [0x4d969c]
mov ebx, dword [0x4d96a4]
mov edx, dword [0x4d96a0]
push ecx
mov ecx, dword [0x4d96a8]
call fcn.0047c220
jmp 0x431eab
mov edx, dword [0x4d96a0]
mov eax, dword [0x4d9698]
mov ecx, dword [0x4d96a4]
push edx
mov edx, dword [0x4d969c]
push eax
push esi
call fcn.0047c460
jmp 0x431eab
cmp byte [esi + 1], 3
mov edx, dword [0x4d969c]
sbb ecx, ecx
not ecx
and ecx, dword [0x4d96a0]
mov ebx, esi
push ecx
push edx
mov edx, dword [0x4d9698]
call fcn.0047c5b0
jmp 0x431eab
mov eax, 2
cmp byte [esi + 1], al
jae 0x434d23
mov edi, dword [edi + 0x14]
test edi, edi
je 0x434d23
lea eax, [edi + 0x808]
push eax
mov eax, dword [edi + 4]
lea ecx, [edi + 8]
push ecx
push esi
call fcn.0047c620
jmp 0x431eab
lea edx, [esp + 0x2f]
push edx
mov edx, dword [0x4d969c]
lea ecx, [esp + 0x50]
push ecx
push edx
call fcn.0041afd0
mov ebx, eax
mov eax, dword [esp + 0x58]
add esp, 0xc
test eax, eax
jne 0x434d57
mov eax, dword [0x4d96a0]
mov ecx, dword [0x4d96a4]
mov dword [esp + 0x4c], eax
jmp 0x434d5d
mov ecx, dword [0x4d96a0]
push ecx
push eax
push esi
mov eax, ebx
call fcn.0047c620
cmp byte [esp + 0x2f], 0
mov edi, eax
je 0x431ead
test ebx, ebx
je 0x431ead
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x431ead
mov eax, 2
cmp byte [esi + 1], al
jae 0x434dbe
mov edi, dword [edi + 0x14]
test edi, edi
je 0x434dbe
mov eax, dword [0x4d9698]
push eax
mov eax, dword [edi + 4]
lea ecx, [edi + 0x808]
push ecx
mov ecx, dword [edi + 0x1008]
lea edx, [edi + 8]
push edx
push esi
call fcn.0047c9c0
jmp 0x431eab
lea ecx, [esp + 0x2f]
push ecx
mov ecx, dword [0x4d969c]
lea edx, [esp + 0x50]
push edx
push ecx
call fcn.0041afd0
mov ebx, eax
mov eax, dword [esp + 0x58]
add esp, 0xc
test eax, eax
jne 0x434df8
mov eax, dword [0x4d96a0]
mov ecx, dword [0x4d96a4]
mov edx, dword [0x4d96a8]
mov dword [esp + 0x4c], eax
jmp 0x434e04
mov ecx, dword [0x4d96a0]
mov edx, dword [0x4d96a4]
mov esi, dword [0x4d9698]
push edx
push ecx
push eax
call fcn.0041b1a0
mov edx, dword [esp + 0x1c]
mov ecx, eax
push edx
mov eax, ebx
call fcn.0047c9c0
cmp byte [esp + 0x2f], 0
mov edi, eax
je 0x434e34
test ebx, ebx
je 0x434e34
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [esp + 0x10]
jmp 0x431ead
cmp byte [esi + 1], 1
jae 0x434eb1
mov eax, dword [edi + 0x14]
test eax, eax
je 0x434eb1
cmp dword [eax + 0x1008], 0xfffffffe
lea ecx, [eax + 8]
jne 0x434e94
cmp word [ecx], 0
je 0x434e8a
add eax, 0x808
push eax
push ecx
push 0x4b9940
mov esi, 0x400
lea edi, [esp + 0x14c]
call fcn.0047ffb0
mov esi, dword [esp + 0x1c]
add esp, 0xc
mov ecx, edi
mov edi, dword [esp + 0x14]
xor eax, eax
jmp 0x434e99
lea ecx, [eax + 0x808]
xor eax, eax
jmp 0x434e99
add eax, 0x808
push eax
mov eax, dword [edi + 0x14]
mov eax, dword [eax + 4]
push esi
mov edi, ecx
mov dword [esp + 0x54], ecx
call fcn.0047ce20
jmp 0x431eab
mov eax, dword [0x4d9698]
lea ecx, [esp + 0x2f]
push ecx
lea edx, [esp + 0x50]
push edx
push eax
mov eax, 2
call fcn.0041afd0
add esp, 0xc
cmp dword [esp + 0x4c], 0
mov ebx, eax
jne 0x434ee9
mov ecx, dword [0x4d969c]
mov edi, dword [0x4d96a0]
mov dword [esp + 0x4c], ecx
jmp 0x434eef
mov edi, dword [0x4d969c]
cmp word [edi], 0
jne 0x434ef9
xor edi, edi
jmp 0x434f10
push 0x4b994c
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x434f10
mov edi, 0x4b0cf8
push edi
mov edi, dword [esp + 0x50]
push esi
mov eax, ebx
call fcn.0047ce20
cmp byte [esp + 0x2f], 0
mov edi, eax
je 0x431ead
test ebx, ebx
je 0x431ead
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x431ead
mov esi, dword [0x4d9698]
call fcn.0041b220
mov esi, eax
cmp esi, 0xffffffff
jne 0x434f5c
mov edx, dword [0x4d9698]
push edx
jmp 0x4347e1
call fcn.004815c0
test eax, eax
je 0x434f6b
mov dword [edi + 0xd0], esi
mov esi, dword [esp + 0x10]
mov edi, 1
jmp 0x431eb5
mov eax, dword [0x4d9698]
push eax
mov ecx, 0x4da6a0
call fcn.0040889c
test al, al
jne case.0x434919.69
mov ecx, dword [0x4d9698]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edi, 1
jmp 0x431eb5
xor edi, edi
mov ecx, esi
call fcn.0042cc50
push eax
call fcn.0045f410
xor edx, edx
add esp, 4
test al, al
setne dl
mov edi, edx
jmp 0x431ead
mov eax, dword [0x4d9698]
call fcn.0041d360
cmp eax, 0xffffffff
jne 0x434ff0
mov eax, dword [0x4d9698]
push eax
push 0
push 0x4b3d84
mov ecx, esi
call fcn.0043a140
jmp 0x431eab
mov dword [edi + 0xfc], eax
mov edi, 1
jmp 0x431eb5
xor edi, edi
mov eax, edi
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
mov eax, edi
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, 1
cmp edi, 7
je 0x430d59
mov eax, edi
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test ebx, ebx
je 0x4350c1
cmp dword [ebx + 8], 0
jne 0x4350c1
mov ecx, dword [0x4d9648]
test ecx, ecx
je 0x4350b2
cmp byte [ecx + 0x17], 0
jne 0x435080
mov eax, dword [ecx + 0xc]
jmp 0x435082
mov eax, ecx
test byte [eax + 0x15], 2
je 0x4350b2
mov eax, ebx
call fcn.0041a690
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [ebx + 8], 0
mov ecx, dword [0x4d9698]
mov dword [ebx], ecx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x4350f6
mov edx, dword [esp + 0x40]
mov dword [edx], esi
jmp case.0x430d88.116
mov eax, 5
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x43511f
mov eax, dword [esp + 0x40]
mov dword [eax], esi
mov eax, 6
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4d969c]
push ecx
mov ecx, dword [esp + 0x14]
push 0
push 0x4b3db0
call fcn.0043a140
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4d96a0]
push edx
push 0
push 0x4b3ddc
mov ecx, esi
call fcn.0043a140
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [esp + 0x1c], 0
je 0x4351a9
lea esi, [esp + 0x1c]
call fcn.0043a930
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x430d59
cmp eax, 8
je 0x430d59
mov ecx, dword [0x4dad5c]
push 0x4b0cf8
push 0
push 0x4b92d0
call fcn.0043a140
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x40]
mov dword [ecx], edx
mov eax, edi
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [esi + 1], 0
jne 0x435237
push 0x4b0cf8
push 0
push 0x4b97ec
mov ebx, esi
call fcn.00439cd0
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x10
call fcn.0049a782
mov edi, eax
xor eax, eax
add esp, 4
cmp edi, eax
jne 0x435272
push 0x4b0cf8
push eax
push 0x4b3980
mov ecx, esi
call fcn.0043a140
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4da638]
mov ecx, dword [0x4da63c]
push eax
mov dword [esp + 0x40], edx
lea edx, [esp + 0x40]
push edx
push eax
push esi
lea ebx, [esp + 0x2c]
mov esi, edi
mov dword [esp + 0x2c], ecx
mov dword [0x4da638], eax
mov dword [0x4da63c], eax
call fcn.00465b80
mov ebx, dword [esp + 0x3c]
mov esi, eax
cmp esi, 1
jne 0x4352f6
cmp dword [edi + 8], 0
jne 0x4352f6
cmp dword [edi], ebx
jne 0x4352f6
cmp dword [esp + 0x1c], 0x400000
mov dword [edi + 0xc], ebx
jbe 0x43535b
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x48]
dec dword [0x4da640]
push ecx
call fcn.00439d90
xor eax, eax
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test ebx, ebx
je 0x43532d
mov eax, dword [0x4da638]
test eax, eax
je 0x43531e
push eax
call fcn.0049a18d
add esp, 4
cmp dword [0x4da63c], 0x400000
jbe 0x43531e
dec dword [0x4da640]
mov eax, dword [esp + 0x1c]
mov dword [0x4da638], ebx
mov dword [0x4da63c], eax
cmp esi, 1
je 0x435354
push edi
call fcn.0049a182
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 0xc], 0
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x48]
push ecx
call fcn.00439d90
xor eax, eax
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4d6d3c]
cmp word [edx], 0
jne 0x4353b2
cmp dword [0x4d9f84], 0
jne 0x4353b2
cmp dword [0x4d983c], 0
jne 0x4353b2
cmp dword [0x4d9840], 0
jne 0x4353b2
cmp byte [0x4d984a], 0
je case.0x430d88.224
mov eax, 8
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor edi, edi
mov ecx, esi
call fcn.0042cc50
push eax
push 6
mov ecx, 0x4da728
call fcn.0041eb40
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
jmp case.0x430d88.116
mov edx, dword [esp + 0x40]
mov dword [edx], eax
mov eax, edi
mov ecx, dword [esp + 0x974]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je case.0x430d88.116
push 0x4b0cf8
push 0
push 0x4b9820
mov ecx, esi
call fcn.0043a140
mov ecx, dword [esp + 0x974]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc