Function at 0x423fa0
Capabilities:
Check for time delay via gettickcount
Delete registry key
Find taskbar
Move file
Print debug messages
Resolve function by parsing pe exports
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x495bab
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x528
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
xor edi, edi
mov dword [esp + 0x94], ecx
cmp eax, edi
jne 0x423fd8
lea eax, [esp + 0x70]
mov ebx, dword [0x4a6920]
mov edx, eax
mov esi, ecx
mov dword [esp + 0x40], eax
mov dword [edx], edi
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x10], esi
cmp ecx, edi
je 0x428377
cmp dword [0x4ac908], edi
je 0x42402c
cmp dword [0x4ac8f8], edi
je 0x42401a
mov eax, dword [0x4ac8f0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4ac8f8], edi
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x4ac908], edi
mov dword [0x4ac8f0], edi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov edx, dword [0x4a6920]
mov ecx, eax
sub ecx, dword [0x4ac8ac]
cmp ecx, dword [edx + 0xb8]
jbe 0x424077
push 0
push 0
push 0
push 0
lea eax, [esp + 0xf4]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x424070
push 1
push 0xffffffffffffffff
call fcn.00401350
add esp, 8
call edi
mov dword [0x4ac8ac], eax
cmp byte [ebx + 0xcc], 0
jne 0x4240a8
cmp byte [ebx + 0xce], 0
jne 0x4240a8
mov edx, dword [0x4ac8a0]
cmp edx, 0xffffffff
jle 0x4240a8
mov ecx, dword [ebx + 0x28]
cmp ecx, edx
jle 0x4240a4
mov byte [ebx + 0xcc], 1
jmp 0x4240a8
inc ecx
mov dword [ebx + 0x28], ecx
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
cmp ecx, 0xffffffff
jl 0x4240cb
jg 0x4240b9
cmp edx, 0xffffffff
jbe 0x4240cb
cmp dword [0x4ac89c], ecx
jg 0x4240dd
jl 0x4240cb
cmp dword [0x4ac898], edx
jae 0x4240dd
mov ecx, dword [ebx + 0x24]
cmp ecx, 0xffffffff
jle 0x4240e9
sub eax, dword [0x4ac8a8]
cmp eax, ecx
jb 0x4240e9
push 1
push 0xa
call fcn.00401350
add esp, 8
cmp byte [ebx + 0xd8], 0
je 0x42410a
push 1
push 0x8000012f
call fcn.00401350
add esp, 8
cmp byte [ebx + 0xd8], 0
jne 0x4240f2
mov dword [0x4ac600], esi
cmp byte [ebx + 0xd9], 0
je 0x42414e
mov ecx, dword [0x4ac1d0]
mov dword [ecx*4 + 0x4abb90], esi
call edi
mov ecx, dword [0x4ac1d0]
mov dword [ecx*4 + 0x4a9b38], eax
inc ecx
mov dword [0x4ac1d0], ecx
cmp ecx, 0x190
jl 0x42414e
mov dword [0x4ac1d0], 0
mov al, byte [esi]
cmp al, 1
je 0x424179
cmp al, 0x6b
je 0x424179
cmp al, 0x72
je 0x424179
mov edi, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push edi
push esi
call fcn.00458cc0
mov dword [esp + 0x20], eax
cmp eax, 1
jne 0x42837c
jmp 0x42417c
mov edi, dword [ebp + 0xc]
mov cl, byte [esi]
mov byte [esp + 0x9c], cl
cmp cl, 9
jb 0x4242c8
cmp cl, 0x20
ja 0x4242c8
add dword [0x4ac898], 1
push esi
adc dword [0x4ac89c], 0
call fcn.00428d50
mov ebx, 3
cmp eax, ebx
jne 0x424242
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x4241e1
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x24]
push edx
push edi
push 2
call fcn.00423fa0
mov edx, dword [esp + 0x24]
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 0x14]
cmp edx, ecx
je 0x4241c0
jmp 0x4241f5
lea eax, [esp + 0x24]
push eax
push edi
push ebx
call fcn.00423fa0
mov edx, dword [esp + 0x24]
mov dword [esp + 0x20], eax
cmp edx, esi
je 0x428362
cmp dword [ebp + 8], ebx
je 0x428393
cmp eax, 1
jne 0x428393
test edx, edx
je 0x424228
mov ecx, dword [edx + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x428371
mov dword [esp + 0x10], edx
jmp 0x42835e
mov esi, dword [esi + 0x18]
cmp byte [esi], 0x21
mov dword [esp + 0x10], esi
jne 0x42835e
mov edx, esi
mov eax, dword [edx + 0x18]
jmp 0x42835a
mov esi, dword [esi + 0x18]
cmp byte [esi], 0x21
mov dword [esp + 0x10], esi
jne 0x4242ba
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x424277
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x24]
push edx
push edi
push 2
call fcn.00423fa0
mov edx, dword [esp + 0x24]
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 0x14]
cmp edx, ecx
je 0x424256
jmp 0x42428b
lea eax, [esp + 0x24]
push eax
push edi
push ebx
call fcn.00423fa0
mov edx, dword [esp + 0x24]
mov dword [esp + 0x20], eax
cmp dword [ebp + 8], ebx
je 0x428393
cmp eax, 1
jne 0x428393
test edx, edx
je 0x424c6c
mov ecx, dword [edx + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x4283b3
mov dword [esp + 0x10], edx
jmp 0x42835e
cmp dword [ebp + 8], ebx
je 0x428377
jmp 0x42835e
movzx eax, cl
add eax, 0xffffffa0
cmp eax, 0x7e
ja case.0x4242de.98
movzx eax, byte [eax + 0x428870]
jmp dword [eax*4 + 0x428834]
mov ecx, 1
add dword [0x4ac898], ecx
adc dword [0x4ac89c], 0
mov eax, dword [esi + 0x18]
test eax, eax
je 0x424375
mov edx, eax
xor eax, eax
cmp dword [esi + 0xc], ecx
mov dword [esp + 0x60], edx
sete al
mov edi, eax
test edi, edi
je 0x42432c
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x94]
mov dword [eax + 0x98], ecx
mov dword [eax + 0x94], 0
mov ecx, edx
call fcn.00401210
mov dword [esp + 0x20], eax
test edi, edi
je 0x424355
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx + 0x98]
mov dword [ecx + 0x94], edx
mov dword [ecx + 0x98], 0
test eax, eax
je 0x42837c
cmp eax, 8
je 0x42837c
cmp dword [ebp + 8], 3
je 0x42458d
jmp 0x428357
push esi
mov bl, cl
call fcn.004419c0
mov edx, eax
mov dword [esp + 0x60], edx
test edx, edx
je 0x428516
mov ecx, dword [esp + 0x3c]
cmp dword [ecx + 0x94], 0
je 0x4243ae
mov eax, dword [edx + 8]
call fcn.00441a70
test eax, eax
je 0x4243ae
mov edi, 1
jmp 0x424312
xor edi, edi
jmp 0x42432c
add dword [0x4ac898], 1
adc dword [0x4ac89c], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x60], eax
test eax, eax
jne 0x4243e2
push esi
mov bl, 1
call fcn.004419c0
mov dword [esp + 0x60], eax
test eax, eax
je 0x428516
cmp dword [ebp + 8], 3
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 0x9c], eax
je 0x4283b0
mov ecx, dword [eax + 8]
mov edx, dword [esi + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x4283b0
mov dword [esp + 0x10], ecx
jmp 0x42835e
add dword [0x4ac898], 1
mov eax, dword [esp + 0x94]
adc dword [0x4ac89c], 0
mov edi, dword [eax + 0xc]
test edi, edi
jne 0x42445a
mov eax, dword [0x4aa1d0]
cmp byte [eax], 0
mov ebx, eax
je 0x424458
mov edi, dword [0x4ac2c8]
test edi, edi
je 0x424458
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00485151
add esp, 8
test eax, eax
je 0x42445a
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x424440
xor edi, edi
mov dword [esp + 0x20], 1
mov dword [esp + 0x48], 0
test edi, edi
je 0x424566
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
je 0x424492
push 0x49a1a4
push eax
call fcn.00485151
add esp, 8
test eax, eax
jne 0x424492
mov al, 1
jmp 0x424494
xor al, al
lea ecx, [esp + 0x60]
push ecx
push eax
push edi
xor eax, eax
call fcn.00477e30
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x60]
test eax, eax
je 0x424566
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x4244fa
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x4244ce
cmp edx, ecx
je 0x4244fa
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x4244c3
push 0x498811
push 0
push str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov ecx, esi
call fcn.0042d4b0
xor eax, eax
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [esp + 0x3c]
mov edx, dword [ebx + 0x94]
test edx, edx
je 0x42459b
call fcn.00441a70
test eax, eax
je 0x42459b
mov edi, 1
mov dword [ebx + 0x98], edx
mov dword [ebx + 0x94], 0
mov ecx, dword [esp + 0x60]
call fcn.00401210
mov dword [esp + 0x20], eax
test edi, edi
je 0x424555
mov edx, dword [ebx + 0x98]
mov dword [ebx + 0x94], edx
mov dword [ebx + 0x98], 0
test eax, eax
je 0x42837c
cmp eax, 8
je 0x42837c
cmp dword [esp + 0x48], 0
mov edx, dword [esp + 0x94]
sete al
movzx ecx, al
push ecx
push edx
call fcn.0042d2e0
cmp dword [ebp + 8], 3
jne 0x428357
mov eax, dword [esp + 0x20]
cmp eax, 7
jne 0x42837c
jmp 0x428377
xor edi, edi
jmp 0x42452e
mov ebx, dword [esi + 0xc]
mov eax, ebx
dec eax
mov dword [esp + 0x14], ebx
je 0x4245f6
sub eax, 3
je 0x4245d8
sub eax, 5
jne 0x424681
mov ecx, dword [0x4aa1d4]
push eax
push eax
push ecx
mov eax, 1
call fcn.004137b0
add esp, 0xc
mov dword [esp + 0x6c], eax
jmp 0x424681
mov edx, dword [0x4aa1d0]
push 0
push 0
push edx
xor eax, eax
call fcn.004137b0
add esp, 0xc
mov dword [esp + 0x6c], eax
jmp 0x424681
movzx eax, byte [esi + 1]
sub eax, 0
je 0x424678
dec eax
mov eax, dword [0x4aa1d0]
je 0x424643
push str.Read
push eax
call fcn.00485151
add esp, 8
test eax, eax
jne 0x42461e
lea ebx, [eax + 5]
jmp 0x42467d
mov ecx, dword [0x4aa1d0]
push 0
push 0
push ecx
xor eax, eax
call fcn.004137b0
xor ebx, ebx
add esp, 0xc
test eax, eax
setne bl
mov dword [esp + 0x6c], eax
add ebx, 3
jmp 0x42467d
push 0
push 1
push 1
push 1
call fcn.004721a0
add esp, 0x10
test eax, eax
jne 0x424678
mov edx, dword [0x4aa1d0]
push eax
push eax
push edx
call fcn.004137b0
xor ebx, ebx
add esp, 0xc
test eax, eax
setne bl
mov dword [esp + 0x6c], eax
add ebx, 3
jmp 0x42467d
mov ebx, 2
mov dword [esp + 0x14], ebx
lea eax, [ebx - 3]
cmp eax, 7
ja case.0x424694.5
movzx eax, byte [eax + 0x4288fc]
jmp dword [eax*4 + 0x4288f0]
mov esi, dword [0x4aa1d4]
call fcn.00414160
mov dword [esp + 0x5c], eax
test eax, eax
je 0x4284a4
mov eax, dword [0x4aa1d8]
cmp byte [eax], 0x31
jne 0x4246d0
cmp byte [eax + 1], 0
jne 0x4246d0
mov esi, dword [esp + 0x10]
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x64], 1
jmp case.0x424694.5
mov esi, dword [esp + 0x10]
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x64], 0
jmp case.0x424694.5
cmp ebx, 4
jne 0x42471e
mov esi, dword [0x4aa1d8]
call fcn.00414160
mov dword [esp + 0x5c], eax
mov eax, dword [0x4aa1dc]
cmp byte [eax], 0x31
jne 0x424710
cmp byte [eax + 1], 0
jne 0x424710
mov esi, dword [esp + 0x10]
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x64], 1
jmp 0x42473c
mov esi, dword [esp + 0x10]
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x64], 0
jmp 0x42473c
mov eax, dword [0x4aa1d8]
call fcn.004141b0
mov dword [esp + 0x5c], eax
shr eax, 2
and al, 1
mov byte [esp + 0x64], al
je 0x42473c
and dword [esp + 0x5c], 0xfffffffb
cmp dword [esp + 0x5c], 0
je 0x4284d2
mov byte [esp + 0x1b], 0
mov dword [esp + 0x24], 0
mov eax, dword [esi + 0x18]
cmp byte [eax], 0x6c
mov dword [esp + 0x2c], eax
jne 0x42476b
mov ebx, eax
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x2c], ecx
jmp 0x42476d
xor ebx, ebx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
mov dword [esp + 0x7c], ecx
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x54], ecx
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0x78], edx
mov edx, dword [eax + 0x10]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x48], edx
mov edx, dword [eax + 0x18]
mov dword [esp + 0x1c], edx
cmp ecx, 8
je 0x4247b2
mov dword [eax + 8], 1
mov dword [eax + 0xc], 0
lea eax, [ecx - 2]
cmp eax, 8
ja case.default.0x4247be
jmp dword [eax*4 + 0x428904]
cmp byte [esi + 1], 0
jbe 0x4247e1
xor edi, edi
mov ecx, esi
call fcn.00420690
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x8c], 0
jmp 0x4247ed
xor eax, eax
xor edx, edx
mov byte [esp + 0x8c], 1
mov ecx, dword [esp + 0x8c]
push ecx
push edx
push eax
push ebx
lea edx, [esp + 0x34]
push edx
lea eax, [esp + 0x2f]
push eax
push esi
mov ebx, edi
call fcn.0042a860
mov dword [esp + 0x20], eax
jmp case.default.0x4247be
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x1f]
push edx
mov ebx, edi
call fcn.0042aa20
mov esi, dword [esp + 0x10]
mov dword [esp + 0x20], eax
jmp case.default.0x4247be
push ebx
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x23]
push ecx
push edi
push esi
call fcn.0042ac10
mov dword [esp + 0x20], eax
jmp case.default.0x4247be
mov edx, dword [0x4aa1d8]
push 0x49c3dc
push edx
call fcn.00485151
add esp, 8
push ebx
test eax, eax
je 0x42487f
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x23]
push ecx
push edi
push esi
call fcn.0042ba60
mov dword [esp + 0x20], eax
jmp case.default.0x4247be
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x23]
push eax
push edi
push esi
call fcn.0042bd10
mov dword [esp + 0x20], eax
jmp case.default.0x4247be
lea esi, [esp + 0xac]
call fcn.004147e0
mov dword [esp + 0x53c], 0
mov edx, dword [0x4aa1d4]
cmp byte [edx], 0
je 0x424908
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx + 0xdc]
and eax, 0x7fffffff
push 0x30c
mov ecx, esi
call fcn.0046fec0
test al, al
je 0x424908
mov edx, esi
push edx
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x28]
push eax
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x23]
push ecx
mov ecx, dword [0x4aa1d8]
push edx
push eax
mov edx, ebx
call fcn.0042bfd0
mov dword [esp + 0x20], eax
call fcn.00414750
jmp 0x424910
mov dword [esp + 0x20], 1
lea ecx, [esp + 0xac]
mov dword [esp + 0x53c], 0xffffffff
call fcn.00414830
mov esi, dword [esp + 0x10]
jmp case.default.0x4247be
cmp dword [esp + 0x14], 3
mov eax, dword [0x4aa1d0]
je 0x424941
mov eax, dword [0x4aa1d4]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x5c]
push eax
push ecx
push edx
push ebx
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x2f]
push ecx
push edi
mov ecx, esi
call fcn.0042b050
mov dword [esp + 0x20], eax
jmp case.default.0x4247be
cmp dword [esp + 0x14], 4
lea edx, [esp + 0x47]
push edx
jne 0x42498f
mov eax, dword [0x4aa1d0]
push 0
push eax
xor eax, eax
call fcn.004137b0
mov ecx, dword [0x4aa1d4]
mov dword [esp + 0x74], ecx
jmp 0x4249a5
mov ecx, dword [0x4aa1d4]
lea eax, [esp + 0x6c]
push eax
push ecx
mov eax, 1
call fcn.004137b0
add esp, 0xc
mov dword [esp + 0x14], eax
test eax, eax
je 0x4249f0
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
push edx
mov edx, dword [esp + 0x68]
push eax
mov eax, dword [esp + 0x64]
push ecx
push edx
push eax
push ebx
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x37]
push edx
push edi
mov ecx, esi
call fcn.0042b5e0
cmp byte [esp + 0x47], 0
mov dword [esp + 0x20], eax
je case.default.0x4247be
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x4247be
mov dword [esp + 0x20], 1
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x48]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x54]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 0x14], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], edx
mov eax, dword [esp + 0x20]
test eax, eax
je 0x42837c
cmp eax, 7
je 0x42837c
cmp eax, 8
je 0x42837c
cmp byte [esp + 0x1b], 0
jne 0x428362
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x424a6e
mov edx, dword [ecx + 0x1c]
cmp edx, dword [esi + 0x1c]
jne 0x4287e0
mov dword [esp + 0x10], ecx
mov esi, ecx
jmp 0x428362
cmp dword [ebp + 8], 3
je 0x428377
mov eax, dword [esp + 0x2c]
jmp 0x42835a
mov dl, byte [ebx + 0xe8]
mov byte [esp + 0x5b], dl
cmp cl, 0x70
jne 0x424afe
mov ecx, dword [0x4aa178]
test ecx, ecx
je 0x424ab7
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + 0xe0]
mov ebx, ecx
call fcn.00474980
test eax, eax
je 0x4284fe
mov ebx, dword [esp + 0x3c]
mov eax, dword [ebx + 0xe0]
cmp dword [eax + 8], 6
jne 0x424acd
mov eax, dword [eax]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebx + 0xe0]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x424ae3
push eax
call fcn.00485168
add esp, 4
mov ecx, dword [ebx + 0xe0]
push ecx
call fcn.00484ec8
add esp, 4
mov dword [ebx + 0xe0], 0
jmp 0x424b05
mov byte [ebx + 0xe8], 1
mov dword [esp + 0x24], 0
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x424b36
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x24]
push edx
push edi
push 2
call fcn.00423fa0
mov edx, dword [esp + 0x24]
mov dword [esp + 0x20], eax
mov ecx, dword [esi + 0x14]
cmp edx, ecx
je 0x424b15
jmp 0x424b4b
lea eax, [esp + 0x24]
push eax
push edi
push 3
call fcn.00423fa0
mov edx, dword [esp + 0x24]
mov dword [esp + 0x20], eax
mov cl, byte [esp + 0x9c]
mov esi, dword [esi + 0x18]
mov dword [esp + 0x10], esi
cmp cl, 0x6f
jne 0x424bb5
mov cl, byte [esp + 0x5b]
mov byte [ebx + 0xe8], cl
xor cl, cl
cmp byte [esi], 0x70
jne 0x424b85
cmp dword [ebx + 0xe0], 0
mov cl, 1
jne 0x42835e
mov esi, dword [esi + 0x18]
mov dword [esp + 0x10], esi
cmp byte [esi], 0x71
je 0x424bbf
test cl, cl
jne 0x424c26
cmp dword [ebx + 0xe0], 0
lea esi, [ebx + 0xe0]
je 0x424c26
call fcn.0042db70
mov eax, 1
mov dword [esp + 0x20], eax
jmp 0x424c22
cmp cl, 0x70
jne 0x424c26
cmp byte [esi], 0x71
jne 0x424c26
cmp eax, 1
jne 0x424bd0
test edx, edx
je 0x42835e
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x3c]
mov ebx, dword [eax + 0xe0]
lea edx, [esp + 0x98]
push edx
push 0
push 3
mov ecx, esi
mov dword [esp + 0x3c], ebx
mov dword [eax + 0xe0], 0
call fcn.00423fa0
mov edi, eax
cmp edi, 1
jne 0x42852f
cmp dword [esp + 0x98], 0
jne 0x42852f
mov eax, dword [esp + 0x3c]
mov dword [eax + 0xe0], ebx
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
cmp dword [ebp + 8], 3
je 0x428393
cmp eax, 1
jne 0x428393
test edx, edx
je 0x42835e
mov ecx, dword [edx + 0x1c]
mov eax, dword [esp + 0x10]
cmp ecx, dword [eax + 0x1c]
jne 0x4283b3
mov dword [esp + 0x10], edx
jmp 0x42835e
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x10], ecx
jmp 0x42835e
cmp dword [esi + 0xc], 1
jne 0x424c78
mov edx, dword [esi + 0x18]
mov dword [esp + 0x10], edx
jmp 0x42835e
mov ecx, dword [esi + 0x14]
lea eax, [esp + 0x24]
push eax
push edi
push 2
call fcn.00423fa0
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x20], eax
cmp ecx, esi
je 0x428362
cmp dword [ebp + 8], 3
je 0x4287e0
cmp eax, 1
jne 0x4287e0
test ecx, ecx
je 0x424cc6
mov edx, dword [esi + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x4287d5
mov dword [esp + 0x10], ecx
mov esi, ecx
jmp 0x428362
mov eax, dword [esi + 0x18]
jmp 0x42835a
add dword [0x4ac898], 1
mov eax, dword [0x4aa178]
mov edi, dword [0x4a6920]
adc dword [0x4ac89c], 0
mov cl, byte [esi]
movzx edx, cl
dec edx
mov ebx, eax
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x14], edi
cmp edx, 0xdf
ja case.0x424d0a.8
movzx edx, byte [edx + 0x428bac]
jmp dword [edx*4 + 0x428928]
push esi
call fcn.0043ac60
jmp 0x428349
cmp byte [esi + 1], 1
mov edx, dword [0x4aa1d4]
jbe 0x424d92
mov eax, dword [esi + 8]
cmp byte [eax + 0x11], 0
je 0x424d3b
mov eax, 1
jmp 0x428349
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x424d54
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
push ebx
call fcn.00412c10
jmp 0x428349
mov eax, dword [0x4aa17c]
test eax, eax
je 0x424d92
cmp byte [edx], 0
jne 0x424d92
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x424d6f
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x424d86
sub ecx, 2
jne 0x424d92
mov eax, ebx
call fcn.00474a90
jmp 0x428349
mov ecx, ebx
call fcn.00474800
jmp 0x428349
push 1
push 0
push 0xffffffffffffffff
push edx
push ebx
call fcn.00475030
jmp 0x428349
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x424dc4
cmp byte [eax + 0x11], 0
jne 0x424dc4
mov dword [esp + 0x14], 1
mov ebx, 1
xor edi, edi
jmp 0x424e06
mov edi, dword [0x4aa17c]
mov eax, dword [0x4aa1d4]
mov dword [esp + 0x14], 0
test edi, edi
je 0x424df2
cmp byte [eax], 0
jne 0x424df2
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x424ded
mov edx, dword [edi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x424e4e
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.004721a0
add esp, 0x10
mov ebx, eax
mov eax, dword [esp + 0x1c]
push 1
call fcn.00412c70
mov dword [esp + 0x30], eax
mov eax, dword [0x4aa1d8]
mov al, byte [eax]
test al, al
je 0x425019
call fcn.00409380
movsx eax, al
push eax
push str.SMHD
call fcn.00486141
add esp, 8
test eax, eax
je 0x425019
test ebx, ebx
jne 0x424e5d
lea eax, [ebx + 1]
jmp 0x428349
test edi, edi
je 0x424df4
push 1
mov eax, edi
call fcn.00412c70
jmp 0x424e04
cmp dword [esp + 0x14], 0
je 0x424e6e
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x424e8c
test edi, edi
je 0x424e7d
push 0
mov eax, edi
call fcn.00412dd0
jmp 0x424e8c
mov esi, dword [0x4aa1d4]
call fcn.00412b70
mov esi, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c]
fstp qword [esp + 0x30]
cmp byte [ebx + 0x17], 0
jne 0x424e9f
mov edi, dword [ebx + 0xc]
jmp 0x424ea1
mov edi, ebx
test byte [edi + 0x15], 8
je 0x424eae
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x424ec7
test byte [edi + 0x15], 4
je 0x424ec2
mov eax, edi
call fcn.0042dce0
mov eax, dword [edi + 8]
jmp 0x424ed7
cmp al, 2
jne 0x424ed2
call fcn.00401000
jmp 0x424ed7
mov eax, 0x4abb36
cmp byte [eax], 0
je 0x424f48
cmp byte [ebx + 0x17], 0
jne 0x424ee7
mov edi, dword [ebx + 0xc]
jmp 0x424ee9
mov edi, ebx
test byte [edi + 0x15], 8
je 0x424ef6
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x424f0f
test byte [edi + 0x15], 4
je 0x424f0a
mov eax, edi
call fcn.0042dce0
mov eax, dword [edi + 8]
jmp 0x424f1f
cmp al, 2
jne 0x424f1a
call fcn.00401000
jmp 0x424f1f
mov eax, 0x4abb36
lea ecx, [esp + 0x84]
push ecx
call fcn.00471d80
add esp, 4
test eax, eax
jne 0x424f6c
push 1
push eax
push 0xffffffffffffffff
push 0x498811
push ebx
call fcn.00475030
jmp 0x428349
lea edx, [esp + 0xa0]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0xa4]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov edx, dword [0x4aa1d8]
mov al, byte [edx]
call fcn.00409380
movsx eax, al
add eax, 0xffffffbc
cmp eax, 0xf
ja case.0x424f8b.69
movzx eax, byte [eax + 0x428ca0]
jmp dword [eax*4 + 0x428c8c]
fld qword [esp + 0x30]
fmul qword [0x4a0b08]
jmp 0x424fc6
fld qword [esp + 0x30]
fmul qword [0x4a0b00]
jmp 0x424fc6
fld qword [esp + 0x30]
fmul qword [0x4a0af8]
jmp 0x424fc6
fld qword [esp + 0x30]
fmul qword [0x4a0af0]
jmp 0x424fc6
fld qword [esp + 0x30]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0x88]
call fcn.00493b46
add esi, eax
adc edi, edx
mov dword [esp + 0x84], esi
push 0
lea eax, [esp + 0x88]
lea esi, [esp + 0x104]
mov dword [esp + 0x8c], edi
call fcn.00472010
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
push ebx
call fcn.00475030
mov esi, dword [esp + 0x10]
jmp 0x428349
cmp ebx, 2
je 0x42507b
cmp dword [esp + 0x30], 2
je 0x42507b
cmp dword [esp + 0x14], 0
je 0x425039
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x42505b
test edi, edi
je 0x425048
push 0
mov eax, edi
call fcn.00412d10
jmp 0x425057
mov esi, dword [0x4aa1d4]
call fcn.00412b40
mov esi, dword [esp + 0x10]
mov ebx, edx
mov edi, eax
mov eax, dword [esp + 0x1c]
push 0
call fcn.00412d10
add eax, edi
adc edx, ebx
push edx
mov edx, dword [esp + 0x20]
push eax
push edx
call fcn.00412c10
jmp 0x428349
cmp dword [esp + 0x14], 0
je 0x42508c
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x1c]
fild qword [ecx]
jmp 0x4250aa
test edi, edi
je 0x42509b
push 0
mov eax, edi
call fcn.00412dd0
jmp 0x4250aa
mov esi, dword [0x4aa1d4]
call fcn.00412b70
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x1c]
fstp qword [esp + 0x30]
push 0
mov eax, edi
call fcn.00412dd0
fadd qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412c40
jmp 0x428349
mov edx, dword [0x4aa1d8]
mov al, byte [edx]
test al, al
je 0x42522c
call fcn.00409380
movsx eax, al
push eax
push str.SMHD
call fcn.00486141
add esp, 8
test eax, eax
je 0x42522c
mov edi, dword [0x4aa17c]
mov ecx, dword [0x4aa1d4]
test edi, edi
je 0x42516b
cmp byte [ecx], 0
jne 0x42516b
mov al, byte [edi + 0x17]
test al, al
jne 0x425120
mov eax, dword [edi + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x42516b
test edi, edi
je 0x42516b
cmp byte [edi + 0x17], 0
jne 0x425131
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x42513e
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x425157
test byte [edi + 0x15], 4
je 0x425152
mov eax, edi
call fcn.0042dce0
mov edi, dword [edi + 8]
jmp 0x42516d
cmp al, 2
jne 0x425164
call fcn.00401000
mov edi, eax
jmp 0x42516d
mov edi, 0x4abb36
jmp 0x42516d
mov edi, ecx
cmp byte [ebx + 0x17], 0
jne 0x425178
mov ecx, ebx
mov ebx, dword [ecx + 0xc]
test byte [ebx + 0x15], 8
je 0x425185
mov eax, ebx
call fcn.00401150
mov al, byte [ebx + 0x17]
cmp al, 1
jne 0x42519e
test byte [ebx + 0x15], 4
je 0x425199
mov eax, ebx
call fcn.0042dce0
mov eax, dword [ebx + 8]
jmp 0x4251ae
cmp al, 2
jne 0x4251a9
call fcn.00401000
jmp 0x4251ae
mov eax, 0x4abb36
push eax
lea ebx, [esp + 0x5e]
mov eax, edi
call fcn.004720c0
add esp, 4
cmp byte [esp + 0x5a], 0
mov edi, eax
mov ebx, edx
je 0x4251e2
mov edx, dword [esp + 0x1c]
push 1
push 0
push 0xffffffffffffffff
push 0x498811
push edx
call fcn.00475030
jmp 0x428349
mov eax, dword [0x4aa1d8]
mov al, byte [eax]
call fcn.00409380
cmp al, 0x44
je 0x425209
cmp al, 0x48
je 0x425200
cmp al, 0x4d
jne 0x42521b
push 0
push 0x3c
jmp 0x425210
push 0
push 0xe10
jmp 0x425210
push 0
push 0x15180
push ebx
push edi
call fcn.00493bc0
mov edi, eax
mov ebx, edx
mov ecx, dword [esp + 0x1c]
push ebx
push edi
push ecx
call fcn.00412c10
jmp 0x428349
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x42524c
cmp byte [eax + 0x11], 0
jne 0x42524c
mov dword [esp + 0x14], 1
mov edi, 1
xor ebx, ebx
jmp 0x42528e
mov ebx, dword [0x4aa17c]
mov eax, dword [0x4aa1d4]
mov dword [esp + 0x14], 0
test ebx, ebx
je 0x42527a
cmp byte [eax], 0
jne 0x42527a
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x425275
mov edx, dword [ebx + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x4252b7
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.004721a0
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x1c]
push 1
call fcn.00412c70
cmp edi, 2
je 0x425308
cmp eax, 2
je 0x425308
cmp dword [esp + 0x14], 0
je 0x4252c6
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x4252e8
test ebx, ebx
je 0x42527c
push 1
mov eax, ebx
call fcn.00412c70
jmp 0x42528c
test ebx, ebx
je 0x4252d5
push 0
mov eax, ebx
call fcn.00412d10
jmp 0x4252e4
mov esi, dword [0x4aa1d4]
call fcn.00412b40
mov esi, dword [esp + 0x10]
mov ebx, edx
mov edi, eax
mov eax, dword [esp + 0x1c]
push 0
call fcn.00412d10
mov ecx, dword [esp + 0x1c]
sub eax, edi
sbb edx, ebx
push edx
push eax
push ecx
call fcn.00412c10
jmp 0x428349
cmp dword [esp + 0x14], 0
je 0x425319
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x425337
test ebx, ebx
je 0x425328
push 0
mov eax, ebx
call fcn.00412dd0
jmp 0x425337
mov esi, dword [0x4aa1d4]
call fcn.00412b70
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x1c]
fstp qword [esp + 0x30]
push 0
mov eax, edi
call fcn.00412dd0
fsub qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412c40
jmp 0x428349
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x42537d
cmp byte [eax + 0x11], 0
jne 0x42537d
mov dword [esp + 0x14], 1
mov edi, 1
xor ebx, ebx
jmp 0x4253bf
mov ebx, dword [0x4aa17c]
mov eax, dword [0x4aa1d4]
mov dword [esp + 0x14], 0
test ebx, ebx
je 0x4253ab
cmp byte [eax], 0
jne 0x4253ab
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x4253a6
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x4253e8
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.004721a0
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x1c]
push 1
call fcn.00412c70
cmp edi, 2
je 0x42543e
cmp eax, 2
je 0x42543e
cmp dword [esp + 0x14], 0
je 0x4253f7
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x425419
test ebx, ebx
je 0x4253ad
push 1
mov eax, ebx
call fcn.00412c70
jmp 0x4253bd
test ebx, ebx
je 0x425406
push 0
mov eax, ebx
call fcn.00412d10
jmp 0x425415
mov esi, dword [0x4aa1d4]
call fcn.00412b40
mov esi, dword [esp + 0x10]
mov ebx, edx
mov edi, eax
mov eax, dword [esp + 0x1c]
push 0
call fcn.00412d10
push ebx
push edi
push edx
push eax
call fcn.0048c0e0
push edx
push eax
mov eax, dword [esp + 0x24]
push eax
call fcn.00412c10
jmp 0x428349
cmp dword [esp + 0x14], 0
je 0x42544f
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x42546d
test ebx, ebx
je 0x42545e
push 0
mov eax, ebx
call fcn.00412dd0
jmp 0x42546d
mov esi, dword [0x4aa1d4]
call fcn.00412b70
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x1c]
fstp qword [esp + 0x30]
push 0
mov eax, edi
call fcn.00412dd0
fmul qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412c40
jmp 0x428349
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x4254b3
cmp byte [eax + 0x11], 0
jne 0x4254b3
mov dword [esp + 0x14], 1
mov edi, 1
xor ebx, ebx
jmp 0x4254f5
mov ebx, dword [0x4aa17c]
mov eax, dword [0x4aa1d4]
mov dword [esp + 0x14], 0
test ebx, ebx
je 0x4254e1
cmp byte [eax], 0
jne 0x4254e1
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x4254dc
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x425526
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.004721a0
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x1c]
push 1
call fcn.00412c70
cmp edi, 2
je 0x425590
cmp eax, 2
je 0x425590
cmp dword [esp + 0x14], 0
je 0x425535
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x425557
test ebx, ebx
je 0x4254e3
push 1
mov eax, ebx
call fcn.00412c70
jmp 0x4254f3
test ebx, ebx
je 0x425544
push 0
mov eax, ebx
call fcn.00412d10
jmp 0x425553
mov esi, dword [0x4aa1d4]
call fcn.00412b40
mov esi, dword [esp + 0x10]
mov ebx, edx
mov edi, eax
mov eax, edi
or eax, ebx
jne 0x42556b
mov ecx, dword [esp + 0x1c]
call fcn.00412bb0
jmp 0x428349
mov eax, dword [esp + 0x1c]
push 0
call fcn.00412d10
push ebx
push edi
push edx
push eax
call fcn.00493bc0
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
call fcn.00412c10
jmp 0x428349
cmp dword [esp + 0x14], 0
je 0x4255a1
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x4255bf
test ebx, ebx
je 0x4255b0
push 0
mov eax, ebx
call fcn.00412dd0
jmp 0x4255bf
mov esi, dword [0x4aa1d4]
call fcn.00412b70
mov esi, dword [esp + 0x10]
fst qword [esp + 0x30]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x4255dc
mov ecx, dword [esp + 0x1c]
call fcn.00412bb0
jmp 0x428349
mov edi, dword [esp + 0x1c]
push 0
mov eax, edi
call fcn.00412dd0
fdiv qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412c40
jmp 0x428349
mov edi, 2
mov ecx, esi
call fcn.00420690
mov ebx, eax
test ebx, ebx
jns 0x425614
xor ebx, ebx
jmp 0x425626
mov edi, 1
mov ecx, esi
call fcn.00420610
cmp ebx, eax
jle 0x425626
mov ebx, eax
mov ecx, dword [0x4aa1d4]
mov edx, dword [esp + 0x1c]
push 1
push 0
push ebx
push ecx
push edx
call fcn.00475030
jmp 0x428349
mov edi, 2
mov ecx, esi
call fcn.00420690
mov ebx, eax
test ebx, ebx
jns 0x425655
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420610
cmp ebx, eax
jbe 0x425667
mov ebx, eax
push 1
sub eax, ebx
add eax, dword [0x4aa1d4]
push 0
push ebx
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.00475030
jmp 0x428349
cmp byte [esi + 1], 4
jb 0x4256b6
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x34]
cmp byte [edx], 0
je 0x4256b6
mov edi, 3
mov ecx, esi
call fcn.00420690
mov dword [esp + 0x14], eax
cmp eax, 1
jge 0x4256be
mov ecx, ebx
call fcn.00412bb0
jmp 0x428349
mov dword [esp + 0x14], CreateStatusWindowA
mov edi, 2
mov ecx, esi
call fcn.00420690
mov ebx, eax
mov eax, dword [0x4aa1e0]
mov al, byte [eax]
call fcn.00409380
cmp al, 0x4c
jne 0x425709
cmp ebx, 1
jge 0x4256ef
mov ecx, dword [esp + 0x1c]
call fcn.00412bb0
jmp 0x428349
mov eax, dword [esp + 0x14]
mov ecx, 1
sub ecx, eax
add ebx, ecx
cmp ebx, 1
jge 0x425713
lea edx, [eax + ebx - 1]
mov dword [esp + 0x14], edx
cmp ebx, 1
jge 0x425713
mov ebx, 1
mov edi, 1
mov ecx, esi
call fcn.00420610
cmp eax, ebx
jae 0x425731
mov ecx, dword [esp + 0x1c]
call fcn.00412bb0
jmp 0x428349
mov ecx, edi
sub ecx, ebx
add eax, ecx
mov ecx, dword [esp + 0x14]
cmp ecx, eax
jbe 0x425741
mov ecx, eax
mov edx, dword [0x4aa1d4]
mov eax, dword [esp + 0x1c]
push 1
push 0
push ecx
lea ebx, [ebx + edx - 1]
push ebx
push eax
call fcn.00475030
jmp 0x428349
mov edi, 2
mov ecx, esi
call fcn.00420690
mov ebx, eax
test ebx, ebx
jns 0x425774
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420610
cmp ebx, eax
jbe 0x425786
mov ebx, eax
mov ecx, dword [0x4aa1d4]
mov edx, dword [esp + 0x1c]
push 1
push 0
sub eax, ebx
push eax
add ecx, ebx
push ecx
push edx
call fcn.00475030
jmp 0x428349
mov edi, 2
mov ecx, esi
call fcn.00420690
mov ebx, eax
test ebx, ebx
jns 0x4257b9
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420610
cmp ebx, eax
jbe 0x4257cb
mov ebx, eax
mov ecx, dword [esp + 0x1c]
push 1
push 0
sub eax, ebx
push eax
mov eax, dword [0x4aa1d4]
push eax
push ecx
call fcn.00475030
jmp 0x428349
cmp byte [ebx + 0x17], 0
jne 0x4257f2
mov edi, dword [ebx + 0xc]
jmp 0x4257f4
mov edi, ebx
test byte [edi + 0x15], 8
je 0x425801
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x42580d
mov edi, dword [edi + 8]
jmp 0x42581f
cmp al, 2
jne 0x42581a
call fcn.00401000
mov edi, eax
jmp 0x42581f
mov edi, 0x4abb36
cmp edi, dword [0x4aa1d4]
jne 0x425838
mov al, byte [ebx + 0x17]
test al, al
jne 0x425834
mov edx, dword [ebx + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
je 0x4258b0
push 1
push 0
mov edi, 1
mov ecx, esi
call fcn.00420610
push eax
push 0
push ebx
call fcn.00475030
cmp eax, edi
jne case.0x424d0a.8
cmp byte [ebx + 0x17], 0
jne 0x425864
mov edi, dword [ebx + 0xc]
jmp 0x425866
mov edi, ebx
test byte [edi + 0x15], 8
je 0x425873
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x42588c
test byte [edi + 0x15], 4
je 0x425887
mov eax, edi
call fcn.0042dce0
mov edi, dword [edi + 8]
jmp 0x42589e
cmp al, 2
jne 0x425899
call fcn.00401000
mov edi, eax
jmp 0x42589e
mov edi, 0x4abb36
mov ecx, dword [0x4aa1d4]
mov edx, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4258a6
mov eax, dword [0x4aa1d8]
mov al, byte [eax]
test al, al
je 0x4258e5
call fcn.00409380
cmp al, 0x54
jne 0x4258e5
mov ecx, dword [0x4aa1d8]
cmp byte [ecx + 1], 0
jne 0x4258e5
mov eax, edi
call fcn.00412890
push 0
mov eax, ebx
call fcn.00413150
jmp 0x428349
cmp byte [esi], 0x31
push edi
jne 0x4258ff
call dword [sym.imp.USER32.dll_CharLowerA]
push 0
mov eax, ebx
call fcn.00413150
jmp 0x428349
call dword [sym.imp.USER32.dll_CharUpperA]
push 0
mov eax, ebx
call fcn.00413150
jmp 0x428349
mov eax, dword [0x4aa17c]
test eax, eax
je 0x425945
cmp byte [eax + 0x17], 0
jne 0x42592a
mov edx, dword [eax + 0xc]
mov cl, byte [edx + 0x15]
jmp 0x42592d
mov cl, byte [eax + 0x15]
test cl, 1
je 0x425945
call fcn.00413090
push 0
push eax
push ebx
call fcn.00412c10
jmp 0x428349
mov edi, 1
mov ecx, esi
call fcn.00420610
push 0
push eax
push ebx
call fcn.00412c10
jmp 0x428349
mov edi, dword [0x4aa1dc]
mov al, byte [edi]
mov dword [esp + 0x30], edi
mov dword [esp + 0x48], 0xffffffff
test al, al
je 0x4259f9
call fcn.00409380
movsx eax, al
push eax
push 0x49c458
call fcn.00486141
add esp, 8
test eax, eax
je 0x4259f9
cmp byte [edi + 1], 0
je 0x4259f9
lea esi, [edi + 1]
call fcn.0040ce80
mov esi, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
test eax, eax
jle 0x425afc
mov eax, dword [0x4aa1d8]
cmp byte [eax], 0
jne 0x425a03
mov dword [esp + 0x48], 0
mov eax, 0x49889c
mov edx, dword [0x4aaa2c]
push 1
push 0
push 0xffffffffffffffff
push eax
push edx
call fcn.00475030
mov eax, dword [esp + 0x48]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x28]
call fcn.004010d0
mov eax, 1
jmp 0x428349
mov dword [esp + 0x2c], 1
jmp 0x4259b3
mov ecx, dword [0x4aa1d4]
mov dword [esp + 0x54], ecx
mov edi, 4
mov ecx, esi
mov dword [esp + 0x10], eax
call fcn.00420690
mov ebx, eax
test ebx, ebx
jns 0x425a25
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420610
mov edi, eax
cmp ebx, edi
jge 0x425afc
mov edx, dword [esp + 0x30]
mov al, byte [edx]
cmp al, 0x31
je 0x425ac3
call fcn.00409380
cmp al, 0x52
je 0x425ac3
mov edi, 2
mov ecx, esi
call fcn.00420610
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x54]
mov edi, 1
add eax, ebx
mov ecx, dword [0x4a6920]
mov cl, byte [ecx + 0xd2]
test cl, cl
jne 0x425a90
mov edx, dword [esp + 0x10]
push edx
call fcn.00472690
add esp, 4
jmp 0x425ab2
cmp cl, 2
jne 0x425aa4
mov ecx, dword [esp + 0x10]
push ecx
call fcn.00472960
add esp, 4
jmp 0x425ab2
mov edx, dword [esp + 0x10]
push edx
push eax
call fcn.00486282
add esp, 8
test eax, eax
je 0x425afc
cmp edi, dword [esp + 0x2c]
je 0x425aea
inc edi
add eax, dword [esp + 0x30]
jmp 0x425a71
mov ecx, dword [esp + 0x14]
movzx edx, byte [ecx + 0xd2]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x54]
push eax
mov eax, dword [esp + 0x14]
push edx
push eax
mov eax, edi
sub eax, ebx
push ecx
call fcn.00472490
add esp, 0x10
test eax, eax
je 0x425afc
sub eax, dword [esp + 0x54]
mov dword [esp + 0x48], eax
jns 0x4259c5
mov eax, 0x499f00
jmp 0x4259ca
push esi
call fcn.0043b0c0
jmp 0x428349
mov eax, dword [0x4aa1dc]
mov ecx, dword [0x4aa1d8]
mov edx, dword [0x4aa1d4]
call fcn.00431080
jmp 0x428349
mov eax, dword [0x4aa1dc]
mov ecx, dword [0x4aa1d8]
push eax
mov eax, dword [0x4aa1d0]
push ecx
mov ecx, dword [0x4aa1d4]
push esi
call fcn.0043b310
jmp 0x428349
mov edx, dword [0x4aa1d0]
push edx
mov eax, esi
call fcn.0043ba60
jmp 0x428349
mov eax, dword [0x4aa1d0]
mov ecx, dword [0x4aa1d4]
push eax
push esi
call fcn.0043c030
jmp 0x428349
push 0
push ecx
mov edi, 7
mov ecx, esi
call fcn.00420690
add esp, 4
push eax
mov edi, 6
mov ecx, esi
call fcn.00420690
push eax
push ecx
mov edi, 5
mov ecx, esi
call fcn.00420690
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00420690
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420690
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420690
mov ecx, dword [0x4aa1f0]
push eax
push esi
call fcn.00437300
jmp 0x428349
mov ecx, dword [0x4aa1e8]
push ecx
push ecx
mov edi, 5
mov ecx, esi
call fcn.00420690
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00420690
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420690
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420690
push eax
push esi
call fcn.00437a40
jmp 0x428349
mov edx, dword [0x4aa1dc]
push edx
push ecx
mov edi, 2
mov ecx, esi
call fcn.00420690
mov edi, 1
mov ecx, esi
mov ebx, eax
call fcn.00420690
add esp, 4
mov ecx, eax
push esi
mov eax, ebx
call fcn.0044f1e0
jmp 0x428349
mov eax, dword [edi + 0xb4]
cmp cl, 0x42
sete cl
push 0
movzx edx, cl
push eax
push edx
mov eax, dword [0x4aa1d0]
push eax
call fcn.0040d520
add esp, 0x10
mov eax, 1
jmp 0x428349
mov edx, dword [0x4aa1d0]
xor ecx, ecx
cmp dword [edi + 0xb4], 3
push 0
sete cl
lea ecx, [ecx + ecx + 1]
push ecx
push 0
push edx
call fcn.0040d520
add esp, 0x10
mov eax, 1
jmp 0x428349
push 0
push 2
push 0
jmp 0x425c7b
mov ecx, dword [0x4aa1d0]
push 0
push 0
push 0
push ecx
call fcn.0040d520
add esp, 0x10
mov eax, 1
jmp 0x428349
mov edx, dword [0x4aa1d0]
push edx
call fcn.0040f550
add esp, 4
jmp 0x428349
mov eax, dword [0x4aa1e8]
mov edx, dword [0x4aa1e4]
push 0x498811
push eax
mov eax, dword [0x4aa1e0]
push edx
mov edx, dword [0x4aa1dc]
push eax
mov eax, dword [0x4aa1d8]
push edx
mov edx, dword [0x4aa1d4]
push eax
push edx
mov edx, dword [0x4aa1d0]
push ecx
mov eax, 0x498811
call fcn.0040f7e0
add esp, 0x20
jmp 0x428349
mov eax, dword [0x4aa1e4]
mov edx, dword [0x4aa1e8]
push eax
mov eax, dword [0x4aa1e0]
push edx
mov edx, dword [0x4aa1d8]
push eax
mov eax, dword [0x4aa1d4]
push 0x498811
push 0x498811
push edx
mov edx, dword [0x4aa1d0]
push eax
mov eax, dword [0x4aa1dc]
push ecx
call fcn.0040f7e0
add esp, 0x20
jmp 0x428349
mov edx, dword [0x4aa1dc]
mov eax, dword [0x4aa1d8]
push 0x498811
push edx
mov edx, dword [0x4aa1d4]
push eax
mov eax, dword [0x4aa1d0]
push 0x498811
push 0x498811
push edx
push eax
mov eax, 0x498811
push ecx
mov edx, eax
call fcn.0040f7e0
add esp, 0x20
jmp 0x428349
mov edi, 4
mov ecx, esi
call fcn.00420690
push eax
mov ecx, esi
call fcn.0043a140
jmp 0x428349
mov eax, dword [0x4aa1d4]
mov ebx, dword [0x4aa1d8]
mov esi, dword [0x4aa1d0]
cmp cl, 0x76
push 0
sete cl
movzx edx, cl
push 0
push edx
push eax
mov eax, dword [0x4aa1dc]
push edi
call fcn.00475db0
add esp, 0x14
test eax, eax
je 0x425e26
mov ecx, dword [0x4a6920]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x425e26
push 1
push eax
call fcn.00401350
add esp, 8
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov edx, dword [0x4aa1d0]
push 9
push str.ahk_group
push edx
call fcn.00485bd0
add esp, 0xc
test eax, eax
jne 0x425e67
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
jne 0x425e67
mov ecx, dword [0x4aa1dc]
cmp byte [ecx], 0
jne 0x425e67
mov bl, 1
jmp 0x425e69
xor bl, bl
mov al, byte [esi]
xor edx, edx
test bl, bl
setne dl
dec edx
and edx, 0x14
mov dword [esp + 0x2c], edx
cmp al, 0x82
je 0x425ec7
cmp al, 0x83
je 0x425ec7
mov eax, dword [0x4aa1d8]
cmp byte [eax], 0
je 0x425f08
mov al, byte [esi]
cmp al, 0x82
je 0x425f72
cmp al, 0x83
je 0x425f74
mov edx, dword [0x4aa1d8]
mov ecx, dword [0x4aa1d4]
push edx
mov edx, dword [0x4aa1d0]
push ecx
mov ecx, dword [0x4aa1dc]
push eax
call fcn.00432c60
jmp 0x428349
mov ecx, dword [0x4aa1d8]
cmp byte [ecx], 0
je 0x425efd
mov edi, 2
mov ecx, esi
call fcn.00420740
fmul qword [0x4a0a68]
call fcn.00493b10
mov edi, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
test eax, eax
jne 0x425efd
mov dword [esp + 0x2c], 0x1f4
mov edx, dword [0x4aa1e0]
cmp byte [edx], 0
jne 0x425e90
test bl, bl
je 0x425e90
mov ecx, dword [0x4aa1d0]
add ecx, 9
mov al, byte [ecx]
cmp al, 0x20
je 0x425f1f
cmp al, 9
jne 0x425f22
inc ecx
jmp 0x425f15
cmp byte [ecx], 0
mov dword [esp + 0x48], ecx
je 0x425e90
mov ebx, dword [0x4ac2c8]
test ebx, ebx
je 0x425e90
lea ecx, [ecx]
mov ecx, dword [esp + 0x48]
mov eax, dword [ebx + 4]
push ecx
push eax
call fcn.00485151
add esp, 8
test eax, eax
je 0x425f61
mov ebx, dword [ebx + 0x14]
test ebx, ebx
jne 0x425f40
jmp 0x425e90
mov edx, dword [esp + 0x2c]
mov cl, byte [esi]
push ebx
call fcn.00477c60
jmp 0x428349
cmp al, 0x83
mov ecx, dword [0x4aa1e0]
mov ebx, dword [0x4aa1d0]
sete dl
movzx eax, dl
mov edx, dword [esp + 0x2c]
push eax
mov eax, dword [0x4aa1d4]
push ecx
push edx
push eax
mov eax, dword [0x4aa1dc]
push edi
call fcn.004760b0
add esp, 0x14
test eax, eax
je case.0x427b60.69
mov ecx, dword [0x4a6920]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle case.0x427b60.69
push 1
push eax
call fcn.00401350
add esp, 8
mov eax, 1
jmp 0x428349
mov ebx, dword [0x4aa1d4]
call fcn.00436b60
jmp 0x428349
mov edx, dword [0x4aa1d4]
mov eax, dword [0x4aa1d0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042d2e0
jmp 0x428349
lea eax, [esp + 0xa8]
push eax
push 0x3a98
push 1
push str.Environment
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042d2e0
jmp 0x428349
mov eax, dword [0x4aa1d4]
mov ecx, dword [0x4aa1d0]
push eax
push ecx
push esi
call fcn.004508f0
jmp 0x428349
mov edx, dword [0x4aa1d0]
push 0
push 0xffffffffffffffff
push edx
mov eax, 0x4ac8b0
call fcn.0046f8b0
mov eax, dword [0x4aa1d4]
add esp, 0xc
push 0
push 0xffffffffffffffff
push eax
mov eax, 0x4ac8bc
call fcn.0046f8b0
mov ecx, dword [0x4aa1d8]
add esp, 0xc
push 0
push 0xffffffffffffffff
push ecx
mov eax, 0x4ac8c8
call fcn.0046f8b0
add esp, 0xc
mov eax, 1
jmp 0x428349
mov eax, dword [0x4aa1d8]
push str.UseErrorLevel
call fcn.00472690
add esp, 4
test eax, eax
setne bl
mov dl, 3
cmp dl, byte [esi + 1]
mov edx, dword [0x4aa1d8]
sbb eax, eax
and eax, dword [0x4aa184]
mov byte [esp + 0x74], bl
mov ecx, dword [esp + 0x74]
push eax
push 1
push ecx
push 0
push edx
mov edx, dword [0x4aa1d4]
test bl, bl
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4aa1d0]
push 0
push 0x4ac290
call fcn.0042e210
test bl, bl
je 0x428349
test eax, eax
mov eax, 0x49889c
jne 0x426118
mov eax, str.ERROR
push 1
push 0
push 0xffffffffffffffff
push eax
mov eax, dword [0x4aaa2c]
push eax
call fcn.00475030
jmp 0x428349
push esi
call fcn.00432d40
jmp 0x428349
cmp byte [esi + 1], 2
jbe 0x42617d
mov ecx, dword [0x4aa1e8]
mov edx, dword [0x4aa1e4]
mov eax, dword [0x4aa1e0]
push ecx
mov ecx, dword [0x4aa1dc]
push edx
mov edx, dword [0x4aa1d8]
push eax
mov eax, dword [0x4aa1d4]
push ecx
mov ecx, dword [0x4aa1ec]
push edx
mov edx, dword [0x4aa1d0]
call fcn.00433410
jmp 0x428349
mov eax, dword [0x4aa1d4]
mov ecx, dword [0x4aa1d0]
push 0x498811
push 0x498811
push 0x498811
push eax
push ecx
mov ecx, 0x498811
mov eax, ecx
mov edx, ecx
call fcn.00433410
jmp 0x428349
mov edx, dword [0x4aa1f8]
mov eax, dword [0x4aa1f4]
mov ecx, dword [0x4aa1f0]
push edx
mov edx, dword [0x4aa1ec]
push eax
mov eax, dword [0x4aa1e8]
push ecx
mov ecx, dword [0x4aa1dc]
push edx
mov edx, dword [0x4aa1d8]
push eax
mov eax, dword [0x4aa1d4]
push ecx
mov ecx, dword [0x4aa1d0]
push edx
mov edx, dword [0x4aa1e4]
push eax
push ecx
mov ecx, dword [0x4aa1e0]
push esi
call fcn.0044f630
jmp 0x428349
cmp cl, 0x47
mov ecx, dword [0x4aa1e0]
sete dl
movzx eax, dl
mov edx, dword [0x4aa1dc]
push eax
mov eax, dword [0x4aa1d4]
push ecx
mov ecx, dword [0x4aa1d0]
push edx
mov edx, dword [0x4aa1d8]
push eax
push ecx
mov ecx, dword [0x4aa1e4]
push esi
call fcn.00433530
jmp 0x428349
mov esi, dword [0x4aa1dc]
push 1
xor bl, bl
call fcn.0040ceb0
add esp, 4
mov byte [esp + 0x70], al
test al, al
jne 0x426275
mov edx, dword [0x4aa1dc]
mov ecx, dword [esp + 0x10]
push edx
push 0
push str.Parameter_4_invalid.
call fcn.0042d4b0
mov esi, dword [esp + 0x10]
jmp 0x428349
mov eax, dword [0x4aa1e0]
cmp byte [eax], bl
je 0x42628e
mov ecx, dword [esp + 0x10]
mov edi, 4
call fcn.00420690
jmp 0x426293
mov eax, 1
mov ecx, dword [0x4aa1e8]
mov edx, dword [0x4aa1d8]
push ecx
mov ecx, dword [0x4aa1d0]
push edx
mov edx, dword [0x4aa1e4]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
mov edx, dword [0x4aa1d4]
push eax
mov eax, dword [esp + 0x84]
push eax
push ecx
mov ecx, dword [0x4aa1ec]
call fcn.004335f0
mov esi, dword [esp + 0x10]
jmp 0x428349
mov edx, dword [0x4aa1ec]
mov eax, dword [0x4aa1e8]
mov ecx, dword [0x4aa1e0]
push edx
mov edx, dword [0x4aa1dc]
push eax
mov eax, dword [0x4aa1d8]
push ecx
mov ecx, dword [0x4aa1d4]
push edx
mov edx, dword [0x4aa1d0]
push eax
push ecx
mov ecx, dword [0x4aa1f0]
push edx
mov edx, dword [0x4aa1e4]
push esi
call fcn.00433c30
jmp 0x428349
mov eax, dword [0x4aa1f0]
mov ecx, dword [0x4aa1ec]
mov edx, dword [0x4aa1e8]
push eax
mov eax, dword [0x4aa1e4]
push ecx
mov ecx, dword [0x4aa1e0]
push edx
push eax
push ecx
mov ecx, esi
call fcn.00433e60
jmp 0x428349
mov edx, dword [0x4aa1e0]
mov eax, dword [0x4aa1dc]
mov ecx, dword [0x4aa1d8]
push edx
mov edx, dword [0x4aa1d4]
push eax
push ecx
push edx
push esi
call fcn.00433fb0
jmp 0x428349
mov eax, dword [0x4aa1dc]
mov ecx, dword [0x4aa1d8]
mov edx, dword [0x4aa1d0]
push eax
push ecx
mov ecx, dword [0x4aa1e0]
push edx
mov edx, dword [0x4aa1d4]
push esi
call fcn.00434180
jmp 0x428349
mov eax, dword [0x4aa1e0]
mov ecx, dword [0x4aa1dc]
mov edx, dword [0x4aa1d4]
push eax
push ecx
mov ecx, dword [0x4aa1e4]
push edx
mov edx, dword [0x4aa1d8]
push esi
mov esi, dword [0x4aa1d0]
call fcn.00434290
mov esi, dword [esp + 0x10]
jmp 0x428349
mov eax, dword [0x4aa1e0]
mov ecx, dword [0x4aa1d4]
mov edx, dword [0x4aa1d8]
push eax
mov eax, dword [0x4aa1dc]
push ecx
mov ecx, dword [0x4aa1e4]
push esi
call fcn.00434350
jmp 0x428349
mov edx, dword [0x4aa1e8]
mov eax, dword [0x4aa1e4]
mov ecx, dword [0x4aa1e0]
push edx
mov edx, dword [0x4aa1dc]
push eax
mov eax, dword [0x4aa1d8]
push ecx
mov ecx, dword [0x4aa1d4]
push edx
mov edx, dword [0x4aa1d0]
push eax
push esi
call fcn.0044f930
jmp 0x428349
mov ecx, dword [0x4aa1ec]
mov edx, dword [0x4aa1e8]
mov eax, dword [0x4aa1e4]
push ecx
mov ecx, dword [0x4aa1e0]
push edx
mov edx, dword [0x4aa1dc]
push eax
mov eax, dword [0x4aa1d8]
push ecx
mov ecx, dword [0x4aa1d4]
push edx
push eax
push esi
call fcn.004500d0
jmp 0x428349
mov ecx, dword [0x4aa1e0]
mov eax, dword [0x4aa1dc]
mov edx, dword [0x4aa1d8]
mov edi, dword [0x4aa1d4]
push ecx
mov ecx, dword [0x4aa1e4]
call fcn.00434c00
jmp 0x428349
mov edx, dword [0x4aa1e8]
mov eax, dword [0x4aa1e4]
mov ecx, dword [0x4aa1e0]
push edx
mov edx, dword [0x4aa1d8]
push eax
mov eax, dword [0x4aa1d4]
push ecx
mov ecx, dword [0x4aa1d0]
push edx
mov edx, dword [0x4aa1dc]
push eax
push ecx
mov ecx, dword [0x4aa1ec]
call fcn.00434c70
jmp 0x428349
cmp cl, 0x90
sete dl
movzx eax, dl
push eax
mov eax, esi
call fcn.00434da0
jmp 0x428349
mov ecx, dword [0x4aa1d4]
mov edx, dword [0x4aa1d0]
push ecx
mov ecx, dword [0x4aa1d8]
push esi
call fcn.004350b0
jmp 0x428349
mov edx, dword [0x4aa1e4]
mov eax, dword [0x4aa1e0]
mov ecx, dword [0x4aa1dc]
push edx
mov edx, dword [0x4aa1d8]
push eax
mov eax, dword [0x4aa1d4]
push ecx
mov ecx, dword [0x4aa1d0]
push edx
push eax
push esi
call fcn.00435710
jmp 0x428349
cmp byte [esi + 1], 1
jbe 0x426565
mov ecx, dword [0x4aa1dc]
mov edx, dword [0x4aa1d8]
mov eax, dword [0x4aa1d4]
push ecx
mov ecx, dword [0x4aa1e0]
push edx
mov edx, dword [0x4aa1d0]
call fcn.00435b10
jmp 0x428349
mov edi, dword [0x4aa1d0]
mov ecx, 0x498811
push 0x498811
mov eax, ecx
mov edx, ecx
call fcn.00441920
test eax, eax
je case.0x427b60.69
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, 1
jmp 0x428349
mov eax, dword [0x4aa1dc]
mov ecx, dword [0x4aa1e0]
mov edx, dword [0x4aa1d4]
push eax
mov eax, dword [0x4aa1d8]
call fcn.00435b40
jmp 0x428349
mov ecx, dword [0x4aa1dc]
mov eax, dword [0x4aa1d8]
mov edx, dword [0x4aa1d4]
push ecx
mov ecx, dword [0x4aa1e0]
call fcn.00435d50
jmp 0x428349
mov edx, dword [0x4aa1e0]
mov eax, dword [0x4aa1dc]
mov ecx, dword [0x4aa1d4]
push edx
mov edx, dword [0x4aa1d8]
push eax
push ecx
mov ecx, dword [0x4aa1e4]
push esi
call fcn.00435e70
jmp 0x428349
mov edx, dword [0x4aa1dc]
mov ecx, dword [0x4aa1e0]
mov eax, dword [0x4aa1d8]
push edx
mov edx, dword [0x4aa1d4]
push esi
call fcn.00436710
jmp 0x428349
mov eax, dword [0x4aa1ec]
mov ecx, dword [0x4aa1e8]
mov edx, dword [0x4aa1e4]
push eax
mov eax, dword [0x4aa1e0]
push ecx
push edx
push eax
mov eax, esi
call fcn.004369e0
jmp 0x428349
mov ecx, dword [0x4aa1d8]
push ecx
mov ecx, dword [0x4aa1d4]
push esi
call fcn.00436cb0
jmp 0x428349
push 0
push 0x1a3
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov edx, dword [0x4a6920]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle case.0x427b60.69
push 1
push eax
call fcn.00401350
add esp, 8
mov eax, 1
jmp 0x428349
push 0
push 0x1a0
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [0x4a6920]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle case.0x427b60.69
push 1
push eax
call fcn.00401350
add esp, 8
mov eax, 1
jmp 0x428349
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x42672c
mov edi, dword [0x4aa1d0]
cmp byte [edi], al
je 0x42672c
mov eax, 0x4ac290
call fcn.00419ba0
test eax, eax
jne 0x42672c
mov ecx, dword [0x4aa1d0]
push ecx
push eax
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042d4b0
jmp 0x428349
mov dword [0x4ac844], eax
mov eax, 1
jmp 0x428349
mov ecx, dword [0x4aa1d8]
mov dl, 1
cmp dl, byte [esi + 1]
mov edx, dword [0x4aa1d4]
sbb eax, eax
and eax, dword [0x4aa17c]
push eax
mov eax, dword [0x4aa1d0]
push ecx
mov ecx, dword [esi + 0xc]
push edx
push eax
call fcn.0040a5c0
add esp, 0x10
jmp 0x428349
mov ebx, dword [esi + 0xc]
test ebx, ebx
jne 0x426809
mov ecx, dword [0x4aa1d0]
push 0x4ac290
call fcn.00419be0
mov ebx, eax
test ebx, ebx
jne 0x426809
mov eax, dword [0x4aa1d0]
cmp byte [eax], bl
je 0x4267ae
push eax
push ebx
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042d4b0
jmp 0x428349
cmp byte [esi + 1], 0
jbe 0x4267d7
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 4]
cmp byte [eax], 0
je 0x4267d7
push 0x498811
push 0
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042d4b0
jmp 0x428349
mov ebx, dword [edi + 0x9c]
test ebx, ebx
jne 0x426809
mov edi, dword [edi + 0xa0]
test edi, edi
je 0x4267f1
mov ebx, dword [edi]
test ebx, ebx
jne 0x426809
push 0x498811
push 0
push str.Parameter_1_must_not_be_blank_in_this_case.
mov ecx, esi
call fcn.0042d4b0
jmp 0x428349
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
je 0x4268d6
push 0
mov esi, eax
call fcn.00413e80
add esp, 4
test eax, eax
jne 0x426893
push eax
mov eax, dword [0x4aa1d4]
push 1
push 1
push 1
call fcn.004721a0
add esp, 0x10
test eax, eax
jne 0x4268ca
mov edx, dword [0x4aa1d4]
push str.Delete
push edx
call fcn.00485151
add esp, 8
test eax, eax
jne 0x426874
push ebx
push 0x4ac290
call fcn.00419ab0
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov eax, dword [0x4aa1d4]
mov ecx, dword [esp + 0x10]
push eax
push 0
push str.Parameter_2_invalid.
call fcn.0042d4b0
mov esi, dword [esp + 0x10]
jmp 0x428349
jle 0x4268ca
cmp eax, 2
jg 0x4268ca
cmp eax, 1
mov eax, dword [0x4aa1d8]
sete cl
push 0
movzx edx, cl
push edx
push eax
push 0x498811
push ebx
mov edi, 0x4ac290
call fcn.004197f0
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov eax, dword [0x4aa1d4]
mov esi, dword [esp + 0x10]
cmp byte [eax], 0
mov edx, dword [0x4aa1d8]
jne 0x4268e7
cmp byte [edx], 0
je 0x4268e7
mov cl, 1
jmp 0x4268e9
xor cl, cl
push ecx
push 1
push edx
push eax
push ebx
mov edi, 0x4ac290
call fcn.004197f0
mov eax, 1
jmp 0x428349
mov eax, dword [0x4aa1d0]
cmp byte [eax], 0
mov ebx, 0x10
je 0x426937
push 0x49ac10
push eax
call fcn.00485151
add esp, 8
test eax, eax
je 0x426937
xor edi, edi
mov ecx, esi
call fcn.00420690
mov edi, dword [esp + 0x14]
mov ebx, eax
test ebx, ebx
je 0x42693c
mov eax, 1
mov byte [edi + 0xce], al
test al, al
je 0x426968
or eax, 0xffffffff
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 0x24], eax
mov dword [edi + 0xb8], ebx
mov byte [edi + 0xcc], 0
mov eax, 1
jmp 0x428349
mov dword [edi + 0xb8], 5
mov byte [edi + 0xcc], 1
mov eax, 1
jmp 0x428349
mov esi, dword [0x4aa1d0]
call fcn.00413e20
dec eax
je 0x426a2f
dec eax
je 0x4269e8
dec eax
jne 0x426a44
mov ecx, dword [0x4aa1d4]
cmp byte [ecx], al
je 0x4269d2
mov ecx, dword [esp + 0x10]
lea edi, [eax + 1]
call fcn.00420690
or eax, edx
jne 0x4269ce
mov esi, dword [esp + 0x10]
mov eax, edi
mov edi, dword [esp + 0x14]
mov byte [edi + 0xcd], al
jmp 0x428349
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
xor eax, eax
mov byte [edi + 0xcd], al
mov eax, 1
jmp 0x428349
mov edx, dword [0x4aa1d0]
cmp byte [edx], 0
je 0x426a06
mov ecx, dword [esp + 0x10]
mov edi, 1
call fcn.00420690
mov dword [0x4ac8a4], eax
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
je 0x426a44
mov ecx, dword [esp + 0x10]
mov edi, 2
call fcn.00420690
mov esi, dword [esp + 0x10]
mov dword [0x4ac8a0], eax
lea eax, [edi - 1]
jmp 0x428349
mov ecx, dword [esp + 0x10]
mov edi, 1
call fcn.00420690
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x2c], eax
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov ebx, dword [esi + 0xc]
test ebx, ebx
jne 0x426a75
mov edx, dword [0x4aa1d0]
push 0x4ac290
mov cl, 1
call fcn.00421380
mov ebx, eax
test ebx, ebx
je case.0x424d0a.8
mov edi, dword [0x4aa1dc]
cmp byte [edi], 0
je 0x426ab1
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x426aae
mov eax, 0x4ac290
call fcn.00419ba0
test eax, eax
jne 0x426aae
mov edx, dword [0x4aa1dc]
push edx
push eax
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042d4b0
jmp 0x428349
mov dword [ebx + 0x10], eax
mov eax, dword [0x4aa1e4]
mov ecx, dword [0x4aa1e0]
mov edx, dword [0x4aa1d8]
push eax
push ecx
mov ecx, dword [0x4aa1d4]
push edx
push ebx
call fcn.004779b0
jmp 0x428349
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x426b20
mov eax, dword [0x4aa1d0]
cmp byte [eax], 0
mov ebx, eax
je case.0x427b60.69
mov edi, dword [0x4ac2c8]
test edi, edi
je case.0x427b60.69
jmp 0x426b00
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00485151
add esp, 8
test eax, eax
je 0x426b20
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x426b00
lea eax, [edi + 1]
jmp 0x428349
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
je 0x426b50
push 0x49a1a4
push eax
call fcn.00485151
add esp, 8
test eax, eax
jne 0x426b50
mov al, 1
mov ecx, edi
push eax
call fcn.00477fb0
mov eax, 1
jmp 0x428349
xor al, al
mov ecx, edi
push eax
call fcn.00477fb0
mov eax, 1
jmp 0x428349
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x426bb0
mov eax, dword [0x4aa1d0]
cmp byte [eax], 0
mov ebx, eax
je case.0x427b60.69
mov edi, dword [0x4ac2c8]
test edi, edi
je case.0x427b60.69
lea esp, [esp]
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00485151
add esp, 8
test eax, eax
je 0x426bb0
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x426b90
lea eax, [edi + 1]
jmp 0x428349
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
je 0x426c0f
push 0x49b70c
push eax
call fcn.00485151
add esp, 8
test eax, eax
jne 0x426be0
push edi
xor edx, edx
mov cl, 0x82
call fcn.00477c60
mov eax, 1
jmp 0x428349
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
je 0x426c0f
push 0x49a1a4
push eax
call fcn.00485151
add esp, 8
test eax, eax
jne 0x426c0f
mov al, 1
push eax
push edi
call fcn.00477d20
mov eax, 1
jmp 0x428349
xor al, al
push eax
push edi
call fcn.00477d20
mov eax, 1
jmp 0x428349
mov eax, dword [0x4aa1d8]
push eax
mov eax, dword [0x4aa1d4]
call fcn.0043cbf0
jmp 0x428349
test ebx, ebx
jne 0x426c51
lea edi, [ebx + 1]
mov ecx, esi
call fcn.00420690
call fcn.00412560
mov eax, edi
jmp 0x428349
mov eax, dword [0x4aa1d4]
push 0
push 1
push 0
push 1
call fcn.004721a0
add esp, 0x10
cmp eax, 2
je 0x426c89
mov eax, dword [0x4aa1d8]
push 0
push 1
push 0
push 1
call fcn.004721a0
add esp, 0x10
cmp eax, 2
jne 0x426d14
mov ecx, dword [0x4aa1d4]
cmp byte [ecx], 0
je 0x426ca2
mov edi, 1
mov ecx, esi
call fcn.00420740
jmp 0x426ca4
fldz
mov edx, dword [0x4aa1d8]
fst qword [esp + 0x30]
cmp byte [edx], 0
je 0x426cde
mov edi, 2
fstp st(0)
mov ecx, esi
call fcn.00420740
fst qword [esp + 0x48]
fld qword [esp + 0x30]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x426cea
fstp qword [esp + 0x30]
fstp qword [esp + 0x48]
jmp 0x426cee
fld qword [0x4a0ae8]
fst qword [esp + 0x48]
jmp 0x426ccb
fstp st(0)
fstp st(0)
call fcn.004126d0
fld qword [esp + 0x48]
fld qword [esp + 0x30]
sub esp, 8
fsub st(1), st(0)
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push ebx
call fcn.00412c40
jmp 0x428349
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
je 0x426d2e
mov edi, 1
mov ecx, esi
call fcn.00420690
mov ebx, eax
jmp 0x426d30
xor ebx, ebx
mov ecx, dword [0x4aa1d8]
cmp byte [ecx], 0
je 0x426d4b
mov edi, 2
mov ecx, esi
call fcn.00420690
mov esi, eax
jmp 0x426d50
mov esi, SysReAllocString
cmp ebx, esi
jle 0x426d5a
mov eax, ebx
mov ebx, esi
mov esi, eax
call fcn.00412680
mov ecx, eax
mov eax, ebx
cdq
mov edi, eax
mov dword [esp + 0x30], edx
mov eax, esi
cdq
sub eax, edi
sbb edx, dword [esp + 0x30]
add eax, 1
adc edx, 0
push edx
push eax
push 0
push ecx
call fcn.004945d0
add eax, ebx
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x28]
call fcn.004010d0
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov ecx, dword [0x4aa1d4]
push 1
push esi
call fcn.0043cdd0
jmp 0x428349
mov edx, dword [0x4aa1d8]
mov eax, dword [0x4aa1d4]
mov ecx, dword [0x4aa1d0]
push edx
push esi
call fcn.0043cf90
jmp 0x428349
mov eax, dword [0x4aa1d8]
mov ecx, dword [0x4aa1d4]
push esi
call fcn.0043d230
jmp 0x428349
mov eax, dword [0x4aa1dc]
mov edx, dword [0x4aa1d4]
push eax
xor eax, eax
cmp cl, 0x9b
sete al
push edx
dec eax
and eax, dword [0x4aa1d0]
push eax
push esi
call fcn.0043d7b0
jmp 0x428349
mov ecx, dword [0x4aa1d4]
cmp byte [ecx], 0
je 0x426e29
mov edi, 1
mov ecx, esi
call fcn.00420690
dec eax
jmp 0x426e2b
xor eax, eax
cdq
test edx, edx
jg 0x426e3c
jl 0x426e36
test eax, eax
jae 0x426e3c
xor eax, eax
mov dword [esp + 0x34], eax
cmp byte [esi], 0x9d
push eax
jne 0x426e50
call fcn.0043e8b0
mov esi, dword [esp + 0x10]
jmp 0x428349
mov edi, dword [0x4aa1d0]
mov ebx, esi
call fcn.0043e9a0
jmp 0x428349
mov edx, dword [0x4aa1d4]
cmp byte [edx], 0
je 0x426e7d
mov edi, 1
mov ecx, esi
call fcn.00420690
mov ebx, eax
jmp 0x426e82
mov ebx, 0x96
mov eax, dword [0x4aa1d0]
cmp byte [eax], 0
je 0x426ea5
xor edi, edi
mov ecx, esi
call fcn.00420690
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
lea eax, [edi + 1]
jmp 0x428349
mov eax, 0x20b
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov eax, 1
jmp 0x428349
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
je 0x426edd
push str.wait
push eax
call fcn.00485151
add esp, 8
test eax, eax
je 0x426f02
mov eax, dword [0x4aa1d4]
push 0x499f00
push eax
call fcn.00485151
add esp, 8
test eax, eax
je 0x426f02
xor al, al
push eax
mov eax, dword [0x4aa1d0]
push esi
call fcn.0043eb00
jmp 0x428349
mov eax, 1
push eax
mov eax, dword [0x4aa1d0]
push esi
call fcn.0043eb00
jmp 0x428349
cmp byte [esi + 1], 2
jae 0x426f23
mov edi, dword [edi + 0x18]
jmp 0x426f25
xor edi, edi
mov ecx, dword [0x4aa1d0]
mov edx, dword [0x4aa1d4]
push edi
push ecx
push edx
push esi
call fcn.0043ff50
jmp 0x428349
mov ecx, dword [0x4aa1d4]
push esi
call fcn.0043f580
jmp 0x428349
mov eax, dword [0x4aa1d4]
mov ecx, dword [0x4aa1d8]
push eax
push esi
call fcn.0043fbc0
jmp 0x428349
push esi
call fcn.00440360
jmp 0x428349
mov eax, dword [0x4aa1d0]
call fcn.00451620
mov esi, dword [esp + 0x10]
jmp 0x428349
mov edi, dword [0x4aa1d0]
push esi
call fcn.00451720
jmp 0x428349
mov eax, dword [0x4aa1d8]
mov ecx, dword [0x4aa1d4]
mov edx, dword [0x4aa1d0]
push esi
call fcn.004405f0
jmp 0x428349
add edi, 0x30
push edi
push 0
mov edi, 2
mov ecx, esi
call fcn.00420690
cmp eax, 1
mov eax, dword [0x4aa1d4]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4aa1d0]
push eax
call fcn.00451dc0
add esp, 0x10
test eax, eax
jne 0x427032
mov ecx, dword [0x4aaa2c]
push 1
push eax
push 0xffffffffffffffff
push 0x49889c
push ecx
call fcn.00475030
jmp 0x428349
add edi, 0x30
push edi
push 1
mov edi, 2
mov ecx, esi
call fcn.00420690
mov ecx, dword [0x4aa1d4]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4aa1d0]
push eax
push ecx
call fcn.00451dc0
add esp, 0x10
push eax
push esi
call fcn.0042d3a0
jmp 0x428349
mov edi, 2
mov ecx, esi
call fcn.00420690
mov ecx, dword [0x4aa1d4]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4aa1d0]
push eax
push ecx
call fcn.004519a0
add esp, 8
test al, al
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042d2e0
jmp 0x428349
mov ecx, dword [0x4aa1d8]
mov al, byte [ecx]
call fcn.00409380
cmp al, 0x52
jne 0x4270b5
mov edx, dword [0x4aa1d4]
mov eax, dword [0x4aa1d0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042d2e0
jmp 0x428349
mov edi, 2
mov ecx, esi
call fcn.00420690
mov ecx, dword [0x4aa1d4]
mov edx, dword [0x4aa1d0]
push ecx
mov edi, eax
call fcn.00451b30
add esp, 4
test al, al
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042d2e0
jmp 0x428349
mov ecx, dword [0x4aa1d0]
push ecx
mov ecx, esi
call fcn.0043f3c0
jmp 0x428349
mov edx, dword [0x4aa1d0]
cmp byte [edx], 0
je 0x42713f
mov edi, 1
mov ecx, esi
call fcn.00420690
mov edx, dword [0x4aa1d0]
cmp eax, edi
sete al
movzx ecx, al
push ecx
call fcn.00451ce0
add esp, 4
test al, al
je 0x42713f
xor al, al
push eax
push esi
call fcn.0042d2e0
jmp 0x428349
mov eax, 1
push eax
push esi
call fcn.0042d2e0
jmp 0x428349
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
jne 0x427169
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x2c]
test edi, edi
jne 0x427169
mov eax, 0x498811
mov edi, esi
call fcn.00440790
jmp 0x428349
mov ebx, dword [0x4aa1d4]
cmp byte [ebx], 0
jne 0x42718f
mov edi, dword [edi + 0x10]
lea ebx, [edi + 0x2c]
test edi, edi
jne 0x42718f
mov ebx, 0x498811
push 0
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420690
mov esi, dword [0x4aa1d8]
add esp, 4
cmp eax, 1
sete dl
movzx eax, dl
push eax
call fcn.00414160
mov ecx, dword [0x4aa1d0]
push eax
push ebx
push ecx
mov ecx, dword [esp + 0x24]
call fcn.004408a0
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
xor eax, eax
cmp dword [edx + 0xe0], eax
sete al
jmp 0x428349
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
jne 0x4271f9
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x2c]
test edi, edi
jne 0x4271f9
mov eax, 0x498811
mov ecx, dword [0x4aa1d8]
movzx edx, byte [ecx]
push edx
mov edi, esi
call fcn.00440f80
jmp 0x428349
mov ebx, dword [0x4aa1d4]
cmp byte [ebx], 0
jne 0x427229
mov edi, dword [edi + 0x10]
lea ebx, [edi + 0x2c]
test edi, edi
jne 0x427229
mov ebx, 0x498811
push 0
push ecx
mov edi, 4
mov ecx, esi
call fcn.00420690
mov esi, dword [0x4aa1dc]
add esp, 4
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.00414160
mov edx, dword [0x4aa1d8]
mov ecx, dword [0x4aa1d0]
push eax
movzx eax, byte [edx]
push eax
push ebx
push ecx
mov ecx, dword [esp + 0x28]
call fcn.00441100
jmp 0x4271c8
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
je 0x42728e
mov edi, eax
mov eax, dword [0x4aa1d8]
push eax
push esi
call fcn.004416c0
jmp 0x428349
mov edi, dword [edi + 0x10]
test edi, edi
je 0x4272a9
mov eax, dword [0x4aa1d8]
push eax
add edi, 0x2c
push esi
call fcn.004416c0
jmp 0x428349
mov eax, dword [0x4aa1d8]
push eax
mov edi, 0x498811
push esi
call fcn.004416c0
jmp 0x428349
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
jne 0x4272d8
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x2c]
test edi, edi
jne 0x4272d8
mov eax, 0x498811
push esi
call fcn.004517d0
jmp 0x428349
mov edi, dword [0x4aa1d0]
call fcn.0043ecf0
mov ecx, dword [esp + 0x14]
xor eax, eax
cmp dword [ecx + 0xe0], eax
sete al
jmp 0x428349
mov edx, dword [0x4aa1e0]
mov eax, dword [0x4aa1d4]
mov ecx, dword [0x4aa1dc]
push edx
mov edx, dword [0x4aa1d8]
push eax
push esi
call fcn.0043edd0
jmp 0x428349
mov ecx, dword [0x4aa1d8]
mov edx, dword [0x4aa1d4]
push ecx
mov ecx, dword [0x4aa1dc]
push edx
mov edx, esi
call fcn.00450d10
jmp 0x428349
mov eax, dword [0x4aa1d0]
push eax
push esi
call fcn.00451030
jmp 0x428349
mov ecx, dword [0x4aa1f0]
mov edx, dword [0x4aa1ec]
mov eax, dword [0x4aa1e8]
mov ebx, dword [0x4aa1e0]
mov edi, dword [0x4aa1dc]
push ecx
mov ecx, dword [0x4aa1e4]
push edx
mov edx, dword [0x4aa1d4]
push eax
mov eax, dword [0x4aa1d0]
push ecx
mov ecx, dword [0x4aa1d8]
push edx
push eax
push esi
call fcn.004513d0
jmp 0x428349
push 0
mov ecx, 4
call fcn.00439280
add esp, 4
jmp 0x428349
mov esi, dword [0x4aa1d0]
push 7
call fcn.00413e80
add esp, 4
cmp eax, 7
jne 0x4273db
push 0
lea ecx, [eax - 6]
call fcn.00439280
mov esi, dword [esp + 0x14]
add esp, 4
jmp 0x428349
cmp byte [edi + 0xd9], 0
je 0x427407
mov ecx, dword [0x4ac1d0]
test ecx, ecx
jle 0x4273f1
dec ecx
jmp 0x4273f6
mov ecx, 0x18f
mov dword [0x4ac1d0], ecx
mov dword [ecx*4 + 0x4abb90], 0
mov esi, dword [esp + 0x10]
cmp eax, 1
sete cl
mov byte [edi + 0xd9], cl
mov eax, 1
jmp 0x428349
push 0
mov ecx, 2
call fcn.00439280
add esp, 4
jmp 0x428349
push 0
mov ecx, 3
call fcn.00439280
add esp, 4
jmp 0x428349
mov ebx, dword [0x4a6920]
add ebx, 0x4c
call fcn.0045a190
test eax, eax
je 0x427469
mov edx, dword [0x4a6920]
mov eax, dword [edx + 0x4c]
mov eax, dword [eax + 4]
jmp 0x42746b
xor eax, eax
mov cl, byte [esi + 1]
push eax
test cl, cl
jne 0x427489
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push str.Press_OK_to_continue.
jmp 0x4274ce
cmp cl, 1
jne 0x4274a6
fldz
mov ecx, dword [0x4aa1d0]
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push ecx
jmp 0x4274ce
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420740
mov edx, dword [0x4aa1d4]
push ecx
fstp qword [esp]
push edx
xor edi, edi
mov ecx, esi
call fcn.00420690
push eax
mov eax, dword [0x4aa1d8]
push eax
call fcn.00476c20
mov edi, eax
add esp, 0x18
test edi, edi
jne 0x427502
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x59e
jne 0x427502
mov ecx, dword [0x4aa1d0]
push ecx
push edi
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042d4b0
jmp 0x428349
xor eax, eax
test edi, edi
setne al
jmp 0x428349
mov edx, dword [0x4aa1ec]
cmp byte [edx], 0
je 0x427530
mov edi, 7
mov ecx, esi
call fcn.00420690
mov dword [esp + 0x48], eax
mov ebx, SysReAllocString
jmp 0x427539
mov ebx, SysReAllocString
mov dword [esp + 0x48], ebx
mov eax, dword [0x4aa1e8]
cmp byte [eax], 0
je 0x427555
mov edi, 6
mov ecx, esi
call fcn.00420690
mov dword [esp + 0x54], eax
jmp 0x427559
mov dword [esp + 0x54], ebx
mov ecx, dword [0x4aa1e4]
cmp byte [ecx], 0
je 0x427576
mov edi, 5
mov ecx, esi
call fcn.00420690
mov dword [esp + 0x2c], eax
jmp 0x42757a
mov dword [esp + 0x2c], ebx
mov edx, dword [0x4aa1e0]
cmp byte [edx], 0
je 0x427593
mov edi, 4
mov ecx, esi
call fcn.00420690
mov ebx, eax
mov edi, 9
mov ecx, esi
call fcn.00420740
mov eax, dword [0x4aa1f8]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x54]
sub esp, 8
fstp qword [esp]
push eax
mov eax, dword [esp + 0x38]
push ecx
mov ecx, dword [0x4aa1dc]
push edx
push eax
mov al, byte [ecx]
call fcn.00409380
mov edx, dword [0x4aa1d8]
cmp al, 0x48
mov eax, dword [0x4aa1d4]
push edx
mov edx, dword [esp + 0x38]
push eax
sete cl
push edx
mov edi, ebx
call fcn.00439540
add esp, 0x24
jmp 0x428349
mov eax, dword [0x4aa1d4]
cmp byte [eax], 0
je 0x427607
mov edi, 1
mov ecx, esi
call fcn.00420690
mov ebx, eax
jmp 0x427609
xor ebx, ebx
mov ecx, dword [0x4aa1d0]
cmp byte [ecx], 0
je 0x42761f
xor edi, edi
mov ecx, esi
call fcn.00420690
jmp 0x427624
mov eax, 0xc8
mov edx, dword [0x4aa1dc]
mov ecx, dword [0x4aa1d8]
push edx
push ecx
push ebx
push eax
call fcn.0044f3c0
jmp 0x428349
mov eax, dword [0x4aa238]
test eax, eax
je 0x42765f
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x42765f
mov edx, dword [0x4aa238]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4aa238], 0
mov eax, 1
jmp 0x428349
mov eax, dword [0x4aa1e0]
mov ecx, dword [0x4aa1dc]
mov edx, dword [0x4aa1d8]
push 0
push eax
mov eax, dword [0x4aa1d4]
push ecx
mov ecx, dword [0x4aa1d0]
push edx
push eax
push ecx
push esi
mov ecx, 0x498811
call fcn.0042faa0
jmp 0x428349
mov edx, dword [0x4aa1e4]
mov eax, dword [0x4aa1e0]
mov ecx, dword [0x4aa1dc]
push 1
push edx
mov edx, dword [0x4aa1d8]
push eax
mov eax, dword [0x4aa1d4]
push ecx
mov ecx, dword [0x4aa1d0]
push edx
push eax
push esi
call fcn.0042faa0
jmp 0x428349
mov ecx, dword [0x4aa1d8]
mov edx, dword [0x4aa1d4]
mov eax, dword [0x4aa1d0]
push ecx
mov ecx, dword [0x4aa1dc]
push edx
push eax
push esi
call fcn.00430c70
jmp 0x428349
mov ecx, dword [0x4aa1d4]
mov edx, dword [0x4aa1d0]
mov edi, dword [0x4aa1dc]
mov esi, dword [0x4aa1d8]
push ecx
push edx
call fcn.00430f80
mov esi, dword [esp + 0x10]
jmp 0x428349
push esi
call fcn.00431d00
jmp 0x428349
mov esi, dword [0x4aa1d4]
call fcn.00414400
mov esi, dword [0x4aa1d0]
movzx ebx, ax
call fcn.00414470
movzx ecx, ax
cmp ecx, 0xffffffff
je 0x427777
cmp ebx, 0xffffffff
je 0x427777
mov edx, 3
shl dx, cl
shl bx, cl
not dx
and dx, word [edi + 0xd0]
or dx, bx
mov word [edi + 0xd0], dx
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
xor edi, edi
mov ecx, esi
call fcn.00420690
mov ecx, dword [esp + 0x14]
mov byte [ecx + 0xcf], al
cmp al, 0x64
jbe case.0x427b60.69
mov byte [ecx + 0xcf], 2
lea eax, [edi + 1]
jmp 0x428349
mov eax, dword [edi + 0xb4]
push eax
mov eax, dword [0x4aa1d0]
call fcn.004140d0
mov dword [edi + 0xb4], eax
add esp, 4
mov eax, 1
jmp 0x428349
xor edi, edi
mov ecx, esi
call fcn.00420690
cmp eax, 0x64
ja case.0x427b60.69
mov ecx, dword [esp + 0x14]
mov byte [ecx + 0xd6], al
lea eax, [edi + 1]
jmp 0x428349
mov edx, dword [0x4aa1d8]
push str.Play
push edx
call fcn.00485151
add esp, 8
test eax, eax
jne 0x427852
mov eax, dword [0x4aa1d0]
cmp byte [eax], 0
je 0x427829
xor edi, edi
mov ecx, esi
call fcn.00420690
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x60], eax
mov edx, dword [0x4aa1d4]
cmp byte [edx], 0
je case.0x427b60.69
mov edi, 1
mov ecx, esi
call fcn.00420690
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x68], eax
mov eax, edi
jmp 0x428349
mov edx, dword [0x4aa1d0]
cmp byte [edx], 0
je 0x42786d
xor edi, edi
mov ecx, esi
call fcn.00420690
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x5c], eax
mov edx, dword [0x4aa1d4]
cmp byte [edx], 0
je case.0x427b60.69
mov edi, 1
mov ecx, esi
call fcn.00420690
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x64], eax
mov eax, edi
jmp 0x428349
mov edx, dword [0x4aa1d4]
push str.Play
push edx
call fcn.00485151
add esp, 8
xor edi, edi
mov ecx, esi
test eax, eax
jne 0x4278c6
call fcn.00420690
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x70], eax
lea eax, [edi + 1]
jmp 0x428349
call fcn.00420690
mov edx, dword [esp + 0x14]
mov dword [edx + 0x6c], eax
mov eax, 1
jmp 0x428349
xor edi, edi
mov ecx, esi
call fcn.00420690
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x54], eax
lea eax, [edi + 1]
jmp 0x428349
xor edi, edi
mov ecx, esi
call fcn.00420690
mov edx, dword [esp + 0x14]
mov dword [edx + 0x58], eax
lea eax, [edi + 1]
jmp 0x428349
mov eax, dword [0x4aa1d0]
push 0x49c4cc
call fcn.00472690
add esp, 4
mov ecx, esi
test eax, eax
je 0x427947
mov dword [edi], 0xffffffff
mov dword [edi + 4], 0xffffffff
xor edi, edi
call fcn.00420690
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x24], eax
lea eax, [edi + 1]
jmp 0x428349
mov dword [edi + 0x24], 0xffffffff
xor edi, edi
call fcn.00420690
mov ecx, dword [esp + 0x14]
mov dword [ecx + 4], edx
mov edx, eax
or edx, dword [ecx + 4]
mov dword [ecx], eax
jne case.0x427b60.69
mov dword [ecx], 0xa
mov dword [ecx + 4], edi
lea eax, [edi + 1]
jmp 0x428349
mov esi, dword [0x4aa1d0]
push 7
call fcn.00413e80
add esp, 4
cmp eax, 7
je 0x42799b
cmp eax, 1
sete al
mov byte [edi + 0xd3], al
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov esi, dword [0x4aa1d0]
call fcn.00413af0
dec eax
cmp eax, 5
ja case.default.0x4279be
jmp dword [eax*4 + 0x428cb0]
mov esi, dword [esp + 0x10]
mov eax, 1
mov dword [edi + 0x20], eax
jmp 0x428349
mov esi, dword [esp + 0x10]
mov dword [edi + 0x20], 2
mov eax, 1
jmp 0x428349
mov esi, dword [esp + 0x10]
mov dword [edi + 0x20], 4
mov eax, 1
jmp 0x428349
mov esi, dword [esp + 0x10]
mov dword [edi + 0x20], 3
mov eax, 1
jmp 0x428349
mov esi, dword [esp + 0x10]
mov byte [edi + 0xc9], 1
mov eax, 1
jmp 0x428349
mov esi, dword [esp + 0x10]
mov byte [edi + 0xc9], 0
mov eax, 1
jmp 0x428349
mov edx, dword [0x4aa1d0]
push 5
push str.Float
push edx
call fcn.00485bd0
add esp, 0xc
test eax, eax
jne 0x427b25
lea edi, [eax + 1]
mov ecx, esi
call fcn.00420610
cmp eax, 0x1e
jb 0x427a73
mov eax, edi
jmp 0x428349
mov ecx, esi
call fcn.00420690
mov edi, eax
mov eax, dword [0x4aa1d4]
push 0x2e
push eax
mov ebx, edx
call fcn.00486141
add esp, 8
mov dword [esp + 0x48], eax
test eax, eax
je 0x427aa4
mov esi, eax
inc esi
call fcn.00412b40
mov esi, dword [esp + 0x10]
jmp 0x427aa8
xor eax, eax
xor edx, edx
add eax, edi
adc edx, ebx
add eax, 2
adc edx, 0
mov dword [esp + 0x34], edx
js 0x427ac9
jg case.0x427b60.69
cmp eax, 0xff
ja case.0x427b60.69
mov eax, dword [0x4aa1d4]
push 0
push 1
push 1
push 1
call fcn.004721a0
add esp, 0x10
mov ecx, 0x49c4d0
test eax, eax
jne 0x427aec
mov ecx, 0x498811
cmp dword [esp + 0x48], 0
mov eax, 0x498811
jne 0x427afd
mov eax, 0x49bb80
mov edx, dword [esp + 0x14]
push ecx
mov ecx, dword [0x4aa1d4]
push eax
push ecx
add edx, 0x74
push str.___s_s_s
push edx
call fcn.00485688
add esp, 0x14
mov eax, 1
jmp 0x428349
mov eax, dword [0x4aa1d0]
push 7
push str.Integer
push eax
call fcn.00485bd0
add esp, 0xc
test eax, eax
jne case.0x427b60.69
mov ecx, dword [0x4aa1d4]
mov al, byte [ecx]
movsx ecx, al
add ecx, 0xffffffbc
cmp ecx, 0x24
ja case.0x427b60.69
movzx edx, byte [ecx + 0x428cd4]
jmp dword [edx*4 + 0x428cc8]
mov byte [edi + 0xd5], 0x44
mov eax, 1
jmp 0x428349
mov byte [edi + 0xd5], al
mov eax, 1
jmp 0x428349
mov eax, dword [0x4aa1d8]
mov ecx, dword [0x4aa1d4]
push eax
call fcn.0043a510
jmp 0x428349
mov al, byte [esi + 1]
mov cl, 4
cmp cl, al
sbb edx, edx
and edx, dword [0x4aa188]
mov cl, 3
push edx
cmp cl, al
mov eax, dword [0x4aa1e4]
mov ecx, dword [0x4aa1e0]
sbb edx, edx
and edx, dword [0x4aa184]
push edx
mov edx, dword [0x4aa1dc]
push eax
mov eax, dword [0x4aa1d8]
push ecx
mov ecx, dword [0x4aa1d0]
push edx
push eax
mov eax, dword [0x4aa1d4]
push ecx
push 0x4ac290
call fcn.00468560
jmp 0x428349
mov edx, dword [0x4aa1dc]
mov eax, dword [0x4aa1d8]
mov ecx, dword [0x4aa1d4]
push edx
push eax
push ecx
mov ecx, dword [0x4aa1d0]
push 0x4ac290
call fcn.0045a200
jmp 0x428349
mov ecx, dword [0x4aa1d4]
mov dl, 2
cmp dl, byte [esi + 1]
mov edx, dword [0x4aa1d0]
sbb eax, eax
and eax, dword [0x4aa180]
push eax
mov eax, dword [0x4aa1d8]
push ecx
push edx
push esi
call fcn.0045ab10
jmp 0x428349
mov eax, dword [0x4aa1dc]
mov ecx, dword [0x4aa1d8]
mov edx, dword [0x4aa1d4]
push eax
push ecx
push edx
push esi
call fcn.0045bad0
jmp 0x428349
mov esi, dword [0x4aa1d0]
call fcn.00413f80
cmp eax, 7
ja case.0x427c74.3
jmp dword [eax*4 + 0x428cfc]
cmp byte [0x4aa388], 0
jne case.0x427c74.3
call fcn.0042cef0
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
cmp byte [0x4aa388], 0
je case.0x427c74.3
call fcn.0042cef0
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov eax, dword [0x4aa1d0]
mov ecx, dword [esp + 0x10]
push eax
push 0
push str.Parameter_1_invalid.
call fcn.0042d4b0
mov esi, dword [esp + 0x10]
jmp 0x428349
mov edi, 1
mov ecx, esi
call fcn.00420690
mov esi, dword [0x4aa1d0]
test eax, eax
setne cl
movzx edx, cl
push edx
call fcn.00413ed0
push eax
mov eax, dword [esp + 0x18]
push eax
call fcn.0042cf40
mov esi, dword [esp + 0x10]
jmp 0x428349
mov esi, dword [0x4aa1d0]
push 7
call fcn.00413e80
add esp, 4
cmp eax, 7
je 0x427d27
cmp eax, 1
sete cl
mov byte [edi + 0xd4], cl
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov esi, dword [0x4aa1d0]
call fcn.00413f30
mov byte [edi + 0xd2], al
cmp al, 4
jne 0x427d51
mov byte [edi + 0xd2], 0
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov esi, dword [0x4aa1d0]
push 7
call fcn.00413e80
add esp, 4
cmp eax, 7
je 0x427d80
cmp eax, 1
sete dl
mov byte [edi + 0xca], dl
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov esi, dword [0x4aa1d0]
push 7
call fcn.00413e80
add esp, 4
cmp eax, 7
je 0x427daf
cmp eax, 1
sete al
mov byte [edi + 0xcb], al
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov esi, dword [0x4aa1d0]
call fcn.00413ff0
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x427ddb.3
movzx ecx, byte [ecx + 0x428d34]
jmp dword [ecx*4 + 0x428d1c]
mov bl, 1
call fcn.0042d040
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
xor bl, bl
call fcn.0042d040
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov esi, dword [esp + 0x10]
mov dword [0x4a6930], eax
mov eax, 1
jmp 0x428349
or byte [0x4aab3a], 2
cmp dword [0x4aa364], 0
mov byte [0x4aab39], 1
jne case.0x427ddb.3
mov edx, dword [0x4a7a34]
movzx eax, word [edx]
push eax
call fcn.00407e40
mov esi, dword [esp + 0x14]
add esp, 4
mov eax, 1
jmp 0x428349
mov byte [0x4aab39], 0
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov esi, dword [0x4aa1d0]
mov edi, str._a_a_a_v
mov al, 0x90
call fcn.00441880
mov esi, dword [esp + 0x10]
jmp 0x428349
mov esi, dword [0x4aa1d0]
mov edi, 0x4a6928
mov al, 0x14
call fcn.00441880
mov esi, dword [esp + 0x10]
jmp 0x428349
mov esi, dword [0x4aa1d0]
mov edi, 0x4a692c
mov al, 0x91
call fcn.00441880
mov esi, dword [esp + 0x10]
jmp 0x428349
mov al, 1
mov edx, 0x4ac290
call fcn.00415aa0
mov eax, 1
jmp 0x428349
xor edi, edi
mov ecx, esi
call fcn.00420690
push 1
push eax
call fcn.00401350
add esp, 8
lea eax, [edi + 1]
jmp 0x428349
mov ecx, dword [0x4aa1dc]
mov edx, dword [0x4aa1d4]
push ecx
mov ecx, dword [0x4aa1e0]
push edx
mov edx, dword [0x4aa1d8]
call fcn.0046ec10
jmp 0x428349
mov eax, dword [0x4aa1d0]
mov ecx, dword [0x4aa1dc]
mov ebx, dword [0x4aa1d8]
mov edx, dword [0x4aa1d4]
push eax
push esi
call fcn.0046ed30
jmp 0x428349
cmp byte [esi + 1], 3
mov edx, dword [0x4aa1d4]
sbb ecx, ecx
not ecx
and ecx, dword [0x4aa1d8]
push ecx
push edx
mov edx, dword [0x4aa1d0]
push esi
call fcn.0046ee50
jmp 0x428349
mov eax, 2
cmp byte [esi + 1], al
jae 0x427f86
mov edi, dword [edi + 0x14]
test edi, edi
je 0x427f86
lea eax, [edi + 0x408]
push eax
mov eax, dword [edi + 4]
lea ecx, [edi + 8]
push ecx
push esi
call fcn.0046eec0
jmp 0x428349
lea edx, [esp + 0x2b]
push edx
mov edx, dword [0x4aa1d4]
lea ecx, [esp + 0x54]
push ecx
push edx
call fcn.004137b0
mov edi, eax
mov eax, dword [esp + 0x5c]
add esp, 0xc
test eax, eax
jne 0x427fba
mov eax, dword [0x4aa1d8]
mov ecx, dword [0x4aa1dc]
mov dword [esp + 0x50], eax
jmp 0x427fc0
mov ecx, dword [0x4aa1d8]
push ecx
push eax
push esi
mov eax, edi
call fcn.0046eec0
cmp byte [esp + 0x2b], 0
mov ebx, eax
je 0x427fde
test edi, edi
je 0x427fde
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x428349
mov eax, 2
cmp byte [esi + 1], al
jae 0x42801c
mov edi, dword [edi + 0x14]
test edi, edi
je 0x42801c
mov edx, dword [edi + 0x808]
mov ebx, dword [0x4aa1d0]
lea eax, [edi + 0x408]
push eax
mov eax, dword [edi + 4]
lea ecx, [edi + 8]
push ecx
push edx
push esi
call fcn.0046f270
jmp 0x428349
lea ecx, [esp + 0x2b]
push ecx
mov ecx, dword [0x4aa1d4]
lea edx, [esp + 0x54]
push edx
push ecx
call fcn.004137b0
mov edi, eax
mov eax, dword [esp + 0x5c]
add esp, 0xc
test eax, eax
jne 0x428056
mov eax, dword [0x4aa1d8]
mov ecx, dword [0x4aa1dc]
mov ebx, dword [0x4aa1e0]
mov dword [esp + 0x50], eax
jmp 0x428062
mov ecx, dword [0x4aa1d8]
mov ebx, dword [0x4aa1dc]
mov esi, dword [0x4aa1d0]
push ecx
push eax
call fcn.00413a20
mov edx, dword [esp + 0x18]
push eax
push edx
mov eax, edi
call fcn.0046f270
cmp byte [esp + 0x2b], 0
mov esi, eax
je 0x428090
test edi, edi
je 0x428090
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, esi
mov esi, dword [esp + 0x10]
jmp 0x428349
cmp byte [esi + 1], 1
jae 0x428213
mov eax, dword [edi + 0x14]
test eax, eax
je 0x428213
cmp dword [eax + 0x808], 0xfffffffe
jne 0x4281fb
lea ecx, [eax + 0x408]
push ecx
add eax, 8
push eax
push 0x49ae04
mov esi, 0x400
lea edi, [esp + 0x10c]
call fcn.00472310
mov edx, dword [esp + 0x20]
mov eax, dword [edx + 0x14]
mov edi, dword [eax + 4]
add esp, 0xc
test edi, edi
je 0x4281cf
cmp byte [esp + 0x100], 0
je 0x4281cf
mov edx, dword [0x4a6920]
mov eax, dword [edx + 0xb0]
lea ecx, [esp + 0x90]
push ecx
or eax, 0x2001f
push eax
push 0
lea ecx, [esp + 0x10c]
push ecx
push edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, eax
test esi, esi
jne 0x4281b1
mov edx, dword [esp + 0x90]
push edx
call fcn.0046f560
mov esi, eax
mov eax, dword [esp + 0x94]
add esp, 4
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x4281b1
test byte [0x4ad4d8], 1
jne 0x428188
or dword [0x4ad4d8], 1
push str.RegDeleteKeyExA
push str.advapi32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4ad4d4], eax
jmp 0x42818d
mov eax, dword [0x4ad4d4]
mov ecx, dword [0x4a6920]
mov ecx, dword [ecx + 0xb0]
test ecx, ecx
je 0x4281be
test eax, eax
je 0x4281be
push 0
push ecx
lea edx, [esp + 0x108]
push edx
push edi
call eax
mov esi, eax
cmp esi, 0xffffffff
jne 0x4281d4
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x4281d6
lea eax, [esp + 0x100]
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x4281af
mov esi, 0x57
mov eax, esi
mov ecx, dword [0x4a6920]
test esi, esi
mov dword [ecx + 0x30], eax
mov ecx, dword [esp + 0x10]
setne dl
movzx eax, dl
push eax
push ecx
call fcn.0042d2e0
mov esi, dword [esp + 0x10]
jmp 0x428349
mov ebx, dword [eax + 4]
lea edx, [eax + 0x408]
push edx
lea edi, [eax + 8]
push esi
call fcn.0046f650
jmp 0x428349
mov edx, dword [0x4aa1d0]
lea eax, [esp + 0x2b]
push eax
lea ecx, [esp + 0x54]
push ecx
push edx
mov eax, 2
call fcn.004137b0
add esp, 0xc
cmp dword [esp + 0x50], 0
mov ebx, eax
jne 0x42824b
mov eax, dword [0x4aa1d4]
mov edi, dword [0x4aa1d8]
mov dword [esp + 0x50], eax
jmp 0x428251
mov edi, dword [0x4aa1d4]
cmp byte [edi], 0
jne 0x42825a
xor edi, edi
jmp 0x428271
push str.ahk_default
push edi
call fcn.00485151
add esp, 8
test eax, eax
jne 0x428271
mov edi, 0x498811
push edi
mov edi, dword [esp + 0x54]
push esi
call fcn.0046f650
cmp byte [esp + 0x2b], 0
mov edi, eax
je 0x428290
test ebx, ebx
je 0x428290
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
jmp 0x428349
mov esi, dword [0x4aa1d0]
call fcn.00413aa0
mov esi, eax
cmp esi, 0xffffffff
jne 0x4282c9
mov ecx, dword [0x4aa1d0]
push ecx
mov ecx, dword [esp + 0x14]
push 0
push str.Parameter_1_invalid.
call fcn.0042d4b0
mov esi, dword [esp + 0x10]
jmp 0x428349
call fcn.004737a0
test eax, eax
je 0x4282d8
mov dword [edi + 0xb0], esi
mov esi, dword [esp + 0x10]
mov eax, 1
jmp 0x428349
mov edx, dword [0x4aa1d0]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, 1
jmp 0x428349
xor edi, edi
mov ecx, esi
call fcn.00420690
push eax
call fcn.004525d0
xor ecx, ecx
add esp, 4
test al, al
setne cl
mov eax, ecx
jmp 0x428349
mov eax, dword [0x4aa1d0]
call fcn.00414630
cmp eax, 0xffffffff
jne 0x42833a
mov edx, dword [0x4aa1d0]
push edx
push 0
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042d4b0
jmp 0x428349
mov dword [edi + 0xdc], eax
mov eax, 1
jmp 0x428349
xor eax, eax
mov dword [esp + 0x20], eax
test eax, eax
je 0x42837c
cmp dword [ebp + 8], 3
je 0x42837c
mov eax, dword [esi + 0x14]
mov dword [esp + 0x10], eax
mov esi, dword [esp + 0x10]
test esi, esi
je 0x428377
mov ebx, dword [esp + 0x3c]
xor edi, edi
jmp 0x423ff8
mov ecx, dword [esp + 0x40]
mov dword [ecx], edx
mov eax, 1
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x40]
mov dword [ecx], edx
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x40]
mov dword [eax], edx
jmp 0x428377
test edi, edi
je 0x42841b
cmp dword [edi + 8], 0
jne 0x42841b
mov eax, dword [0x4aa178]
test eax, eax
je 0x42840c
cmp byte [eax + 0x17], 0
jne 0x4283d9
mov ecx, dword [eax + 0xc]
jmp 0x4283db
mov ecx, eax
test byte [ecx + 0x15], 2
je 0x42840c
mov edi, dword [ebp + 0xc]
call fcn.00412eb0
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 8], 0
mov ecx, dword [0x4aa1d0]
mov dword [edi], ecx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x42845f
mov eax, dword [esi + 0x18]
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
cmp byte [eax], 0x6c
jne 0x428377
mov edx, dword [eax + 0x14]
jmp 0x428375
mov eax, 5
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x428488
mov eax, dword [esp + 0x40]
mov dword [eax], esi
mov eax, 6
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4aa1d4]
push ecx
mov ecx, dword [esp + 0x14]
push 0
push str.Parameter_2_invalid.
call fcn.0042d4b0
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4aa1d8]
push edx
push 0
push str.Parameter_3_invalid.
mov ecx, esi
call fcn.0042d4b0
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x3c]
cmp byte [eax + 0xe8], 0
jne 0x428516
lea esi, [eax + 0xe0]
call fcn.0042db70
xor eax, eax
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test ebx, ebx
je 0x42853c
lea esi, [esp + 0x30]
call fcn.0042db70
test edi, edi
je 0x428573
cmp edi, 8
je 0x428573
mov ecx, dword [0x4ac600]
push 0x498811
push 0
push str.Jumps_cannot_exit_a_FINALLY_block.
call fcn.0042d4b0
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, edi
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [esi + 1], 0
jne 0x4285bc
push 0x498811
push 0
push str.An_exception_was_thrown.
mov ecx, esi
call fcn.0042d1f0
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebx + 0xe0], 0
lea eax, [ebx + 0xe0]
mov dword [esp + 0x74], eax
je 0x4285da
mov esi, eax
call fcn.0042db70
mov esi, dword [esp + 0x10]
push 0x10
call fcn.004873b0
mov edi, eax
add esp, 4
test edi, edi
je 0x428620
mov eax, dword [0x4ac1d8]
test eax, eax
jne 0x42864a
mov edx, dword [esi + 8]
movzx eax, word [edx + 2]
mov ecx, 0xff
mov ebx, ecx
cmp ax, cx
jb 0x428608
mov ebx, eax
inc ebx
push ebx
call fcn.00485309
add esp, 4
mov dword [0x4ac1d8], eax
test eax, eax
jne 0x428650
mov dword [0x4ac1dc], eax
push 0x498811
push 0
push str.Out_of_memory.
mov ecx, esi
call fcn.0042d4b0
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [0x4ac1dc]
xor ecx, ecx
push ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x74], eax
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x70]
push eax
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x80]
push eax
push edi
lea edx, [esp + 0x38]
push edx
push ecx
push esi
mov dword [esp + 0x8c], ebx
mov dword [0x4ac1d8], ecx
mov dword [0x4ac1dc], ecx
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], ecx
mov dword [edi + 8], 0x41
call fcn.00456660
mov ebx, eax
cmp ebx, dword [esp + 0x2c]
jne 0x4286b4
mov dword [edi + 0xc], ebx
jmp 0x4286f9
cmp dword [esp + 0x2c], 0
mov dword [edi + 0xc], 0
je 0x4286f9
mov eax, dword [0x4ac1d8]
test eax, eax
je 0x4286e6
push eax
call fcn.00485168
add esp, 4
cmp dword [0x4ac1dc], 0x400000
jbe 0x4286e6
dec dword [0x4ac1e0]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x68]
mov dword [0x4ac1d8], eax
mov dword [0x4ac1dc], ecx
test ebx, ebx
jne 0x428721
push edi
call fcn.00484ec8
mov eax, dword [esp + 0x24]
add esp, 4
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [edi + 8], 0x41
jne 0x428730
mov dword [edi + 8], 0
mov dword [edi], ebx
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x3c]
mov dword [eax], edi
mov dword [edx + 0xe4], esi
xor eax, eax
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4a7a34]
cmp word [ecx], 0
jne 0x428789
cmp dword [0x4abb2c], 0
jne 0x428789
cmp dword [0x4aa360], 0
jne 0x428789
cmp dword [0x4aa364], 0
jne 0x428789
cmp byte [0x4aa380], 0
je case.0x4242de.222
mov eax, 8
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor edi, edi
mov ecx, esi
call fcn.00420690
push eax
push 0x4ac290
xor eax, eax
lea edx, [edi + 9]
call fcn.00415ad0
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x40]
mov dword [edx], ecx
jmp 0x428377
mov edx, dword [esp + 0x40]
mov dword [edx], ecx
mov ecx, dword [esp + 0x534]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je 0x428377
push 0x498811
push 0
push str.A__return__must_be_encountered_prior_to_this___.
mov ecx, esi
call fcn.0042d4b0
mov ecx, dword [esp + 0x534]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc