Function at 0x4250d0
Capabilities:
Check for time delay via gettickcount
Find taskbar
Move file
Print debug messages
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x495b8b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x568
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
xor edi, edi
mov dword [esp + 0xc4], ecx
cmp eax, edi
jne 0x42510b
lea eax, [esp + 0xa8]
mov ebx, dword [0x4a6440]
mov edx, eax
mov esi, ecx
mov dword [esp + 0x7c], eax
mov dword [edx], edi
mov dword [esp + 0x80], ebx
mov dword [esp + 0x48], esi
cmp ecx, edi
je 0x429401
mov edi, edi
cmp dword [0x4ac3f8], edi
je 0x425164
cmp dword [0x4ac3e8], edi
je 0x425152
mov eax, dword [0x4ac3e0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4ac3e8], edi
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x4ac3f8], edi
mov dword [0x4ac3e0], edi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov edx, dword [0x4a6440]
mov ecx, eax
sub ecx, dword [0x4ac39c]
cmp ecx, dword [edx + 0xb4]
jbe 0x4251af
push 0
push 0
push 0
push 0
lea eax, [esp + 0x134]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x4251a8
push 1
push 0xffffffffffffffff
call fcn.00401290
add esp, 8
call edi
mov dword [0x4ac39c], eax
cmp byte [ebx + 0xc8], 0
jne 0x4251e0
cmp byte [ebx + 0xca], 0
jne 0x4251e0
mov edx, dword [0x4ac390]
cmp edx, 0xffffffff
jle 0x4251e0
mov ecx, dword [ebx + 0x28]
cmp ecx, edx
jle 0x4251dc
mov byte [ebx + 0xc8], 1
jmp 0x4251e0
inc ecx
mov dword [ebx + 0x28], ecx
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
cmp ecx, 0xffffffff
jl 0x425203
jg 0x4251f1
cmp edx, 0xffffffff
jbe 0x425203
cmp dword [0x4ac38c], ecx
jg 0x425215
jl 0x425203
cmp dword [0x4ac388], edx
jae 0x425215
mov ecx, dword [ebx + 0x24]
cmp ecx, 0xffffffff
jle 0x425221
sub eax, dword [0x4ac398]
cmp eax, ecx
jb 0x425221
push 1
push 0xa
call fcn.00401290
add esp, 8
cmp byte [ebx + 0xd4], 0
je 0x425248
lea ebx, [ebx]
push 1
push 0x8000012f
call fcn.00401290
add esp, 8
cmp byte [ebx + 0xd4], 0
jne 0x425230
mov dword [0x4ac0f0], esi
cmp byte [ebx + 0xd5], 0
je 0x42528c
mov ecx, dword [0x4abcc0]
mov dword [ecx*4 + 0x4ab680], esi
call edi
mov ecx, dword [0x4abcc0]
mov dword [ecx*4 + 0x4a9628], eax
inc ecx
mov dword [0x4abcc0], ecx
cmp ecx, 0x190
jl 0x42528c
mov dword [0x4abcc0], 0
mov al, byte [esi]
cmp al, 1
je 0x4252b7
cmp al, 0x6b
je 0x4252b7
cmp al, 0x72
je 0x4252b7
mov edi, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push edi
push esi
call fcn.004597f0
mov dword [esp + 0x58], eax
cmp eax, 1
jne 0x429406
jmp 0x4252ba
mov edi, dword [ebp + 0xc]
mov cl, byte [esi]
mov byte [esp + 0xd0], cl
cmp cl, 9
jb 0x425410
cmp cl, 0x20
ja 0x425410
add dword [0x4ac388], 1
push esi
adc dword [0x4ac38c], 0
call fcn.00429dc0
mov ebx, 3
cmp eax, ebx
jne 0x425382
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x425321
mov edi, edi
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x5c]
push edx
push edi
push 2
call fcn.004250d0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
mov ecx, dword [esi + 0x14]
cmp edx, ecx
je 0x425300
jmp 0x425335
lea eax, [esp + 0x5c]
push eax
push edi
push ebx
call fcn.004250d0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
cmp edx, esi
je 0x4293e9
cmp dword [ebp + 8], ebx
je 0x42941d
cmp eax, 1
jne 0x42941d
test edx, edx
je 0x425368
mov ecx, dword [edx + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x4293fb
mov dword [esp + 0x48], edx
jmp 0x4293e5
mov esi, dword [esi + 0x18]
cmp byte [esi], 0x21
mov dword [esp + 0x48], esi
jne 0x4293e5
mov edx, esi
mov eax, dword [edx + 0x18]
jmp 0x4293e1
mov esi, dword [esi + 0x18]
cmp byte [esi], 0x21
mov dword [esp + 0x48], esi
jne 0x425402
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x4253b7
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x5c]
push edx
push edi
push 2
call fcn.004250d0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
mov ecx, dword [esi + 0x14]
cmp edx, ecx
je 0x425396
jmp 0x4253cb
lea eax, [esp + 0x5c]
push eax
push edi
push ebx
call fcn.004250d0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
cmp dword [ebp + 8], ebx
je 0x42941d
cmp eax, 1
jne 0x42941d
test edx, edx
je 0x4253f6
mov ecx, dword [edx + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x42943d
mov dword [esp + 0x48], edx
jmp 0x4293e5
mov edx, dword [esi + 0x18]
mov dword [esp + 0x48], edx
jmp 0x4293e5
cmp dword [ebp + 8], ebx
je 0x429401
jmp 0x4293e5
movzx eax, cl
add eax, 0xffffffa0
cmp eax, 0x7e
ja case.0x425426.98
movzx eax, byte [eax + 0x4298e4]
jmp dword [eax*4 + 0x4298a8]
mov ecx, 1
add dword [0x4ac388], ecx
adc dword [0x4ac38c], 0
mov eax, dword [esi + 0x18]
test eax, eax
je 0x4254ca
mov edx, eax
xor eax, eax
cmp dword [esi + 0xc], ecx
mov dword [esp + 0x98], edx
sete al
mov edi, eax
test edi, edi
je 0x42547e
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 0x94]
mov dword [eax + 0x98], ecx
mov dword [eax + 0x94], 0
mov ecx, edx
call fcn.00401210
mov dword [esp + 0x58], eax
test edi, edi
je 0x4254aa
mov ecx, dword [esp + 0x80]
mov edx, dword [ecx + 0x98]
mov dword [ecx + 0x94], edx
mov dword [ecx + 0x98], 0
test eax, eax
je 0x429406
cmp eax, 8
je 0x429406
cmp dword [ebp + 8], 3
je 0x425700
jmp 0x4293de
push esi
mov bl, cl
call fcn.00442b70
mov edx, eax
mov dword [esp + 0x98], edx
test edx, edx
je 0x4295a5
mov ecx, dword [esp + 0x80]
cmp dword [ecx + 0x94], 0
je 0x425509
mov eax, dword [edx + 8]
call fcn.00442c20
test eax, eax
je 0x425509
mov edi, 1
jmp 0x425461
xor edi, edi
jmp 0x42547e
add dword [0x4ac388], 1
adc dword [0x4ac38c], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x98], eax
test eax, eax
jne 0x425543
push esi
mov bl, 1
call fcn.00442b70
mov dword [esp + 0x98], eax
test eax, eax
je 0x4295a5
cmp dword [ebp + 8], 3
mov ecx, dword [esp + 0x80]
mov dword [ecx + 0x9c], eax
je 0x42943a
mov ecx, dword [eax + 8]
mov edx, dword [esi + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x42943a
mov dword [esp + 0x48], ecx
jmp 0x4293e5
add dword [0x4ac388], 1
mov eax, dword [esp + 0xc4]
adc dword [0x4ac38c], 0
mov edi, dword [eax + 0xc]
test edi, edi
jne 0x4255be
mov eax, dword [0x4a9cc0]
cmp byte [eax], 0
mov ebx, eax
je 0x4255bc
mov edi, dword [0x4abdb8]
test edi, edi
je 0x4255bc
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.004850c1
add esp, 8
test eax, eax
je 0x4255be
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x4255a4
xor edi, edi
mov dword [esp + 0x58], 1
mov dword [esp + 0x70], 0
test edi, edi
je 0x4256d9
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x4255f6
push 0x49a154
push eax
call fcn.004850c1
add esp, 8
test eax, eax
jne 0x4255f6
mov al, 1
jmp 0x4255f8
xor al, al
lea ecx, [esp + 0x98]
push ecx
push eax
push edi
xor eax, eax
call fcn.00477da0
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x98]
test eax, eax
je 0x4256d9
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x425667
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x42563b
lea ecx, [ecx]
cmp edx, ecx
je 0x425667
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x425630
push 0x498831
push 0
push 0x49dd80
mov ecx, esi
call fcn.0042e5b0
xor eax, eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [esp + 0x80]
mov edx, dword [ebx + 0x94]
test edx, edx
je 0x42570e
call fcn.00442c20
test eax, eax
je 0x42570e
mov edi, 1
mov dword [ebx + 0x98], edx
mov dword [ebx + 0x94], 0
mov ecx, dword [esp + 0x98]
call fcn.00401210
mov dword [esp + 0x58], eax
test edi, edi
je 0x4256c8
mov edx, dword [ebx + 0x98]
mov dword [ebx + 0x94], edx
mov dword [ebx + 0x98], 0
test eax, eax
je 0x429406
cmp eax, 8
je 0x429406
cmp dword [esp + 0x70], 0
mov edx, dword [esp + 0xc4]
sete al
movzx ecx, al
push ecx
push edx
call fcn.0042e3e0
cmp dword [ebp + 8], 3
jne 0x4293de
mov eax, dword [esp + 0x58]
cmp eax, 7
jne 0x429406
jmp 0x429401
xor edi, edi
jmp 0x42569e
mov ebx, dword [esi + 0xc]
mov eax, ebx
dec eax
mov dword [esp + 0x50], ebx
je 0x42576f
sub eax, 3
je 0x42574e
sub eax, 5
jne 0x425804
mov ecx, dword [0x4a9cc4]
push eax
push eax
push ecx
mov eax, 1
call fcn.004138c0
add esp, 0xc
mov dword [esp + 0xa4], eax
jmp 0x425804
mov edx, dword [0x4a9cc0]
push 0
push 0
push edx
xor eax, eax
call fcn.004138c0
add esp, 0xc
mov dword [esp + 0xa4], eax
jmp 0x425804
movzx eax, byte [esi + 1]
sub eax, 0
je 0x4257fb
dec eax
mov eax, dword [0x4a9cc0]
je 0x4257c3
push 0x49b138
push eax
call fcn.004850c1
add esp, 8
test eax, eax
jne 0x42579b
lea ebx, [eax + 5]
jmp 0x425800
mov ecx, dword [0x4a9cc0]
push 0
push 0
push ecx
xor eax, eax
call fcn.004138c0
xor ebx, ebx
add esp, 0xc
test eax, eax
setne bl
mov dword [esp + 0xa4], eax
add ebx, 3
jmp 0x425800
push 0
push 1
push 1
push 1
call fcn.004721c0
add esp, 0x10
test eax, eax
jne 0x4257fb
mov edx, dword [0x4a9cc0]
push eax
push eax
push edx
call fcn.004138c0
xor ebx, ebx
add esp, 0xc
test eax, eax
setne bl
mov dword [esp + 0xa4], eax
add ebx, 3
jmp 0x425800
mov ebx, 2
mov dword [esp + 0x50], ebx
lea eax, [ebx - 3]
cmp eax, 7
ja case.0x425817.5
movzx eax, byte [eax + 0x429970]
jmp dword [eax*4 + 0x429964]
mov esi, dword [0x4a9cc4]
call fcn.00414270
mov dword [esp + 0x90], eax
test eax, eax
je 0x42952e
mov eax, dword [0x4a9cc8]
cmp byte [eax], 0x31
jne 0x42585c
cmp byte [eax + 1], 0
jne 0x42585c
mov esi, dword [esp + 0x48]
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x9c], 1
jmp case.0x425817.5
mov esi, dword [esp + 0x48]
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x9c], 0
jmp case.0x425817.5
cmp ebx, 4
jne 0x4258b9
mov esi, dword [0x4a9cc8]
call fcn.00414270
mov dword [esp + 0x90], eax
mov eax, dword [0x4a9ccc]
cmp byte [eax], 0x31
jne 0x4258a8
cmp byte [eax + 1], 0
jne 0x4258a8
mov esi, dword [esp + 0x48]
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x9c], 1
jmp 0x4258e0
mov esi, dword [esp + 0x48]
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x9c], 0
jmp 0x4258e0
mov eax, dword [0x4a9cc8]
call fcn.004142c0
mov dword [esp + 0x90], eax
shr eax, 2
and al, 1
mov byte [esp + 0x9c], al
je 0x4258e0
and dword [esp + 0x90], 0xfffffffb
cmp dword [esp + 0x90], 0
je 0x42955c
mov byte [esp + 0x57], 0
mov dword [esp + 0x5c], 0
mov eax, dword [esi + 0x18]
cmp byte [eax], 0x6c
mov dword [esp + 0x64], eax
jne 0x425912
mov ebx, eax
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x64], ecx
jmp 0x425914
xor ebx, ebx
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
mov dword [esp + 0xb4], ecx
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x8c], ecx
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0xb0], edx
mov edx, dword [eax + 0x10]
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x70], edx
mov edx, dword [eax + 0x18]
mov dword [esp + 0x4c], edx
cmp ecx, 8
je 0x425965
mov dword [eax + 8], 1
mov dword [eax + 0xc], 0
lea eax, [ecx - 2]
cmp eax, 8
ja case.default.0x425971
jmp dword [eax*4 + 0x429978]
cmp byte [esi + 1], 0
jbe 0x425994
xor edi, edi
mov ecx, esi
call fcn.00420680
mov edi, dword [ebp + 0xc]
mov byte [esp + 0xc8], 0
jmp 0x4259a0
xor eax, eax
xor edx, edx
mov byte [esp + 0xc8], 1
mov ecx, dword [esp + 0xc8]
push ecx
push edx
push eax
push ebx
lea edx, [esp + 0x6c]
push edx
lea eax, [esp + 0x6b]
push eax
push esi
mov ebx, edi
call fcn.0042b8d0
mov dword [esp + 0x58], eax
jmp case.default.0x425971
mov esi, dword [esp + 0x48]
lea ecx, [esp + 0x5c]
push ecx
lea edx, [esp + 0x5b]
push edx
mov ebx, edi
call fcn.0042ba90
mov dword [esp + 0x58], eax
jmp case.default.0x425971
push ebx
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x5f]
push ecx
push edi
push esi
call fcn.0042bc80
mov dword [esp + 0x58], eax
jmp case.default.0x425971
mov edx, dword [0x4a9cc8]
push 0x49c25c
push edx
call fcn.004850c1
add esp, 8
push ebx
test eax, eax
je 0x425a32
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x5f]
push ecx
push edi
push esi
call fcn.0042cb60
mov dword [esp + 0x58], eax
jmp case.default.0x425971
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x5f]
push eax
push edi
push esi
call fcn.0042ce10
mov dword [esp + 0x58], eax
jmp case.default.0x425971
lea esi, [esp + 0xec]
call fcn.00414910
mov dword [esp + 0x57c], 0
mov edx, dword [0x4a9cc4]
cmp byte [edx], 0
je 0x425abe
mov ecx, dword [esp + 0x80]
mov eax, dword [ecx + 0xd8]
and eax, 0x7fffffff
push 0x30c
mov ecx, esi
call fcn.0046fee0
test al, al
je 0x425abe
mov edx, esi
push edx
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x60]
push eax
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x5f]
push ecx
mov ecx, dword [0x4a9cc8]
push edx
push eax
mov edx, ebx
call fcn.0042d0d0
mov dword [esp + 0x58], eax
call fcn.00414880
jmp 0x425ac6
mov dword [esp + 0x58], 1
lea ecx, [esp + 0xec]
mov dword [esp + 0x57c], 0xffffffff
call fcn.00414960
mov esi, dword [esp + 0x48]
jmp case.default.0x425971
cmp dword [esp + 0x50], 3
mov eax, dword [0x4a9cc0]
je 0x425af7
mov eax, dword [0x4a9cc4]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x90]
push eax
push ecx
push edx
push ebx
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x6b]
push ecx
push edi
mov ecx, esi
call fcn.0042c150
mov dword [esp + 0x58], eax
jmp case.default.0x425971
cmp dword [esp + 0x50], 4
lea edx, [esp + 0x87]
push edx
jne 0x425b51
mov eax, dword [0x4a9cc0]
push 0
push eax
xor eax, eax
call fcn.004138c0
mov ecx, dword [0x4a9cc4]
mov dword [esp + 0xac], ecx
jmp 0x425b6a
mov ecx, dword [0x4a9cc4]
lea eax, [esp + 0xa4]
push eax
push ecx
mov eax, 1
call fcn.004138c0
add esp, 0xc
mov dword [esp + 0x50], eax
test eax, eax
je 0x425bc4
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
push edx
mov edx, dword [esp + 0xa0]
push eax
mov eax, dword [esp + 0x98]
push ecx
push edx
push eax
push ebx
lea ecx, [esp + 0x74]
push ecx
lea edx, [esp + 0x73]
push edx
push edi
mov ecx, esi
call fcn.0042c6e0
cmp byte [esp + 0x87], 0
mov dword [esp + 0x58], eax
je case.default.0x425971
mov eax, dword [esp + 0x50]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x425971
mov dword [esp + 0x58], 1
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x70]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x8c]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0x14], edx
mov edx, dword [esp + 0x68]
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], edx
mov eax, dword [esp + 0x58]
test eax, eax
je 0x429406
cmp eax, 7
je 0x429406
cmp eax, 8
je 0x429406
cmp byte [esp + 0x57], 0
jne 0x4293e9
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x425c4e
mov edx, dword [ecx + 0x1c]
cmp edx, dword [esi + 0x1c]
jne 0x429855
mov dword [esp + 0x48], ecx
mov esi, ecx
jmp 0x4293e9
cmp dword [ebp + 8], 3
je 0x429401
mov eax, dword [esp + 0x64]
jmp 0x4293e1
mov dl, byte [ebx + 0xe4]
mov byte [esp + 0x63], dl
cmp cl, 0x70
jne 0x425ce4
mov ecx, dword [0x4a9c68]
test ecx, ecx
je 0x425c9d
mov eax, dword [esp + 0x80]
mov eax, dword [eax + 0xdc]
mov ebx, ecx
call fcn.004748f0
test eax, eax
je 0x429588
mov ebx, dword [esp + 0x80]
mov eax, dword [ebx + 0xdc]
cmp dword [eax + 8], 6
jne 0x425cb3
mov eax, dword [eax]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebx + 0xdc]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x425cc9
push eax
call fcn.004850d8
add esp, 4
mov ecx, dword [ebx + 0xdc]
push ecx
call fcn.00484e38
add esp, 4
mov dword [ebx + 0xdc], 0
jmp 0x425ceb
mov byte [ebx + 0xe4], 1
mov dword [esp + 0x5c], 0
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x425d21
jmp 0x425d00
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x5c]
push edx
push edi
push 2
call fcn.004250d0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
mov ecx, dword [esi + 0x14]
cmp edx, ecx
je 0x425d00
jmp 0x425d36
lea eax, [esp + 0x5c]
push eax
push edi
push 3
call fcn.004250d0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
mov cl, byte [esp + 0xd0]
mov esi, dword [esi + 0x18]
mov dword [esp + 0x48], esi
cmp cl, 0x6f
jne 0x425d9c
mov cl, byte [esp + 0x63]
mov byte [ebx + 0xe4], cl
xor cl, cl
cmp byte [esi], 0x70
jne 0x425d70
cmp dword [ebx + 0xdc], 0
mov cl, 1
jne 0x4293e5
mov esi, dword [esi + 0x18]
mov dword [esp + 0x48], esi
cmp byte [esi], 0x71
je 0x425da6
test cl, cl
jne 0x425dfb
cmp dword [ebx + 0xdc], 0
lea esi, [ebx + 0xdc]
je 0x425dfb
call fcn.0042ec70
mov eax, 1
mov dword [esp + 0x58], eax
jmp 0x425df7
cmp cl, 0x70
jne 0x425dfb
cmp byte [esi], 0x71
jne 0x425dfb
cmp eax, 1
jne 0x425db7
test edx, edx
je 0x4293e5
mov esi, dword [esp + 0x48]
lea edx, [esp + 0xcc]
push edx
push 0
push 3
mov ecx, esi
call fcn.004250d0
cmp dword [esp + 0xcc], 0
jne 0x4295be
cmp eax, 5
je 0x4295be
cmp eax, 6
je 0x4295be
cmp eax, 7
je 0x4295be
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
cmp dword [ebp + 8], 3
je 0x42941d
cmp eax, 1
jne 0x42941d
test edx, edx
je 0x4293e5
mov eax, dword [edx + 0x1c]
mov ecx, dword [esp + 0x48]
cmp eax, dword [ecx + 0x1c]
jne 0x4293fb
mov dword [esp + 0x48], edx
jmp 0x4293e5
mov edx, dword [esi + 0x14]
mov dword [esp + 0x48], edx
jmp 0x4293e5
cmp dword [esi + 0xc], 1
jne 0x425e49
mov eax, dword [esi + 0x18]
jmp 0x4293e1
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esi + 0x14]
push edi
push 2
call fcn.004250d0
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
cmp ecx, esi
je 0x4293e9
cmp dword [ebp + 8], 3
je 0x429855
cmp eax, 1
jne 0x429855
test ecx, ecx
je 0x425e41
mov edx, dword [esi + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x42984a
mov dword [esp + 0x48], ecx
mov esi, ecx
jmp 0x4293e9
add dword [0x4ac388], 1
mov eax, dword [0x4a9c68]
mov ebx, dword [0x4a6440]
adc dword [0x4ac38c], 0
mov cl, byte [esi]
movzx edx, cl
dec edx
mov dword [esp + 0x4c], eax
cmp edx, 0xdf
ja case.0x425ecd.8
movzx edx, byte [edx + 0x429c20]
jmp dword [edx*4 + 0x42999c]
push esi
call fcn.0043be00
jmp 0x4293d0
cmp byte [esi + 1], 1
mov edx, dword [0x4a9cc4]
jbe 0x425f5d
mov eax, dword [esi + 8]
cmp byte [eax + 0x11], 0
je 0x425efe
mov eax, 1
jmp 0x4293d0
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x425f1b
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov eax, dword [esp + 0x4c]
push ecx
push edx
push eax
call fcn.00412d20
jmp 0x4293d0
mov eax, dword [0x4a9c6c]
test eax, eax
je 0x425f5d
cmp byte [edx], 0
jne 0x425f5d
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x425f36
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x425f4f
sub ecx, 2
jne 0x425f5d
mov eax, dword [esp + 0x4c]
call fcn.00474a00
jmp 0x4293d0
mov ecx, dword [esp + 0x4c]
call fcn.00474770
jmp 0x4293d0
push 1
push 0
push 0xffffffffffffffff
push edx
mov edx, dword [esp + 0x5c]
push edx
call fcn.00474fa0
jmp 0x4293d0
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x425f93
cmp byte [eax + 0x11], 0
jne 0x425f93
mov dword [esp + 0x50], 1
mov edi, 1
xor ebx, ebx
jmp 0x425fd5
mov ebx, dword [0x4a9c6c]
mov eax, dword [0x4a9cc4]
mov dword [esp + 0x50], 0
test ebx, ebx
je 0x425fc1
cmp byte [eax], 0
jne 0x425fc1
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x425fbc
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x42601e
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.004721c0
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x4c]
push 1
call fcn.00412d80
mov edx, dword [0x4a9cc8]
mov dword [esp + 0x68], eax
mov al, byte [edx]
test al, al
je 0x4261e8
call fcn.00409410
movsx eax, al
push eax
push 0x49c2d0
call fcn.004860b1
add esp, 8
test eax, eax
je 0x4261e8
test edi, edi
jne 0x42602d
lea eax, [edi + 1]
jmp 0x4293d0
test ebx, ebx
je 0x425fc3
push 1
mov eax, ebx
call fcn.00412d80
jmp 0x425fd3
cmp dword [esp + 0x50], 0
je 0x42603e
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x1c]
fild qword [ecx]
jmp 0x42605c
test ebx, ebx
je 0x42604d
push 0
mov eax, ebx
call fcn.00412ee0
jmp 0x42605c
mov esi, dword [0x4a9cc4]
call fcn.00412c80
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
fstp qword [esp + 0x68]
cmp byte [edi + 0x17], 0
jne 0x42606f
mov ebx, dword [edi + 0xc]
jmp 0x426071
mov ebx, edi
test byte [ebx + 0x15], 8
je 0x42607e
mov eax, ebx
call fcn.00401150
mov al, byte [ebx + 0x17]
cmp al, 1
jne 0x426097
test byte [ebx + 0x15], 4
je 0x426092
mov eax, ebx
call fcn.0042ede0
mov eax, dword [ebx + 8]
jmp 0x4260a7
cmp al, 2
jne 0x4260a2
call fcn.00401000
jmp 0x4260a7
mov eax, 0x4ab626
cmp byte [eax], 0
je 0x426118
cmp byte [edi + 0x17], 0
jne 0x4260b7
mov ebx, dword [edi + 0xc]
jmp 0x4260b9
mov ebx, edi
test byte [ebx + 0x15], 8
je 0x4260c6
mov eax, ebx
call fcn.00401150
mov al, byte [ebx + 0x17]
cmp al, 1
jne 0x4260df
test byte [ebx + 0x15], 4
je 0x4260da
mov eax, ebx
call fcn.0042ede0
mov eax, dword [ebx + 8]
jmp 0x4260ef
cmp al, 2
jne 0x4260ea
call fcn.00401000
jmp 0x4260ef
mov eax, 0x4ab626
lea edx, [esp + 0xbc]
push edx
call fcn.00471da0
add esp, 4
test eax, eax
jne 0x42613c
push 1
push eax
push 0xffffffffffffffff
push 0x498831
push edi
call fcn.00474fa0
jmp 0x4293d0
lea eax, [esp + 0xe4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea ecx, [esp + 0xbc]
push ecx
lea edx, [esp + 0xe8]
push edx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov eax, dword [0x4a9cc8]
mov al, byte [eax]
call fcn.00409410
movsx eax, al
add eax, 0xffffffbc
cmp eax, 0xf
ja case.0x42615a.69
movzx ecx, byte [eax + 0x429d14]
jmp dword [ecx*4 + 0x429d00]
fld qword [esp + 0x68]
fmul qword [0x4a0978]
jmp 0x426195
fld qword [esp + 0x68]
fmul qword [0x4a0970]
jmp 0x426195
fld qword [esp + 0x68]
fmul qword [0x4a0968]
jmp 0x426195
fld qword [esp + 0x68]
fmul qword [0x4a0960]
jmp 0x426195
fld qword [esp + 0x68]
mov esi, dword [esp + 0xbc]
mov ebx, dword [esp + 0xc0]
call fcn.00493b06
add esi, eax
adc ebx, edx
mov dword [esp + 0xbc], esi
push 0
lea eax, [esp + 0xc0]
lea esi, [esp + 0x144]
mov dword [esp + 0xc4], ebx
call fcn.00472030
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
push edi
call fcn.00474fa0
mov esi, dword [esp + 0x48]
jmp 0x4293d0
cmp edi, 2
je 0x42624a
cmp dword [esp + 0x68], 2
je 0x42624a
cmp dword [esp + 0x50], 0
je 0x426208
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov ebx, dword [eax]
mov edi, dword [eax + 4]
jmp 0x42622a
test ebx, ebx
je 0x426217
push 0
mov eax, ebx
call fcn.00412e20
jmp 0x426226
mov esi, dword [0x4a9cc4]
call fcn.00412c50
mov esi, dword [esp + 0x48]
mov edi, edx
mov ebx, eax
mov eax, dword [esp + 0x4c]
push 0
call fcn.00412e20
add eax, ebx
adc edx, edi
push edx
push eax
mov eax, dword [esp + 0x54]
push eax
call fcn.00412d20
jmp 0x4293d0
cmp dword [esp + 0x50], 0
je 0x42625b
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x426279
test ebx, ebx
je 0x42626a
push 0
mov eax, ebx
call fcn.00412ee0
jmp 0x426279
mov esi, dword [0x4a9cc4]
call fcn.00412c80
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
fstp qword [esp + 0x68]
push 0
mov eax, edi
call fcn.00412ee0
fadd qword [esp + 0x68]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412d50
jmp 0x4293d0
mov eax, dword [0x4a9cc8]
mov al, byte [eax]
test al, al
je 0x4263fe
call fcn.00409410
movsx eax, al
push eax
push 0x49c2d0
call fcn.004860b1
add esp, 8
test eax, eax
je 0x4263fe
mov ebx, dword [0x4a9c6c]
mov edi, dword [0x4a9cc4]
test ebx, ebx
je 0x426337
cmp byte [edi], 0
jne 0x426337
mov al, byte [ebx + 0x17]
test al, al
jne 0x4262ee
mov ecx, dword [ebx + 0xc]
mov al, byte [ecx + 0x17]
cmp al, 1
jne 0x426337
test ebx, ebx
je 0x426337
cmp byte [ebx + 0x17], 0
jne 0x4262ff
mov ebx, dword [ebx + 0xc]
test byte [ebx + 0x15], 8
je 0x42630c
mov eax, ebx
call fcn.00401150
mov al, byte [ebx + 0x17]
cmp al, 1
jne 0x426325
test byte [ebx + 0x15], 4
je 0x426320
mov eax, ebx
call fcn.0042ede0
mov edi, dword [ebx + 8]
jmp 0x426337
cmp al, 2
jne 0x426332
call fcn.00401000
mov edi, eax
jmp 0x426337
mov edi, 0x4ab626
mov ebx, dword [esp + 0x4c]
cmp byte [ebx + 0x17], 0
jne 0x426344
mov ebx, dword [ebx + 0xc]
test byte [ebx + 0x15], 8
je 0x426351
mov eax, ebx
call fcn.00401150
mov al, byte [ebx + 0x17]
cmp al, 1
jne 0x42636a
test byte [ebx + 0x15], 4
je 0x426365
mov eax, ebx
call fcn.0042ede0
mov eax, dword [ebx + 8]
jmp 0x42637a
cmp al, 2
jne 0x426375
call fcn.00401000
jmp 0x42637a
mov eax, 0x4ab626
push eax
lea ebx, [esp + 0x9b]
mov eax, edi
call fcn.004720e0
add esp, 4
cmp byte [esp + 0x97], 0
mov edi, eax
mov ebx, edx
je 0x4263b4
mov edx, dword [esp + 0x4c]
push 1
push 0
push 0xffffffffffffffff
push 0x498831
push edx
call fcn.00474fa0
jmp 0x4293d0
mov eax, dword [0x4a9cc8]
mov al, byte [eax]
call fcn.00409410
cmp al, 0x44
je 0x4263db
cmp al, 0x48
je 0x4263d2
cmp al, 0x4d
jne 0x4263ed
push 0
push 0x3c
jmp 0x4263e2
push 0
push 0xe10
jmp 0x4263e2
push 0
push 0x15180
push ebx
push edi
call fcn.00493b80
mov edi, eax
mov ebx, edx
mov ecx, dword [esp + 0x4c]
push ebx
push edi
push ecx
call fcn.00412d20
jmp 0x4293d0
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x42641e
cmp byte [eax + 0x11], 0
jne 0x42641e
mov dword [esp + 0x50], 1
mov ebx, 1
xor edi, edi
jmp 0x426460
mov edi, dword [0x4a9c6c]
mov eax, dword [0x4a9cc4]
mov dword [esp + 0x50], 0
test edi, edi
je 0x42644c
cmp byte [eax], 0
jne 0x42644c
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x426447
mov edx, dword [edi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x426489
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.004721c0
add esp, 0x10
mov ebx, eax
mov eax, dword [esp + 0x4c]
push 1
call fcn.00412d80
cmp ebx, 2
je 0x4264da
cmp eax, 2
je 0x4264da
cmp dword [esp + 0x50], 0
je 0x426498
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x4264ba
test edi, edi
je 0x42644e
push 1
mov eax, edi
call fcn.00412d80
jmp 0x42645e
test edi, edi
je 0x4264a7
push 0
mov eax, edi
call fcn.00412e20
jmp 0x4264b6
mov esi, dword [0x4a9cc4]
call fcn.00412c50
mov esi, dword [esp + 0x48]
mov ebx, edx
mov edi, eax
mov eax, dword [esp + 0x4c]
push 0
call fcn.00412e20
mov ecx, dword [esp + 0x4c]
sub eax, edi
sbb edx, ebx
push edx
push eax
push ecx
call fcn.00412d20
jmp 0x4293d0
cmp dword [esp + 0x50], 0
je 0x4264eb
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426509
test edi, edi
je 0x4264fa
push 0
mov eax, edi
call fcn.00412ee0
jmp 0x426509
mov esi, dword [0x4a9cc4]
call fcn.00412c80
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
fstp qword [esp + 0x68]
push 0
mov eax, edi
call fcn.00412ee0
fsub qword [esp + 0x68]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412d50
jmp 0x4293d0
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x42654f
cmp byte [eax + 0x11], 0
jne 0x42654f
mov dword [esp + 0x50], 1
mov ebx, 1
xor edi, edi
jmp 0x426591
mov edi, dword [0x4a9c6c]
mov eax, dword [0x4a9cc4]
mov dword [esp + 0x50], 0
test edi, edi
je 0x42657d
cmp byte [eax], 0
jne 0x42657d
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x426578
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x4265ba
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.004721c0
add esp, 0x10
mov ebx, eax
mov eax, dword [esp + 0x4c]
push 1
call fcn.00412d80
cmp ebx, 2
je 0x426610
cmp eax, 2
je 0x426610
cmp dword [esp + 0x50], 0
je 0x4265c9
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x4265eb
test edi, edi
je 0x42657f
push 1
mov eax, edi
call fcn.00412d80
jmp 0x42658f
test edi, edi
je 0x4265d8
push 0
mov eax, edi
call fcn.00412e20
jmp 0x4265e7
mov esi, dword [0x4a9cc4]
call fcn.00412c50
mov esi, dword [esp + 0x48]
mov ebx, edx
mov edi, eax
mov eax, dword [esp + 0x4c]
push 0
call fcn.00412e20
push ebx
push edi
push edx
push eax
call fcn.0048c0a0
push edx
push eax
mov eax, dword [esp + 0x54]
push eax
call fcn.00412d20
jmp 0x4293d0
cmp dword [esp + 0x50], 0
je 0x426621
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x42663f
test edi, edi
je 0x426630
push 0
mov eax, edi
call fcn.00412ee0
jmp 0x42663f
mov esi, dword [0x4a9cc4]
call fcn.00412c80
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
fstp qword [esp + 0x68]
push 0
mov eax, edi
call fcn.00412ee0
fmul qword [esp + 0x68]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412d50
jmp 0x4293d0
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x426685
cmp byte [eax + 0x11], 0
jne 0x426685
mov dword [esp + 0x50], 1
mov ebx, 1
xor edi, edi
jmp 0x4266c7
mov edi, dword [0x4a9c6c]
mov eax, dword [0x4a9cc4]
mov dword [esp + 0x50], 0
test edi, edi
je 0x4266b3
cmp byte [eax], 0
jne 0x4266b3
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x4266ae
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x4266f8
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.004721c0
add esp, 0x10
mov ebx, eax
mov eax, dword [esp + 0x4c]
push 1
call fcn.00412d80
cmp ebx, 2
je 0x426762
cmp eax, 2
je 0x426762
cmp dword [esp + 0x50], 0
je 0x426707
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov ebx, dword [eax]
mov edi, dword [eax + 4]
jmp 0x426729
test edi, edi
je 0x4266b5
push 1
mov eax, edi
call fcn.00412d80
jmp 0x4266c5
test edi, edi
je 0x426716
push 0
mov eax, edi
call fcn.00412e20
jmp 0x426725
mov esi, dword [0x4a9cc4]
call fcn.00412c50
mov esi, dword [esp + 0x48]
mov edi, edx
mov ebx, eax
mov eax, ebx
or eax, edi
jne 0x42673d
mov ecx, dword [esp + 0x4c]
call fcn.00412cc0
jmp 0x4293d0
mov eax, dword [esp + 0x4c]
push 0
call fcn.00412e20
push edi
push ebx
push edx
push eax
call fcn.00493b80
mov ecx, dword [esp + 0x4c]
push edx
push eax
push ecx
call fcn.00412d20
jmp 0x4293d0
cmp dword [esp + 0x50], 0
je 0x426773
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426791
test edi, edi
je 0x426782
push 0
mov eax, edi
call fcn.00412ee0
jmp 0x426791
mov esi, dword [0x4a9cc4]
call fcn.00412c80
mov esi, dword [esp + 0x48]
fst qword [esp + 0x68]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x4267ae
mov ecx, dword [esp + 0x4c]
call fcn.00412cc0
jmp 0x4293d0
mov edi, dword [esp + 0x4c]
push 0
mov eax, edi
call fcn.00412ee0
fdiv qword [esp + 0x68]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412d50
jmp 0x4293d0
mov edi, 2
mov ecx, esi
call fcn.00420680
mov ebx, eax
test ebx, ebx
jns 0x4267e6
xor ebx, ebx
jmp 0x4267f8
mov edi, 1
mov ecx, esi
call fcn.00420600
cmp ebx, eax
jle 0x4267f8
mov ebx, eax
mov ecx, dword [0x4a9cc4]
mov edx, dword [esp + 0x4c]
push 1
push 0
push ebx
push ecx
push edx
call fcn.00474fa0
jmp 0x4293d0
mov edi, 2
mov ecx, esi
call fcn.00420680
mov ebx, eax
test ebx, ebx
jns 0x426827
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420600
cmp ebx, eax
jbe 0x426839
mov ebx, eax
push 1
sub eax, ebx
add eax, dword [0x4a9cc4]
push 0
push ebx
push eax
mov eax, dword [esp + 0x5c]
push eax
call fcn.00474fa0
jmp 0x4293d0
cmp byte [esi + 1], 4
jb 0x42688a
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x34]
cmp byte [edx], 0
je 0x42688a
mov edi, 3
mov ecx, esi
call fcn.00420680
mov dword [esp + 0x50], eax
cmp eax, 1
jge 0x426892
mov ecx, dword [esp + 0x4c]
call fcn.00412cc0
jmp 0x4293d0
mov dword [esp + 0x50], CreateStatusWindowA
mov edi, 2
mov ecx, esi
call fcn.00420680
mov ebx, eax
mov eax, dword [0x4a9cd0]
mov al, byte [eax]
call fcn.00409410
cmp al, 0x4c
jne 0x4268dd
cmp ebx, 1
jge 0x4268c3
mov ecx, dword [esp + 0x4c]
call fcn.00412cc0
jmp 0x4293d0
mov eax, dword [esp + 0x50]
mov ecx, 1
sub ecx, eax
add ebx, ecx
cmp ebx, 1
jge 0x4268e7
lea edx, [eax + ebx - 1]
mov dword [esp + 0x50], edx
cmp ebx, 1
jge 0x4268e7
mov ebx, 1
mov edi, 1
mov ecx, esi
call fcn.00420600
cmp eax, ebx
jae 0x426905
mov ecx, dword [esp + 0x4c]
call fcn.00412cc0
jmp 0x4293d0
mov ecx, edi
sub ecx, ebx
add eax, ecx
mov ecx, dword [esp + 0x50]
cmp ecx, eax
jbe 0x426915
mov ecx, eax
mov edx, dword [0x4a9cc4]
mov eax, dword [esp + 0x4c]
push 1
push 0
push ecx
lea ebx, [ebx + edx - 1]
push ebx
push eax
call fcn.00474fa0
jmp 0x4293d0
mov edi, 2
mov ecx, esi
call fcn.00420680
mov ebx, eax
test ebx, ebx
jns 0x426948
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420600
cmp ebx, eax
jbe 0x42695a
mov ebx, eax
mov ecx, dword [0x4a9cc4]
mov edx, dword [esp + 0x4c]
push 1
push 0
sub eax, ebx
push eax
add ecx, ebx
push ecx
push edx
call fcn.00474fa0
jmp 0x4293d0
mov edi, 2
mov ecx, esi
call fcn.00420680
mov ebx, eax
test ebx, ebx
jns 0x42698d
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420600
cmp ebx, eax
jbe 0x42699f
mov ebx, eax
mov ecx, dword [esp + 0x4c]
push 1
push 0
sub eax, ebx
push eax
mov eax, dword [0x4a9cc4]
push eax
push ecx
call fcn.00474fa0
jmp 0x4293d0
mov edi, eax
cmp byte [edi + 0x17], 0
jne 0x4269c8
mov ebx, dword [edi + 0xc]
jmp 0x4269ca
mov ebx, edi
test byte [ebx + 0x15], 8
je 0x4269d7
mov eax, ebx
call fcn.00401150
mov al, byte [ebx + 0x17]
cmp al, 1
jne 0x4269e3
mov ebx, dword [ebx + 8]
jmp 0x4269f5
cmp al, 2
jne 0x4269f0
call fcn.00401000
mov ebx, eax
jmp 0x4269f5
mov ebx, 0x4ab626
cmp ebx, dword [0x4a9cc4]
jne 0x426a12
mov al, byte [edi + 0x17]
test al, al
jne 0x426a0a
mov edx, dword [edi + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
je 0x426a8b
push 1
push 0
mov edi, 1
mov ecx, esi
call fcn.00420600
mov edi, dword [esp + 0x54]
push eax
push 0
push edi
call fcn.00474fa0
cmp eax, 1
jne case.0x425ecd.8
cmp byte [edi + 0x17], 0
jne 0x426a41
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x426a4e
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426a67
test byte [edi + 0x15], 4
je 0x426a62
mov eax, edi
call fcn.0042ede0
mov ebx, dword [edi + 8]
jmp 0x426a79
cmp al, 2
jne 0x426a74
call fcn.00401000
mov ebx, eax
jmp 0x426a79
mov ebx, 0x4ab626
mov ecx, dword [0x4a9cc4]
mov edx, ebx
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x426a81
mov eax, dword [0x4a9cc8]
mov al, byte [eax]
test al, al
je 0x426ac2
call fcn.00409410
cmp al, 0x54
jne 0x426ac2
mov ecx, dword [0x4a9cc8]
cmp byte [ecx + 1], 0
jne 0x426ac2
mov eax, ebx
call fcn.004129a0
mov eax, dword [esp + 0x4c]
push 0
call fcn.00413260
jmp 0x4293d0
cmp byte [esi], 0x31
push ebx
jne 0x426ade
call dword [sym.imp.USER32.dll_CharLowerA]
mov eax, dword [esp + 0x4c]
push 0
call fcn.00413260
jmp 0x4293d0
call dword [sym.imp.USER32.dll_CharUpperA]
mov eax, dword [esp + 0x4c]
push 0
call fcn.00413260
jmp 0x4293d0
mov eax, dword [0x4a9c6c]
test eax, eax
je 0x426b2a
cmp byte [eax + 0x17], 0
jne 0x426b0b
mov edx, dword [eax + 0xc]
mov cl, byte [edx + 0x15]
jmp 0x426b0e
mov cl, byte [eax + 0x15]
test cl, 1
je 0x426b2a
call fcn.004131a0
push 0
push eax
mov eax, dword [esp + 0x54]
push eax
call fcn.00412d20
jmp 0x4293d0
mov edi, 1
mov ecx, esi
call fcn.00420600
push 0
push eax
mov eax, dword [esp + 0x54]
push eax
call fcn.00412d20
jmp 0x4293d0
mov esi, dword [0x4a9ccc]
mov al, byte [esi]
mov dword [esp + 0x68], esi
mov dword [esp + 0x70], 0xffffffff
test al, al
je 0x426bdf
call fcn.00409410
movsx eax, al
push eax
push 0x49c2d8
call fcn.004860b1
add esp, 8
test eax, eax
je 0x426bdf
inc esi
cmp byte [esi], 0
je 0x426bdf
call fcn.0040cf00
mov dword [esp + 0x50], eax
test eax, eax
jle 0x426cec
mov eax, dword [0x4a9cc8]
cmp byte [eax], 0
jne 0x426be9
mov dword [esp + 0x70], 0
mov eax, 0x49887c
mov edx, dword [0x4aa51c]
push 1
push 0
push 0xffffffffffffffff
push eax
push edx
call fcn.00474fa0
mov eax, dword [esp + 0x70]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x58]
call fcn.004010d0
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov dword [esp + 0x50], 1
jmp 0x426b95
mov ecx, dword [0x4a9cc4]
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0x48]
mov edi, 4
mov dword [esp + 0x64], eax
call fcn.00420680
mov esi, eax
test esi, esi
jns 0x426c10
xor esi, esi
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.00420600
mov edi, eax
cmp esi, edi
jge 0x426cec
mov edx, dword [esp + 0x68]
mov al, byte [edx]
cmp al, 0x31
je 0x426cb1
call fcn.00409410
cmp al, 0x52
je 0x426cb1
mov ecx, dword [esp + 0x48]
mov edi, 2
call fcn.00420600
mov ebx, eax
mov eax, dword [esp + 0x8c]
mov edi, 1
add eax, esi
mov ecx, dword [0x4a6440]
mov cl, byte [ecx + 0xce]
test cl, cl
jne 0x426c80
mov edx, dword [esp + 0x64]
push edx
call fcn.004726b0
add esp, 4
jmp 0x426ca2
cmp cl, 2
jne 0x426c94
mov ecx, dword [esp + 0x64]
push ecx
call fcn.00472980
add esp, 4
jmp 0x426ca2
mov edx, dword [esp + 0x64]
push edx
push eax
call fcn.004861f2
add esp, 8
test eax, eax
je 0x426cec
cmp edi, dword [esp + 0x50]
je 0x426cd7
inc edi
add eax, ebx
jmp 0x426c61
movzx ecx, byte [ebx + 0xce]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x64]
push eax
push ecx
mov ecx, dword [esp + 0x94]
push edx
mov eax, edi
sub eax, esi
push ecx
call fcn.004724b0
add esp, 0x10
test eax, eax
je 0x426cec
sub eax, dword [esp + 0x8c]
mov dword [esp + 0x70], eax
jns 0x426ba7
mov eax, 0x499ee0
jmp 0x426bac
push esi
call fcn.0043c260
jmp 0x4293d0
mov eax, dword [0x4a9ccc]
mov ecx, dword [0x4a9cc8]
mov edx, dword [0x4a9cc4]
call fcn.004321a0
jmp 0x4293d0
mov eax, dword [0x4a9ccc]
mov ecx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc0]
push ecx
mov ecx, dword [0x4a9cc4]
push esi
call fcn.0043c4b0
jmp 0x4293d0
mov edx, dword [0x4a9cc0]
push edx
mov eax, esi
call fcn.0043cc00
jmp 0x4293d0
mov eax, dword [0x4a9cc0]
mov ecx, dword [0x4a9cc4]
push eax
push esi
call fcn.0043d1d0
jmp 0x4293d0
push 0
push ecx
mov edi, 7
mov ecx, esi
call fcn.00420680
add esp, 4
push eax
mov edi, 6
mov ecx, esi
call fcn.00420680
push eax
push ecx
mov edi, 5
mov ecx, esi
call fcn.00420680
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00420680
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420680
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420680
mov ecx, dword [0x4a9ce0]
push eax
push esi
call fcn.00438420
jmp 0x4293d0
mov ecx, dword [0x4a9cd8]
push ecx
push ecx
mov edi, 5
mov ecx, esi
call fcn.00420680
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00420680
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420680
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420680
push eax
push esi
call fcn.00438b60
jmp 0x4293d0
mov edx, dword [0x4a9ccc]
push edx
push ecx
mov edi, 2
mov ecx, esi
call fcn.00420680
mov edi, 1
mov ecx, esi
mov ebx, eax
call fcn.00420680
add esp, 4
mov ecx, eax
push esi
mov eax, ebx
call fcn.0044fd20
jmp 0x4293d0
mov eax, dword [ebx + 0xb0]
cmp cl, 0x42
sete cl
push 0
movzx edx, cl
push eax
push edx
mov eax, dword [0x4a9cc0]
push eax
call fcn.0040d5a0
add esp, 0x10
mov eax, 1
jmp 0x4293d0
mov edx, dword [0x4a9cc0]
xor ecx, ecx
cmp dword [ebx + 0xb0], 3
push 0
sete cl
lea ecx, [ecx + ecx + 1]
push ecx
push 0
push edx
call fcn.0040d5a0
add esp, 0x10
mov eax, 1
jmp 0x4293d0
push 0
push 2
push 0
jmp 0x426e6b
mov ecx, dword [0x4a9cc0]
push 0
push 0
push 0
push ecx
call fcn.0040d5a0
add esp, 0x10
mov eax, 1
jmp 0x4293d0
mov edx, dword [0x4a9cc0]
push edx
call fcn.0040f670
add esp, 4
jmp 0x4293d0
mov eax, dword [0x4a9cd8]
mov edx, dword [0x4a9cd4]
push 0x498831
push eax
mov eax, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9ccc]
push eax
mov eax, dword [0x4a9cc8]
push edx
mov edx, dword [0x4a9cc4]
push eax
push edx
mov edx, dword [0x4a9cc0]
push ecx
mov eax, 0x498831
call fcn.0040f900
add esp, 0x20
jmp 0x4293d0
mov eax, dword [0x4a9cd4]
mov edx, dword [0x4a9cd8]
push eax
mov eax, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc4]
push 0x498831
push 0x498831
push edx
mov edx, dword [0x4a9cc0]
push eax
mov eax, dword [0x4a9ccc]
push ecx
call fcn.0040f900
add esp, 0x20
jmp 0x4293d0
mov edx, dword [0x4a9ccc]
mov eax, dword [0x4a9cc8]
push 0x498831
push edx
mov edx, dword [0x4a9cc4]
push eax
mov eax, dword [0x4a9cc0]
push 0x498831
push 0x498831
push edx
push eax
mov eax, 0x498831
push ecx
mov edx, eax
call fcn.0040f900
add esp, 0x20
jmp 0x4293d0
mov edi, 4
mov ecx, esi
call fcn.00420680
push eax
mov ecx, esi
call fcn.0043b2e0
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
mov esi, dword [0x4a9cc0]
cmp cl, 0x76
push 0
sete cl
movzx edx, cl
push 0
push edx
push eax
mov eax, dword [0x4a9ccc]
push ebx
mov ebx, dword [0x4a9cc8]
call fcn.00475d20
add esp, 0x14
test eax, eax
je 0x427016
mov ecx, dword [0x4a6440]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x427016
push 1
push eax
call fcn.00401290
add esp, 8
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov edx, dword [0x4a9cc0]
push 9
push 0x49c2dc
push edx
call fcn.00485b40
add esp, 0xc
test eax, eax
jne 0x427058
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
jne 0x427058
mov ecx, dword [0x4a9ccc]
cmp byte [ecx], 0
mov byte [esp + 0x63], 1
je 0x42705d
mov byte [esp + 0x63], 0
mov al, byte [esi]
xor edx, edx
cmp byte [esp + 0x63], dl
setne dl
dec edx
and edx, 0x14
mov dword [esp + 0x64], edx
cmp al, 0x82
je 0x4270bd
cmp al, 0x83
je 0x4270bd
mov eax, dword [0x4a9cc8]
cmp byte [eax], 0
je 0x4270fa
mov al, byte [esi]
cmp al, 0x82
je 0x427172
cmp al, 0x83
je 0x427174
mov ecx, dword [0x4a9cc8]
mov edx, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9ccc]
push edx
mov edx, dword [0x4a9cc0]
push eax
call fcn.00433d80
jmp 0x4293d0
mov ecx, dword [0x4a9cc8]
cmp byte [ecx], 0
je 0x4270ef
mov edi, 2
mov ecx, esi
call fcn.00420730
fmul qword [0x4a08d8]
call fcn.00493ad0
mov dword [esp + 0x64], eax
test eax, eax
jne 0x4270ef
mov dword [esp + 0x64], 0x1f4
mov edx, dword [0x4a9cd0]
cmp byte [edx], 0
jne 0x427086
cmp byte [esp + 0x63], 0
je 0x427086
mov ecx, dword [0x4a9cc0]
add ecx, 9
lea ebx, [ebx]
mov al, byte [ecx]
cmp al, 0x20
je 0x42711a
cmp al, 9
jne 0x42711d
inc ecx
jmp 0x427110
cmp byte [ecx], 0
mov dword [esp + 0x70], ecx
je 0x427086
mov edi, dword [0x4abdb8]
test edi, edi
je 0x427086
jmp 0x427144
mov ecx, dword [esp + 0x70]
mov eax, dword [edi + 4]
push ecx
push eax
call fcn.004850c1
add esp, 8
test eax, eax
je 0x427161
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x427140
jmp 0x427086
mov edx, dword [esp + 0x64]
mov cl, byte [esi]
push edi
call fcn.00477bd0
jmp 0x4293d0
cmp al, 0x83
mov edx, dword [0x4a9cd0]
sete al
movzx ecx, al
mov eax, dword [esp + 0x64]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
push eax
mov eax, dword [0x4a9ccc]
push ecx
push ebx
mov ebx, dword [0x4a9cc0]
call fcn.00476020
add esp, 0x14
test eax, eax
je case.0x428d29.69
mov edx, dword [0x4a6440]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle case.0x428d29.69
push 1
push eax
call fcn.00401290
add esp, 8
mov eax, 1
jmp 0x4293d0
mov ebx, dword [0x4a9cc4]
call fcn.00437c80
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
mov ecx, dword [0x4a9cc0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042e3e0
jmp 0x4293d0
lea ecx, [esp + 0xd4]
push ecx
push 0x3a98
push 1
push 0x49c2e8
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
test eax, eax
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042e3e0
jmp 0x4293d0
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc0]
push ecx
push edx
push esi
call fcn.00451430
jmp 0x4293d0
mov eax, dword [0x4a9cc0]
push 0
push 0xffffffffffffffff
push eax
mov eax, 0x4ac3a0
call fcn.0046f8d0
mov ecx, dword [0x4a9cc4]
add esp, 0xc
push 0
push 0xffffffffffffffff
push ecx
mov eax, 0x4ac3ac
call fcn.0046f8d0
mov edx, dword [0x4a9cc8]
add esp, 0xc
push 0
push 0xffffffffffffffff
push edx
mov eax, 0x4ac3b8
call fcn.0046f8d0
add esp, 0xc
mov eax, 1
jmp 0x4293d0
mov eax, dword [0x4a9cc8]
push 0x499ddc
call fcn.004726b0
add esp, 4
test eax, eax
setne bl
mov al, 3
cmp al, byte [esi + 1]
mov eax, dword [0x4a9cc8]
sbb ecx, ecx
and ecx, dword [0x4a9c74]
mov byte [esp + 0xac], bl
mov edx, dword [esp + 0xac]
push ecx
push 1
push edx
push 0
test bl, bl
push eax
mov eax, dword [0x4a9cc4]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4a9cc0]
push eax
push 0
push 0x4abd80
call fcn.0042f310
test bl, bl
je 0x4293d0
test eax, eax
mov eax, 0x49887c
jne 0x42731e
mov eax, 0x49c2f4
mov ecx, dword [0x4aa51c]
push 1
push 0
push 0xffffffffffffffff
push eax
push ecx
call fcn.00474fa0
jmp 0x4293d0
push esi
call fcn.00433e60
jmp 0x4293d0
cmp byte [esi + 1], 2
jbe 0x427383
mov edx, dword [0x4a9cd8]
mov eax, dword [0x4a9cd4]
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9ccc]
push eax
mov eax, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cdc]
push edx
mov edx, dword [0x4a9cc0]
push eax
mov eax, dword [0x4a9cc4]
call fcn.00434530
jmp 0x4293d0
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc0]
push 0x498831
push 0x498831
push 0x498831
push ecx
mov ecx, 0x498831
push edx
mov eax, ecx
mov edx, ecx
call fcn.00434530
jmp 0x4293d0
mov eax, dword [0x4a9ce8]
mov ecx, dword [0x4a9ce4]
mov edx, dword [0x4a9ce0]
push eax
mov eax, dword [0x4a9cdc]
push ecx
mov ecx, dword [0x4a9cd8]
push edx
mov edx, dword [0x4a9ccc]
push eax
mov eax, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
mov edx, dword [0x4a9cc0]
push eax
push ecx
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9cd4]
push esi
call fcn.00450170
jmp 0x4293d0
mov edx, dword [0x4a9cd0]
cmp cl, 0x47
sete al
movzx ecx, al
mov eax, dword [0x4a9ccc]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
mov edx, dword [0x4a9cc0]
push eax
push ecx
mov ecx, dword [0x4a9cd4]
push edx
mov edx, dword [0x4a9cc8]
push esi
call fcn.00434650
jmp 0x4293d0
mov esi, dword [0x4a9ccc]
push 1
xor bl, bl
call fcn.0040cf30
add esp, 4
mov byte [esp + 0xa8], al
test al, al
jne 0x42747e
mov eax, dword [0x4a9ccc]
mov ecx, dword [esp + 0x48]
push eax
push 0
push 0x49b164
call fcn.0042e5b0
mov esi, dword [esp + 0x48]
jmp 0x4293d0
mov ecx, dword [0x4a9cd0]
cmp byte [ecx], bl
je 0x427498
mov ecx, dword [esp + 0x48]
mov edi, 4
call fcn.00420680
jmp 0x42749d
mov eax, 1
mov edx, dword [0x4a9cd8]
mov ecx, dword [0x4a9cc8]
push edx
mov edx, dword [0x4a9cc0]
push ecx
mov ecx, dword [0x4a9cd4]
push edx
mov edx, dword [esp + 0xb4]
push ecx
mov ecx, dword [0x4a9cdc]
push eax
mov eax, dword [esp + 0x5c]
push edx
mov edx, dword [0x4a9cc4]
push eax
call fcn.00434710
mov esi, dword [esp + 0x48]
jmp 0x4293d0
mov ecx, dword [0x4a9cdc]
mov edx, dword [0x4a9cd8]
mov eax, dword [0x4a9cd0]
push ecx
mov ecx, dword [0x4a9ccc]
push edx
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cc0]
push edx
mov edx, dword [0x4a9cd4]
push eax
push ecx
mov ecx, dword [0x4a9ce0]
push esi
call fcn.00434d50
jmp 0x4293d0
mov edx, dword [0x4a9ce0]
mov eax, dword [0x4a9cdc]
mov ecx, dword [0x4a9cd8]
push edx
mov edx, dword [0x4a9cd4]
push eax
mov eax, dword [0x4a9cd0]
push ecx
push edx
push eax
mov ecx, esi
call fcn.00434f80
jmp 0x4293d0
mov ecx, dword [0x4a9cd0]
mov edx, dword [0x4a9ccc]
mov eax, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
push eax
push ecx
push esi
call fcn.004350d0
jmp 0x4293d0
mov edx, dword [0x4a9ccc]
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc0]
push edx
mov edx, dword [0x4a9cc4]
push eax
push ecx
mov ecx, dword [0x4a9cd0]
push esi
call fcn.004352a0
jmp 0x4293d0
mov edx, dword [0x4a9cd0]
mov eax, dword [0x4a9ccc]
mov ecx, dword [0x4a9cc4]
mov esi, dword [0x4a9cc0]
push edx
mov edx, dword [esp + 0x4c]
push eax
push ecx
mov ecx, dword [0x4a9cd4]
push edx
mov edx, dword [0x4a9cc8]
call fcn.004353b0
mov esi, dword [esp + 0x48]
jmp 0x4293d0
mov eax, dword [0x4a9cd0]
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9ccc]
push ecx
mov ecx, dword [0x4a9cd4]
push esi
call fcn.00435470
jmp 0x4293d0
mov edx, dword [0x4a9cd8]
mov eax, dword [0x4a9cd4]
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9ccc]
push eax
mov eax, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
mov edx, dword [0x4a9cc0]
push eax
push esi
call fcn.00450470
jmp 0x4293d0
mov ecx, dword [0x4a9cdc]
mov edx, dword [0x4a9cd8]
mov eax, dword [0x4a9cd4]
push ecx
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9ccc]
push eax
mov eax, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
push eax
push esi
call fcn.00450c10
jmp 0x4293d0
mov ecx, dword [0x4a9cd0]
mov eax, dword [0x4a9ccc]
mov edx, dword [0x4a9cc8]
mov edi, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cd4]
call fcn.00435d20
jmp 0x4293d0
mov edx, dword [0x4a9cd8]
mov eax, dword [0x4a9cd4]
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cc0]
push edx
mov edx, dword [0x4a9ccc]
push eax
push ecx
mov ecx, dword [0x4a9cdc]
call fcn.00435d90
jmp 0x4293d0
cmp cl, 0x90
sete dl
movzx eax, dl
push eax
mov eax, esi
call fcn.00435ec0
jmp 0x4293d0
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc0]
push ecx
mov ecx, dword [0x4a9cc8]
push esi
call fcn.004361d0
jmp 0x4293d0
mov edx, dword [0x4a9cd4]
mov eax, dword [0x4a9cd0]
mov ecx, dword [0x4a9ccc]
push edx
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cc0]
push edx
push eax
push esi
call fcn.00436830
jmp 0x4293d0
cmp byte [esi + 1], 1
jbe 0x427773
mov ecx, dword [0x4a9ccc]
mov edx, dword [0x4a9cc8]
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9cc0]
call fcn.00436c30
jmp 0x4293d0
mov edi, dword [0x4a9cc0]
mov ecx, 0x498831
push 0x498831
mov eax, ecx
mov edx, ecx
call fcn.00442ad0
test eax, eax
je case.0x428d29.69
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, 1
jmp 0x4293d0
mov eax, dword [0x4a9ccc]
mov ecx, dword [0x4a9cd0]
mov edx, dword [0x4a9cc4]
push eax
mov eax, dword [0x4a9cc8]
call fcn.00436c60
jmp 0x4293d0
mov ecx, dword [0x4a9ccc]
mov eax, dword [0x4a9cc8]
mov edx, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cd0]
call fcn.00436e70
jmp 0x4293d0
mov edx, dword [0x4a9cd0]
mov eax, dword [0x4a9ccc]
mov ecx, dword [0x4a9cc4]
push edx
mov edx, dword [0x4a9cc8]
push eax
push ecx
mov ecx, dword [0x4a9cd4]
push esi
call fcn.00436f90
jmp 0x4293d0
mov edx, dword [0x4a9ccc]
mov ecx, dword [0x4a9cd0]
mov eax, dword [0x4a9cc8]
push edx
mov edx, dword [0x4a9cc4]
push esi
call fcn.00437830
jmp 0x4293d0
mov eax, dword [0x4a9cdc]
mov ecx, dword [0x4a9cd8]
mov edx, dword [0x4a9cd4]
push eax
mov eax, dword [0x4a9cd0]
push ecx
push edx
push eax
mov eax, esi
call fcn.00437b00
jmp 0x4293d0
mov ecx, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cc4]
push esi
call fcn.00437dd0
jmp 0x4293d0
push 0
push 0x1a3
push 0x111
push 0
push 0x49a6e0
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov edx, dword [0x4a6440]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle case.0x428d29.69
push 1
push eax
call fcn.00401290
add esp, 8
mov eax, 1
jmp 0x4293d0
push 0
push 0x1a0
push 0x111
push 0
push 0x49a6e0
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [0x4a6440]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle case.0x428d29.69
push 1
push eax
call fcn.00401290
add esp, 8
mov eax, 1
jmp 0x4293d0
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x42793a
mov edi, dword [0x4a9cc0]
cmp byte [edi], al
je 0x42793a
mov eax, 0x4abd80
call fcn.00419c40
test eax, eax
jne 0x42793a
mov ecx, dword [0x4a9cc0]
push ecx
push eax
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042e5b0
jmp 0x4293d0
mov dword [0x4ac330], eax
mov eax, 1
jmp 0x4293d0
mov ecx, dword [esi + 0xc]
test ecx, ecx
jne 0x42797c
mov dl, 1
cmp dl, byte [esi + 1]
sbb eax, eax
and eax, dword [0x4a9c6c]
je 0x42797c
cmp byte [eax + 0x17], cl
jne 0x427969
mov edx, dword [eax + 0xc]
jmp 0x42796b
mov edx, eax
test byte [edx + 0x15], 2
je 0x42797c
cmp byte [eax + 0x17], 0
jne 0x42797a
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
mov eax, dword [0x4a9cc8]
mov edx, dword [0x4a9cc4]
push eax
mov eax, dword [0x4a9cc0]
push edx
push eax
call fcn.0040a670
add esp, 0xc
jmp 0x4293d0
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x4279e8
mov ecx, dword [0x4a9cc0]
push edi
mov esi, 0x4abd80
call fcn.00419c80
mov edi, eax
test edi, edi
jne 0x4279e8
mov eax, dword [0x4a9cc0]
cmp byte [eax], 0
jne 0x4279ce
mov edi, dword [ebx + 0x9c]
test edi, edi
jne 0x4279e8
mov ecx, dword [esp + 0x48]
push eax
push 0
push str.Target_label_does_not_exist.
call fcn.0042e5b0
mov esi, dword [esp + 0x48]
jmp 0x4293d0
mov esi, dword [0x4a9cc4]
cmp byte [esi], 0
je 0x427a99
push 0
call fcn.00413f90
add esp, 4
test eax, eax
jne 0x427a6f
push eax
mov eax, dword [0x4a9cc4]
push 1
push 1
push 1
call fcn.004721c0
add esp, 0x10
test eax, eax
jne 0x427a90
mov ecx, dword [0x4a9cc4]
push str.Delete
push ecx
call fcn.004850c1
add esp, 8
test eax, eax
jne 0x427a4f
mov ecx, edi
mov edx, 0x4abd80
call fcn.00419b80
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov edx, dword [0x4a9cc4]
mov ecx, dword [esp + 0x48]
push edx
push 0
push 0x49ad40
call fcn.0042e5b0
mov esi, dword [esp + 0x48]
jmp 0x4293d0
jle 0x427a90
cmp eax, 2
jg 0x427a90
mov edx, dword [0x4a9cc8]
cmp eax, 1
sete al
push 0
movzx ecx, al
push ecx
push edx
push 0x498831
jmp 0x427ab1
mov esi, dword [0x4a9cc4]
cmp byte [esi], 0
mov ecx, dword [0x4a9cc8]
jne 0x427aaa
cmp byte [ecx], 0
je 0x427aaa
mov al, 1
jmp 0x427aac
xor al, al
push eax
push 1
push ecx
push esi
push edi
mov edi, 0x4abd80
call fcn.004198c0
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov eax, dword [0x4a9cc0]
cmp byte [eax], 0
mov edi, 0x10
je 0x427afa
push 0x49a4cc
push eax
call fcn.004850c1
add esp, 8
test eax, eax
je 0x427afa
xor edi, edi
mov ecx, esi
call fcn.00420680
mov edi, eax
test edi, edi
je 0x427aff
mov eax, 1
mov byte [ebx + 0xca], al
test al, al
je 0x427b2b
or eax, 0xffffffff
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 0x24], eax
mov dword [ebx + 0xb4], edi
mov byte [ebx + 0xc8], 0
mov eax, 1
jmp 0x4293d0
mov dword [ebx + 0xb4], 5
mov byte [ebx + 0xc8], 1
mov eax, 1
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
call fcn.00413f30
dec eax
je 0x427bed
dec eax
je 0x427ba5
dec eax
jne 0x427bfe
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x427b8f
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.00420680
or eax, edx
jne 0x427b8f
mov esi, dword [esp + 0x48]
mov eax, edi
mov byte [ebx + 0xc9], al
jmp 0x4293d0
mov esi, dword [esp + 0x48]
xor eax, eax
mov byte [ebx + 0xc9], al
mov eax, 1
jmp 0x4293d0
mov ecx, dword [0x4a9cc0]
cmp byte [ecx], 0
je 0x427bc3
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.00420680
mov dword [0x4ac394], eax
mov edx, dword [0x4a9cc4]
cmp byte [edx], 0
je 0x427bfe
mov ecx, dword [esp + 0x48]
mov edi, 2
call fcn.00420680
mov esi, dword [esp + 0x48]
mov dword [0x4ac390], eax
lea eax, [edi - 1]
jmp 0x4293d0
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.00420680
mov dword [ebx + 0x2c], eax
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov ebx, dword [esi + 0xc]
test ebx, ebx
jne 0x427c2f
mov edx, dword [0x4a9cc0]
push 0x4abd80
mov cl, 1
call fcn.004224f0
mov ebx, eax
test ebx, ebx
je case.0x425ecd.8
mov edi, dword [0x4a9ccc]
cmp byte [edi], 0
je 0x427c6b
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x427c68
mov eax, 0x4abd80
call fcn.00419c40
test eax, eax
jne 0x427c68
mov eax, dword [0x4a9ccc]
push eax
push 0
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042e5b0
jmp 0x4293d0
mov dword [ebx + 0x10], eax
mov ecx, dword [0x4a9cd4]
mov edx, dword [0x4a9cd0]
mov eax, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
push eax
push ebx
call fcn.00477920
jmp 0x4293d0
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x427cd5
mov eax, dword [0x4a9cc0]
cmp byte [eax], 0
mov ebx, eax
je case.0x428d29.69
mov edi, dword [0x4abdb8]
test edi, edi
je case.0x428d29.69
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.004850c1
add esp, 8
test eax, eax
je 0x427cd5
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x427cb5
lea eax, [edi + 1]
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x427d05
push 0x49a154
push eax
call fcn.004850c1
add esp, 8
test eax, eax
jne 0x427d05
mov al, 1
mov ecx, edi
push eax
call fcn.00477f20
mov eax, 1
jmp 0x4293d0
xor al, al
mov ecx, edi
push eax
call fcn.00477f20
mov eax, 1
jmp 0x4293d0
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x427d60
mov eax, dword [0x4a9cc0]
cmp byte [eax], 0
mov ebx, eax
je case.0x428d29.69
mov edi, dword [0x4abdb8]
test edi, edi
je case.0x428d29.69
mov edi, edi
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.004850c1
add esp, 8
test eax, eax
je 0x427d60
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x427d40
lea eax, [edi + 1]
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x427dbf
push 0x49afcc
push eax
call fcn.004850c1
add esp, 8
test eax, eax
jne 0x427d90
push edi
xor edx, edx
mov cl, 0x82
call fcn.00477bd0
mov eax, 1
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x427dbf
push 0x49a154
push eax
call fcn.004850c1
add esp, 8
test eax, eax
jne 0x427dbf
mov al, 1
push eax
push edi
call fcn.00477c90
mov eax, 1
jmp 0x4293d0
xor al, al
push eax
push edi
call fcn.00477c90
mov eax, 1
jmp 0x4293d0
mov ecx, dword [0x4a9cc8]
mov eax, dword [0x4a9cc4]
push ecx
call fcn.0043dd90
jmp 0x4293d0
test eax, eax
jne 0x427e02
lea edi, [eax + 1]
mov ecx, esi
call fcn.00420680
call fcn.00412670
mov eax, edi
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
push 0
push 1
push 0
push 1
call fcn.004721c0
add esp, 0x10
cmp eax, 2
je 0x427e3a
mov eax, dword [0x4a9cc8]
push 0
push 1
push 0
push 1
call fcn.004721c0
add esp, 0x10
cmp eax, 2
jne 0x427ec8
mov edx, dword [0x4a9cc4]
cmp byte [edx], 0
je 0x427e53
mov edi, 1
mov ecx, esi
call fcn.00420730
jmp 0x427e55
fldz
mov eax, dword [0x4a9cc8]
fst qword [esp + 0x68]
cmp byte [eax], 0
je 0x427e8e
mov edi, 2
fstp st(0)
mov ecx, esi
call fcn.00420730
fst qword [esp + 0x70]
fld qword [esp + 0x68]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x427e9a
fstp qword [esp + 0x68]
fstp qword [esp + 0x70]
jmp 0x427e9e
fld qword [0x4a0958]
fst qword [esp + 0x70]
jmp 0x427e7b
fstp st(0)
fstp st(0)
call fcn.004127e0
fld qword [esp + 0x70]
fld qword [esp + 0x68]
mov ecx, dword [esp + 0x4c]
fsub st(1), st(0)
sub esp, 8
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push ecx
call fcn.00412d50
jmp 0x4293d0
mov edx, dword [0x4a9cc4]
cmp byte [edx], 0
je 0x427ee7
mov edi, 1
mov ecx, esi
call fcn.00420680
mov ebx, eax
mov dword [esp + 0x70], eax
jmp 0x427eed
xor ebx, ebx
mov dword [esp + 0x70], ebx
mov eax, dword [0x4a9cc8]
cmp byte [eax], 0
je 0x427f07
mov edi, 2
mov ecx, esi
call fcn.00420680
mov edi, eax
jmp 0x427f0c
mov edi, SysReAllocString
cmp ebx, edi
jle 0x427f1a
mov eax, ebx
mov ebx, edi
mov dword [esp + 0x70], ebx
mov edi, eax
call fcn.00412790
mov ecx, eax
mov eax, ebx
cdq
mov ebx, eax
mov dword [esp + 0x68], edx
mov eax, edi
cdq
sub eax, ebx
sbb edx, dword [esp + 0x68]
add eax, 1
adc edx, 0
push edx
push eax
push 0
push ecx
call fcn.00494590
add eax, dword [esp + 0x70]
push 0x18
cdq
push edx
push eax
mov eax, dword [esp + 0x58]
call fcn.004010d0
mov eax, 1
jmp 0x4293d0
mov ecx, dword [0x4a9cc4]
push 1
push esi
call fcn.0043df70
jmp 0x4293d0
mov edx, dword [0x4a9cc8]
mov eax, dword [0x4a9cc4]
mov ecx, dword [0x4a9cc0]
push edx
push esi
call fcn.0043e130
jmp 0x4293d0
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc4]
push esi
call fcn.0043e3d0
jmp 0x4293d0
mov eax, dword [0x4a9ccc]
mov edx, dword [0x4a9cc4]
push eax
xor eax, eax
cmp cl, 0x9b
sete al
push edx
dec eax
and eax, dword [0x4a9cc0]
push eax
push esi
call fcn.0043e950
jmp 0x4293d0
mov ecx, dword [0x4a9cc4]
cmp byte [ecx], 0
je 0x427fe7
mov edi, 1
mov ecx, esi
call fcn.00420680
dec eax
jmp 0x427fe9
xor eax, eax
cdq
test edx, edx
jg 0x427ffa
jl 0x427ff4
test eax, eax
jae 0x427ffa
xor eax, eax
mov dword [esp + 0x6c], eax
cmp byte [esi], 0x9d
push eax
jne 0x42800e
mov esi, dword [esp + 0x4c]
call fcn.0043fa50
jmp 0x4293d0
mov edi, dword [0x4a9cc0]
mov ebx, esi
call fcn.0043fb40
jmp 0x4293d0
mov edx, dword [0x4a9cc4]
cmp byte [edx], 0
je 0x42803b
mov edi, 1
mov ecx, esi
call fcn.00420680
mov ebx, eax
jmp 0x428040
mov ebx, 0x96
mov eax, dword [0x4a9cc0]
cmp byte [eax], 0
je 0x428063
xor edi, edi
mov ecx, esi
call fcn.00420680
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
lea eax, [edi + 1]
jmp 0x4293d0
mov eax, 0x20b
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov eax, 1
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x42809b
push 0x49c2fc
push eax
call fcn.004850c1
add esp, 8
test eax, eax
je 0x4280c0
mov eax, dword [0x4a9cc4]
push 0x499ee0
push eax
call fcn.004850c1
add esp, 8
test eax, eax
je 0x4280c0
xor al, al
push eax
mov eax, dword [0x4a9cc0]
push esi
call fcn.0043fca0
jmp 0x4293d0
mov eax, 1
push eax
mov eax, dword [0x4a9cc0]
push esi
call fcn.0043fca0
jmp 0x4293d0
cmp byte [esi + 1], 2
jae 0x4280e1
mov ebx, dword [ebx + 0x18]
jmp 0x4280e3
xor ebx, ebx
mov ecx, dword [0x4a9cc0]
mov edx, dword [0x4a9cc4]
push ebx
push ecx
push edx
push esi
call fcn.004410f0
jmp 0x4293d0
mov ecx, dword [0x4a9cc4]
push esi
call fcn.00440720
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
mov ecx, dword [0x4a9cc8]
push eax
push esi
call fcn.00440d60
jmp 0x4293d0
push esi
call fcn.00441500
jmp 0x4293d0
mov eax, dword [0x4a9cc0]
mov esi, dword [esp + 0x48]
call fcn.00452160
jmp 0x4293d0
mov edi, dword [0x4a9cc0]
push esi
call fcn.00452260
jmp 0x4293d0
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc0]
push esi
call fcn.00441790
jmp 0x4293d0
add ebx, 0x30
push ebx
push 0
mov edi, 2
mov ecx, esi
call fcn.00420680
cmp eax, 1
mov eax, dword [0x4a9cc4]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4a9cc0]
push eax
call fcn.00452900
add esp, 0x10
test eax, eax
jne 0x4281f0
mov ecx, dword [0x4aa51c]
push 1
push eax
push 0xffffffffffffffff
push 0x49887c
push ecx
call fcn.00474fa0
jmp 0x4293d0
add ebx, 0x30
push ebx
push 1
mov edi, 2
mov ecx, esi
call fcn.00420680
mov ecx, dword [0x4a9cc4]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4a9cc0]
push eax
push ecx
call fcn.00452900
add esp, 0x10
push eax
push esi
call fcn.0042e4a0
jmp 0x4293d0
mov edi, 2
mov ecx, esi
call fcn.00420680
mov ecx, dword [0x4a9cc4]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4a9cc0]
push eax
push ecx
call fcn.004524e0
add esp, 8
test al, al
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042e3e0
jmp 0x4293d0
mov ecx, dword [0x4a9cc8]
mov al, byte [ecx]
call fcn.00409410
cmp al, 0x52
jne 0x428273
mov edx, dword [0x4a9cc4]
mov eax, dword [0x4a9cc0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042e3e0
jmp 0x4293d0
mov edi, 2
mov ecx, esi
call fcn.00420680
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc0]
push ecx
mov edi, eax
call fcn.00452670
add esp, 4
test al, al
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042e3e0
jmp 0x4293d0
mov ecx, dword [0x4a9cc0]
push ecx
mov ecx, esi
call fcn.00440560
jmp 0x4293d0
mov edx, dword [0x4a9cc0]
cmp byte [edx], 0
je 0x4282fd
mov edi, 1
mov ecx, esi
call fcn.00420680
mov edx, dword [0x4a9cc0]
cmp eax, edi
sete al
movzx ecx, al
push ecx
call fcn.00452820
add esp, 4
test al, al
je 0x4282fd
xor al, al
push eax
push esi
call fcn.0042e3e0
jmp 0x4293d0
mov eax, 1
push eax
push esi
call fcn.0042e3e0
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
jne 0x428327
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
test ebx, ebx
jne 0x428327
mov eax, 0x498831
mov edi, esi
call fcn.00441930
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x428343
mov dword [esp + 0x70], eax
jmp 0x42835b
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x428353
add eax, 0x2c
mov dword [esp + 0x70], eax
jmp 0x42835b
mov dword [esp + 0x70], 0x498831
push 0
push ecx
mov ecx, dword [esp + 0x50]
mov edi, 3
call fcn.00420680
mov esi, dword [0x4a9cc8]
add esp, 4
cmp eax, 1
sete dl
movzx eax, dl
push eax
call fcn.00414270
mov ecx, dword [esp + 0x78]
mov edx, dword [0x4a9cc0]
push eax
push ecx
mov ecx, dword [esp + 0x58]
push edx
call fcn.00441a40
mov esi, dword [esp + 0x48]
xor eax, eax
cmp dword [ebx + 0xdc], eax
sete al
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
jne 0x4283c7
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
test ebx, ebx
jne 0x4283c7
mov eax, 0x498831
mov ecx, dword [0x4a9cc8]
movzx edx, byte [ecx]
push edx
mov edi, esi
call fcn.00442120
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x4283ed
mov dword [esp + 0x70], eax
jmp 0x428405
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x4283fd
add eax, 0x2c
mov dword [esp + 0x70], eax
jmp 0x428405
mov dword [esp + 0x70], 0x498831
push 0
push ecx
mov ecx, dword [esp + 0x50]
mov edi, 4
call fcn.00420680
mov esi, dword [0x4a9ccc]
add esp, 4
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.00414270
mov edx, dword [0x4a9cc8]
mov ecx, dword [esp + 0x78]
push eax
movzx eax, byte [edx]
mov edx, dword [0x4a9cc0]
push eax
push ecx
mov ecx, dword [esp + 0x5c]
push edx
call fcn.004422a0
mov esi, dword [esp + 0x48]
xor eax, eax
cmp dword [ebx + 0xdc], eax
sete al
jmp 0x4293d0
mov edi, dword [0x4a9cc4]
cmp byte [edi], 0
jne 0x42847c
mov ebx, dword [ebx + 0x10]
lea edi, [ebx + 0x2c]
test ebx, ebx
jne 0x42847c
mov edi, 0x498831
mov eax, dword [0x4a9cc8]
push eax
push esi
call fcn.00442860
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
jne 0x4284a6
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
test ebx, ebx
jne 0x4284a6
mov eax, 0x498831
push esi
call fcn.00452310
jmp 0x4293d0
mov edi, dword [0x4a9cc0]
call fcn.0043fe90
xor eax, eax
cmp dword [ebx + 0xdc], eax
sete al
jmp 0x4293d0
mov ecx, dword [0x4a9cd0]
mov edx, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9ccc]
push edx
mov edx, dword [0x4a9cc8]
push esi
call fcn.0043ff70
jmp 0x4293d0
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc4]
push eax
push ecx
mov ecx, dword [0x4a9ccc]
mov edx, esi
call fcn.00451850
jmp 0x4293d0
mov edx, dword [0x4a9cc0]
push edx
push esi
call fcn.00451b70
jmp 0x4293d0
mov eax, dword [0x4a9ce0]
mov ecx, dword [0x4a9cdc]
mov edx, dword [0x4a9cd8]
mov ebx, dword [0x4a9cd0]
mov edi, dword [0x4a9ccc]
push eax
mov eax, dword [0x4a9cd4]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
mov edx, dword [0x4a9cc0]
push eax
push ecx
mov ecx, dword [0x4a9cc8]
push edx
push esi
call fcn.00451f10
jmp 0x4293d0
push 0
mov ecx, 4
call fcn.0043a420
add esp, 4
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
push 7
call fcn.00413f90
add esp, 4
cmp eax, 7
jne 0x4285a6
push 0
lea ecx, [eax - 6]
call fcn.0043a420
mov esi, dword [esp + 0x4c]
add esp, 4
jmp 0x4293d0
cmp byte [ebx + 0xd5], 0
je 0x4285d2
mov ecx, dword [0x4abcc0]
test ecx, ecx
jle 0x4285bc
dec ecx
jmp 0x4285c1
mov ecx, 0x18f
mov dword [0x4abcc0], ecx
mov dword [ecx*4 + 0x4ab680], 0
mov esi, dword [esp + 0x48]
cmp eax, 1
sete al
mov byte [ebx + 0xd5], al
mov eax, 1
jmp 0x4293d0
push 0
mov ecx, 2
call fcn.0043a420
add esp, 4
jmp 0x4293d0
push 0
mov ecx, 3
call fcn.0043a420
add esp, 4
jmp 0x4293d0
add ebx, 0x4c
call fcn.0045ac90
test eax, eax
je 0x42862e
mov ecx, dword [0x4a6440]
mov edx, dword [ecx + 0x4c]
mov eax, dword [edx + 4]
jmp 0x428630
xor eax, eax
mov cl, byte [esi + 1]
push eax
test cl, cl
jne 0x42864e
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push 0x49c304
jmp 0x428693
cmp cl, 1
jne 0x42866a
fldz
mov eax, dword [0x4a9cc0]
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push eax
jmp 0x428693
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420730
push ecx
mov ecx, dword [0x4a9cc4]
fstp qword [esp]
push ecx
xor edi, edi
mov ecx, esi
call fcn.00420680
mov edx, dword [0x4a9cc8]
push eax
push edx
call fcn.00476b90
mov edi, eax
add esp, 0x18
test edi, edi
jne 0x4286c6
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x59e
jne 0x4286c6
mov eax, dword [0x4a9cc0]
push eax
push edi
push 0x49ac80
mov ecx, esi
call fcn.0042e5b0
jmp 0x4293d0
xor eax, eax
test edi, edi
setne al
jmp 0x4293d0
mov ecx, dword [0x4a9cdc]
cmp byte [ecx], 0
je 0x4286f4
mov edi, 7
mov ecx, esi
call fcn.00420680
mov dword [esp + 0x70], eax
mov ebx, SysReAllocString
jmp 0x4286fd
mov ebx, SysReAllocString
mov dword [esp + 0x70], ebx
mov edx, dword [0x4a9cd8]
cmp byte [edx], 0
je 0x42871d
mov edi, 6
mov ecx, esi
call fcn.00420680
mov dword [esp + 0x8c], eax
jmp 0x428724
mov dword [esp + 0x8c], ebx
mov eax, dword [0x4a9cd4]
cmp byte [eax], 0
je 0x428740
mov edi, 5
mov ecx, esi
call fcn.00420680
mov dword [esp + 0x64], eax
jmp 0x428744
mov dword [esp + 0x64], ebx
mov ecx, dword [0x4a9cd0]
cmp byte [ecx], 0
je 0x42875d
mov edi, 4
mov ecx, esi
call fcn.00420680
mov ebx, eax
mov edi, 9
mov ecx, esi
call fcn.00420730
mov edx, dword [0x4a9ce8]
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x8c]
sub esp, 8
fstp qword [esp]
push edx
mov edx, dword [esp + 0x70]
push eax
mov eax, dword [0x4a9ccc]
mov al, byte [eax]
push ecx
push edx
call fcn.00409410
mov edx, dword [0x4a9cc8]
cmp al, 0x48
mov eax, dword [0x4a9cc4]
push edx
mov edx, dword [esp + 0x68]
push eax
sete cl
push edx
mov edi, ebx
call fcn.0043a6e0
add esp, 0x24
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x4287d4
mov edi, 1
mov ecx, esi
call fcn.00420680
mov ebx, eax
jmp 0x4287d6
xor ebx, ebx
mov ecx, dword [0x4a9cc0]
cmp byte [ecx], 0
je 0x4287ec
xor edi, edi
mov ecx, esi
call fcn.00420680
jmp 0x4287f1
mov eax, 0xc8
mov edx, dword [0x4a9ccc]
mov ecx, dword [0x4a9cc8]
push edx
push ecx
push ebx
push eax
call fcn.0044ff00
jmp 0x4293d0
mov eax, dword [0x4a9d28]
test eax, eax
je 0x42882c
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x42882c
mov edx, dword [0x4a9d28]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4a9d28], 0
mov eax, 1
jmp 0x4293d0
mov eax, dword [0x4a9cd0]
mov ecx, dword [0x4a9ccc]
mov edx, dword [0x4a9cc8]
push 0
push eax
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cc0]
push edx
push eax
push ecx
push esi
mov ecx, 0x498831
call fcn.00430bc0
jmp 0x4293d0
mov edx, dword [0x4a9cd4]
mov eax, dword [0x4a9cd0]
mov ecx, dword [0x4a9ccc]
push 1
push edx
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cc0]
push edx
push eax
push esi
call fcn.00430bc0
jmp 0x4293d0
mov ecx, dword [0x4a9cc8]
mov edx, dword [0x4a9cc4]
mov eax, dword [0x4a9cc0]
push ecx
mov ecx, dword [0x4a9ccc]
push edx
push eax
push esi
call fcn.00431d90
jmp 0x4293d0
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc0]
mov edi, dword [0x4a9ccc]
mov esi, dword [0x4a9cc8]
push ecx
push edx
call fcn.004320a0
mov esi, dword [esp + 0x48]
jmp 0x4293d0
push esi
call fcn.00432e20
jmp 0x4293d0
mov esi, dword [0x4a9cc4]
call fcn.00414510
mov esi, dword [0x4a9cc0]
movzx edi, ax
call fcn.00414580
movzx ecx, ax
cmp ecx, 0xffffffff
je 0x428944
cmp edi, 0xffffffff
je 0x428944
mov edx, 3
shl dx, cl
shl di, cl
not dx
and dx, word [ebx + 0xcc]
or dx, di
mov word [ebx + 0xcc], dx
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
xor edi, edi
mov ecx, esi
call fcn.00420680
mov byte [ebx + 0xcb], al
cmp al, 0x64
jbe case.0x428d29.69
mov byte [ebx + 0xcb], 2
lea eax, [edi + 1]
jmp 0x4293d0
mov eax, dword [ebx + 0xb0]
push eax
mov eax, dword [0x4a9cc0]
call fcn.004141e0
mov dword [ebx + 0xb0], eax
add esp, 4
mov eax, 1
jmp 0x4293d0
xor edi, edi
mov ecx, esi
call fcn.00420680
cmp eax, 0x64
ja case.0x428d29.69
mov byte [ebx + 0xd2], al
lea eax, [edi + 1]
jmp 0x4293d0
mov ecx, dword [0x4a9cc8]
push 0x49a508
push ecx
call fcn.004850c1
add esp, 8
test eax, eax
jne 0x428a0e
mov edx, dword [0x4a9cc0]
cmp byte [edx], al
je 0x4289ea
xor edi, edi
mov ecx, esi
call fcn.00420680
mov dword [ebx + 0x60], eax
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je case.0x428d29.69
mov edi, 1
mov ecx, esi
call fcn.00420680
mov dword [ebx + 0x68], eax
mov eax, edi
jmp 0x4293d0
mov ecx, dword [0x4a9cc0]
cmp byte [ecx], 0
je 0x428a25
xor edi, edi
mov ecx, esi
call fcn.00420680
mov dword [ebx + 0x5c], eax
mov edx, dword [0x4a9cc4]
cmp byte [edx], 0
je case.0x428d29.69
mov edi, 1
mov ecx, esi
call fcn.00420680
mov dword [ebx + 0x64], eax
mov eax, edi
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
push 0x49a508
push eax
call fcn.004850c1
add esp, 8
xor edi, edi
mov ecx, esi
test eax, eax
jne 0x428a75
call fcn.00420680
mov dword [ebx + 0x70], eax
lea eax, [edi + 1]
jmp 0x4293d0
call fcn.00420680
mov dword [ebx + 0x6c], eax
mov eax, 1
jmp 0x4293d0
xor edi, edi
mov ecx, esi
call fcn.00420680
mov dword [ebx + 0x54], eax
lea eax, [edi + 1]
jmp 0x4293d0
xor edi, edi
mov ecx, esi
call fcn.00420680
mov dword [ebx + 0x58], eax
lea eax, [edi + 1]
jmp 0x4293d0
mov eax, dword [0x4a9cc0]
push 0x49c31c
call fcn.004726b0
add esp, 4
xor edi, edi
mov ecx, esi
test eax, eax
je 0x428ae6
mov dword [ebx], 0xffffffff
mov dword [ebx + 4], 0xffffffff
call fcn.00420680
mov dword [ebx + 0x24], eax
lea eax, [edi + 1]
jmp 0x4293d0
mov dword [ebx + 0x24], 0xffffffff
call fcn.00420680
mov ecx, eax
or ecx, edx
mov dword [ebx], eax
mov dword [ebx + 4], edx
jne case.0x428d29.69
mov dword [ebx], 0xa
mov dword [ebx + 4], edi
lea eax, [ecx + 1]
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
push 7
call fcn.00413f90
add esp, 4
cmp eax, 7
je 0x428b33
cmp eax, 1
sete dl
mov byte [ebx + 0xcf], dl
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
call fcn.00413c00
dec eax
cmp eax, 5
ja case.default.0x428b56
jmp dword [eax*4 + 0x429d24]
mov esi, dword [esp + 0x48]
mov eax, 1
mov dword [ebx + 0x20], eax
jmp 0x4293d0
mov esi, dword [esp + 0x48]
mov dword [ebx + 0x20], 2
mov eax, 1
jmp 0x4293d0
mov esi, dword [esp + 0x48]
mov dword [ebx + 0x20], 4
mov eax, 1
jmp 0x4293d0
mov esi, dword [esp + 0x48]
mov dword [ebx + 0x20], 3
mov eax, 1
jmp 0x4293d0
mov esi, dword [esp + 0x48]
mov byte [ebx + 0xc5], 1
mov eax, 1
jmp 0x4293d0
mov esi, dword [esp + 0x48]
mov byte [ebx + 0xc5], 0
mov eax, 1
jmp 0x4293d0
mov eax, dword [0x4a9cc0]
push eax
mov ecx, dword [esp + 0x4c]
push 0
push 0x49ac80
call fcn.0042e5b0
mov esi, dword [esp + 0x48]
jmp 0x4293d0
mov ecx, dword [0x4a9cc0]
push 5
push 0x49a5c8
push ecx
call fcn.00485b40
add esp, 0xc
test eax, eax
jne 0x428ced
lea edi, [eax + 1]
mov ecx, esi
call fcn.00420600
cmp eax, 0x1e
jb 0x428c2a
mov eax, edi
jmp 0x4293d0
mov ecx, esi
call fcn.00420680
mov esi, edx
mov edx, dword [0x4a9cc4]
push 0x2e
push edx
mov edi, eax
mov dword [esp + 0xe4], esi
call fcn.004860b1
add esp, 8
mov dword [esp + 0x68], eax
test eax, eax
je 0x428c66
lea esi, [eax + 1]
call fcn.00412c50
mov esi, dword [esp + 0xdc]
jmp 0x428c6a
xor eax, eax
xor edx, edx
add edi, eax
adc esi, edx
add edi, 2
adc esi, 0
mov dword [esp + 0x74], esi
js 0x428c92
jg 0x428c84
cmp edi, 0xff
jbe 0x428c92
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
push 0
push 1
push 1
push 1
call fcn.004721c0
add esp, 0x10
mov ecx, 0x49c320
test eax, eax
jne 0x428cb5
mov ecx, 0x498831
cmp dword [esp + 0x68], 0
mov eax, 0x498831
jne 0x428cc6
mov eax, 0x49b454
push ecx
push eax
mov eax, dword [0x4a9cc4]
push eax
push str.___s_s_s
add ebx, 0x74
push ebx
call fcn.004855f8
mov esi, dword [esp + 0x5c]
add esp, 0x14
mov eax, 1
jmp 0x4293d0
mov ecx, dword [0x4a9cc0]
push 7
push 0x49a5c0
push ecx
call fcn.00485b40
add esp, 0xc
test eax, eax
jne case.0x428d29.69
mov edx, dword [0x4a9cc4]
mov al, byte [edx]
movsx ecx, al
add ecx, 0xffffffbc
cmp ecx, 0x24
ja case.0x428d29.69
movzx ecx, byte [ecx + 0x429d48]
jmp dword [ecx*4 + 0x429d3c]
mov byte [ebx + 0xd1], 0x44
mov eax, 1
jmp 0x4293d0
mov byte [ebx + 0xd1], al
mov eax, 1
jmp 0x4293d0
mov edx, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc4]
push edx
call fcn.0043b6b0
jmp 0x4293d0
mov edx, dword [0x4a9cd4]
mov al, 3
cmp al, byte [esi + 1]
mov eax, dword [0x4a9cd0]
sbb ecx, ecx
and ecx, dword [0x4a9c74]
push ecx
mov ecx, dword [0x4a9ccc]
push edx
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cc0]
push edx
push eax
push ecx
push 0x4abd80
call fcn.00468630
jmp 0x4293d0
mov edx, dword [0x4a9ccc]
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc4]
push edx
mov edx, dword [0x4a9cc0]
push eax
push 0x4abd80
call fcn.0045ad00
jmp 0x4293d0
mov eax, dword [0x4a9cc4]
mov cl, 2
cmp cl, byte [esi + 1]
mov ecx, dword [0x4a9cc0]
sbb edx, edx
and edx, dword [0x4a9c70]
push edx
push eax
mov eax, dword [0x4a9cc8]
push ecx
push esi
call fcn.0045b5f0
jmp 0x4293d0
mov edx, dword [0x4a9ccc]
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc4]
push edx
push eax
push ecx
push esi
call fcn.0045c620
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
call fcn.00414090
cmp eax, 7
ja case.0x428e2f.3
jmp dword [eax*4 + 0x429d70]
cmp byte [0x4a9e78], 0
jne case.0x428e2f.3
call fcn.0042dff0
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
cmp byte [0x4a9e78], 0
je case.0x428e2f.3
call fcn.0042dff0
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.00420680
mov esi, dword [0x4a9cc0]
test eax, eax
setne al
movzx ecx, al
push ecx
call fcn.00413fe0
mov edx, dword [esp + 0x4c]
push eax
push edx
call fcn.0042e040
mov esi, dword [esp + 0x48]
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
push 7
call fcn.00413f90
add esp, 4
cmp eax, 7
je 0x428ec5
cmp eax, 1
sete al
mov byte [ebx + 0xd0], al
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
call fcn.00414040
mov byte [ebx + 0xce], al
cmp al, 4
jne 0x428eef
mov byte [ebx + 0xce], 0
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
push 7
call fcn.00413f90
add esp, 4
cmp eax, 7
je 0x428f1e
cmp eax, 1
sete cl
mov byte [ebx + 0xc6], cl
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
push 7
call fcn.00413f90
add esp, 4
cmp eax, 7
je 0x428f4d
cmp eax, 1
sete dl
mov byte [ebx + 0xc7], dl
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
call fcn.00414100
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x428f79.3
movzx ecx, byte [ecx + 0x429da8]
jmp dword [ecx*4 + 0x429d90]
mov bl, 1
call fcn.0042e140
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
xor bl, bl
call fcn.0042e140
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov esi, dword [esp + 0x48]
mov dword [0x4a6450], eax
mov eax, 1
jmp 0x4293d0
or byte [0x4aa62a], 2
cmp dword [0x4a9e54], 0
mov byte [0x4aa629], 1
jne case.0x428f79.3
mov edx, dword [0x4a7554]
movzx eax, word [edx]
push eax
call fcn.00407f00
mov esi, dword [esp + 0x4c]
add esp, 4
mov eax, 1
jmp 0x4293d0
mov byte [0x4aa629], 0
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
push 0x4a6444
mov al, 0x90
call fcn.00442a20
mov esi, dword [esp + 0x4c]
add esp, 4
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
push 0x4a6448
mov al, 0x14
call fcn.00442a20
mov esi, dword [esp + 0x4c]
add esp, 4
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
push 0x4a644c
mov al, 0x91
call fcn.00442a20
mov esi, dword [esp + 0x4c]
add esp, 4
jmp 0x4293d0
mov al, 1
mov edx, 0x4abd80
call fcn.00415b70
mov eax, 1
jmp 0x4293d0
xor edi, edi
mov ecx, esi
call fcn.00420680
push 1
push eax
call fcn.00401290
add esp, 8
lea eax, [edi + 1]
jmp 0x4293d0
mov ecx, dword [0x4a9ccc]
mov edx, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9cc8]
call fcn.0046ec00
jmp 0x4293d0
mov eax, dword [0x4a9cc0]
mov ecx, dword [0x4a9ccc]
mov ebx, dword [0x4a9cc8]
mov edx, dword [0x4a9cc4]
push eax
push esi
call fcn.0046ed20
jmp 0x4293d0
cmp byte [esi + 1], 3
mov edx, dword [0x4a9cc4]
sbb ecx, ecx
not ecx
and ecx, dword [0x4a9cc8]
push ecx
push edx
mov edx, dword [0x4a9cc0]
push esi
call fcn.0046ee40
jmp 0x4293d0
mov eax, 2
cmp byte [esi + 1], al
jae 0x42912d
mov ebx, dword [ebx + 0x14]
test ebx, ebx
je 0x42912d
lea eax, [ebx + 0x408]
push eax
mov eax, dword [ebx + 4]
lea ecx, [ebx + 8]
push ecx
push esi
call fcn.0046eeb0
jmp 0x4293d0
lea edx, [esp + 0x62]
push edx
mov edx, dword [0x4a9cc4]
lea ecx, [esp + 0x8c]
push ecx
push edx
call fcn.004138c0
mov edi, eax
mov eax, dword [esp + 0x94]
add esp, 0xc
test eax, eax
jne 0x42916a
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9ccc]
mov dword [esp + 0x88], eax
jmp 0x429170
mov ecx, dword [0x4a9cc8]
push ecx
push eax
push esi
mov eax, edi
call fcn.0046eeb0
cmp byte [esp + 0x62], 0
mov ebx, eax
je 0x42918e
test edi, edi
je 0x42918e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x4293d0
cmp byte [esi + 1], 2
jae 0x4291c8
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x4291c8
mov ebx, dword [0x4a9cc0]
lea ecx, [eax + 0x408]
push ecx
mov ecx, dword [eax + 0x808]
lea edx, [eax + 8]
mov eax, dword [eax + 4]
push edx
push ecx
push esi
call fcn.0046f260
jmp 0x4293d0
mov ecx, dword [0x4a9cc4]
lea edx, [esp + 0x62]
push edx
lea eax, [esp + 0x8c]
push eax
push ecx
mov eax, 2
call fcn.004138c0
mov edi, eax
mov eax, dword [esp + 0x94]
add esp, 0xc
test eax, eax
jne 0x429210
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9ccc]
mov ebx, dword [0x4a9cd0]
mov dword [esp + 0x88], eax
jmp 0x42921c
mov ecx, dword [0x4a9cc8]
mov ebx, dword [0x4a9ccc]
mov esi, dword [0x4a9cc0]
push ecx
push eax
call fcn.00413b30
mov edx, dword [esp + 0x50]
push eax
push edx
mov eax, edi
call fcn.0046f260
cmp byte [esp + 0x62], 0
mov esi, eax
je 0x42924a
test edi, edi
je 0x42924a
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, esi
mov esi, dword [esp + 0x48]
jmp 0x4293d0
cmp byte [esi + 1], 1
jae 0x4292c2
mov ecx, dword [ebx + 0x14]
test ecx, ecx
je 0x4292c2
cmp dword [ecx + 0x808], 0xfffffffe
lea eax, [ecx + 0x408]
jne 0x4292b0
push eax
add ecx, 8
push ecx
push 0x49a6c0
mov esi, 0x400
lea edi, [esp + 0x14c]
call fcn.00472330
mov ecx, dword [ebx + 0x14]
mov edx, dword [ecx + 4]
mov eax, dword [esp + 0x54]
add esp, 0xc
push edx
push eax
mov eax, 0x498831
mov ebx, edi
call fcn.0046f640
mov esi, dword [esp + 0x48]
jmp 0x4293d0
lea ebx, [ecx + 8]
mov ecx, dword [ecx + 4]
push ecx
push esi
call fcn.0046f640
jmp 0x4293d0
mov ecx, dword [0x4a9cc0]
lea edx, [esp + 0x62]
push edx
lea eax, [esp + 0x8c]
push eax
push ecx
mov eax, 2
call fcn.004138c0
mov ebx, dword [esp + 0x94]
add esp, 0xc
mov edi, eax
test ebx, ebx
jne 0x429304
mov ebx, dword [0x4a9cc4]
mov eax, dword [0x4a9cc8]
mov dword [esp + 0x88], ebx
jmp 0x429309
mov eax, dword [0x4a9cc4]
push edi
push esi
call fcn.0046f640
cmp byte [esp + 0x62], 0
mov ebx, eax
je 0x42918e
test edi, edi
je 0x42918e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x4293d0
mov esi, dword [0x4a9cc0]
call fcn.00413bb0
mov esi, eax
cmp esi, 0xffffffff
jne 0x429351
mov edx, dword [0x4a9cc0]
push edx
jmp 0x428bdd
call fcn.00473870
test eax, eax
je 0x429360
mov dword [ebx + 0xac], esi
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4293d0
mov eax, dword [0x4a9cc0]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, 1
jmp 0x4293d0
xor edi, edi
mov ecx, esi
call fcn.00420680
push eax
call fcn.00453110
xor ecx, ecx
add esp, 4
test al, al
setne cl
mov eax, ecx
jmp 0x4293d0
mov eax, dword [0x4a9cc0]
call fcn.00414740
cmp eax, 0xffffffff
jne 0x4293c1
mov edx, dword [0x4a9cc0]
push edx
push 0
push 0x49ac80
mov ecx, esi
call fcn.0042e5b0
jmp 0x4293d0
mov dword [ebx + 0xd8], eax
mov eax, 1
jmp 0x4293d0
xor eax, eax
mov dword [esp + 0x58], eax
test eax, eax
je 0x429406
cmp dword [ebp + 8], 3
je 0x429406
mov eax, dword [esi + 0x14]
mov dword [esp + 0x48], eax
mov esi, dword [esp + 0x48]
test esi, esi
je 0x429401
mov ebx, dword [esp + 0x80]
xor edi, edi
jmp 0x425130
mov ecx, dword [esp + 0x7c]
mov dword [ecx], edx
mov eax, 1
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x7c]
mov dword [ecx], edx
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x7c]
mov dword [eax], edx
jmp 0x429401
test edi, edi
je 0x4294a5
cmp dword [edi + 8], 0
jne 0x4294a5
mov eax, dword [0x4a9c68]
test eax, eax
je 0x429496
cmp byte [eax + 0x17], 0
jne 0x429463
mov ecx, dword [eax + 0xc]
jmp 0x429465
mov ecx, eax
test byte [ecx + 0x15], 2
je 0x429496
mov edi, dword [ebp + 0xc]
call fcn.00412fc0
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 8], 0
mov ecx, dword [0x4a9cc0]
mov dword [edi], ecx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x4294e9
mov eax, dword [esi + 0x18]
mov ecx, dword [esp + 0x7c]
mov dword [ecx], eax
cmp byte [eax], 0x6c
jne 0x429401
mov edx, dword [eax + 0x14]
jmp 0x4293ff
mov eax, 5
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x429512
mov eax, dword [esp + 0x7c]
mov dword [eax], esi
mov eax, 6
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4a9cc4]
push ecx
mov ecx, dword [esp + 0x4c]
push 0
push 0x49ad40
call fcn.0042e5b0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4a9cc8]
push edx
push 0
push 0x49b14c
mov ecx, esi
call fcn.0042e5b0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x80]
cmp byte [eax + 0xe4], 0
jne 0x4295a5
mov esi, eax
add esi, 0xdc
call fcn.0042ec70
xor eax, eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4ac0f0]
push 0x498831
push 0
push 0x49bfd0
call fcn.0042e5b0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [esi + 1], 0
jne 0x42961c
push 0x498831
push 0
push 0x49c260
mov ecx, esi
call fcn.0042e2f0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebx + 0xdc], 0
lea eax, [ebx + 0xdc]
mov dword [esp + 0xac], eax
je 0x42963d
mov esi, eax
call fcn.0042ec70
mov esi, dword [esp + 0x48]
push 0x10
call fcn.00487320
mov edi, eax
add esp, 4
test edi, edi
je 0x429683
mov eax, dword [0x4abcc8]
test eax, eax
jne 0x4296ad
mov edx, dword [esi + 8]
movzx eax, word [edx + 2]
mov ecx, 0xff
mov ebx, ecx
cmp ax, cx
jb 0x42966b
mov ebx, eax
inc ebx
push ebx
call fcn.00485279
add esp, 4
mov dword [0x4abcc8], eax
test eax, eax
jne 0x4296b3
mov dword [0x4abccc], eax
push 0x498831
push 0
push 0x499f48
mov ecx, esi
call fcn.0042e5b0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [0x4abccc]
xor ecx, ecx
push ecx
mov dword [esp + 0x68], eax
mov dword [esp + 0xac], eax
lea edx, [esp + 0xb4]
push edx
lea eax, [esp + 0xa8]
push eax
lea edx, [esp + 0x70]
push edx
lea eax, [esp + 0xb8]
push eax
push edi
lea edx, [esp + 0x70]
push edx
push ecx
push esi
mov dword [esp + 0xc4], ebx
mov dword [0x4abcc8], ecx
mov dword [0x4abccc], ecx
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], ecx
mov dword [edi + 8], 0x41
call fcn.00457190
mov ebx, eax
cmp ebx, dword [esp + 0x64]
jne 0x429720
mov dword [edi + 0xc], ebx
jmp 0x429768
cmp dword [esp + 0x64], 0
mov dword [edi + 0xc], 0
je 0x429768
mov eax, dword [0x4abcc8]
test eax, eax
je 0x429752
push eax
call fcn.004850d8
add esp, 4
cmp dword [0x4abccc], 0x400000
jbe 0x429752
dec dword [0x4abcd0]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0xa0]
mov dword [0x4abcc8], eax
mov dword [0x4abccc], ecx
test ebx, ebx
jne 0x429790
push edi
call fcn.00484e38
mov eax, dword [esp + 0x5c]
add esp, 4
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [edi + 8], 0x41
jne 0x42979f
mov dword [edi + 8], 0
mov dword [edi], ebx
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0x80]
mov dword [eax], edi
mov dword [edx + 0xe0], esi
xor eax, eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4a7554]
cmp word [ecx], 0
jne 0x4297fe
cmp dword [0x4ab61c], 0
jne 0x4297fe
cmp dword [0x4a9e50], 0
jne 0x4297fe
cmp dword [0x4a9e54], 0
jne 0x4297fe
cmp byte [0x4a9e70], 0
je case.0x425426.222
mov eax, 8
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor edi, edi
mov ecx, esi
call fcn.00420680
push eax
push 0x4abd80
xor eax, eax
lea edx, [edi + 9]
call fcn.00415ba0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x7c]
mov dword [edx], ecx
jmp 0x429401
mov edx, dword [esp + 0x7c]
mov dword [edx], ecx
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je 0x429401
push 0x498831
push 0
push 0x49c27c
mov ecx, esi
call fcn.0042e5b0
mov ecx, dword [esp + 0x574]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc