Function at 0x437d70
Capabilities:
Copy file
Create directory
Create process on windows
Create shortcut via ishelllink
Delete file
Delete registry value
Enumerate files on windows
Get file attributes
Get file version info
Move file
Query environment variable
Query or enumerate registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Self delete
Set current directory
Set file attributes
Set registry value
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc98
push ebx
push esi
push edi
lea edi, [ebp - 0xc98]
mov ecx, 0x326
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x4b50d0]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0x4b6af0
mov dword [ebp - 0x18], 0x4b6ef0
mov dword [ebp - 0x24], 0x4b72f0
mov dword [ebp - 0x30], 0x4b76f0
mov eax, dword [0x8f3628]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x60], 0
mov esi, dword [ebp + 8]
mov ecx, 8
lea edi, [ebp - 0x88]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x84]
shl eax, 0xa
add eax, section..ndata
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x80]
shl eax, 0xa
add eax, section..ndata
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x84]
mov dword [0x4b86f0], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xc94], eax
mov ecx, dword [ebp - 0xc94]
sub ecx, 2
mov dword [ebp - 0xc94], ecx
cmp dword [ebp - 0xc94], 0x42
ja case.0x437e2b.64
mov edx, dword [ebp - 0xc94]
jmp dword [edx*4 + 0x43b0f4]
mov eax, dword [ebp - 0x84]
push eax
push str.Jump:__d
call fcn.004355f4
add esp, 8
mov eax, dword [ebp - 0x84]
jmp 0x43af1a
push 0
call fcn.0043bfe0
push eax
push str.Aborting:___s_
call fcn.004355f4
add esp, 8
push 0
mov eax, dword [ebp - 0x84]
push eax
call fcn.004353ba
mov eax, 0x7fffffff
jmp 0x43af1a
mov eax, dword [0x8f2c4c]
add eax, 1
mov dword [0x8f2c4c], eax
cmp dword [ebp - 0x54], 0
je 0x437ea2
mov esi, esp
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
cmp esi, esp
call fcn.00434f64
mov eax, 0x7fffffff
jmp 0x43af1a
mov eax, dword [ebp - 0x84]
push eax
call fcn.0043405a
sub eax, 1
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
push eax
push str.Call:__d
call fcn.004355f4
add esp, 8
push 0
mov eax, dword [ebp - 0x94]
push eax
call fcn.0043539c
jmp 0x43af1a
push 0
call fcn.0043bfe0
push eax
push str.detailprint:__s
call fcn.004355f4
add esp, 8
push 0
mov eax, dword [ebp - 0x84]
push eax
call fcn.004353ba
jmp case.0x437e2b.64
push 0
call fcn.0043bf70
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
push eax
push str.Sleep__d_
call fcn.004355f4
add esp, 8
cmp dword [ebp - 0xa0], 1
jle 0x437f48
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xc94], eax
jmp 0x437f52
mov dword [ebp - 0xc94], 1
mov esi, esp
mov ecx, dword [ebp - 0xc94]
push ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.00434f64
jmp case.0x437e2b.64
push str.BringToFront
call fcn.004355f4
add esp, 4
mov esi, esp
mov eax, dword [ebp - 0x54]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
cmp esi, esp
call fcn.00434f64
jmp case.0x437e2b.64
cmp dword [ebp - 0x7c], 0
jne 0x437fc8
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x84]
mov edx, dword [ecx*4 + 0x8f3c00]
mov dword [eax*4 + 0x8f3bc0], edx
push 1
call fcn.0043bf70
mov ecx, dword [ebp - 0x84]
mov dword [ecx*4 + 0x8f3c00], eax
jmp 0x437fe2
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x84]
mov edx, dword [ecx*4 + 0x8f3bc0]
mov dword [eax*4 + 0x8f3c00], edx
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x7c]
xor ecx, ecx
cmp dword [eax*4 + 0x8f3c00], 0
sete cl
mov edx, dword [ebp + ecx*4 - 0x84]
mov dword [ebp - 0xac], edx
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax*4 + 0x8f3c00]
and ecx, dword [ebp - 0x78]
mov edx, dword [ebp - 0x7c]
mov dword [edx*4 + 0x8f3c00], ecx
mov eax, dword [ebp - 0xac]
jmp 0x43af1a
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax*4 + 0x8f3c00]
push ecx
mov edx, dword [ebp - 0x3c]
push edx
call fcn.004341f4
jmp case.0x437e2b.64
cmp dword [0x8f2c58], 0
je 0x438062
mov esi, esp
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [0x8f2c58]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
cmp esi, esp
call fcn.00434f64
cmp dword [0x8f2c44], 0
je 0x438088
mov esi, esp
mov eax, dword [ebp - 0x84]
push eax
mov ecx, dword [0x8f2c44]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
cmp esi, esp
call fcn.00434f64
jmp case.0x437e2b.64
push 0xfffffffffffffff0
call fcn.0043bfe0
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0xb8]
push ecx
push str.SetFileAttributes:___s_:_08X
call fcn.004355f4
add esp, 0xc
mov esi, esp
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0xb8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x4380e6
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
push str.SetFileAttributes_failed.
call fcn.004355f4
add esp, 4
jmp case.0x437e2b.64
push 0xfffffffffffffff0
call fcn.0043bfe0
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0xc4]
push ecx
push str.CreateDirectory:___s____d_
call fcn.004355f4
add esp, 0xc
mov eax, dword [ebp - 0xc4]
push eax
call fcn.0043566c
mov dword [ebp - 0xd0], eax
mov byte [ebp - 0xd9], 0x63
cmp dword [ebp - 0xd0], 0
je 0x438241
movsx eax, byte [ebp - 0xd9]
test eax, eax
je 0x438241
push 0x5c
mov eax, dword [ebp - 0xd0]
push eax
call fcn.00435568
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov cl, byte [eax]
mov byte [ebp - 0xd9], cl
mov eax, dword [ebp - 0xd0]
mov byte [eax], 0
mov esi, esp
push 0
mov eax, dword [ebp - 0xc4]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x43820b
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.00434f64
cmp eax, 0xb7
je 0x4381d1
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.00434f64
push eax
mov eax, dword [ebp - 0xc4]
push eax
push str.CreateDirectory:_cant_create___s___err_d_
call fcn.004355f4
add esp, 0xc
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp 0x438209
mov esi, esp
mov eax, dword [ebp - 0xc4]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp esi, esp
call fcn.00434f64
and eax, 0x10
jne 0x438209
mov eax, dword [ebp - 0xc4]
push eax
push str.CreateDirectory:_cant_create___s____a_file_already_exists
call fcn.004355f4
add esp, 8
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp 0x43821f
mov eax, dword [ebp - 0xc4]
push eax
push str.CreateDirectory:___s__created
call fcn.004355f4
add esp, 8
mov eax, dword [ebp - 0xd0]
mov cl, byte [ebp - 0xd9]
mov byte [eax], cl
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0xd0], edx
jmp 0x438136
cmp dword [ebp - 0x80], 0
je 0x4382a8
push 0xffffffffffffffe6
call fcn.00434573
mov eax, dword [ebp - 0xc4]
push eax
push 0x8fd800
call fcn.00434721
mov esi, esp
mov eax, dword [ebp - 0xc4]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x4382a6
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.00434f64
push eax
mov eax, dword [ebp - 0xc4]
push eax
push str.SetCurrentDirectory__s__failed___d_
call fcn.004355f4
add esp, 0xc
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp 0x4382af
push 0xfffffffffffffff5
call fcn.00434573
jmp case.0x437e2b.64
push 0
call fcn.0043bfe0
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
push eax
call fcn.0043451e
test eax, eax
je 0x4382f1
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0xe8]
push ecx
push str.IfFileExists:_file___s__exists__jumping__d
call fcn.004355f4
add esp, 0xc
mov eax, dword [ebp - 0x80]
jmp 0x43af1a
mov eax, dword [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0xe8]
push ecx
push str.IfFileExists:_file___s__does_not_exist__jumping__d
call fcn.004355f4
add esp, 0xc
mov eax, dword [ebp - 0x7c]
jmp 0x43af1a
push 0xffffffffffffffd0
call fcn.0043bfe0
mov dword [ebp - 0xf4], eax
push 0xffffffffffffffdf
call fcn.0043bfe0
mov dword [ebp - 0x100], eax
push 0x13
call fcn.0043bfe0
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
push eax
push str.Rename:__s
call fcn.004355f4
add esp, 8
mov esi, esp
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0xf4]
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
cmp esi, esp
call fcn.00434f64
test eax, eax
je 0x438376
push 0xffffffffffffffe3
call fcn.00434573
jmp 0x4383d9
cmp dword [ebp - 0x7c], 0
je 0x4383bc
mov eax, dword [ebp - 0xf4]
push eax
call fcn.0043451e
test eax, eax
je 0x4383bc
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0xf4]
push ecx
call fcn.00434a55
push 0xffffffffffffffe4
call fcn.00434573
mov eax, dword [ebp - 0x10c]
push eax
push str.Rename_on_reboot:__s
call fcn.004355f4
add esp, 8
jmp 0x4383d9
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x10c]
push eax
push str.Rename_failed:__s
call fcn.004355f4
add esp, 8
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x124], eax
push 0
call fcn.0043bfe0
mov dword [ebp - 0x130], eax
mov esi, esp
lea eax, [ebp - 0x118]
push eax
mov ecx, dword [ebp - 0x124]
push ecx
push 0x400
mov edx, dword [ebp - 0x130]
push edx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x438435
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x124]
mov byte [eax], 0
jmp 0x438495
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x130]
jbe 0x438495
mov eax, dword [ebp - 0x118]
movsx ecx, byte [eax]
test ecx, ecx
je 0x438495
mov eax, dword [ebp - 0x130]
push eax
call fcn.0043451e
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
je 0x438483
mov eax, dword [ebp - 0x13c]
add eax, 0x2c
push eax
mov ecx, dword [ebp - 0x118]
push ecx
call fcn.00434721
jmp 0x438495
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x124]
mov byte [eax], 0
cmp dword [ebp - 0x7c], 0
jne 0x4384bd
mov esi, esp
push 0x400
mov eax, dword [ebp - 0x124]
push eax
mov ecx, dword [ebp - 0x124]
push ecx
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
cmp esi, esp
call fcn.00434f64
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x154], eax
push 0xffffffffffffffff
call fcn.0043bfe0
mov dword [ebp - 0x160], eax
mov esi, esp
lea eax, [ebp - 0x148]
push eax
mov ecx, dword [ebp - 0x154]
push ecx
push 0x400
push 0
mov edx, dword [ebp - 0x160]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_SearchPathA]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x43851b
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x154]
mov byte [eax], 0
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x16c], eax
push 0xffffffffffffffef
call fcn.0043bfe0
push eax
mov eax, dword [ebp - 0x16c]
push eax
call fcn.0043569e
test eax, eax
jne 0x43854a
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
push 0x31
call fcn.0043bfe0
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x84]
and eax, 7
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0x84]
sar ecx, 3
and ecx, 2
push ecx
mov edx, dword [ebp - 0x1a0]
push edx
push str.File:_overwriteflag_d__allowskipfilesflag_d__name__s_
call fcn.004355f4
add esp, 0x10
mov eax, dword [ebp - 0x194]
push eax
call fcn.00434690
test eax, eax
je 0x4385b5
mov eax, dword [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00434721
jmp 0x4385d6
mov eax, dword [ebp - 0x194]
push eax
push 0x8fd800
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00434721
push eax
call fcn.00434938
push eax
call fcn.00435734
mov eax, dword [ebp - 0xc]
push eax
call fcn.00434bea
cmp dword [ebp - 0x1a0], 3
jl 0x43864e
mov eax, dword [ebp - 0xc]
push eax
call fcn.0043451e
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1ac], 0
je 0x43862d
lea eax, [ebp - 0x78]
mov esi, esp
push eax
mov ecx, dword [ebp - 0x1ac]
add ecx, 0x14
push ecx
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1a0]
sub eax, 3
or eax, 0x80000000
and eax, dword [ebp - 0x1b8]
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jne 0x438660
mov eax, dword [ebp - 0xc]
push eax
call fcn.00434cf3
xor eax, eax
cmp dword [ebp - 0x1a0], 1
setne al
add eax, 1
push eax
push 0x40000000
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.004340ff
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0xffffffff
jne 0x4387a1
cmp dword [ebp - 0x1a0], 0
je 0x4386d7
mov eax, dword [ebp - 0x194]
push eax
push 0xffffffffffffffe2
call fcn.004353ba
cmp dword [ebp - 0x1a0], 2
jne 0x4386ba
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x1a0]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
push str.File:_skipped:___s___overwriteflag_d_
call fcn.004355f4
add esp, 0xc
jmp case.0x437e2b.64
mov eax, dword [ebp - 0xc]
push eax
push str.File:_error_creating___s_
call fcn.004355f4
add esp, 8
push section..ndata
mov eax, dword [ebp - 0x24]
push eax
call fcn.00434721
mov eax, dword [ebp - 0xc]
push eax
push section..ndata
call fcn.00434721
mov eax, dword [ebp - 0x70]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.004341ae
mov eax, dword [ebp - 0x24]
push eax
push section..ndata
call fcn.00434721
mov eax, dword [ebp - 0x84]
sar eax, 3
push eax
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.00434c53
mov dword [ebp - 0xc94], eax
cmp dword [ebp - 0xc94], 4
je 0x43874c
cmp dword [ebp - 0xc94], 5
je 0x43875e
jmp 0x43877f
push str.File:_error__user_retry
call fcn.004355f4
add esp, 4
jmp 0x4385df
push str.File:_error__user_cancel
call fcn.004355f4
add esp, 4
mov eax, dword [0x8f3c08]
add eax, 1
mov dword [0x8f3c08], eax
xor eax, eax
jmp 0x43af1a
push str.File:_error__user_abort
call fcn.004355f4
add esp, 4
mov eax, dword [ebp - 0xc]
push eax
push 0xfffffffffffffffa
call fcn.004353ba
mov eax, 0x7fffffff
jmp 0x43af1a
mov eax, dword [ebp - 0x194]
push eax
push 0xffffffffffffffea
call fcn.004353ba
mov eax, dword [0x8f3c34]
add eax, 1
mov dword [0x8f3c34], eax
push 0
push 0
mov eax, dword [ebp - 0x178]
push eax
mov esi, dword [ebp - 0x7c]
xor edi, edi
mov eax, dword [ebp - 0x6c]
xor edx, edx
mov cl, 0x20
call fcn.004343f2
or esi, eax
or edi, edx
push edi
push esi
call fcn.00434780
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], edx
mov eax, dword [0x8f3c34]
sub eax, 1
mov dword [0x8f3c34], eax
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x184]
push ecx
mov edx, dword [ebp - 0x188]
push edx
push str.File:_wrote__I64d_to___s_
call fcn.004355f4
add esp, 0x10
cmp dword [ebp - 0x78], 0xffffffff
jne 0x438827
cmp dword [ebp - 0x74], 0xffffffff
je 0x438847
lea eax, [ebp - 0x78]
mov esi, esp
push eax
push 0
lea ecx, [ebp - 0x78]
push ecx
mov edx, dword [ebp - 0x178]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
cmp esi, esp
call fcn.00434f64
mov esi, esp
mov eax, dword [ebp - 0x178]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, esp
call fcn.00434f64
cmp dword [ebp - 0x184], 0
jg 0x4388d4
jl 0x438871
cmp dword [ebp - 0x188], 0
jae 0x4388d4
cmp dword [ebp - 0x188], 0xfffffffe
jne 0x4388a0
cmp dword [ebp - 0x184], 0xffffffff
jne 0x4388a0
push 0xffffffffffffffe9
mov eax, dword [ebp - 0xc]
push eax
call fcn.004341ae
mov eax, dword [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00435734
jmp 0x4388ab
push 0xffffffffffffffee
mov eax, dword [ebp - 0xc]
push eax
call fcn.004341ae
mov eax, dword [ebp - 0xc]
push eax
push 0x49f0bc
call fcn.004355f4
add esp, 8
push 0x200010
mov eax, dword [ebp - 0xc]
push eax
call fcn.00434c53
mov eax, 0x7fffffff
jmp 0x43af1a
jmp case.0x437e2b.64
push 0
call fcn.0043bfe0
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
push eax
push str.Delete:___s_
call fcn.004355f4
add esp, 8
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x1c4]
push ecx
call fcn.00435711
jmp case.0x437e2b.64
push 0x31
call fcn.0043bfe0
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x1dc]
push eax
mov ecx, dword [ebp - 0x84]
push ecx
push str.MessageBox:__d___s_
call fcn.004355f4
add esp, 0xc
mov eax, dword [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0x1dc]
push ecx
call fcn.00434c53
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
je 0x438981
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x7c]
jne 0x43896c
mov eax, dword [ebp - 0x78]
jmp 0x43af1a
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x74]
jne 0x43897f
mov eax, dword [ebp - 0x70]
jmp 0x43af1a
jmp 0x43898a
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
push 0xfffffffffffffff0
call fcn.0043bfe0
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
push eax
push str.RMDir:___s_
call fcn.004355f4
add esp, 8
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x1e8]
push ecx
call fcn.00435711
jmp case.0x437e2b.64
push 1
call fcn.0043bfe0
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
push eax
call fcn.0043479e
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
call fcn.004341f4
jmp case.0x437e2b.64
push 2
call fcn.0043bf70
mov dword [ebp - 0x200], eax
push 3
call fcn.0043bf70
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x224], eax
push 1
call fcn.0043bfe0
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x224]
mov byte [eax], 0
cmp dword [ebp - 0x7c], 0
je 0x438a39
cmp dword [ebp - 0x200], 0
je 0x438afe
mov eax, dword [ebp - 0x230]
push eax
call fcn.0043479e
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x20c], 0
jge 0x438a66
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x20c]
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jl 0x438afe
mov eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x218]
jle 0x438a8d
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x230]
add eax, dword [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x224]
push ecx
call fcn.00434721
cmp dword [ebp - 0x200], 0
je 0x438afe
cmp dword [ebp - 0x200], 0
jge 0x438ad0
mov eax, dword [ebp - 0x224]
push eax
call fcn.0043479e
add eax, dword [ebp - 0x200]
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
jge 0x438ae3
mov dword [ebp - 0x200], 0
cmp dword [ebp - 0x200], 0x400
jge 0x438afe
mov eax, dword [ebp - 0x224]
add eax, dword [ebp - 0x200]
mov byte [eax], 0
jmp case.0x437e2b.64
push 0x20
call fcn.0043bfe0
mov dword [ebp - 0x23c], eax
push 0x31
call fcn.0043bfe0
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x74], 0
jne 0x438b4e
mov esi, esp
mov eax, dword [ebp - 0x248]
push eax
mov ecx, dword [ebp - 0x23c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x438b4c
mov eax, dword [ebp - 0x7c]
jmp 0x43af1a
jmp 0x438b77
mov esi, esp
mov eax, dword [ebp - 0x248]
push eax
mov ecx, dword [ebp - 0x23c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x438b77
mov eax, dword [ebp - 0x7c]
jmp 0x43af1a
mov eax, dword [ebp - 0x78]
jmp 0x43af1a
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x254], eax
push 1
call fcn.0043bfe0
mov dword [ebp - 0x260], eax
mov esi, esp
push 0x400
mov eax, dword [ebp - 0x254]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
cmp esi, esp
call fcn.00434f64
test eax, eax
je 0x438be2
cmp dword [ebp - 0x7c], 0
je 0x438bf4
mov esi, esp
mov eax, dword [ebp - 0x254]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x438bf4
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x254]
mov byte [eax], 0
mov eax, dword [ebp - 0x254]
mov byte [eax + 0x3ff], 0
jmp case.0x437e2b.64
push 0
call fcn.0043bf70
mov dword [ebp - 0x26c], eax
push 1
call fcn.0043bf70
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x70], 0
jne 0x438c54
mov eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x278]
jge 0x438c3c
mov eax, dword [ebp - 0x78]
jmp 0x43af1a
mov eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x278]
jle 0x438c52
mov eax, dword [ebp - 0x74]
jmp 0x43af1a
jmp 0x438c80
mov eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x278]
jae 0x438c6a
mov eax, dword [ebp - 0x78]
jmp 0x43af1a
mov eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x278]
jbe 0x438c80
mov eax, dword [ebp - 0x74]
jmp 0x43af1a
mov eax, dword [ebp - 0x7c]
jmp 0x43af1a
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x29c], eax
push 1
call fcn.0043bf70
mov dword [ebp - 0x284], eax
push 2
call fcn.0043bf70
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xc94], eax
cmp dword [ebp - 0xc94], 0xc
ja case.default.0x438cc7
mov ecx, dword [ebp - 0xc94]
jmp dword [ecx*4 + 0x43b200]
mov eax, dword [ebp - 0x284]
add eax, dword [ebp - 0x290]
mov dword [ebp - 0x284], eax
jmp case.default.0x438cc7
mov eax, dword [ebp - 0x284]
sub eax, dword [ebp - 0x290]
mov dword [ebp - 0x284], eax
jmp case.default.0x438cc7
mov eax, dword [ebp - 0x284]
imul eax, dword [ebp - 0x290]
mov dword [ebp - 0x284], eax
jmp case.default.0x438cc7
cmp dword [ebp - 0x290], 0
je 0x438d32
mov eax, dword [ebp - 0x284]
cdq
idiv dword [ebp - 0x290]
mov dword [ebp - 0x284], eax
jmp 0x438d45
mov dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.default.0x438cc7
mov eax, dword [ebp - 0x284]
or eax, dword [ebp - 0x290]
mov dword [ebp - 0x284], eax
jmp case.default.0x438cc7
mov eax, dword [ebp - 0x284]
and eax, dword [ebp - 0x290]
mov dword [ebp - 0x284], eax
jmp case.default.0x438cc7
mov eax, dword [ebp - 0x284]
xor eax, dword [ebp - 0x290]
mov dword [ebp - 0x284], eax
jmp case.default.0x438cc7
xor eax, eax
cmp dword [ebp - 0x284], 0
sete al
mov dword [ebp - 0x284], eax
jmp case.default.0x438cc7
cmp dword [ebp - 0x284], 0
jne 0x438dc4
cmp dword [ebp - 0x290], 0
jne 0x438dc4
mov dword [ebp - 0xc94], 0
jmp 0x438dce
mov dword [ebp - 0xc94], 1
mov eax, dword [ebp - 0xc94]
mov dword [ebp - 0x284], eax
jmp case.default.0x438cc7
cmp dword [ebp - 0x284], 0
je 0x438dfd
cmp dword [ebp - 0x290], 0
je 0x438dfd
mov dword [ebp - 0xc94], 1
jmp 0x438e07
mov dword [ebp - 0xc94], 0
mov eax, dword [ebp - 0xc94]
mov dword [ebp - 0x284], eax
jmp case.default.0x438cc7
cmp dword [ebp - 0x290], 0
je 0x438e33
mov eax, dword [ebp - 0x284]
cdq
idiv dword [ebp - 0x290]
mov dword [ebp - 0x284], edx
jmp 0x438e46
mov dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.default.0x438cc7
mov eax, dword [ebp - 0x284]
mov ecx, dword [ebp - 0x290]
shl eax, cl
mov dword [ebp - 0x284], eax
jmp case.default.0x438cc7
mov eax, dword [ebp - 0x284]
mov ecx, dword [ebp - 0x290]
sar eax, cl
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
push eax
mov ecx, dword [ebp - 0x29c]
push ecx
call fcn.004341f4
jmp case.0x437e2b.64
push 1
call fcn.0043bfe0
mov dword [ebp - 0x2a8], eax
push 2
call fcn.0043bf70
mov esi, esp
push eax
mov eax, dword [ebp - 0x2a8]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
cmp esi, esp
call fcn.00434f64
jmp case.0x437e2b.64
mov eax, dword [0x4b6ab0]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
je 0x438f9a
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0xc94], eax
mov ecx, dword [ebp - 0x2c0]
sub ecx, 1
mov dword [ebp - 0x2c0], ecx
cmp dword [ebp - 0xc94], 0
je 0x438f1f
cmp dword [ebp - 0x2b4], 0
je 0x438f1f
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [eax]
mov dword [ebp - 0x2b4], ecx
jmp 0x438ee2
cmp dword [ebp - 0x2b4], 0
jne 0x438f57
mov eax, dword [ebp - 0x7c]
push eax
push str.Exch:_stack____d_elements
call fcn.004355f4
add esp, 8
push 0x200010
push 0xffffffffffffffe8
push 0
call fcn.004341ae
push eax
call fcn.00434c53
mov eax, 0x7fffffff
jmp 0x43af1a
mov eax, dword [ebp - 0x2b4]
add eax, 4
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00434721
mov eax, dword [0x4b6ab0]
add eax, 4
push eax
mov ecx, dword [ebp - 0x2b4]
add ecx, 4
push ecx
call fcn.00434721
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [0x4b6ab0]
add ecx, 4
push ecx
call fcn.00434721
jmp 0x439048
cmp dword [ebp - 0x80], 0
je 0x438ffd
cmp dword [ebp - 0x2b4], 0
jne 0x438fc4
push str.Pop:_stack_empty
call fcn.004355f4
add esp, 4
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x2b4]
add eax, 4
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
call fcn.00434721
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [eax]
mov dword [0x4b6ab0], ecx
mov esi, esp
mov eax, dword [ebp - 0x2b4]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp esi, esp
call fcn.00434f64
jmp 0x439048
mov esi, esp
push 0x404
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0x2b4]
add ecx, 4
push ecx
call fcn.004341ae
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [0x4b6ab0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2b4]
mov dword [0x4b6ab0], eax
jmp case.0x437e2b.64
push 3
call fcn.0043bf70
mov dword [ebp - 0x2d8], eax
push 4
call fcn.0043bf70
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x70]
and eax, 1
je 0x43907c
push 0x33
call fcn.0043bfe0
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x70]
and eax, 2
je 0x439091
push 0x44
call fcn.0043bfe0
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x88], 0x21
jne 0x439142
push 1
call fcn.0043bf70
mov dword [ebp - 0x2f0], eax
push 2
call fcn.0043bf70
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x70]
sar eax, 2
test eax, eax
je 0x43910c
mov esi, esp
lea eax, [ebp - 0x2cc]
push eax
mov ecx, dword [ebp - 0x70]
sar ecx, 2
push ecx
push 0
mov edx, dword [ebp - 0x2e4]
push edx
mov eax, dword [ebp - 0x2d8]
push eax
mov ecx, dword [ebp - 0x2fc]
push ecx
mov edx, dword [ebp - 0x2f0]
push edx
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
cmp esi, esp
call fcn.00434f64
neg eax
sbb eax, eax
add eax, 1
add eax, dword [ebp - 0x60]
mov dword [ebp - 0x60], eax
jmp 0x43913d
mov esi, esp
mov eax, dword [ebp - 0x2e4]
push eax
mov ecx, dword [ebp - 0x2d8]
push ecx
mov edx, dword [ebp - 0x2fc]
push edx
mov eax, dword [ebp - 0x2f0]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x2cc], eax
jmp 0x4391d7
push 1
call fcn.0043bfe0
mov dword [ebp - 0x308], eax
push 0x12
call fcn.0043bfe0
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
movsx ecx, byte [eax]
test ecx, ecx
je 0x439177
mov edx, dword [ebp - 0x314]
mov dword [ebp - 0xc94], edx
jmp 0x439181
mov dword [ebp - 0xc94], 0
mov eax, dword [ebp - 0x308]
movsx ecx, byte [eax]
test ecx, ecx
je 0x43919c
mov edx, dword [ebp - 0x308]
mov dword [ebp - 0xc98], edx
jmp 0x4391a6
mov dword [ebp - 0xc98], 0
mov esi, esp
mov eax, dword [ebp - 0xc94]
push eax
mov ecx, dword [ebp - 0xc98]
push ecx
mov edx, dword [ebp - 0x2e4]
push edx
mov eax, dword [ebp - 0x2d8]
push eax
call dword [sym.imp.USER32.dll_FindWindowExA]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x84], 0
jl 0x4391f0
mov eax, dword [ebp - 0x2cc]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
call fcn.004341f4
jmp case.0x437e2b.64
push 0
call fcn.0043bf70
mov esi, esp
push eax
call dword [sym.imp.USER32.dll_IsWindow]
cmp esi, esp
call fcn.00434f64
test eax, eax
je 0x439218
mov eax, dword [ebp - 0x80]
jmp 0x43af1a
mov eax, dword [ebp - 0x7c]
jmp 0x43af1a
push 2
call fcn.0043bf70
mov esi, esp
push eax
push 1
call fcn.0043bf70
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp esi, esp
call fcn.00434f64
push eax
mov eax, dword [ebp - 0x3c]
push eax
call fcn.004341f4
jmp case.0x437e2b.64
mov eax, dword [0x8f3748]
add eax, dword [ebp - 0x80]
mov dword [ebp - 0x320], eax
mov esi, esp
mov eax, dword [ebp - 0x320]
push eax
push 0xffffffffffffffeb
push 0
call fcn.0043bf70
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
cmp esi, esp
call fcn.00434f64
jmp case.0x437e2b.64
mov esi, esp
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x54]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x350], eax
mov esi, esp
lea eax, [ebp - 0x338]
push eax
mov ecx, dword [ebp - 0x350]
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
cmp esi, esp
call fcn.00434f64
mov esi, esp
push 0x10
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x32c]
push eax
mov ecx, dword [ebp - 0x7c]
imul ecx, dword [ebp - 0x330]
push ecx
push 0
push 0
call fcn.0043bfe0
push eax
push 0
call dword [sym.imp.USER32.dll_LoadImageA]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x344], eax
mov esi, esp
mov eax, dword [ebp - 0x344]
push eax
push 0
push 0x172
mov ecx, dword [ebp - 0x350]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0
je 0x43933d
mov esi, esp
mov eax, dword [ebp - 0x344]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.00434f64
jmp case.0x437e2b.64
mov esi, esp
push 0x48
mov edi, esp
push 0x5a
mov ebx, esp
mov eax, dword [ebp - 0x54]
push eax
call dword [sym.imp.USER32.dll_GetDC]
cmp ebx, esp
call fcn.00434f64
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
cmp edi, esp
call fcn.00434f64
push eax
push 2
call fcn.0043bf70
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
cmp esi, esp
call fcn.00434f64
neg eax
mov dword [0x4b6ab4], eax
push 3
call fcn.0043bf70
mov dword [0x4b6ac4], eax
mov eax, dword [ebp - 0x74]
and eax, 1
mov byte [0x4b6ac8], al
mov eax, dword [ebp - 0x74]
and eax, 2
mov byte [0x4b6ac9], al
mov eax, dword [ebp - 0x74]
and eax, 4
mov byte [0x4b6aca], al
mov byte [0x4b6acb], 1
mov eax, dword [ebp - 0x80]
push eax
push 0x4b6ad0
call fcn.004341ae
mov esi, esp
push 0x4b6ab4
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
cmp esi, esp
call fcn.00434f64
push eax
mov eax, dword [ebp - 0x3c]
push eax
call fcn.004341f4
jmp case.0x437e2b.64
push 0
call fcn.0043bf70
mov dword [ebp - 0x35c], eax
push 1
call fcn.0043bf70
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x7c], 0
je 0x43941a
push str.HideWindow
call fcn.004355f4
add esp, 4
cmp dword [ebp - 0x78], 0
jne 0x43943f
mov esi, esp
mov eax, dword [ebp - 0x368]
push eax
mov ecx, dword [ebp - 0x35c]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
cmp esi, esp
call fcn.00434f64
jmp 0x43945c
mov esi, esp
mov eax, dword [ebp - 0x368]
push eax
mov ecx, dword [ebp - 0x35c]
push ecx
call dword [sym.imp.USER32.dll_EnableWindow]
cmp esi, esp
call fcn.00434f64
jmp case.0x437e2b.64
push 0
call fcn.0043bfe0
mov dword [ebp - 0x380], eax
push 0x31
call fcn.0043bfe0
mov dword [ebp - 0x38c], eax
push 0x22
call fcn.0043bfe0
mov dword [ebp - 0x398], eax
push 0x15
call fcn.0043bfe0
mov dword [ebp - 0x3a4], eax
push 0xffffffffffffffec
call fcn.00434573
mov eax, dword [ebp - 0x398]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4394b7
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0xc94], edx
jmp 0x4394c1
mov dword [ebp - 0xc94], 0
mov eax, dword [ebp - 0x380]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4394dc
mov edx, dword [ebp - 0x380]
mov dword [ebp - 0xc98], edx
jmp 0x4394e6
mov dword [ebp - 0xc98], 0
mov esi, esp
mov eax, dword [ebp - 0x78]
push eax
push 0x8fd800
mov ecx, dword [ebp - 0xc94]
push ecx
mov edx, dword [ebp - 0x38c]
push edx
mov eax, dword [ebp - 0xc98]
push eax
mov ecx, dword [ebp - 0x54]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0x21
jge 0x43955a
mov eax, dword [ebp - 0x374]
push eax
mov ecx, dword [ebp - 0x398]
push ecx
mov edx, dword [ebp - 0x38c]
push edx
mov eax, dword [ebp - 0x380]
push eax
push str.ExecShell:_warning:_error____s_:_file:__s__params:__s___d
call fcn.004355f4
add esp, 0x14
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp 0x43957c
mov eax, dword [ebp - 0x398]
push eax
mov ecx, dword [ebp - 0x38c]
push ecx
mov edx, dword [ebp - 0x380]
push edx
push str.ExecShell:_success____s_:_file:__s__params:__s__
call fcn.004355f4
add esp, 0x10
jmp case.0x437e2b.64
push 0
call fcn.0043bfe0
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
push eax
push str.Exec:_command__s_
call fcn.004355f4
add esp, 8
mov eax, dword [ebp - 0x3bc]
push eax
push 0xffffffffffffffeb
call fcn.004353ba
mov eax, dword [ebp - 0x3bc]
push eax
call fcn.0043558b
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0
je 0x439670
mov eax, dword [ebp - 0x3bc]
push eax
push str.Exec:_success____s__
call fcn.004355f4
add esp, 8
cmp dword [ebp - 0x7c], 0
je 0x439658
mov esi, esp
push 0x64
mov eax, dword [ebp - 0x3b0]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp esi, esp
call fcn.00434f64
cmp eax, 0x102
jne 0x439611
push 0xf
call fcn.004354aa
jmp 0x4395e9
mov esi, esp
lea eax, [ebp - 0x3c8]
push eax
mov ecx, dword [ebp - 0x3b0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp esi, esp
call fcn.00434f64
cmp dword [ebp - 0x80], 0
jl 0x439646
mov eax, dword [ebp - 0x3c8]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004341f4
jmp 0x439658
cmp dword [ebp - 0x3c8], 0
je 0x439658
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov esi, esp
mov eax, dword [ebp - 0x3b0]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, esp
call fcn.00434f64
jmp 0x43968d
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x3bc]
push eax
push str.Exec:_failed_createprocess____s__
call fcn.004355f4
add esp, 8
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x3ec], eax
push 2
call fcn.0043bfe0
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3f8]
push eax
call fcn.0043451e
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0
je 0x4396fa
mov eax, dword [ebp - 0x3d4]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [ebp - 0x3ec]
push edx
call fcn.004341f4
mov eax, dword [ebp - 0x3d4]
mov ecx, dword [eax + 0x18]
push ecx
mov edx, dword [ebp - 0x3e0]
push edx
call fcn.004341f4
jmp 0x439715
mov eax, dword [ebp - 0x3e0]
mov byte [eax], 0
mov ecx, dword [ebp - 0x3ec]
mov byte [ecx], 0
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x410], eax
push 0xffffffffffffffee
call fcn.0043bfe0
mov dword [ebp - 0x440], eax
lea eax, [ebp - 0x434]
push eax
mov ecx, dword [ebp - 0x440]
push ecx
call fcn.004352bb
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x404]
mov byte [eax], 0
mov ecx, dword [ebp - 0x410]
mov byte [ecx], 0
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x41c], 0
je 0x439833
mov esi, esp
mov eax, dword [ebp - 0x41c]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0
je 0x439833
mov eax, dword [ebp - 0x44c]
push eax
mov ecx, dword [ebp - 0x41c]
push ecx
push 0
mov edx, dword [ebp - 0x440]
push edx
call fcn.00434b1d
test eax, eax
je 0x43981d
lea eax, [ebp - 0x458]
push eax
lea ecx, [ebp - 0x428]
push ecx
push 0x49ef5c
mov edx, dword [ebp - 0x44c]
push edx
call fcn.004340dc
test eax, eax
je 0x43981d
mov eax, dword [ebp - 0x428]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x404]
push edx
call fcn.004341f4
mov eax, dword [ebp - 0x428]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0x410]
push edx
call fcn.004341f4
mov eax, dword [ebp - 0x60]
sub eax, 1
mov dword [ebp - 0x60], eax
mov esi, esp
mov eax, dword [ebp - 0x44c]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp esi, esp
call fcn.00434f64
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
cmp dword [0x8f3c38], 0
jl 0x4399ce
mov dword [ebp - 0x464], 0
push 0xfffffffffffffff0
call fcn.0043bfe0
mov dword [ebp - 0x470], eax
push 1
call fcn.0043bfe0
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x74], 0
je 0x439894
mov esi, esp
mov eax, dword [ebp - 0x470]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0
jne 0x4398bd
mov esi, esp
push 8
push 0
mov eax, dword [ebp - 0x470]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0
je 0x4399b1
mov eax, dword [ebp - 0x47c]
push eax
mov ecx, dword [ebp - 0x464]
push ecx
call fcn.00434cda
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 0
je 0x43995a
mov eax, dword [ebp - 0x60]
sub eax, 1
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x7c], 0
je 0x439922
mov eax, dword [ebp - 0x7c]
push eax
call fcn.00434573
mov esi, esp
call dword [ebp - 0x488]
cmp esi, esp
call fcn.00434f64
test eax, eax
je 0x439920
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp 0x439958
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x494], eax
mov esi, esp
push section..data
push 0x4b6ab0
push section..ndata
push 0x400
mov eax, dword [ebp - 0x54]
push eax
call dword [ebp - 0x494]
add esp, 0x14
cmp esi, esp
call fcn.00434f64
jmp 0x439983
mov eax, dword [ebp - 0x47c]
push eax
push 0xfffffffffffffff7
call fcn.004353ba
mov eax, dword [ebp - 0x470]
push eax
mov ecx, dword [ebp - 0x47c]
push ecx
push str.Error_registering_DLL:__s_not_found_in__s
call fcn.004355f4
add esp, 0xc
cmp dword [ebp - 0x78], 0
jne 0x4399af
mov eax, dword [ebp - 0x464]
push eax
call fcn.004345fa
test eax, eax
je 0x4399af
mov esi, esp
mov eax, dword [ebp - 0x464]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp esi, esp
call fcn.00434f64
jmp 0x4399cc
push 0xfffffffffffffff6
call fcn.00434573
mov eax, dword [ebp - 0x470]
push eax
push str.Error_registering_DLL:_Could_not_load__s
call fcn.004355f4
add esp, 8
jmp 0x4399e2
push 0xffffffffffffffe7
call fcn.00434573
push str.Error_registering_DLL:_Could_not_initialize_OLE
call fcn.004355f4
add esp, 4
jmp case.0x437e2b.64
push 0xfffffffffffffff0
call fcn.0043bfe0
mov dword [ebp - 0x4a0], eax
push 0xffffffffffffffdf
call fcn.0043bfe0
mov dword [ebp - 0x4ac], eax
push 2
call fcn.0043bfe0
mov dword [ebp - 0x4b8], eax
push 0xffffffffffffffcd
call fcn.0043bfe0
mov dword [ebp - 0x4c4], eax
push 0x45
call fcn.0043bfe0
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x4ac]
push eax
call fcn.00434690
test eax, eax
jne 0x439a3f
push 0x21
call fcn.0043bfe0
mov eax, dword [ebp - 0x74]
sar eax, 0x10
push eax
mov ecx, dword [ebp - 0x74]
and ecx, 0xff00
sar ecx, 8
push ecx
mov edx, dword [ebp - 0x74]
and edx, 0xff
push edx
mov eax, dword [ebp - 0x4c4]
push eax
mov ecx, dword [ebp - 0x4b8]
push ecx
mov edx, dword [ebp - 0x4ac]
push edx
mov eax, dword [ebp - 0x4a0]
push eax
push str.CreateShortCut:_out:___s___in:___s__s___icon:__s__d__sw_d__hk_d
call fcn.004355f4
add esp, 0x20
mov esi, esp
lea eax, [ebp - 0x4e8]
push eax
push 0x49fe64
push 1
push 0
push 0x4a2880
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x4dc], 0
jl 0x439cc4
mov esi, esp
lea eax, [ebp - 0x4f4]
push eax
push 0x4a155c
mov ecx, dword [ebp - 0x4e8]
push ecx
mov edx, dword [ebp - 0x4e8]
mov eax, dword [edx]
mov ecx, dword [eax]
call ecx
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x4dc], 0
jl 0x439ca7
mov esi, esp
mov eax, dword [ebp - 0x4ac]
push eax
mov ecx, dword [ebp - 0x4e8]
push ecx
mov edx, dword [ebp - 0x4e8]
mov eax, dword [edx]
mov ecx, dword [eax + 0x50]
call ecx
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x4dc], eax
mov eax, 0x8fd800
mov esi, esp
push eax
mov ecx, dword [ebp - 0x4e8]
push ecx
mov edx, dword [ebp - 0x4e8]
mov eax, dword [edx]
mov ecx, dword [eax + 0x24]
call ecx
cmp esi, esp
call fcn.00434f64
mov eax, dword [ebp - 0x74]
and eax, 0xff00
sar eax, 8
test eax, eax
je 0x439b7d
mov eax, dword [ebp - 0x74]
and eax, 0xff00
sar eax, 8
mov esi, esp
push eax
mov ecx, dword [ebp - 0x4e8]
push ecx
mov edx, dword [ebp - 0x4e8]
mov eax, dword [edx]
mov ecx, dword [eax + 0x3c]
call ecx
cmp esi, esp
call fcn.00434f64
mov eax, dword [ebp - 0x74]
sar eax, 0x10
mov esi, esp
push eax
mov ecx, dword [ebp - 0x4e8]
push ecx
mov edx, dword [ebp - 0x4e8]
mov eax, dword [edx]
mov ecx, dword [eax + 0x34]
call ecx
cmp esi, esp
call fcn.00434f64
mov eax, dword [ebp - 0x4c4]
movsx ecx, byte [eax]
test ecx, ecx
je 0x439bdb
mov eax, dword [ebp - 0x74]
and eax, 0xff
mov esi, esp
push eax
mov ecx, dword [ebp - 0x4c4]
push ecx
mov edx, dword [ebp - 0x4e8]
push edx
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x44]
call edx
cmp esi, esp
call fcn.00434f64
mov esi, esp
mov eax, dword [ebp - 0x4b8]
push eax
mov ecx, dword [ebp - 0x4e8]
push ecx
mov edx, dword [ebp - 0x4e8]
mov eax, dword [edx]
mov ecx, dword [eax + 0x2c]
call ecx
cmp esi, esp
call fcn.00434f64
mov esi, esp
mov eax, dword [ebp - 0x4d0]
push eax
mov ecx, dword [ebp - 0x4e8]
push ecx
mov edx, dword [ebp - 0x4e8]
mov eax, dword [edx]
mov ecx, dword [eax + 0x1c]
call ecx
cmp esi, esp
call fcn.00434f64
cmp dword [ebp - 0x4dc], 0
jl 0x439c8a
mov dword [ebp - 0x4dc], 0x80004005
mov esi, esp
push 0x400
push 0x4b7ef0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x4a0]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp esi, esp
call fcn.00434f64
test eax, eax
je 0x439c8a
mov esi, esp
push 1
push 0x4b7ef0
mov eax, dword [ebp - 0x4f4]
push eax
mov ecx, dword [ebp - 0x4f4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
call eax
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x4dc], eax
mov esi, esp
mov eax, dword [ebp - 0x4f4]
push eax
mov ecx, dword [ebp - 0x4f4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
cmp esi, esp
call fcn.00434f64
mov esi, esp
mov eax, dword [ebp - 0x4e8]
push eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
cmp esi, esp
call fcn.00434f64
cmp dword [ebp - 0x4dc], 0
jge 0x439cdf
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
push 0xfffffffffffffff0
call fcn.00434573
jmp 0x439ce6
push 0xfffffffffffffff4
call fcn.00434573
jmp case.0x437e2b.64
push 0
call fcn.0043bfe0
mov dword [ebp - 0x534], eax
push 0x11
call fcn.0043bfe0
mov dword [ebp - 0x540], eax
push 0x23
call fcn.0043bfe0
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x540]
push eax
mov ecx, dword [ebp - 0x534]
push ecx
push str.CopyFiles___s_____s_
call fcn.004355f4
add esp, 0xc
mov eax, dword [ebp - 0x534]
push eax
call fcn.0043451e
test eax, eax
jne 0x439d54
push 0
push 0xfffffffffffffff9
call fcn.004353ba
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x524], 2
mov eax, dword [ebp - 0x534]
push eax
call fcn.0043479e
mov ecx, dword [ebp - 0x534]
mov byte [ecx + eax + 1], 0
mov eax, dword [ebp - 0x540]
push eax
call fcn.0043479e
mov ecx, dword [ebp - 0x540]
mov byte [ecx + eax + 1], 0
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x50e], eax
mov ax, word [ebp - 0x7c]
mov word [ebp - 0x518], ax
mov eax, dword [ebp - 0x54c]
push eax
push 0
call fcn.004353ba
mov esi, esp
lea eax, [ebp - 0x528]
push eax
call dword [sym.imp.SHELL32.dll_SHFileOperationA]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 0
je 0x439e09
push 0
push 0xfffffffffffffff9
call fcn.004353ba
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
cmp dword [ebp - 0x84], 0xbadf00d
je 0x439e38
push 0x200010
push 0xffffffffffffffe8
push 0
call fcn.004341ae
push eax
call fcn.00434c53
mov eax, 0x7fffffff
jmp 0x43af1a
mov eax, dword [0x8f3c14]
add eax, 1
mov dword [0x8f3c14], eax
jmp case.0x437e2b.64
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x570], 0
push str._RM_
mov eax, dword [ebp - 0x18]
push eax
call fcn.00434721
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
call fcn.00434721
cmp dword [ebp - 0x84], 0
je 0x439e99
push 0
call fcn.0043bfe0
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x80], 0
je 0x439eac
push 0x11
call fcn.0043bfe0
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x74], 0
je 0x439ebf
push 0x22
call fcn.0043bfe0
mov dword [ebp - 0x570], eax
push 0xffffffffffffffcd
call fcn.0043bfe0
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0xc]
push eax
push str.WriteINIStr:_wrote___s___s_s_in__s
call fcn.004355f4
add esp, 0x14
mov esi, esp
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x570]
push ecx
mov edx, dword [ebp - 0x564]
push edx
mov eax, dword [ebp - 0x558]
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x439f1b
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
mov ax, word [0x49ee10]
mov word [ebp - 0x57c], ax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x588], eax
push 1
call fcn.0043bfe0
mov dword [ebp - 0x594], eax
push 0x12
call fcn.0043bfe0
mov dword [ebp - 0x5a0], eax
push 0xffffffffffffffdd
call fcn.0043bfe0
mov dword [ebp - 0x5ac], eax
mov esi, esp
mov eax, dword [ebp - 0x5ac]
push eax
push 0x3ff
mov ecx, dword [ebp - 0x588]
push ecx
lea edx, [ebp - 0x57c]
push edx
mov eax, dword [ebp - 0x5a0]
push eax
mov ecx, dword [ebp - 0x594]
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp esi, esp
call fcn.00434f64
mov eax, dword [ebp - 0x588]
movsx ecx, byte [eax]
cmp ecx, 0xa
jne 0x439fb4
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x588]
mov byte [eax], 0
jmp case.0x437e2b.64
mov dword [ebp - 0x5b8], 1
mov eax, dword [ebp - 0x80]
push eax
call fcn.00434f78
add esp, 4
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x74], 0
jne 0x43a058
push 2
call fcn.0043c310
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 0
je 0x43a056
push 0x33
call fcn.0043bfe0
mov dword [ebp - 0x5dc], eax
mov esi, esp
mov eax, dword [ebp - 0x5dc]
push eax
mov ecx, dword [ebp - 0x5d0]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x5b8], eax
mov eax, dword [ebp - 0x5dc]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x5c4]
push edx
push str.DeleteRegValue:___s_s____s_
call fcn.004355f4
add esp, 0x10
mov esi, esp
mov eax, dword [ebp - 0x5d0]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, esp
call fcn.00434f64
jmp 0x43a0a3
push 0x22
call fcn.0043bfe0
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x5e8]
push eax
mov ecx, dword [ebp - 0x5c4]
push ecx
push str.DeleteRegKey:___s_s_
call fcn.004355f4
add esp, 0xc
mov eax, dword [ebp - 0x74]
and eax, 2
push eax
mov ecx, dword [ebp - 0x5e8]
push ecx
mov edx, dword [ebp - 0x80]
push edx
call fcn.0043c2c0
push eax
call fcn.0043c0a0
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0
je 0x43a0b5
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x84]
push eax
call fcn.0043c2c0
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x618], eax
push 2
call fcn.0043bfe0
mov dword [ebp - 0x624], eax
push 0x11
call fcn.0043bfe0
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x600]
push eax
call fcn.00434f78
add esp, 4
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov esi, esp
push 0
lea eax, [ebp - 0x5f4]
push eax
push 0
mov ecx, dword [0x8f3c30]
or ecx, 2
push ecx
push 0
push 0
push 0
mov edx, dword [ebp - 0x630]
push edx
mov eax, dword [ebp - 0x600]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x43a342
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x654], 0
cmp dword [ebp - 0x60c], 1
jne 0x43a1eb
push 0x23
call fcn.0043bfe0
mov eax, dword [ebp - 0x648]
push eax
call fcn.0043479e
add eax, 1
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x618], 1
jne 0x43a1c2
mov eax, dword [ebp - 0x648]
push eax
mov ecx, dword [ebp - 0x624]
push ecx
mov edx, dword [ebp - 0x630]
push edx
mov eax, dword [ebp - 0x63c]
push eax
push str.WriteRegStr:___s_s____s___s_
call fcn.004355f4
add esp, 0x14
jmp 0x43a1eb
mov eax, dword [ebp - 0x648]
push eax
mov ecx, dword [ebp - 0x624]
push ecx
mov edx, dword [ebp - 0x630]
push edx
mov eax, dword [ebp - 0x63c]
push eax
push str.WriteRegExpandStr:___s_s____s___s_
call fcn.004355f4
add esp, 0x14
cmp dword [ebp - 0x60c], 4
jne 0x43a238
push 3
call fcn.0043bf70
mov ecx, dword [ebp - 0x648]
mov dword [ecx], eax
mov dword [ebp - 0x654], 4
mov eax, dword [ebp - 0x648]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x624]
push edx
mov eax, dword [ebp - 0x630]
push eax
mov ecx, dword [ebp - 0x63c]
push ecx
push str.WriteRegDWORD:___s_s____s__0x_08x_
call fcn.004355f4
add esp, 0x14
cmp dword [ebp - 0x60c], 3
jne 0x43a2bc
push 0xc00
mov eax, dword [ebp - 0x648]
push eax
push 0
mov esi, dword [ebp - 0x78]
xor edi, edi
mov eax, dword [ebp - 0x6c]
xor edx, edx
mov cl, 0x20
call fcn.004343f2
or esi, eax
or edi, edx
push edi
push esi
call fcn.00434780
mov dword [ebp - 0x654], eax
mov eax, dword [ebp - 0x654]
push eax
mov ecx, dword [ebp - 0x648]
push ecx
push 0x80
lea edx, [ebp - 0x6dc]
push edx
call fcn.00434ab4
add esp, 0x10
lea eax, [ebp - 0x6dc]
push eax
mov ecx, dword [ebp - 0x624]
push ecx
mov edx, dword [ebp - 0x630]
push edx
mov eax, dword [ebp - 0x63c]
push eax
push str.WriteRegBin:___s_s____s___s_
call fcn.004355f4
add esp, 0x14
cmp dword [ebp - 0x654], 0
jb 0x43a308
mov esi, esp
mov eax, dword [ebp - 0x654]
push eax
mov ecx, dword [ebp - 0x648]
push ecx
mov edx, dword [ebp - 0x618]
push edx
push 0
mov eax, dword [ebp - 0x624]
push eax
mov ecx, dword [ebp - 0x5f4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x43a308
mov eax, dword [ebp - 0x60]
sub eax, 1
mov dword [ebp - 0x60], eax
jmp 0x43a32a
mov eax, dword [ebp - 0x624]
push eax
mov ecx, dword [ebp - 0x630]
push ecx
mov edx, dword [ebp - 0x63c]
push edx
push str.WriteReg:_error_writing_into___s_s____s_
call fcn.004355f4
add esp, 0x10
mov esi, esp
mov eax, dword [ebp - 0x5f4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, esp
call fcn.00434f64
jmp 0x43a35d
mov eax, dword [ebp - 0x630]
push eax
mov ecx, dword [ebp - 0x63c]
push ecx
push str.WriteReg:_error_creating_key___s_s_
call fcn.004355f4
add esp, 0xc
jmp case.0x437e2b.64
push 0x20019
call fcn.0043c310
mov dword [ebp - 0x6e8], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x6f4], eax
push 0x33
call fcn.0043bfe0
mov dword [ebp - 0x700], eax
mov eax, dword [ebp - 0x6f4]
mov byte [eax], 0
cmp dword [ebp - 0x6e8], 0
je 0x43a46c
mov dword [ebp - 0x70c], 0x400
mov esi, esp
lea eax, [ebp - 0x70c]
push eax
mov ecx, dword [ebp - 0x6f4]
push ecx
lea edx, [ebp - 0x718]
push edx
push 0
mov eax, dword [ebp - 0x700]
push eax
mov ecx, dword [ebp - 0x6e8]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x43a3fb
cmp dword [ebp - 0x718], 4
je 0x43a40f
cmp dword [ebp - 0x718], 1
je 0x43a40f
cmp dword [ebp - 0x718], 2
je 0x43a40f
mov eax, dword [ebp - 0x6f4]
mov byte [eax], 0
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp 0x43a454
cmp dword [ebp - 0x718], 4
jne 0x43a43e
xor eax, eax
cmp dword [ebp - 0x74], 0
sete al
add eax, dword [ebp - 0x60]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x6f4]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x6f4]
push edx
call fcn.004341f4
jmp 0x43a454
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x74]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x6f4]
mov byte [eax + 0x3ff], 0
mov esi, esp
mov eax, dword [ebp - 0x6e8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, esp
call fcn.00434f64
jmp 0x43a475
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
push 0x20019
call fcn.0043c310
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x730], eax
push 3
call fcn.0043bf70
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x730]
mov byte [eax], 0
cmp dword [ebp - 0x724], 0
je 0x43a55d
mov dword [ebp - 0x748], 0x3ff
cmp dword [ebp - 0x74], 0
je 0x43a4f3
mov esi, esp
mov eax, dword [ebp - 0x748]
push eax
mov ecx, dword [ebp - 0x730]
push ecx
mov edx, dword [ebp - 0x73c]
push edx
mov eax, dword [ebp - 0x724]
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
cmp esi, esp
call fcn.00434f64
jmp 0x43a538
mov esi, esp
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x748]
push eax
mov ecx, dword [ebp - 0x730]
push ecx
mov edx, dword [ebp - 0x73c]
push edx
mov eax, dword [ebp - 0x724]
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
cmp esi, esp
call fcn.00434f64
test eax, eax
je 0x43a538
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x730]
mov byte [eax + 0x3ff], 0
mov esi, esp
mov eax, dword [ebp - 0x724]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, esp
call fcn.00434f64
jmp 0x43a566
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
movsx ecx, byte [eax]
test ecx, ecx
je 0x43a59d
mov eax, dword [ebp - 0x754]
push eax
call fcn.00434249
mov esi, esp
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, esp
call fcn.00434f64
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x76c], eax
push 0xffffffffffffffed
call fcn.0043bfe0
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x778]
push edx
call fcn.004340ff
mov dword [ebp - 0x760], eax
cmp dword [ebp - 0x760], 0xffffffff
jne 0x43a5ef
mov eax, dword [ebp - 0x76c]
mov byte [eax], 0
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp 0x43a602
mov eax, dword [ebp - 0x760]
push eax
mov ecx, dword [ebp - 0x76c]
push ecx
call fcn.004341f4
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x79c], eax
cmp dword [ebp - 0x7c], 0
je 0x43a63d
push 1
call fcn.0043bf70
mov ecx, dword [ebp - 0x18]
mov byte [ecx], al
mov eax, dword [ebp - 0x88]
sub eax, 0x38
neg eax
sbb eax, eax
and eax, 0
add eax, 1
mov dword [ebp - 0x790], eax
jmp 0x43a650
push 0x11
call fcn.0043bfe0
push eax
call fcn.0043479e
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x79c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x43a691
mov esi, esp
push 0
lea eax, [ebp - 0x784]
push eax
mov ecx, dword [ebp - 0x790]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x79c]
push eax
call fcn.00434249
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.00434f64
test eax, eax
jne 0x43a69a
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x7a8], eax
mov dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x7cc], eax
push 2
call fcn.0043bf70
mov dword [ebp - 0x7d8], eax
cmp dword [ebp - 0x7d8], 1
jge 0x43a6d6
jmp case.0x437e2b.64
cmp dword [ebp - 0x7d8], 0x3ff
jle 0x43a6ec
mov dword [ebp - 0x7d8], 0x3ff
mov eax, dword [ebp - 0x7cc]
movsx ecx, byte [eax]
test ecx, ecx
je 0x43a849
mov byte [ebp - 0x7e1], 0
mov eax, dword [ebp - 0x7cc]
push eax
call fcn.00434249
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x7c0]
cmp eax, dword [ebp - 0x7d8]
jge 0x43a849
mov esi, esp
push 0
lea eax, [ebp - 0x7b4]
push eax
push 1
lea ecx, [ebp - 0x7f9]
push ecx
mov edx, dword [ebp - 0x7f0]
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp esi, esp
call fcn.00434f64
test eax, eax
je 0x43a75d
cmp dword [ebp - 0x7b4], 1
je 0x43a762
jmp 0x43a849
cmp dword [ebp - 0x78], 0
je 0x43a783
movzx eax, byte [ebp - 0x7f9]
push eax
mov ecx, dword [ebp - 0x7a8]
push ecx
call fcn.004341f4
xor eax, eax
jmp 0x43af1a
movsx eax, byte [ebp - 0x7e1]
cmp eax, 0xd
je 0x43a79b
movsx eax, byte [ebp - 0x7e1]
cmp eax, 0xa
jne 0x43a808
movsx eax, byte [ebp - 0x7e1]
movsx ecx, byte [ebp - 0x7f9]
cmp eax, ecx
je 0x43a7c5
movsx eax, byte [ebp - 0x7f9]
cmp eax, 0xd
je 0x43a7e3
movsx eax, byte [ebp - 0x7f9]
cmp eax, 0xa
je 0x43a7e3
mov esi, esp
push 1
push 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x7f0]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp esi, esp
call fcn.00434f64
jmp 0x43a806
mov eax, dword [ebp - 0x7a8]
add eax, dword [ebp - 0x7c0]
mov cl, byte [ebp - 0x7f9]
mov byte [eax], cl
mov edx, dword [ebp - 0x7c0]
add edx, 1
mov dword [ebp - 0x7c0], edx
jmp 0x43a849
mov eax, dword [ebp - 0x7a8]
add eax, dword [ebp - 0x7c0]
mov cl, byte [ebp - 0x7f9]
mov byte [eax], cl
mov edx, dword [ebp - 0x7c0]
add edx, 1
mov dword [ebp - 0x7c0], edx
mov al, byte [ebp - 0x7f9]
mov byte [ebp - 0x7e1], al
movsx eax, byte [ebp - 0x7f9]
test eax, eax
jne 0x43a844
jmp 0x43a849
jmp 0x43a716
mov eax, dword [ebp - 0x7a8]
add eax, dword [ebp - 0x7c0]
mov byte [eax], 0
cmp dword [ebp - 0x7c0], 0
jne 0x43a86a
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x808], eax
mov eax, dword [ebp - 0x808]
movsx ecx, byte [eax]
test ecx, ecx
je 0x43a8cb
mov esi, esp
mov eax, dword [ebp - 0x78]
push eax
push 0
push 2
call fcn.0043bf70
push eax
mov ecx, dword [ebp - 0x808]
push ecx
call fcn.00434249
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x80], 0
jl 0x43a8cb
mov eax, dword [ebp - 0x814]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004341f4
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x820]
movsx ecx, byte [eax]
test ecx, ecx
je 0x43a902
mov eax, dword [ebp - 0x820]
push eax
call fcn.00434249
mov esi, esp
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp esi, esp
call fcn.00434f64
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x838], eax
mov eax, dword [ebp - 0x838]
movsx ecx, byte [eax]
test ecx, ecx
je 0x43a962
mov esi, esp
lea eax, [ebp - 0x980]
push eax
mov ecx, dword [ebp - 0x838]
push ecx
call fcn.00434249
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp esi, esp
call fcn.00434f64
test eax, eax
je 0x43a962
lea eax, [ebp - 0x954]
push eax
mov ecx, dword [ebp - 0x82c]
push ecx
call fcn.00434721
jmp 0x43a974
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x82c]
mov byte [eax], 0
jmp case.0x437e2b.64
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x98c], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x998], eax
push 2
call fcn.0043bfe0
mov dword [ebp - 0xaf8], eax
mov esi, esp
lea eax, [ebp - 0xaec]
push eax
mov ecx, dword [ebp - 0xaf8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0x9a4], eax
cmp dword [ebp - 0x9a4], 0xffffffff
jne 0x43a9e1
mov eax, dword [ebp - 0x998]
mov byte [eax], 0
mov eax, dword [ebp - 0x98c]
mov byte [eax], 0
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp 0x43aa07
mov eax, dword [ebp - 0x9a4]
push eax
mov ecx, dword [ebp - 0x998]
push ecx
call fcn.004341f4
lea eax, [ebp - 0xac0]
push eax
mov ecx, dword [ebp - 0x98c]
push ecx
call fcn.00434721
jmp case.0x437e2b.64
mov dword [ebp - 0xb08], 0xfffffd66
mov dword [ebp - 0xb04], 0xffffffff
push 0xfffffffffffffff0
call fcn.0043bfe0
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0xb20]
push eax
call fcn.00434690
test eax, eax
jne 0x43aa44
push 0xffffffffffffffed
call fcn.0043bfe0
mov eax, dword [ebp - 0xb20]
push eax
call fcn.00434cf3
push 2
push 0x40000000
mov eax, dword [ebp - 0xb20]
push eax
call fcn.004340ff
mov dword [ebp - 0xb14], eax
cmp dword [ebp - 0xb14], 0xffffffff
je 0x43ac59
mov eax, dword [0x8f3b84]
mov dword [ebp - 0xb38], eax
mov esi, esp
mov eax, dword [ebp - 0xb38]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0xb2c], eax
cmp dword [ebp - 0xb2c], 0
je 0x43ac43
push 3
push 0x80000000
push 0x8fec00
call fcn.004340ff
mov dword [ebp - 0xb5c], eax
mov esi, esp
push 0
lea eax, [ebp - 0xb50]
push eax
mov ecx, dword [ebp - 0xb38]
push ecx
mov edx, dword [ebp - 0xb2c]
push edx
mov eax, dword [ebp - 0xb5c]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp esi, esp
call fcn.00434f64
mov esi, esp
mov eax, dword [ebp - 0xb5c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, esp
call fcn.00434f64
mov esi, esp
mov eax, dword [ebp - 0x7c]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp esi, esp
call fcn.00434f64
mov dword [ebp - 0xb68], eax
mov ecx, dword [ebp - 0xb68]
mov dword [ebp - 0xb74], ecx
cmp dword [ebp - 0xb74], 0
je 0x43abe0
mov eax, dword [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0xb74]
push ecx
push 0
mov esi, dword [ebp - 0x80]
xor edi, edi
mov eax, dword [ebp - 0x6c]
xor edx, edx
mov cl, 0x20
call fcn.004343f2
or esi, eax
or edi, edx
push edi
push esi
call fcn.00434780
mov eax, dword [ebp - 0xb68]
movzx ecx, byte [eax]
test ecx, ecx
je 0x43abca
mov eax, dword [ebp - 0xb68]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0xb84], ecx
mov dword [ebp - 0xb80], edx
mov eax, dword [ebp - 0xb68]
add eax, 8
mov dword [ebp - 0xb68], eax
mov eax, dword [ebp - 0xb84]
push eax
mov ecx, dword [ebp - 0xb68]
push ecx
mov edx, dword [ebp - 0xb2c]
add edx, dword [ebp - 0xb80]
push edx
call fcn.00434fc8
mov eax, dword [ebp - 0xb68]
add eax, dword [ebp - 0xb84]
mov dword [ebp - 0xb68], eax
jmp 0x43ab63
mov esi, esp
mov eax, dword [ebp - 0xb74]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp esi, esp
call fcn.00434f64
mov esi, esp
push 0
lea eax, [ebp - 0xb44]
push eax
mov ecx, dword [ebp - 0xb38]
push ecx
mov edx, dword [ebp - 0xb2c]
push edx
mov eax, dword [ebp - 0xb14]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.00434f64
mov esi, esp
mov eax, dword [ebp - 0xb2c]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp esi, esp
call fcn.00434f64
push 0
push 0
mov eax, dword [ebp - 0xb14]
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
call fcn.00434780
mov dword [ebp - 0xb08], eax
mov dword [ebp - 0xb04], edx
mov esi, esp
mov eax, dword [ebp - 0xb14]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, esp
call fcn.00434f64
mov eax, dword [ebp - 0xb20]
push eax
mov ecx, dword [ebp - 0xb04]
push ecx
mov edx, dword [ebp - 0xb08]
push edx
push str.created_uninstaller:__I64d____s_
call fcn.004355f4
add esp, 0x10
mov dword [ebp - 0xb90], 0xfffffff3
cmp dword [ebp - 0xb04], 0
jg 0x43acc2
jl 0x43ac99
cmp dword [ebp - 0xb08], 0
jae 0x43acc2
mov dword [ebp - 0xb90], 0xffffffef
mov esi, esp
mov eax, dword [ebp - 0xb20]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp esi, esp
call fcn.00434f64
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0xb90]
push eax
call fcn.00434573
jmp case.0x437e2b.64
cmp dword [ebp - 0x84], 0
je 0x43ad1c
mov eax, dword [ebp - 0x80]
push eax
push str.settings_logging_to__d
call fcn.004355f4
add esp, 8
mov eax, dword [ebp - 0x80]
mov dword [0x8f13f4], eax
mov eax, dword [ebp - 0x80]
push eax
push str.logging_set_to__d
call fcn.004355f4
add esp, 8
cmp dword [ebp - 0x80], 0
je 0x43ad13
call fcn.0043512b
jmp 0x43ad1a
push 1
call fcn.00435338
jmp 0x43ad3d
push 1
call fcn.0043bfe0
mov dword [ebp - 0xb9c], eax
mov eax, dword [ebp - 0xb9c]
push eax
push 0x49f0bc
call fcn.004355f4
add esp, 8
jmp case.0x437e2b.64
push 0
call fcn.0043bf70
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0xba8]
cmp eax, dword [0x8f372c]
jae 0x43ae25
mov eax, dword [ebp - 0xba8]
imul eax, eax, 0x418
add eax, dword [0x8f3728]
mov dword [ebp - 0xbb4], eax
cmp dword [ebp - 0x7c], 0
jl 0x43adbe
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0xbb4]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0xbc0], edx
cmp dword [ebp - 0x7c], 0
jne 0x43adac
mov eax, dword [ebp - 0xbb4]
add eax, 0x18
push eax
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00434721
jmp 0x43adbc
mov eax, dword [ebp - 0xbc0]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.004341f4
jmp 0x43ae23
mov eax, dword [ebp - 0x7c]
neg eax
sub eax, 1
mov dword [ebp - 0x7c], eax
je 0x43add7
push 1
call fcn.0043bf70
mov dword [ebp - 0x80], eax
jmp 0x43ae02
mov eax, dword [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0xbb4]
add ecx, 0x18
push ecx
call fcn.004341ae
mov eax, dword [ebp - 0xbb4]
mov ecx, dword [eax + 8]
or ecx, 0x100
mov edx, dword [ebp - 0xbb4]
mov dword [edx + 8], ecx
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0xbb4]
mov edx, dword [ebp - 0x80]
mov dword [ecx + eax*4], edx
cmp dword [ebp - 0x78], 0
je 0x43ae23
mov eax, dword [ebp - 0xba8]
push eax
call fcn.00434285
jmp 0x43ae2e
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
push 0
call fcn.0043bf70
mov dword [ebp - 0xbcc], eax
cmp dword [ebp - 0xbcc], 0x20
jae 0x43aebc
cmp dword [ebp - 0x78], 0
je 0x43ae7f
cmp dword [ebp - 0x7c], 0
je 0x43ae6c
mov eax, dword [ebp - 0xbcc]
push eax
call fcn.00434069
push 0
push 0
call fcn.00434893
jmp 0x43ae7d
push 0
call fcn.00435103
push eax
mov eax, dword [ebp - 0x48]
push eax
call fcn.004341f4
jmp 0x43aeba
cmp dword [ebp - 0x7c], 0
je 0x43ae9d
mov eax, dword [ebp - 0xbcc]
mov ecx, dword [0x8f3630]
mov edx, dword [ebp - 0x80]
mov dword [ecx + eax*4 + 0x94], edx
jmp 0x43aeba
mov eax, dword [ebp - 0xbcc]
mov ecx, dword [0x8f3630]
mov edx, dword [ecx + eax*4 + 0x94]
push edx
mov eax, dword [ebp - 0x48]
push eax
call fcn.004341ae
jmp 0x43aec5
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
jmp case.0x437e2b.64
mov esi, esp
push 0
mov eax, dword [ebp - 0x84]
and eax, dword [0x8ee5b4]
push eax
push 0xb
mov ecx, dword [ebp - 0x54]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.00434f64
cmp dword [ebp - 0x84], 0
je case.0x437e2b.64
mov esi, esp
push 0
push 0
mov eax, dword [ebp - 0x54]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp esi, esp
call fcn.00434f64
mov eax, dword [0x8f3c08]
add eax, dword [ebp - 0x60]
mov dword [0x8f3c08], eax
xor eax, eax
push edx
mov ecx, ebp
push eax
lea edx, [0x43af4c]
call fcn.00434609
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00435789
add esp, 0xc98
cmp ebp, esp
call fcn.00434f64
mov esp, ebp
pop ebp
ret 4