Function at 0x4016e8
Capabilities:
Copy file
Create shortcut via ishelllink
Delete file
Delete registry value
Enumerate files on windows
Get file attributes
Move file
Query environment variable
Query or enumerate registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Set current directory
Set file attributes
Set registry value

Disassembly:
push ebp
mov ecx, 7
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x284]
push ebx
sub esp, 0x2bc
mov esi, dword [ebp + 8]
mov eax, dword [0x43458c]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x2a4], eax
mov ebx, dword [ebp - 0x280]
mov esi, dword [ebp - 0x27c]
mov edi, dword [ebp - 0x284]
mov eax, ebx
shl eax, 0xb
add eax, dword [0x40c8b4]
mov dword [ebp - 0x29c], eax
mov eax, esi
shl eax, 0xb
add eax, dword [0x40c8b4]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x280]
mov dword [0x4140fc], eax
lea eax, [edi - 2]
cmp eax, 0x43
ja case.0x40175a.66
jmp dword [eax*4 + 0x40c004]
mov dword [esp + 4], 0
mov dword [esp], ebx
jmp 0x401d72
inc dword [0x435ddc]
cmp dword [ebp - 0x2a4], 0
mov ebx, 0x7fffffff
je case.0x40175a.2
mov dword [esp], 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push esi
jmp case.0x40175a.2
mov dword [esp], ebx
call fcn.004016a5
push edx
dec eax
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00403b6a
mov ebx, eax
push ecx
push ecx
jmp case.0x40175a.2
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.004072d3
jmp 0x402699
xor eax, eax
call fcn.00401434
mov edx, 1
test eax, eax
cmovle eax, edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4017ff
mov eax, dword [ebp - 0x2a4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push eax
jmp case.0x40175a.66
mov edi, dword [ebp - 0x278]
test edi, edi
jne 0x401839
mov eax, dword [ebx*4 + 0x414060]
mov dword [ebx*4 + 0x414020], eax
mov eax, 1
call fcn.00401434
mov edx, dword [ebp - 0x280]
mov dword [edx*4 + 0x414060], eax
jmp 0x403b56
mov eax, dword [ebx*4 + 0x414020]
mov dword [ebx*4 + 0x414060], eax
jmp case.0x40175a.66
mov edx, dword [ebp - 0x278]
xor ecx, ecx
mov eax, dword [edx*4 + 0x414060]
test eax, eax
sete cl
and eax, dword [ebp - 0x274]
mov dword [edx*4 + 0x414060], eax
mov ebx, dword [ebp + ecx*4 - 0x280]
jmp case.0x40175a.2
mov eax, dword [esi*4 + 0x414060]
jmp 0x402838
mov eax, dword [0x435dc8]
test eax, eax
je 0x40189d
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push eax
push eax
mov eax, dword [0x435dd0]
test eax, eax
je case.0x40175a.66
mov edx, dword [ebp - 0x280]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x402699
mov dword [esp], 0xfffffff0
call fcn.00401469
mov edx, dword [ebp - 0x27c]
push edi
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
jmp 0x401ba4
mov dword [esp], 0xfffffff0
xor edi, edi
call fcn.00401469
push ebx
mov ebx, eax
mov dword [esp], eax
call fcn.00407c50
push esi
test eax, eax
je 0x40198b
mov dword [esp + 4], 0x5c
mov dword [esp], eax
call fcn.00407bb1
mov esi, eax
push ecx
push ecx
mov ax, word [eax]
mov word [esi], 0
mov word [ebp - 0x29c], ax
test ax, ax
jne 0x40194d
cmp dword [ebp - 0x278], 0
je 0x40194d
call fcn.00408ed2
test eax, eax
je 0x40194d
mov dword [esp], ebx
call fcn.004079b0
jmp 0x401955
mov dword [esp], ebx
call fcn.00407a44
push edx
test eax, eax
je 0x401977
cmp eax, 0xb7
je 0x401964
inc edi
jmp 0x401977
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
and eax, 0x10
push ecx
cmp eax, 1
adc edi, 0
mov ecx, dword [ebp - 0x29c]
lea eax, [esi + 2]
mov word [esi], cx
test cx, cx
jmp 0x401903
cmp dword [ebp - 0x27c], 0
je 0x4019ce
mov dword [esp], 0xffffffe6
call fcn.004016c9
mov eax, dword [0x40c8b4]
push esi
add eax, 0xb000
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00408323
push eax
push eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
cmp eax, 1
push edx
adc edi, 0
jmp 0x403b56
mov dword [esp], 0xfffffff5
jmp 0x401a73
mov dword [esp], 0
call fcn.00401469
push ecx
mov dword [esp], eax
call fcn.00408a8a
jmp 0x4023fb
mov dword [esp], 0xffffffd0
call fcn.00401469
push ecx
mov ebx, eax
mov dword [esp], 0xffffffdf
call fcn.00401469
push esi
mov esi, eax
mov dword [esp], 0x13
call fcn.00401469
push edi
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov edi, eax
push edx
push edx
test eax, eax
je 0x401a40
mov dword [esp], 0xffffffe3
jmp 0x402cdc
cmp dword [ebp - 0x278], 0
je 0x402b7a
mov dword [esp], ebx
call fcn.00408a8a
push edx
test eax, eax
je 0x402b7a
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00408a45
push esi
push esi
mov dword [esp], 0xffffffe4
call fcn.004016c9
push ebx
jmp 0x403b56
mov dword [esp], 0
call fcn.00401469
push ecx
mov ebx, eax
lea eax, [ebp - 0x268]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 4], 0x400
mov dword [esp + 8], eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
test eax, eax
je 0x401af1
mov eax, dword [ebp - 0x268]
xor edi, edi
cmp eax, ebx
jbe 0x401b01
cmp word [eax], 0
je 0x401b01
mov dword [esp], ebx
call fcn.00408a8a
push edx
test eax, eax
je 0x401af1
add eax, 0x2c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x268]
mov dword [esp], eax
call fcn.00408323
push esi
push esi
jmp 0x401b01
mov eax, dword [ebp - 0x2a0]
mov edi, 1
mov word [eax], 0
cmp dword [ebp - 0x278], 0
jne 0x403b56
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 8], 0x400
mov dword [esp + 4], eax
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
sub esp, 0xc
jmp 0x403b56
mov dword [esp], 0xffffffff
xor edi, edi
call fcn.00401469
mov ecx, dword [ebp - 0x29c]
lea edx, [ebp - 0x268]
push ebx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], 0x400
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
sub esp, 0x18
test eax, eax
jne 0x403b56
jmp 0x4036fa
mov dword [esp], 0xffffffef
call fcn.00401469
push ecx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00407e67
push edx
push edx
jmp 0x40336e
mov dword [esp], 0x31
call fcn.00401469
push ebx
mov ebx, dword [ebp - 0x280]
mov esi, eax
and ebx, 7
mov dword [esp], eax
call fcn.00407c1d
push edi
test eax, eax
je 0x401be2
mov dword [esp + 4], esi
mov dword [esp], 0x414100
call fcn.00408323
jmp 0x401c13
mov eax, dword [0x40c8b4]
mov dword [esp], 0x414100
add eax, 0xb000
mov dword [esp + 4], eax
call fcn.00408323
push edx
push edx
mov dword [esp], eax
call fcn.00408357
push ecx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.KERNEL32.dll_lstrcatW
push edi
push edi
mov dword [esp], 0x414100
call fcn.004083eb
push eax
cmp ebx, 2
jle 0x401c63
mov dword [esp], 0x414100
call fcn.00408a8a
xor edx, edx
push ecx
test eax, eax
je 0x401c54
lea edx, [ebp - 0x274]
add eax, 0x14
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
push edx
push edx
mov edx, eax
sub ebx, 3
or ebx, 0x80000000
test ebx, edx
je 0x401c84
jmp 0x401c67
test ebx, ebx
jne 0x401c78
mov dword [esp], 0x414100
xor ebx, ebx
call fcn.00407d6c
push edi
jmp 0x401c7d
cmp ebx, 1
je 0x401c84
mov eax, 2
jmp 0x401c8e
mov ebx, 1
mov eax, 1
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40000000
mov dword [esp], 0x414100
call fcn.00407e0f
sub esp, 0xc
mov edi, eax
cmp eax, 0xffffffff
jne 0x401d83
test ebx, ebx
je 0x401cd2
mov dword [esp + 4], esi
mov dword [esp], 0xffffffe2
call fcn.004072d3
cmp ebx, 2
push esi
push esi
jmp 0x403370
mov eax, dword [0x40c8b4]
mov dword [esp], 0x415100
mov dword [esp + 4], eax
call fcn.00408323
push eax
push eax
mov eax, dword [0x40c8b4]
mov dword [esp + 4], 0x414100
mov dword [esp], eax
call fcn.00408323
push eax
push eax
mov eax, dword [ebp - 0x26c]
mov dword [esp], 0x414900
mov dword [esp + 4], eax
call fcn.004084c8
push eax
push eax
mov eax, dword [0x40c8b4]
mov dword [esp + 4], 0x415100
mov dword [esp], eax
call fcn.00408323
mov eax, dword [ebp - 0x280]
push edx
push edx
sar eax, 3
mov dword [esp + 4], eax
mov dword [esp], 0x414900
call fcn.00407b45
push ecx
push ecx
cmp eax, 4
je 0x401c67
cmp eax, 5
jne 0x401d63
inc dword [0x414068]
jmp case.0x40175a.2
mov dword [esp + 4], 0x414100
mov dword [esp], 0xfffffffa
call fcn.004072d3
mov ebx, 0x7fffffff
push eax
push eax
jmp case.0x40175a.2
mov dword [esp + 4], esi
mov dword [esp], 0xffffffea
call fcn.004072d3
inc dword [0x414094]
push eax
push eax
mov eax, dword [ebp - 0x278]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00403df8
dec dword [0x414094]
mov ebx, eax
mov eax, dword [ebp - 0x274]
and eax, dword [ebp - 0x270]
sub esp, 0x10
inc eax
je 0x401df9
lea eax, [ebp - 0x274]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
sub esp, 0x10
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
test ebx, ebx
jns case.0x40175a.66
cmp ebx, 0xfffffffe
jne 0x401e38
mov dword [esp + 4], 0xffffffe9
mov dword [esp], 0x414100
call fcn.004084c8
push ebx
push ebx
mov dword [esp + 4], esi
mov dword [esp], 0x414100
call sub.KERNEL32.dll_lstrcatW
jmp 0x401e4c
mov dword [esp + 4], 0xffffffee
mov dword [esp], 0x414100
call fcn.004084c8
push ecx
push ecx
mov dword [esp + 4], 0x200010
mov dword [esp], 0x414100
jmp 0x4021e8
mov dword [esp], 0
jmp 0x401ebe
mov dword [esp], 0x31
call fcn.00401469
mov edx, dword [ebp - 0x280]
push edi
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00407b45
push edx
push edx
test eax, eax
je 0x402b7a
cmp dword [ebp - 0x278], eax
je 0x402093
cmp dword [ebp - 0x270], eax
jne case.0x40175a.66
mov ebx, dword [ebp - 0x26c]
jmp case.0x40175a.2
mov dword [esp], 0xfffffff0
call fcn.00401469
mov edx, dword [ebp - 0x27c]
push esi
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00408b76
jmp 0x402699
mov dword [esp], 1
call fcn.00401469
push ebx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
jmp 0x40265e
mov eax, 2
call fcn.00401434
mov ebx, eax
mov eax, 3
mov edi, edx
call fcn.00401434
mov dword [esp], 1
mov esi, eax
call fcn.00401469
push edx
mov dword [ebp - 0x2a0], eax
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
test edi, edi
cmove ebx, eax
push ecx
mov ecx, dword [ebp - 0x29c]
mov word [ecx], 0
test ebx, ebx
je case.0x40175a.66
test esi, esi
mov edx, dword [ebp - 0x2a0]
jns 0x401f55
add esi, eax
js case.0x40175a.66
cmp eax, esi
cmovg eax, esi
add eax, eax
add eax, edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408323
push edi
push edi
test ebx, ebx
jns 0x401f89
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
push esi
add ebx, eax
js 0x401f97
cmp ebx, 0x3ff
jg case.0x40175a.66
jmp 0x401f99
xor ebx, ebx
mov eax, dword [ebp - 0x29c]
mov word [eax + ebx*2], 0
jmp case.0x40175a.66
mov dword [esp], 0x20
call fcn.00401469
push edx
mov ebx, eax
mov dword [esp], 0x31
call fcn.00401469
cmp dword [ebp - 0x270], 0
push ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
jne 0x401fde
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
jmp 0x401fe4
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push edi
push edi
test eax, eax
jne 0x402093
jmp 0x40240b
mov dword [esp], 1
call fcn.00401469
push esi
mov ebx, eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], 0x400
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
sub esp, 0xc
test eax, eax
jne 0x402036
mov eax, dword [ebp - 0x29c]
mov edi, 1
mov word [eax], 0
jmp 0x40205e
cmp dword [ebp - 0x278], 0
jne 0x402043
xor edi, edi
jmp 0x40205e
mov eax, dword [ebp - 0x29c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push ebx
push ebx
test eax, eax
je 0x402024
jmp 0x40203f
mov eax, dword [ebp - 0x29c]
mov word [eax + 0x7fe], 0
jmp 0x403b56
xor eax, eax
mov esi, dword [ebp - 0x26c]
call fcn.00401434
mov ebx, eax
mov eax, 1
call fcn.00401434
test esi, esi
jne 0x4020af
cmp ebx, eax
jge 0x40209e
mov ebx, dword [ebp - 0x274]
jmp case.0x40175a.2
jle 0x40240b
mov ebx, dword [ebp - 0x270]
jmp case.0x40175a.2
cmp ebx, eax
jb 0x402093
jbe 0x40240b
jmp 0x4020a4
mov eax, 1
call fcn.00401434
mov ebx, eax
mov eax, 2
call fcn.00401434
mov edi, dword [ebp - 0x274]
mov ecx, eax
mov esi, eax
cmp edi, 0xd
ja case.default.0x4020e4
jmp dword [edi*4 + 0x40c114]
lea ecx, [eax + ebx]
jmp 0x402168
mov ecx, ebx
sub ecx, eax
jmp 0x402166
mov ecx, eax
imul ecx, ebx
jmp 0x402166
mov edi, 1
test eax, eax
je 0x402168
mov eax, ebx
cdq
idiv ecx
mov ecx, eax
jmp 0x402166
mov ecx, eax
or ecx, ebx
jmp 0x402166
mov ecx, eax
and ecx, ebx
jmp 0x402166
mov ecx, eax
xor ecx, ebx
jmp 0x402166
test ebx, ebx
sete cl
jmp 0x40212d
or ebx, eax
setne cl
movzx ecx, cl
jmp 0x402166
test ebx, ebx
setne cl
xor edx, edx
test esi, esi
setne dl
and ecx, edx
jmp 0x402166
mov edi, 1
test eax, eax
je 0x402168
mov eax, ebx
cdq
idiv ecx
mov ecx, edx
jmp 0x402166
mov ecx, eax
shl ebx, cl
jmp case.default.0x4020e4
mov ecx, eax
sar ebx, cl
jmp case.default.0x4020e4
mov ecx, eax
shr ebx, cl
mov ecx, ebx
xor edi, edi
mov dword [esp + 4], ecx
jmp 0x4023e0
mov dword [esp], 1
call fcn.00401469
push ecx
mov ebx, eax
mov eax, 2
call fcn.00401434
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_wsprintfW]
jmp case.0x40175a.66
mov edi, dword [ebp - 0x278]
mov ebx, dword [0x416900]
mov ecx, edi
test edi, edi
je 0x402232
dec ecx
test ebx, ebx
je 0x4021c7
mov ebx, dword [ebx]
test ecx, ecx
jne 0x4021b8
test ebx, ebx
jne 0x4021f2
mov dword [esp + 4], 0xffffffe8
mov dword [esp], 0
call fcn.004084c8
push edx
push edx
mov dword [esp + 4], 0x200010
mov dword [esp], eax
call fcn.00407b45
jmp 0x401d77
add ebx, 4
mov dword [esp], 0x414100
mov dword [esp + 4], ebx
call fcn.00408323
push eax
push eax
mov eax, dword [0x416900]
add eax, 4
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00408323
push eax
push eax
mov eax, dword [0x416900]
add eax, 4
mov dword [esp + 4], 0x414100
jmp 0x403729
test esi, esi
je 0x402261
test ebx, ebx
je 0x402b7a
lea eax, [ebx + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408323
push eax
push eax
mov eax, dword [ebx]
mov dword [0x416900], eax
jmp 0x40297a
mov dword [esp + 4], 0x804
mov dword [esp], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push esi
mov ebx, eax
mov eax, dword [ebp - 0x280]
push esi
mov dword [esp + 4], eax
lea eax, [ebx + 4]
mov dword [esp], eax
call fcn.004084c8
push eax
push eax
mov eax, dword [0x416900]
mov dword [ebx], eax
mov dword [0x416900], ebx
jmp 0x403b56
mov eax, 3
call fcn.00401434
mov ebx, eax
mov eax, 4
call fcn.00401434
mov esi, eax
test byte [ebp - 0x26c], 1
je 0x4022d3
mov dword [esp], 0x33
call fcn.00401469
push ebx
mov ebx, eax
test byte [ebp - 0x26c], 2
je 0x4022eb
mov dword [esp], 0x44
call fcn.00401469
push ecx
mov esi, eax
cmp dword [ebp - 0x284], 0x21
jne 0x40237d
mov eax, 1
call fcn.00401434
mov dword [ebp - 0x2a0], eax
mov eax, 2
call fcn.00401434
mov edi, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x2a0]
sar edi, 2
je 0x40235d
lea edx, [ebp - 0x268]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
sub esp, 0x1c
test eax, eax
sete al
movzx eax, al
mov edi, eax
jmp 0x4023c9
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x268], eax
sub esp, 0x10
jmp 0x4023c9
mov dword [esp], 1
call fcn.00401469
push edi
mov edi, eax
mov dword [esp], 0x12
call fcn.00401469
push edx
cmp word [eax], 0
jne 0x4023a1
xor eax, eax
cmp word [edi], 0
jne 0x4023a9
xor edi, edi
mov dword [esp + 8], edi
xor edi, edi
mov dword [esp + 0xc], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [ebp - 0x268], eax
sub esp, 0x10
cmp dword [ebp - 0x280], 0
js 0x403b56
mov eax, dword [ebp - 0x268]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
jmp 0x403a1b
xor eax, eax
call fcn.00401434
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsWindow]
push esi
test eax, eax
je 0x40240b
mov ebx, dword [ebp - 0x27c]
jmp case.0x40175a.2
mov ebx, dword [ebp - 0x278]
jmp case.0x40175a.2
mov eax, 2
call fcn.00401434
mov ebx, eax
mov eax, 1
call fcn.00401434
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push ebx
jmp 0x402838
xor eax, eax
add esi, dword [0x416968]
call fcn.00401434
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffffeb
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x403b51
test byte [ebp - 0x273], 1
je 0x40247c
mov eax, 2
call fcn.00401434
jmp 0x402497
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push ecx
push ecx
mov ebx, eax
mov eax, dword [ebp - 0x274]
mov ecx, eax
mov edx, eax
mov edi, eax
and ecx, 4
shr edx, 0x1e
and edi, 3
mov dword [ebp - 0x2a4], ecx
mov ecx, eax
and edx, 1
shr ecx, 0x1f
bt eax, 0x10
mov esi, edx
mov dword [ebp - 0x2a8], ecx
jae 0x4024d9
mov dword [esp], 0x11
call fcn.00401469
push edx
jmp 0x4024e0
movzx eax, word [ebp - 0x27c]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x268]
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [ebp - 0x274]
mov edx, dword [ebp - 0x25c]
push eax
imul edx, esi
push eax
and ecx, 0xfef0
mov eax, dword [ebp - 0x2a8]
xor esi, esi
imul eax, dword [ebp - 0x260]
cmp dword [ebp - 0x2a4], 0
je 0x40252e
mov esi, dword [0x434588]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp], esi
mov dword [esp + 8], edi
mov dword [esp + 4], eax
call dword [sym.imp.USER32.dll_LoadImageW]
sub esp, 0x18
mov esi, eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0x172
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
test eax, eax
je 0x402584
test edi, edi
jne 0x402584
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push eax
cmp dword [ebp - 0x280], 0
js case.0x40175a.66
mov dword [esp + 4], esi
jmp 0x40283c
mov eax, dword [ebp - 0x2a4]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDC]
push ecx
mov ebx, eax
mov dword [esp + 4], 0x5a
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push esi
push esi
mov esi, eax
mov eax, 2
call fcn.00401434
mov dword [esp + 8], 0x48
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
sub esp, 0xc
mov dword [0x4140a0], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, 3
push edi
push edi
call fcn.00401434
mov dword [esp], 0x4140bc
mov dword [0x4140b0], eax
mov eax, dword [ebp - 0x270]
mov byte [0x4140b7], 1
mov edx, eax
and edx, 1
mov byte [0x4140b4], dl
mov edx, eax
and eax, 4
mov byte [0x4140b6], al
mov eax, dword [ebp - 0x27c]
and edx, 2
mov byte [0x4140b5], dl
mov dword [esp + 4], eax
call fcn.004084c8
push eax
push eax
mov dword [esp], 0x4140a0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push edx
jmp 0x402838
xor eax, eax
call fcn.00401434
mov ebx, eax
mov eax, 1
call fcn.00401434
mov edi, dword [ebp - 0x274]
mov dword [esp], ebx
mov dword [esp + 4], eax
test edi, edi
jne 0x402693
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x403a57
call dword [sym.imp.USER32.dll_EnableWindow]
push eax
push eax
jmp case.0x40175a.66
mov dword [esp], 0
call fcn.00401469
push ecx
mov esi, eax
mov dword [esp], 0x31
call fcn.00401469
push ebx
mov edi, eax
mov dword [esp], 0x22
call fcn.00401469
push edx
mov ebx, eax
mov dword [esp], 0x15
call fcn.00401469
push ecx
mov dword [esp], 0xffffffec
call fcn.004016c9
push eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x24c], eax
cmp word [esi], 0
jne 0x402713
xor esi, esi
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x258], edi
cmp word [ebx], 0
jne 0x402727
xor ebx, ebx
mov eax, dword [0x40c8b4]
mov dword [ebp - 0x254], ebx
mov edi, 1
add eax, 0xb000
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x268]
mov dword [esp], eax
call fcn.00407af4
push edx
test eax, eax
je 0x403b56
xor edi, edi
test byte [ebp - 0x264], 0x40
je 0x403b56
mov eax, dword [ebp - 0x230]
mov dword [esp], eax
call fcn.00408f8b
push eax
mov eax, dword [ebp - 0x230]
mov dword [esp], eax
jmp 0x4027f7
mov dword [esp], 0
call fcn.00401469
push ecx
mov ebx, eax
mov dword [esp + 4], eax
mov dword [esp], 0xffffffeb
call fcn.004072d3
push esi
push esi
mov dword [esp], ebx
call fcn.00407a72
mov ebx, eax
push edi
test eax, eax
je 0x402b7a
mov edi, dword [ebp - 0x278]
test edi, edi
je 0x4027f4
mov dword [esp], eax
call fcn.00408f8b
cmp dword [ebp - 0x27c], 0
push edx
js 0x4027ea
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.0040823c
push edi
push edi
xor edi, edi
jmp 0x4027f4
test eax, eax
setne al
movzx eax, al
mov edi, eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x401a78
mov dword [esp], 2
call fcn.00401469
push ebx
mov dword [esp], eax
call fcn.00408a8a
mov ebx, eax
push esi
test eax, eax
je 0x402847
mov eax, dword [eax + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.0040823c
push ecx
push ecx
mov eax, dword [ebx + 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
jmp 0x403668
mov eax, dword [ebp - 0x29c]
mov word [eax], 0
jmp 0x403aed
mov dword [esp], 0xffffffee
call fcn.00401469
push esi
mov esi, eax
mov dword [esp], 0xa
call fcn.00408e86
lea edx, [ebp - 0x28c]
push edi
mov dword [esp + 4], edx
mov dword [esp], esi
call eax
mov edi, eax
mov eax, dword [ebp - 0x29c]
push edx
push edx
mov word [eax], 0
mov eax, dword [ebp - 0x2a0]
mov word [eax], 0
test edi, edi
je 0x402b7a
mov dword [esp + 4], edi
mov dword [esp], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push ebx
push ebx
mov ebx, eax
test eax, eax
je 0x402b7a
mov dword [esp], 0xb
call fcn.00408e86
push edx
mov dword [ebp - 0x2a8], eax
mov dword [esp], 0xc
call fcn.00408e86
push ecx
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2a4], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], esi
call ecx
mov edx, dword [ebp - 0x2a4]
sub esp, 0x10
test eax, eax
jne 0x402916
mov edi, 1
jmp 0x40297a
lea eax, [ebp - 0x268]
mov dword [esp + 4], 0x40c000
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 8], eax
mov dword [esp], ebx
call edx
sub esp, 0x10
test eax, eax
je 0x40290f
mov eax, dword [ebp - 0x288]
mov eax, dword [eax + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.0040823c
mov eax, dword [ebp - 0x288]
push edi
push edi
mov eax, dword [eax + 0xc]
xor edi, edi
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.0040823c
push eax
push eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x401a78
cmp dword [section..bss], 0
js 0x402ab0
mov dword [esp], 0xfffffff0
call fcn.00401469
push ebx
mov edi, eax
mov dword [esp], 1
call fcn.00401469
cmp dword [ebp - 0x270], 0
push esi
mov esi, eax
jne 0x4029e3
mov dword [esp + 8], 8
mov dword [esp + 4], 0
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
sub esp, 0xc
mov ebx, eax
test eax, eax
jne 0x4029f3
jmp 0x402aa4
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ebx, eax
push ecx
test eax, eax
je 0x4029bc
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00408f43
push edx
push edx
test eax, eax
je 0x402a61
mov edi, dword [ebp - 0x278]
test edi, edi
je 0x402a32
mov dword [esp], edi
mov dword [ebp - 0x29c], eax
call fcn.004016c9
mov eax, dword [ebp - 0x29c]
push edi
call eax
test eax, eax
setne al
movzx eax, al
mov edi, eax
jmp 0x402a78
mov ecx, dword [0x40c8b4]
mov dword [esp + 0x10], 0x40b000
mov dword [esp + 0xc], 0x416900
mov dword [esp + 8], ecx
mov ecx, dword [ebp - 0x2a4]
mov dword [esp + 4], 0x400
mov dword [esp], ecx
call eax
jmp 0x402a78
mov dword [esp + 4], esi
mov edi, 1
mov dword [esp], 0xfffffff7
call fcn.004072d3
push esi
push esi
cmp dword [ebp - 0x274], 0
jne 0x403b56
mov dword [esp], ebx
call fcn.00404bcf
push ecx
test eax, eax
je 0x403b56
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x401a78
mov dword [esp], 0xfffffff6
jmp 0x402b74
mov dword [esp], 0xffffffe7
jmp 0x402b74
mov dword [esp], 0xfffffff0
call fcn.00401469
push esi
mov dword [ebp - 0x2a0], eax
mov dword [esp], 0xffffffdf
call fcn.00401469
push edi
mov esi, eax
mov dword [esp], 2
call fcn.00401469
push edx
mov dword [ebp - 0x2a4], eax
mov dword [esp], 0xffffffcd
call fcn.00401469
push ecx
mov dword [ebp - 0x29c], eax
mov dword [esp], 0x45
call fcn.00401469
mov edi, dword [ebp - 0x270]
push ebx
mov dword [ebp - 0x2a8], eax
mov dword [esp], esi
call fcn.00407c1d
push edx
test eax, eax
jne 0x402b37
mov dword [esp], 0x21
call fcn.00401469
push ebx
lea eax, [ebp - 0x288]
mov dword [esp + 0xc], 0x412580
mov dword [esp + 0x10], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x40deb0
call dword [sym.imp.ole32.dll_CoCreateInstance]
sub esp, 0x14
test eax, eax
jns 0x402b84
mov dword [esp], 0xfffffff0
call fcn.004016c9
push ecx
mov edi, 1
jmp 0x403b56
mov eax, dword [ebp - 0x288]
lea ecx, [ebp - 0x268]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 4], 0x411b80
mov dword [esp], eax
call dword [edx]
sub esp, 0xc
mov ebx, eax
test eax, eax
js 0x402cbe
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [edx + 0x50]
bt edi, 0xf
mov ebx, eax
push edx
push edx
jb 0x402bea
mov edx, dword [ebp - 0x288]
mov eax, dword [0x40c8b4]
mov ecx, dword [edx]
add eax, 0xb000
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [ecx + 0x24]
push eax
push eax
mov eax, edi
sar eax, 0xc
and eax, 7
je 0x402c08
mov edx, dword [ebp - 0x288]
mov ecx, dword [edx]
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [ecx + 0x3c]
push eax
push eax
mov eax, dword [ebp - 0x288]
mov ecx, edi
shr ecx, 0x10
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x34]
push eax
push eax
mov eax, dword [ebp - 0x29c]
cmp word [eax], 0
je 0x402c52
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x29c]
and edi, 0xfff
mov edx, dword [eax]
mov dword [esp + 8], edi
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x44]
sub esp, 0xc
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x2c]
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2a8]
push edi
push edi
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x1c]
push eax
push eax
test ebx, ebx
js 0x402caf
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [eax]
mov dword [esp + 8], 1
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x18]
sub esp, 0xc
mov ebx, eax
mov eax, dword [ebp - 0x268]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push esi
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push ecx
test ebx, ebx
js 0x402b6d
mov dword [esp], 0xfffffff4
call fcn.004016c9
jmp 0x4017ff
mov dword [esp], 0
call fcn.00401469
push edi
mov ebx, eax
mov dword [esp], 0x11
call fcn.00401469
push edx
mov esi, eax
mov dword [esp], 0x23
call fcn.00401469
push ecx
mov edi, eax
mov dword [esp], ebx
call fcn.00408a8a
push edx
test eax, eax
je 0x402da5
mov dword [esp], ebx
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x268], eax
call sub.KERNEL32.dll_lstrlenW
push edx
mov word [ebx + eax*2 + 2], 0
mov dword [esp], esi
call sub.KERNEL32.dll_lstrlenW
push ecx
mov word [esi + eax*2 + 2], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x260], ebx
mov dword [esp + 4], edi
mov dword [esp], 0
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x24e], edi
mov word [ebp - 0x258], ax
call fcn.004072d3
lea eax, [ebp - 0x268]
push ebx
push ebx
mov dword [esp], eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov edi, eax
push esi
test eax, eax
je 0x403b56
mov dword [esp + 4], 0
mov dword [esp], 0xfffffff9
call fcn.004072d3
push ebx
push ebx
jmp 0x402b7a
cmp ebx, 0xbadf00d
jne 0x4021c7
inc dword [0x414074]
jmp case.0x40175a.66
xor esi, esi
test ebx, ebx
je 0x402dec
mov dword [esp], 0
call fcn.00401469
push ecx
mov esi, eax
xor ebx, ebx
cmp dword [ebp - 0x27c], 0
je 0x402e06
mov dword [esp], 0x11
call fcn.00401469
push edx
mov ebx, eax
xor edi, edi
cmp dword [ebp - 0x270], 0
je 0x402e20
mov dword [esp], 0x22
call fcn.00401469
push edi
mov edi, eax
mov dword [esp], 0xffffffcd
call fcn.00401469
push ecx
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
sub esp, 0x10
jmp 0x40336e
mov dword [esp], 1
mov dword [ebp - 0x268], 0xa
call fcn.00401469
push esi
mov esi, eax
mov dword [esp], 0x12
call fcn.00401469
push edi
mov ebx, eax
xor edi, edi
mov dword [esp], 0xffffffdd
call fcn.00401469
push edx
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0x10], 0x3ff
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x268]
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [ebp - 0x29c]
sub esp, 0x18
cmp word [eax], 0xa
jne 0x403b56
jmp 0x403af3
cmp dword [ebp - 0x270], 0
jne 0x402f10
mov dword [esp], 2
call fcn.004014bf
mov esi, eax
push ebx
test eax, eax
je 0x402b7a
mov dword [esp], 0x33
call fcn.00401469
push edi
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push edx
mov ebx, eax
push edx
mov dword [esp], esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
jmp 0x402f89
mov dword [esp], 0x22
call fcn.00401469
push ebx
mov ebx, eax
mov eax, dword [ebp - 0x270]
sar eax, 1
mov dword [ebp - 0x268], eax
cmp word [ebx], 0
je 0x402b7a
or eax, 0x100020
mov dword [ebp - 0x268], eax
test esi, esi
js 0x402f52
add esi, dword [0x414064]
sub esi, 0x7fffffff
lea eax, [ebp - 0x268]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.00408049
push ecx
push ecx
test eax, eax
je 0x402b7a
mov edx, dword [ebp - 0x268]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], edx
call fcn.00401523
sub esp, 0xc
mov ebx, eax
test ebx, ebx
setne al
movzx eax, al
mov edi, eax
jmp 0x403b56
mov dword [esp], 2
mov esi, dword [ebp - 0x270]
mov edi, dword [ebp - 0x26c]
call fcn.00401469
push ecx
mov dword [ebp - 0x29c], eax
mov dword [esp], 0x11
call fcn.00401469
push edx
mov edx, eax
test ebx, ebx
js 0x402fd6
add ebx, dword [0x414064]
sub ebx, 0x7fffffff
lea eax, [ebp - 0x268]
mov dword [esp + 8], 0x100022
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
mov dword [esp], ebx
call fcn.0040811e
sub esp, 0x10
test eax, eax
jne 0x402b7a
mov ebx, dword [ebp - 0x268]
test ebx, ebx
je 0x402b7a
cmp esi, 1
jne 0x403031
mov dword [esp], 0x23
call fcn.00401469
push esi
mov dword [esp], 0x415100
call sub.KERNEL32.dll_lstrlenW
inc eax
push edx
add eax, eax
jmp 0x40307c
cmp esi, 4
je 0x403068
xor eax, eax
cmp esi, 3
jne 0x40307c
mov eax, dword [ebp - 0x274]
mov dword [esp + 0xc], 0x1800
mov dword [esp + 8], 0x415100
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00403df8
sub esp, 0x10
jmp 0x40307c
mov eax, 3
call fcn.00401434
mov dword [0x415100], eax
mov eax, 4
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0x415100
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
sub esp, 0x18
test eax, eax
setne al
movzx eax, al
mov edi, eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x401a78
mov dword [esp], 0x20019
call fcn.004014bf
push edx
mov ebx, eax
mov dword [esp], 0x33
call fcn.00401469
push ecx
mov ecx, dword [ebp - 0x29c]
mov word [ecx], 0
test ebx, ebx
je 0x402b7a
lea edx, [ebp - 0x288]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x268]
mov dword [ebp - 0x288], 0x800
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x403142
mov eax, dword [ebp - 0x268]
lea edx, [eax - 1]
cmp edx, 1
jbe 0x403157
cmp eax, 4
je 0x403157
mov eax, dword [ebp - 0x29c]
mov edi, 1
mov word [eax], 0
jmp 0x4030b4
mov edi, dword [ebp - 0x270]
cmp eax, 4
jne 0x4031ed
xor eax, eax
test edi, edi
sete al
mov edi, eax
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.0040823c
push eax
push eax
jmp 0x4030b4
mov dword [esp], 0x20019
call fcn.004014bf
push esi
mov ebx, eax
mov eax, 3
call fcn.00401434
mov ecx, dword [ebp - 0x29c]
mov word [ecx], 0
test ebx, ebx
je 0x402b7a
cmp dword [ebp - 0x270], 0
mov dword [ebp - 0x268], 0x3ff
je 0x403201
mov dword [esp + 0xc], 0x3ff
xor edi, edi
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
sub esp, 0x10
mov eax, dword [ebp - 0x29c]
mov word [eax + 0x7fe], 0
jmp 0x4030b4
mov ecx, dword [ebp - 0x29c]
lea edx, [ebp - 0x268]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
sub esp, 0x20
test eax, eax
setne al
movzx eax, al
mov edi, eax
jmp 0x4031ed
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408261
push ebx
test eax, eax
je case.0x40175a.66
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4017ff
mov dword [esp], 0xffffffed
call fcn.00401469
mov edx, dword [ebp - 0x278]
push ecx
mov dword [esp + 8], edx
mov edx, dword [ebp - 0x27c]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00407e0f
sub esp, 0xc
cmp eax, 0xffffffff
jne 0x402838
jmp 0x4036fa
mov ebx, dword [ebp - 0x278]
test ebx, ebx
je 0x4032d7
mov eax, 1
call fcn.00401434
mov word [0x414900], ax
xor eax, eax
cmp edi, 0x38
setne al
mov esi, eax
inc esi
jmp 0x403330
cmp edi, 0x38
jne 0x403317
mov dword [esp], 0x21
call fcn.00401469
push eax
mov dword [esp + 8], 0x400
mov dword [esp + 4], 0x414900
mov dword [esp], 0x415100
call fcn.0040839e
mov dword [esp], 0x414900
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
push edx
jmp 0x403330
mov dword [esp], 0x11
call fcn.00401469
push ecx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
push esi
lea esi, [eax + eax]
mov eax, dword [ebp - 0x29c]
cmp word [eax], 0
je 0x402b7a
mov dword [esp], eax
call fcn.00408261
push edx
mov edx, eax
xor eax, eax
cmp edi, 0x38
sete al
or eax, ebx
je 0x403378
mov dword [esp + 8], esi
mov dword [esp + 4], 0x414900
mov dword [esp], edx
call fcn.00407f1b
sub esp, 0xc
test eax, eax
sete al
jmp 0x402f8e
cmp dword [ebp - 0x274], 0
je 0x403357
mov dword [esp + 4], edx
mov dword [esp], edx
mov dword [ebp - 0x29c], edx
call fcn.00407f61
mov edx, dword [ebp - 0x29c]
test eax, eax
push ebx
push ebx
jns 0x403357
jmp 0x402b7a
mov eax, 2
call fcn.00401434
test eax, eax
jle case.0x40175a.66
mov ecx, dword [ebp - 0x29c]
xor edi, edi
cmp word [ecx], 0
je 0x4035f1
mov dword [esp], ecx
cmp eax, 0x3ff
mov edi, 0x3ff
cmovle edi, eax
xor ebx, ebx
call fcn.00408261
mov word [ebp - 0x2a4], 0
push ecx
mov esi, eax
mov dword [ebp - 0x29c], 2
cmp dword [ebp - 0x284], 0x39
mov edx, dword [ebp - 0x274]
jne 0x4034fc
lea eax, [ebp - 0x268]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov eax, 2
sub eax, edx
mov dword [esp], esi
mov dword [esp + 8], eax
lea eax, [ebp - 0x288]
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x4035ef
mov eax, dword [ebp - 0x268]
test eax, eax
je 0x4035ef
mov dword [ebp - 0x29c], eax
movzx eax, byte [ebp - 0x288]
cmp dword [ebp - 0x274], 0
mov word [ebp - 0x28c], ax
jne 0x403543
lea eax, [ebp - 0x28c]
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x268]
mov dword [esp + 4], 8
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 8], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
sub esp, 0x18
test eax, eax
jne 0x403543
dec dword [ebp - 0x268]
mov word [ebp - 0x28c], 0xfffd
je 0x403543
dec dword [ebp - 0x29c]
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], 1
neg eax
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
jmp 0x403472
or edx, ebx
je 0x403526
lea eax, [ebp - 0x28c]
mov dword [esp + 8], 2
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00407ed5
sub esp, 0xc
test eax, eax
jne 0x403543
jmp 0x4035ef
mov dword [esp + 4], 0
mov dword [esp], esi
call fcn.00407f61
push edx
push edx
test eax, eax
jns 0x403500
xor ebx, ebx
jmp 0x4035ef
cmp dword [ebp - 0x274], 0
movzx eax, word [ebp - 0x28c]
je 0x40356c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.0040823c
push eax
push eax
jmp 0x403b5c
lea edx, [ebx + ebx]
add edx, dword [ebp - 0x2a0]
cmp word [ebp - 0x2a4], 0xd
je 0x403589
cmp word [ebp - 0x2a4], 0xa
jne 0x4035ce
cmp word [ebp - 0x2a4], ax
je 0x40359e
cmp ax, 0xd
je 0x4035c8
cmp ax, 0xa
je 0x4035c8
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
neg eax
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
jmp 0x4035ef
mov word [edx], ax
inc ebx
jmp 0x4035ef
mov ecx, dword [ebp - 0x2a0]
inc ebx
mov word [ecx + ebx*2 - 2], ax
test ax, ax
je 0x4035ef
cmp edi, ebx
je 0x4035f1
mov word [ebp - 0x2a4], ax
jmp 0x4033f5
mov edi, ebx
mov eax, dword [ebp - 0x2a0]
test edi, edi
mov word [eax + edi*2], 0
jmp 0x403370
mov eax, dword [ebp - 0x29c]
cmp word [eax], 0
je case.0x40175a.66
mov eax, 2
mov esi, dword [ebp - 0x274]
call fcn.00401434
mov ebx, eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408261
push edi
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
cmp dword [ebp - 0x27c], 0
js case.0x40175a.66
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.0040823c
jmp 0x402699
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408261
push ebx
test eax, eax
je case.0x40175a.66
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x4017ff
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408261
push ecx
test eax, eax
je 0x4036fa
lea edx, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push edx
push edx
test eax, eax
je 0x4036fa
jmp 0x403719
mov dword [esp], 2
call fcn.00401469
lea edx, [ebp - 0x268]
push esi
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push edi
push edi
cmp eax, 0xffffffff
jne 0x403705
mov eax, dword [ebp - 0x2a0]
mov word [eax], 0
mov eax, dword [ebp - 0x29c]
jmp 0x403af3
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.0040823c
push ebx
push ebx
lea eax, [ebp - 0x23c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408323
jmp 0x402699
mov dword [esp], 0xfffffff0
call fcn.00401469
push edx
mov esi, eax
mov dword [esp], eax
call fcn.00407c1d
push ecx
test eax, eax
jne 0x40375f
mov dword [esp], 0xffffffed
call fcn.00401469
push eax
mov dword [esp], esi
call fcn.00407d6c
push edi
mov dword [esp + 8], 2
mov dword [esp + 4], 0x40000000
mov dword [esp], esi
call fcn.00407e0f
mov dword [ebp - 0x29c], eax
sub esp, 0xc
inc eax
jne 0x4037a5
mov dword [esp], esi
mov edi, 1
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, 0xffffffef
push ebx
jmp 0x403901
mov eax, dword [0x416928]
mov dword [esp], 0x40
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x2a0], eax
mov dword [esp + 4], eax
call edi
mov edx, 0xfffffd66
push ecx
mov ebx, eax
push ecx
test eax, eax
je 0x4038d6
mov dword [esp], 0
call fcn.00403dc6
push eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00403d9e
push eax
push eax
mov eax, dword [ebp - 0x278]
mov dword [esp], 0x40
mov dword [esp + 4], eax
call edi
mov edi, eax
push edx
push edx
test eax, eax
je 0x403882
mov eax, dword [ebp - 0x278]
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.00403df8
mov eax, edi
sub esp, 0x10
cmp byte [eax], 0
je 0x403878
mov ecx, dword [eax]
lea edx, [eax + 8]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [ebp - 0x2a8], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2a4], edx
add ecx, ebx
mov dword [esp], ecx
call fcn.00407d4f
mov edx, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x2a8]
sub esp, 0xc
lea eax, [edx + ecx]
jmp 0x403839
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00407f1b
sub esp, 0xc
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0xffffffff
call fcn.00403df8
sub esp, 0x10
mov edx, eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x2a0], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x2a0]
push eax
test edx, edx
js 0x40378c
mov eax, 0xfffffff3
xor edi, edi
mov dword [esp], eax
jmp 0x401a73
xor eax, eax
call fcn.00401434
mov ebx, eax
cmp eax, dword [0x41694c]
jae 0x402b7a
mov edi, dword [ebp - 0x278]
imul esi, eax, 0x818
add esi, dword [0x416948]
test edi, edi
js 0x403958
jne 0x403950
mov eax, dword [ebp - 0x2a0]
add esi, 0x18
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00408323
jmp 0x403a57
mov eax, dword [esi + edi*4]
jmp 0x40365e
mov ecx, edi
not ecx
mov dword [ebp - 0x278], ecx
test ecx, ecx
je 0x403978
mov eax, 1
call fcn.00401434
mov dword [ebp - 0x27c], eax
jmp 0x403996
mov eax, dword [ebp - 0x270]
mov dword [esp + 4], eax
lea eax, [esi + 0x18]
mov dword [esp], eax
call fcn.004084c8
push edi
push edi
or dword [esi + 8], 0x100
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x278]
mov dword [esi + eax*4], edx
cmp dword [ebp - 0x274], 0
je case.0x40175a.66
mov dword [esp], ebx
call fcn.00401248
jmp 0x4017ff
xor eax, eax
call fcn.00401434
cmp eax, 0x1f
ja 0x402b7a
cmp dword [ebp - 0x274], 0
mov edi, dword [ebp - 0x278]
je 0x403a25
test edi, edi
je 0x403a04
mov dword [esp], eax
call fcn.0040135c
push ecx
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004012a7
jmp 0x402699
mov dword [esp], 0
call fcn.004013b5
push edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.0040823c
jmp 0x403a57
test edi, edi
mov edx, dword [0x416930]
lea eax, [eax + 0x24]
je 0x403a41
mov ecx, dword [ebp - 0x27c]
mov dword [edx + eax*4 + 4], ecx
jmp case.0x40175a.66
mov eax, dword [edx + eax*4 + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.004084c8
push eax
push eax
jmp 0x403b56
mov dword [esp], 5
call fcn.00408e86
push ecx
mov ebx, eax
mov dword [esp], 0x22
call fcn.00401469
push esi
test ebx, ebx
je 0x403aed
lea esi, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 4], esi
call dword [sym.imp.ole32.dll_IIDFromString]
push edx
push edx
test eax, eax
js 0x403aed
lea eax, [ebp - 0x288]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x274]
mov dword [esp], esi
mov dword [esp + 4], eax
call ebx
sub esp, 0x10
test eax, eax
js 0x403aed
mov eax, dword [ebp - 0x288]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], eax
call fcn.00408323
push eax
push eax
mov eax, dword [ebp - 0x288]
mov dword [esp], eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x4017ff
mov eax, dword [ebp - 0x2a0]
mov word [eax], 0
jmp 0x402b7a
mov eax, dword [ebp - 0x2a4]
and ebx, dword [0x435de0]
mov dword [esp + 0xc], 0
mov dword [esp + 8], ebx
mov dword [esp + 4], 0xb
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
cmp dword [ebp - 0x280], 0
je case.0x40175a.66
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_InvalidateRect]
sub esp, 0xc
xor edi, edi
add dword [0x414068], edi
xor ebx, ebx
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 4