Function at 0x4245b0
Capabilities:
Check for time delay via gettickcount
Empty the recycle bin
Move file
Print debug messages
Resolve function by parsing pe exports
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x4ccf8b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x568
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
xor edi, edi
mov dword [esp + 0x9c], ecx
cmp eax, edi
jne 0x4245eb
lea eax, [esp + 0x98]
mov ebx, dword [0x4ec48c]
mov edx, eax
mov esi, ecx
mov dword [esp + 0x70], eax
mov dword [edx], edi
mov dword [esp + 0x74], ebx
mov dword [esp + 0x38], esi
cmp ecx, edi
je 0x424905
jmp 0x424610
cmp dword [0x4f2360], edi
je 0x424644
cmp dword [0x4f2350], edi
je 0x424632
mov eax, dword [0x4f2348]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4f2350], edi
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x4f2360], edi
mov dword [0x4f2348], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x4ec48c]
mov edi, eax
mov ecx, edi
sub ecx, dword [0x4f2304]
cmp ecx, dword [edx + 0xb8]
jbe 0x424696
push 0
push 0
push 0
push 0
lea eax, [esp + 0x134]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x424688
push 1
push 0xffffffffffffffff
call fcn.00401910
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov dword [0x4f2304], edi
cmp byte [ebx + 0xcc], 0
jne 0x4246c7
cmp byte [ebx + 0xce], 0
jne 0x4246c7
mov ecx, dword [0x4f22f8]
cmp ecx, 0xffffffff
jle 0x4246c7
mov eax, dword [ebx + 0x28]
cmp eax, ecx
jle 0x4246c3
mov byte [ebx + 0xcc], 1
jmp 0x4246c7
inc eax
mov dword [ebx + 0x28], eax
call fcn.00401220
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
cmp eax, 0xffffffff
jl 0x4246ef
jg 0x4246dd
cmp ecx, 0xffffffff
jbe 0x4246ef
cmp dword [0x4f22f4], eax
jg 0x424701
jl 0x4246ef
cmp dword [0x4f22f0], ecx
jae 0x424701
mov eax, dword [ebx + 0x24]
cmp eax, 0xffffffff
jle 0x42470d
sub edi, dword [0x4f2300]
cmp edi, eax
jb 0x42470d
push 1
push 0xa
call fcn.00401910
add esp, 8
cmp byte [ebx + 0xd8], 0
je 0x424738
jmp 0x424720
push 1
push 0x8000012f
call fcn.00401910
add esp, 8
cmp byte [ebx + 0xd8], 0
jne 0x424720
mov dword [0x4f2048], esi
cmp byte [ebx + 0xd9], 0
je 0x424780
mov ecx, dword [0x4f15ac]
mov dword [ecx*4 + 0x4f15b0], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x4f15ac]
mov dword [ecx*4 + 0x4f04d0], eax
inc ecx
mov dword [0x4f15ac], ecx
cmp ecx, 0x190
jl 0x424780
mov dword [0x4f15ac], 0
movzx eax, word [esi]
cmp eax, 1
je 0x4247af
cmp eax, 0x6b
je 0x4247af
cmp eax, 0x72
je 0x4247af
mov edi, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push edi
push esi
call fcn.00458340
mov dword [esp + 0x48], eax
cmp eax, 1
jne 0x42490a
jmp 0x4247b2
mov edi, dword [ebp + 0xc]
movzx eax, word [esi]
cmp eax, 9
jb 0x424921
cmp eax, 0x20
ja 0x424921
add dword [0x4f22f0], 1
push esi
adc dword [0x4f22f4], 0
call fcn.00429790
mov ebx, 3
cmp eax, ebx
jne 0x424874
mov ecx, dword [esi + 0x18]
cmp word [ecx], 0x73
jne 0x424812
mov ecx, dword [ecx + 0x18]
lea edx, [esp + 0x50]
push edx
push edi
push 2
call fcn.004245b0
mov edx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
mov ecx, dword [esi + 0x18]
cmp edx, ecx
je 0x4247f1
jmp 0x424826
lea eax, [esp + 0x50]
push eax
push edi
push ebx
call fcn.004245b0
mov edx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
cmp edx, esi
je 0x428238
cmp dword [ebp + 8], ebx
je 0x428d87
cmp eax, 1
jne 0x428d87
test edx, edx
je 0x424859
mov ecx, dword [edx + 0x20]
cmp ecx, dword [esi + 0x20]
jne 0x428d7c
mov dword [esp + 0x38], edx
jmp 0x428234
mov esi, dword [esi + 0x1c]
cmp word [esi], 0x21
mov dword [esp + 0x38], esi
jne 0x428234
mov edx, esi
mov eax, dword [edx + 0x1c]
jmp 0x428230
mov esi, dword [esi + 0x1c]
cmp word [esi], 0x21
mov dword [esp + 0x38], esi
jne 0x4248fc
mov ecx, dword [esi + 0x18]
cmp word [ecx], 0x73
jne 0x4248b1
lea ebx, [ebx]
mov ecx, dword [ecx + 0x18]
lea edx, [esp + 0x50]
push edx
push edi
push 2
call fcn.004245b0
mov edx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
mov ecx, dword [esi + 0x18]
cmp edx, ecx
je 0x424890
jmp 0x4248c5
lea eax, [esp + 0x50]
push eax
push edi
push ebx
call fcn.004245b0
mov edx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
cmp dword [ebp + 8], ebx
je 0x428d87
cmp eax, 1
jne 0x428d87
test edx, edx
je 0x4248f0
mov ecx, dword [edx + 0x20]
cmp ecx, dword [esi + 0x20]
jne 0x428da7
mov dword [esp + 0x38], edx
jmp 0x428234
mov edx, dword [esi + 0x1c]
mov dword [esp + 0x38], edx
jmp 0x428234
cmp dword [ebp + 8], ebx
jne 0x428234
mov eax, 1
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor edx, edx
cmp dword [0x4f0bb8], edx
jne 0x42494b
cmp dword [0x4f0bbc], edx
jne 0x42494b
cmp dword [0x4f0bc0], edx
jne 0x42494b
cmp dword [0x4f0bc4], edx
jne 0x42494b
cmp dword [0x4f0bc8], edx
je 0x42495a
mov ecx, dword [esp + 0x9c]
mov eax, 0xde
mov word [ecx], ax
movzx eax, word [esi]
lea ecx, [eax - 0x60]
cmp ecx, 0x7e
ja case.0x424970.98
movzx ecx, byte [ecx + 0x429228]
jmp dword [ecx*4 + 0x4291ec]
add dword [0x4f22f0], 1
adc dword [0x4f22f4], edx
mov eax, dword [esi + 0x1c]
cmp eax, edx
je 0x424a06
mov edx, eax
xor eax, eax
cmp dword [esi + 0x10], 1
mov dword [esp + 0x90], edx
sete al
mov edi, eax
test edi, edi
je 0x4249bd
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x94]
mov dword [eax + 0x98], ecx
mov dword [eax + 0x94], 0
mov ecx, edx
call fcn.00401740
mov dword [esp + 0x48], eax
test edi, edi
je 0x4249e6
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x98]
mov dword [ecx + 0x94], edx
mov dword [ecx + 0x98], 0
test eax, eax
je 0x42490a
cmp eax, 8
je 0x42490a
cmp dword [ebp + 8], 3
je 0x424c42
jmp 0x42822d
push esi
mov bl, 1
call fcn.00440fe0
mov edx, eax
mov dword [esp + 0x90], edx
test edx, edx
je 0x42911c
mov ecx, dword [esp + 0x74]
cmp dword [ecx + 0x94], 0
je 0x424a42
mov eax, dword [edx + 8]
call fcn.004410a0
test eax, eax
je 0x424a42
mov edi, 1
jmp 0x4249a3
xor edi, edi
jmp 0x4249bd
add dword [0x4f22f0], 1
adc dword [0x4f22f4], edx
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x90], eax
cmp eax, edx
jne 0x424a7b
push esi
mov bl, 1
call fcn.00440fe0
mov dword [esp + 0x90], eax
test eax, eax
je 0x42911c
cmp dword [ebp + 8], 3
mov ecx, dword [esp + 0x74]
mov dword [ecx + 0x9c], eax
je 0x428da4
mov ecx, dword [eax + 8]
mov edx, dword [esi + 0x20]
cmp edx, dword [ecx + 0x20]
jne 0x428da4
mov dword [esp + 0x38], ecx
jmp 0x428234
add dword [0x4f22f0], 1
mov eax, dword [esp + 0x9c]
adc dword [0x4f22f4], edx
mov edi, dword [eax + 0x10]
cmp edi, edx
jne 0x424b00
mov eax, dword [0x4f0b60]
mov edi, eax
cmp byte [eax], dl
jne 0x424ad1
xor edi, edi
jmp 0x424b00
mov ebx, dword [0x4f1d10]
test ebx, ebx
je 0x424af8
jmp 0x424ae0
mov eax, dword [ebx + 4]
push edi
push eax
call fcn.004ba135
add esp, 8
test eax, eax
je 0x424b34
mov ebx, dword [ebx + 0x14]
test ebx, ebx
jne 0x424ae0
xor edi, edi
mov ebx, dword [esp + 0x74]
xor edx, edx
mov dword [esp + 0x48], 1
mov dword [esp + 0x58], edx
cmp edi, edx
je 0x424c1b
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
je 0x424b38
push 0x4d97ec
push eax
call fcn.004ba135
add esp, 8
test eax, eax
jne 0x424b38
mov al, 1
jmp 0x424b3a
mov edi, ebx
jmp 0x424afa
xor al, al
lea ecx, [esp + 0x90]
push ecx
push eax
push edi
xor eax, eax
call fcn.004a8ac0
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x90]
test eax, eax
je 0x424c1b
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x20]
test edx, edx
je 0x424bb0
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x424b7b
nop
cmp edx, ecx
je 0x424bb0
mov ecx, dword [ecx + 0x20]
test ecx, ecx
jne 0x424b70
push 0x4d6959
push 0
push 0x4de0a8
call fcn.0049be50
add esp, 4
push eax
mov ecx, esi
call fcn.0042d2f0
xor eax, eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [ebx + 0x94]
test edx, edx
je 0x424c50
call fcn.004410a0
test eax, eax
je 0x424c50
mov edi, 1
mov dword [ebx + 0x98], edx
mov dword [ebx + 0x94], 0
mov ecx, dword [esp + 0x90]
call fcn.00401740
mov dword [esp + 0x48], eax
test edi, edi
je 0x424c0a
mov edx, dword [ebx + 0x98]
mov dword [ebx + 0x94], edx
mov dword [ebx + 0x98], 0
test eax, eax
je 0x42490a
cmp eax, 8
je 0x42490a
cmp dword [esp + 0x58], 0
mov edx, dword [esp + 0x9c]
sete al
movzx ecx, al
push ecx
push edx
call fcn.0042d120
cmp dword [ebp + 8], 3
jne 0x42822d
mov eax, dword [esp + 0x48]
cmp eax, 7
jne 0x42490a
jmp 0x424905
xor edi, edi
jmp 0x424be0
mov edi, dword [esi + 0x10]
mov eax, edi
dec eax
je 0x424cad
sub eax, 3
je 0x424c8c
sub eax, 5
jne 0x424d3e
mov ecx, dword [0x4f0b64]
push eax
push eax
push ecx
mov eax, 1
call fcn.0041acf0
add esp, 0xc
mov dword [esp + 0x80], eax
jmp 0x424d3e
mov edx, dword [0x4f0b60]
push 0
push 0
push edx
xor eax, eax
call fcn.0041acf0
add esp, 0xc
mov dword [esp + 0x80], eax
jmp 0x424d3e
movzx eax, byte [esi + 2]
sub eax, edx
je 0x424d39
dec eax
mov eax, dword [0x4f0b60]
je 0x424d00
push str.Read
push eax
call fcn.004ba135
add esp, 8
test eax, eax
jne 0x424cd8
lea edi, [eax + 5]
jmp 0x424d3e
mov ecx, dword [0x4f0b60]
push 0
push 0
push ecx
xor eax, eax
call fcn.0041acf0
xor edx, edx
add esp, 0xc
test eax, eax
setne dl
mov dword [esp + 0x80], eax
lea edi, [edx + 3]
jmp 0x424d3e
push 0
push 1
push 1
push 1
call fcn.004a2da0
add esp, 0x10
test eax, eax
jne 0x424d39
push eax
push eax
mov eax, dword [0x4f0b60]
push eax
xor eax, eax
call fcn.0041acf0
xor ecx, ecx
add esp, 0xc
test eax, eax
setne cl
mov dword [esp + 0x80], eax
lea edi, [ecx + 3]
jmp 0x424d3e
mov edi, 2
lea eax, [edi - 3]
cmp eax, 7
ja case.0x424d51.5
movzx edx, byte [eax + 0x4292b4]
jmp dword [edx*4 + 0x4292a8]
mov esi, dword [0x4f0b64]
call fcn.0041b500
mov dword [esp + 0x88], eax
test eax, eax
je 0x428e86
mov eax, dword [0x4f0b68]
cmp byte [eax], 0x31
jne 0x424d93
cmp byte [eax + 1], 0
jne 0x424d93
mov esi, dword [esp + 0x38]
mov byte [esp + 0x8c], 1
jmp case.0x424d51.5
mov esi, dword [esp + 0x38]
mov byte [esp + 0x8c], 0
jmp case.0x424d51.5
cmp edi, 4
jne 0x424de4
mov esi, dword [0x4f0b68]
call fcn.0041b500
mov dword [esp + 0x88], eax
mov eax, dword [0x4f0b6c]
cmp byte [eax], 0x31
jne 0x424dd6
cmp byte [eax + 1], 0
jne 0x424dd6
mov esi, dword [esp + 0x38]
mov byte [esp + 0x8c], 1
jmp 0x424e0b
mov esi, dword [esp + 0x38]
mov byte [esp + 0x8c], 0
jmp 0x424e0b
mov eax, dword [0x4f0b68]
call fcn.0041b550
mov dword [esp + 0x88], eax
shr eax, 2
and al, 1
mov byte [esp + 0x8c], al
je 0x424e0b
and dword [esp + 0x88], 0xfffffffb
cmp dword [esp + 0x88], 0
je 0x428ebd
mov byte [esp + 0x47], 0
mov dword [esp + 0x50], 0
mov ebx, dword [esi + 0x1c]
cmp word [ebx], 0x6c
mov dword [esp + 0x58], ebx
jne 0x424e3c
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x58], eax
jmp 0x424e3e
xor ebx, ebx
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [esp + 0xd0], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0xd4], edx
mov edx, dword [eax + 0x14]
mov dword [esp + 0x6c], ecx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x4c], edx
mov edx, dword [eax + 0x1c]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], edx
cmp edi, 8
je 0x424e85
mov dword [eax + 8], 1
mov dword [eax + 0xc], 0
lea eax, [edi - 2]
cmp eax, 8
ja case.default.0x424e91
jmp dword [eax*4 + 0x4292bc]
cmp byte [esi + 2], 0
jbe 0x424eb1
xor edi, edi
mov ecx, esi
call fcn.00420cb0
mov byte [esp + 0xb4], 0
jmp 0x424ebd
xor eax, eax
xor edx, edx
mov byte [esp + 0xb4], 1
mov ecx, dword [esp + 0xb4]
push ecx
mov ecx, dword [ebp + 0xc]
push edx
push eax
push ebx
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x5b]
push eax
push ecx
mov edi, esi
call fcn.0042adb0
mov dword [esp + 0x48], eax
jmp case.default.0x424e91
mov ebx, dword [ebp + 0xc]
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x4b]
push eax
call fcn.0042af10
mov esi, dword [esp + 0x38]
mov dword [esp + 0x48], eax
jmp case.default.0x424e91
mov eax, dword [ebp + 0xc]
push ebx
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x4f]
push edx
push eax
push esi
call fcn.0042b100
mov dword [esp + 0x48], eax
jmp case.default.0x424e91
mov ecx, dword [0x4f0b68]
push 0x4dbd3c
push ecx
call fcn.004ba135
mov ecx, dword [ebp + 0xc]
add esp, 8
push ebx
lea edx, [esp + 0x54]
push edx
test eax, eax
lea eax, [esp + 0x4f]
push eax
push ecx
push esi
je 0x424f59
call fcn.0042bf00
mov dword [esp + 0x48], eax
jmp case.default.0x424e91
call fcn.0042c1b0
mov dword [esp + 0x48], eax
jmp case.default.0x424e91
lea esi, [esp + 0xec]
call fcn.0041bbb0
mov dword [esp + 0x57c], 0
mov edx, dword [0x4f0b64]
cmp byte [edx], 0
je 0x424fd6
mov eax, dword [esp + 0x74]
mov eax, dword [eax + 0xdc]
and eax, 0x7fffffff
push 0x30c
mov ecx, esi
call fcn.0049c780
test al, al
je 0x424fd6
mov ecx, esi
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x54]
push edx
mov edx, dword [esp + 0x40]
lea eax, [esp + 0x4f]
push eax
push ecx
mov ecx, dword [0x4f0b68]
push edx
mov edx, ebx
call fcn.0042c470
mov dword [esp + 0x48], eax
call fcn.0041bb20
jmp 0x424fde
mov dword [esp + 0x48], 1
lea ecx, [esp + 0xec]
mov dword [esp + 0x57c], 0xffffffff
call fcn.0041bc00
mov esi, dword [esp + 0x38]
jmp case.default.0x424e91
mov eax, dword [0x4f0b60]
cmp edi, 3
je 0x42500d
mov eax, dword [0x4f0b64]
mov ecx, dword [esp + 0x88]
push eax
mov eax, dword [esp + 0x90]
push eax
push ecx
mov ecx, dword [ebp + 0xc]
push ebx
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x5b]
push eax
push ecx
mov ecx, esi
call fcn.0042b600
mov dword [esp + 0x48], eax
jmp case.default.0x424e91
lea edx, [esp + 0x7f]
push edx
cmp edi, 4
jne 0x425065
mov eax, dword [0x4f0b60]
push 0
push eax
xor eax, eax
call fcn.0041acf0
mov ecx, dword [0x4f0b64]
mov dword [esp + 0xa0], ecx
jmp 0x42507e
mov ecx, dword [0x4f0b64]
lea eax, [esp + 0x98]
push eax
push ecx
mov eax, 1
call fcn.0041acf0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4250d2
mov edx, dword [esp + 0x94]
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x8c]
push edx
mov edx, dword [esp + 0x8c]
push edi
push eax
push ecx
push edx
mov edx, dword [ebp + 0xc]
push ebx
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x63]
push ecx
push edx
mov ecx, esi
call fcn.0042bab0
cmp byte [esp + 0x7f], 0
mov dword [esp + 0x48], eax
je case.default.0x424e91
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x424e91
mov dword [esp + 0x48], 1
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xd4]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x6c]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 0x14], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], edx
mov eax, dword [esp + 0x48]
test eax, eax
je 0x42490a
cmp eax, 7
je 0x42490a
cmp eax, 8
je 0x42490a
cmp byte [esp + 0x47], 0
jne 0x428238
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x425156
mov edx, dword [ecx + 0x20]
cmp edx, dword [esi + 0x20]
jne 0x4291b3
mov dword [esp + 0x38], ecx
mov esi, ecx
jmp 0x428238
cmp dword [ebp + 8], 3
je 0x424905
mov eax, dword [esp + 0x58]
jmp 0x428230
mov ecx, eax
mov eax, dword [ebx + 0xe0]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x4c], eax
cmp ecx, 0x70
jne 0x4251f3
mov eax, dword [esp + 0x74]
mov ecx, dword [0x4f0b10]
mov ebx, dword [eax + 0xe4]
mov dword [esp + 0x58], ebx
mov dword [eax + 0xe4], edx
test ecx, ecx
je 0x4251af
mov eax, ebx
mov ebx, ecx
call fcn.004a5560
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x48], eax
jmp 0x4251b7
mov dword [esp + 0x48], 1
cmp dword [ebx + 8], 6
jne 0x4251c7
mov eax, dword [ebx]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x4251d7
push eax
call fcn.004ba14c
add esp, 4
push ebx
call fcn.004b9d3f
add esp, 4
cmp dword [esp + 0x48], 0
je 0x42911c
mov ebx, dword [esp + 0x74]
xor edx, edx
jmp 0x42520e
or eax, 1
mov dword [ebx + 0xe0], eax
mov ecx, dword [esi + 0x1c]
cmp word [ecx], 0x71
je 0x42520e
or eax, 2
mov dword [ebx + 0xe0], eax
mov dword [esp + 0x50], edx
mov ecx, dword [esi + 0x18]
cmp word [ecx], 0x73
jne 0x425241
jmp 0x425220
mov ecx, dword [ecx + 0x18]
lea edx, [esp + 0x50]
push edx
push edi
push 2
call fcn.004245b0
mov edx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
mov ecx, dword [esi + 0x18]
cmp edx, ecx
je 0x425220
jmp 0x425256
lea eax, [esp + 0x50]
push eax
push edi
push 3
call fcn.004245b0
mov edx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x6c]
mov esi, dword [esi + 0x1c]
mov dword [esp + 0x38], esi
cmp cx, 0x6f
jne 0x4252c3
mov ecx, dword [esp + 0x4c]
mov dword [ebx + 0xe0], ecx
xor cl, cl
cmp word [esi], 0x70
jne 0x42528f
cmp dword [ebx + 0xe4], 0
mov cl, 1
jne 0x428234
mov esi, dword [esi + 0x1c]
mov dword [esp + 0x38], esi
cmp word [esi], 0x71
je 0x4252d7
test cl, cl
jne 0x42538e
cmp dword [ebx + 0xe4], 0
lea esi, [ebx + 0xe4]
je 0x42538e
call fcn.0042d950
mov eax, 1
mov dword [esp + 0x48], eax
jmp 0x42538a
cmp cx, 0x70
jne 0x42538e
cmp word [esi], 0x71
jne 0x42538e
cmp eax, 1
jne 0x4252e8
test edx, edx
je 0x428234
mov esi, dword [esp + 0x38]
mov edx, dword [ebx + 0xe4]
mov ecx, dword [0x4f1bf8]
mov edi, dword [0x4f1bf4]
mov dword [esp + 0x58], edx
xor eax, eax
lea edx, [esp + 0xc4]
push edx
push eax
mov dword [esp + 0x54], ecx
push 3
mov ecx, esi
mov dword [ebx + 0xe4], eax
mov dword [0x4f1bf4], eax
mov dword [0x4f1bf8], eax
call fcn.004245b0
mov dword [esp + 0x6c], eax
test edi, edi
je 0x425361
mov eax, dword [0x4f1bf4]
test eax, eax
je 0x425352
push eax
call fcn.004ba14c
add esp, 4
cmp dword [0x4f1bf8], 0x400000
jbe 0x425352
dec dword [0x4f1bfc]
mov eax, dword [esp + 0x4c]
mov dword [0x4f1bf4], edi
mov dword [0x4f1bf8], eax
mov eax, dword [esp + 0x6c]
cmp eax, 1
jne 0x428ef2
cmp dword [esp + 0xc4], 0
jne 0x428ef2
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x48]
mov dword [ebx + 0xe4], ecx
mov edx, dword [esp + 0x50]
cmp dword [ebp + 8], 3
je 0x428d87
cmp eax, 1
jne 0x428d87
test edx, edx
je 0x428234
mov eax, dword [edx + 0x20]
mov ecx, dword [esp + 0x38]
cmp eax, dword [ecx + 0x20]
jne 0x428da7
mov dword [esp + 0x38], edx
jmp 0x428234
mov edx, dword [esi + 0x18]
mov dword [esp + 0x38], edx
jmp 0x428234
cmp dword [esi + 0x10], 1
jne 0x4253dc
mov eax, dword [esi + 0x1c]
jmp 0x428230
lea ecx, [esp + 0x50]
push ecx
mov ecx, dword [esi + 0x18]
push edi
push 2
call fcn.004245b0
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x48], eax
cmp ecx, esi
je 0x428238
cmp dword [ebp + 8], 3
je 0x4291b3
cmp eax, 1
jne 0x4291b3
test ecx, ecx
je 0x4253d4
mov edx, dword [esi + 0x20]
cmp edx, dword [ecx + 0x20]
jne 0x4291a8
mov dword [esp + 0x38], ecx
mov esi, ecx
jmp 0x428238
call fcn.004011a0
add dword [0x4f22f0], 1
mov eax, dword [0x4f0b10]
mov edi, dword [0x4ec48c]
adc dword [0x4f22f4], 0
movzx ecx, word [esi]
lea edx, [ecx - 1]
mov ebx, eax
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x3c], edi
cmp edx, 0x127
ja case.0x42546b.8
movzx edx, byte [edx + 0x4295ac]
jmp dword [edx*4 + 0x4292e0]
mov ecx, dword [0x4f0b60]
push esi
call fcn.0047a7f0
jmp 0x428217
mov edi, 4
mov ecx, esi
call fcn.00420cb0
push eax
push ecx
mov edi, 1
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
xor edi, edi
mov ecx, esi
call fcn.00420cb0
push eax
mov eax, esi
call fcn.0047a640
jmp 0x428217
mov edi, 6
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [0x4f0b6c]
push eax
mov eax, dword [0x4f0b70]
push eax
push ecx
push ecx
mov edi, 1
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [0x4f0b68]
add esp, 4
push eax
push esi
call fcn.0047fd00
jmp 0x428217
mov edx, dword [0x4f0b70]
push edx
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420cb0
push eax
push ecx
mov edi, 1
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
push esi
call fcn.0047eca0
jmp 0x428217
mov eax, dword [0x4f0b74]
mov ecx, dword [0x4f0b70]
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420cb0
mov edx, dword [0x4f0b68]
push eax
push edx
push esi
call fcn.00479a90
jmp 0x428217
mov eax, dword [0x4f0b74]
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [0x4f0b68]
add esp, 4
push eax
push ecx
mov ecx, dword [0x4f0b70]
push esi
call fcn.0047a240
jmp 0x428217
mov edx, dword [0x4f0b6c]
mov eax, dword [0x4f0b68]
push edx
push eax
push esi
call fcn.00479350
jmp 0x428217
mov ecx, dword [0x4f0b6c]
push ecx
push ecx
mov edi, 2
mov ecx, esi
call fcn.00420cb0
mov edx, dword [0x4f0b64]
add esp, 4
push eax
push edx
push esi
call fcn.004795d0
jmp 0x428217
mov eax, dword [0x4f0b6c]
mov ecx, dword [0x4f0b68]
mov edx, dword [0x4f0b64]
push eax
push ecx
push edx
push esi
call fcn.00478e70
jmp 0x428217
mov eax, dword [0x4f0b7c]
push eax
push ecx
mov edi, 6
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 5
mov ecx, esi
call fcn.00420cb0
push eax
push ecx
mov edi, 4
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 3
mov ecx, esi
call fcn.00420cb0
push eax
push esi
call fcn.004860c0
jmp 0x428217
mov ecx, dword [0x4f0b64]
mov edx, dword [0x4f0b60]
push esi
call fcn.004898e0
jmp 0x428217
mov ecx, dword [0x4f0b78]
mov edx, dword [0x4f0b74]
push ecx
push edx
mov edi, 4
mov ecx, esi
call fcn.00420cb0
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420cb0
push eax
push ecx
mov edi, 1
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
push esi
call fcn.00489d50
jmp 0x428217
mov eax, dword [0x4f0b6c]
push eax
push ecx
mov edi, 1
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
xor edi, edi
mov ecx, esi
call fcn.00420cb0
push eax
push esi
call fcn.00490040
jmp 0x428217
mov ecx, dword [0x4f0b6c]
push ecx
push ecx
mov edi, 2
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 1
mov ecx, esi
call fcn.00420cb0
mov ebx, dword [0x4f0b60]
push eax
push esi
call fcn.00491bb0
jmp 0x428217
mov edx, dword [0x4f0b7c]
push edx
push ecx
mov edi, 6
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 5
mov ecx, esi
call fcn.00420cb0
push eax
push ecx
mov edi, 4
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 3
mov ecx, esi
call fcn.00420cb0
push eax
push ecx
mov edi, 2
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov eax, dword [0x4f0b60]
push eax
push esi
call fcn.00493100
jmp 0x428217
mov ecx, dword [0x4f0b70]
push ecx
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420cb0
mov edx, dword [0x4f0b68]
add esp, 4
push eax
push edx
push esi
call fcn.00495520
jmp 0x428217
mov eax, dword [0x4f0b68]
mov edx, dword [0x4f0b6c]
push eax
push esi
call fcn.004958c0
jmp 0x428217
mov ecx, dword [0x4f0b6c]
mov edx, dword [0x4f0b68]
push ecx
mov ecx, dword [0x4f0b60]
push edx
push esi
call fcn.0047b2f0
jmp 0x428217
push esi
call fcn.0043a9b0
jmp 0x428217
cmp byte [esi + 2], 1
mov edx, dword [0x4f0b64]
jbe 0x425851
mov eax, dword [esi + 0xc]
cmp byte [eax + 0x11], 0
je 0x4257fa
mov eax, 1
jmp 0x428217
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x425813
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
push ebx
call fcn.0041a4f0
jmp 0x428217
mov eax, dword [0x4f0b14]
test eax, eax
je 0x425851
cmp byte [edx], 0
jne 0x425851
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x42582e
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x425845
sub ecx, 2
jne 0x425851
mov eax, ebx
call fcn.004a5670
jmp 0x428217
mov ecx, ebx
call fcn.004a53e0
jmp 0x428217
push 1
push 0
push 0xffffffffffffffff
push edx
push ebx
call fcn.004a5c20
jmp 0x428217
mov eax, dword [esi + 0xc]
cmp dword [eax + 0x1c], 0
je 0x42587f
cmp byte [eax + 0x11], 0
jne 0x42587f
mov eax, 1
mov dword [esp + 0x40], eax
xor edi, edi
jmp 0x4258bf
mov edi, dword [0x4f0b14]
mov eax, dword [0x4f0b64]
mov dword [esp + 0x40], 0
test edi, edi
je 0x4258ad
cmp byte [eax], 0
jne 0x4258ad
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x4258a8
mov edx, dword [edi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x42591f
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.004a2da0
add esp, 0x10
push 1
mov ecx, ebx
mov dword [esp + 0x50], eax
call fcn.0041a550
mov dword [esp + 0x6c], eax
mov eax, dword [0x4f0b68]
mov al, byte [eax]
test al, al
je 0x425a75
call fcn.004099b0
movsx ecx, al
push 0x4dbdd0
mov dword [esp + 0x5c], ecx
call fcn.0049be50
mov edx, dword [esp + 0x5c]
add esp, 4
push edx
push eax
call fcn.004bb121
add esp, 8
test eax, eax
je 0x425a75
cmp dword [esp + 0x4c], 0
jne 0x42592e
mov eax, 1
jmp 0x428217
test edi, edi
je 0x4258af
push 1
mov ecx, edi
call fcn.0041a550
jmp 0x4258bf
cmp dword [esp + 0x40], 0
je 0x42593f
mov eax, dword [esi + 0xc]
mov ecx, dword [eax + 0x1c]
fild qword [ecx]
jmp 0x42595d
test edi, edi
je 0x42594e
push 0
mov eax, edi
call fcn.0041a680
jmp 0x42595d
mov esi, dword [0x4f0b64]
call fcn.0041a440
mov esi, dword [esp + 0x38]
push 0
fstp qword [esp + 0x64]
push 1
mov ecx, ebx
call fcn.004016d0
cmp byte [eax], 0
je 0x4259a5
lea edx, [esp + 0xac]
push edx
push 0
push 1
mov ecx, ebx
call fcn.004016d0
call fcn.004a2980
add esp, 4
test eax, eax
jne 0x4259c9
push 1
push eax
push 0xffffffffffffffff
push 0x4d6959
push ebx
call fcn.004a5c20
jmp 0x428217
lea eax, [esp + 0xe4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea ecx, [esp + 0xac]
push ecx
lea edx, [esp + 0xe8]
push edx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov eax, dword [0x4f0b68]
mov al, byte [eax]
call fcn.004099b0
movsx eax, al
add eax, 0xffffffbc
cmp eax, 0xf
ja case.0x4259e7.69
movzx ecx, byte [eax + 0x4296e8]
jmp dword [ecx*4 + 0x4296d4]
fld qword [esp + 0x60]
fmul qword [0x4e5998]
jmp 0x425a22
fld qword [esp + 0x60]
fmul qword [0x4e5990]
jmp 0x425a22
fld qword [esp + 0x60]
fmul qword [0x4e5988]
jmp 0x425a22
fld qword [esp + 0x60]
fmul qword [0x4e5980]
jmp 0x425a22
fld qword [esp + 0x60]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xb0]
call fcn.004c9236
add esi, eax
adc edi, edx
mov dword [esp + 0xac], esi
push 0
lea eax, [esp + 0xb0]
lea esi, [esp + 0x144]
mov dword [esp + 0xb4], edi
call fcn.004a2c10
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
push ebx
call fcn.004a5c20
mov esi, dword [esp + 0x38]
jmp 0x428217
mov eax, 2
cmp dword [esp + 0x4c], eax
je 0x425ae7
cmp dword [esp + 0x6c], eax
je 0x425ae7
cmp dword [esp + 0x40], 0
je 0x425aa1
mov edx, dword [esi + 0xc]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xcc], eax
jmp 0x425ac8
test edi, edi
je 0x425ab0
push 0
mov eax, edi
call fcn.0041a600
jmp 0x425abf
mov esi, dword [0x4f0b64]
call fcn.0041a410
mov esi, dword [esp + 0x38]
mov dword [esp + 0xcc], edx
mov edi, eax
push 0
mov eax, ebx
call fcn.0041a600
add eax, edi
adc edx, dword [esp + 0xcc]
push edx
push eax
push ebx
call fcn.0041a4f0
jmp 0x428217
cmp dword [esp + 0x40], 0
je 0x425af8
mov ecx, dword [esi + 0xc]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x425b16
test edi, edi
je 0x425b07
push 0
mov eax, edi
call fcn.0041a680
jmp 0x425b16
mov esi, dword [0x4f0b64]
call fcn.0041a440
mov esi, dword [esp + 0x38]
push 0
fstp qword [esp + 0x64]
mov eax, ebx
call fcn.0041a680
fadd qword [esp + 0x60]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.0041a520
jmp 0x428217
mov eax, dword [0x4f0b68]
mov al, byte [eax]
test al, al
je 0x425c33
call fcn.004099b0
push 0x4dbdd0
movsx edi, al
call fcn.0049be50
add esp, 4
push edi
push eax
call fcn.004bb121
add esp, 8
test eax, eax
je 0x425c33
mov ecx, dword [0x4f0b14]
mov edi, dword [0x4f0b64]
test ecx, ecx
je 0x425ba3
cmp byte [edi], 0
jne 0x425ba3
mov al, byte [ecx + 0x17]
test al, al
jne 0x425b90
mov edx, dword [ecx + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
jne 0x425ba3
test ecx, ecx
je 0x425ba3
push 0
push 1
call fcn.004016d0
mov edi, eax
push 0
push 1
mov ecx, ebx
call fcn.004016d0
push eax
lea ebx, [esp + 0x8b]
mov eax, edi
call fcn.004a2cc0
add esp, 4
cmp byte [esp + 0x87], 0
mov edi, eax
mov ebx, edx
je 0x425be8
mov eax, dword [esp + 0x4c]
push 1
push 0
push 0xffffffffffffffff
push 0x4d6959
push eax
call fcn.004a5c20
jmp 0x428217
mov ecx, dword [0x4f0b68]
mov al, byte [ecx]
call fcn.004099b0
cmp al, 0x44
je 0x425c10
cmp al, 0x48
je 0x425c07
cmp al, 0x4d
jne 0x425c22
push 0
push 0x3c
jmp 0x425c17
push 0
push 0xe10
jmp 0x425c17
push 0
push 0x15180
push ebx
push edi
call fcn.004c9150
mov edi, eax
mov ebx, edx
mov edx, dword [esp + 0x4c]
push ebx
push edi
push edx
call fcn.0041a4f0
jmp 0x428217
mov eax, dword [esi + 0xc]
xor edx, edx
cmp dword [eax + 0x1c], edx
je 0x425c51
cmp byte [eax + 0x11], dl
jne 0x425c51
mov edi, 1
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], edx
jmp 0x425ca3
mov edi, dword [0x4f0b14]
mov eax, dword [0x4f0b64]
mov dword [esp + 0x40], edx
cmp edi, edx
je 0x425c8d
cmp byte [eax], dl
jne 0x425c8d
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x425c75
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x425c8d
mov dword [esp + 0x3c], edi
cmp edi, edx
je 0x425c91
push 1
mov ecx, edi
call fcn.0041a550
jmp 0x425ca1
mov dword [esp + 0x3c], edx
push 1
push 1
push 0
push 1
call fcn.004a2da0
add esp, 0x10
mov edi, eax
push 1
mov ecx, ebx
call fcn.0041a550
cmp edi, 2
je 0x425d19
cmp eax, 2
je 0x425d19
cmp dword [esp + 0x40], 0
je 0x425cd1
mov edx, dword [esi + 0xc]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xdc], eax
jmp 0x425cfa
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x425ce2
push 0
call fcn.0041a600
jmp 0x425cf1
mov esi, dword [0x4f0b64]
call fcn.0041a410
mov esi, dword [esp + 0x38]
mov dword [esp + 0xdc], edx
mov edi, eax
push 0
mov eax, ebx
call fcn.0041a600
sub eax, edi
sbb edx, dword [esp + 0xdc]
push edx
push eax
push ebx
call fcn.0041a4f0
jmp 0x428217
cmp dword [esp + 0x40], 0
je 0x425d2a
mov ecx, dword [esi + 0xc]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x425d4a
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x425d3b
push 0
call fcn.0041a680
jmp 0x425d4a
mov esi, dword [0x4f0b64]
call fcn.0041a440
mov esi, dword [esp + 0x38]
push 0
fstp qword [esp + 0x64]
mov eax, ebx
call fcn.0041a680
fsub qword [esp + 0x60]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.0041a520
jmp 0x428217
mov eax, dword [esi + 0xc]
xor edx, edx
cmp dword [eax + 0x1c], edx
je 0x425d8a
cmp byte [eax + 0x11], dl
jne 0x425d8a
mov edi, 1
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], edx
jmp 0x425ddc
mov edi, dword [0x4f0b14]
mov eax, dword [0x4f0b64]
mov dword [esp + 0x40], edx
cmp edi, edx
je 0x425dc6
cmp byte [eax], dl
jne 0x425dc6
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x425dae
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x425dc6
mov dword [esp + 0x3c], edi
cmp edi, edx
je 0x425dca
push 1
mov ecx, edi
call fcn.0041a550
jmp 0x425dda
mov dword [esp + 0x3c], edx
push 1
push 1
push 0
push 1
call fcn.004a2da0
add esp, 0x10
mov edi, eax
push 1
mov ecx, ebx
call fcn.0041a550
cmp edi, 2
je 0x425e59
cmp eax, 2
je 0x425e59
cmp dword [esp + 0x40], 0
je 0x425e0a
mov edx, dword [esi + 0xc]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xa4], eax
jmp 0x425e33
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x425e1b
push 0
call fcn.0041a600
jmp 0x425e2a
mov esi, dword [0x4f0b64]
call fcn.0041a410
mov esi, dword [esp + 0x38]
mov dword [esp + 0xa4], edx
mov edi, eax
push 0
mov eax, ebx
call fcn.0041a600
mov ecx, dword [esp + 0xa4]
push ecx
push edi
push edx
push eax
call fcn.004c1960
push edx
push eax
push ebx
call fcn.0041a4f0
jmp 0x428217
cmp dword [esp + 0x40], 0
je 0x425e6a
mov edx, dword [esi + 0xc]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x425e8a
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x425e7b
push 0
call fcn.0041a680
jmp 0x425e8a
mov esi, dword [0x4f0b64]
call fcn.0041a440
mov esi, dword [esp + 0x38]
push 0
fstp qword [esp + 0x64]
mov eax, ebx
call fcn.0041a680
fmul qword [esp + 0x60]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.0041a520
jmp 0x428217
mov eax, dword [esi + 0xc]
xor edx, edx
cmp dword [eax + 0x1c], edx
je 0x425eca
cmp byte [eax + 0x11], dl
jne 0x425eca
mov edi, 1
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], edx
jmp 0x425f1c
mov edi, dword [0x4f0b14]
mov eax, dword [0x4f0b64]
mov dword [esp + 0x40], edx
cmp edi, edx
je 0x425f06
cmp byte [eax], dl
jne 0x425f06
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x425eee
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x425f06
mov dword [esp + 0x3c], edi
cmp edi, edx
je 0x425f0a
push 1
mov ecx, edi
call fcn.0041a550
jmp 0x425f1a
mov dword [esp + 0x3c], edx
push 1
push 1
push 0
push 1
call fcn.004a2da0
add esp, 0x10
mov edi, eax
push 1
mov ecx, ebx
call fcn.0041a550
cmp edi, 2
je 0x425fbb
cmp eax, 2
je 0x425fbb
cmp dword [esp + 0x40], 0
je 0x425f52
mov edx, dword [esi + 0xc]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xbc], eax
jmp 0x425f7e
cmp dword [esp + 0x3c], 0
je 0x425f66
mov eax, dword [esp + 0x3c]
push 0
call fcn.0041a600
jmp 0x425f75
mov esi, dword [0x4f0b64]
call fcn.0041a410
mov esi, dword [esp + 0x38]
mov dword [esp + 0xbc], edx
mov edi, eax
mov ecx, edi
or ecx, dword [esp + 0xbc]
jne 0x425f95
mov ecx, ebx
call fcn.0041a480
jmp 0x428217
push 0
mov eax, ebx
call fcn.0041a600
mov ecx, dword [esp + 0xbc]
push ecx
push edi
push edx
push eax
call fcn.004c9150
push edx
push eax
push ebx
call fcn.0041a4f0
jmp 0x428217
cmp dword [esp + 0x40], 0
je 0x425fcc
mov edx, dword [esi + 0xc]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x425fec
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x425fdd
push 0
call fcn.0041a680
jmp 0x425fec
mov esi, dword [0x4f0b64]
call fcn.0041a440
mov esi, dword [esp + 0x38]
fst qword [esp + 0x60]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x426007
mov ecx, ebx
call fcn.0041a480
jmp 0x428217
push 0
mov eax, ebx
call fcn.0041a680
fdiv qword [esp + 0x60]
sub esp, 8
fstp qword [esp]
push ebx
call fcn.0041a520
jmp 0x428217
mov edi, 2
mov ecx, esi
call fcn.00420cb0
mov dword [esp + 0x40], eax
test eax, eax
jns 0x426043
mov dword [esp + 0x40], 0
jmp 0x426059
mov edi, 1
mov ecx, esi
call fcn.00420c30
cmp dword [esp + 0x40], eax
jle 0x426059
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x40]
mov edx, dword [0x4f0b64]
push 1
push 0
push ecx
push edx
push ebx
call fcn.004a5c20
jmp 0x428217
mov edi, 2
mov ecx, esi
call fcn.00420cb0
mov ebx, eax
test ebx, ebx
jns 0x426088
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420c30
cmp ebx, eax
jbe 0x42609a
mov ebx, eax
push 1
sub eax, ebx
add eax, dword [0x4f0b64]
push 0
push ebx
push eax
mov eax, dword [esp + 0x5c]
push eax
call fcn.004a5c20
jmp 0x428217
cmp byte [esi + 2], 4
jb 0x4260e9
mov ecx, dword [esi + 0xc]
mov edx, dword [ecx + 0x34]
cmp byte [edx], 0
je 0x4260e9
mov edi, 3
mov ecx, esi
call fcn.00420cb0
mov dword [esp + 0x40], eax
cmp eax, 1
jge 0x4260f1
mov ecx, ebx
call fcn.0041a480
jmp 0x428217
mov dword [esp + 0x40], CreateStatusWindowA
mov edi, 2
mov ecx, esi
call fcn.00420cb0
mov ebx, eax
mov eax, dword [0x4f0b70]
mov al, byte [eax]
call fcn.004099b0
cmp al, 0x4c
jne 0x42613c
cmp ebx, 1
jge 0x426122
mov ecx, dword [esp + 0x4c]
call fcn.0041a480
jmp 0x428217
mov eax, dword [esp + 0x40]
mov ecx, 1
sub ecx, eax
add ebx, ecx
cmp ebx, 1
jge 0x426146
lea edx, [eax + ebx - 1]
mov dword [esp + 0x40], edx
cmp ebx, 1
jge 0x426146
mov ebx, 1
mov edi, 1
mov ecx, esi
call fcn.00420c30
cmp eax, ebx
jae 0x426164
mov ecx, dword [esp + 0x4c]
call fcn.0041a480
jmp 0x428217
mov ecx, edi
sub ecx, ebx
add eax, ecx
mov ecx, dword [esp + 0x40]
cmp ecx, eax
jbe 0x426174
mov ecx, eax
mov edx, dword [0x4f0b64]
mov eax, dword [esp + 0x4c]
push 1
push 0
push ecx
lea ebx, [ebx + edx - 1]
push ebx
push eax
call fcn.004a5c20
jmp 0x428217
mov edi, 2
mov ecx, esi
call fcn.00420cb0
mov ebx, eax
test ebx, ebx
jns 0x4261a7
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420c30
cmp ebx, eax
jbe 0x4261b9
mov ebx, eax
mov ecx, dword [0x4f0b64]
mov edx, dword [esp + 0x4c]
push 1
push 0
sub eax, ebx
push eax
add ecx, ebx
push ecx
push edx
call fcn.004a5c20
jmp 0x428217
mov edi, 2
mov ecx, esi
call fcn.00420cb0
mov dword [esp + 0x40], eax
test eax, eax
jns 0x4261f4
mov dword [esp + 0x40], 0
mov edi, 1
mov ecx, esi
call fcn.00420c30
mov ecx, eax
cmp dword [esp + 0x40], eax
ja 0x42620c
mov ecx, dword [esp + 0x40]
push 1
push 0
sub eax, ecx
push eax
mov eax, dword [0x4f0b64]
push eax
push ebx
call fcn.004a5c20
jmp 0x428217
push 1
push 1
mov ecx, ebx
call fcn.004016d0
mov edi, eax
cmp edi, dword [0x4f0b64]
jne 0x42624a
mov al, byte [ebx + 0x17]
test al, al
jne 0x426246
mov ecx, dword [ebx + 0xc]
mov al, byte [ecx + 0x17]
cmp al, 1
je 0x42628a
push 1
push 0
mov edi, 1
mov ecx, esi
call fcn.00420c30
push eax
push 0
push ebx
call fcn.004a5c20
cmp eax, edi
jne case.0x42546b.8
push 0
push edi
mov ecx, ebx
call fcn.004016d0
mov ecx, dword [0x4f0b64]
mov edi, eax
mov edx, edi
nop
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x426280
mov edx, dword [0x4f0b68]
mov al, byte [edx]
test al, al
je 0x4262bf
call fcn.004099b0
cmp al, 0x54
jne 0x4262bf
mov eax, dword [0x4f0b68]
cmp byte [eax + 1], 0
jne 0x4262bf
mov eax, edi
call fcn.0041a290
push 0
mov eax, ebx
call fcn.0041a980
jmp 0x428217
cmp word [esi], 0x31
push edi
jne 0x4262da
call dword [sym.imp.USER32.dll_CharLowerA]
push 0
mov eax, ebx
call fcn.0041a980
jmp 0x428217
call dword [sym.imp.USER32.dll_CharUpperA]
push 0
mov eax, ebx
call fcn.0041a980
jmp 0x428217
mov eax, dword [0x4f0b14]
test eax, eax
je 0x426320
cmp byte [eax + 0x17], 0
jne 0x426305
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x15]
jmp 0x426308
mov cl, byte [eax + 0x15]
test cl, 1
je 0x426320
call fcn.0041a8f0
push 0
push eax
push ebx
call fcn.0041a4f0
jmp 0x428217
mov edi, 1
mov ecx, esi
call fcn.00420c30
push 0
push eax
push ebx
call fcn.0041a4f0
jmp 0x428217
mov edi, dword [0x4f0b6c]
mov al, byte [edi]
mov dword [esp + 0x60], edi
mov dword [esp + 0x58], 0xffffffff
test al, al
je 0x4263d4
call fcn.004099b0
movsx eax, al
push eax
push 0x4dbde0
call fcn.004bb121
add esp, 8
test eax, eax
je 0x4263d4
cmp byte [edi + 1], 0
je 0x4263d4
lea esi, [edi + 1]
call fcn.0040dda0
mov esi, dword [esp + 0x38]
mov dword [esp + 0x40], eax
test eax, eax
jle 0x4264db
mov eax, dword [0x4f0b68]
cmp byte [eax], 0
jne 0x4263de
mov dword [esp + 0x58], 0
mov eax, 0x4d69c8
mov edx, dword [0x4f13d8]
push 1
push 0
push 0xffffffffffffffff
push eax
push edx
call fcn.004a5c20
mov eax, dword [esp + 0x58]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x58]
call fcn.00401570
mov eax, 1
jmp 0x428217
mov dword [esp + 0x40], 1
jmp 0x42638e
mov edx, dword [0x4f0b64]
mov edi, 4
mov ecx, esi
mov dword [esp + 0x6c], edx
mov dword [esp + 0x38], eax
call fcn.00420cb0
mov ebx, eax
test ebx, ebx
jns 0x426400
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.00420c30
mov edi, eax
cmp ebx, edi
jge 0x4264db
mov eax, dword [esp + 0x60]
mov al, byte [eax]
cmp al, 0x31
je 0x4264a2
call fcn.004099b0
cmp al, 0x52
je 0x4264a2
mov edi, 2
mov ecx, esi
call fcn.00420c30
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x60], eax
mov edi, 1
lea eax, [ebx + ecx]
lea esp, [esp]
mov edx, dword [0x4ec48c]
mov cl, byte [edx + 0xd2]
test cl, cl
jne 0x42646f
mov ecx, dword [esp + 0x38]
push ecx
call fcn.004a3290
add esp, 4
jmp 0x426491
cmp cl, 2
jne 0x426483
mov edx, dword [esp + 0x38]
push edx
call fcn.004a3560
add esp, 4
jmp 0x426491
mov ecx, dword [esp + 0x38]
push ecx
push eax
call fcn.004bb262
add esp, 8
test eax, eax
je 0x4264db
cmp edi, dword [esp + 0x40]
je 0x4264c9
inc edi
add eax, dword [esp + 0x60]
jmp 0x426450
mov eax, dword [esp + 0x3c]
movzx ecx, byte [eax + 0xd2]
mov edx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x74]
push edx
mov eax, edi
sub eax, ebx
push ecx
call fcn.004a3090
add esp, 0x10
test eax, eax
je 0x4264db
sub eax, dword [esp + 0x6c]
mov dword [esp + 0x58], eax
jns 0x4263a0
mov eax, 0x4d9220
jmp 0x4263a5
push esi
call fcn.0043ada0
jmp 0x428217
mov eax, dword [0x4f0b64]
mov ecx, dword [0x4f0b6c]
mov edx, dword [0x4f0b68]
push eax
call fcn.004311b0
jmp 0x428217
mov ecx, dword [0x4f0b6c]
mov edx, dword [0x4f0b68]
mov eax, dword [0x4f0b60]
push ecx
mov ecx, dword [0x4f0b64]
push edx
push esi
call fcn.0043afc0
jmp 0x428217
mov eax, dword [0x4f0b60]
push eax
mov eax, esi
call fcn.0043b720
jmp 0x428217
mov ecx, dword [0x4f0b60]
push ecx
mov ecx, dword [0x4f0b64]
push esi
call fcn.0043bcb0
jmp 0x428217
push 0
push ecx
mov edi, 7
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 6
mov ecx, esi
call fcn.00420cb0
push eax
push ecx
mov edi, 5
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00420cb0
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [0x4f0b80]
push eax
push esi
call fcn.004883f0
jmp 0x428217
mov edx, dword [0x4f0b78]
push edx
push ecx
mov edi, 5
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00420cb0
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420cb0
push eax
push esi
call fcn.004823d0
jmp 0x428217
mov eax, dword [0x4f0b6c]
push eax
push ecx
mov edi, 2
mov ecx, esi
call fcn.00420cb0
add esp, 4
push eax
mov edi, 1
mov ecx, esi
call fcn.00420cb0
push eax
push esi
call fcn.00492f40
jmp 0x428217
mov edx, dword [edi + 0xb4]
xor eax, eax
cmp ecx, 0x42
mov ecx, dword [0x4f0b60]
sete al
push 0
push edx
push eax
push ecx
call fcn.0040e210
add esp, 0x10
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b60]
xor edx, edx
cmp dword [edi + 0xb4], 3
push 0
sete dl
lea edx, [edx + edx + 1]
push edx
push 0
push eax
call fcn.0040e210
add esp, 0x10
mov eax, 1
jmp 0x428217
mov ecx, dword [0x4f0b60]
push 0
push 2
push 0
push ecx
call fcn.0040e210
add esp, 0x10
mov eax, 1
jmp 0x428217
mov edx, dword [0x4f0b60]
push 0
push 0
push 0
push edx
call fcn.0040e210
add esp, 0x10
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b60]
push eax
call fcn.004103a0
add esp, 4
jmp 0x428217
mov edx, dword [0x4f0b78]
mov eax, dword [0x4f0b74]
push 0x4d6959
push 0x4d6959
push edx
mov edx, dword [0x4f0b70]
push eax
mov eax, dword [0x4f0b6c]
push edx
mov edx, dword [0x4f0b68]
push eax
mov eax, dword [0x4f0b64]
push edx
mov edx, dword [0x4f0b60]
push eax
push ecx
call fcn.00410630
add esp, 0x24
jmp 0x428217
mov edx, dword [0x4f0b74]
mov eax, dword [0x4f0b6c]
push edx
mov edx, dword [0x4f0b78]
push eax
mov eax, dword [0x4f0b70]
push edx
mov edx, dword [0x4f0b68]
push eax
mov eax, dword [0x4f0b64]
push 0x4d6959
push 0x4d6959
push edx
mov edx, dword [0x4f0b60]
push eax
push ecx
call fcn.00410630
add esp, 0x24
jmp 0x428217
mov edx, dword [0x4f0b6c]
mov eax, dword [0x4f0b68]
push 0x4d6959
push 0x4d6959
push edx
mov edx, dword [0x4f0b64]
push eax
mov eax, dword [0x4f0b60]
push 0x4d6959
push 0x4d6959
push edx
push eax
push ecx
mov edx, 0x4d6959
call fcn.00410630
add esp, 0x24
jmp 0x428217
mov edi, 4
mov ecx, esi
call fcn.00420cb0
push eax
mov ecx, esi
call fcn.00439e20
jmp 0x428217
mov eax, dword [0x4f0b64]
mov ebx, dword [0x4f0b68]
mov esi, dword [0x4f0b60]
cmp ecx, 0x76
push 0
sete cl
movzx edx, cl
push 0
push edx
push eax
mov eax, dword [0x4f0b6c]
push edi
call fcn.004a6980
add esp, 0x14
test eax, eax
je 0x42681c
mov ecx, dword [0x4ec48c]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x42681c
push 1
push eax
call fcn.00401910
add esp, 8
mov esi, dword [esp + 0x38]
mov eax, 1
jmp 0x428217
push 0x4dbde4
call fcn.0049be50
mov edx, dword [0x4f0b60]
add esp, 4
push 9
push eax
push edx
call fcn.004babb4
add esp, 0xc
test eax, eax
jne 0x426866
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
jne 0x426866
mov ecx, dword [0x4f0b6c]
cmp byte [ecx], 0
jne 0x426866
mov bl, 1
jmp 0x426868
xor bl, bl
movzx eax, word [esi]
xor edx, edx
test bl, bl
setne dl
mov ecx, 0x82
dec edx
and edx, 0x14
mov dword [esp + 0x4c], edx
cmp ax, cx
je 0x4268e1
mov edx, 0x83
cmp ax, dx
je 0x4268e1
mov eax, dword [0x4f0b68]
cmp byte [eax], 0
je 0x426926
movzx eax, word [esi]
mov edx, 0x82
cmp ax, dx
je 0x426993
mov ecx, 0x83
cmp ax, cx
je 0x426993
mov edx, dword [0x4f0b68]
mov ecx, dword [0x4f0b64]
push edx
mov edx, dword [0x4f0b60]
push ecx
mov ecx, dword [0x4f0b6c]
mov edi, eax
call fcn.004332c0
jmp 0x428217
mov ecx, dword [0x4f0b68]
cmp byte [ecx], 0
je 0x426917
mov edi, 2
mov ecx, esi
call fcn.00420d60
fmul qword [0x4e58d8]
call fcn.004c9200
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x4c], eax
test eax, eax
jne 0x426917
mov dword [esp + 0x4c], 0x1f4
mov edx, dword [0x4f0b70]
cmp byte [edx], 0
jne 0x42689c
test bl, bl
je 0x42689c
mov ecx, dword [0x4f0b60]
add ecx, 9
mov al, byte [ecx]
cmp al, 0x20
je 0x426941
cmp al, 9
jne 0x426944
inc ecx
jmp 0x426937
cmp byte [ecx], 0
mov dword [esp + 0x58], ecx
je 0x42689c
mov ebx, dword [0x4f1d10]
test ebx, ebx
je 0x42689c
nop
mov ecx, dword [esp + 0x58]
mov eax, dword [ebx + 4]
push ecx
push eax
call fcn.004ba135
add esp, 8
test eax, eax
je 0x426981
mov ebx, dword [ebx + 0x14]
test ebx, ebx
jne 0x426960
jmp 0x42689c
mov edx, dword [esp + 0x4c]
mov cx, word [esi]
push ebx
call fcn.004a88f0
jmp 0x428217
mov ebx, dword [0x4f0b60]
mov edx, 0x83
cmp ax, dx
mov edx, dword [0x4f0b70]
sete al
movzx ecx, al
mov eax, dword [esp + 0x4c]
push ecx
mov ecx, dword [0x4f0b64]
push edx
push eax
mov eax, dword [0x4f0b6c]
push ecx
push edi
call fcn.004a6c40
add esp, 0x14
test eax, eax
je 0x4269e6
mov edx, dword [0x4ec48c]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle 0x4269e6
push 1
push eax
call fcn.00401910
add esp, 8
mov eax, 1
jmp 0x428217
mov ebx, dword [0x4f0b64]
call fcn.00437700
jmp 0x428217
mov eax, dword [0x4f0b64]
mov ecx, dword [0x4f0b60]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042d120
jmp 0x428217
lea ecx, [esp + 0xe0]
push ecx
push 0x3a98
push 1
push 0x4dbdf8
call fcn.0049be50
add esp, 4
push eax
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
test eax, eax
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042d120
jmp 0x428217
mov ecx, dword [0x4f0b64]
mov edx, dword [0x4f0b60]
push ecx
push edx
push esi
call fcn.0044fc30
jmp 0x428217
mov eax, dword [0x4f0b60]
push 0
push 0xffffffffffffffff
push eax
mov eax, 0x4f2308
call fcn.0049bbc0
mov ecx, dword [0x4f0b64]
add esp, 0xc
push 0
push 0xffffffffffffffff
push ecx
mov eax, 0x4f2314
call fcn.0049bbc0
mov edx, dword [0x4f0b68]
add esp, 0xc
push 0
push 0xffffffffffffffff
push edx
mov eax, 0x4f2320
call fcn.0049bbc0
add esp, 0xc
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f3ddc]
push eax
mov eax, dword [0x4f0b68]
call fcn.004a3290
add esp, 4
push 0
test eax, eax
setne bl
push 0
push 0
mov cl, 3
cmp cl, byte [esi + 2]
mov ecx, dword [0x4f0b68]
sbb edx, edx
and edx, dword [0x4f0b1c]
mov byte [esp + 0xcc], bl
mov eax, dword [esp + 0xcc]
push edx
push 1
push eax
push 0
test bl, bl
sete dl
push ecx
mov ecx, dword [0x4f0b64]
movzx eax, dl
mov edx, dword [0x4f0b60]
push eax
push ecx
push 0
push 0x4f1cd8
call fcn.0042e1d0
test bl, bl
je 0x428217
test eax, eax
je 0x426b4c
mov eax, 0x4d69c8
jmp 0x426b59
push 0x4dbe0c
call fcn.0049be50
add esp, 4
mov edx, dword [0x4f13d8]
push 1
push 0
push 0xffffffffffffffff
push eax
push edx
call fcn.004a5c20
jmp 0x428217
push esi
call fcn.004333a0
jmp 0x428217
cmp byte [esi + 2], 2
jbe 0x426bbe
mov eax, dword [0x4f0b78]
mov ecx, dword [0x4f0b74]
mov edx, dword [0x4f0b70]
push eax
mov eax, dword [0x4f0b6c]
push ecx
mov ecx, dword [0x4f0b68]
push edx
mov edx, dword [0x4f0b60]
push eax
mov eax, dword [0x4f0b64]
push ecx
mov ecx, dword [0x4f0b7c]
call fcn.00434150
jmp 0x428217
mov edx, dword [0x4f0b64]
mov eax, dword [0x4f0b60]
push 0x4d6959
push 0x4d6959
push 0x4d6959
push edx
mov ecx, 0x4d6959
push eax
mov eax, ecx
mov edx, ecx
call fcn.00434150
jmp 0x428217
mov ecx, dword [0x4f0b88]
mov edx, dword [0x4f0b84]
mov eax, dword [0x4f0b80]
push ecx
mov ecx, dword [0x4f0b7c]
push edx
mov edx, dword [0x4f0b78]
push eax
mov eax, dword [0x4f0b6c]
push ecx
mov ecx, dword [0x4f0b68]
push edx
mov edx, dword [0x4f0b64]
push eax
mov eax, dword [0x4f0b60]
push ecx
mov ecx, dword [0x4f0b70]
push edx
mov edx, dword [0x4f0b74]
push eax
push esi
call fcn.0044e9e0
jmp 0x428217
mov eax, dword [0x4f0b70]
xor edx, edx
cmp ecx, 0x47
mov ecx, dword [0x4f0b6c]
sete dl
push edx
mov edx, dword [0x4f0b64]
push eax
mov eax, dword [0x4f0b60]
push ecx
mov ecx, dword [0x4f0b74]
push edx
mov edx, dword [0x4f0b68]
push eax
push esi
call fcn.00434290
jmp 0x428217
mov esi, dword [0x4f0b6c]
push 1
xor bl, bl
call fcn.0040ddd0
add esp, 4
mov byte [esp + 0x98], al
test al, al
jne 0x426cc0
mov ecx, dword [0x4f0b6c]
push ecx
push 0
push str.P__09_3yozl_.__x
call fcn.0049be50
mov ecx, dword [esp + 0x44]
add esp, 4
push eax
call fcn.0042d2f0
mov esi, dword [esp + 0x38]
jmp 0x428217
mov edx, dword [0x4f0b70]
cmp byte [edx], bl
je 0x426cda
mov ecx, dword [esp + 0x38]
mov edi, 4
call fcn.00420cb0
jmp 0x426cdf
mov eax, 1
mov ecx, dword [0x4f0b78]
mov edx, dword [0x4f0b68]
push ecx
mov ecx, dword [0x4f0b60]
push edx
mov edx, dword [0x4f0b74]
push ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [0x4f0b64]
push eax
mov eax, dword [esp + 0xac]
push eax
push ecx
mov ecx, dword [0x4f0b7c]
call fcn.00434350
mov esi, dword [esp + 0x38]
jmp 0x428217
mov edx, dword [0x4f0b7c]
mov eax, dword [0x4f0b78]
mov ecx, dword [0x4f0b70]
push edx
mov edx, dword [0x4f0b6c]
push eax
mov eax, dword [0x4f0b68]
push ecx
mov ecx, dword [0x4f0b64]
push edx
mov edx, dword [0x4f0b60]
push eax
push ecx
mov ecx, dword [0x4f0b80]
push edx
mov edx, dword [0x4f0b74]
push esi
call fcn.00434990
jmp 0x428217
mov eax, dword [0x4f0b80]
mov ecx, dword [0x4f0b7c]
mov edx, dword [0x4f0b78]
push eax
mov eax, dword [0x4f0b74]
push ecx
mov ecx, dword [0x4f0b70]
push edx
push eax
push ecx
mov ecx, esi
call fcn.00434bc0
jmp 0x428217
mov edx, dword [0x4f0b70]
mov eax, dword [0x4f0b6c]
mov ecx, dword [0x4f0b68]
push edx
mov edx, dword [0x4f0b64]
push eax
push ecx
push edx
push esi
call fcn.00434d10
jmp 0x428217
mov eax, dword [0x4f0b6c]
mov ecx, dword [0x4f0b68]
mov edx, dword [0x4f0b60]
push eax
push ecx
mov ecx, dword [0x4f0b70]
push edx
mov edx, dword [0x4f0b64]
push esi
call fcn.00434ee0
jmp 0x428217
mov eax, dword [0x4f0b70]
mov ecx, dword [0x4f0b6c]
mov edx, dword [0x4f0b64]
push eax
push ecx
mov ecx, dword [0x4f0b74]
push edx
mov edx, dword [0x4f0b68]
push esi
mov esi, dword [0x4f0b60]
call fcn.00434ff0
mov esi, dword [esp + 0x38]
jmp 0x428217
mov eax, dword [0x4f0b70]
mov ecx, dword [0x4f0b64]
mov edx, dword [0x4f0b68]
push eax
mov eax, dword [0x4f0b6c]
push ecx
mov ecx, dword [0x4f0b74]
push esi
call fcn.004350b0
jmp 0x428217
mov edx, dword [0x4f0b78]
mov eax, dword [0x4f0b74]
mov ecx, dword [0x4f0b70]
push edx
mov edx, dword [0x4f0b6c]
push eax
mov eax, dword [0x4f0b68]
push ecx
mov ecx, dword [0x4f0b64]
push edx
mov edx, dword [0x4f0b60]
push eax
push esi
call fcn.0044ecd0
jmp 0x428217
mov ecx, dword [0x4f0b7c]
mov edx, dword [0x4f0b78]
mov eax, dword [0x4f0b74]
push ecx
mov ecx, dword [0x4f0b70]
push edx
mov edx, dword [0x4f0b6c]
push eax
mov eax, dword [0x4f0b68]
push ecx
mov ecx, dword [0x4f0b64]
push edx
push eax
push esi
call fcn.0044f470
jmp 0x428217
mov ecx, dword [0x4f0b70]
mov eax, dword [0x4f0b6c]
mov edx, dword [0x4f0b68]
mov edi, dword [0x4f0b64]
push ecx
mov ecx, dword [0x4f0b74]
call fcn.00435860
jmp 0x428217
mov edx, dword [0x4f0b78]
mov eax, dword [0x4f0b74]
mov ecx, dword [0x4f0b70]
push edx
mov edx, dword [0x4f0b68]
push eax
mov eax, dword [0x4f0b64]
push ecx
mov ecx, dword [0x4f0b60]
push edx
mov edx, dword [0x4f0b6c]
push eax
push ecx
mov ecx, dword [0x4f0b7c]
call fcn.004358e0
jmp 0x428217
mov edx, 0x90
cmp cx, dx
sete al
movzx ecx, al
push ecx
mov eax, esi
call fcn.00435a20
jmp 0x428217
mov edx, dword [0x4f0b64]
mov ecx, dword [0x4f0b68]
push edx
mov edx, dword [0x4f0b60]
push esi
call fcn.00435d20
jmp 0x428217
mov eax, dword [0x4f0b74]
mov ecx, dword [0x4f0b70]
mov edx, dword [0x4f0b6c]
push eax
mov eax, dword [0x4f0b68]
push ecx
mov ecx, dword [0x4f0b64]
push edx
mov edx, dword [0x4f0b60]
push eax
push esi
call fcn.00436380
jmp 0x428217
cmp byte [esi + 2], 1
jbe 0x426fb5
mov ecx, dword [0x4f0b6c]
mov edx, dword [0x4f0b68]
mov eax, dword [0x4f0b64]
push ecx
mov ecx, dword [0x4f0b70]
push edx
mov edx, dword [0x4f0b60]
call fcn.00436770
jmp 0x428217
mov edi, dword [0x4f0b60]
mov ecx, 0x4d6959
push 0x4d6959
mov eax, ecx
mov edx, ecx
call fcn.00440f40
test eax, eax
je 0x426fda
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b6c]
mov ecx, dword [0x4f0b70]
mov edx, dword [0x4f0b64]
push eax
mov eax, dword [0x4f0b68]
call fcn.004367a0
jmp 0x428217
mov ecx, dword [0x4f0b6c]
mov eax, dword [0x4f0b68]
mov edx, dword [0x4f0b64]
push ecx
mov ecx, dword [0x4f0b70]
call fcn.004368f0
jmp 0x428217
mov edx, dword [0x4f0b70]
mov eax, dword [0x4f0b6c]
mov ecx, dword [0x4f0b64]
push edx
mov edx, dword [0x4f0b68]
push eax
push ecx
mov ecx, dword [0x4f0b74]
push esi
call fcn.00436a10
jmp 0x428217
mov edx, dword [0x4f0b6c]
mov ecx, dword [0x4f0b70]
mov eax, dword [0x4f0b68]
push edx
mov edx, dword [0x4f0b64]
push esi
call fcn.00437350
jmp 0x428217
mov eax, dword [0x4f0b7c]
mov ecx, dword [0x4f0b78]
mov edx, dword [0x4f0b74]
push eax
mov eax, dword [0x4f0b70]
push ecx
push edx
push eax
mov eax, esi
call fcn.00437580
jmp 0x428217
mov ecx, dword [0x4f0b68]
push ecx
mov ecx, dword [0x4f0b64]
push esi
call fcn.004377e0
jmp 0x428217
push 0
push 0x1a3
push 0x111
push 0
push 0x4dab18
call fcn.0049be50
add esp, 4
push eax
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov edx, dword [0x4ec48c]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle 0x4269e6
push 1
push eax
call fcn.00401910
add esp, 8
mov eax, 1
jmp 0x428217
push 0
push 0x1a0
push 0x111
push 0
push 0x4dab18
call fcn.0049be50
add esp, 4
push eax
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [0x4ec48c]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle 0x4269e6
push 1
push eax
call fcn.00401910
add esp, 8
mov eax, 1
jmp 0x428217
mov eax, dword [esi + 0x10]
test eax, eax
jne 0x427194
mov edi, dword [0x4f0b60]
cmp byte [edi], al
je 0x427194
mov eax, 0x4f1cd8
call fcn.0041d550
test eax, eax
jne 0x427194
mov ecx, dword [0x4f0b60]
push ecx
push 0
push 0x4d93d8
call fcn.0049be50
add esp, 4
push eax
mov ecx, esi
call fcn.0042d2f0
jmp 0x428217
mov dword [0x4f229c], eax
mov eax, 1
jmp 0x428217
mov eax, dword [esi + 0x10]
mov dl, 1
cmp dl, byte [esi + 2]
mov edx, dword [0x4f0b68]
push eax
mov eax, dword [0x4f0b64]
push edx
mov edx, dword [0x4f0b60]
sbb ecx, ecx
and ecx, dword [0x4f0b14]
push eax
push edx
call fcn.0040ad80
add esp, 0x10
jmp 0x428217
mov ebx, dword [esi + 0x10]
test ebx, ebx
jne 0x42724e
mov ecx, dword [0x4f0b60]
push 0x4f1cd8
call fcn.0041d590
mov ebx, eax
test ebx, ebx
jne 0x42724e
mov eax, dword [0x4f0b60]
cmp byte [eax], bl
je 0x427201
push eax
jmp 0x427178
cmp byte [esi + 2], 0
jbe 0x427223
mov eax, dword [esi + 0xc]
mov eax, dword [eax + 4]
cmp byte [eax], 0
je 0x427223
push 0x4d6959
push 0
push 0x4d9718
jmp 0x42717f
mov ebx, dword [edi + 0x9c]
test ebx, ebx
jne 0x42724e
mov edi, dword [edi + 0xa0]
test edi, edi
je 0x42723d
mov ebx, dword [edi]
test ebx, ebx
jne 0x42724e
push 0x4d6959
push 0
push 0x4dbe3c
jmp 0x42717f
mov eax, dword [0x4f0b64]
push 0
push 1
push 1
push 1
call fcn.004a2da0
add esp, 0x10
test eax, eax
jne 0x427314
mov esi, dword [0x4f0b64]
push eax
call fcn.00409ac0
add esp, 4
test eax, eax
jne 0x4272d8
mov ecx, dword [0x4f0b64]
push str.Delete
push ecx
call fcn.004ba135
add esp, 8
test eax, eax
jne 0x4272af
push ebx
push 0x4f1cd8
call fcn.0041d460
mov esi, dword [esp + 0x38]
mov eax, 1
jmp 0x428217
mov edx, dword [0x4f0b64]
push edx
push 0
push 0x4d9738
call fcn.0049be50
mov ecx, dword [esp + 0x44]
add esp, 4
push eax
call fcn.0042d2f0
mov esi, dword [esp + 0x38]
jmp 0x428217
jle 0x427310
cmp eax, 2
jg 0x427310
mov edx, dword [0x4f0b68]
cmp eax, 1
sete al
push 0
movzx ecx, al
push ecx
push edx
push 0x4d6959
push ebx
mov edi, 0x4f1cd8
call fcn.0041d1a0
mov esi, dword [esp + 0x38]
mov eax, 1
jmp 0x428217
mov esi, dword [esp + 0x38]
mov ecx, dword [0x4f0b64]
cmp byte [ecx], 0
mov edx, dword [0x4f0b68]
jne 0x42732e
cmp byte [edx], 0
je 0x42732e
mov al, 1
jmp 0x427330
xor al, al
push eax
push 1
push edx
push ecx
push ebx
mov edi, 0x4f1cd8
call fcn.0041d1a0
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b60]
cmp byte [eax], 0
mov ebx, 0x10
je 0x42737e
push 0x4dbe74
push eax
call fcn.004ba135
add esp, 8
test eax, eax
je 0x42737e
xor edi, edi
mov ecx, esi
call fcn.00420cb0
mov edi, dword [esp + 0x3c]
mov ebx, eax
test ebx, ebx
je 0x427383
mov eax, 1
mov byte [edi + 0xce], al
test al, al
je 0x4273af
or eax, 0xffffffff
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 0x24], eax
mov dword [edi + 0xb8], ebx
mov byte [edi + 0xcc], 0
mov eax, 1
jmp 0x428217
mov dword [edi + 0xb8], 5
mov byte [edi + 0xcc], 1
mov eax, 1
jmp 0x428217
mov esi, dword [0x4f0b60]
call fcn.0041b270
dec eax
je 0x427479
dec eax
je 0x427431
dec eax
jne 0x42748e
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
je 0x42741b
mov ecx, dword [esp + 0x38]
mov edi, 1
call fcn.00420cb0
or eax, edx
jne 0x427417
mov esi, dword [esp + 0x38]
mov eax, edi
mov edi, dword [esp + 0x3c]
mov byte [edi + 0xcd], al
jmp 0x428217
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
xor eax, eax
mov byte [edi + 0xcd], al
mov eax, 1
jmp 0x428217
mov ecx, dword [0x4f0b64]
cmp byte [ecx], 0
je 0x42744f
mov ecx, dword [esp + 0x38]
mov edi, 1
call fcn.00420cb0
mov dword [0x4f22fc], eax
mov edx, dword [0x4f0b68]
cmp byte [edx], 0
je 0x42748e
mov ecx, dword [esp + 0x38]
mov edi, 2
call fcn.00420cb0
mov esi, dword [esp + 0x38]
mov dword [0x4f22f8], eax
lea eax, [edi - 1]
jmp 0x428217
mov ecx, dword [esp + 0x38]
mov edi, 1
call fcn.00420cb0
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 0x2c], eax
mov esi, dword [esp + 0x38]
mov eax, 1
jmp 0x428217
mov ebx, dword [esi + 0x10]
test ebx, ebx
jne 0x4274bf
mov edi, dword [0x4f0b60]
push 0x4f1cd8
mov bl, 1
call fcn.004219b0
mov ebx, eax
test ebx, ebx
je case.0x42546b.8
mov edi, dword [0x4f0b6c]
cmp byte [edi], 0
je 0x4274ee
mov eax, dword [esi + 0x1c]
test eax, eax
jne 0x4274eb
mov eax, 0x4f1cd8
call fcn.0041d550
test eax, eax
jne 0x4274eb
mov edx, dword [0x4f0b6c]
push edx
jmp 0x427178
mov dword [ebx + 0x10], eax
mov eax, dword [0x4f0b74]
mov ecx, dword [0x4f0b70]
mov edx, dword [0x4f0b68]
push eax
mov eax, dword [0x4f0b64]
push ecx
push edx
push ebx
call fcn.004a8640
jmp 0x428217
mov edi, dword [esi + 0x10]
test edi, edi
jne 0x427550
mov eax, dword [0x4f0b60]
cmp byte [eax], 0
mov ebx, eax
je 0x42758a
mov edi, dword [0x4f1d10]
test edi, edi
je 0x42758a
nop
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.004ba135
add esp, 8
test eax, eax
je 0x427550
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x427530
lea eax, [edi + 1]
jmp 0x428217
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
je 0x427580
push 0x4d97ec
push eax
call fcn.004ba135
add esp, 8
test eax, eax
jne 0x427580
mov al, 1
mov ecx, edi
push eax
call fcn.004a8c40
mov eax, 1
jmp 0x428217
xor al, al
mov ecx, edi
push eax
call fcn.004a8c40
mov eax, 1
jmp 0x428217
mov edi, dword [esi + 0x10]
test edi, edi
jne 0x4275e0
mov eax, dword [0x4f0b60]
cmp byte [eax], 0
mov ebx, eax
je 0x42764b
mov edi, dword [0x4f1d10]
test edi, edi
je 0x42764b
lea esp, [esp]
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.004ba135
add esp, 8
test eax, eax
je 0x4275e0
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x4275c0
lea eax, [edi + 1]
jmp 0x428217
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
je 0x427642
push 0x4dbe78
push eax
call fcn.004ba135
add esp, 8
test eax, eax
jne 0x427613
push edi
xor edx, edx
mov ecx, 0x82
call fcn.004a88f0
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
je 0x427642
push 0x4d97ec
push eax
call fcn.004ba135
add esp, 8
test eax, eax
jne 0x427642
mov al, 1
push eax
push edi
call fcn.004a89b0
mov eax, 1
jmp 0x428217
xor al, al
push eax
push edi
call fcn.004a89b0
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b68]
mov esi, dword [0x4f0b64]
push eax
call fcn.0043c780
mov esi, dword [esp + 0x38]
jmp 0x428217
test ebx, ebx
jne 0x427689
lea edi, [ebx + 1]
mov ecx, esi
call fcn.00420cb0
call fcn.00413680
mov eax, edi
jmp 0x428217
mov eax, dword [0x4f0b64]
push 0
push 1
push 0
push 1
call fcn.004a2da0
add esp, 0x10
cmp eax, 2
je 0x4276c1
mov eax, dword [0x4f0b68]
push 0
push 1
push 0
push 1
call fcn.004a2da0
add esp, 0x10
cmp eax, 2
jne 0x42774c
mov ecx, dword [0x4f0b64]
cmp byte [ecx], 0
je 0x4276da
mov edi, 1
mov ecx, esi
call fcn.00420d60
jmp 0x4276dc
fldz
mov edx, dword [0x4f0b68]
fst qword [esp + 0x60]
cmp byte [edx], 0
je 0x427716
mov edi, 2
fstp st(0)
mov ecx, esi
call fcn.00420d60
fst qword [esp + 0x58]
fld qword [esp + 0x60]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x427722
fstp qword [esp + 0x60]
fstp qword [esp + 0x58]
jmp 0x427726
fld qword [0x4e5978]
fst qword [esp + 0x58]
jmp 0x427703
fstp st(0)
fstp st(0)
call fcn.004137f0
fld qword [esp + 0x58]
fld qword [esp + 0x60]
sub esp, 8
fsub st(1), st(0)
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push ebx
call fcn.0041a520
jmp 0x428217
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
je 0x42776a
mov edi, 1
mov ecx, esi
call fcn.00420cb0
mov ebx, eax
mov dword [esp + 0x58], eax
jmp 0x427770
xor ebx, ebx
mov dword [esp + 0x58], ebx
mov ecx, dword [0x4f0b68]
cmp byte [ecx], 0
je 0x42778b
mov edi, 2
mov ecx, esi
call fcn.00420cb0
mov edi, eax
jmp 0x427790
mov edi, SysReAllocString
cmp ebx, edi
jle 0x42779e
mov eax, ebx
mov ebx, edi
mov dword [esp + 0x58], ebx
mov edi, eax
call fcn.004137a0
mov ecx, eax
mov eax, ebx
cdq
mov ebx, eax
mov dword [esp + 0x60], edx
mov eax, edi
cdq
sub eax, ebx
sbb edx, dword [esp + 0x60]
add eax, 1
adc edx, 0
push edx
push eax
push 0
push ecx
call fcn.004c9840
add eax, dword [esp + 0x58]
jmp 0x4263bc
mov ecx, dword [0x4f0b64]
push 1
push esi
call fcn.0043c890
jmp 0x428217
mov edx, dword [0x4f0b68]
mov eax, dword [0x4f0b64]
mov ecx, dword [0x4f0b60]
push edx
push esi
call fcn.0043cab0
jmp 0x428217
mov eax, dword [0x4f0b68]
mov ecx, dword [0x4f0b64]
push esi
call fcn.0043cd90
jmp 0x428217
mov eax, dword [0x4f0b6c]
mov edx, dword [0x4f0b64]
push eax
push edx
xor edx, edx
mov eax, 0x9b
cmp cx, ax
sete dl
dec edx
and edx, dword [0x4f0b60]
push edx
push esi
call fcn.0043d380
jmp 0x428217
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
je 0x42785c
mov edi, 1
mov ecx, esi
call fcn.00420cb0
dec eax
jmp 0x42785e
xor eax, eax
cdq
test edx, edx
jg 0x42786f
jl 0x427869
test eax, eax
jae 0x42786f
xor eax, eax
mov dword [esp + 0x64], eax
mov ecx, 0x9d
push eax
cmp word [esi], cx
jne 0x427888
call fcn.0043e4c0
mov esi, dword [esp + 0x38]
jmp 0x428217
mov edi, dword [0x4f0b60]
mov ebx, esi
call fcn.0043e570
jmp 0x428217
mov edx, dword [0x4f0b64]
cmp byte [edx], 0
je 0x4278b5
mov edi, 1
mov ecx, esi
call fcn.00420cb0
mov ebx, eax
jmp 0x4278ba
mov ebx, 0x96
mov eax, dword [0x4f0b60]
cmp byte [eax], 0
je 0x4278dd
xor edi, edi
mov ecx, esi
call fcn.00420cb0
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
lea eax, [edi + 1]
jmp 0x428217
mov eax, 0x20b
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
je 0x427915
push str.wait
push eax
call fcn.004ba135
add esp, 8
test eax, eax
je 0x42793a
mov eax, dword [0x4f0b64]
push 0x4d9220
push eax
call fcn.004ba135
add esp, 8
test eax, eax
je 0x42793a
xor al, al
push eax
mov eax, dword [0x4f0b60]
push esi
call fcn.0043e6d0
jmp 0x428217
mov eax, 1
push eax
mov eax, dword [0x4f0b60]
push esi
call fcn.0043e6d0
jmp 0x428217
cmp byte [esi + 2], 2
jae 0x42795b
mov edi, dword [edi + 0x18]
jmp 0x42795d
xor edi, edi
mov ecx, dword [0x4f0b60]
mov edx, dword [0x4f0b64]
push edi
push ecx
push edx
push esi
call fcn.0043faa0
jmp 0x428217
mov ecx, dword [0x4f0b64]
push esi
call fcn.0043f150
jmp 0x428217
mov eax, dword [0x4f0b64]
mov ecx, dword [0x4f0b68]
push eax
push esi
call fcn.0043f710
jmp 0x428217
mov esi, dword [0x4f0b60]
mov ebx, dword [esp + 0x38]
call fcn.0043fe80
mov esi, ebx
jmp 0x428217
mov eax, dword [0x4f0b60]
call fcn.00450940
mov esi, dword [esp + 0x38]
jmp 0x428217
mov ecx, dword [0x4f0b60]
movsx eax, byte [ecx]
neg eax
sbb eax, eax
push 7
and eax, ecx
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHEmptyRecycleBinA]
test eax, eax
setne cl
movzx edx, cl
push edx
push esi
call fcn.0042d120
jmp 0x428217
mov eax, dword [0x4f0b60]
mov ecx, dword [0x4f0b68]
mov edx, dword [0x4f0b64]
push eax
push esi
call fcn.0043ff00
jmp 0x428217
add edi, 0x30
push edi
push 0
mov edi, 2
mov ecx, esi
call fcn.00420cb0
cmp eax, 1
mov eax, dword [0x4f0b64]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4f0b60]
push eax
call fcn.00451030
add esp, 0x10
test eax, eax
jne 0x427a93
mov ecx, dword [0x4f13d8]
push 1
push eax
push 0xffffffffffffffff
push 0x4d69c8
push ecx
call fcn.004a5c20
jmp 0x428217
add edi, 0x30
push edi
push 1
mov edi, 2
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [0x4f0b64]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4f0b60]
push eax
push ecx
call fcn.00451030
add esp, 0x10
push eax
push esi
call fcn.0042d1e0
jmp 0x428217
mov edi, 2
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [0x4f0b64]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4f0b60]
push eax
push ecx
call fcn.00450c10
add esp, 8
test al, al
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042d120
jmp 0x428217
mov ecx, dword [0x4f0b68]
mov al, byte [ecx]
call fcn.004099b0
cmp al, 0x52
jne 0x427b16
mov edx, dword [0x4f0b64]
mov eax, dword [0x4f0b60]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042d120
jmp 0x428217
mov edi, 2
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [0x4f0b64]
mov edx, dword [0x4f0b60]
push ecx
mov edi, eax
call fcn.00450da0
add esp, 4
test al, al
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042d120
jmp 0x428217
mov ecx, dword [0x4f0b60]
push ecx
mov ecx, esi
call fcn.0043ef90
jmp 0x428217
mov edx, dword [0x4f0b60]
cmp byte [edx], 0
je 0x427ba0
mov edi, 1
mov ecx, esi
call fcn.00420cb0
mov edx, dword [0x4f0b60]
cmp eax, edi
sete al
movzx ecx, al
push ecx
call fcn.00450f50
add esp, 4
test al, al
je 0x427ba0
xor al, al
push eax
push esi
call fcn.0042d120
jmp 0x428217
mov eax, 1
push eax
push esi
call fcn.0042d120
jmp 0x428217
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
jne 0x427bca
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x2c]
test edi, edi
jne 0x427bca
mov eax, 0x4d6959
mov edi, esi
call fcn.00440280
jmp 0x428217
mov ebx, dword [0x4f0b64]
cmp byte [ebx], 0
jne 0x427bf0
mov edi, dword [edi + 0x10]
lea ebx, [edi + 0x2c]
test edi, edi
jne 0x427bf0
mov ebx, 0x4d6959
mov edi, 3
mov ecx, esi
call fcn.00420cb0
mov esi, dword [0x4f0b68]
cmp eax, 1
sete dl
movzx eax, dl
push eax
call fcn.0041b500
mov ecx, dword [esp + 0x3c]
push eax
mov eax, dword [0x4f0b60]
push ebx
push ecx
call fcn.00440390
mov edx, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
xor eax, eax
cmp dword [edx + 0xe4], eax
sete al
jmp 0x428217
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
jne 0x427c53
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x2c]
test edi, edi
jne 0x427c53
mov eax, 0x4d6959
mov ecx, dword [0x4f0b68]
movzx edx, byte [ecx]
push edx
mov edi, esi
call fcn.00440970
jmp 0x428217
mov ebx, dword [0x4f0b64]
cmp byte [ebx], 0
jne 0x427c83
mov edi, dword [edi + 0x10]
lea ebx, [edi + 0x2c]
test edi, edi
jne 0x427c83
mov ebx, 0x4d6959
mov edi, 4
mov ecx, esi
call fcn.00420cb0
mov esi, dword [0x4f0b6c]
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.0041b500
mov edx, dword [0x4f0b68]
mov edi, dword [esp + 0x3c]
push eax
movzx eax, byte [edx]
push eax
mov eax, dword [0x4f0b60]
push ebx
call fcn.00440af0
mov ecx, dword [esp + 0x3c]
xor eax, eax
cmp dword [ecx + 0xe4], eax
mov esi, edi
sete al
jmp 0x428217
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
je 0x427cf2
mov edx, dword [0x4f0b68]
push edx
mov edi, eax
push esi
call fcn.00440ca0
jmp 0x428217
mov edi, dword [edi + 0x10]
test edi, edi
je 0x427d0e
mov edx, dword [0x4f0b68]
push edx
add edi, 0x2c
push esi
call fcn.00440ca0
jmp 0x428217
mov edx, dword [0x4f0b68]
push edx
mov edi, 0x4d6959
push esi
call fcn.00440ca0
jmp 0x428217
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
jne 0x427d3e
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x2c]
test edi, edi
jne 0x427d3e
mov eax, 0x4d6959
push esi
call fcn.00450a40
jmp 0x428217
mov edi, dword [0x4f0b60]
call fcn.0043e8c0
mov ecx, dword [esp + 0x3c]
xor eax, eax
cmp dword [ecx + 0xe4], eax
sete al
jmp 0x428217
mov edx, dword [0x4f0b70]
mov eax, dword [0x4f0b68]
mov ecx, dword [0x4f0b64]
push edx
push eax
push ecx
mov ecx, dword [0x4f0b6c]
push esi
call fcn.0043e9a0
jmp 0x428217
mov edx, dword [0x4f0b68]
mov eax, dword [0x4f0b64]
mov ecx, dword [0x4f0b6c]
push edx
push eax
mov edx, esi
call fcn.00450050
jmp 0x428217
mov ecx, dword [0x4f0b60]
push ecx
push esi
call fcn.00450380
jmp 0x428217
mov edx, dword [0x4f0b80]
mov eax, dword [0x4f0b7c]
mov ecx, dword [0x4f0b78]
mov ebx, dword [0x4f0b70]
mov edi, dword [0x4f0b6c]
push edx
mov edx, dword [0x4f0b74]
push eax
mov eax, dword [0x4f0b64]
push ecx
mov ecx, dword [0x4f0b60]
push edx
push eax
push ecx
mov ecx, dword [0x4f0b68]
push esi
call fcn.004506e0
jmp 0x428217
push 0
mov ecx, 4
call fcn.00439060
add esp, 4
jmp 0x428217
mov esi, dword [0x4f0b60]
push 7
call fcn.00409ac0
add esp, 4
cmp eax, 7
jne 0x427e42
push 0
lea ecx, [eax - 6]
call fcn.00439060
mov esi, dword [esp + 0x3c]
add esp, 4
jmp 0x428217
cmp byte [edi + 0xd9], 0
je 0x427e6e
mov ecx, dword [0x4f15ac]
test ecx, ecx
jle 0x427e58
dec ecx
jmp 0x427e5d
mov ecx, 0x18f
mov dword [0x4f15ac], ecx
mov dword [ecx*4 + 0x4f15b0], 0
mov esi, dword [esp + 0x38]
cmp eax, 1
sete dl
mov byte [edi + 0xd9], dl
mov eax, 1
jmp 0x428217
push 0
mov ecx, 2
call fcn.00439060
add esp, 4
jmp 0x428217
push 0
mov ecx, 3
call fcn.00439060
add esp, 4
jmp 0x428217
mov ebx, dword [0x4ec48c]
add ebx, 0x4c
call fcn.00459850
test eax, eax
je 0x427ecf
mov eax, dword [0x4ec48c]
mov ecx, dword [eax + 0x4c]
mov ebx, dword [ecx + 4]
jmp 0x427ed1
xor ebx, ebx
mov al, byte [esi + 2]
test al, al
jne 0x427ef8
fldz
sub esp, 8
fstp qword [esp]
push ebx
push 0
push 0x10000
push str.P:44_u
call fcn.0049be50
add esp, 4
push eax
jmp 0x427f3f
cmp al, 1
jne 0x427f15
fldz
mov edx, dword [0x4f0b60]
sub esp, 8
fstp qword [esp]
push ebx
push 0
push 0x10000
push edx
jmp 0x427f3f
mov edi, 3
mov ecx, esi
call fcn.00420d60
mov eax, dword [0x4f0b64]
sub esp, 8
fstp qword [esp]
push ebx
push eax
xor edi, edi
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [0x4f0b68]
push eax
push ecx
call fcn.004a77b0
mov edi, eax
add esp, 0x18
test edi, edi
jne 0x427f6c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x59e
jne 0x427f6c
mov edx, dword [0x4f0b60]
push edx
push edi
push 0x4d9718
jmp 0x42717f
xor eax, eax
test edi, edi
setne al
jmp 0x428217
mov eax, dword [0x4f0b7c]
cmp byte [eax], 0
je 0x427f94
mov edi, 7
mov ecx, esi
call fcn.00420cb0
mov dword [esp + 0x58], eax
jmp 0x427f9c
mov dword [esp + 0x58], CreateStatusWindowA
mov ecx, dword [0x4f0b78]
cmp byte [ecx], 0
je 0x427fb9
mov edi, 6
mov ecx, esi
call fcn.00420cb0
mov dword [esp + 0x6c], eax
jmp 0x427fc1
mov dword [esp + 0x6c], CreateStatusWindowA
mov edx, dword [0x4f0b74]
cmp byte [edx], 0
je 0x427fde
mov edi, 5
mov ecx, esi
call fcn.00420cb0
mov dword [esp + 0x4c], eax
jmp 0x427fe6
mov dword [esp + 0x4c], CreateStatusWindowA
mov eax, dword [0x4f0b70]
cmp byte [eax], 0
je 0x428002
mov edi, 4
mov ecx, esi
call fcn.00420cb0
mov dword [esp + 0x40], eax
jmp 0x42800a
mov dword [esp + 0x40], CreateStatusWindowA
mov edi, 9
mov ecx, esi
call fcn.00420d60
mov ecx, dword [0x4f0b88]
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x6c]
sub esp, 8
fstp qword [esp]
push ecx
mov ecx, dword [esp + 0x58]
push edx
mov edx, dword [0x4f0b6c]
push eax
mov al, byte [edx]
push ecx
call fcn.004099b0
mov edx, dword [0x4f0b64]
mov edi, dword [esp + 0x58]
cmp al, 0x48
mov eax, dword [0x4f0b68]
push eax
push edx
sete cl
push ebx
call fcn.00439320
add esp, 0x24
jmp 0x428217
mov eax, dword [0x4f0b64]
cmp byte [eax], 0
je 0x42807d
mov edi, 1
mov ecx, esi
call fcn.00420cb0
mov ebx, eax
jmp 0x42807f
xor ebx, ebx
mov ecx, dword [0x4f0b60]
cmp byte [ecx], 0
je 0x428095
xor edi, edi
mov ecx, esi
call fcn.00420cb0
jmp 0x42809a
mov eax, 0xc8
mov edx, dword [0x4f0b6c]
mov ecx, dword [0x4f0b68]
push edx
push ecx
push ebx
push eax
call fcn.0044e760
jmp 0x428217
mov eax, dword [0x4f0be0]
test eax, eax
je 0x4280d5
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4280d5
mov edx, dword [0x4f0be0]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4f0be0], 0
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b70]
mov ecx, dword [0x4f0b6c]
mov edx, dword [0x4f0b68]
push 0
push eax
mov eax, dword [0x4f0b64]
push ecx
mov ecx, dword [0x4f0b60]
push edx
push eax
push ecx
push esi
mov ecx, 0x4d6959
call fcn.0042fae0
jmp 0x428217
mov edx, dword [0x4f0b74]
mov eax, dword [0x4f0b70]
mov ecx, dword [0x4f0b6c]
push 1
push edx
mov edx, dword [0x4f0b68]
push eax
mov eax, dword [0x4f0b64]
push ecx
mov ecx, dword [0x4f0b60]
push edx
push eax
push esi
call fcn.0042fae0
jmp 0x428217
mov ecx, dword [0x4f0b68]
mov edx, dword [0x4f0b64]
mov eax, dword [0x4f0b60]
push ecx
mov ecx, dword [0x4f0b6c]
push edx
push eax
push esi
call fcn.00430d20
jmp 0x428217
mov ecx, dword [0x4f0b64]
mov edx, dword [0x4f0b60]
mov edi, dword [0x4f0b6c]
mov esi, dword [0x4f0b68]
push ecx
push edx
call fcn.004310b0
mov esi, dword [esp + 0x38]
jmp 0x428217
push esi
call fcn.00432960
jmp 0x428217
mov esi, dword [0x4f0b64]
call fcn.0041b7a0
mov esi, dword [0x4f0b60]
movzx ebx, ax
call fcn.0041b810
mov edx, dword [esp + 0x38]
mov cl, 2
cmp cl, byte [edx + 2]
movzx eax, ax
sbb esi, esi
and esi, dword [0x4f0b18]
mov dword [esp + 0x58], eax
je 0x428263
movzx ecx, ax
cmp ecx, 0xffffffff
je 0x428263
movzx eax, word [edi + 0xd0]
shr eax, cl
and eax, 3
jne 0x42824b
push 0x4dbea4
call fcn.0049be50
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
push esi
call fcn.004a5c20
test eax, eax
jne 0x428263
mov esi, dword [esp + 0x38]
xor eax, eax
mov dword [esp + 0x48], eax
test eax, eax
je 0x42490a
cmp dword [ebp + 8], 3
je 0x42490a
mov eax, dword [esi + 0x18]
mov dword [esp + 0x38], eax
mov esi, dword [esp + 0x38]
test esi, esi
je 0x424905
mov ebx, dword [esp + 0x74]
xor edi, edi
jmp 0x424610
cmp eax, 1
jne 0x428257
push 0x4dbeb4
jmp 0x4281f8
cmp eax, 2
jne 0x428263
push 0x4dbec4
jmp 0x4281f8
movzx ecx, word [esp + 0x58]
cmp ecx, 0xffffffff
je 0x428291
cmp ebx, 0xffffffff
je 0x428291
mov edx, 3
shl dx, cl
shl bx, cl
not dx
and dx, word [edi + 0xd0]
or dx, bx
mov word [edi + 0xd0], dx
mov esi, dword [esp + 0x38]
mov eax, 1
jmp 0x428217
xor edi, edi
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [esp + 0x3c]
mov byte [ecx + 0xcf], al
cmp al, 0x64
jbe case.0x4286c8.69
mov byte [ecx + 0xcf], 2
lea eax, [edi + 1]
jmp 0x428217
mov eax, dword [edi + 0xb4]
push eax
mov eax, dword [0x4f0b60]
call fcn.0041b470
mov dword [edi + 0xb4], eax
add esp, 4
mov eax, 1
jmp 0x428217
xor edi, edi
mov ecx, esi
call fcn.00420cb0
cmp eax, 0x64
ja case.0x4286c8.69
mov ecx, dword [esp + 0x3c]
mov byte [ecx + 0xd6], al
lea eax, [edi + 1]
jmp 0x428217
push str.P_0_
call fcn.0049be50
mov edx, dword [0x4f0b68]
add esp, 4
push eax
push edx
call fcn.004ba135
add esp, 8
test eax, eax
jne 0x428375
mov eax, dword [0x4f0b60]
cmp byte [eax], 0
je 0x42834c
xor edi, edi
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 0x60], eax
mov edx, dword [0x4f0b64]
cmp byte [edx], 0
je case.0x4286c8.69
mov edi, 1
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 0x68], eax
mov eax, edi
jmp 0x428217
mov edx, dword [0x4f0b60]
cmp byte [edx], 0
je 0x428390
xor edi, edi
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 0x5c], eax
mov edx, dword [0x4f0b64]
cmp byte [edx], 0
je case.0x4286c8.69
mov edi, 1
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 0x64], eax
mov eax, edi
jmp 0x428217
push str.P_0_
call fcn.0049be50
mov edx, dword [0x4f0b64]
add esp, 4
push eax
push edx
call fcn.004ba135
add esp, 8
xor edi, edi
mov ecx, esi
test eax, eax
jne 0x4283f2
call fcn.00420cb0
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 0x70], eax
lea eax, [edi + 1]
jmp 0x428217
call fcn.00420cb0
mov edx, dword [esp + 0x3c]
mov dword [edx + 0x6c], eax
mov eax, 1
jmp 0x428217
xor edi, edi
mov ecx, esi
call fcn.00420cb0
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 0x54], eax
lea eax, [edi + 1]
jmp 0x428217
xor edi, edi
mov ecx, esi
call fcn.00420cb0
mov edx, dword [esp + 0x3c]
mov dword [edx + 0x58], eax
lea eax, [edi + 1]
jmp 0x428217
mov eax, dword [0x4f0b60]
push 0x4dbee4
call fcn.004a3290
add esp, 4
mov ecx, esi
test eax, eax
je 0x428473
mov dword [edi], 0xffffffff
mov dword [edi + 4], 0xffffffff
xor edi, edi
call fcn.00420cb0
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 0x24], eax
lea eax, [edi + 1]
jmp 0x428217
mov dword [edi + 0x24], 0xffffffff
xor edi, edi
call fcn.00420cb0
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 4], edx
mov edx, eax
or edx, dword [ecx + 4]
mov dword [ecx], eax
jne case.0x4286c8.69
mov dword [ecx], 0xa
mov dword [ecx + 4], edi
lea eax, [edi + 1]
jmp 0x428217
mov esi, dword [0x4f0b60]
push 7
call fcn.00409ac0
add esp, 4
cmp eax, 7
je 0x4284c7
cmp eax, 1
sete al
mov byte [edi + 0xd3], al
mov esi, dword [esp + 0x38]
mov eax, 1
jmp 0x428217
mov esi, dword [0x4f0b60]
call fcn.0041af40
dec eax
cmp eax, 5
ja case.default.0x4284ea
jmp dword [eax*4 + 0x4296f8]
mov esi, dword [esp + 0x38]
mov eax, 1
mov dword [edi + 0x20], eax
jmp 0x428217
mov esi, dword [esp + 0x38]
mov dword [edi + 0x20], 2
mov eax, 1
jmp 0x428217
mov esi, dword [esp + 0x38]
mov dword [edi + 0x20], 4
mov eax, 1
jmp 0x428217
mov esi, dword [esp + 0x38]
mov dword [edi + 0x20], 3
mov eax, 1
jmp 0x428217
mov esi, dword [esp + 0x38]
mov byte [edi + 0xc9], 1
mov eax, 1
jmp 0x428217
mov esi, dword [esp + 0x38]
mov byte [edi + 0xc9], 0
mov eax, 1
jmp 0x428217
mov ecx, dword [0x4f0b60]
push ecx
push 0
push 0x4d9718
call fcn.0049be50
mov ecx, dword [esp + 0x44]
add esp, 4
push eax
call fcn.0042d2f0
mov esi, dword [esp + 0x38]
jmp 0x428217
push 0x4dbee8
call fcn.0049be50
mov edx, dword [0x4f0b60]
add esp, 4
push 5
push eax
push edx
call fcn.004babb4
add esp, 0xc
test eax, eax
jne 0x428684
lea edi, [eax + 1]
mov ecx, esi
call fcn.00420c30
cmp eax, 0x1e
jb 0x4285d1
mov eax, edi
jmp 0x428217
mov ecx, esi
call fcn.00420cb0
mov edi, eax
mov eax, dword [0x4f0b64]
push 0x2e
push eax
mov ebx, edx
call fcn.004bb121
add esp, 8
mov dword [esp + 0x58], eax
test eax, eax
je 0x428602
mov esi, eax
inc esi
call fcn.0041a410
mov esi, dword [esp + 0x38]
jmp 0x428606
xor eax, eax
xor edx, edx
add edi, eax
adc ebx, edx
add edi, 2
adc ebx, 0
mov dword [esp + 0x64], ebx
js 0x428628
jg case.0x4286c8.69
cmp edi, 0xff
ja case.0x4286c8.69
mov eax, dword [0x4f0b64]
push 0
push 1
push 1
push 1
call fcn.004a2da0
add esp, 0x10
mov ecx, 0x4dbef8
test eax, eax
jne 0x42864b
mov ecx, 0x4d6959
cmp dword [esp + 0x58], 0
mov eax, 0x4d6959
jne 0x42865c
mov eax, 0x4dafc8
mov edx, dword [esp + 0x3c]
push ecx
mov ecx, dword [0x4f0b64]
push eax
push ecx
add edx, 0x74
push str.___s_s_s
push edx
call fcn.004ba66c
add esp, 0x14
mov eax, 1
jmp 0x428217
push 0x4dbf08
call fcn.0049be50
add esp, 4
push 7
push eax
mov eax, dword [0x4f0b60]
push eax
call fcn.004babb4
add esp, 0xc
test eax, eax
jne case.0x4286c8.69
mov ecx, dword [0x4f0b64]
mov al, byte [ecx]
movsx ecx, al
add ecx, 0xffffffbc
cmp ecx, 0x24
ja case.0x4286c8.69
movzx edx, byte [ecx + 0x42971c]
jmp dword [edx*4 + 0x429710]
mov byte [edi + 0xd5], 0x44
mov eax, 1
jmp 0x428217
mov byte [edi + 0xd5], al
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b68]
mov ecx, dword [0x4f0b64]
push eax
call fcn.0043a1f0
jmp 0x428217
mov al, byte [esi + 2]
mov cl, 4
cmp cl, al
sbb edx, edx
and edx, dword [0x4f0b20]
mov cl, 3
push edx
cmp cl, al
mov eax, dword [0x4f0b74]
mov ecx, dword [0x4f0b70]
sbb edx, edx
and edx, dword [0x4f0b1c]
push edx
mov edx, dword [0x4f0b6c]
push eax
mov eax, dword [0x4f0b68]
push ecx
mov ecx, dword [0x4f0b60]
push edx
push eax
mov eax, dword [0x4f0b64]
push ecx
push 0x4f1cd8
call fcn.00467ab0
jmp 0x428217
mov edx, dword [0x4f0b6c]
mov eax, dword [0x4f0b68]
mov ecx, dword [0x4f0b64]
push edx
push eax
push ecx
mov ecx, dword [0x4f0b60]
push 0x4f1cd8
call fcn.004598c0
jmp 0x428217
mov ecx, dword [0x4f0b68]
mov dl, 2
cmp dl, byte [esi + 2]
mov edx, dword [0x4f0b64]
sbb eax, eax
and eax, dword [0x4f0b18]
push eax
mov eax, dword [0x4f0b60]
push ecx
push edx
push eax
push esi
call fcn.0045a210
jmp 0x428217
mov ecx, dword [0x4f0b6c]
mov edx, dword [0x4f0b64]
mov eax, dword [0x4f0b68]
push ecx
push edx
push esi
call fcn.0045b1f0
jmp 0x428217
mov eax, dword [0x4f0b60]
call fcn.0041b340
cmp eax, 7
ja case.0x4286c8.69
jmp dword [eax*4 + 0x429744]
cmp byte [0x4f0d34], 0
jne case.0x4286c8.69
call fcn.0042cd30
mov eax, 1
jmp 0x428217
cmp byte [0x4f0d34], 0
je case.0x4286c8.69
call fcn.0042cd30
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b60]
push eax
push 0
push 0x4d9718
jmp 0x42717f
mov edi, 1
mov ecx, esi
call fcn.00420cb0
test eax, eax
mov eax, dword [0x4f0b60]
setne cl
movzx edx, cl
push edx
call fcn.00409b30
push eax
push esi
call fcn.0042cd80
jmp 0x428217
mov esi, dword [0x4f0b60]
push 7
call fcn.00409ac0
add esp, 4
cmp eax, 7
je 0x42887c
cmp eax, 1
sete al
mov byte [edi + 0xd4], al
mov esi, dword [esp + 0x38]
mov eax, 1
jmp 0x428217
mov esi, dword [0x4f0b60]
call fcn.0041b2d0
mov byte [edi + 0xd2], al
cmp al, 4
jne 0x4288a6
mov byte [edi + 0xd2], 0
mov esi, dword [esp + 0x38]
mov eax, 1
jmp 0x428217
mov esi, dword [0x4f0b60]
push 7
call fcn.00409ac0
add esp, 4
cmp eax, 7
je 0x4288d5
cmp eax, 1
sete cl
mov byte [edi + 0xca], cl
mov esi, dword [esp + 0x38]
mov eax, 1
jmp 0x428217
mov esi, dword [0x4f0b60]
push 7
call fcn.00409ac0
add esp, 4
cmp eax, 7
je 0x428904
cmp eax, 1
sete dl
mov byte [edi + 0xcb], dl
mov esi, dword [esp + 0x38]
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b60]
call fcn.0041b3a0
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x4286c8.69
movzx ecx, byte [ecx + 0x42977c]
jmp dword [ecx*4 + 0x429764]
mov bl, 1
call fcn.0042ce80
mov eax, 1
jmp 0x428217
xor bl, bl
call fcn.0042ce80
mov eax, 1
jmp 0x428217
mov dword [0x4ec504], eax
mov eax, 1
jmp 0x428217
or byte [0x4f14e6], 2
cmp dword [0x4f0d0c], 0
mov byte [0x4f14e5], 1
jne case.0x4286c8.69
mov edx, dword [0x4ec518]
movzx eax, word [edx]
push eax
call fcn.00408200
add esp, 4
mov eax, 1
jmp 0x428217
mov byte [0x4f14e5], 0
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b60]
mov edi, str._a_a_a_v
mov cl, 0x90
call fcn.00440e60
jmp 0x428217
mov eax, dword [0x4f0b60]
mov edi, 0x4ec4fc
mov cl, 0x14
call fcn.00440e60
jmp 0x428217
mov eax, dword [0x4f0b60]
mov edi, 0x4ec500
mov cl, 0x91
call fcn.00440e60
jmp 0x428217
push 0x4f1cd8
mov al, 1
call fcn.0041cd60
mov eax, 1
jmp 0x428217
xor edi, edi
mov ecx, esi
call fcn.00420cb0
push 1
push eax
call fcn.00401910
add esp, 8
lea eax, [edi + 1]
jmp 0x428217
mov ecx, dword [0x4f0b6c]
mov edx, dword [0x4f0b68]
push ecx
mov ecx, dword [0x4f0b70]
push edx
mov edx, dword [0x4f0b64]
call fcn.0049a580
jmp 0x428217
mov eax, dword [0x4f0b60]
mov ecx, dword [0x4f0b6c]
mov ebx, dword [0x4f0b68]
mov edx, dword [0x4f0b64]
push eax
push esi
call fcn.0049a680
jmp 0x428217
cmp byte [esi + 2], 3
mov edx, dword [0x4f0b64]
sbb ecx, ecx
not ecx
and ecx, dword [0x4f0b68]
push ecx
push edx
mov edx, dword [0x4f0b60]
push esi
call fcn.0049a7a0
jmp 0x428217
mov eax, 2
cmp byte [esi + 2], al
jae 0x428abb
mov edi, dword [edi + 0x14]
test edi, edi
je 0x428abb
lea eax, [edi + 0x408]
push eax
mov eax, dword [edi + 4]
lea ecx, [edi + 8]
push ecx
push esi
call fcn.0049a810
jmp 0x428217
lea edx, [esp + 0x57]
push edx
mov edx, dword [0x4f0b64]
lea ecx, [esp + 0x7c]
push ecx
push edx
call fcn.0041acf0
mov edi, eax
mov eax, dword [esp + 0x84]
add esp, 0xc
test eax, eax
jne 0x428af2
mov eax, dword [0x4f0b68]
mov ecx, dword [0x4f0b6c]
mov dword [esp + 0x78], eax
jmp 0x428af8
mov ecx, dword [0x4f0b68]
push ecx
push eax
push esi
mov eax, edi
call fcn.0049a810
cmp byte [esp + 0x57], 0
mov ebx, eax
je 0x428b16
test edi, edi
je 0x428b16
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x428217
mov eax, 2
cmp byte [esi + 2], al
jae 0x428b54
mov edi, dword [edi + 0x14]
test edi, edi
je 0x428b54
mov edx, dword [edi + 0x808]
mov ebx, dword [0x4f0b60]
lea eax, [edi + 0x408]
push eax
mov eax, dword [edi + 4]
lea ecx, [edi + 8]
push ecx
push edx
push esi
call fcn.0049ab50
jmp 0x428217
lea ecx, [esp + 0x57]
push ecx
mov ecx, dword [0x4f0b64]
lea edx, [esp + 0x7c]
push edx
push ecx
call fcn.0041acf0
mov edi, eax
mov eax, dword [esp + 0x84]
add esp, 0xc
test eax, eax
jne 0x428b91
mov eax, dword [0x4f0b68]
mov ecx, dword [0x4f0b6c]
mov ebx, dword [0x4f0b70]
mov dword [esp + 0x78], eax
jmp 0x428b9d
mov ecx, dword [0x4f0b68]
mov ebx, dword [0x4f0b6c]
mov esi, dword [0x4f0b60]
push ecx
push eax
call fcn.0041ae50
mov edx, dword [esp + 0x40]
push eax
push edx
mov eax, edi
call fcn.0049ab50
cmp byte [esp + 0x57], 0
mov esi, eax
je 0x428bcb
test edi, edi
je 0x428bcb
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, esi
mov esi, dword [esp + 0x38]
jmp 0x428217
cmp byte [esi + 2], 1
jae 0x428c4c
mov eax, dword [edi + 0x14]
test eax, eax
je 0x428c4c
cmp dword [eax + 0x808], 0xfffffffe
lea ecx, [eax + 8]
jne 0x428c2c
cmp byte [ecx], 0
je 0x428c22
add eax, 0x408
push eax
push ecx
push 0x4dbdc0
mov esi, 0x400
lea edi, [esp + 0x14c]
call fcn.004a2f10
mov esi, dword [esp + 0x44]
add esp, 0xc
mov ecx, edi
mov edi, dword [esp + 0x3c]
xor eax, eax
jmp 0x428c31
lea ecx, [eax + 0x408]
xor eax, eax
jmp 0x428c31
add eax, 0x408
push eax
mov eax, dword [edi + 0x14]
mov ebx, dword [eax + 4]
push esi
mov edi, ecx
mov dword [esp + 0x80], ecx
call fcn.0049af30
jmp 0x428217
mov eax, dword [0x4f0b60]
lea ecx, [esp + 0x57]
push ecx
lea edx, [esp + 0x7c]
push edx
push eax
mov eax, 2
call fcn.0041acf0
add esp, 0xc
cmp dword [esp + 0x78], 0
mov ebx, eax
jne 0x428c84
mov ecx, dword [0x4f0b64]
mov edi, dword [0x4f0b68]
mov dword [esp + 0x78], ecx
jmp 0x428c8a
mov edi, dword [0x4f0b64]
cmp byte [edi], 0
jne 0x428c93
xor edi, edi
jmp 0x428cb3
push 0x4dbf18
call fcn.0049be50
add esp, 4
push eax
push edi
call fcn.004ba135
add esp, 8
test eax, eax
jne 0x428cb3
mov edi, 0x4d6959
push edi
mov edi, dword [esp + 0x7c]
push esi
call fcn.0049af30
cmp byte [esp + 0x57], 0
mov edi, eax
je 0x428cd2
test ebx, ebx
je 0x428cd2
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
jmp 0x428217
mov esi, dword [0x4f0b60]
call fcn.0041aef0
mov esi, eax
cmp esi, 0xffffffff
jne 0x428cf7
mov edx, dword [0x4f0b60]
push edx
jmp 0x428572
call fcn.004a4320
test eax, eax
je 0x428d06
mov dword [edi + 0xb0], esi
mov esi, dword [esp + 0x38]
mov eax, 1
jmp 0x428217
mov eax, dword [0x4f0b60]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, 1
jmp 0x428217
xor edi, edi
mov ecx, esi
call fcn.00420cb0
push eax
call fcn.00451840
xor ecx, ecx
add esp, 4
test al, al
setne cl
mov eax, ecx
jmp 0x428217
mov eax, dword [0x4f0b60]
call fcn.0041b9d0
cmp eax, 0xffffffff
jne 0x428d6c
mov edx, dword [0x4f0b60]
push edx
push 0
push 0x4d9718
jmp 0x42717f
mov dword [edi + 0xdc], eax
mov eax, 1
jmp 0x428217
mov ecx, dword [esp + 0x70]
mov dword [ecx], edx
jmp 0x424905
mov ecx, dword [esp + 0x70]
mov dword [ecx], edx
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x70]
mov dword [eax], edx
jmp 0x424905
cmp edi, edx
je 0x428e0c
cmp dword [edi + 8], edx
jne 0x428e0c
mov ecx, dword [0x4f0b10]
test ecx, ecx
je 0x428e01
cmp byte [ecx + 0x17], dl
jne 0x428dcf
mov eax, dword [ecx + 0xc]
jmp 0x428dd1
mov eax, ecx
test byte [eax + 0x15], 2
je 0x428e01
mov eax, edi
call fcn.0041a790
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 8], edx
mov ecx, dword [0x4f0b60]
mov dword [edi], ecx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x1c]
cmp esi, edx
je 0x428e41
mov edx, dword [esp + 0x70]
mov dword [edx], esi
jmp 0x424905
mov eax, 5
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x1c]
cmp esi, edx
je 0x428e6a
mov eax, dword [esp + 0x70]
mov dword [eax], esi
mov eax, 6
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4f0b64]
push ecx
push 0
push 0x4d9738
call fcn.0049be50
mov ecx, dword [esp + 0x44]
add esp, 4
push eax
call fcn.0042d2f0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4f0b68]
push edx
push 0
push str.P__09_3yol_.__x
call fcn.0049be50
add esp, 4
push eax
mov ecx, esi
call fcn.0042d2f0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [esp + 0x58], 0
je 0x428f06
lea esi, [esp + 0x58]
call fcn.0042d950
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x42490a
cmp eax, 8
je 0x42490a
push 0x4d6959
push 0
push str.J_7_u.__7:l_12i3c
call fcn.0049be50
mov ecx, dword [0x4f2048]
add esp, 4
push eax
call fcn.0042d2f0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [esi + 2], dl
jne 0x428f86
push 0x4d6959
push 0
push 0x4dbd40
call fcn.0049be50
add esp, 4
push eax
mov ecx, esi
call fcn.0042d070
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x10
call fcn.004bbddb
mov edi, eax
add esp, 4
test edi, edi
je 0x428fd5
mov eax, dword [0x4f1bf4]
test eax, eax
jne 0x428fff
mov edx, dword [esi + 0xc]
movzx eax, word [edx + 2]
mov ecx, 0xff
mov ebx, ecx
cmp ax, cx
jb 0x428fb4
mov ebx, eax
inc ebx
push ebx
call fcn.004ba2ed
add esp, 4
mov dword [0x4f1bf4], eax
test eax, eax
jne 0x429005
push edi
mov dword [0x4f1bf8], eax
call fcn.004b9d3f
add esp, 4
push 0x4d6959
push 0
push str.Out_of_memory.
mov ecx, esi
call fcn.0042d2f0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [0x4f1bf8]
xor ecx, ecx
push ecx
mov dword [esp + 0x84], eax
mov dword [esp + 0x9c], eax
lea edx, [esp + 0xa4]
push edx
lea eax, [esp + 0x9c]
push eax
lea edx, [esp + 0x8c]
push edx
lea eax, [esp + 0xa8]
push eax
push edi
lea edx, [esp + 0x60]
push edx
push ecx
push esi
mov dword [esp + 0xb8], ebx
mov dword [0x4f1bf4], ecx
mov dword [0x4f1bf8], ecx
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], ecx
mov dword [edi + 8], 0x41
call fcn.00455d80
mov ebx, eax
cmp ebx, dword [esp + 0x80]
jne 0x42907b
mov dword [edi + 0xc], ebx
jmp 0x4290c9
cmp dword [esp + 0x80], 0
mov dword [edi + 0xc], 0
je 0x4290c9
mov eax, dword [0x4f1bf4]
test eax, eax
je 0x4290b0
push eax
call fcn.004ba14c
add esp, 4
cmp dword [0x4f1bf8], 0x400000
jbe 0x4290b0
dec dword [0x4f1bfc]
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x94]
mov dword [0x4f1bf4], eax
mov dword [0x4f1bf8], ecx
test ebx, ebx
jne 0x4290f1
push edi
call fcn.004b9d3f
mov eax, dword [esp + 0x4c]
add esp, 4
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [edi + 8], 0x41
jne 0x429100
mov dword [edi + 8], 0
mov dword [edi], ebx
mov eax, dword [esp + 0x74]
test byte [eax + 0xe0], 2
mov dword [eax + 0xe4], edi
jne 0x42911c
push esi
call fcn.0042d600
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4ec518]
cmp word [eax], dx
jne 0x42915f
cmp dword [0x4f1544], edx
jne 0x42915f
cmp dword [0x4f0d08], edx
jne 0x42915f
cmp dword [0x4f0d0c], edx
jne 0x42915f
cmp byte [0x4f0d2c], dl
je case.0x424970.222
mov eax, 8
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor edi, edi
mov ecx, esi
call fcn.00420cb0
push eax
push 9
push 0x4f1cd8
call fcn.0041cda0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x70]
mov dword [edx], ecx
jmp 0x424905
mov edx, dword [esp + 0x70]
pop edi
mov dword [edx], ecx
mov ecx, dword [esp + 0x570]
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je 0x424905
push 0x4d6959
push 0
push 0x4dbd64
jmp 0x428ecb