Function at 0x4016e8
Capabilities:
Copy file
Create shortcut via ishelllink
Delete file
Delete registry value
Enumerate files on windows
Get file attributes
Move file
Query environment variable
Query or enumerate registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Set current directory
Set file attributes
Set registry value

Disassembly:
push ebp
mov ecx, 7
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x284]
push ebx
sub esp, 0x2cc
mov eax, dword [0x43ddac]
mov esi, dword [ebp + 8]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x29c], eax
mov dword [0x416100], ecx
mov esi, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x284]
mov eax, dword [ebp - 0x27c]
mov ebx, esi
mov dword [ebp - 0x2a0], ecx
mov edi, eax
sub ecx, 2
shl ebx, 0xd
shl edi, 0xd
add ebx, dword [0x40da14]
add edi, dword [0x40da14]
cmp ecx, 0x44
ja case.0x401755.67
jmp dword [ecx*4 + 0x40cca0]
mov dword [esp + 4], esi
mov dword [esp], str.Jump:__d
call fcn.0040914e
mov edi, dword [ebp - 0x280]
jmp 0x404248
mov dword [esp], 0
call fcn.00401434
push edx
mov dword [esp + 4], eax
mov dword [esp], str.Aborting:___s_
call fcn.0040914e
mov eax, dword [ebp - 0x280]
mov dword [esp + 4], 0
mov dword [esp], eax
jmp 0x401f9e
inc dword [0x441dfc]
cmp dword [ebp - 0x29c], 0
mov edi, 0x7fffffff
je 0x404248
mov dword [esp], 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push eax
jmp 0x404248
mov dword [esp], esi
call fcn.004016a5
push esi
lea ebx, [eax - 1]
mov dword [esp + 4], ebx
mov dword [esp], str.Call:__d
call fcn.0040914e
mov dword [esp + 4], 0
mov dword [esp], ebx
call fcn.00404254
push edi
push edi
mov edi, eax
jmp 0x404248
mov dword [esp], 0
call fcn.00401434
push ebx
mov dword [esp + 4], eax
mov dword [esp], str.DetailPrint:__s
call fcn.0040914e
mov eax, dword [ebp - 0x280]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00407c48
jmp 0x4041e1
xor eax, eax
call fcn.0040148a
mov dword [esp], str.Sleep__d_
mov dword [esp + 4], eax
mov ebx, eax
call fcn.0040914e
test ebx, ebx
mov eax, 1
cmovle ebx, eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40403d
mov dword [esp], str.BringToFront
call fcn.0040914e
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x40403d
cmp dword [ebp - 0x278], 0
jg 0x4018e3
mov eax, dword [esi*4 + 0x416020]
je 0x4018ac
mov dword [0x4160fc], eax
jmp 0x4018b3
mov dword [esi*4 + 0x416060], eax
mov eax, 1
call fcn.0040148a
mov edx, dword [ebp - 0x280]
mov dword [esp], str.SetFlag:__d_d
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [edx*4 + 0x416020], eax
call fcn.0040914e
jmp case.0x401755.67
mov eax, dword [esi*4 + 0x416060]
cmp dword [ebp - 0x274], 0
mov dword [esi*4 + 0x416020], eax
jns case.0x401755.67
mov eax, dword [0x4160fc]
mov dword [esi*4 + 0x416020], eax
jmp case.0x401755.67
mov edx, dword [ebp - 0x278]
xor ecx, ecx
mov eax, dword [edx*4 + 0x416020]
test eax, eax
sete cl
and eax, dword [ebp - 0x274]
mov dword [edx*4 + 0x416020], eax
mov edi, dword [ebp + ecx*4 - 0x280]
jmp 0x404248
mov eax, dword [eax*4 + 0x416020]
jmp 0x4038b7
mov edx, dword [0x441de8]
test edx, edx
je 0x401961
mov dword [esp + 4], eax
mov dword [esp], edx
call dword [sym.imp.USER32.dll_ShowWindow]
push ecx
push ecx
mov eax, dword [0x441df0]
test eax, eax
je case.0x401755.67
mov edx, dword [ebp - 0x280]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4041e1
mov dword [esp], 0xfffffff0
call fcn.00401434
push edi
mov ebx, eax
mov eax, dword [ebp - 0x27c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp], str.SetFileAttributes:___s_:_08X
call fcn.0040914e
mov eax, dword [ebp - 0x27c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push edx
push edx
test eax, eax
jne case.0x401755.67
mov dword [esp], str.SetFileAttributes_failed.
jmp 0x4024f5
mov dword [esp], 0xfffffff0
call fcn.00401434
push ebx
mov ebx, eax
mov eax, dword [ebp - 0x27c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp], str.CreateDirectory:___s____d_
call fcn.0040914e
mov dword [esp], ebx
call fcn.004085cc
push esi
xor esi, esi
test eax, eax
je 0x401ac7
mov dword [esp + 4], 0x5c
mov dword [esp], eax
call fcn.0040852d
mov edi, eax
push ecx
push ecx
mov ax, word [eax]
mov word [edi], 0
mov word [ebp - 0x29c], ax
test ax, ax
jne 0x401a58
cmp dword [ebp - 0x278], 0
je 0x401a58
call fcn.00409373
test eax, eax
je 0x401a58
mov dword [esp], ebx
call fcn.0040835c
jmp 0x401a60
mov dword [esp], ebx
call fcn.004083c0
push edx
test eax, eax
je 0x401aa3
cmp eax, 0xb7
je 0x401a82
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], str.CreateDirectory:_cant_create___s___err_d_
call fcn.0040914e
jmp 0x401aa0
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push ecx
test al, 0x10
jne 0x401ab3
mov dword [esp + 4], ebx
mov dword [esp], str.CreateDirectory:_cant_create___s____a_file_already_exists
call fcn.0040914e
inc esi
jmp 0x401ab3
mov dword [esp + 4], ebx
mov dword [esp], str.CreateDirectory:___s__created
call fcn.0040914e
mov ecx, dword [ebp - 0x29c]
lea eax, [edi + 2]
mov word [edi], cx
test cx, cx
jmp 0x401a0e
cmp dword [ebp - 0x27c], 0
je 0x401b27
mov dword [esp], 0xffffffe6
call fcn.004016c9
mov eax, dword [0x40da14]
push edi
add eax, 0x2c000
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00408c9c
push eax
push eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push edx
test eax, eax
jne 0x404240
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 4], ebx
inc esi
mov dword [esp + 8], eax
mov dword [esp], str.SetCurrentDirectory__s__failed___d_
call fcn.0040914e
jmp 0x404240
mov dword [esp], 0xfffffff5
jmp 0x403f06
mov dword [esp], 0
call fcn.00401434
push ecx
mov ebx, eax
mov dword [esp], eax
call fcn.004091ab
push esi
test eax, eax
je 0x401b6e
mov eax, dword [ebp - 0x27c]
mov dword [esp + 4], ebx
mov dword [esp], str.IfFileExists:_file___s__exists__jumping__d
mov dword [esp + 8], eax
call fcn.0040914e
jmp 0x4026d9
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], ebx
mov dword [esp], str.IfFileExists:_file___s__does_not_exist__jumping__d
mov dword [esp + 8], eax
call fcn.0040914e
jmp 0x4026e4
mov dword [esp], 0xffffffd0
call fcn.00401434
push ecx
mov edi, eax
mov dword [esp], 0xffffffdf
call fcn.00401434
push ebx
mov dword [ebp - 0x29c], eax
mov dword [esp], 0x13
call fcn.00401434
push esi
mov ebx, eax
mov dword [esp + 4], eax
mov dword [esp], str.Rename:__s
call fcn.0040914e
mov eax, dword [ebp - 0x29c]
mov dword [esp], edi
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov esi, eax
push edx
push edx
test eax, eax
je 0x401bf5
mov dword [esp], 0xffffffe3
jmp 0x4030e7
cmp dword [ebp - 0x278], 0
je 0x401c3c
mov dword [esp], edi
call fcn.004091ab
push edx
test eax, eax
je 0x401c3c
mov eax, dword [ebp - 0x29c]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.0040991d
push edi
push edi
mov dword [esp], 0xffffffe4
call fcn.004016c9
push eax
mov dword [esp + 4], ebx
mov dword [esp], str.Rename_on_reboot:__s
jmp 0x403f7c
mov dword [esp + 4], ebx
mov dword [esp], str.Rename_failed:__s
call fcn.0040914e
mov esi, 1
jmp 0x404240
mov dword [esp], 0
call fcn.00401434
push ecx
mov ebx, eax
lea eax, [ebp - 0x268]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0x1000
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
sub esp, 0x10
test eax, eax
je 0x401cc3
mov eax, dword [ebp - 0x268]
xor esi, esi
cmp eax, ebx
jbe 0x401ccd
cmp word [eax], 0
je 0x401ccd
mov dword [esp], ebx
call fcn.004091ab
push edx
test eax, eax
je 0x401cc3
add eax, 0x2c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x268]
mov dword [esp], eax
call fcn.00408c9c
push ebx
push ebx
jmp 0x401ccd
mov word [edi], 0
mov esi, 1
cmp dword [ebp - 0x278], 0
jne 0x404240
mov dword [esp + 8], 0x1000
mov dword [esp + 4], edi
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
sub esp, 0xc
jmp 0x404240
mov dword [esp], 0xffffffff
xor esi, esi
call fcn.00401434
lea edx, [ebp - 0x268]
push ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0x1000
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
sub esp, 0x18
test eax, eax
jmp 0x40335a
mov dword [esp], 0xffffffef
call fcn.00401434
push edi
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.004087e3
push edx
push edx
jmp 0x403987
mov dword [esp], 0x31
call fcn.00401434
push ebx
mov ebx, eax
mov eax, dword [ebp - 0x280]
mov edi, eax
sar eax, 3
and eax, 2
and edi, 7
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], str.File:_overwriteflag_d__allowskipfilesflag_d__name__s_
call fcn.0040914e
mov dword [esp], ebx
call fcn.00408599
push esi
test eax, eax
je 0x401db6
mov dword [esp + 4], ebx
mov dword [esp], 0x416120
call fcn.00408c9c
jmp 0x401de7
mov eax, dword [0x40da14]
mov dword [esp], 0x416120
add eax, 0x2c000
mov dword [esp + 4], eax
call fcn.00408c9c
push edx
push edx
mov dword [esp], eax
call fcn.00408cd0
push ecx
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrcatW
push esi
push esi
mov dword [esp], 0x416120
call fcn.00408d64
push eax
cmp edi, 2
jle 0x401e37
mov dword [esp], 0x416120
call fcn.004091ab
xor edx, edx
push ecx
test eax, eax
je 0x401e28
lea edx, [ebp - 0x274]
add eax, 0x14
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
push edx
push edx
mov edx, eax
sub edi, 3
or edi, 0x80000000
test edi, edx
je 0x401e58
jmp 0x401e3b
test edi, edi
jne 0x401e4c
mov dword [esp], 0x416120
xor edi, edi
call fcn.004086e8
push eax
jmp 0x401e51
cmp edi, 1
je 0x401e58
mov eax, 2
jmp 0x401e62
mov edi, 1
mov eax, 1
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40000000
mov dword [esp], 0x416120
call fcn.0040878b
sub esp, 0xc
mov esi, eax
cmp eax, 0xffffffff
jne 0x401faf
test edi, edi
je 0x401ec5
mov dword [esp + 4], ebx
mov dword [esp], 0xffffffe2
call fcn.00407c48
push eax
push eax
xor eax, eax
cmp edi, 2
sete al
mov esi, eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0x416120
mov dword [esp], str.File:_skipped:___s___overwriteflag_d_
call fcn.0040914e
jmp 0x404240
mov dword [esp + 4], 0x416120
mov dword [esp], str.File:_error_creating___s_
call fcn.0040914e
mov eax, dword [0x40da14]
mov dword [esp], 0x41a120
mov dword [esp + 4], eax
call fcn.00408c9c
push eax
push eax
mov eax, dword [0x40da14]
mov dword [esp + 4], 0x416120
mov dword [esp], eax
call fcn.00408c9c
push eax
push eax
mov eax, dword [ebp - 0x26c]
mov dword [esp], 0x418120
mov dword [esp + 4], eax
call fcn.00409399
mov eax, dword [0x40da14]
push edx
push edx
mov dword [esp + 4], 0x41a120
mov dword [esp], eax
call fcn.00408c9c
mov eax, dword [ebp - 0x280]
push ecx
push ecx
sar eax, 3
mov dword [esp + 4], eax
mov dword [esp], 0x418120
call fcn.004084c1
push esi
push esi
cmp eax, 4
je 0x401f72
cmp eax, 5
jne 0x401f83
mov dword [esp], str.File:_error__user_cancel
call fcn.0040914e
inc dword [0x416028]
jmp 0x404248
mov dword [esp], str.File:_error__user_retry
call fcn.0040914e
jmp 0x401e3b
mov dword [esp], str.File:_error__user_abort
call fcn.0040914e
mov dword [esp + 4], 0x416120
mov dword [esp], 0xfffffffa
call fcn.00407c48
mov edi, 0x7fffffff
push eax
push eax
jmp 0x404248
mov dword [esp + 4], ebx
mov dword [esp], 0xffffffea
call fcn.00407c48
inc dword [0x416054]
push eax
push eax
mov eax, dword [ebp - 0x278]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.004044e0
dec dword [0x416054]
sub esp, 0x10
mov edi, eax
mov dword [esp + 4], eax
mov dword [esp + 8], 0x416120
mov dword [esp], str.File:_wrote__d_to___s_
call fcn.0040914e
mov eax, dword [ebp - 0x274]
and eax, dword [ebp - 0x270]
inc eax
je 0x40203d
lea eax, [ebp - 0x274]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
sub esp, 0x10
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
test edi, edi
jns case.0x401755.67
cmp edi, 0xfffffffe
jne 0x40207c
mov dword [esp + 4], 0xffffffe9
mov dword [esp], 0x416120
call fcn.00409399
push edi
push edi
mov dword [esp + 4], ebx
mov dword [esp], 0x416120
call sub.KERNEL32.dll_lstrcatW
jmp 0x402090
mov dword [esp + 4], 0xffffffee
mov dword [esp], 0x416120
call fcn.00409399
push esi
push esi
mov dword [esp + 4], 0x416120
mov dword [esp], 0x40c5cc
call fcn.0040914e
mov dword [esp + 4], 0x200010
mov dword [esp], 0x416120
jmp 0x403208
mov dword [esp], 0
call fcn.00401434
push ebx
mov ebx, eax
mov dword [esp + 4], eax
mov dword [esp], str.Delete:___s_
jmp 0x40215b
mov dword [esp], 0x31
call fcn.00401434
push edx
mov ebx, eax
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x280]
mov dword [esp], str.MessageBox:__d___s_
mov dword [esp + 4], eax
call fcn.0040914e
mov eax, dword [ebp - 0x280]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004084c1
push ecx
push ecx
test eax, eax
je 0x401c4c
cmp dword [ebp - 0x278], eax
je 0x402309
cmp dword [ebp - 0x270], eax
jne case.0x401755.67
mov edi, dword [ebp - 0x26c]
jmp 0x404248
mov dword [esp], 0xfffffff0
call fcn.00401434
push edi
mov ebx, eax
mov dword [esp + 4], eax
mov dword [esp], str.RMDir:___s_
call fcn.0040914e
mov eax, dword [ebp - 0x27c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00409962
jmp 0x4041e1
mov dword [esp], 1
call fcn.00401434
push esi
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
jmp 0x402950
mov eax, 2
call fcn.0040148a
mov esi, eax
mov eax, 3
mov dword [ebp - 0x2a0], edx
call fcn.0040148a
mov dword [esp], 1
mov edi, eax
call fcn.00401434
push edx
mov dword [ebp - 0x29c], eax
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
push ecx
mov ecx, dword [ebp - 0x2a0]
mov word [ebx], 0
test ecx, ecx
cmove esi, eax
test esi, esi
je case.0x401755.67
test edi, edi
mov edx, dword [ebp - 0x29c]
jns 0x4021f5
add edi, eax
js case.0x401755.67
cmp eax, edi
mov dword [esp], ebx
cmovg eax, edi
add eax, eax
add eax, edx
mov dword [esp + 4], eax
call fcn.00408c9c
push eax
push eax
test esi, esi
jns 0x40221d
mov dword [esp], ebx
call sub.KERNEL32.dll_lstrlenW
push edi
add esi, eax
js 0x40222b
cmp esi, 0xfff
jg case.0x401755.67
jmp 0x40222d
xor esi, esi
mov word [ebx + esi*2], 0
jmp case.0x401755.67
mov dword [esp], 0x20
call fcn.00401434
push edx
mov ebx, eax
mov dword [esp], 0x31
call fcn.00401434
cmp dword [ebp - 0x270], 0
push ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
jne 0x40226c
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
jmp 0x402272
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push edi
push edi
test eax, eax
jne 0x402309
jmp 0x4026e4
mov dword [esp], 1
call fcn.00401434
push esi
mov esi, eax
mov dword [esp + 8], 0x1000
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
sub esp, 0xc
test eax, eax
jne 0x4022b8
mov word [ebx], 0
mov esi, 1
jmp 0x4022da
cmp dword [ebp - 0x278], 0
jne 0x4022c5
xor esi, esi
jmp 0x4022da
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push ecx
push ecx
test eax, eax
je 0x4022ac
jmp 0x4022c1
mov word [ebx + 0x1ffe], 0
jmp 0x404240
xor eax, eax
mov esi, dword [ebp - 0x26c]
call fcn.0040148a
mov ebx, eax
mov eax, 1
call fcn.0040148a
test esi, esi
jne 0x402325
cmp ebx, eax
jge 0x402314
mov edi, dword [ebp - 0x274]
jmp 0x404248
jle 0x4026e4
mov edi, dword [ebp - 0x270]
jmp 0x404248
cmp ebx, eax
jb 0x402309
jbe 0x4026e4
jmp 0x40231a
mov eax, 1
call fcn.0040148a
mov dword [ebp - 0x29c], eax
mov eax, 2
call fcn.0040148a
mov esi, dword [ebp - 0x274]
mov edi, eax
mov ecx, eax
cmp esi, 0xd
ja case.default.0x40235e
jmp dword [esi*4 + 0x40cdb4]
mov edi, dword [ebp - 0x29c]
add edi, eax
jmp 0x402435
mov edi, dword [ebp - 0x29c]
sub edi, eax
jmp 0x402433
mov edi, dword [ebp - 0x29c]
imul edi, eax
jmp 0x402433
mov esi, 1
test eax, eax
je 0x402435
mov eax, dword [ebp - 0x29c]
cdq
idiv edi
jmp 0x4023e0
mov edi, dword [ebp - 0x29c]
or edi, eax
jmp 0x402433
mov edi, dword [ebp - 0x29c]
and edi, eax
jmp 0x402433
mov edi, dword [ebp - 0x29c]
xor edi, eax
jmp 0x402433
cmp dword [ebp - 0x29c], 0
sete al
jmp 0x4023dd
mov eax, dword [ebp - 0x29c]
or eax, edi
setne al
movzx eax, al
mov edi, eax
jmp 0x402433
cmp dword [ebp - 0x29c], 0
setne al
xor edx, edx
test edi, edi
setne dl
and edx, eax
jmp 0x40240b
mov esi, 1
test eax, eax
je 0x402435
mov eax, dword [ebp - 0x29c]
cdq
idiv edi
mov edi, edx
jmp 0x402433
mov edi, dword [ebp - 0x29c]
shl edi, cl
jmp 0x402433
mov edi, dword [ebp - 0x29c]
sar edi, cl
jmp 0x402433
mov edi, dword [ebp - 0x29c]
shr edi, cl
jmp 0x402433
mov edi, dword [ebp - 0x29c]
xor esi, esi
mov dword [esp + 4], edi
jmp 0x4026bc
mov dword [esp], 1
call fcn.00401434
push edx
mov esi, eax
mov eax, 2
call fcn.0040148a
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_wsprintfW]
jmp case.0x401755.67
mov esi, dword [ebp - 0x278]
mov edi, dword [0x420120]
test esi, esi
je 0x4024e6
mov eax, esi
dec eax
test edi, edi
je 0x40248e
mov edi, dword [edi]
test eax, eax
jne 0x40247f
test edi, edi
jne 0x4024a3
mov dword [esp + 4], esi
mov dword [esp], str.Exch:_stack____d_elements
call fcn.0040914e
jmp 0x4031e7
add edi, 4
mov dword [esp], 0x416120
mov dword [esp + 4], edi
call fcn.00408c9c
push eax
push eax
mov eax, dword [0x420120]
add eax, 4
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00408c9c
push eax
push eax
mov eax, dword [0x420120]
add eax, 4
mov dword [esp + 4], 0x416120
mov dword [esp], eax
jmp 0x403d0b
test eax, eax
je 0x40251f
test edi, edi
jne 0x4024ff
mov dword [esp], str.Pop:_stack_empty
call fcn.0040914e
jmp 0x401c4c
lea eax, [edi + 4]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00408c9c
push eax
push eax
mov eax, dword [edi]
mov dword [0x420120], eax
mov dword [esp], edi
jmp 0x402ce9
mov dword [esp + 4], 0x2004
mov dword [esp], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push ecx
mov ebx, eax
mov eax, dword [ebp - 0x280]
push ecx
mov dword [esp + 4], eax
lea eax, [ebx + 4]
mov dword [esp], eax
call fcn.00409399
mov eax, dword [0x420120]
push edi
push edi
mov dword [ebx], eax
mov dword [0x420120], ebx
jmp 0x404240
mov eax, 3
call fcn.0040148a
mov esi, eax
mov eax, 4
call fcn.0040148a
mov edi, eax
test byte [ebp - 0x26c], 1
jne 0x40258a
mov dword [ebp - 0x29c], esi
jmp 0x40259d
mov dword [esp], 0x33
call fcn.00401434
mov dword [ebp - 0x29c], eax
push edx
test byte [ebp - 0x26c], 2
je 0x4025b5
mov dword [esp], 0x44
call fcn.00401434
push esi
mov edi, eax
cmp dword [ebp - 0x284], 0x21
jne 0x402653
mov eax, 1
call fcn.0040148a
mov dword [ebp - 0x2a0], eax
mov eax, 2
call fcn.0040148a
mov esi, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x2a0]
sar esi, 2
je 0x40262d
lea edx, [ebp - 0x268]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], edx
mov edx, dword [ebp - 0x29c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edi
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
sub esp, 0x1c
test eax, eax
sete al
movzx eax, al
mov esi, eax
jmp 0x4026a5
mov edx, dword [ebp - 0x29c]
mov dword [esp + 0xc], edi
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x268], eax
sub esp, 0x10
jmp 0x4026a5
mov dword [esp], 1
call fcn.00401434
push edx
mov esi, eax
mov dword [esp], 0x12
call fcn.00401434
push ecx
cmp word [eax], 0
jne 0x402677
xor eax, eax
cmp word [esi], 0
jne 0x40267f
xor esi, esi
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], esi
xor esi, esi
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [ebp - 0x268], eax
sub esp, 0x10
cmp dword [ebp - 0x280], 0
js 0x404240
mov eax, dword [ebp - 0x268]
mov dword [esp + 4], eax
mov dword [esp], ebx
jmp 0x40409c
xor eax, eax
call fcn.0040148a
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsWindow]
push edi
test eax, eax
je 0x4026e4
mov edi, dword [ebp - 0x27c]
jmp 0x404248
mov edi, dword [ebp - 0x278]
jmp 0x404248
mov eax, 2
call fcn.0040148a
mov esi, eax
mov eax, 1
call fcn.0040148a
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push esi
push esi
jmp 0x4038b7
add eax, dword [0x420188]
mov ebx, eax
xor eax, eax
call fcn.0040148a
mov dword [esp + 8], ebx
mov dword [esp + 4], 0xffffffeb
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x40423b
test byte [ebp - 0x273], 1
je 0x402757
mov eax, 2
call fcn.0040148a
jmp 0x402772
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push ecx
push ecx
mov esi, eax
mov eax, dword [ebp - 0x274]
mov ecx, eax
mov edx, eax
and ecx, 3
shr edx, 0x1e
mov dword [ebp - 0x29c], ecx
mov ecx, eax
and edx, 1
and ecx, 4
mov edi, edx
mov dword [ebp - 0x2a4], ecx
mov ecx, eax
shr ecx, 0x1f
bt eax, 0x10
mov dword [ebp - 0x2a8], ecx
jae 0x4027ba
mov dword [esp], 0x11
call fcn.00401434
push edx
jmp 0x4027c1
movzx eax, word [ebp - 0x27c]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x268]
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [ebp - 0x274]
mov edx, dword [ebp - 0x25c]
push eax
imul edx, edi
push eax
and ecx, 0xfef0
mov eax, dword [ebp - 0x2a8]
xor edi, edi
imul eax, dword [ebp - 0x260]
cmp dword [ebp - 0x2a4], 0
je 0x40280f
mov edi, dword [0x43dda8]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0x14], ecx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 0x10], edx
mov dword [esp], edi
mov dword [esp + 4], eax
call dword [sym.imp.USER32.dll_LoadImageW]
sub esp, 0x18
mov edi, eax
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 4], 0x172
mov dword [esp + 8], eax
mov dword [esp], esi
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
test eax, eax
je 0x402876
cmp dword [ebp - 0x29c], 0
jne 0x402876
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push eax
cmp dword [ebp - 0x280], 0
js case.0x401755.67
mov dword [esp + 4], edi
jmp 0x4038bb
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetDC]
push esi
mov esi, eax
mov dword [esp + 4], 0x5a
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push edi
mov edi, eax
mov eax, 2
call fcn.0040148a
mov dword [esp + 8], 0x48
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
sub esp, 0xc
mov dword [0x4160a0], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
push eax
push eax
mov eax, 3
call fcn.0040148a
mov dword [esp], 0x4160bc
mov dword [0x4160b0], eax
mov eax, dword [ebp - 0x270]
mov byte [0x4160b7], 1
mov edx, eax
and edx, 1
mov byte [0x4160b4], dl
mov edx, eax
and eax, 4
mov byte [0x4160b6], al
mov eax, dword [ebp - 0x27c]
and edx, 2
mov byte [0x4160b5], dl
mov dword [esp + 4], eax
call fcn.00409399
push eax
push eax
mov dword [esp], 0x4160a0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push ecx
jmp 0x4038b7
xor eax, eax
call fcn.0040148a
mov ebx, eax
mov eax, 1
call fcn.0040148a
cmp dword [ebp - 0x278], 0
mov edi, eax
je 0x402980
mov dword [esp], str.HideWindow
call fcn.0040914e
mov esi, dword [ebp - 0x274]
mov dword [esp + 4], edi
mov dword [esp], ebx
test esi, esi
jne 0x40299c
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4040cf
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x4041e1
mov dword [esp], 0
call fcn.00401434
push edx
mov ebx, eax
mov dword [esp], 0x31
call fcn.00401434
push ecx
mov edi, eax
mov dword [esp], 0x22
call fcn.00401434
push esi
mov esi, eax
mov dword [esp], 0x15
call fcn.00401434
push eax
mov dword [esp], 0xffffffec
call fcn.004016c9
push eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x24c], eax
xor eax, eax
cmp word [ebx], 0
mov edx, eax
mov dword [ebp - 0x258], edi
cmovne edx, ebx
mov dword [ebp - 0x25c], edx
cmp word [esi], 0
cmovne eax, esi
mov dword [ebp - 0x254], eax
mov eax, dword [0x40da14]
add eax, 0x2c000
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x268]
mov dword [esp], eax
call fcn.00408470
push edx
test eax, eax
jne 0x402a80
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp], str.ExecShell:_warning:_error____s_:_file:__s__params:__s___d
call fcn.0040914e
jmp 0x401c4c
test byte [ebp - 0x264], 0x40
je 0x402aa8
mov eax, dword [ebp - 0x230]
mov dword [esp], eax
call fcn.00409cdd
mov eax, dword [ebp - 0x230]
push ecx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp], str.ExecShell:_success____s_:_file:__s__params:__s__
call fcn.0040914e
jmp case.0x401755.67
mov dword [esp], 0
call fcn.00401434
push ecx
mov esi, eax
mov dword [esp + 4], eax
mov dword [esp], str.Exec:_command__s_
call fcn.0040914e
mov dword [esp + 4], esi
mov dword [esp], 0xffffffeb
call fcn.00407c48
push ebx
push ebx
mov dword [esp], esi
call fcn.004083ee
push edx
mov ebx, eax
mov dword [esp + 4], esi
test eax, eax
je 0x402b5c
mov dword [esp], str.Exec:_success____s__
call fcn.0040914e
mov esi, dword [ebp - 0x278]
test esi, esi
je 0x402b4d
mov dword [esp], ebx
call fcn.00409cdd
cmp dword [ebp - 0x27c], 0
push edx
js 0x402b43
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00408bb5
push esi
push esi
xor esi, esi
jmp 0x402b4d
test eax, eax
setne al
movzx eax, al
mov esi, eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ecx
jmp 0x404240
mov dword [esp], str.Exec:_failed_createprocess____s__
jmp 0x401c47
mov dword [esp], 2
call fcn.00401434
push esi
mov dword [esp], eax
call fcn.004091ab
mov esi, eax
push edx
test eax, eax
je 0x402b9d
mov eax, dword [eax + 0x14]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00408bb5
push ecx
push ecx
mov eax, dword [esi + 0x18]
jmp 0x4038b7
mov word [ebx], 0
jmp 0x40417b
mov dword [esp], 0xffffffee
call fcn.00401434
push ecx
mov dword [ebp - 0x2a0], eax
mov dword [esp], 0xb
call fcn.00409327
mov ecx, dword [ebp - 0x2a0]
lea edx, [ebp - 0x28c]
push esi
mov dword [esp + 4], edx
mov dword [esp], ecx
call eax
mov esi, eax
push edx
push edx
mov word [ebx], 0
mov word [edi], 0
test eax, eax
je 0x401c4c
mov dword [esp + 4], eax
mov dword [esp], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x29c], eax
push edx
push edx
test eax, eax
je 0x401c4c
mov dword [esp], 0xc
call fcn.00409327
push edx
mov dword [ebp - 0x2a4], eax
mov dword [esp], 0xd
call fcn.00409327
push ecx
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 8], esi
mov dword [esp], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 4], 0
call eax
mov edx, dword [ebp - 0x2a8]
sub esp, 0x10
test eax, eax
jne 0x402c74
mov esi, 1
jmp 0x402ce0
lea eax, [ebp - 0x268]
mov dword [esp + 4], 0x40c804
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call edx
sub esp, 0x10
test eax, eax
je 0x402c6d
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x288]
xor esi, esi
mov eax, dword [eax + edx*4 + 8]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00408bb5
mov edx, dword [ebp - 0x274]
push eax
push eax
mov eax, dword [ebp - 0x288]
mov eax, dword [eax + edx*4 + 0xc]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00408bb5
push eax
push eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x402b56
cmp dword [section..bss], 0
js 0x402e41
mov dword [esp], 0xfffffff0
call fcn.00401434
push ebx
mov esi, eax
mov dword [esp], 1
call fcn.00401434
cmp dword [ebp - 0x270], 0
push edi
mov edi, eax
jne 0x402d4f
mov dword [esp + 8], 8
mov dword [esp + 4], 0
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
sub esp, 0xc
mov ebx, eax
test eax, eax
jne 0x402d5f
jmp 0x402e24
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ebx, eax
push ecx
test eax, eax
je 0x402d28
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.00409c95
push edx
push edx
test eax, eax
je 0x402dcd
mov esi, dword [ebp - 0x278]
test esi, esi
je 0x402d9e
mov dword [esp], esi
mov dword [ebp - 0x29c], eax
call fcn.004016c9
push eax
mov eax, dword [ebp - 0x29c]
call eax
test eax, eax
setne al
movzx eax, al
mov esi, eax
jmp 0x402df8
mov ecx, dword [0x40da14]
mov dword [esp + 0x10], 0x40b000
mov dword [esp + 0xc], 0x420120
mov dword [esp + 8], ecx
mov ecx, dword [ebp - 0x29c]
mov dword [esp + 4], 0x1000
mov dword [esp], ecx
call eax
jmp 0x402df8
mov dword [esp + 4], edi
mov dword [esp], 0xfffffff7
call fcn.00407c48
push eax
push eax
mov dword [esp + 8], esi
mov esi, 1
mov dword [esp + 4], edi
mov dword [esp], 0x40c808
call fcn.0040914e
cmp dword [ebp - 0x274], 0
jne 0x404240
mov dword [esp], ebx
call fcn.004053db
push edi
test eax, eax
je 0x404240
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x402b56
mov dword [esp], 0xfffffff6
call fcn.004016c9
push ebx
mov dword [esp + 4], esi
mov dword [esp], str.Error_registering_DLL:_Could_not_load__s
jmp 0x401c47
mov dword [esp], 0xffffffe7
call fcn.004016c9
push ecx
mov dword [esp], str.Error_registering_DLL:_Could_not_initialize_OLE
jmp 0x4024f5
mov dword [esp], 0xfffffff0
call fcn.00401434
push esi
mov dword [ebp - 0x2a4], eax
mov dword [esp], 0xffffffdf
call fcn.00401434
push edi
mov esi, eax
mov dword [esp], 2
call fcn.00401434
push edx
mov dword [ebp - 0x2a8], eax
mov dword [esp], 0xffffffcd
call fcn.00401434
push ecx
mov edi, eax
mov dword [esp], 0x45
call fcn.00401434
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x270]
push ebx
mov dword [ebp - 0x29c], eax
and eax, 0xfff
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], esi
sar eax, 0xc
and eax, 7
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x29c]
shr eax, 0x10
mov dword [ebp - 0x2b0], eax
call fcn.00408599
push edx
test eax, eax
jne 0x402f03
mov dword [esp], 0x21
call fcn.00401434
push ebx
mov eax, dword [ebp - 0x2b0]
mov dword [esp + 0x10], edi
mov dword [esp + 8], esi
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], str.CreateShortcut:_out:___s___in:___s__s___icon:__s__d__sw_d__hk_d
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x2ac]
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x2a8]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 4], eax
call fcn.0040914e
lea eax, [ebp - 0x288]
mov dword [esp + 0xc], 0x413910
mov dword [esp + 0x10], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x40f010
call dword [sym.imp.ole32.dll_CoCreateInstance]
sub esp, 0x14
test eax, eax
jns 0x402f91
mov dword [esp], 0xfffffff0
call fcn.004016c9
push ecx
jmp 0x401c4c
mov eax, dword [ebp - 0x288]
lea ecx, [ebp - 0x268]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 4], 0x412f10
mov dword [esp], eax
call dword [edx]
sub esp, 0xc
mov ebx, eax
test eax, eax
js 0x4030c9
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [edx + 0x50]
bt dword [ebp - 0x29c], 0xf
mov ebx, eax
push edx
push edx
jb 0x402ffb
mov edx, dword [ebp - 0x288]
mov eax, dword [0x40da14]
mov ecx, dword [edx]
add eax, 0x2c000
mov dword [esp], edx
mov dword [esp + 4], eax
call dword [ecx + 0x24]
push eax
push eax
cmp dword [ebp - 0x2a0], 0
je 0x40301e
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x3c]
push eax
push eax
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2b0]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x34]
push eax
push eax
cmp word [edi], 0
je 0x40305d
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [edx + 0x44]
sub esp, 0xc
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x2c]
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x2b4]
push edi
push edi
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x1c]
push eax
push eax
test ebx, ebx
js 0x4030ba
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [eax]
mov dword [esp + 8], 1
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x18]
sub esp, 0xc
mov ebx, eax
mov eax, dword [ebp - 0x268]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push esi
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push ecx
test ebx, ebx
js 0x402f7f
mov dword [esp], 0xfffffff4
call fcn.004016c9
jmp 0x40403d
mov dword [esp], 0
call fcn.00401434
push edi
mov ebx, eax
mov dword [esp], 0x11
call fcn.00401434
push edx
mov esi, eax
mov dword [esp], 0x23
call fcn.00401434
push ecx
mov edi, eax
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], str.CopyFiles___s_____s_
call fcn.0040914e
mov dword [esp], ebx
call fcn.004091ab
push edx
test eax, eax
je 0x4031c4
mov dword [esp], ebx
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x264], 2
mov dword [ebp - 0x268], eax
call sub.KERNEL32.dll_lstrlenW
push edx
mov word [ebx + eax*2 + 2], 0
mov dword [esp], esi
call sub.KERNEL32.dll_lstrlenW
push ecx
mov word [esi + eax*2 + 2], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x25c], esi
mov dword [esp + 4], edi
mov dword [esp], 0
mov dword [ebp - 0x260], ebx
mov word [ebp - 0x258], ax
mov dword [ebp - 0x24e], edi
call fcn.00407c48
lea eax, [ebp - 0x268]
push ebx
push ebx
mov dword [esp], eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
push esi
mov esi, eax
test eax, eax
je 0x404240
mov dword [esp + 4], 0
mov dword [esp], 0xfffffff9
call fcn.00407c48
push eax
push eax
jmp 0x401c4c
cmp esi, 0xbadf00d
je 0x403212
mov dword [esp + 4], 0xffffffe8
mov dword [esp], 0
call fcn.00409399
push edi
push edi
mov dword [esp + 4], 0x200010
mov dword [esp], eax
call fcn.004084c1
jmp 0x401fa3
inc dword [0x416034]
jmp case.0x401755.67
mov dword [esp + 4], str._RM_
mov dword [esp], 0x418120
call fcn.00408c9c
push ebx
push ebx
xor ebx, ebx
mov dword [esp + 4], 0x418120
mov dword [esp], 0x41a120
call fcn.00408c9c
cmp dword [ebp - 0x280], 0
push esi
push esi
je 0x403263
mov dword [esp], 0
call fcn.00401434
push ecx
mov ebx, eax
xor esi, esi
cmp dword [ebp - 0x27c], 0
je 0x40327d
mov dword [esp], 0x11
call fcn.00401434
push edx
mov esi, eax
xor edi, edi
cmp dword [ebp - 0x270], 0
je 0x403297
mov dword [esp], 0x22
call fcn.00401434
push edi
mov edi, eax
mov dword [esp], 0xffffffcd
call fcn.00401434
push ecx
mov dword [ebp - 0x29c], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x41a120
mov dword [esp + 8], 0x418120
mov dword [esp + 4], 0x416120
mov dword [esp], str.WriteINIStr:_wrote___s___s_s_in__s
call fcn.0040914e
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp + 0xc], eax
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
sub esp, 0x10
jmp 0x403987
mov dword [esp], 1
mov dword [ebp - 0x268], 0xa
call fcn.00401434
push edx
mov edi, eax
mov dword [esp], 0x12
call fcn.00401434
push ecx
mov esi, eax
mov dword [esp], 0xffffffdd
call fcn.00401434
push edx
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x268]
mov dword [esp + 4], esi
xor esi, esi
mov dword [esp + 0x10], 0xfff
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
sub esp, 0x18
cmp word [ebx], 0xa
jne 0x404240
jmp 0x403ce6
mov dword [esp], eax
mov edi, eax
call fcn.00408f36
cmp dword [ebp - 0x270], 0
mov esi, eax
jne 0x4033e6
mov dword [esp], 2
call fcn.004014bf
push edi
mov edi, eax
test eax, eax
je 0x401c4c
mov dword [esp], 0x33
call fcn.00401434
push ecx
mov dword [ebp - 0x29c], eax
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov edx, dword [ebp - 0x29c]
push ebx
push ebx
mov ebx, eax
mov dword [esp + 4], esi
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x41a120
mov dword [esp], str.DeleteRegValue:___s_s____s_
call fcn.0040914e
mov dword [esp], edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push esi
jmp 0x403475
mov dword [esp], 0x22
call fcn.00401434
push edx
mov ebx, eax
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], str.DeleteRegKey:___s_s_
call fcn.0040914e
mov edx, dword [ebp - 0x270]
sar edx, 1
mov dword [ebp - 0x268], edx
cmp word [ebx], 0
je 0x401c4c
or edx, 0x100020
mov dword [ebp - 0x268], edx
test edi, edi
js 0x40343e
mov eax, dword [0x416024]
add eax, edi
lea edi, [eax - 0x7fffffff]
lea eax, [ebp - 0x268]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.004089c5
push esi
push esi
test eax, eax
je 0x401c4c
mov edx, dword [ebp - 0x268]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], edx
call fcn.00401523
sub esp, 0xc
mov ebx, eax
test ebx, ebx
setne al
jmp 0x40398c
mov eax, dword [ebp - 0x270]
mov dword [esp], 2
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x2a0], eax
call fcn.00401434
push ecx
mov edi, eax
mov dword [esp], 0x11
call fcn.00401434
push ebx
mov ebx, eax
mov dword [esp], esi
call fcn.00408f36
mov dword [ebp - 0x29c], eax
test esi, esi
js 0x4034d5
mov edx, dword [0x416024]
add edx, esi
lea esi, [edx - 0x7fffffff]
lea eax, [ebp - 0x268]
mov dword [esp + 8], 0x100022
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.00408a97
sub esp, 0x10
test eax, eax
jne 0x4036dd
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x2a8], eax
test eax, eax
je 0x4036dd
cmp dword [ebp - 0x2a4], 1
jne 0x403577
mov dword [esp], 0x23
call fcn.00401434
push esi
mov dword [esp], 0x41a120
call sub.KERNEL32.dll_lstrlenW
push edx
lea esi, [eax + 1]
mov eax, dword [ebp - 0x29c]
add esi, esi
cmp dword [ebp - 0x2a0], 1
mov dword [esp + 0x10], 0x41a120
mov dword [esp + 0xc], edi
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
jne 0x403566
mov dword [esp], str.WriteRegStr:___s_s____s___s_
jmp 0x40356d
mov dword [esp], str.WriteRegExpandStr:___s_s____s___s_
call fcn.0040914e
jmp 0x403672
cmp dword [ebp - 0x2a4], 4
je 0x403590
xor esi, esi
cmp dword [ebp - 0x2a4], 3
je 0x4035cb
jmp 0x403672
mov eax, 3
mov esi, 4
call fcn.0040148a
mov dword [esp + 0xc], edi
mov dword [0x41a120], eax
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], str.WriteRegDWORD:___s_s____s__0x_08x_
call fcn.0040914e
jmp 0x403672
cmp dword [ebp - 0x2a0], 0
mov edx, str.WriteRegNone
je 0x4035ed
cmp dword [ebp - 0x2a0], 7
mov edx, str.WriteRegMultiStr
mov eax, str.WriteRegBin
cmovne edx, eax
mov eax, dword [ebp - 0x274]
mov dword [esp + 0xc], 0x6000
mov dword [esp + 8], 0x41a120
mov dword [esp + 4], 0
mov dword [esp], eax
mov dword [ebp - 0x2a4], edx
call fcn.004044e0
sub esp, 0x10
mov esi, eax
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 8], 0x41a120
mov dword [esp + 4], pe_nt_image_headers32
call fcn.0040906c
lea eax, [ebp - 0x268]
mov edx, dword [ebp - 0x2a4]
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], str._s:___s_s____s___s_
call fcn.0040914e
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x41a120
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x2a8]
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
sub esp, 0x18
mov esi, eax
test eax, eax
je 0x4036cf
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], edi
mov esi, 1
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], str.WriteReg:_error_writing_into___s_s____s_
call fcn.0040914e
mov eax, dword [ebp - 0x2a8]
mov dword [esp], eax
jmp 0x40380e
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], ebx
mov dword [esp], str.WriteReg:_error_creating_key___s_s_
mov dword [esp + 4], eax
call fcn.0040914e
jmp 0x401c4c
mov dword [esp], 0x20019
call fcn.004014bf
push edx
mov edi, eax
mov dword [esp], 0x33
call fcn.00401434
push ecx
mov word [ebx], 0
test edi, edi
je 0x401c4c
lea edx, [ebp - 0x288]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x268]
mov dword [ebp - 0x288], 0x2000
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
sub esp, 0x18
test eax, eax
jne 0x403776
mov eax, dword [ebp - 0x268]
lea edx, [eax - 1]
cmp edx, 1
jbe 0x403785
cmp eax, 4
je 0x403785
mov word [ebx], 0
mov esi, 1
jmp 0x40380b
mov esi, dword [ebp - 0x270]
cmp eax, 4
jne 0x403802
xor eax, eax
test esi, esi
sete al
mov esi, eax
mov eax, dword [ebx]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00408bb5
push eax
push eax
jmp 0x40380b
mov dword [esp], 0x20019
call fcn.004014bf
push esi
mov edi, eax
mov eax, 3
call fcn.0040148a
mov word [ebx], 0
test edi, edi
je 0x401c4c
cmp dword [ebp - 0x270], 0
mov dword [ebp - 0x268], 0xfff
je 0x403819
mov dword [esp + 0xc], 0xfff
xor esi, esi
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
sub esp, 0x10
mov word [ebx + 0x1ffe], 0
mov dword [esp], edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x402b56
lea edx, [ebp - 0x268]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
sub esp, 0x20
test eax, eax
setne al
movzx eax, al
mov esi, eax
jmp 0x403802
mov dword [esp], ebx
call fcn.00408bda
push ebx
test eax, eax
je case.0x401755.67
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40403d
mov dword [esp], 0xffffffed
call fcn.00401434
mov edx, dword [ebp - 0x278]
push ecx
mov dword [esp + 8], edx
mov edx, dword [ebp - 0x27c]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0040878b
sub esp, 0xc
cmp eax, 0xffffffff
je 0x403ce6
mov dword [esp + 4], eax
mov dword [esp], ebx
jmp 0x4041dc
mov edi, dword [ebp - 0x278]
test edi, edi
je 0x4038ee
mov eax, 1
call fcn.0040148a
mov word [0x418120], ax
xor eax, eax
cmp dword [ebp - 0x2a0], 0x38
setne al
mov esi, eax
inc esi
jmp 0x40394b
cmp dword [ebp - 0x2a0], 0x38
jne 0x403932
mov dword [esp], 0x21
call fcn.00401434
push eax
mov dword [esp + 8], 0x1000
mov dword [esp + 4], 0x418120
mov dword [esp], 0x41a120
call fcn.00408d17
mov dword [esp], 0x418120
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
push edx
jmp 0x40394b
mov dword [esp], 0x11
call fcn.00401434
push ecx
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenW
push esi
lea esi, [eax + eax]
cmp word [ebx], 0
je 0x401c4c
mov dword [esp], ebx
call fcn.00408bda
mov ebx, eax
xor eax, eax
cmp dword [ebp - 0x2a0], 0x38
push edx
sete al
or eax, edi
je 0x403996
mov dword [esp + 8], esi
mov dword [esp + 4], 0x418120
mov dword [esp], ebx
call fcn.00408897
sub esp, 0xc
test eax, eax
sete al
movzx eax, al
mov esi, eax
jmp 0x404240
cmp dword [ebp - 0x274], 0
je 0x403970
mov dword [esp + 4], ebx
mov dword [esp], ebx
call fcn.004088dd
push edi
push edi
test eax, eax
jns 0x403970
jmp 0x401c4c
mov eax, 2
call fcn.0040148a
test eax, eax
jle case.0x401755.67
mov dword [ebp - 0x29c], 0
cmp word [ebx], 0
je 0x403c03
cmp eax, 0xfff
mov dword [esp], ebx
mov edx, 0xfff
cmovle edx, eax
xor ebx, ebx
mov dword [ebp - 0x29c], edx
call fcn.00408bda
mov word [ebp - 0x2a4], 0
push ecx
mov esi, eax
mov dword [ebp - 0x2a0], 2
cmp dword [ebp - 0x284], 0x39
mov edx, dword [ebp - 0x274]
jne 0x403b16
lea eax, [ebp - 0x268]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov eax, 2
sub eax, edx
mov dword [esp], esi
mov dword [esp + 8], eax
lea eax, [ebp - 0x288]
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x403bfd
mov eax, dword [ebp - 0x268]
test eax, eax
je 0x403bfd
mov dword [ebp - 0x2a0], eax
movzx eax, byte [ebp - 0x288]
cmp dword [ebp - 0x274], 0
mov word [ebp - 0x28c], ax
jne 0x403b5d
lea eax, [ebp - 0x28c]
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x268]
mov dword [esp + 4], 8
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 8], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
sub esp, 0x18
test eax, eax
jne 0x403b5d
dec dword [ebp - 0x268]
mov word [ebp - 0x28c], 0xfffd
je 0x403b5d
dec dword [ebp - 0x2a0]
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 0xc], 1
neg eax
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
jmp 0x403a8c
or edx, ebx
je 0x403b40
lea eax, [ebp - 0x28c]
mov dword [esp + 8], 2
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00408851
sub esp, 0xc
test eax, eax
jne 0x403b5d
jmp 0x403bfd
mov dword [esp + 4], 0
mov dword [esp], esi
call fcn.004088dd
push edx
push edx
test eax, eax
jns 0x403b1a
xor ebx, ebx
jmp 0x403bfd
cmp dword [ebp - 0x274], 0
movzx eax, word [ebp - 0x28c]
je 0x403b80
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00408bb5
push ebx
push ebx
jmp 0x404246
lea edx, [ebx + ebx]
add edx, edi
cmp word [ebp - 0x2a4], 0xd
je 0x403b99
cmp word [ebp - 0x2a4], 0xa
jne 0x403bde
cmp word [ebp - 0x2a4], ax
je 0x403bae
cmp ax, 0xd
je 0x403bd8
cmp ax, 0xa
je 0x403bd8
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
neg eax
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
jmp 0x403bfd
mov word [edx], ax
inc ebx
jmp 0x403bfd
inc ebx
mov word [edi + ebx*2 - 2], ax
test ax, ax
je 0x403bfd
cmp dword [ebp - 0x29c], ebx
je 0x403c03
mov word [ebp - 0x2a4], ax
jmp 0x403a0f
mov dword [ebp - 0x29c], ebx
mov eax, dword [ebp - 0x29c]
mov word [edi + eax*2], 0
jmp 0x403987
cmp word [ebx], 0
je case.0x401755.67
mov ecx, dword [ebp - 0x274]
mov eax, 2
mov dword [ebp - 0x29c], ecx
call fcn.0040148a
mov dword [esp], ebx
mov esi, eax
call fcn.00408bda
push ecx
mov ecx, dword [ebp - 0x29c]
mov dword [esp + 8], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
cmp dword [ebp - 0x27c], 0
js case.0x401755.67
jmp 0x4041d5
mov dword [esp], ebx
call fcn.00408bda
push edx
test eax, eax
je case.0x401755.67
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x40403d
mov dword [esp], edi
call fcn.00408bda
push edi
test eax, eax
je 0x403ce6
lea edx, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push esi
push esi
test eax, eax
je 0x403ce6
jmp 0x403cfe
mov dword [esp], 2
call fcn.00401434
push edx
lea edx, [ebp - 0x268]
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push ecx
push ecx
cmp eax, 0xffffffff
jne 0x403cf0
mov word [edi], 0
mov word [ebx], 0
jmp 0x401c4c
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00408bb5
push esi
push esi
lea eax, [ebp - 0x23c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00408c9c
jmp 0x4041e1
mov dword [esp], 0xfffffff0
call fcn.00401434
push edx
mov ebx, eax
mov dword [esp], eax
call fcn.00408599
push ecx
test eax, eax
jne 0x403d3e
mov dword [esp], 0xffffffed
call fcn.00401434
push edi
mov dword [esp], ebx
call fcn.004086e8
push esi
mov esi, 0xfffffd66
mov dword [esp + 8], 2
mov dword [esp + 4], 0x40000000
mov dword [esp], ebx
call fcn.0040878b
mov dword [ebp - 0x29c], eax
sub esp, 0xc
inc eax
je 0x403ece
cmp dword [ebp - 0x278], 0
mov edx, dword [ebp - 0x27c]
je 0x403e97
mov eax, dword [0x420148]
mov dword [ebp - 0x2a4], edx
mov dword [esp], 0x40
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x2a0], eax
mov dword [esp + 4], eax
call edi
mov edx, dword [ebp - 0x2a4]
test eax, eax
push ecx
mov esi, eax
push ecx
je 0x403e97
mov dword [esp], 0
call fcn.004044ae
push eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.00404486
push eax
push eax
mov eax, dword [ebp - 0x278]
mov dword [esp], 0x40
mov dword [esp + 4], eax
call edi
mov edi, eax
push edx
push edx
test eax, eax
je 0x403e6b
mov eax, dword [ebp - 0x278]
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.004044e0
mov eax, edi
sub esp, 0x10
cmp byte [eax], 0
je 0x403e61
mov ecx, dword [eax]
lea edx, [eax + 8]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [ebp - 0x2a8], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2a4], edx
add ecx, esi
mov dword [esp], ecx
call fcn.004086cb
mov edx, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x2a8]
sub esp, 0xc
lea eax, [edx + ecx]
jmp 0x403e22
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push eax
mov eax, dword [ebp - 0x2a0]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00408897
sub esp, 0xc
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
or edx, 0xffffffff
push eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], edx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
call fcn.004044e0
mov esi, eax
mov eax, dword [ebp - 0x29c]
sub esp, 0x10
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], str.created_uninstaller:__d____s_
call fcn.0040914e
test esi, esi
jns 0x403efc
mov dword [esp], ebx
mov esi, 1
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, 0xffffffef
push ecx
jmp 0x403f03
mov eax, 0xfffffff3
xor esi, esi
mov dword [esp], eax
call fcn.004016c9
jmp 0x402b56
test esi, esi
je 0x403f64
mov dword [esp + 4], eax
mov dword [esp], str.settings_logging_to__d
call fcn.0040914e
mov eax, dword [ebp - 0x27c]
mov dword [esp], str.logging_set_to__d
mov dword [esp + 4], eax
mov dword [0x452ec0], eax
call fcn.0040914e
mov esi, dword [ebp - 0x27c]
test esi, esi
je 0x403f53
call fcn.0040674a
jmp case.0x401755.67
mov dword [esp], 1
call fcn.00408e41
jmp 0x402b56
mov dword [esp], 1
call fcn.00401434
push edx
mov dword [esp + 4], eax
mov dword [esp], 0x40c5cc
call fcn.0040914e
jmp 0x404240
xor eax, eax
call fcn.0040148a
mov dword [ebp - 0x29c], eax
cmp eax, dword [0x42016c]
jae 0x401c4c
imul esi, eax, 0x2018
mov ebx, dword [0x420168]
add ebx, esi
mov esi, dword [ebp - 0x278]
test esi, esi
js 0x403fd5
jne 0x403fcd
lea eax, [ebx + 0x18]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00408c9c
jmp 0x4040cf
mov eax, dword [ebx + esi*4]
jmp 0x4041d5
mov edx, esi
not edx
mov dword [ebp - 0x278], edx
test edx, edx
je 0x403ff5
mov eax, 1
call fcn.0040148a
mov dword [ebp - 0x27c], eax
jmp 0x404013
mov eax, dword [ebp - 0x270]
mov dword [esp + 4], eax
lea eax, [ebx + 0x18]
mov dword [esp], eax
call fcn.00409399
push eax
push eax
or dword [ebx + 8], 0x100
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x278]
mov dword [ebx + eax*4], edx
cmp dword [ebp - 0x274], 0
je case.0x401755.67
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00401248
push edi
jmp case.0x401755.67
xor eax, eax
call fcn.0040148a
cmp eax, 0x1f
ja 0x401c4c
cmp dword [ebp - 0x274], 0
mov esi, dword [ebp - 0x278]
je 0x4040a3
test esi, esi
je 0x404088
mov dword [esp], eax
call fcn.0040135c
push esi
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004012a7
jmp 0x4041e1
mov dword [esp], 0
call fcn.004013b5
push ebx
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00408bb5
jmp 0x4040cf
test esi, esi
mov ecx, dword [0x420150]
lea eax, [eax + 0x24]
je 0x4040bf
mov edx, dword [ebp - 0x27c]
mov dword [ecx + eax*4 + 4], edx
jmp case.0x401755.67
mov eax, dword [ecx + eax*4 + 4]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00409399
push ecx
push ecx
jmp 0x404240
mov esi, dword [ebp - 0x274]
test esi, esi
je 0x4040ec
dec esi
je 0x404185
jmp case.0x401755.67
mov dword [esp], 5
call fcn.00409327
push ebx
mov ebx, eax
mov dword [esp], 0x22
call fcn.00401434
push edx
test ebx, ebx
je 0x40417b
lea edx, [ebp - 0x268]
mov dword [esp], eax
mov dword [esp + 4], edx
call dword [sym.imp.ole32.dll_IIDFromString]
push ecx
push ecx
test eax, eax
js 0x40417b
lea eax, [ebp - 0x288]
lea edx, [ebp - 0x268]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x274]
mov dword [esp], edx
mov dword [esp + 4], eax
call ebx
sub esp, 0x10
test eax, eax
js 0x40417b
mov eax, dword [ebp - 0x288]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00408c9c
mov eax, dword [ebp - 0x288]
push edx
push edx
mov dword [esp], eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x402b56
mov word [edi], 0
jmp 0x401c4c
mov eax, 2
call fcn.0040148a
mov ebx, eax
mov eax, 4
call fcn.0040148a
mov dword [ebp - 0x268], 0
movzx edx, al
shr eax, 0x18
test ebx, ebx
jne 0x4041b4
mov ebx, 0x416020
add eax, ebx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
lea eax, [ebp - 0x268]
mov dword [esp], eax
call fcn.004086cb
mov eax, dword [ebp - 0x268]
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00408bb5
push eax
push eax
jmp case.0x401755.67
mov edx, dword [0x441e00]
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0xb
and edx, esi
mov dword [esp], eax
mov dword [esp + 8], edx
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x10
cmp dword [ebp - 0x280], 0
je case.0x401755.67
mov eax, dword [ebp - 0x29c]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_InvalidateRect]
sub esp, 0xc
xor esi, esi
add dword [0x416028], esi
xor edi, edi
lea esp, [ebp - 0xc]
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret 4