Function at 0x424c30
Capabilities:
Check if file exists
Create process on windows
Get common file path
Get file attributes
Hide graphical window
Resolve function by parsing pe exports
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x4b65aa
mov eax, dword fs:[0]
push eax
sub esp, 0xac4
mov eax, dword [0x4ef7d0]
xor eax, esp
mov dword [esp + 0xac0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ef7d0]
xor eax, esp
push eax
lea eax, [esp + 0xad8]
mov dword fs:[0], eax
mov edi, dword [esp + 0xae8]
cmp di, 0x4b0
mov ebp, ecx
mov ebx, 0xf
jb 0x424d64
mov eax, dword [ebp + 0x60]
test eax, eax
je 0x424ca3
mov ecx, dword [ebp + 0x64]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
movzx esi, di
add eax, 0x4b0
cmp esi, eax
jae 0x424d64
mov eax, dword [ebp + 4]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
xor ecx, ecx
mov dword [esp + 0x148], ebx
mov dword [esp + 0x144], ecx
mov byte [esp + 0x134], cl
push ecx
push esi
mov dword [esp + 0xae8], ecx
push eax
lea ecx, [esp + 0x13c]
push ecx
call fcn.0042d4a0
mov eax, dword [esp + 0x144]
add esp, 0x10
cmp dword [esp + 0x148], 0x10
jae 0x424d06
lea eax, [esp + 0x134]
push eax
push 0xffffffffffffffff
push 0
push 0
mov ecx, ebp
call fcn.00424680
cmp dword [esp + 0x148], 0x10
mov dword [esp + 0xae0], 0xffffffff
jb 0x424d39
mov edx, dword [esp + 0x134]
push edx
call fcn.0049ea7d
add esp, 4
movzx ecx, di
mov eax, ecx
cmp eax, 0x9c40
jg 0x4250a9
je 0x425092
sub eax, 0x4e20
cmp eax, 5
ja case.default.0x4270f2
jmp dword [eax*4 + 0x4271e4]
cmp di, 0x4c4
jb 0x424f26
mov eax, dword [0x4f1214]
test eax, eax
je 0x424d93
mov ecx, dword [0x4f1218]
sub ecx, eax
mov eax, 0x84210843
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
movzx esi, di
add eax, 0x4c4
cmp esi, eax
jae 0x424f26
lea ecx, [esp + 0x168]
call fcn.0048c470
xor edi, edi
mov dword [esp + 0xae0], 1
mov dword [esp + 0x148], ebx
mov dword [esp + 0x144], edi
mov byte [esp + 0x134], 0
mov eax, dword [ebp + 4]
push edi
push esi
push eax
mov byte [esp + 0xaec], 2
call dword [sym.imp.USER32.dll_GetMenu]
push eax
lea ecx, [esp + 0x13c]
push ecx
call fcn.0042d4a0
add esp, 0x10
xor ebx, ebx
lea esp, [esp]
mov esi, dword [0x4f1214]
test esi, esi
je 0x424eb6
mov ecx, dword [0x4f1218]
sub ecx, esi
mov eax, 0x84210843
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jae 0x424eb6
cmp dword [esi + edi + 0x18], 0x10
mov eax, dword [esi + edi + 0x14]
jb 0x424e42
mov esi, dword [esi + edi + 4]
jmp 0x424e46
lea esi, [esi + edi + 4]
mov edx, dword [esp + 0x144]
push eax
push esi
push edx
push 0
lea ecx, [esp + 0x140]
call fcn.00402ca0
test eax, eax
je 0x424e6a
add ebx, 1
add edi, 0x7c
jmp 0x424e00
mov esi, dword [0x4f1214]
test esi, esi
je 0x424e93
mov ecx, dword [0x4f1218]
sub ecx, esi
mov eax, 0x84210843
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x424e9e
call fcn.0049ed6a
mov esi, dword [0x4f1214]
imul ebx, ebx, 0x7c
lea eax, [ebx + esi + 0x1c]
push eax
lea ecx, [esp + 0x16c]
push ecx
call fcn.0041bd80
add esp, 8
lea edx, [esp + 0x168]
push edx
lea ecx, [ebp + 0x24]
call fcn.004179f0
cmp dword [esp + 0x148], 0x10
jb 0x424ee0
mov eax, dword [esp + 0x134]
push eax
call fcn.0049ea7d
add esp, 4
lea ecx, [esp + 0x168]
mov dword [esp + 0x148], 0xf
mov dword [esp + 0x144], 0
mov byte [esp + 0x134], 0
mov dword [esp + 0xae0], 0xffffffff
call fcn.00489d00
mov edi, dword [esp + 0xae8]
mov ebx, 0xf
jmp 0x424d39
cmp di, 0x514
jb 0x424f72
mov eax, dword [0x4f1224]
test eax, eax
je 0x424f51
mov ecx, dword [0x4f1228]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
movzx ecx, di
add eax, 0x514
cmp ecx, eax
jae 0x424f72
mov edx, dword [esp + 0xaec]
push edx
push edi
mov ecx, ebp
call fcn.004222b0
jmp 0x4271b9
cmp di, 0x5dc
jb 0x424d39
cmp di, 0x63f
jae 0x424d39
mov eax, dword [esp + 0xaec]
push eax
push edi
mov ecx, ebp
call fcn.00424490
jmp 0x4271b9
mov esi, dword [0x4f0f40]
test esi, esi
je 0x424fc3
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp esi, eax
jne 0x424fc3
mov ecx, dword [0x4f0f40]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp case.default.0x4270f2
mov edx, dword [0x4e65b8]
mov al, byte [edx + 0x32]
cmp al, 1
jne 0x424fe8
push 0
push 0xf020
push 0x112
mov ecx, ebp
call fcn.00403510
jmp case.default.0x4270f2
cmp al, 2
jne case.default.0x4270f2
push 0
push 0
push 0x10
mov ecx, ebp
call fcn.00403510
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x42], 0
push 0
sete cl
push 0
mov byte [eax + 0x42], cl
push 0x919
lea ecx, [ebp + 0x24]
call fcn.00403510
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x42], 0
sete dl
mov byte [eax + 0x42], dl
jmp case.default.0x4270f2
mov ecx, 0x4f14e4
call fcn.004134e0
push eax
lea ecx, [ebp + 0x24]
call fcn.00418280
mov ecx, ebp
call fcn.00421eb0
mov ecx, ebp
call fcn.0041cf70
jmp case.default.0x4270f2
lea ecx, [ebp + 0x24]
call fcn.00418f50
mov ecx, ebp
call fcn.00421eb0
mov ecx, ebp
call fcn.0041cf70
jmp case.default.0x4270f2
lea ecx, [ebp + 0x24]
call fcn.00418f90
mov ecx, ebp
call fcn.00421eb0
mov ecx, ebp
call fcn.0041cf70
jmp case.default.0x4270f2
push 0x4c7b75
push 0xffffffffffffffff
push 1
push 0
mov ecx, ebp
call fcn.00424680
jmp case.default.0x4270f2
cmp eax, 0x9d6c
jg 0x42615e
je 0x426146
sub eax, 0x9c41
cmp eax, 0xdf
ja case.default.0x4270f2
movzx eax, byte [eax + 0x4272a0]
jmp dword [eax*4 + 0x4271fc]
lea ecx, [ebp + 0x24]
call fcn.004191a0
jmp case.default.0x4270f2
lea ecx, [ebp + 0x24]
call fcn.00417490
jmp case.default.0x4270f2
mov ecx, dword [ebp + 4]
push ecx
lea ecx, [esp + 0x150]
mov dword [esp + 0x154], 0
mov dword [esp + method.wpf::CWndBase.virtual_0], 0x4c8428
call fcn.0041c450
jmp case.default.0x4270f2
mov edx, dword [esp + 0xaec]
push edx
push edi
mov ecx, ebp
call fcn.00424160
jmp 0x4271b9
push 1
push 0x4c89cc
lea ecx, [ebp + 0x24]
call fcn.00417190
jmp case.default.0x4270f2
push 0
push 0x4c89cc
lea ecx, [ebp + 0x24]
call fcn.00417190
jmp case.default.0x4270f2
push 1
push 0x4c89c8
lea ecx, [ebp + 0x24]
call fcn.00417190
jmp case.default.0x4270f2
push 0
add ebp, 0x24
push 0x4c89c8
mov ecx, ebp
call fcn.00417190
push 0
push 0x4c89cc
mov ecx, ebp
call fcn.00417190
jmp case.default.0x4270f2
push 1
push str.REM
lea ecx, [ebp + 0x24]
call fcn.00417190
jmp case.default.0x4270f2
push 0
push str.REM
lea ecx, [ebp + 0x24]
call fcn.00417190
jmp case.default.0x4270f2
push 1
push 0x4c89bc
lea ecx, [ebp + 0x24]
call fcn.00417190
jmp case.default.0x4270f2
push 0
push 0x4c89bc
lea ecx, [ebp + 0x24]
call fcn.00417190
jmp case.default.0x4270f2
push 0x4c7b75
push 0xffffffffffffffff
push 0
push 0
mov ecx, ebp
call fcn.00424680
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x7d8
push eax
call esi
push 0
push 0
mov edi, eax
mov eax, dword [ebp + 0x28]
push 0x7d9
push eax
call esi
mov ebx, 0x10
cmp dword [0x4e6618], ebx
mov esi, eax
mov eax, dword [0x4e6604]
jae 0x425238
mov eax, 0x4e6604
push eax
lea ecx, [esp + 0x134]
call fcn.00407d80
cmp dword [esp + 0x148], ebx
mov eax, dword [esp + 0x134]
mov dword [esp + 0xae0], 3
jae 0x425267
lea eax, [esp + 0x134]
push eax
push 0xffffffffffffffff
push 0
push 0
mov ecx, ebp
call fcn.00424680
test al, al
je 0x425288
push edi
push esi
push 0x870
lea ecx, [ebp + 0x24]
call fcn.00403510
lea ecx, [esp + 0x130]
call fcn.00490500
jmp case.default.0x4270f2
push 0
push 0
push 0
push 1
mov ecx, ebp
call fcn.00423aa0
jmp case.default.0x4270f2
push 0
push 1
push 0
push 1
mov ecx, ebp
call fcn.00423aa0
jmp case.default.0x4270f2
push 1
push 1
push 0
push 1
mov ecx, ebp
call fcn.00423aa0
jmp case.default.0x4270f2
cmp dword [0x4e6614], 0
je case.default.0x4270f2
mov eax, dword [0x4e6604]
mov esi, 0x10
cmp dword [0x4e6618], esi
jae 0x4252f9
mov eax, 0x4e6604
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
push eax
call edi
cmp eax, 0xffffffff
je 0x4253d4
mov ecx, dword [0x4e65b8]
cmp byte [ecx + 0x19], 0
je 0x42531c
and eax, 0xfffffffe
jmp 0x42531f
or eax, 1
cmp dword [0x4e6618], esi
mov ecx, dword [0x4e6604]
jae 0x425332
mov ecx, 0x4e6604
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
test eax, eax
jne 0x425475
push eax
push 0x2710
lea ecx, [esp + 0x98]
call fcn.0042c080
mov esi, eax
push 0
push 0xc36a
lea ecx, [esp + 0x90]
mov dword [esp + 0xae8], 4
call fcn.0042c080
cmp dword [0x4e6618], 0x10
mov ecx, dword [0x4e6604]
mov byte [esp + 0xae0], 5
jae 0x425390
mov ecx, 0x4e6604
mov eax, dword [eax]
push ecx
push eax
lea edx, [esp + 0x74]
push edx
call fcn.004010e0
mov ecx, dword [esi]
mov eax, dword [eax]
add esp, 0xc
push ecx
push 0x30
push eax
mov ecx, ebp
call fcn.00413220
mov eax, dword [esp + 0x6c]
push eax
call fcn.0049ec02
mov ecx, dword [esp + 0x8c]
push ecx
call fcn.0049ec02
mov edx, dword [esp + 0x98]
push edx
jmp 0x425462
push 0
push 0x2710
lea ecx, [esp + 0x88]
call fcn.0042c080
mov esi, eax
push 0
push 0xc36a
lea ecx, [esp + 0xa0]
mov dword [esp + 0xae8], 6
call fcn.0042c080
cmp dword [0x4e6618], 0x10
mov ecx, dword [0x4e6604]
mov byte [esp + 0xae0], 7
jae 0x425423
mov ecx, 0x4e6604
mov eax, dword [eax]
push ecx
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.004010e0
mov ecx, dword [esi]
mov eax, dword [eax]
add esp, 0xc
push ecx
push 0x30
push eax
mov ecx, ebp
call fcn.00413220
mov ecx, dword [esp + 0x74]
push ecx
call fcn.0049ec02
mov edx, dword [esp + 0x9c]
push edx
call fcn.0049ec02
mov eax, dword [esp + 0x88]
push eax
mov dword [esp + 0xaec], 0xffffffff
call fcn.0049ec02
add esp, 0xc
cmp dword [0x4e6618], 0x10
mov eax, dword [0x4e6604]
jae 0x425488
mov eax, 0x4e6604
push eax
call edi
cmp eax, 0xffffffff
je 0x42549b
mov ecx, dword [0x4e65b8]
and al, 1
mov byte [ecx + 0x19], al
mov eax, dword [0x4e65b8]
movzx edx, byte [eax + 0x19]
movzx ecx, byte [eax + 0x18]
push edx
movzx edx, byte [eax + 0x30]
push ecx
push edx
mov ecx, ebp
call fcn.0041fc90
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x31], 0
je 0x4254dd
push 0
push 0
push 1
push 0
mov ecx, ebp
call fcn.00423aa0
test al, al
je case.default.0x4270f2
push 0x104
lea ecx, [esp + 0x4c0]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0
lea edx, [esp + 0x150]
push edx
push 0
push 0x30
mov dword [esp + 0x178], 0x206e2d
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov ecx, dword [ebp + 4]
lea eax, [esp + 0x1c]
push eax
push ecx
mov dword [esp + 0x24], 0x2c
call dword [sym.imp.USER32.dll_GetWindowPlacement]
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x44]
sub esi, eax
lea ebx, [eax + 0xa]
mov eax, dword [esp + 0x154]
sub eax, dword [esp + 0x14c]
lea edx, [ecx + 0xa]
sub edi, ecx
lea ecx, [esi + ebx]
cmp ecx, eax
mov dword [esp + 0x18], edx
jg 0x425574
mov edx, dword [esp + 0x158]
mov eax, dword [esp + 0x18]
sub edx, dword [esp + 0x150]
lea ecx, [edi + eax]
cmp ecx, edx
jle 0x42557a
xor ebx, ebx
mov dword [esp + 0x18], ebx
mov edx, dword [ebp + 4]
push edx
call dword [sym.imp.USER32.dll_IsZoomed]
push eax
mov eax, dword [esp + 0x1c]
push edi
push esi
push eax
push ebx
lea ecx, [esp + 0x450]
push str._p__i__i__i__i__i
push ecx
call fcn.004a07a0
lea eax, [esp + 0x458]
add esp, 0x1c
mov ecx, eax
jmp 0x4255b0
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x4255b0
lea edi, [esp + 0x168]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x4255c7
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
cmp word [esp + 0xae8], 0x9c4c
rep movsb byte es:[edi], byte [esi]
je 0x42568f
cmp dword [0x4e6614], 0
je 0x42568f
cmp dword [0x4e6618], 0x10
mov ecx, dword [0x4e6604]
jae 0x425610
mov ecx, 0x4e6604
lea edx, [esp + 0x5c0]
mov al, byte [ecx]
mov byte [edx], al
add ecx, 1
add edx, 1
test al, al
jne 0x425617
lea edx, [esp + 0x5c0]
push edx
call dword [sym.imp.SHLWAPI.dll_PathQuoteSpacesA]
lea edi, [esp + 0x168]
add edi, 0xffffffff
lea ecx, [ecx]
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x425640
mov ax, word [0x4c7dfc]
mov word [edi], ax
lea eax, [esp + 0x5c0]
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x425660
lea edi, [esp + 0x168]
sub eax, edx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x425675
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 4]
push 1
push 0
lea ecx, [esp + 0x170]
push ecx
lea edx, [esp + 0x4c8]
push edx
push 0
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.default.0x4270f2
xor esi, esi
cmp dword [0x4e6614], esi
je case.default.0x4270f2
mov ecx, dword [0x4e65b8]
cmp byte [ecx + 0x31], 0
je 0x4256e2
push esi
push esi
push 1
push esi
mov ecx, ebp
call fcn.00423aa0
test al, al
je case.default.0x4270f2
push 0x3c
lea edx, [esp + 0x20]
push esi
push edx
call fcn.0049e8b0
mov eax, dword [ebp + 4]
add esp, 0xc
cmp dword [0x4e6618], 0x10
mov dword [esp + 0x1c], 0x3c
mov dword [esp + 0x20], 0x40
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], esi
jb 0x425722
mov ecx, dword [0x4e6604]
mov dword [esp + 0x2c], ecx
jmp 0x42572a
mov dword [esp + 0x2c], 0x4e6604
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
lea edx, [esp + 0x1c]
push edx
mov dword [esp + 0x3c], 1
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x31], 0
je 0x42576c
push 0
push 0
push 1
push 0
mov ecx, ebp
call fcn.00423aa0
test al, al
je case.default.0x4270f2
mov ecx, dword [ebp + 4]
push ecx
lea ecx, [esp + 0x150]
mov dword [esp + 0x154], 0
mov dword [esp + method.wpf::CWndBase.virtual_0], 0x4c8434
call fcn.0041c510
jmp case.default.0x4270f2
lea ecx, [esp + 0x43c]
call fcn.0041e960
mov edx, dword [ebp + 4]
push edx
lea ecx, [esp + 0x440]
call fcn.0041c490
lea ecx, [esp + 0x43c]
call fcn.0041dbc0
jmp case.default.0x4270f2
lea ecx, [ebp + 0x24]
call fcn.00417910
jmp case.default.0x4270f2
xor edi, edi
mov dword [esp + 0x148], ebx
mov dword [esp + 0x144], edi
mov byte [esp + 0x134], 0
mov dword [esp + 0xae0], 8
mov dword [esp + 0x164], ebx
mov dword [esp + 0x160], edi
mov byte [esp + 0x150], 0
cmp dword [0x4e6614], edi
mov bl, 9
mov byte [esp + 0xae0], bl
je 0x425867
lea eax, [esp + 0x16]
push eax
lea ecx, [esp + 0xe0]
push 0x4e6600
push ecx
mov byte [esp + 0x22], 0x5c
call fcn.00407fe0
add esp, 0xc
push 0xffffffffffffffff
push edi
push eax
lea ecx, [esp + 0x13c]
mov byte [esp + 0xaec], 0xa
call fcn.004067c0
lea ecx, [esp + 0xdc]
mov byte [esp + 0xae0], bl
call fcn.00490500
jmp 0x42587d
push edi
lea edx, [esp + 0x134]
push 0x2712
push edx
call fcn.0042d500
add esp, 0xc
push edi
lea eax, [esp + 0x150]
push 0xc365
push eax
call fcn.0042d500
mov ecx, dword [esp + 0x15c]
mov eax, 0x10
add esp, 0xc
cmp dword [esp + 0x164], eax
jae 0x4258af
lea ecx, [esp + 0x150]
cmp dword [esp + 0x148], eax
mov eax, dword [esp + 0x134]
jae 0x4258c6
lea eax, [esp + 0x134]
lea edx, [ebp + 0x84]
push edx
push ecx
push eax
lea ecx, [ebp + 0x24]
call fcn.00413d40
test al, al
jne 0x425935
push edi
push 0x2710
lea ecx, [esp + 0x84]
call fcn.0042c080
mov esi, eax
push edi
push 0xc367
lea ecx, [esp + 0x9c]
mov byte [esp + 0xae8], 0xb
call fcn.0042c080
mov ecx, dword [esi]
mov edx, dword [eax]
push ecx
push 0x30
push edx
mov ecx, ebp
call fcn.00413220
mov eax, dword [esp + 0x94]
push eax
call fcn.0049ec02
mov ecx, dword [esp + 0x80]
push ecx
call fcn.0049ec02
add esp, 8
lea ecx, [esp + 0x14c]
call fcn.00490500
lea ecx, [esp + 0x130]
call fcn.00490500
jmp case.default.0x4270f2
cmp dword [0x4e6614], 0
je case.default.0x4270f2
push 0x3c
lea edx, [esp + 0x20]
push 0
push edx
call fcn.0049e8b0
mov eax, dword [ebp + 4]
add esp, 0xc
cmp dword [0x4e6618], 0x10
mov dword [esp + 0x1c], 0x3c
mov dword [esp + 0x20], 0x4c
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], str.properties
jb 0x4259a7
mov ecx, dword [0x4e6604]
mov dword [esp + 0x2c], ecx
jmp 0x425732
mov dword [esp + 0x2c], 0x4e6604
jmp 0x425732
cmp dword [0x4e6614], 0
je case.default.0x4270f2
mov ecx, dword [ebp + 4]
push 0
push 0x10
lea eax, [esp + 0x6cc]
push eax
push ecx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
test eax, eax
je case.default.0x4270f2
lea edx, [esp + 0x6c4]
push edx
lea ecx, [esp + 0x134]
call fcn.00407d80
push 0x5c
mov ebx, 0xc
push 1
lea ecx, [esp + 0x138]
mov dword [esp + 0xae8], ebx
call fcn.00406710
lea eax, [esp + 0x16]
push eax
lea ecx, [esp + 0x118]
push 0x4e6600
push ecx
mov byte [esp + 0x23], 0x2e
mov byte [esp + 0x22], 0x5c
call fcn.00407fe0
lea edx, [esp + 0x23]
push edx
push eax
lea eax, [esp + 0x10c]
push eax
mov byte [esp + 0xaf8], 0xd
call fcn.00408110
add esp, 0x18
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x13c]
mov byte [esp + 0xaec], 0xe
call fcn.00406d90
lea ecx, [esp + 0xf8]
call fcn.00490500
lea ecx, [esp + 0x114]
mov byte [esp + 0xae0], bl
call fcn.00490500
push str..lnk
lea ecx, [esp + 0x134]
call fcn.00408dd0
mov ecx, dword [0x4e6604]
mov eax, 0x10
cmp dword [0x4e6618], eax
jae 0x425aaf
mov ecx, 0x4e6604
cmp dword [esp + 0x148], eax
mov eax, dword [esp + 0x134]
jae 0x425ac6
lea eax, [esp + 0x134]
push 0
push 0
push 0
push 0
push 0
push ecx
push eax
call fcn.0042ce70
add esp, 0x1c
test al, al
jne 0x425b3a
push 0
push 0x2710
lea ecx, [esp + 0x8c]
call fcn.0042c080
mov esi, eax
push 0
push 0xc354
lea ecx, [esp + 0xa8]
mov byte [esp + 0xae8], 0xf
call fcn.0042c080
mov ecx, dword [esi]
mov edx, dword [eax]
push ecx
push 0x30
push edx
mov ecx, ebp
call fcn.00413220
mov eax, dword [esp + 0xa0]
push eax
call fcn.0049ec02
mov ecx, dword [esp + 0x88]
push ecx
call fcn.0049ec02
add esp, 8
lea ecx, [esp + 0x130]
call fcn.00490500
jmp case.default.0x4270f2
lea ecx, [esp + 0x4bc]
call fcn.0041e890
mov edx, dword [ebp + 4]
mov esi, 0x10
push edx
lea ecx, [esp + 0x4c0]
mov dword [esp + 0xae4], esi
call fcn.0041c470
cmp eax, 1
jne 0x425bf5
lea eax, [esp + 0x130]
push eax
lea ecx, [esp + 0x4c0]
call fcn.0041e0d0
cmp dword [esp + 0x144], 0
mov byte [esp + 0xae0], 0x11
je 0x425be9
cmp dword [esp + 0x148], esi
mov eax, dword [esp + 0x134]
jae 0x425bb5
lea eax, [esp + 0x134]
push 0
push eax
call fcn.0042be00
add esp, 8
test al, al
je 0x425be9
cmp dword [esp + 0x148], esi
mov eax, dword [esp + 0x134]
jae 0x425bdb
lea eax, [esp + 0x134]
push eax
push 0xffffffffffffffff
push 0
push 0
mov ecx, ebp
call fcn.00424680
lea ecx, [esp + 0x130]
call fcn.00490500
lea ecx, [esp + 0x4bc]
mov dword [esp + 0xae0], 0xffffffff
call fcn.0041db20
jmp case.default.0x4270f2
cmp dword [0x4e6614], 0
je case.default.0x4270f2
mov ecx, dword [ebp + 4]
push ecx
lea ecx, [esp + 0x150]
mov dword [esp + 0x154], 0
mov dword [esp + method.wpf::CWndBase.virtual_0], 0x4c8440
call fcn.0041c530
jmp case.default.0x4270f2
push 0x3c
xor esi, esi
lea edx, [esp + 0x20]
push esi
push edx
call fcn.0049e8b0
mov eax, dword [ebp + 4]
add esp, 0xc
cmp dword [0x4e65f0], 0x10
mov dword [esp + 0x1c], 0x3c
mov dword [esp + 0x20], 0x40
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], esi
jb 0x425c8e
mov ecx, dword [0x4e65dc]
mov dword [esp + 0x2c], ecx
jmp 0x42572a
mov dword [esp + 0x2c], 0x4e65dc
jmp 0x42572a
mov eax, dword [ebp + 4]
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
cmp dword [0x4e6614], 0
je case.default.0x4270f2
mov eax, dword [0x4e6604]
add ecx, 0xffff630c
cmp dword [0x4e6618], 0x10
mov dword [0x4e65f4], ecx
jae 0x425cdc
mov eax, 0x4e6604
push eax
push ecx
push 0
push 0
mov ecx, ebp
call fcn.00424680
mov ecx, dword [0x4e65b8]
mov byte [ecx + 0x18], 0
mov ecx, ebp
call fcn.0041cdc0
mov ecx, ebp
call fcn.00421eb0
mov eax, dword [0x4e65b8]
movzx edx, byte [eax + 0x19]
movzx ecx, byte [eax + 0x18]
push edx
movzx edx, byte [eax + 0x30]
push ecx
push edx
mov ecx, ebp
call fcn.0041fc90
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
add ecx, 0xffff635c
mov dword [0x4e65f4], ecx
mov byte [eax + 0x18], 1
mov ecx, ebp
call fcn.0041cdc0
mov ecx, ebp
call fcn.00421eb0
mov eax, dword [0x4e65b8]
movzx ecx, byte [eax + 0x19]
movzx edx, byte [eax + 0x18]
movzx eax, byte [eax + 0x30]
push ecx
push edx
push eax
mov ecx, ebp
call fcn.0041fc90
jmp case.default.0x4270f2
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [ecx - 0x9d08]
push 0
push eax
mov dword [0x4e65f8], eax
mov ecx, dword [ebp + 0x28]
push 0x7ef
push ecx
call esi
mov edx, dword [0x4e65f8]
mov eax, dword [ebp + 0x28]
push 0
push edx
push 0x7ed
push eax
call esi
jmp 0x425d36
add ebp, 0x24
mov ecx, ebp
call fcn.00413840
test al, al
jne case.default.0x4270f2
lea ecx, [esp + 0x168]
call fcn.0048c470
xor edi, edi
mov dword [esp + 0xae0], 0x12
mov dword [esp + 0x454], ebx
mov dword [esp + 0x450], edi
mov byte [esp + 0x440], 0
mov dword [esp + 0x4b4], ebx
mov dword [esp + 0x4b0], edi
mov byte [esp + 0x4a0], 0
lea ecx, [esp + 0xa8]
push ecx
mov ecx, 0x4f1210
mov byte [esp + 0xae4], 0x13
call fcn.004050c0
lea edx, [esp + 0xb0]
push edx
mov ecx, 0x4f1210
mov esi, eax
call fcn.00484120
mov edx, dword [esi + 4]
lea ecx, [esp + 0x43c]
push ecx
mov ecx, dword [esi]
push edx
mov edx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push edx
push eax
lea ecx, [esp + 0x160]
push ecx
call fcn.00407080
add esp, 0x18
lea edx, [esp + 0xb8]
push edx
mov ecx, 0x4f1210
call fcn.004050c0
push eax
lea ecx, [esp + 0x150]
call fcn.00402af0
test al, al
je 0x425e89
lea ecx, [esp + 0x14c]
call fcn.00403310
add eax, 0x1c
push eax
lea eax, [esp + 0x16c]
push eax
call fcn.0041bd80
add esp, 8
jmp 0x425f03
push edi
lea ecx, [esp + 0x16c]
call fcn.00483f50
push 4
lea ecx, [esp + 0x16c]
call fcn.00484fc0
push 2
lea ecx, [esp + 0x16c]
call fcn.00489690
push edi
lea ecx, [esp + 0x16c]
call fcn.00483f80
push edi
lea ecx, [esp + 0x16c]
call fcn.00483f90
push edi
lea ecx, [esp + 0x16c]
call fcn.00483fb0
push 1
push 4
lea ecx, [esp + 0x170]
call fcn.00484f80
lea ecx, [esp + 0x168]
call fcn.00483f00
push 1
lea ecx, [esp + 0x16c]
call fcn.004896c0
lea ecx, [esp + 0x168]
push ecx
mov ecx, ebp
call fcn.004179f0
lea ecx, [esp + 0x43c]
call fcn.004063f0
lea ecx, [esp + 0x168]
mov dword [esp + 0xae0], 0xffffffff
call fcn.00489d00
jmp case.default.0x4270f2
lea esi, [ebp + 0x24]
mov ecx, esi
call fcn.00413840
test al, al
jne case.default.0x4270f2
lea ecx, [esp + 0x168]
call fcn.0048c470
mov dword [esp + 0xae0], 0x14
mov dword [esp + 0x440], 0
mov dword [esp + 0x43c], 0x4c8458
mov edx, dword [ebp + 4]
push edx
lea ecx, [esp + 0x440]
mov byte [esp + 0xae4], 0x15
call fcn.0041c430
cmp eax, 1
jne 0x425fbd
lea eax, [esp + 0x444]
push eax
lea ecx, [esp + 0x16c]
push ecx
call fcn.0041bd80
add esp, 8
lea edx, [esp + 0x168]
push edx
mov ecx, esi
call fcn.004179f0
mov dword [esp + 0x43c], vtable.wpf::CWndBase.0
jmp 0x425f1e
push 0
push 2
call fcn.00404730
add esp, 8
jmp case.default.0x4270f2
lea ecx, [esp + 0x43c]
call fcn.00423210
mov eax, dword [ebp + 4]
push eax
lea ecx, [esp + 0x440]
call fcn.0041c4f0
lea ecx, [esp + 0x43c]
call fcn.0041eb70
jmp case.default.0x4270f2
push 0x14d
lea ecx, [esp + 0x150]
call fcn.0041bba0
push 0x14e
lea ecx, [esp + 0x134]
mov dword [esp + 0xae4], 0x18
call fcn.0041bc00
lea ecx, [esp + 0x1c]
mov byte [esp + 0xae0], 0x19
call fcn.0042f140
lea ecx, [esp + 0x14c]
lea edx, [esp + 0x18]
mov dword [esp + 0x18], ecx
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0xae4], 0x1a
call fcn.00423610
lea ecx, [esp + 0x18]
lea eax, [esp + 0x130]
push ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x1c], eax
call fcn.00423610
push 0
push 0x274e
lea ecx, [esp + 0xac]
call fcn.0042c080
mov esi, eax
push 0
push 0x274d
lea ecx, [esp + 0x94]
mov byte [esp + 0xae8], 0x1b
call fcn.0042c080
mov edi, eax
push 0
push 0x274c
lea ecx, [esp + 0xa4]
mov byte [esp + 0xae8], 0x1c
call fcn.0042c080
mov edx, dword [esi]
mov ecx, dword [edi]
push edx
mov edx, dword [eax]
mov eax, dword [ebp + 4]
push ecx
push edx
push 0x96
push 0xd2
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xaf8], 0x1d
call fcn.0042e9b0
mov ecx, dword [esp + 0x9c]
push ecx
call fcn.0049ec02
mov edx, dword [esp + 0x90]
push edx
call fcn.0049ec02
mov eax, dword [esp + 0xac]
push eax
call fcn.0049ec02
add esp, 0xc
lea ecx, [esp + 0x1c]
call fcn.0041df10
jmp case.default.0x4270f2
call fcn.0041bb10
jmp case.default.0x4270f2
mov ecx, ebp
call fcn.00422550
jmp case.default.0x4270f2
mov ecx, dword [ebp + 0x28]
push 0
push 0
push 0x880
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
cmp eax, 0x9efc
jg 0x4270e4
je 0x4270da
sub eax, 0x9d6d
cmp eax, 0xc7
ja case.default.0x4270f2
movzx edx, byte [eax + 0x427484]
jmp dword [edx*4 + 0x427380]
mov eax, dword [ebp + 0x28]
push 0
push 0
push 0x7db
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x15], 0
je 0x4261b4
mov byte [eax + 0x1a], 1
mov ecx, dword [ebp + 0x28]
push 0
push 0
push 0x881
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x15], 0
je 0x4261db
mov byte [eax + 0x1a], 1
push 0
push 0
push 0x882
mov edx, dword [ebp + 0x28]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, ebp
call fcn.0041cdc0
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x15], 0
je 0x426209
mov byte [eax + 0x1a], 1
mov eax, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x7d6
push eax
call esi
push eax
mov eax, dword [ebp + 0x28]
push 0
push 0x973
push eax
call esi
mov ecx, ebp
call fcn.0041cdc0
jmp case.default.0x4270f2
mov ecx, dword [ebp + 0x28]
push 0
push 0
push 0x883
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov edx, dword [ebp + 0x28]
push 0
push 0
push 0x884
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
push 0
push 0
push 0x7d4
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov ecx, dword [ebp + 0x28]
push 0
push 0
push 0x7dd
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x7d8
push eax
call esi
push 1
mov edi, eax
mov eax, dword [ebp + 0x28]
push edi
push 0x8da
push eax
call esi
push 1
push edi
mov ebx, eax
mov eax, dword [ebp + 0x28]
push 0x8db
push eax
call esi
cmp ebx, eax
jne 0x42630b
mov eax, dword [ebp + 0x28]
push 0
push edi
push 0x8db
push eax
call esi
push 1
mov edi, eax
mov eax, dword [ebp + 0x28]
push edi
push 0x8db
push eax
call esi
cmp edi, eax
je case.default.0x4270f2
push eax
push edi
push 0x870
lea ecx, [ebp + 0x24]
call fcn.00403510
jmp case.default.0x4270f2
push eax
push ebx
push 0x870
lea ecx, [ebp + 0x24]
call fcn.00403510
jmp case.default.0x4270f2
lea esi, [ebp + 0x24]
push 0x7d8
mov ecx, esi
call fcn.00401200
mov edi, eax
push edi
push 0x876
mov ecx, esi
call fcn.004034f0
mov ebx, eax
push ebx
push 0x877
mov ecx, esi
call fcn.004034f0
sub edi, eax
test ebx, ebx
mov dword [esp + 0x18], edi
jle case.default.0x4270f2
mov edx, dword [ebp + 0x28]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x81e
push edx
call edi
mov eax, dword [ebp + 0x28]
push 0
push 0
push 0x923
push eax
call edi
add ebx, 0xffffffff
push ebx
push 0x877
mov ecx, esi
call fcn.004034f0
add eax, dword [esp + 0x18]
mov ecx, esi
push eax
push 0x7e9
call fcn.004034f0
mov ecx, dword [ebp + 0x28]
push 0
push 0
push 0x95f
push ecx
call edi
mov edx, dword [ebp + 0x28]
push 0
push 0
push 0x81f
push edx
call edi
jmp case.default.0x4270f2
lea esi, [ebp + 0x24]
push 0x7d8
mov ecx, esi
call fcn.00401200
mov edi, eax
push edi
push 0x876
mov ecx, esi
call fcn.004034f0
mov ebp, eax
push ebp
push 0x877
mov ecx, esi
call fcn.004034f0
push 0x86a
mov ecx, esi
sub edi, eax
call fcn.00401200
sub eax, 1
cmp ebp, eax
jge case.default.0x4270f2
push 0x81e
mov ecx, esi
call fcn.00401200
lea ebx, [ebp + 1]
push ebx
push 0x7e8
mov ecx, esi
call fcn.004034f0
push 0x923
mov ecx, esi
call fcn.00401200
push ebx
push 0x877
mov ecx, esi
call fcn.004034f0
add eax, edi
push eax
push 0x7e9
mov ecx, esi
call fcn.004034f0
push 0x95f
mov ecx, esi
call fcn.00401200
push 0x81f
mov ecx, esi
call fcn.00401200
jmp case.default.0x4270f2
lea esi, [ebp + 0x24]
push 0x7d8
mov ecx, esi
call fcn.00401200
push 0x876
mov ecx, esi
mov edi, eax
call fcn.00401200
push edi
push 0x851
mov ecx, esi
mov ebx, eax
call fcn.004034f0
mov edi, eax
push 0x81e
mov ecx, esi
add edi, 1
call fcn.00401200
push 0x923
mov ecx, esi
call fcn.00401200
push edi
add ebx, 1
push ebx
mov ecx, esi
call fcn.00413c10
push 0x81f
mov ecx, esi
call fcn.00401200
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
push 0
push 0
push 0x964
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x15], 0
je 0x4264f6
mov byte [eax + 0x1a], 1
mov ecx, dword [ebp + 0x28]
push 0
push 0
push 0x921
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x15], 0
je 0x42651d
mov byte [eax + 0x1a], 1
push 0
push 0
push 0x997
jmp 0x4261e4
mov eax, dword [ebp + 0x28]
push 0
push 0
push 0x922
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov ecx, dword [ebp + 0x28]
push 0
push 0
push 0x95b
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov edx, dword [ebp + 0x28]
push 0
push 0
push 0x95c
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
push 0
push 0
push 0x917
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov ecx, dword [ebp + 0x28]
push 0
push 0
push 0x918
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov edx, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 4
push 0x952
push edx
call esi
lea ecx, [ebp + 0x24]
call fcn.00414ab0
mov eax, dword [ebp + 0x28]
push 0
push 0xffffffffffffffff
push 0x952
push eax
call esi
jmp case.default.0x4270f2
mov ecx, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 4
push 0x952
push ecx
call esi
lea ecx, [ebp + 0x24]
call fcn.0041b340
mov edx, dword [ebp + 0x28]
push 0
push 0xffffffffffffffff
push 0x952
push edx
call esi
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 4
push 0x952
push eax
call esi
lea ecx, [ebp + 0x24]
call fcn.00414c00
mov ecx, dword [ebp + 0x28]
push 0
push 0xffffffffffffffff
push 0x952
push ecx
call esi
jmp case.default.0x4270f2
mov edx, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 4
push 0x952
push edx
call esi
mov eax, dword [ebp + 0x28]
push 0
push 0
push 0x8ef
push eax
call esi
push 0
push 0
push 0x8f1
mov ecx, dword [ebp + 0x28]
push ecx
call esi
mov edx, dword [ebp + 0x28]
push 0
push 0xffffffffffffffff
push 0x952
push edx
call esi
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 4
push 0x952
push eax
call esi
mov ecx, dword [ebp + 0x28]
push 0
push 0
push 0x8ef
push ecx
call esi
mov edx, dword [ebp + 0x28]
push 0
push 0
push 0x8f0
push edx
call esi
mov eax, dword [ebp + 0x28]
push 0
push 0xffffffffffffffff
push 0x952
push eax
call esi
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x7d8
push eax
call esi
push 0
mov edi, eax
mov eax, dword [ebp + 0x28]
push edi
push 0x7d7
push eax
call esi
movsx ecx, al
push ecx
push 0x4c88c4
call fcn.004a0695
add esp, 8
push 0
test eax, eax
mov eax, dword [ebp + 0x28]
push edi
jne 0x42673b
push 0x971
push eax
call esi
push 0
mov edi, eax
mov eax, dword [ebp + 0x28]
push edi
push 0x7d7
push eax
call esi
movsx edx, al
push edx
push 0x4c88c4
call fcn.004a0695
add esp, 8
test eax, eax
je case.default.0x4270f2
mov eax, dword [ebp + 0x28]
push 0
push edi
push 0x931
push eax
call esi
cmp eax, 0xffffffff
je case.default.0x4270f2
push eax
push 0x7e9
lea ecx, [ebp + 0x24]
call fcn.004034f0
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x7d8
push eax
call edi
push 0
mov esi, eax
mov eax, dword [ebp + 0x28]
push esi
push 0x7d7
push eax
call edi
movsx eax, al
push eax
push 0x4c88c4
call fcn.004a0695
add esp, 8
push 0
test eax, eax
mov eax, dword [ebp + 0x28]
push esi
jne 0x4267d6
push 0x971
push eax
call edi
push 0
mov esi, eax
mov eax, dword [ebp + 0x28]
push esi
push 0x7d7
push eax
call edi
movsx ecx, al
push ecx
push 0x4c88c4
call fcn.004a0695
add esp, 8
test eax, eax
je case.default.0x4270f2
mov eax, dword [ebp + 0x28]
push 0
push esi
push 0x931
push eax
call edi
cmp eax, 0xffffffff
je case.default.0x4270f2
cmp eax, esi
lea ecx, [ebp + 0x24]
jle 0x426802
add eax, 1
push eax
push esi
push 0x870
call fcn.00403510
jmp case.default.0x4270f2
push eax
add esi, 1
push esi
push 0x870
call fcn.00403510
jmp case.default.0x4270f2
mov edx, dword [ebp + 4]
push edx
lea ecx, [esp + 0x150]
mov dword [esp + 0x154], 0
mov dword [esp + method.wpf::CWndBase.virtual_0], 0x4c844c
call fcn.0041c550
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 4
push 0x952
push eax
call esi
push 0
push 0
push 0x925
jmp 0x426663
mov eax, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 4
push 0x952
push eax
call esi
push 0
push 0
push 0x924
jmp 0x426663
mov eax, dword [0x4e65b8]
movzx ecx, word [eax + 0x3a]
push 0
push ecx
lea ecx, [ebp + 0x24]
call fcn.0041b4a0
jmp case.default.0x4270f2
mov edx, dword [0x4e65b8]
movzx eax, word [edx + 0x3a]
push 1
push eax
lea ecx, [ebp + 0x24]
call fcn.0041b4a0
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x7d8
push eax
call esi
push 0
push 0
mov edi, eax
mov eax, dword [ebp + 0x28]
push 0x7d9
push eax
mov dword [esp + 0x80], edi
call esi
cmp edi, eax
mov dword [esp + 0x78], eax
je case.default.0x4270f2
lea ebx, [ebp + 0x24]
mov ecx, ebx
call fcn.00413840
test al, al
jne case.default.0x4270f2
mov eax, dword [ebp + 0x28]
push 0
push 0
push 0x861
push eax
call esi
push 0
push 0
mov edi, eax
mov eax, dword [ebp + 0x28]
push 0x85f
push eax
call esi
sub edi, eax
mov dword [esp + 0x18], edi
add edi, 2
push edi
lea ecx, [esp + 0x150]
call fcn.004136c0
push edi
lea ecx, [esp + 0x64]
call fcn.004136c0
mov ecx, dword [ebp + 0x28]
push 0
push 4
push 0x952
push ecx
call esi
mov edx, dword [esp + 0x14c]
mov eax, dword [ebp + 0x28]
push edx
push 0
push 0x871
push eax
call esi
cmp word [esp + 0xae8], 0x9d8d
jne 0x42698f
mov ecx, dword [esp + 0x64]
mov edi, dword [esp + 0x60]
mov edx, dword [esp + 0x14c]
push ecx
push edi
push edx
call dword [sym.imp.USER32.dll_OemToCharBuffA]
jmp 0x4269d5
push edi
lea ecx, [esp + 0x5c]
call fcn.004136c0
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x14c]
push eax
push ecx
push edx
call dword [sym.imp.USER32.dll_CharToOemBuffA]
mov edi, dword [esp + 0x60]
mov edx, dword [esp + 0x58]
mov eax, edi
sub edx, edi
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, 1
test cl, cl
jne 0x4269c0
lea ecx, [esp + 0x58]
call fcn.00402b20
push 0x81e
mov ecx, ebx
call fcn.00401200
push 0x884
mov ecx, ebx
call fcn.00401200
mov eax, dword [esp + 0x18]
push edi
push eax
push 0x7d1
mov ecx, ebx
call fcn.00403510
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x78]
push ecx
push edx
push 0x870
mov ecx, ebx
call fcn.00403510
push 0x81f
mov ecx, ebx
call fcn.00401200
mov eax, dword [ebp + 0x28]
push 0
push 0xffffffffffffffff
push 0x952
push eax
call esi
lea ecx, [esp + 0x60]
call fcn.00402b20
lea ecx, [esp + 0x14c]
call fcn.00402b20
jmp case.default.0x4270f2
lea ecx, [esp + 0x14c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor ecx, ecx
push 0x80
cmp di, 0x9d8e
setne cl
lea edx, [esp + 0x440]
push edx
push 0
lea eax, [esp + 0x158]
push eax
add ecx, 1
push ecx
push 0x400
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
push 0x80
lea edx, [esp + 0x4c0]
push edx
push 0
lea eax, [esp + 0x158]
push eax
push 2
push 0x400
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
lea ecx, [esp + 0x43c]
push ecx
lea edx, [esp + 0x4c0]
push edx
lea eax, [esp + 0x5c8]
push str._s__s
push eax
call fcn.004a07a0
mov edx, dword [ebp + 0x28]
add esp, 0x10
lea ecx, [esp + 0x5c0]
push ecx
push 0
push 0x87a
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
cmp dword [0x4e6614], 0
je 0x426b7d
cmp di, 0x9d90
jne 0x426b53
lea eax, [esp + 0x17]
push eax
lea ecx, [esp + 0xc4]
push 0x4e6600
push ecx
mov byte [esp + 0x23], 0x5c
call fcn.00407fe0
add esp, 0xc
cmp dword [eax + 0x18], 0x10
jb 0x426b2d
mov eax, dword [eax + 4]
jmp 0x426b30
add eax, 4
mov edx, dword [ebp + 0x28]
push eax
push 0
push 0x87a
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0xc0]
call fcn.00490500
jmp case.default.0x4270f2
cmp dword [0x4e6618], 0x10
mov eax, dword [0x4e6604]
jae 0x426b66
mov eax, 0x4e6604
push eax
mov eax, dword [ebp + 0x28]
push 0
push 0x87a
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
push 0
push 0x2712
lea ecx, [esp + 0x70]
call fcn.0042c080
mov ecx, dword [eax]
mov edx, dword [ebp + 0x28]
push ecx
push 0
push 0x87a
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esp + 0x68]
push eax
call fcn.0049ec02
add esp, 4
jmp case.default.0x4270f2
push 1
lea ecx, [ebp + 0x24]
call fcn.00414d60
jmp case.default.0x4270f2
push 0
lea ecx, [ebp + 0x24]
call fcn.00414d60
jmp case.default.0x4270f2
lea ecx, [ebp + 0x24]
call fcn.00414e50
jmp case.default.0x4270f2
lea ecx, [ebp + 0x24]
call fcn.0041cd20
jmp case.default.0x4270f2
push 0
push 0
call fcn.00404730
add esp, 8
jmp case.default.0x4270f2
push ecx
push 0
call fcn.00404730
add esp, 8
jmp case.default.0x4270f2
push 0
push 1
call fcn.00404730
add esp, 8
jmp case.default.0x4270f2
lea ecx, [esp + 0x43c]
call fcn.0041eae0
mov ecx, dword [ebp + 4]
push ecx
lea ecx, [esp + 0x440]
mov dword [esp + 0xae4], 0x16
call fcn.0041c4d0
cmp eax, 1
jne 0x426c57
mov ecx, ebp
call fcn.00421eb0
mov ecx, ebp
call fcn.0041cf70
lea ecx, [esp + 0x444]
call fcn.004057f0
jmp case.default.0x4270f2
lea ecx, [esp + 0x43c]
call fcn.0041ea00
mov edx, dword [ebp + 4]
push edx
lea ecx, [esp + 0x440]
mov dword [esp + 0xae4], 0x17
call fcn.0041c4b0
cmp eax, 1
jne 0x426caa
lea ecx, [ebp + 0x24]
call fcn.00419190
mov ecx, ebp
call fcn.00421eb0
mov ecx, ebp
call fcn.0041cf70
lea ecx, [esp + 0x43c]
call fcn.0041dbe0
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x40], 0
push 0
sete cl
mov byte [eax + 0x40], cl
mov eax, dword [0x4e65b8]
mov ecx, dword [ebp + 0x28]
xor edx, edx
cmp byte [eax + 0x40], dl
setne dl
push edx
push 0x8dc
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, ebp
call fcn.0041cdc0
jmp case.default.0x4270f2
mov edx, dword [0x4e65b8]
movzx eax, word [edx + 0x34]
push 0
push eax
push 0x9a0
lea ecx, [ebp + 0x24]
call fcn.00403630
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x37], 0
push 0
je 0x426d5d
movzx ecx, byte [eax + 0x36]
mov edx, dword [ecx*8 + 0x4e659c]
mov eax, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edx
push 0x99e
push eax
call esi
mov ecx, dword [0x4e65b8]
movzx edx, byte [ecx + 0x36]
mov eax, dword [edx*8 + 0x4e6598]
mov ecx, dword [ebp + 0x28]
push 0
push eax
push 0x99c
push ecx
call esi
jmp case.default.0x4270f2
mov edx, dword [ebp + 0x28]
push 0
push 0x99c
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x3f], 0
push 0
sete cl
mov byte [eax + 0x3f], cl
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x3f], 0
je 0x426daf
movzx edx, byte [eax + 0x3e]
push edx
add ebp, 0x24
push 0x93b
mov ecx, ebp
call fcn.00403530
mov ecx, ebp
call fcn.00413a30
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
push 0
push 0x93b
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x44], 0
push 0
sete cl
mov byte [eax + 0x44], cl
mov edx, dword [0x4e65b8]
movzx eax, byte [edx + 0x44]
push eax
push 0x854
lea ecx, [ebp + 0x24]
call fcn.00403530
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x42], 0
sete cl
mov byte [eax + 0x42], cl
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x46], 0
mov ecx, ebp
sete dl
mov byte [eax + 0x46], dl
call fcn.0041cf70
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x45], 0
sete cl
mov byte [eax + 0x45], cl
mov edx, dword [0x4e65b8]
mov al, byte [edx + 0x45]
mov ecx, dword [ebp + 0x28]
neg al
sbb eax, eax
and eax, 0x10
push eax
push 1
push 0x8c2
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x47], 0
push 0
sete dl
mov byte [eax + 0x47], dl
mov ecx, dword [0x4e65b8]
mov edx, dword [ebp + 0x28]
xor eax, eax
cmp byte [ecx + 0x47], al
setne al
push eax
push 0x7e5
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x48], 0
push 0
sete cl
mov byte [eax + 0x48], cl
mov edx, dword [0x4e65b8]
movzx eax, byte [edx + 0x48]
push eax
push 0x934
lea ecx, [ebp + 0x24]
call fcn.00403530
jmp case.default.0x4270f2
mov ecx, dword [0x4e65b8]
movzx eax, word [ecx + 0x2e]
mov edx, eax
and edx, 0xf00
not edx
and edx, eax
mov word [ecx + 0x2e], dx
mov ecx, ebp
call fcn.0041bc90
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x37], 0
push 0
sete cl
mov byte [eax + 0x37], cl
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x37], 0
je 0x426f3d
movzx edx, byte [eax + 0x36]
mov eax, dword [edx*8 + 0x4e659c]
mov ecx, dword [ebp + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push eax
push 0x99e
push ecx
call esi
mov edx, dword [0x4e65b8]
movzx eax, byte [edx + 0x36]
mov ecx, dword [eax*8 + 0x4e6598]
mov edx, dword [ebp + 0x28]
push 0
push ecx
push 0x99c
push edx
call esi
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
push 0
push 0x99c
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x41], 0
sete cl
mov byte [eax + 0x41], cl
mov edx, dword [0x4e65b8]
cmp byte [edx + 0x41], 0
jne case.default.0x4270f2
mov eax, dword [ebp + 0x28]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x92f
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x43], 0
sete cl
mov byte [eax + 0x43], cl
jmp case.default.0x4270f2
mov edx, dword [ebp + 0x28]
push 0
push 0
push 0x91d
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x28]
push 0
push 0
push 0x91e
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov ecx, dword [ebp + 0x28]
push 0
push 0
push 0x945
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x4d], 0
sete dl
mov byte [eax + 0x4d], dl
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x4d], 0
je 0x42701b
mov ecx, dword [ebp + 0x90]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, ebp
call fcn.0041cd40
jmp case.default.0x4270f2
mov ecx, ebp
call fcn.0041cdc0
mov edx, dword [ebp + 0x90]
push 5
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, ebp
call fcn.0041cd40
jmp case.default.0x4270f2
mov eax, dword [ebp + 0x78]
push 0
push 0
push 0x41b
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4270f2
mov eax, dword [0x4e65b8]
cmp byte [eax + 0x4e], 0
sete cl
mov byte [eax + 0x4e], cl
mov edx, dword [0x4e65b8]
cmp byte [edx + 0x4e], 0
je 0x42708b
mov eax, dword [ebp + 0x88]
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, ebp
call fcn.0041cd40
jmp case.default.0x4270f2
mov ecx, ebp
call fcn.00421eb0
mov ecx, dword [ebp + 0x88]
push 5
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, ebp
call fcn.0041cd40
jmp case.default.0x4270f2
lea ecx, [esp + 0x2cc]
call fcn.0041e520
mov edx, dword [ebp + 4]
push edx
lea ecx, [esp + 0x2d0]
call fcn.0041c410
lea ecx, [esp + 0x2cc]
call fcn.0041d950
jmp case.default.0x4270f2
push 0x9c40
jmp 0x4271b0
sub eax, 0x9efd
cmp eax, 0x18
ja case.default.0x4270f2
jmp dword [eax*4 + 0x42754c]
push 0x9c41
jmp 0x4271b0
mov ecx, ebp
call fcn.0041dd80
jmp case.default.0x4270f2
push 0x9c44
jmp 0x4271b0
push 0x9d6c
jmp 0x4271b0
push 0x9d6d
jmp 0x4271b0
push 0x9d6e
jmp 0x4271b0
push 0x9d6f
jmp 0x4271b0
push 0x9d71
jmp 0x4271b0
push 0x9d92
jmp 0x4271b0
push 0x9d95
jmp 0x4271b0
push 0x9dd3
jmp 0x4271b0
push 0x9de2
jmp 0x4271b0
push 0x9de3
jmp 0x4271b0
push 0x9dd0
jmp 0x4271b0
push 0x9dd2
jmp 0x4271b0
push 0x9c45
jmp 0x4271b0
push 0x9c46
jmp 0x4271b0
push 0x9d70
jmp 0x4271b0
push 0x9d72
jmp 0x4271b0
push 0x9d93
jmp 0x4271b0
push 0x9d94
jmp 0x4271b0
push 0x9c4e
jmp 0x4271b0
push 0x9c51
jmp 0x4271b0
push 0x9c52
mov ecx, ebp
call fcn.0041cd80
xor eax, eax
mov ecx, dword [esp + 0xad8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xac0]
xor ecx, esp
call fcn.0049ec31
add esp, 0xad0
ret 8