Function at 0x427080
Capabilities:
Create process on windows
Self delete

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x472897
mov eax, dword fs:[0]
push eax
sub esp, 0x1d0
mov eax, dword [0x4878d4]
xor eax, esp
mov dword [esp + 0x1c8], eax
push ebx
push esi
push edi
mov eax, dword [0x4878d4]
xor eax, esp
push eax
lea eax, [esp + 0x1e0]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, dword [esi]
mov ebx, ecx
mov dword [esp + 0x20], ebx
cmp eax, 9
je 0x428624
cmp eax, 5
je 0x4270de
cmp eax, 0x11
jne 0x427158
push 0x14
call fcn.00459c10
mov esi, eax
mov dword [esi + 8], 0x64
mov ecx, dword [ebx + 0x260]
add esp, 4
call fcn.0042d680
sub eax, 0xb4
mov dword [esi + 0xc], eax
mov ecx, dword [ebx + 0x25c]
call fcn.0042d680
mov dword [esi], eax
mov ecx, dword [ebx + 0x254]
call fcn.0042d680
sub eax, 0x100
mov dword [esi + 4], eax
mov ecx, dword [ebx + 0x258]
call fcn.0042d680
push esi
push 0x96
push 0x4c8
lea ecx, [ebx - 0x10]
mov dword [esi + 0x10], eax
call fcn.004484d0
push eax
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x428624
xor edi, edi
cmp eax, edi
jne 0x4284c0
mov eax, dword [esi + 4]
cmp eax, dword [ebx + 0x10]
jne 0x4271ac
mov eax, dword [ebx + 0x270]
mov ecx, dword [ebx + 0x260]
push eax
call fcn.0042d690
mov ecx, dword [ebx + 0x274]
push ecx
mov ecx, dword [ebx + 0x25c]
call fcn.0042d690
mov edx, dword [ebx + 0x278]
mov ecx, dword [ebx + 0x254]
push edx
call fcn.0042d690
mov eax, dword [ebx + 0x27c]
push eax
jmp 0x428499
cmp eax, dword [ebx + 0x14]
jne 0x42720e
lea ecx, [esp + 0x3c]
push ecx
mov ecx, dword [ebx - 0xc]
mov edi, 0x47e1a8
call fcn.00429470
lea ecx, [esp + 0x3c]
mov dword [esp + 0x1e8], 0
call fcn.00432250
test al, al
jne 0x42728d
lea ecx, [esp + 0x3c]
call fcn.00432030
dec eax
push eax
lea ecx, [esp + 0x40]
call fcn.00432280
cmp ax, 0x5c
je 0x427207
push 0x47b764
lea ecx, [esp + 0x40]
call fcn.004322f0
push str.pathedit
jmp 0x42726e
cmp eax, dword [ebx + 0x18]
jne 0x4272a6
mov ecx, dword [ebx - 0xc]
lea eax, [esp + 0x3c]
push eax
mov edi, 0x47e1c8
call fcn.00429470
lea ecx, [esp + 0x3c]
mov dword [esp + 0x1e8], 1
call fcn.00432250
test al, al
jne 0x42728d
lea ecx, [esp + 0x3c]
call fcn.00432030
dec eax
push eax
lea ecx, [esp + 0x40]
call fcn.00432280
cmp ax, 0x5c
je 0x427269
push 0x47b764
lea ecx, [esp + 0x40]
call fcn.004322f0
push str.pathedit2
mov ecx, dword [ebx + 4]
call fcn.004345a0
mov edi, eax
mov esi, dword [edi]
lea ecx, [esp + 0x3c]
add esi, 0x2c
call fcn.00432050
mov edx, dword [esi]
push eax
mov ecx, edi
call edx
lea ecx, [esp + 0x3c]
mov dword [esp + 0x1e8], 0xffffffff
call fcn.00432010
jmp 0x428624
cmp eax, dword [ebx + 0x264]
jne 0x4272c2
mov ecx, dword [ebx + 0x254]
push 0xeb
call fcn.0042d690
push 0x3c
jmp 0x427318
cmp eax, dword [ebx + 0x268]
jne 0x4272f4
mov ecx, dword [ebx + 0x254]
push 0x12c
call fcn.0042d690
mov ecx, dword [ebx + 0x25c]
push 0x87
call fcn.0042d690
mov ecx, dword [ebx + 0x258]
push 0x40
jmp 0x42732e
cmp eax, dword [ebx + 0x26c]
jne 0x427355
push 0x14
call fcn.00459c10
mov ecx, dword [ebx + 0x254]
add esp, 4
push pe_nt_image_headers32
call fcn.0042d690
push 0x40
mov ecx, dword [ebx + 0x258]
call fcn.0042d690
mov ecx, dword [ebx + 0x25c]
push 0x80
call fcn.0042d690
mov ecx, dword [ebx + 0x260]
push 0xb4
call fcn.0042d690
mov ecx, dword [ebx + 4]
push edi
push edi
push 5
push edi
call fcn.004356b0
jmp 0x428624
cmp eax, dword [ebx + 0x2c]
jne 0x4274a4
mov ecx, dword [ebx + 4]
push str.all_Associations
call fcn.004345a0
cmp eax, edi
je 0x428624
mov edx, dword [eax + 0x3b4]
add eax, 0x3b4
mov dword [esp + 0x14], eax
mov ecx, eax
mov eax, dword [edx + 0xc]
mov dword [esp + 0x18], edi
call eax
test eax, eax
jle 0x428624
mov edi, dword [esp + 0x14]
mov edx, dword [edi]
mov eax, dword [esp + 0x18]
mov edx, dword [edx]
push eax
mov ecx, edi
call edx
mov esi, eax
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
call edx
mov ecx, str.HorizontalLayoutUI
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4273dc
test dx, dx
je 0x4273d8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4273dc
add eax, 4
add ecx, 4
test dx, dx
jne 0x4273b6
xor eax, eax
jmp 0x4273e1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x427485
mov eax, dword [esi + 0x3b4]
mov edx, dword [eax + 0xc]
add esi, 0x3b4
mov ecx, esi
call edx
test eax, eax
jle 0x427485
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
xor ebx, ebx
call edx
test eax, eax
jle 0x427485
mov eax, dword [esi]
mov edx, dword [eax]
push ebx
mov ecx, esi
call edx
mov edi, eax
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
mov ecx, edi
call edx
mov ecx, str.OptionUI
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x427456
test dx, dx
je 0x427452
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x427456
add eax, 4
add ecx, 4
test dx, dx
jne 0x427430
xor eax, eax
jmp 0x42745b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x427473
mov ecx, edi
call fcn.0042c920
test al, al
jne 0x427473
push 1
mov ecx, edi
call fcn.0042c930
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
inc ebx
call edx
cmp ebx, eax
jl 0x427413
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
inc esi
mov ecx, edi
mov dword [esp + 0x18], esi
call edx
cmp esi, eax
jl 0x427399
jmp 0x428624
cmp eax, dword [ebx + 0x30]
jne 0x4275f4
mov ecx, dword [ebx + 4]
push str.all_Associations
call fcn.004345a0
cmp eax, edi
je 0x428624
mov edx, dword [eax + 0x3b4]
add eax, 0x3b4
mov dword [esp + 0x14], eax
mov ecx, eax
mov eax, dword [edx + 0xc]
mov dword [esp + 0x18], edi
call eax
test eax, eax
jle 0x428624
mov edi, dword [esp + 0x14]
mov edx, dword [edi]
mov eax, dword [esp + 0x18]
mov edx, dword [edx]
push eax
mov ecx, edi
call edx
mov esi, eax
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
call edx
mov ecx, str.HorizontalLayoutUI
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42752b
test dx, dx
je 0x427527
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42752b
add eax, 4
add ecx, 4
test dx, dx
jne 0x427505
xor eax, eax
jmp 0x427530
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4275d5
mov eax, dword [esi + 0x3b4]
mov edx, dword [eax + 0xc]
add esi, 0x3b4
mov ecx, esi
call edx
test eax, eax
jle 0x4275d5
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
xor ebx, ebx
call edx
test eax, eax
jle 0x4275d5
mov eax, dword [esi]
mov edx, dword [eax]
push ebx
mov ecx, esi
call edx
mov edi, eax
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
mov ecx, edi
call edx
mov ecx, str.OptionUI
jmp 0x427580
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4275a6
test dx, dx
je 0x4275a2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4275a6
add eax, 4
add ecx, 4
test dx, dx
jne 0x427580
xor eax, eax
jmp 0x4275ab
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4275c3
mov ecx, edi
call fcn.0042c920
test al, al
je 0x4275c3
push 0
mov ecx, edi
call fcn.0042c930
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
inc ebx
call edx
cmp ebx, eax
jl 0x427562
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
inc esi
mov ecx, edi
mov dword [esp + 0x18], esi
call edx
cmp esi, eax
jl 0x4274e8
jmp 0x428624
cmp eax, dword [ebx + 0x34]
jne 0x427744
mov ecx, dword [ebx + 4]
push str.all_Associations
call fcn.004345a0
cmp eax, edi
je 0x428624
lea edi, [eax + 0x3b4]
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
xor esi, esi
mov ecx, edi
mov dword [esp + 0x14], esi
mov dword [esp + 0x1c], edi
call edx
test eax, eax
jle 0x428624
mov eax, dword [edi]
mov edx, dword [eax]
push esi
mov ecx, edi
call edx
mov esi, eax
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
call edx
mov ecx, str.HorizontalLayoutUI
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x427676
test dx, dx
je 0x427672
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x427676
add eax, 4
add ecx, 4
test dx, dx
jne 0x427650
xor eax, eax
jmp 0x42767b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x427725
mov eax, dword [esi + 0x3b4]
mov edx, dword [eax + 0xc]
add esi, 0x3b4
mov ecx, esi
call edx
test eax, eax
jle 0x427725
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
xor ebx, ebx
call edx
test eax, eax
jle 0x427725
mov eax, dword [esi]
mov edx, dword [eax]
push ebx
mov ecx, esi
call edx
mov edi, eax
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
mov ecx, edi
call edx
mov ecx, str.OptionUI
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4276f6
test dx, dx
je 0x4276f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4276f6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4276d0
xor eax, eax
jmp 0x4276fb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x427713
mov ecx, edi
call fcn.0042c920
test al, al
jne 0x427713
push 1
mov ecx, edi
call fcn.0042c930
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
inc ebx
call edx
cmp ebx, eax
jl 0x4276b1
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
inc esi
mov ecx, edi
mov dword [esp + 0x14], esi
call edx
cmp esi, eax
jl 0x427633
jmp 0x428624
cmp eax, dword [ebx + 0x24]
jne 0x428453
mov ecx, dword [ebx + 4]
push str.minimize
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
lea edi, [ebx + 0xbc]
mov ecx, edi
test al, al
je 0x42777a
call fcn.00432050
push eax
push 0x47b710
jmp 0x427785
call fcn.00432050
push eax
push str.12568
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push str.close
push str.memory
call esi
mov ecx, dword [ebx + 4]
push str.playtop
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
test al, al
je 0x4277be
mov ecx, edi
call fcn.00432050
push eax
push str.12568
jmp 0x4277f0
mov ecx, dword [ebx + 4]
push 0x47bae8
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
mov ecx, edi
test al, al
je 0x4277e5
call fcn.00432050
push eax
push 0x47cfe8
jmp 0x4277f0
call fcn.00432050
push eax
push 0x47c6e0
push 0x47bae8
push str.memory
call esi
mov ecx, dword [ebx + 4]
push str.autorun
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
mov ecx, edi
test al, al
je 0x427823
call fcn.00432050
push eax
push str.12568
jmp 0x42782e
call fcn.00432050
push eax
push 0x47b710
push str.autorun
push str.memory
call esi
mov ecx, dword [ebx + 4]
push str.qtacc
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
mov ecx, edi
test al, al
je 0x427861
call fcn.00432050
push eax
push str.12568
jmp 0x42786c
call fcn.00432050
push eax
push 0x47b710
push str.qtacc
push str.memory
call esi
mov ecx, dword [ebx + 4]
push str.prim
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
test al, al
je 0x42789f
mov ecx, edi
call fcn.00432050
push eax
push 0x47c2a8
jmp 0x4278f8
mov ecx, dword [ebx + 4]
push str.ftot
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
test al, al
je 0x4278c6
mov ecx, edi
call fcn.00432050
push eax
push 0x47cff0
jmp 0x4278f8
mov ecx, dword [ebx + 4]
push str.stton
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
mov ecx, edi
test al, al
je 0x4278ed
call fcn.00432050
push eax
push 0x47cff4
jmp 0x4278f8
call fcn.00432050
push eax
push 0x47cfec
push str.FRAMERATIO
push str.memory
call esi
mov ecx, dword [ebx + 4]
push str.cbrender
call fcn.004345a0
lea ecx, [eax + 0x3e4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
test eax, eax
jne 0x427931
mov ecx, edi
call fcn.00432050
push eax
push 0x47cfe8
jmp 0x427957
cmp eax, 1
jne 0x427945
mov ecx, edi
call fcn.00432050
push eax
push 0x47c6e0
jmp 0x427957
cmp eax, 2
jne 0x427963
mov ecx, edi
call fcn.00432050
push eax
push 0x47c2a8
push 0x47c2ac
push str.memory
call esi
mov ecx, dword [ebx + 4]
push str.click
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
mov ecx, edi
test al, al
je 0x42798a
call fcn.00432050
push eax
push str.12568
jmp 0x427995
call fcn.00432050
push eax
push 0x47b710
push str.clickpause
push str.memory
call esi
mov ecx, dword [ebx + 4]
push str.hidepause
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
mov ecx, edi
test al, al
je 0x4279c8
call fcn.00432050
push eax
push str.12568
jmp 0x4279d3
call fcn.00432050
push eax
push 0x47b710
push str.hidepause
push str.memory
call esi
mov ecx, dword [ebx + 4]
push str.remstation
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
mov ecx, edi
test al, al
je 0x427a06
call fcn.00432050
push eax
push str.12568
jmp 0x427a11
call fcn.00432050
push eax
push 0x47b710
push str.remember
push str.memory
call esi
mov ecx, dword [ebx + 4]
push str.hour
call fcn.004345a0
lea ecx, [eax + 0x3e4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
lea ecx, [esp + 0x14c]
mov dword [esp + 0x1c], eax
call fcn.00432000
mov eax, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x150]
push 0x47d12c
push ecx
mov dword [esp + 0x1f4], 2
call fcn.00432d10
add esp, 0xc
mov ecx, edi
call fcn.00432050
push eax
lea ecx, [esp + 0x150]
call fcn.00432050
push eax
push str.hour
push str.time
call esi
mov ecx, dword [ebx + 4]
push str.minute
call fcn.004345a0
mov edx, dword [eax + 0x3e4]
lea ecx, [eax + 0x3e4]
mov eax, dword [edx + 4]
call eax
push eax
lea ecx, [esp + 0x150]
push 0x47d12c
push ecx
call fcn.00432d10
add esp, 0xc
mov ecx, edi
call fcn.00432050
push eax
lea ecx, [esp + 0x150]
call fcn.00432050
push eax
push str.minute
push str.time
call esi
mov ecx, dword [ebx + 4]
push str.enddown
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
test al, al
je 0x427b09
mov ecx, edi
call fcn.00432050
push eax
push str.12568
jmp 0x427b55
mov ecx, dword [ebx + 4]
push str.autoshotdown
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
test al, al
je 0x427b30
mov ecx, edi
call fcn.00432050
push eax
push 0x47cfe8
jmp 0x427b55
mov ecx, dword [ebx + 4]
push str.autooff
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
test al, al
je 0x427b61
mov ecx, edi
call fcn.00432050
push eax
push 0x47c6e0
push 0x47c6e4
push str.memory
call esi
mov ecx, dword [ebx + 4]
push 0x47b714
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
mov ecx, edi
test al, al
je 0x427b88
call fcn.00432050
push eax
push str.12568
jmp 0x427b93
call fcn.00432050
push eax
push 0x47b710
push 0x47b714
push str.memory
call esi
mov ecx, dword [ebx + 4]
push str.always
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
test al, al
je 0x427ce4
lea esi, [esp + 0x10]
call fcn.004040a0
lea ecx, [ebx + 0xbc]
mov byte [esp + 0x1e8], 3
call fcn.00432050
push eax
push str.12568
push str.always
push str.memory
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ecx, dword [ebx + 0x254]
call fcn.0042d680
push eax
push 0x47d12c
mov edi, esi
call fcn.00405490
lea esi, [ebx + 0xbc]
add esp, 8
mov ecx, esi
call fcn.00432050
mov edx, dword [esp + 0x10]
push eax
push edx
push str.brightness
push 0x47dfe4
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ecx, dword [ebx + 0x258]
call fcn.0042d680
push eax
push 0x47d12c
call fcn.00405490
add esp, 8
mov ecx, esi
call fcn.00432050
push eax
mov eax, dword [esp + 0x14]
push eax
push str.saturation
push 0x47dfe4
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ecx, dword [ebx + 0x25c]
call fcn.0042d680
push eax
push 0x47d12c
call fcn.00405490
add esp, 8
mov ecx, esi
call fcn.00432050
mov ecx, dword [esp + 0x10]
push eax
push ecx
push str.contrast
push 0x47dfe4
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ecx, dword [ebx + 0x260]
call fcn.0042d680
push eax
push 0x47d12c
call fcn.00405490
add esp, 8
mov ecx, esi
call fcn.00432050
mov edx, dword [esp + 0x10]
push eax
push edx
push 0x47e070
push 0x47dfe4
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ecx, edi
mov byte [esp + 0x1e8], 2
call fcn.00404200
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x427cfd
mov ecx, edi
call fcn.00432050
push eax
push 0x47b710
push str.always
push str.memory
call esi
mov ecx, dword [ebx + 4]
push str.pathedit
call fcn.004345a0
mov edx, dword [eax]
mov edx, dword [edx + 0x28]
lea ecx, [esp + 0xc4]
push ecx
mov ecx, eax
call edx
mov dword [esp + 0x1c], eax
lea edi, [ebx + 0x140]
mov ecx, edi
mov byte [esp + 0x1e8], 4
call fcn.00432050
mov ecx, dword [esp + 0x1c]
push eax
call fcn.00432050
push eax
push str.mediapath
push str.QVODTERMINAL
call esi
lea ecx, [esp + 0xc4]
mov byte [esp + 0x1e8], 2
call fcn.00432010
mov ecx, dword [ebx + 4]
push str.delfile
call fcn.004345a0
mov edx, dword [eax]
mov edx, dword [edx + 0x28]
lea ecx, [esp + 0x3c]
push ecx
mov ecx, eax
call edx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1e8], 5
call fcn.00432050
push eax
call fcn.0045b2ca
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
jle 0x427da1
cmp eax, 0x63
jle 0x427db5
mov ecx, edi
call fcn.00432050
push eax
push 0x47b710
push str.EnableDelTask
jmp 0x427e05
mov ecx, edi
call fcn.00432050
push eax
push str.12568
push str.EnableDelTask
push str.QVODTERMINAL
call esi
lea ecx, [esp + 0x3c]
call fcn.00432260
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x40]
push 0x47d12c
push ecx
call fcn.00432d10
add esp, 0xc
mov ecx, edi
call fcn.00432050
push eax
lea ecx, [esp + 0x40]
call fcn.00432050
push eax
push str.MinValue
push str.QVODTERMINAL
call esi
mov ecx, dword [ebx + 4]
push str.maxedit
call fcn.004345a0
lea ecx, [esp + 0x3c]
mov edi, eax
call fcn.00432260
mov edx, dword [edi]
mov edx, dword [edx + 0x28]
lea eax, [esp + 0xc4]
push eax
mov ecx, edi
call edx
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x1ec], 6
call fcn.00432290
lea ecx, [esp + 0xc4]
mov byte [esp + 0x1e8], 5
call fcn.00432010
lea ecx, [esp + 0x3c]
call fcn.00432050
push eax
call fcn.0045b2ca
mov edi, eax
add esp, 4
cmp edi, 2
jge 0x427e82
push 0x47cfe8
lea ecx, [esp + 0x40]
call fcn.004322b0
cmp edi, 0xa
jle 0x427e95
push 0x47cff8
lea ecx, [esp + 0x40]
call fcn.004322b0
lea edi, [ebx + 0xbc]
mov ecx, edi
call fcn.00432050
push eax
lea ecx, [esp + 0x40]
call fcn.00432050
push eax
push str.maxedit
push str.memory
call esi
mov ecx, dword [ebx + 4]
push str.pathedit2
call fcn.004345a0
mov edx, dword [eax]
mov edx, dword [edx + 0x28]
lea ecx, [esp + 0xc4]
push ecx
mov ecx, eax
call edx
mov dword [esp + 0x1c], eax
mov ecx, edi
mov byte [esp + 0x1e8], 7
call fcn.00432050
mov ecx, dword [esp + 0x1c]
push eax
call fcn.00432050
push eax
push str.picpath
push str.memory
call esi
lea ecx, [esp + 0xc4]
mov byte [esp + 0x1e8], 5
call fcn.00432010
mov ecx, dword [ebx + 4]
push str.all_Associations
call fcn.004345a0
mov ecx, dword [ebx + 4]
push str.alwaysFileAssociations
mov dword [esp + 0x28], eax
call fcn.004345a0
mov ecx, eax
call fcn.0042c920
mov ecx, edi
test al, al
je 0x427f4d
call fcn.00432050
push eax
push str.12568
jmp 0x427f58
call fcn.00432050
push eax
push 0x47b710
push str.alwaysFileAssociations
push str.memory
call esi
mov eax, dword [esp + 0x24]
mov dword [esp + 0x1c], 0
test eax, eax
je 0x4283fc
mov ecx, dword [esp + 0x20]
cmp dword [ecx + 0x250], 0
je 0x4283fc
mov edx, dword [eax + 0x3b4]
lea ecx, [eax + 0x3b4]
mov eax, dword [edx + 0xc]
mov dword [esp + 0x14], 0
mov dword [esp + 0x24], ecx
call eax
test eax, eax
jle 0x4283fc
mov edi, edi
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx]
mov eax, dword [esp + 0x14]
mov edx, dword [edx]
push eax
call edx
mov esi, eax
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
call edx
mov ecx, str.HorizontalLayoutUI
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x427ff6
test dx, dx
je 0x427ff2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x427ff6
add eax, 4
add ecx, 4
test dx, dx
jne 0x427fd0
xor eax, eax
jmp 0x427ffb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4283c8
mov eax, dword [esi + 0x3b4]
mov edx, dword [eax + 0xc]
lea ecx, [esi + 0x3b4]
mov dword [esp + 0x28], ecx
call edx
test eax, eax
jle 0x4283c8
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
mov dword [esp + 0x30], 0
call edx
test eax, eax
jle 0x4283c8
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x28]
mov eax, dword [esi]
mov edx, dword [eax]
push edi
mov ecx, esi
call edx
mov ebx, eax
mov eax, dword [ebx]
mov edx, dword [eax + 0xc]
mov ecx, ebx
call edx
mov ecx, str.OptionUI
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x428086
test dx, dx
je 0x428082
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x428086
add eax, 4
add ecx, 4
test dx, dx
jne 0x428060
xor eax, eax
jmp 0x42808b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4283b2
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x24c]
sub eax, 0x10
call fcn.00404c80
add eax, 0x10
mov dword [esp + 0x10], eax
lea esi, [esp + 0x18]
call fcn.004040a0
mov byte [esp + 0x1e8], 9
mov edx, dword [ebx]
mov edx, dword [edx + 4]
lea eax, [esp + 0xc4]
push eax
mov ecx, ebx
call edx
sub esp, 0x84
mov esi, eax
mov edi, esp
mov byte [esp + 0x26c], 0xa
mov ecx, 0x21
rep movsd dword es:[edi], dword [esi]
push 0x47e194
lea edi, [esp + 0xa0]
call fcn.00405490
add esp, 0x88
lea ecx, [esp + 0xc4]
mov byte [esp + 0x1e8], 9
call fcn.00432010
mov eax, dword [ebx]
mov edx, dword [eax + 4]
lea ecx, [esp + 0xc4]
push ecx
mov ecx, ebx
call edx
mov ecx, eax
mov byte [esp + 0x1e8], 0xb
call fcn.00432050
lea ecx, [esp + 0x10]
push ecx
mov edx, eax
call fcn.00404ba0
lea ecx, [esp + 0xc4]
mov byte [esp + 0x1e8], 9
call fcn.00432010
lea edx, [esp + 0x10]
push edx
mov edx, str..ico
call fcn.00404ba0
mov ecx, ebx
call fcn.0042c920
test al, al
je 0x4282b4
mov eax, dword [ebx]
mov edx, dword [eax + 4]
lea ecx, [esp + 0xc4]
push ecx
mov ecx, ebx
call edx
mov esi, eax
mov edi, dword [esp + 0x20]
lea ecx, [edi + 0xbc]
mov byte [esp + 0x1e8], 0xc
call fcn.00432050
push eax
push str.12568
mov ecx, esi
call fcn.00432050
push eax
push str.memory
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [esp + 0xc4]
mov byte [esp + 0x1e8], 9
call fcn.00432010
mov eax, dword [esp + 0x10]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x3c], esp
mov esi, esp
call fcn.00404c80
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x1ec], 0xd
mov eax, dword [edi + 0x248]
push ecx
sub eax, 0x10
mov dword [esp + 0x3c], esp
mov esi, esp
call fcn.00404c80
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x1f0], 0xe
mov esi, dword [esp + 0x20]
push ecx
add esi, 0xfffffff0
mov eax, esi
mov dword [esp + 0x38], esp
mov edi, esp
call fcn.00404c80
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0x1f4], 9
call fcn.00429560
test al, al
jne 0x428390
lea edi, [esp + 0x10]
call fcn.0042aaa0
mov eax, dword [esp + 0x10]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x30], esp
mov edi, esp
call fcn.00404c80
add eax, 0x10
mov dword [edi], eax
mov eax, dword [esp + 0x24]
mov byte [esp + 0x1ec], 0xf
mov eax, dword [eax + 0x248]
push ecx
sub eax, 0x10
mov dword [esp + 0x3c], esp
mov edi, esp
call fcn.00404c80
add eax, 0x10
mov dword [edi], eax
push ecx
mov byte [esp + 0x1f4], 0x10
mov eax, esi
mov dword [esp + 0x44], esp
mov edi, esp
call fcn.00404c80
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0x1f4], 9
call fcn.0042a230
mov dword [esp + 0x1c], 1
jmp 0x428390
mov edx, dword [ebx]
mov edx, dword [edx + 4]
lea eax, [esp + 0xc4]
push eax
mov ecx, ebx
call edx
mov esi, eax
mov edi, dword [esp + 0x20]
lea ecx, [edi + 0xbc]
mov byte [esp + 0x1e8], 0x11
call fcn.00432050
push eax
push 0x47b710
mov ecx, esi
call fcn.00432050
push eax
push str.memory
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [esp + 0xc4]
mov byte [esp + 0x1e8], 9
call fcn.00432010
mov eax, dword [esp + 0x10]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x30], esp
mov esi, esp
call fcn.00404c80
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x1ec], 0x12
mov eax, dword [edi + 0x248]
push ecx
sub eax, 0x10
mov dword [esp + 0x3c], esp
mov esi, esp
call fcn.00404c80
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x1f0], 0x13
mov esi, dword [esp + 0x20]
push ecx
add esi, 0xfffffff0
mov eax, esi
mov dword [esp + 0x44], esp
mov edi, esp
call fcn.00404c80
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0x1f4], 9
call fcn.00429560
test al, al
je 0x428390
push ecx
mov eax, esi
mov dword [esp + 0x30], esp
mov edi, esp
call fcn.00404c80
add eax, 0x10
mov dword [edi], eax
call fcn.00429dc0
lea ecx, [esp + 0x18]
call fcn.00404200
lea ecx, [esp + 0x10]
mov byte [esp + 0x1e8], 5
call fcn.00404200
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x28]
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
inc edi
mov ecx, esi
mov dword [esp + 0x30], edi
call edx
cmp edi, eax
jl 0x428043
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
inc esi
mov dword [esp + 0x14], esi
call edx
cmp esi, eax
jl 0x427fb0
cmp dword [esp + 0x1c], 0
je 0x4283fc
push 0
push 0
push 0
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov esi, dword [esp + 0x20]
push 0
push 0
lea ecx, [esi - 0x10]
call fcn.00432550
mov eax, dword [esi - 0xc]
push 0
push 0x7b
push 0x4c8
push eax
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1e8], 2
call fcn.00432010
lea ecx, [esp + 0x14c]
mov dword [esp + 0x1e8], 0xffffffff
call fcn.00432010
jmp 0x428624
cmp eax, dword [ebx + 0x28]
jne 0x428624
mov ecx, dword [ebx + 0x270]
push ecx
mov ecx, dword [ebx + 0x260]
call fcn.0042d690
mov edx, dword [ebx + 0x274]
mov ecx, dword [ebx + 0x25c]
push edx
call fcn.0042d690
mov eax, dword [ebx + 0x278]
mov ecx, dword [ebx + 0x254]
push eax
call fcn.0042d690
mov ecx, dword [ebx + 0x27c]
push ecx
mov ecx, dword [ebx + 0x258]
call fcn.0042d690
mov ecx, dword [ebx + 4]
push edi
push edi
push 5
push edi
call fcn.004356b0
push edi
push edi
lea ecx, [ebx - 0x10]
call fcn.00432550
jmp 0x428624
cmp eax, 3
jne 0x4285e5
mov esi, dword [esi + 4]
mov edx, dword [esi]
mov edx, dword [edx + 4]
lea eax, [esp + 0xc4]
push eax
mov ecx, esi
call edx
mov dword [esp + 0x1e8], 0x14
mov ecx, dword [ebx + 4]
push str.switch
call fcn.004345a0
push str.normalset
lea ecx, [esp + 0xc8]
mov esi, eax
call fcn.004329d0
test al, al
je 0x428512
push edi
jmp 0x4285c5
push str.playset
lea ecx, [esp + 0xc8]
call fcn.004329d0
test al, al
je 0x42852e
push 1
jmp 0x4285c5
push str.imageset
lea ecx, [esp + 0xc8]
call fcn.004329d0
test al, al
je 0x42854a
push 2
jmp 0x4285c5
push str.FileAssociations
lea ecx, [esp + 0xc8]
call fcn.004329d0
test al, al
je 0x428563
push 3
jmp 0x4285c5
push str.pathset
lea ecx, [esp + 0xc8]
call fcn.004329d0
test al, al
je 0x42857c
push 4
jmp 0x4285c5
push str.timeauto
lea ecx, [esp + 0xc8]
call fcn.004329d0
test al, al
je 0x428595
push 5
jmp 0x4285c5
push 0x47e330
lea ecx, [esp + 0xc8]
call fcn.004329d0
test al, al
je 0x4285ae
push 6
jmp 0x4285c5
push str.aboutus
lea ecx, [esp + 0xc8]
call fcn.004329d0
test al, al
je 0x4285cc
push 7
mov ecx, esi
call fcn.0043c2e0
lea ecx, [esp + 0xc4]
mov dword [esp + 0x1e8], 0xffffffff
call fcn.00432010
jmp 0x428624
cmp eax, 4
jne 0x428624
mov ecx, dword [ebx + 4]
mov edi, dword [esi + 4]
push 0x47e338
call fcn.004345a0
cmp edi, eax
jne 0x428624
mov eax, dword [esi + 0x14]
push 1
push 0
push 0
push eax
mov ecx, edi
call fcn.0042cee0
mov ecx, eax
call fcn.00432050
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x1e0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1c8]
xor ecx, esp
call fcn.004599ea
mov esp, ebp
pop ebp
ret 4