Function at 0x4249d0
Capabilities:
Check for time delay via gettickcount
Find taskbar
Move file
Persist via application shimming
Print debug messages
Resolve function by parsing pe exports
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x49d5eb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x928
mov eax, dword [ebp + 0x10]
push ebx
push esi
xor esi, esi
push edi
mov dword [esp + 0x98], ecx
cmp eax, esi
jne 0x424a08
lea eax, [esp + 0x74]
mov edi, dword [0x4c28ec]
mov edx, eax
mov ebx, ecx
mov dword [esp + 0x4c], eax
mov dword [edx], esi
mov dword [esp + 0x54], edi
mov dword [esp + 0x14], ebx
cmp ecx, esi
je 0x424d08
cmp dword [0x4c85fc], esi
je 0x424a5c
cmp dword [0x4c85ec], esi
je 0x424a4a
mov eax, dword [0x4c85e4]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4c85ec], esi
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x4c85fc], esi
mov dword [0x4c85e4], esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov edx, dword [0x4c28ec]
mov ecx, eax
sub ecx, dword [0x4c9124]
cmp ecx, dword [edx + 0xd4]
jbe 0x424aa7
push 0
push 0
push 0
push 0
lea eax, [esp + 0xf4]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x424aa0
push 1
push 0xffffffffffffffff
call fcn.00401340
add esp, 8
call esi
mov dword [0x4c9124], eax
cmp byte [edi + 0xe8], 0
jne 0x424ad8
cmp byte [edi + 0xea], 0
jne 0x424ad8
mov edx, dword [0x4c9118]
cmp edx, 0xffffffff
jle 0x424ad8
mov ecx, dword [edi + 0x28]
cmp ecx, edx
jle 0x424ad4
mov byte [edi + 0xe8], 1
jmp 0x424ad8
inc ecx
mov dword [edi + 0x28], ecx
mov ecx, dword [edi + 4]
mov edx, dword [edi]
cmp ecx, 0xffffffff
jl 0x424afb
jg 0x424ae9
cmp edx, 0xffffffff
jbe 0x424afb
cmp dword [0x4c9114], ecx
jg 0x424b0d
jl 0x424afb
cmp dword [0x4c9110], edx
jae 0x424b0d
mov ecx, dword [edi + 0x24]
cmp ecx, 0xffffffff
jle 0x424b19
sub eax, dword [0x4c9120]
cmp eax, ecx
jb 0x424b19
push 1
push 0xa
call fcn.00401340
add esp, 8
cmp byte [edi + 0xf4], 0
je 0x424b3a
push 1
push 0x8000012f
call fcn.00401340
add esp, 8
cmp byte [edi + 0xf4], 0
jne 0x424b22
mov dword [0x4c8c70], ebx
cmp byte [edi + 0xf5], 0
je 0x424b7e
mov ecx, dword [0x4c8560]
mov dword [ecx*4 + 0x4c7f20], ebx
call esi
mov ecx, dword [0x4c8560]
mov dword [ecx*4 + 0x4c5dc0], eax
inc ecx
mov dword [0x4c8560], ecx
cmp ecx, 0x190
jl 0x424b7e
mov dword [0x4c8560], 0
mov al, byte [ebx]
cmp al, 1
je 0x424ba9
cmp al, 0x6b
je 0x424ba9
cmp al, 0x72
je 0x424ba9
mov esi, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push esi
push ebx
call fcn.0045a800
mov dword [esp + 0x24], eax
cmp eax, 1
jne 0x424d0d
jmp 0x424bac
mov esi, dword [ebp + 0xc]
mov cl, byte [ebx]
mov byte [esp + 0x9c], cl
cmp cl, 9
jb 0x424d24
cmp cl, 0x20
ja 0x424d24
add dword [0x4c9110], 1
push ebx
adc dword [0x4c9114], 0
call fcn.004296b0
cmp eax, 3
jne 0x424c78
mov ecx, dword [ebx + 0x14]
cmp byte [ecx], 0x73
jne 0x424c11
lea esp, [esp]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push esi
push 2
call fcn.004249d0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov ecx, dword [ebx + 0x14]
cmp edx, ecx
je 0x424bf0
jmp 0x424c26
lea eax, [esp + 0x28]
push eax
push esi
push 3
call fcn.004249d0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
cmp edx, ebx
je 0x428cc4
cmp dword [ebp + 8], 3
je 0x428ecf
cmp eax, 1
jne 0x428ecf
test edx, edx
je 0x424c5a
mov ecx, dword [edx + 0x1c]
cmp ecx, dword [ebx + 0x1c]
jne 0x424e61
mov dword [esp + 0x14], edx
jmp 0x428cc4
mov ebx, dword [ebx + 0x18]
cmp byte [ebx], 0x21
mov dword [esp + 0x14], ebx
jne 0x428cc4
mov edx, ebx
mov eax, dword [edx + 0x18]
mov dword [esp + 0x14], eax
jmp 0x428cc4
mov edi, dword [ebx + 0x18]
cmp byte [edi], 0x21
mov dword [esp + 0x14], edi
jne 0x424cfe
mov ecx, dword [edi + 0x14]
cmp byte [ecx], 0x73
jne 0x424cb1
lea esp, [esp]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push esi
push 2
call fcn.004249d0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov ecx, dword [edi + 0x14]
cmp edx, ecx
je 0x424c90
jmp 0x424cc6
lea eax, [esp + 0x28]
push eax
push esi
push 3
call fcn.004249d0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
cmp dword [ebp + 8], 3
je 0x428ecf
cmp eax, 1
jne 0x428ecf
test edx, edx
je 0x424cf2
mov ecx, dword [edx + 0x1c]
cmp ecx, dword [edi + 0x1c]
jne 0x424e61
mov dword [esp + 0x14], edx
jmp 0x428cc4
mov edx, dword [edi + 0x18]
mov dword [esp + 0x14], edx
jmp 0x428cc4
cmp dword [ebp + 8], 3
jne 0x428cc4
mov eax, 1
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
movzx eax, cl
add eax, 0xffffffa0
cmp eax, 0x7e
ja case.0x424d3a.98
movzx eax, byte [eax + 0x4291dc]
jmp dword [eax*4 + 0x4291a0]
mov esi, 1
add dword [0x4c9110], esi
adc dword [0x4c9114], 0
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x424dd4
xor ecx, ecx
cmp dword [ebx + 0xc], esi
mov edx, eax
sete cl
mov dword [esp + 0x6c], edx
mov esi, ecx
test esi, esi
je 0x424d84
mov eax, dword [edi + 0xb4]
mov dword [edi + 0xb8], eax
mov dword [edi + 0xb4], 0
mov ecx, edx
call fcn.00401220
mov dword [esp + 0x24], eax
test esi, esi
je 0x424da9
mov ecx, dword [edi + 0xb8]
mov dword [edi + 0xb4], ecx
mov dword [edi + 0xb8], 0
test eax, eax
je 0x424d0d
cmp eax, 8
je 0x424d0d
cmp dword [ebp + 8], 3
je 0x428ce2
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x14]
mov dword [esp + 0x14], eax
jmp 0x428cc4
mov edx, dword [esp + 0x14]
push edx
mov bl, 1
call fcn.004432a0
mov edx, eax
mov dword [esp + 0x6c], edx
test edx, edx
je 0x428e4a
cmp dword [edi + 0xb4], 0
je 0x424e07
mov eax, dword [edx + 8]
call fcn.00443360
test eax, eax
jne 0x424d6e
xor esi, esi
jmp 0x424d84
add dword [0x4c9110], 1
adc dword [0x4c9114], 0
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x6c], eax
test eax, eax
jne 0x424e3f
mov ecx, dword [esp + 0x14]
push ecx
mov bl, 1
call fcn.004432a0
mov dword [esp + 0x6c], eax
test eax, eax
je 0x428e4a
cmp dword [ebp + 8], 3
mov dword [edi + 0xbc], eax
je 0x424e5e
mov edx, dword [esp + 0x14]
mov ecx, dword [eax + 8]
mov edx, dword [edx + 0x1c]
cmp edx, dword [ecx + 0x1c]
je 0x428cc0
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x4c]
mov dword [eax], edx
jmp 0x424d08
add dword [0x4c9110], 1
mov eax, dword [esp + 0x98]
adc dword [0x4c9114], 0
mov esi, dword [eax + 0xc]
test esi, esi
jne 0x424ebe
mov eax, dword [0x4c6458]
mov dword [esp + 0x40], eax
cmp word [eax], si
je 0x424ebc
mov esi, dword [0x4c8678]
test esi, esi
je 0x424ebc
mov ecx, dword [esp + 0x40]
mov edx, dword [esi + 4]
push ecx
push edx
call fcn.0048cd49
add esp, 8
test eax, eax
je 0x424ebe
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x424ea0
xor esi, esi
mov dword [esp + 0x24], 1
mov dword [esp + 0x40], 0
test esi, esi
je 0x424fc3
mov eax, dword [0x4c645c]
cmp word [eax], 0
je 0x424ef7
push 0x4a37b0
push eax
call fcn.0048cd49
add esp, 8
test eax, eax
jne 0x424ef7
mov al, 1
jmp 0x424ef9
xor al, al
lea ecx, [esp + 0x6c]
push ecx
push eax
push esi
xor eax, eax
call fcn.00479590
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x424fc3
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x424f5f
mov ecx, dword [ebx + 0x1c]
test ecx, ecx
je 0x424f33
cmp edx, ecx
je 0x424f5f
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x424f28
push 0x4ab02c
push 0
push str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov ecx, ebx
call fcn.0042df10
xor eax, eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [edi + 0xb4]
test edx, edx
je 0x424ff2
call fcn.00443360
test eax, eax
je 0x424ff2
mov esi, 1
mov dword [edi + 0xb8], edx
mov dword [edi + 0xb4], 0
mov ecx, dword [esp + 0x6c]
call fcn.00401220
mov dword [esp + 0x24], eax
test esi, esi
je 0x424fb2
mov edx, dword [edi + 0xb8]
mov dword [edi + 0xb4], edx
mov dword [edi + 0xb8], 0
test eax, eax
je 0x424d0d
cmp eax, 8
je 0x424d0d
cmp dword [esp + 0x40], 0
mov edx, dword [esp + 0x98]
sete al
movzx ecx, al
push ecx
push edx
call fcn.0042dd40
cmp dword [ebp + 8], 3
je 0x428cde
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x14], eax
jmp 0x428cc4
xor esi, esi
jmp 0x424f8b
mov ecx, dword [esp + 0x14]
mov ebx, dword [ecx + 0xc]
mov eax, ebx
dec eax
mov dword [esp + 0x18], ebx
je 0x42504b
sub eax, 3
je 0x425030
sub eax, 5
jne 0x4250c1
mov ecx, dword [0x4c645c]
push eax
push eax
push 1
push ecx
call fcn.00413d70
add esp, 0x10
mov dword [esp + 0x78], eax
jmp 0x4250c1
mov edx, dword [0x4c6458]
push 0
push 0
push 0
push edx
call fcn.00413d70
add esp, 0x10
mov dword [esp + 0x78], eax
jmp 0x4250c1
movzx eax, byte [ecx + 1]
sub eax, 0
je 0x4250b8
dec eax
mov eax, dword [0x4c6458]
je 0x425098
push str.Read
push eax
call fcn.0048cd49
add esp, 8
test eax, eax
jne 0x425073
lea ebx, [eax + 5]
jmp 0x4250bd
mov ecx, dword [0x4c6458]
push 0
push 0
push 0
push ecx
call fcn.00413d70
xor ebx, ebx
add esp, 0x10
test eax, eax
setne bl
mov dword [esp + 0x78], eax
add ebx, 3
jmp 0x4250bd
push 0
push 1
push 1
push 1
call fcn.00473730
add esp, 0x10
test eax, eax
jne 0x4250b8
mov edx, dword [0x4c6458]
push eax
push eax
push eax
push edx
jmp 0x425080
mov ebx, 2
mov dword [esp + 0x18], ebx
lea eax, [ebx - 3]
cmp eax, 7
ja case.0x4250d4.5
movzx eax, byte [eax + 0x429268]
jmp dword [eax*4 + 0x42925c]
mov esi, dword [0x4c645c]
call fcn.00414790
mov dword [esp + 0x64], eax
test eax, eax
je 0x428dda
mov eax, dword [0x4c6460]
cmp word [eax], 0x31
jne 0x425112
cmp word [eax + 2], 0
jne 0x425112
mov esi, dword [ebp + 0xc]
mov edi, dword [esp + 0x54]
mov byte [esp + 0x68], 1
jmp case.0x4250d4.5
mov esi, dword [ebp + 0xc]
mov edi, dword [esp + 0x54]
mov byte [esp + 0x68], 0
jmp case.0x4250d4.5
cmp ebx, 4
jne 0x425162
mov esi, dword [0x4c6460]
call fcn.00414790
mov dword [esp + 0x64], eax
mov eax, dword [0x4c6464]
cmp word [eax], 0x31
jne 0x425154
cmp word [eax + 2], 0
jne 0x425154
mov esi, dword [ebp + 0xc]
mov edi, dword [esp + 0x54]
mov byte [esp + 0x68], 1
jmp 0x425180
mov esi, dword [ebp + 0xc]
mov edi, dword [esp + 0x54]
mov byte [esp + 0x68], 0
jmp 0x425180
mov eax, dword [0x4c6460]
call fcn.004147e0
mov dword [esp + 0x64], eax
shr eax, 2
and al, 1
mov byte [esp + 0x68], al
je 0x425180
and dword [esp + 0x64], 0xfffffffb
cmp dword [esp + 0x64], 0
je 0x428e08
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x1f], 0
mov dword [esp + 0x28], 0
mov ebx, dword [ecx + 0x18]
cmp byte [ebx], 0x6c
mov dword [esp + 0x40], ebx
jne 0x4251b1
mov edx, dword [ebx + 0x14]
mov dword [esp + 0x40], edx
jmp 0x4251b3
xor ebx, ebx
mov ecx, dword [edi + 0xc]
mov eax, dword [edi + 8]
mov edx, dword [edi + 0x10]
mov dword [esp + 0x84], ecx
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x80], eax
mov eax, dword [edi + 0x14]
mov dword [esp + 0x5c], edx
mov edx, dword [edi + 0x1c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x30], edx
cmp ecx, 8
je 0x4251fa
mov dword [edi + 8], 1
mov dword [edi + 0xc], 0
lea eax, [ecx - 2]
cmp eax, 8
ja case.default.0x425206
jmp dword [eax*4 + 0x429270]
mov eax, dword [esp + 0x14]
cmp byte [eax + 1], 0
jbe 0x42522a
xor edi, edi
mov ecx, eax
call fcn.00420fc0
mov byte [esp + 0x94], 0
jmp 0x425236
xor eax, eax
xor edx, edx
mov byte [esp + 0x94], 1
mov ecx, dword [esp + 0x94]
mov edi, dword [esp + 0x14]
push ecx
push edx
push eax
push ebx
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x33]
push eax
push esi
call fcn.0042b2b0
mov dword [esp + 0x24], eax
jmp case.default.0x425206
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x23]
mov ebx, esi
mov esi, dword [esp + 0x18]
push edx
call fcn.0042b410
mov dword [esp + 0x24], eax
jmp case.default.0x425206
mov edx, dword [esp + 0x14]
push ebx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x27]
push ecx
push esi
push edx
call fcn.0042b600
mov dword [esp + 0x24], eax
jmp case.default.0x425206
mov eax, dword [0x4c6460]
push 0x4a7814
push eax
call fcn.0048cd49
add esp, 8
push ebx
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x27]
push edx
test eax, eax
mov eax, dword [esp + 0x20]
push esi
push eax
je 0x4252d1
call fcn.0042c3c0
mov dword [esp + 0x24], eax
jmp case.default.0x425206
call fcn.0042c6b0
mov dword [esp + 0x24], eax
jmp case.default.0x425206
lea esi, [esp + 0xac]
call fcn.00414e20
mov dword [esp + 0x93c], 0
mov edx, dword [0x4c645c]
cmp word [edx], 0
je 0x42534f
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 0xf8]
and eax, 0x7fffffff
push 0x30c
mov ecx, esi
call fcn.004714c0
test al, al
je 0x42534f
mov edx, esi
push edx
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x2c]
push eax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x27]
push ecx
mov ecx, dword [0x4c6460]
push edx
push eax
mov edx, ebx
call fcn.0042c9c0
mov dword [esp + 0x24], eax
call fcn.00414d80
jmp 0x425357
mov dword [esp + 0x24], 1
lea ecx, [esp + 0xac]
mov dword [esp + 0x93c], 0xffffffff
call fcn.00414e70
jmp case.default.0x425206
mov eax, dword [0x4c6458]
cmp ecx, 3
je 0x425382
mov eax, dword [0x4c645c]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x64]
push eax
push ecx
push edx
push ebx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x33]
push ecx
mov ecx, dword [esp + 0x2c]
push esi
call fcn.0042ba40
mov dword [esp + 0x24], eax
jmp case.default.0x425206
lea edx, [esp + 0x53]
push edx
cmp ecx, 4
jne 0x4253d3
mov eax, dword [0x4c6458]
push 0
push 0
push eax
call fcn.00413d70
mov ecx, dword [0x4c645c]
mov dword [esp + 0xa0], ecx
jmp 0x4253e9
mov ecx, dword [0x4c645c]
lea eax, [esp + 0x94]
push eax
push 1
push ecx
call fcn.00413d70
mov edi, eax
add esp, 0x10
test edi, edi
je 0x425433
mov edx, dword [esp + 0x90]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x68]
push edx
mov edx, dword [esp + 0x68]
push edi
push eax
push ecx
push edx
push ebx
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x3b]
push ecx
mov ecx, dword [esp + 0x34]
push esi
call fcn.0042bfb0
cmp byte [esp + 0x53], 0
mov dword [esp + 0x24], eax
je case.default.0x425206
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x425206
mov dword [esp + 0x24], 1
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x5c]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0x10], edx
mov edx, dword [esp + 0x20]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], ecx
mov eax, dword [esp + 0x24]
test eax, eax
je 0x424d0d
cmp eax, 7
je 0x424d0d
cmp eax, 8
je 0x424d0d
cmp byte [esp + 0x1f], 0
jne 0x428cc4
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x4254cd
mov edx, dword [ecx + 0x1c]
mov esi, dword [esp + 0x14]
cmp edx, dword [esi + 0x1c]
je 0x428cc0
mov edx, dword [esp + 0x4c]
mov dword [edx], ecx
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 3
je 0x424d08
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], eax
jmp 0x428cc4
mov dl, byte [edi + 0x104]
mov byte [esp + 0x2e], dl
cmp cl, 0x70
jne 0x42555d
mov ecx, dword [0x4c6400]
test ecx, ecx
je 0x425516
mov eax, dword [edi + 0xfc]
mov ebx, ecx
call fcn.00475fa0
test eax, eax
je 0x428e36
mov ebx, dword [esp + 0x14]
mov eax, dword [edi + 0xfc]
cmp dword [eax + 8], 6
jne 0x42552c
mov eax, dword [eax]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [edi + 0xfc]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x425542
push eax
call fcn.0048e3af
add esp, 4
mov ecx, dword [edi + 0xfc]
push ecx
call fcn.0048e8d9
add esp, 4
mov dword [edi + 0xfc], 0
jmp 0x425564
mov byte [edi + 0x104], 1
mov dword [esp + 0x28], 0
mov ecx, dword [ebx + 0x14]
cmp byte [ecx], 0x73
jne 0x425593
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push esi
push 2
call fcn.004249d0
mov dword [esp + 0x24], eax
mov ecx, dword [ebx + 0x14]
cmp dword [esp + 0x28], ecx
je 0x425574
jmp 0x4255a4
lea eax, [esp + 0x28]
push eax
push esi
push 3
call fcn.004249d0
mov dword [esp + 0x24], eax
mov dl, byte [esp + 0x9c]
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x14], ecx
cmp dl, 0x6f
jne 0x425606
mov dl, byte [esp + 0x2e]
mov byte [edi + 0x104], dl
xor dl, dl
cmp byte [ecx], 0x70
jne 0x4255de
cmp dword [edi + 0xfc], 0
mov dl, 1
jne 0x428cc4
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x14], ecx
cmp byte [ecx], 0x71
je 0x425610
test dl, dl
jne 0x425666
cmp dword [edi + 0xfc], 0
je 0x425666
lea esi, [edi + 0xfc]
call fcn.0042e610
mov eax, 1
mov dword [esp + 0x24], eax
jmp 0x425666
cmp dl, 0x70
jne 0x425666
cmp byte [ecx], 0x71
jne 0x425666
cmp eax, 1
jne 0x425624
cmp dword [esp + 0x28], 0
je 0x428cc4
mov ecx, dword [esp + 0x14]
mov esi, dword [edi + 0xfc]
lea edx, [esp + 0x7c]
push edx
push 0
push 3
mov dword [esp + 0x3c], esi
mov dword [edi + 0xfc], 0
call fcn.004249d0
mov ebx, eax
cmp ebx, 1
jne 0x428e63
cmp dword [esp + 0x7c], 0
jne 0x428e63
mov eax, dword [esp + 0x24]
mov dword [edi + 0xfc], esi
cmp dword [ebp + 8], 3
je 0x428ecb
cmp eax, 1
jne 0x428ecb
mov eax, dword [esp + 0x28]
test eax, eax
je 0x428cc4
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 0x14]
cmp ecx, dword [edx + 0x1c]
jne 0x428ec0
mov dword [esp + 0x14], eax
jmp 0x428cc4
cmp dword [ebx + 0xc], 1
jne 0x4256ac
mov ecx, dword [ebx + 0x18]
jmp 0x428cc0
mov ecx, dword [ebx + 0x14]
lea edx, [esp + 0x28]
push edx
push esi
push 2
call fcn.004249d0
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x24], eax
cmp ecx, ebx
je 0x428cc4
cmp dword [ebp + 8], 3
je 0x4254b0
cmp eax, 1
jne 0x4254b0
test ecx, ecx
je 0x4256a4
mov eax, dword [ebx + 0x1c]
cmp eax, dword [ecx + 0x1c]
je 0x428cc0
mov edx, dword [esp + 0x4c]
mov dword [edx], ecx
jmp 0x424d08
add dword [0x4c9110], 1
mov ebx, dword [esp + 0x14]
mov eax, dword [0x4c6400]
adc dword [0x4c9114], 0
mov cl, byte [ebx]
mov edi, dword [0x4c28ec]
movzx edx, cl
dec edx
mov esi, eax
mov dword [esp + 0x20], esi
mov dword [esp + 0x18], edi
cmp edx, 0xdf
ja case.0x42573a.8
movzx edx, byte [edx + 0x429518]
jmp dword [edx*4 + 0x429294]
push ebx
call fcn.0043c090
jmp 0x428ca7
cmp byte [ebx + 1], 1
mov edx, dword [0x4c645c]
jbe 0x4257c3
mov eax, dword [ebx + 8]
cmp byte [eax + 0x11], 0
je 0x42576b
mov eax, 1
jmp 0x428ca7
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x425784
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
push esi
call fcn.00413170
jmp 0x428ca7
mov eax, dword [0x4c6404]
test eax, eax
je 0x4257c3
cmp word [edx], 0
jne 0x4257c3
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x4257a0
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x4257b7
sub ecx, 2
jne 0x4257c3
mov eax, esi
call fcn.004760b0
jmp 0x428ca7
mov ecx, esi
call fcn.00475e20
jmp 0x428ca7
push 1
push 0
push 0xffffffffffffffff
push edx
push esi
call fcn.00476680
jmp 0x428ca7
mov eax, dword [ebx + 8]
cmp dword [eax + 0x1c], 0
je 0x4257f5
cmp byte [eax + 0x11], 0
jne 0x4257f5
mov dword [esp + 0x18], 1
mov esi, 1
xor edi, edi
jmp 0x425838
mov edi, dword [0x4c6404]
mov eax, dword [0x4c645c]
mov dword [esp + 0x18], 0
test edi, edi
je 0x425824
cmp word [eax], 0
jne 0x425824
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x42581f
mov edx, dword [edi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x425882
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.00473730
add esp, 0x10
mov esi, eax
mov eax, dword [esp + 0x20]
push 1
call fcn.004131d0
mov dword [esp + 0x30], eax
mov eax, dword [0x4c6460]
movzx eax, word [eax]
test ax, ax
je 0x425a53
call fcn.004095a0
movzx ecx, ax
push ecx
push str.SMHD
call fcn.0048db21
add esp, 8
test eax, eax
je 0x425a53
test esi, esi
jne 0x425891
lea eax, [esi + 1]
jmp 0x428ca7
test edi, edi
je 0x425826
push 1
mov eax, edi
call fcn.004131d0
jmp 0x425836
cmp dword [esp + 0x18], 0
je 0x4258a2
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x4258c0
test edi, edi
je 0x4258b1
push 0
mov eax, edi
call fcn.00413330
jmp 0x4258c0
mov esi, dword [0x4c645c]
call fcn.004130d0
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
fstp qword [esp + 0x30]
cmp byte [esi + 0x17], 0
jne 0x4258d3
mov edi, dword [esi + 0xc]
jmp 0x4258d5
mov edi, esi
test byte [edi + 0x15], 8
je 0x4258e2
mov eax, edi
call fcn.00401160
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x4258fb
test byte [edi + 0x15], 4
je 0x4258f6
mov eax, edi
call fcn.0042e780
mov eax, dword [edi + 8]
jmp 0x42590b
cmp al, 2
jne 0x425906
call fcn.00401000
jmp 0x42590b
mov eax, 0x4c85b8
cmp word [eax], 0
je 0x42597d
cmp byte [esi + 0x17], 0
jne 0x42591c
mov edi, dword [esi + 0xc]
jmp 0x42591e
mov edi, esi
test byte [edi + 0x15], 8
je 0x42592b
mov eax, edi
call fcn.00401160
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x425944
test byte [edi + 0x15], 4
je 0x42593f
mov eax, edi
call fcn.0042e780
mov eax, dword [edi + 8]
jmp 0x425954
cmp al, 2
jne 0x42594f
call fcn.00401000
jmp 0x425954
mov eax, 0x4c85b8
lea ecx, [esp + 0x88]
push ecx
call fcn.004732f0
add esp, 4
test eax, eax
jne 0x4259a1
push 1
push eax
push 0xffffffffffffffff
push 0x4ab02c
push esi
call fcn.00476680
jmp 0x428ca7
lea edx, [esp + 0xa0]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0xa4]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov edx, dword [0x4c6460]
mov ax, word [edx]
call fcn.004095a0
movzx eax, ax
add eax, 0xffffffbc
cmp eax, 0xf
ja case.0x4259c1.69
movzx eax, byte [eax + 0x42960c]
jmp dword [eax*4 + 0x4295f8]
fld qword [esp + 0x30]
fmul qword [0x4bd550]
jmp 0x4259fc
fld qword [esp + 0x30]
fmul qword [0x4bd548]
jmp 0x4259fc
fld qword [esp + 0x30]
fmul qword [0x4bd540]
jmp 0x4259fc
fld qword [esp + 0x30]
fmul qword [0x4bd538]
jmp 0x4259fc
fld qword [esp + 0x30]
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x8c]
call fcn.0049b6a6
add esi, eax
adc edi, edx
mov dword [esp + 0x88], esi
push 0
lea eax, [esp + 0x8c]
lea esi, [esp + 0x104]
mov dword [esp + 0x90], edi
call fcn.004735a0
mov ecx, dword [esp + 0x24]
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
push ecx
call fcn.00476680
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
cmp esi, 2
je 0x425ab5
cmp dword [esp + 0x30], 2
je 0x425ab5
cmp dword [esp + 0x18], 0
je 0x425a73
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov esi, dword [eax + 4]
jmp 0x425a95
test edi, edi
je 0x425a82
push 0
mov eax, edi
call fcn.00413270
jmp 0x425a91
mov esi, dword [0x4c645c]
call fcn.004130a0
mov ebx, dword [esp + 0x14]
mov esi, edx
mov edi, eax
mov eax, dword [esp + 0x20]
push 0
call fcn.00413270
add eax, edi
adc edx, esi
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.00413170
jmp 0x428ca7
cmp dword [esp + 0x18], 0
je 0x425ac6
mov ecx, dword [ebx + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x425ae4
test edi, edi
je 0x425ad5
push 0
mov eax, edi
call fcn.00413330
jmp 0x425ae4
mov esi, dword [0x4c645c]
call fcn.004130d0
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
fstp qword [esp + 0x30]
push 0
mov eax, esi
call fcn.00413330
fadd qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push esi
call fcn.004131a0
jmp 0x428ca7
mov eax, dword [0x4c6460]
movzx eax, word [eax]
test ax, ax
je 0x425c78
call fcn.004095a0
movzx ecx, ax
push ecx
push str.SMHD
call fcn.0048db21
add esp, 8
test eax, eax
je 0x425c78
mov edi, dword [0x4c6404]
mov ecx, dword [0x4c645c]
test edi, edi
je 0x425ba7
cmp word [ecx], 0
jne 0x425ba7
mov al, byte [edi + 0x17]
test al, al
jne 0x425b5c
mov edx, dword [edi + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
jne 0x425ba7
test edi, edi
je 0x425ba7
cmp byte [edi + 0x17], 0
jne 0x425b6d
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x425b7a
mov eax, edi
call fcn.00401160
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x425b93
test byte [edi + 0x15], 4
je 0x425b8e
mov eax, edi
call fcn.0042e780
mov edi, dword [edi + 8]
jmp 0x425ba9
cmp al, 2
jne 0x425ba0
call fcn.00401000
mov edi, eax
jmp 0x425ba9
mov edi, 0x4c85b8
jmp 0x425ba9
mov edi, ecx
cmp byte [esi + 0x17], 0
jne 0x425bb4
mov eax, esi
mov esi, dword [eax + 0xc]
test byte [esi + 0x15], 8
je 0x425bc1
mov eax, esi
call fcn.00401160
mov al, byte [esi + 0x17]
cmp al, 1
jne 0x425bda
test byte [esi + 0x15], 4
je 0x425bd5
mov eax, esi
call fcn.0042e780
mov eax, dword [esi + 8]
jmp 0x425bea
cmp al, 2
jne 0x425be5
call fcn.00401000
jmp 0x425bea
mov eax, 0x4c85b8
push eax
lea ebx, [esp + 0x67]
mov eax, edi
call fcn.00473650
add esp, 4
cmp byte [esp + 0x63], 0
mov esi, eax
mov edi, edx
je 0x425c22
mov ecx, dword [esp + 0x20]
push 1
push 0
push 0xffffffffffffffff
push 0x4ab02c
push ecx
call fcn.00476680
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov edx, dword [0x4c6460]
mov ax, word [edx]
call fcn.004095a0
movzx eax, ax
cmp eax, 0x44
je 0x425c51
cmp eax, 0x48
je 0x425c48
cmp eax, 0x4d
jne 0x425c63
push 0
push 0x3c
jmp 0x425c58
push 0
push 0xe10
jmp 0x425c58
push 0
push 0x15180
push edi
push esi
call fcn.0049b720
mov esi, eax
mov edi, edx
mov eax, dword [esp + 0x20]
push edi
push esi
push eax
call fcn.00413170
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov eax, dword [ebx + 8]
cmp dword [eax + 0x1c], 0
je 0x425c98
cmp byte [eax + 0x11], 0
jne 0x425c98
mov dword [esp + 0x18], 1
mov edi, 1
xor esi, esi
jmp 0x425cdb
mov esi, dword [0x4c6404]
mov eax, dword [0x4c645c]
mov dword [esp + 0x18], 0
test esi, esi
je 0x425cc7
cmp word [eax], 0
jne 0x425cc7
mov cl, byte [esi + 0x17]
test cl, cl
jne 0x425cc2
mov ecx, dword [esi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x425d04
xor esi, esi
push 1
push 1
push 0
push 1
call fcn.00473730
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x20]
push 1
call fcn.004131d0
cmp edi, 2
je 0x425d55
cmp eax, 2
je 0x425d55
cmp dword [esp + 0x18], 0
je 0x425d13
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
mov esi, dword [eax]
mov edi, dword [eax + 4]
jmp 0x425d35
test esi, esi
je 0x425cc9
push 1
mov eax, esi
call fcn.004131d0
jmp 0x425cd9
test esi, esi
je 0x425d22
push 0
mov eax, esi
call fcn.00413270
jmp 0x425d31
mov esi, dword [0x4c645c]
call fcn.004130a0
mov ebx, dword [esp + 0x14]
mov edi, edx
mov esi, eax
mov eax, dword [esp + 0x20]
push 0
call fcn.00413270
sub eax, esi
sbb edx, edi
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.00413170
jmp 0x428ca7
cmp dword [esp + 0x18], 0
je 0x425d66
mov ecx, dword [ebx + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x425d84
test esi, esi
je 0x425d75
push 0
mov eax, esi
call fcn.00413330
jmp 0x425d84
mov esi, dword [0x4c645c]
call fcn.004130d0
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
fstp qword [esp + 0x30]
push 0
mov eax, esi
call fcn.00413330
fsub qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push esi
call fcn.004131a0
jmp 0x428ca7
mov eax, dword [ebx + 8]
cmp dword [eax + 0x1c], 0
je 0x425dca
cmp byte [eax + 0x11], 0
jne 0x425dca
mov dword [esp + 0x18], 1
mov edi, 1
xor esi, esi
jmp 0x425e0d
mov esi, dword [0x4c6404]
mov eax, dword [0x4c645c]
mov dword [esp + 0x18], 0
test esi, esi
je 0x425df9
cmp word [eax], 0
jne 0x425df9
mov cl, byte [esi + 0x17]
test cl, cl
jne 0x425df4
mov ecx, dword [esi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x425e36
xor esi, esi
push 1
push 1
push 0
push 1
call fcn.00473730
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x20]
push 1
call fcn.004131d0
cmp edi, 2
je 0x425e8c
cmp eax, 2
je 0x425e8c
cmp dword [esp + 0x18], 0
je 0x425e45
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
mov esi, dword [eax]
mov edi, dword [eax + 4]
jmp 0x425e67
test esi, esi
je 0x425dfb
push 1
mov eax, esi
call fcn.004131d0
jmp 0x425e0b
test esi, esi
je 0x425e54
push 0
mov eax, esi
call fcn.00413270
jmp 0x425e63
mov esi, dword [0x4c645c]
call fcn.004130a0
mov ebx, dword [esp + 0x14]
mov edi, edx
mov esi, eax
mov eax, dword [esp + 0x20]
push 0
call fcn.00413270
push edi
push esi
push edx
push eax
call fcn.00493290
push edx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.00413170
jmp 0x428ca7
cmp dword [esp + 0x18], 0
je 0x425e9d
mov ecx, dword [ebx + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x425ebb
test esi, esi
je 0x425eac
push 0
mov eax, esi
call fcn.00413330
jmp 0x425ebb
mov esi, dword [0x4c645c]
call fcn.004130d0
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
fstp qword [esp + 0x30]
push 0
mov eax, esi
call fcn.00413330
fmul qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push esi
call fcn.004131a0
jmp 0x428ca7
mov eax, dword [ebx + 8]
cmp dword [eax + 0x1c], 0
je 0x425f01
cmp byte [eax + 0x11], 0
jne 0x425f01
mov dword [esp + 0x18], 1
mov edi, 1
xor esi, esi
jmp 0x425f44
mov esi, dword [0x4c6404]
mov eax, dword [0x4c645c]
mov dword [esp + 0x18], 0
test esi, esi
je 0x425f30
cmp word [eax], 0
jne 0x425f30
mov cl, byte [esi + 0x17]
test cl, cl
jne 0x425f2b
mov ecx, dword [esi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x425f71
xor esi, esi
push 1
push 1
push 0
push 1
call fcn.00473730
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x20]
push 1
call fcn.004131d0
cmp edi, 2
je 0x425fdb
cmp eax, 2
je 0x425fdb
cmp dword [esp + 0x18], 0
je 0x425f80
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov esi, dword [eax + 4]
jmp 0x425fa2
test esi, esi
je 0x425f32
push 1
mov eax, esi
call fcn.004131d0
jmp 0x425f42
test esi, esi
je 0x425f8f
push 0
mov eax, esi
call fcn.00413270
jmp 0x425f9e
mov esi, dword [0x4c645c]
call fcn.004130a0
mov ebx, dword [esp + 0x14]
mov esi, edx
mov edi, eax
mov eax, edi
or eax, esi
jne 0x425fb6
mov ecx, dword [esp + 0x20]
call fcn.00413110
jmp 0x428ca7
mov eax, dword [esp + 0x20]
push 0
call fcn.00413270
push esi
push edi
push edx
push eax
call fcn.0049b720
mov ecx, dword [esp + 0x20]
push edx
push eax
push ecx
call fcn.00413170
jmp 0x428ca7
cmp dword [esp + 0x18], 0
je 0x425fec
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x42600a
test esi, esi
je 0x425ffb
push 0
mov eax, esi
call fcn.00413330
jmp 0x42600a
mov esi, dword [0x4c645c]
call fcn.004130d0
mov ebx, dword [esp + 0x14]
fst qword [esp + 0x30]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x426027
mov ecx, dword [esp + 0x20]
call fcn.00413110
jmp 0x428ca7
mov esi, dword [esp + 0x20]
push 0
mov eax, esi
call fcn.00413330
fdiv qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push esi
call fcn.004131a0
jmp 0x428ca7
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
mov esi, eax
test esi, esi
jns 0x42605f
xor esi, esi
jmp 0x426071
mov edi, 1
mov ecx, ebx
call fcn.00420f30
cmp esi, eax
jle 0x426071
mov esi, eax
mov ecx, dword [0x4c645c]
mov edx, dword [esp + 0x20]
push 1
push 0
push esi
push ecx
push edx
call fcn.00476680
jmp 0x428ca7
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
mov esi, eax
test esi, esi
jns 0x4260a0
xor esi, esi
mov edi, 1
mov ecx, ebx
call fcn.00420f30
cmp esi, eax
jbe 0x4260b2
mov esi, eax
mov ecx, dword [0x4c645c]
mov edx, dword [esp + 0x20]
push 1
push 0
sub eax, esi
push esi
lea eax, [ecx + eax*2]
push eax
push edx
call fcn.00476680
jmp 0x428ca7
cmp byte [ebx + 1], 4
jb 0x426105
mov eax, dword [ebx + 8]
mov ecx, dword [eax + 0x34]
cmp word [ecx], 0
je 0x426105
mov edi, 3
mov ecx, ebx
call fcn.00420fc0
mov dword [esp + 0x18], eax
cmp eax, 1
jge 0x42610d
mov ecx, esi
call fcn.00413110
jmp 0x428ca7
mov dword [esp + 0x18], SysReAllocString
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
mov edx, dword [0x4c6468]
mov esi, eax
mov ax, word [edx]
call fcn.004095a0
cmp ax, 0x4c
jne 0x42615c
cmp esi, 1
jge 0x426142
mov ecx, dword [esp + 0x20]
call fcn.00413110
jmp 0x428ca7
mov eax, dword [esp + 0x18]
mov ecx, 1
sub ecx, eax
add esi, ecx
cmp esi, 1
jge 0x426166
lea edx, [eax + esi - 1]
mov dword [esp + 0x18], edx
cmp esi, 1
jge 0x426166
mov esi, 1
mov edi, 1
mov ecx, ebx
call fcn.00420f30
cmp eax, esi
jae 0x426184
mov ecx, dword [esp + 0x20]
call fcn.00413110
jmp 0x428ca7
mov ecx, edi
sub ecx, esi
add eax, ecx
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jbe 0x426194
mov ecx, eax
mov edx, dword [0x4c645c]
mov eax, dword [esp + 0x20]
push 1
push 0
push ecx
lea esi, [edx + esi*2 - 2]
push esi
push eax
call fcn.00476680
jmp 0x428ca7
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
mov esi, eax
test esi, esi
jns 0x4261c7
xor esi, esi
mov edi, 1
mov ecx, ebx
call fcn.00420f30
cmp esi, eax
jbe 0x4261d9
mov esi, eax
mov ecx, dword [0x4c645c]
mov edx, dword [esp + 0x20]
push 1
push 0
sub eax, esi
push eax
lea ecx, [ecx + esi*2]
push ecx
push edx
call fcn.00476680
jmp 0x428ca7
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
mov esi, eax
test esi, esi
jns 0x42620d
xor esi, esi
mov edi, 1
mov ecx, ebx
call fcn.00420f30
cmp esi, eax
jbe 0x42621f
mov esi, eax
mov ecx, dword [esp + 0x20]
push 1
push 0
sub eax, esi
push eax
mov eax, dword [0x4c645c]
push eax
push ecx
call fcn.00476680
jmp 0x428ca7
cmp byte [esi + 0x17], 0
jne 0x426246
mov edi, dword [esi + 0xc]
jmp 0x426248
mov edi, esi
test byte [edi + 0x15], 8
je 0x426255
mov eax, edi
call fcn.00401160
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426261
mov edi, dword [edi + 8]
jmp 0x426273
cmp al, 2
jne 0x42626e
call fcn.00401000
mov edi, eax
jmp 0x426273
mov edi, 0x4c85b8
cmp edi, dword [0x4c645c]
jne 0x426290
mov al, byte [esi + 0x17]
test al, al
jne 0x426288
mov edx, dword [esi + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
je 0x426311
push 1
push 0
mov edi, 1
mov ecx, ebx
call fcn.00420f30
push eax
push 0
push esi
call fcn.00476680
cmp eax, edi
jne case.0x42573a.8
cmp byte [esi + 0x17], 0
jne 0x4262bc
mov edi, dword [esi + 0xc]
jmp 0x4262be
mov edi, esi
test byte [edi + 0x15], 8
je 0x4262cb
mov eax, edi
call fcn.00401160
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x4262e4
test byte [edi + 0x15], 4
je 0x4262df
mov eax, edi
call fcn.0042e780
mov edi, dword [edi + 8]
jmp 0x4262f6
cmp al, 2
jne 0x4262f1
call fcn.00401000
mov edi, eax
jmp 0x4262f6
mov edi, 0x4c85b8
mov ecx, dword [0x4c645c]
mov edx, edi
mov edi, edi
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x426300
mov eax, dword [0x4c6460]
movzx eax, word [eax]
test ax, ax
je 0x42633f
call fcn.004095a0
cmp ax, 0x54
jne 0x42633f
mov ecx, dword [0x4c6460]
cmp word [ecx + 2], 0
jne 0x42633f
mov eax, edi
call fcn.00412e10
jmp 0x426353
cmp byte [ebx], 0x31
push edi
jne 0x42634d
call dword [sym.imp.USER32.dll_CharLowerW]
jmp 0x426353
call dword [sym.imp.USER32.dll_CharUpperW]
cmp byte [esi + 0x17], 0
jne 0x42635e
mov eax, dword [esi + 0xc]
jmp 0x426360
mov eax, esi
cmp byte [eax + 0x17], 2
jne 0x42637e
cmp dword [0x4c85f0], 0
je 0x42637e
mov ecx, 0x4c85e4
call fcn.00404270
jmp 0x428ca7
and byte [eax + 0x15], 0x86
mov eax, 1
jmp 0x428ca7
mov eax, dword [0x4c6404]
test eax, eax
je 0x4263be
cmp byte [eax + 0x17], 0
jne 0x4263a3
mov edx, dword [eax + 0xc]
mov cl, byte [edx + 0x15]
jmp 0x4263a6
mov cl, byte [eax + 0x15]
test cl, 1
je 0x4263be
call fcn.004135e0
push 0
push eax
push esi
call fcn.00413170
jmp 0x428ca7
mov edi, 1
mov ecx, ebx
call fcn.00420f30
push 0
push eax
push esi
call fcn.00413170
jmp 0x428ca7
mov edi, dword [0x4c6464]
movzx eax, word [edi]
mov dword [esp + 0x30], edi
mov dword [esp + 0x40], 0xffffffff
test ax, ax
je 0x426476
call fcn.004095a0
movzx eax, ax
push eax
push 0x4a7900
call fcn.0048db21
add esp, 8
test eax, eax
je 0x426476
cmp word [edi + 2], 0
je 0x426476
lea esi, [edi + 2]
call fcn.0040d260
mov dword [esp + 0x3c], eax
test eax, eax
jle 0x42656f
mov ebx, dword [0x4c6460]
cmp word [ebx], 0
jne 0x426480
mov dword [esp + 0x40], 0
mov eax, 0x4a0900
push 1
push 0
push 0xffffffffffffffff
push eax
mov eax, dword [0x4c6cb4]
push eax
call fcn.00476680
mov eax, dword [esp + 0x40]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x2c]
call fcn.004010e0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov dword [esp + 0x3c], 1
jmp 0x42642b
mov ecx, dword [0x4c645c]
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x14]
mov edi, 4
call fcn.00420fc0
mov esi, eax
test esi, esi
jns 0x4264a0
xor esi, esi
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00420f30
mov edi, eax
cmp esi, edi
jge 0x42656f
mov edx, dword [esp + 0x30]
movzx eax, word [edx]
cmp eax, 0x31
je 0x426538
call fcn.004095a0
cmp ax, 0x52
je 0x426538
mov ecx, dword [esp + 0x14]
mov edi, 2
call fcn.00420f30
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x5c]
mov edi, 1
lea ecx, [eax + esi*2]
lea ecx, [ecx]
mov edx, dword [0x4c28ec]
mov al, byte [edx + 0xee]
test al, al
jne 0x426509
mov eax, ebx
call fcn.00473c80
jmp 0x426524
cmp al, 2
jne 0x42651a
push ecx
mov eax, ebx
call fcn.00473f40
add esp, 4
jmp 0x426524
push ebx
push ecx
call fcn.0048db48
add esp, 8
test eax, eax
je 0x42656f
cmp edi, dword [esp + 0x3c]
je 0x42655b
mov ecx, dword [esp + 0x30]
inc edi
lea ecx, [eax + ecx*2]
jmp 0x4264f0
mov eax, dword [esp + 0x18]
movzx ecx, byte [eax + 0xee]
mov edx, dword [esp + 0x3c]
push edx
mov edx, dword [esp + 0x60]
push ecx
push ebx
mov eax, edi
sub eax, esi
push edx
call fcn.00473a70
add esp, 0x10
test eax, eax
je 0x42656f
sub eax, dword [esp + 0x5c]
sar eax, 1
mov dword [esp + 0x40], eax
jns 0x42643f
mov eax, 0x4a331c
jmp 0x426444
push ebx
call fcn.0043c510
jmp 0x428ca7
mov ecx, dword [0x4c6460]
mov eax, dword [0x4c6464]
push ecx
mov ecx, dword [0x4c645c]
call fcn.00431c60
jmp 0x428ca7
mov edx, dword [0x4c6464]
mov eax, dword [0x4c6460]
mov ecx, dword [0x4c645c]
push edx
push eax
mov eax, dword [0x4c6458]
push ebx
call fcn.0043c760
jmp 0x428ca7
mov ecx, dword [0x4c6458]
push ecx
mov eax, ebx
call fcn.0043cef0
jmp 0x428ca7
mov edx, dword [0x4c6458]
mov ecx, dword [0x4c645c]
push edx
push ebx
call fcn.0043d570
jmp 0x428ca7
push 0
push ecx
mov edi, 7
mov ecx, ebx
call fcn.00420fc0
add esp, 4
push eax
mov edi, 6
mov ecx, ebx
call fcn.00420fc0
push eax
push ecx
mov edi, 5
mov ecx, ebx
call fcn.00420fc0
add esp, 4
push eax
mov edi, 4
mov ecx, ebx
call fcn.00420fc0
push eax
push ecx
mov edi, 3
mov ecx, ebx
call fcn.00420fc0
add esp, 4
push eax
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
mov ecx, dword [0x4c6478]
push eax
push ebx
call fcn.00438640
jmp 0x428ca7
mov eax, dword [0x4c6470]
push eax
push ecx
mov edi, 5
mov ecx, ebx
call fcn.00420fc0
add esp, 4
push eax
mov edi, 4
mov ecx, ebx
call fcn.00420fc0
push eax
push ecx
mov edi, 3
mov ecx, ebx
call fcn.00420fc0
add esp, 4
push eax
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
push eax
push ebx
call fcn.00438d70
jmp 0x428ca7
mov ecx, dword [0x4c6464]
push ecx
push ecx
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
mov edi, 1
mov ecx, ebx
mov esi, eax
call fcn.00420fc0
add esp, 4
mov ecx, eax
push ebx
mov eax, esi
call fcn.00451290
jmp 0x428ca7
mov edx, dword [edi + 0xd0]
cmp cl, 0x42
sete al
push 0
push edx
mov edx, dword [0x4c6458]
movzx ecx, al
push ecx
push edx
call fcn.0040d900
add esp, 0x10
mov eax, 1
jmp 0x428ca7
mov ecx, dword [0x4c6458]
xor eax, eax
cmp dword [edi + 0xd0], 3
push 0
sete al
lea eax, [eax + eax + 1]
push eax
push 0
push ecx
call fcn.0040d900
add esp, 0x10
mov eax, 1
jmp 0x428ca7
mov edx, dword [0x4c6458]
push 0
push 2
push 0
push edx
call fcn.0040d900
add esp, 0x10
mov eax, 1
jmp 0x428ca7
mov eax, dword [0x4c6458]
push 0
push 0
push 0
push eax
call fcn.0040d900
add esp, 0x10
mov eax, 1
jmp 0x428ca7
mov ecx, dword [0x4c6458]
push ecx
call fcn.0040fa00
add esp, 4
jmp 0x428ca7
mov edx, dword [0x4c6470]
mov eax, dword [0x4c646c]
push 0x4ab02c
push edx
mov edx, dword [0x4c6468]
push eax
mov eax, dword [0x4c6464]
push edx
mov edx, dword [0x4c6460]
push eax
mov eax, dword [0x4c645c]
push edx
mov edx, dword [0x4c6458]
push eax
push ecx
mov eax, 0x4ab02c
call fcn.0040fc70
add esp, 0x20
jmp 0x428ca7
mov edx, dword [0x4c646c]
mov eax, dword [0x4c6470]
push edx
mov edx, dword [0x4c6468]
push eax
mov eax, dword [0x4c6460]
push edx
mov edx, dword [0x4c645c]
push 0x4ab02c
push 0x4ab02c
push eax
mov eax, dword [0x4c6464]
push edx
mov edx, dword [0x4c6458]
push ecx
call fcn.0040fc70
add esp, 0x20
jmp 0x428ca7
mov eax, dword [0x4c6464]
mov edx, dword [0x4c6460]
push 0x4ab02c
push eax
mov eax, dword [0x4c645c]
push edx
mov edx, dword [0x4c6458]
push 0x4ab02c
push 0x4ab02c
push eax
push edx
mov eax, 0x4ab02c
push ecx
mov edx, eax
call fcn.0040fc70
add esp, 0x20
jmp 0x428ca7
mov edi, 4
mov ecx, ebx
call fcn.00420fc0
push eax
mov ecx, ebx
call fcn.0043b490
jmp 0x428ca7
mov edx, dword [0x4c645c]
mov ebx, dword [0x4c6460]
mov esi, dword [0x4c6458]
cmp cl, 0x76
sete al
push 0
movzx ecx, al
mov eax, dword [0x4c6464]
push 0
push ecx
push edx
push edi
call fcn.00477350
add esp, 0x14
test eax, eax
je 0x4268b2
mov eax, dword [0x4c28ec]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle 0x4268b2
push 1
push eax
call fcn.00401340
add esp, 8
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov ecx, dword [0x4c6458]
push 9
push str.ahk_group
push ecx
call fcn.0048d597
add esp, 0xc
test eax, eax
jne 0x4268f5
mov edx, dword [0x4c645c]
cmp word [edx], ax
jne 0x4268f5
mov eax, dword [0x4c6464]
cmp word [eax], 0
mov byte [esp + 0x2e], 1
je 0x4268fa
mov byte [esp + 0x2e], 0
mov al, byte [ebx]
xor ecx, ecx
cmp byte [esp + 0x2e], cl
setne cl
dec ecx
and ecx, 0x14
mov dword [esp + 0x3c], ecx
cmp al, 0x82
je 0x426958
cmp al, 0x83
je 0x426958
mov edx, dword [0x4c6460]
cmp word [edx], 0
je 0x42699a
mov al, byte [ebx]
cmp al, 0x82
je 0x426a02
cmp al, 0x83
je 0x426a04
mov ecx, dword [0x4c6460]
mov edx, dword [0x4c645c]
push ecx
mov ecx, dword [0x4c6464]
push edx
mov edx, dword [0x4c6458]
push eax
call fcn.00433ef0
jmp 0x428ca7
mov eax, dword [0x4c6460]
cmp word [eax], 0
je 0x42698e
mov edi, 2
mov ecx, ebx
call fcn.00421070
fmul qword [0x4bd4a8]
call fcn.0049b670
mov edi, dword [esp + 0x18]
mov dword [esp + 0x3c], eax
test eax, eax
jne 0x42698e
mov dword [esp + 0x3c], 0x1f4
mov ecx, dword [0x4c6468]
cmp word [ecx], 0
jne 0x426921
cmp byte [esp + 0x2e], 0
je 0x426921
mov eax, dword [0x4c6458]
add eax, 0x12
call fcn.00409620
cmp word [eax], 0
mov dword [esp + 0x30], eax
je 0x426921
mov esi, dword [0x4c8678]
test esi, esi
je 0x426921
lea ebx, [ebx]
mov edx, dword [esp + 0x30]
mov eax, dword [esi + 4]
push edx
push eax
call fcn.0048cd49
add esp, 8
test eax, eax
je 0x4269f1
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4269d0
jmp 0x426921
mov edx, dword [esp + 0x3c]
mov cl, byte [ebx]
push esi
call fcn.004793c0
jmp 0x428ca7
cmp al, 0x83
mov edx, dword [0x4c6468]
mov ebx, dword [0x4c6458]
sete al
movzx ecx, al
mov eax, dword [esp + 0x3c]
push ecx
mov ecx, dword [0x4c645c]
push edx
push eax
mov eax, dword [0x4c6464]
push ecx
push edi
call fcn.00477660
add esp, 0x14
test eax, eax
je 0x4268b2
mov edx, dword [0x4c28ec]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle 0x4268b2
push 1
push eax
call fcn.00401340
mov ebx, dword [esp + 0x1c]
add esp, 8
mov eax, 1
jmp 0x428ca7
mov ebx, dword [0x4c645c]
call fcn.00437ea0
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov eax, dword [0x4c645c]
mov ecx, dword [0x4c6458]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
sete dl
movzx eax, dl
push eax
push ebx
call fcn.0042dd40
jmp 0x428ca7
lea ecx, [esp + 0xa8]
push ecx
push 0x3a98
push 1
push str.Environment
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
sete dl
movzx eax, dl
push eax
push ebx
call fcn.0042dd40
jmp 0x428ca7
mov ecx, dword [0x4c645c]
mov edx, dword [0x4c6458]
push ecx
push edx
push ebx
call fcn.00452a60
jmp 0x428ca7
mov eax, dword [0x4c6458]
mov ecx, 0x4c9128
call fcn.00470fe0
mov eax, dword [0x4c645c]
mov ecx, 0x4c9134
call fcn.00470fe0
mov eax, dword [0x4c6460]
mov ecx, 0x4c9140
call fcn.00470fe0
mov eax, 1
jmp 0x428ca7
mov ecx, dword [0x4c6460]
mov eax, str.UseErrorLevel
call fcn.00473c80
test eax, eax
setne al
mov cl, 3
cmp cl, byte [ebx + 1]
mov byte [esp + 0x70], al
mov ecx, dword [esp + 0x70]
sbb edx, edx
and edx, dword [0x4c640c]
test al, al
push edx
mov edx, dword [0x4c6460]
push 1
push ecx
push 0
push edx
mov edx, dword [0x4c645c]
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4c6458]
push 0
push 0x4c8640
call fcn.0042ece0
cmp byte [esp + 0x70], 0
je 0x428ca7
test eax, eax
mov eax, 0x4a0900
jne 0x426b99
mov eax, str.ERROR
push 1
push 0
push 0xffffffffffffffff
push eax
mov eax, dword [0x4c6cb4]
push eax
call fcn.00476680
jmp 0x428ca7
push ebx
call fcn.00433fd0
jmp 0x428ca7
cmp byte [ebx + 1], 2
jbe 0x426bfe
mov ecx, dword [0x4c6470]
mov edx, dword [0x4c646c]
mov eax, dword [0x4c6468]
push ecx
mov ecx, dword [0x4c6464]
push edx
mov edx, dword [0x4c6460]
push eax
mov eax, dword [0x4c645c]
push ecx
mov ecx, dword [0x4c6474]
push edx
mov edx, dword [0x4c6458]
call fcn.004346b0
jmp 0x428ca7
mov eax, dword [0x4c645c]
mov ecx, dword [0x4c6458]
push 0x4ab02c
push 0x4ab02c
push 0x4ab02c
push eax
push ecx
mov ecx, 0x4ab02c
mov eax, ecx
mov edx, ecx
call fcn.004346b0
jmp 0x428ca7
mov edx, dword [0x4c6480]
mov eax, dword [0x4c647c]
mov ecx, dword [0x4c6478]
push edx
mov edx, dword [0x4c6474]
push eax
mov eax, dword [0x4c6470]
push ecx
mov ecx, dword [0x4c6464]
push edx
mov edx, dword [0x4c6460]
push eax
mov eax, dword [0x4c645c]
push ecx
mov ecx, dword [0x4c6458]
push edx
mov edx, dword [0x4c646c]
push eax
push ecx
mov ecx, dword [0x4c6468]
push ebx
call fcn.004516d0
jmp 0x428ca7
cmp cl, 0x47
mov ecx, dword [0x4c6468]
sete dl
movzx eax, dl
mov edx, dword [0x4c6464]
push eax
mov eax, dword [0x4c645c]
push ecx
mov ecx, dword [0x4c6458]
push edx
mov edx, dword [0x4c6460]
push eax
push ecx
mov ecx, dword [0x4c646c]
push ebx
call fcn.004347d0
jmp 0x428ca7
mov esi, dword [0x4c6464]
push 1
xor bl, bl
call fcn.0040d290
add esp, 4
mov byte [esp + 0x74], al
test al, al
jne 0x426cf6
mov edx, dword [0x4c6464]
mov ecx, dword [esp + 0x14]
push edx
push 0
push str.Parameter_4_invalid.
call fcn.0042df10
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov eax, dword [0x4c6468]
cmp word [eax], 0
je 0x426d11
mov ecx, dword [esp + 0x14]
mov edi, 4
call fcn.00420fc0
jmp 0x426d16
mov eax, 1
mov ecx, dword [0x4c6470]
mov edx, dword [0x4c6460]
push ecx
mov ecx, dword [0x4c6458]
push edx
mov edx, dword [0x4c646c]
push ecx
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [0x4c645c]
push eax
mov eax, dword [esp + 0x88]
push eax
push ecx
mov ecx, dword [0x4c6474]
call fcn.00434890
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov edx, dword [0x4c6474]
mov eax, dword [0x4c6470]
mov ecx, dword [0x4c6468]
push edx
mov edx, dword [0x4c6464]
push eax
mov eax, dword [0x4c6460]
push ecx
mov ecx, dword [0x4c645c]
push edx
mov edx, dword [0x4c6458]
push eax
push ecx
mov ecx, dword [0x4c6478]
push edx
mov edx, dword [0x4c646c]
push ebx
call fcn.00434f00
jmp 0x428ca7
mov eax, dword [0x4c6478]
mov ecx, dword [0x4c6474]
mov edx, dword [0x4c6470]
push eax
mov eax, dword [0x4c646c]
push ecx
mov ecx, dword [0x4c6468]
push edx
push eax
push ecx
mov ecx, ebx
call fcn.00435130
jmp 0x428ca7
mov edx, dword [0x4c6468]
mov eax, dword [0x4c6464]
mov ecx, dword [0x4c6460]
push edx
mov edx, dword [0x4c645c]
push eax
push ecx
push edx
push ebx
call fcn.00435280
jmp 0x428ca7
mov eax, dword [0x4c6464]
mov ecx, dword [0x4c6460]
mov edx, dword [0x4c6458]
push eax
push ecx
mov ecx, dword [0x4c6468]
push edx
mov edx, dword [0x4c645c]
push ebx
call fcn.00435460
jmp 0x428ca7
mov eax, dword [0x4c6468]
mov ecx, dword [0x4c6464]
mov edx, dword [0x4c645c]
mov esi, dword [0x4c6458]
push eax
push ecx
mov ecx, dword [0x4c646c]
push edx
mov edx, dword [0x4c6460]
push ebx
call fcn.00435570
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov eax, dword [0x4c6468]
mov ecx, dword [0x4c645c]
mov edx, dword [0x4c6460]
push eax
mov eax, dword [0x4c6464]
push ecx
mov ecx, dword [0x4c646c]
push ebx
call fcn.00435630
jmp 0x428ca7
mov edx, dword [0x4c6470]
mov eax, dword [0x4c646c]
mov ecx, dword [0x4c6468]
push edx
mov edx, dword [0x4c6464]
push eax
mov eax, dword [0x4c6460]
push ecx
mov ecx, dword [0x4c645c]
push edx
mov edx, dword [0x4c6458]
push eax
push ebx
call fcn.004519f0
jmp 0x428ca7
mov ecx, dword [0x4c6474]
mov edx, dword [0x4c6470]
mov eax, dword [0x4c646c]
push ecx
mov ecx, dword [0x4c6468]
push edx
mov edx, dword [0x4c6464]
push eax
mov eax, dword [0x4c6460]
push ecx
mov ecx, dword [0x4c645c]
push edx
push eax
push ebx
call fcn.004521a0
jmp 0x428ca7
mov ecx, dword [0x4c6468]
mov eax, dword [0x4c6464]
mov edx, dword [0x4c6460]
mov edi, dword [0x4c645c]
push ecx
mov ecx, dword [0x4c646c]
call fcn.00435ef0
jmp 0x428ca7
mov edx, dword [0x4c6470]
mov eax, dword [0x4c646c]
mov ecx, dword [0x4c6468]
push edx
mov edx, dword [0x4c6460]
push eax
mov eax, dword [0x4c645c]
push ecx
mov ecx, dword [0x4c6458]
push edx
mov edx, dword [0x4c6464]
push eax
push ecx
mov ecx, dword [0x4c6474]
call fcn.00435f60
jmp 0x428ca7
cmp cl, 0x90
sete dl
movzx eax, dl
push eax
mov eax, ebx
call fcn.004360a0
jmp 0x428ca7
mov ecx, dword [0x4c645c]
mov edx, dword [0x4c6458]
push ecx
mov ecx, dword [0x4c6460]
push ebx
call fcn.004363c0
jmp 0x428ca7
mov edx, dword [0x4c646c]
mov eax, dword [0x4c6468]
mov ecx, dword [0x4c6464]
push edx
mov edx, dword [0x4c6460]
push eax
push ecx
mov ecx, dword [0x4c645c]
push edx
mov edx, dword [0x4c6458]
push ebx
call fcn.00436a50
jmp 0x428ca7
cmp byte [ebx + 1], 1
jbe 0x426fe7
mov eax, dword [0x4c6464]
mov ecx, dword [0x4c6460]
mov edx, dword [0x4c6458]
push eax
mov eax, dword [0x4c645c]
push ecx
mov ecx, dword [0x4c6468]
call fcn.00436e40
jmp 0x428ca7
mov edi, dword [0x4c6458]
mov ecx, 0x4ab02c
push 0x4ab02c
mov eax, ecx
mov edx, ecx
call fcn.00443160
test eax, eax
je 0x42700c
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, 1
jmp 0x428ca7
mov edx, dword [0x4c6464]
mov ecx, dword [0x4c6468]
mov eax, dword [0x4c6460]
push edx
mov edx, dword [0x4c645c]
call fcn.00436e70
jmp 0x428ca7
mov eax, dword [0x4c6464]
mov ecx, dword [0x4c6468]
mov edx, dword [0x4c645c]
push eax
mov eax, dword [0x4c6460]
call fcn.00437080
jmp 0x428ca7
mov ecx, dword [0x4c6468]
mov edx, dword [0x4c6464]
mov eax, dword [0x4c645c]
push ecx
mov ecx, dword [0x4c646c]
push edx
mov edx, dword [0x4c6460]
push eax
push ebx
call fcn.004371a0
jmp 0x428ca7
mov ecx, dword [0x4c6464]
mov eax, dword [0x4c6460]
mov edx, dword [0x4c645c]
push ecx
mov ecx, dword [0x4c6468]
push ebx
call fcn.00437a70
jmp 0x428ca7
mov edx, dword [0x4c6474]
mov eax, dword [0x4c6470]
mov ecx, dword [0x4c646c]
push edx
mov edx, dword [0x4c6468]
push eax
push ecx
push edx
mov eax, ebx
call fcn.00437d20
jmp 0x428ca7
mov eax, dword [0x4c6460]
mov ecx, dword [0x4c645c]
push eax
push ebx
call fcn.00437ff0
jmp 0x428ca7
push 0
push 0x1a3
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [0x4c28ec]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x42711e
push 1
push eax
call fcn.00401340
add esp, 8
mov eax, 1
jmp 0x428ca7
push 0
push 0x1a0
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [0x4c28ec]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle 0x42711e
push 1
push eax
call fcn.00401340
add esp, 8
mov eax, 1
jmp 0x428ca7
mov eax, dword [ebx + 0xc]
test eax, eax
jne 0x4271a4
mov edi, dword [0x4c6458]
cmp word [edi], ax
je 0x4271a4
mov eax, 0x4c8640
call fcn.0041a390
test eax, eax
jne 0x4271a4
mov eax, dword [0x4c6458]
push eax
push 0
push 0x4a3320
mov ecx, ebx
call fcn.0042df10
jmp 0x428ca7
mov dword [0x4c90bc], eax
mov eax, 1
jmp 0x428ca7
mov ecx, dword [ebx + 0xc]
test ecx, ecx
jne 0x4271e6
mov dl, 1
cmp dl, byte [ebx + 1]
sbb eax, eax
and eax, dword [0x4c6404]
je 0x4271e6
cmp byte [eax + 0x17], cl
jne 0x4271d3
mov edx, dword [eax + 0xc]
jmp 0x4271d5
mov edx, eax
test byte [edx + 0x15], 2
je 0x4271e6
cmp byte [eax + 0x17], 0
jne 0x4271e4
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
mov eax, dword [0x4c6460]
mov edx, dword [0x4c645c]
push eax
mov eax, dword [0x4c6458]
push edx
push eax
call fcn.0040a880
add esp, 0xc
jmp 0x428ca7
mov ebx, dword [ebx + 0xc]
test ebx, ebx
jne 0x427256
mov edi, dword [0x4c6458]
push ebx
mov ebx, 0x4c8640
call fcn.0041a3d0
mov ebx, eax
test ebx, ebx
jne 0x427256
mov eax, dword [0x4c6458]
cmp word [eax], bx
jne 0x42723c
mov ecx, dword [esp + 0x18]
mov ebx, dword [ecx + 0xbc]
test ebx, ebx
jne 0x427256
mov ecx, dword [esp + 0x14]
push eax
push 0
push 0x4a3320
call fcn.0042df10
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov esi, dword [0x4c645c]
cmp word [esi], 0
je 0x427306
push 0
call fcn.004144a0
add esp, 4
test eax, eax
jne 0x4272dc
push eax
mov eax, dword [0x4c645c]
push 1
push 1
push 1
call fcn.00473730
add esp, 0x10
test eax, eax
jne 0x4272fc
mov edx, dword [0x4c645c]
push str.Delete
push edx
call fcn.0048cd49
add esp, 8
test eax, eax
jne 0x4272bd
push ebx
push 0x4c8640
call fcn.0041a2a0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov eax, dword [0x4c645c]
mov ecx, dword [esp + 0x14]
push eax
push 0
push str.Parameter_2_invalid.
call fcn.0042df10
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
jle 0x4272fc
cmp eax, 2
jg 0x4272fc
cmp eax, 1
mov eax, dword [0x4c6460]
sete cl
push 0
movzx edx, cl
push edx
push eax
push 0x4ab02c
jmp 0x42731f
mov esi, dword [0x4c645c]
cmp word [esi], 0
mov ecx, dword [0x4c6460]
jne 0x427318
cmp word [ecx], 0
je 0x427318
mov al, 1
jmp 0x42731a
xor al, al
push eax
push 1
push ecx
push esi
push ebx
mov edi, 0x4c8640
call fcn.00419fc0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov eax, dword [0x4c6458]
cmp word [eax], 0
mov esi, 0x10
je 0x42736d
push 0x4a4a9c
push eax
call fcn.0048cd49
add esp, 8
test eax, eax
je 0x42736d
xor edi, edi
mov ecx, ebx
call fcn.00420fc0
mov edi, dword [esp + 0x18]
mov esi, eax
test esi, esi
je 0x427372
mov eax, 1
mov byte [edi + 0xea], al
test al, al
je 0x42739e
or eax, 0xffffffff
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 0x24], eax
mov dword [edi + 0xd4], esi
mov byte [edi + 0xe8], 0
mov eax, 1
jmp 0x428ca7
mov dword [edi + 0xd4], 5
mov byte [edi + 0xe8], 1
mov eax, 1
jmp 0x428ca7
mov esi, dword [0x4c6458]
call fcn.00414440
dec eax
je 0x427468
dec eax
je 0x42741f
dec eax
jne 0x42747d
mov ecx, dword [0x4c645c]
cmp word [ecx], ax
je 0x427409
mov ecx, dword [esp + 0x14]
lea edi, [eax + 1]
call fcn.00420fc0
or eax, edx
jne 0x427405
mov ebx, dword [esp + 0x14]
mov eax, edi
mov edi, dword [esp + 0x18]
mov byte [edi + 0xe9], al
jmp 0x428ca7
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
xor eax, eax
mov byte [edi + 0xe9], al
mov eax, 1
jmp 0x428ca7
mov edx, dword [0x4c6458]
cmp word [edx], 0
je 0x42743e
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00420fc0
mov dword [0x4c911c], eax
mov eax, dword [0x4c645c]
cmp word [eax], 0
je 0x42747d
mov ecx, dword [esp + 0x14]
mov edi, 2
call fcn.00420fc0
mov ebx, dword [esp + 0x14]
mov dword [0x4c9118], eax
lea eax, [edi - 1]
jmp 0x428ca7
mov ecx, dword [esp + 0x14]
mov edi, 1
call fcn.00420fc0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x2c], eax
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov esi, dword [ebx + 0xc]
test esi, esi
jne 0x4274ae
mov edi, dword [0x4c6458]
push 1
push 0x4c8640
call fcn.00421d20
mov esi, eax
test esi, esi
je case.0x42573a.8
mov edi, dword [0x4c6464]
cmp word [edi], 0
je 0x4274eb
mov eax, dword [ebx + 0x18]
test eax, eax
jne 0x4274e8
mov eax, 0x4c8640
call fcn.0041a390
test eax, eax
jne 0x4274e8
mov edx, dword [0x4c6464]
push edx
push eax
push 0x4a3320
mov ecx, ebx
call fcn.0042df10
jmp 0x428ca7
mov dword [esi + 0x10], eax
mov eax, dword [0x4c646c]
mov ecx, dword [0x4c6468]
mov edx, dword [0x4c6460]
push eax
mov eax, dword [0x4c645c]
push ecx
push edx
push eax
push esi
call fcn.00479090
jmp 0x428ca7
mov esi, dword [ebx + 0xc]
test esi, esi
jne 0x427550
mov eax, dword [0x4c6458]
mov edi, eax
cmp word [eax], si
je 0x42758b
mov esi, dword [0x4c8678]
test esi, esi
je 0x42758b
lea ecx, [ecx]
mov ecx, dword [esi + 4]
push edi
push ecx
call fcn.0048cd49
add esp, 8
test eax, eax
je 0x427550
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x427530
lea eax, [esi + 1]
jmp 0x428ca7
mov eax, dword [0x4c645c]
cmp word [eax], 0
je 0x427581
push 0x4a37b0
push eax
call fcn.0048cd49
add esp, 8
test eax, eax
jne 0x427581
mov al, 1
mov ecx, esi
push eax
call fcn.00479710
mov eax, 1
jmp 0x428ca7
xor al, al
mov ecx, esi
push eax
call fcn.00479710
mov eax, 1
jmp 0x428ca7
mov esi, dword [ebx + 0xc]
test esi, esi
jne 0x4275e0
mov eax, dword [0x4c6458]
mov edi, eax
cmp word [eax], si
je 0x42764a
mov esi, dword [0x4c8678]
test esi, esi
je 0x42764a
lea ebx, [ebx]
mov edx, dword [esi + 4]
push edi
push edx
call fcn.0048cd49
add esp, 8
test eax, eax
je 0x4275e0
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4275c0
lea eax, [esi + 1]
jmp 0x428ca7
mov eax, dword [0x4c645c]
cmp word [eax], 0
je 0x427641
push 0x4a5f38
push eax
call fcn.0048cd49
add esp, 8
test eax, eax
jne 0x427611
push esi
xor edx, edx
mov cl, 0x82
call fcn.004793c0
mov eax, 1
jmp 0x428ca7
mov eax, dword [0x4c645c]
cmp word [eax], 0
je 0x427641
push 0x4a37b0
push eax
call fcn.0048cd49
add esp, 8
test eax, eax
jne 0x427641
mov al, 1
push eax
push esi
call fcn.00479480
mov eax, 1
jmp 0x428ca7
xor al, al
push eax
push esi
call fcn.00479480
mov eax, 1
jmp 0x428ca7
mov eax, dword [0x4c6460]
push eax
mov eax, dword [0x4c645c]
call fcn.0043e1e0
jmp 0x428ca7
test esi, esi
jne 0x427683
lea edi, [esi + 1]
mov ecx, ebx
call fcn.00420fc0
call fcn.00412af0
mov eax, edi
jmp 0x428ca7
mov eax, dword [0x4c645c]
push 0
push 1
push 0
push 1
call fcn.00473730
add esp, 0x10
cmp eax, 2
je 0x4276bb
mov eax, dword [0x4c6460]
push 0
push 1
push 0
push 1
call fcn.00473730
add esp, 0x10
cmp eax, 2
jne 0x427748
mov ecx, dword [0x4c645c]
cmp word [ecx], 0
je 0x4276d5
mov edi, 1
mov ecx, ebx
call fcn.00421070
jmp 0x4276d7
fldz
mov edx, dword [0x4c6460]
fst qword [esp + 0x30]
cmp word [edx], 0
je 0x427712
mov edi, 2
fstp st(0)
mov ecx, ebx
call fcn.00421070
fst qword [esp + 0x40]
fld qword [esp + 0x30]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x42771e
fstp qword [esp + 0x30]
fstp qword [esp + 0x40]
jmp 0x427722
fld qword [0x4bd530]
fst qword [esp + 0x40]
jmp 0x4276ff
fstp st(0)
fstp st(0)
call fcn.00412c60
fld qword [esp + 0x40]
fld qword [esp + 0x30]
sub esp, 8
fsub st(1), st(0)
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push esi
call fcn.004131a0
jmp 0x428ca7
mov eax, dword [0x4c645c]
cmp word [eax], 0
je 0x427767
mov edi, 1
mov ecx, ebx
call fcn.00420fc0
mov esi, eax
mov dword [esp + 0x40], eax
jmp 0x42776d
xor esi, esi
mov dword [esp + 0x40], esi
mov ecx, dword [0x4c6460]
cmp word [ecx], 0
je 0x427789
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
mov edi, eax
jmp 0x42778e
mov edi, SysReAllocString
cmp esi, edi
jle 0x42779c
mov eax, esi
mov esi, edi
mov dword [esp + 0x40], esi
mov edi, eax
call fcn.00412c10
mov ecx, eax
mov eax, esi
cdq
mov esi, eax
mov dword [esp + 0x30], edx
mov eax, edi
cdq
sub eax, esi
sbb edx, dword [esp + 0x30]
add eax, 1
adc edx, 0
push edx
push eax
push 0
push ecx
call fcn.0049c130
add eax, dword [esp + 0x40]
push 0x18
cdq
push edx
push eax
mov eax, dword [esp + 0x2c]
call fcn.004010e0
mov eax, 1
jmp 0x428ca7
mov edx, dword [esp + 0x14]
mov ecx, dword [0x4c645c]
push edx
mov bl, 1
call fcn.0043e3b0
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov eax, dword [0x4c6460]
mov ecx, dword [0x4c6458]
push eax
mov eax, dword [0x4c645c]
push ebx
call fcn.0043e580
jmp 0x428ca7
mov eax, dword [0x4c6460]
mov ecx, dword [0x4c645c]
push ebx
call fcn.0043e830
jmp 0x428ca7
mov edx, dword [0x4c6464]
mov eax, dword [0x4c645c]
push edx
xor edx, edx
cmp cl, 0x9b
sete dl
push eax
dec edx
and edx, dword [0x4c6458]
push edx
push ebx
call fcn.0043ee30
jmp 0x428ca7
mov eax, dword [0x4c645c]
cmp word [eax], 0
je 0x427870
mov edi, 1
mov ecx, ebx
call fcn.00420fc0
dec eax
jmp 0x427872
xor eax, eax
cdq
test edx, edx
jg 0x427883
jl 0x42787d
test eax, eax
jae 0x427883
xor eax, eax
mov dword [esp + 0x34], eax
cmp byte [ebx], 0x9d
push eax
jne 0x427899
mov esi, ebx
call fcn.0043ff40
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov edi, dword [0x4c6458]
mov ebx, dword [esp + 0x18]
call fcn.00440030
jmp 0x428ca7
mov ecx, dword [0x4c645c]
cmp word [ecx], 0
je 0x4278c9
mov edi, 1
mov ecx, ebx
call fcn.00420fc0
mov esi, eax
jmp 0x4278ce
mov esi, 0x96
mov edx, dword [0x4c6458]
cmp word [edx], 0
je 0x4278f3
xor edi, edi
mov ecx, ebx
call fcn.00420fc0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
lea eax, [edi + 1]
jmp 0x428ca7
mov eax, 0x20b
push esi
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov eax, 1
jmp 0x428ca7
mov eax, dword [0x4c645c]
cmp word [eax], 0
je 0x42792c
push str.wait
push eax
call fcn.0048cd49
add esp, 8
test eax, eax
je 0x427951
mov eax, dword [0x4c645c]
push 0x4a331c
push eax
call fcn.0048cd49
add esp, 8
test eax, eax
je 0x427951
xor al, al
push eax
mov eax, dword [0x4c6458]
push ebx
call fcn.00440190
jmp 0x428ca7
mov eax, 1
push eax
mov eax, dword [0x4c6458]
push ebx
call fcn.00440190
jmp 0x428ca7
cmp byte [ebx + 1], 2
jae 0x427972
mov edi, dword [edi + 0x18]
jmp 0x427974
xor edi, edi
mov eax, dword [0x4c6458]
mov ecx, dword [0x4c645c]
push edi
push eax
push ecx
push ebx
call fcn.00441690
jmp 0x428ca7
mov ecx, dword [0x4c645c]
push ebx
call fcn.00440d20
jmp 0x428ca7
mov edx, dword [0x4c645c]
mov ecx, dword [0x4c6460]
push edx
push ebx
call fcn.00441300
jmp 0x428ca7
push ebx
call fcn.00441ab0
jmp 0x428ca7
mov eax, dword [0x4c6458]
mov esi, ebx
call fcn.004536e0
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov edi, dword [0x4c6458]
push ebx
call fcn.004537f0
jmp 0x428ca7
mov eax, dword [0x4c6460]
mov ecx, dword [0x4c645c]
mov edx, dword [0x4c6458]
push ebx
call fcn.00441d80
jmp 0x428ca7
add edi, 0x30
push edi
push 0
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
mov edx, dword [0x4c645c]
cmp eax, 1
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4c6458]
call fcn.00453f00
add esp, 0x10
test eax, eax
jne 0x427a82
push 1
push eax
mov eax, dword [0x4c6cb4]
push 0xffffffffffffffff
push 0x4a0900
push eax
call fcn.00476680
jmp 0x428ca7
add edi, 0x30
push edi
push 1
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
cmp eax, 1
mov eax, dword [0x4c645c]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4c6458]
push eax
call fcn.00453f00
add esp, 0x10
push eax
push ebx
call fcn.0042de00
jmp 0x428ca7
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
cmp eax, 1
mov eax, dword [0x4c645c]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4c6458]
push eax
call fcn.00453a70
add esp, 8
test al, al
sete cl
movzx edx, cl
push edx
push ebx
call fcn.0042dd40
jmp 0x428ca7
mov eax, dword [0x4c6460]
mov ax, word [eax]
call fcn.004095a0
cmp ax, 0x52
jne 0x427b07
mov ecx, dword [0x4c645c]
mov edx, dword [0x4c6458]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
sete al
movzx ecx, al
push ecx
push ebx
call fcn.0042dd40
jmp 0x428ca7
mov edi, 2
mov ecx, ebx
call fcn.00420fc0
mov edx, dword [0x4c645c]
push edx
mov edx, dword [0x4c6458]
mov edi, eax
call fcn.00453c40
add esp, 4
test al, al
sete al
movzx ecx, al
push ecx
push ebx
call fcn.0042dd40
jmp 0x428ca7
mov edx, dword [0x4c6458]
push edx
mov ecx, ebx
call fcn.00440b30
jmp 0x428ca7
mov eax, dword [0x4c6458]
cmp word [eax], 0
je 0x427b91
mov edi, 1
mov ecx, ebx
call fcn.00420fc0
cmp eax, edi
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4c6458]
call fcn.00453e10
add esp, 4
test al, al
je 0x427b91
xor al, al
push eax
push ebx
call fcn.0042dd40
jmp 0x428ca7
mov eax, 1
push eax
push ebx
call fcn.0042dd40
jmp 0x428ca7
mov eax, dword [0x4c645c]
cmp word [eax], 0
jne 0x427bbc
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x2c]
test edi, edi
jne 0x427bbc
mov eax, 0x4ab02c
mov edi, ebx
call fcn.00441f30
jmp 0x428ca7
mov eax, dword [0x4c645c]
cmp word [eax], 0
je 0x427bd9
mov dword [esp + 0x40], eax
jmp 0x427bf1
mov edi, dword [edi + 0x10]
test edi, edi
je 0x427be9
add edi, 0x2c
mov dword [esp + 0x40], edi
jmp 0x427bf1
mov dword [esp + 0x40], 0x4ab02c
push 0
push ecx
mov edi, 3
mov ecx, ebx
call fcn.00420fc0
mov esi, dword [0x4c6460]
add esp, 4
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.00414790
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x1c]
push eax
mov eax, dword [0x4c6458]
push edx
push eax
call fcn.00442040
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
xor eax, eax
cmp dword [ecx + 0xfc], eax
sete al
jmp 0x428ca7
mov eax, dword [0x4c645c]
cmp word [eax], 0
jne 0x427c5f
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x2c]
test edi, edi
jne 0x427c5f
mov eax, 0x4ab02c
mov edx, dword [0x4c6460]
movzx ecx, word [edx]
push ecx
mov edi, ebx
call fcn.00442770
jmp 0x428ca7
mov eax, dword [0x4c645c]
cmp word [eax], 0
je 0x427c86
mov dword [esp + 0x40], eax
jmp 0x427c9e
mov edi, dword [edi + 0x10]
test edi, edi
je 0x427c96
add edi, 0x2c
mov dword [esp + 0x40], edi
jmp 0x427c9e
mov dword [esp + 0x40], 0x4ab02c
push 0
push ecx
mov edi, 4
mov ecx, ebx
call fcn.00420fc0
mov esi, dword [0x4c6464]
add esp, 4
cmp eax, 1
sete dl
movzx eax, dl
push eax
call fcn.00414790
mov ecx, dword [0x4c6460]
movzx edx, word [ecx]
mov ecx, dword [0x4c6458]
push eax
mov eax, dword [esp + 0x4c]
push edx
push eax
push ecx
mov ecx, dword [esp + 0x2c]
call fcn.004428f0
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
xor eax, eax
cmp dword [edx + 0xfc], eax
sete al
jmp 0x428ca7
mov eax, dword [0x4c645c]
cmp word [eax], 0
je 0x427d1b
mov edi, eax
mov eax, dword [0x4c6460]
push eax
push ebx
call fcn.00442f00
jmp 0x428ca7
mov edi, dword [edi + 0x10]
test edi, edi
je 0x427d36
mov eax, dword [0x4c6460]
push eax
add edi, 0x2c
push ebx
call fcn.00442f00
jmp 0x428ca7
mov eax, dword [0x4c6460]
push eax
mov edi, 0x4ab02c
push ebx
call fcn.00442f00
jmp 0x428ca7
mov eax, dword [0x4c645c]
cmp word [eax], 0
jne 0x427d66
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x2c]
test edi, edi
jne 0x427d66
mov eax, 0x4ab02c
push ebx
call fcn.004538a0
jmp 0x428ca7
mov edi, dword [0x4c6458]
call fcn.004403c0
mov ecx, dword [esp + 0x18]
xor eax, eax
cmp dword [ecx + 0xfc], eax
sete al
jmp 0x428ca7
mov edx, dword [0x4c6468]
mov eax, dword [0x4c645c]
mov ecx, dword [0x4c6464]
push edx
mov edx, dword [0x4c6460]
push eax
push ebx
call fcn.004404b0
jmp 0x428ca7
mov ecx, dword [0x4c6460]
mov edx, dword [0x4c645c]
push ecx
mov ecx, dword [0x4c6464]
push edx
mov edx, ebx
call fcn.00452e40
jmp 0x428ca7
mov eax, dword [0x4c6458]
push eax
push ebx
call fcn.00453150
jmp 0x428ca7
mov ecx, dword [0x4c6478]
mov edx, dword [0x4c6474]
mov eax, dword [0x4c6470]
mov ebx, dword [0x4c6468]
mov edi, dword [0x4c6464]
push ecx
mov ecx, dword [0x4c646c]
push edx
mov edx, dword [0x4c645c]
push eax
mov eax, dword [0x4c6458]
push ecx
mov ecx, dword [esp + 0x24]
push edx
push eax
push ecx
mov ecx, dword [0x4c6460]
call fcn.004534d0
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
push 0
mov ecx, 4
call fcn.0043a5f0
add esp, 4
jmp 0x428ca7
mov esi, dword [0x4c6458]
push 7
call fcn.004144a0
add esp, 4
cmp eax, 7
jne 0x427e71
push 0
lea ecx, [eax - 6]
call fcn.0043a5f0
mov ebx, dword [esp + 0x18]
add esp, 4
jmp 0x428ca7
cmp byte [edi + 0xf5], 0
je 0x427e9d
mov ecx, dword [0x4c8560]
test ecx, ecx
jle 0x427e87
dec ecx
jmp 0x427e8c
mov ecx, 0x18f
mov dword [0x4c8560], ecx
mov dword [ecx*4 + 0x4c7f20], 0
mov ebx, dword [esp + 0x14]
cmp eax, 1
sete dl
mov byte [edi + 0xf5], dl
mov eax, 1
jmp 0x428ca7
push 0
mov ecx, 2
call fcn.0043a5f0
add esp, 4
jmp 0x428ca7
push 0
mov ecx, 3
call fcn.0043a5f0
add esp, 4
jmp 0x428ca7
mov ebx, dword [0x4c28ec]
add ebx, 0x4c
call fcn.0045bc60
test eax, eax
je 0x427efe
mov eax, dword [0x4c28ec]
mov ecx, dword [eax + 0x4c]
mov eax, dword [ecx + 4]
jmp 0x427f00
xor eax, eax
mov ebx, dword [esp + 0x14]
mov cl, byte [ebx + 1]
push eax
test cl, cl
jne 0x427f22
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push str.Press_OK_to_continue.
jmp 0x427f67
cmp cl, 1
jne 0x427f3f
fldz
mov edx, dword [0x4c6458]
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push edx
jmp 0x427f67
push ecx
mov edi, 3
mov ecx, ebx
call fcn.00421070
mov eax, dword [0x4c645c]
push ecx
fstp qword [esp]
push eax
xor edi, edi
mov ecx, ebx
call fcn.00420fc0
mov ecx, dword [0x4c6460]
push eax
push ecx
call fcn.00478220
mov esi, eax
add esp, 0x18
test esi, esi
jne 0x427f9f
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x59e
jne 0x427f9f
mov edx, dword [0x4c6458]
push edx
push esi
push str.Parameter_1_invalid.
mov ecx, ebx
call fcn.0042df10
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov ebx, dword [esp + 0x14]
xor eax, eax
test esi, esi
setne al
jmp 0x428ca7
mov eax, dword [0x4c6474]
cmp word [eax], 0
je 0x427fd1
mov edi, 7
mov ecx, ebx
call fcn.00420fc0
mov dword [esp + 0x40], eax
mov esi, SysReAllocString
jmp 0x427fda
mov esi, SysReAllocString
mov dword [esp + 0x40], esi
mov ecx, dword [0x4c6470]
cmp word [ecx], 0
je 0x427ff8
mov edi, 6
mov ecx, ebx
call fcn.00420fc0
mov dword [esp + 0x5c], eax
jmp 0x427ffc
mov dword [esp + 0x5c], esi
mov edx, dword [0x4c646c]
cmp word [edx], 0
je 0x42801a
mov edi, 5
mov ecx, ebx
call fcn.00420fc0
mov dword [esp + 0x3c], eax
jmp 0x42801e
mov dword [esp + 0x3c], esi
mov eax, dword [0x4c6468]
cmp word [eax], 0
je 0x428037
mov edi, 4
mov ecx, ebx
call fcn.00420fc0
mov esi, eax
mov edi, 9
mov ecx, ebx
call fcn.00421070
mov ecx, dword [0x4c6480]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x5c]
sub esp, 8
fstp qword [esp]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [0x4c6464]
push eax
mov ax, word [edx]
push ecx
call fcn.004095a0
mov edx, dword [0x4c645c]
cmp ax, 0x48
mov eax, dword [0x4c6460]
push eax
mov eax, dword [esp + 0x3c]
push edx
sete cl
push eax
mov edi, esi
call fcn.0043a8d0
add esp, 0x24
jmp 0x428ca7
mov ecx, dword [0x4c645c]
cmp word [ecx], 0
je 0x4280b1
mov edi, 1
mov ecx, ebx
call fcn.00420fc0
mov esi, eax
jmp 0x4280b3
xor esi, esi
mov edx, dword [0x4c6458]
cmp word [edx], 0
je 0x4280ca
xor edi, edi
mov ecx, ebx
call fcn.00420fc0
jmp 0x4280cf
mov eax, 0xc8
mov ecx, dword [0x4c6464]
mov edx, dword [0x4c6460]
push ecx
push edx
push esi
push eax
call fcn.00451460
jmp 0x428ca7
mov eax, dword [0x4c64c0]
test eax, eax
je 0x428109
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x428109
mov eax, dword [0x4c64c0]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4c64c0], 0
mov eax, 1
jmp 0x428ca7
mov ecx, dword [0x4c6468]
mov edx, dword [0x4c6464]
mov eax, dword [0x4c6460]
push 0
push ecx
mov ecx, dword [0x4c645c]
push edx
mov edx, dword [0x4c6458]
push eax
push ecx
push edx
push ebx
mov ecx, 0x4ab02c
call fcn.004305f0
jmp 0x428ca7
mov eax, dword [0x4c646c]
mov ecx, dword [0x4c6468]
mov edx, dword [0x4c6464]
push 1
push eax
mov eax, dword [0x4c6460]
push ecx
mov ecx, dword [0x4c645c]
push edx
push eax
push ecx
mov ecx, dword [0x4c6458]
push ebx
call fcn.004305f0
jmp 0x428ca7
mov edx, dword [0x4c6460]
mov eax, dword [0x4c645c]
mov ecx, dword [0x4c6458]
push edx
push eax
push ecx
mov ecx, dword [0x4c6464]
push ebx
call fcn.00431850
jmp 0x428ca7
mov edx, dword [0x4c645c]
mov eax, dword [0x4c6458]
mov edi, dword [0x4c6464]
mov esi, dword [0x4c6460]
push edx
push eax
call fcn.00431b60
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
push ebx
call fcn.00432ed0
jmp 0x428ca7
mov esi, dword [0x4c645c]
call fcn.00414a20
mov esi, dword [0x4c6458]
movzx ebx, ax
call fcn.00414a90
movzx ecx, ax
cmp ecx, 0xffffffff
je 0x428221
cmp ebx, 0xffffffff
je 0x428221
mov eax, 3
shl ax, cl
shl bx, cl
not ax
and ax, word [edi + 0xec]
or ax, bx
mov word [edi + 0xec], ax
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
xor edi, edi
mov ecx, ebx
call fcn.00420fc0
mov ecx, dword [esp + 0x18]
mov byte [ecx + 0xeb], al
cmp al, 0x64
jbe 0x42824d
mov byte [ecx + 0xeb], 2
mov eax, 1
jmp 0x428ca7
mov ecx, dword [edi + 0xd0]
mov eax, dword [0x4c6458]
push ecx
call fcn.00414700
mov dword [edi + 0xd0], eax
add esp, 4
mov eax, 1
jmp 0x428ca7
xor edi, edi
mov ecx, ebx
call fcn.00420fc0
cmp eax, 0x64
ja 0x428293
mov edx, dword [esp + 0x18]
mov byte [edx + 0xf2], al
mov eax, 1
jmp 0x428ca7
mov eax, dword [0x4c6460]
push str.Play
push eax
call fcn.0048cd49
add esp, 8
test eax, eax
jne 0x4282f4
mov ecx, dword [0x4c6458]
cmp word [ecx], ax
je 0x4282cf
xor edi, edi
mov ecx, ebx
call fcn.00420fc0
mov edx, dword [esp + 0x18]
mov dword [edx + 0x60], eax
mov eax, dword [0x4c645c]
cmp word [eax], 0
je 0x42832f
mov edi, 1
mov ecx, ebx
call fcn.00420fc0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x68], eax
mov eax, edi
jmp 0x428ca7
mov edx, dword [0x4c6458]
cmp word [edx], 0
je 0x428310
xor edi, edi
mov ecx, ebx
call fcn.00420fc0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x5c], eax
mov edx, dword [0x4c645c]
cmp word [edx], 0
je 0x42832f
mov edi, 1
mov ecx, ebx
call fcn.00420fc0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x64], eax
mov eax, 1
jmp 0x428ca7
mov edx, dword [0x4c645c]
push str.Play
push edx
call fcn.0048cd49
add esp, 8
xor edi, edi
mov ecx, ebx
test eax, eax
jne 0x428369
call fcn.00420fc0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x70], eax
lea eax, [edi + 1]
jmp 0x428ca7
call fcn.00420fc0
mov edx, dword [esp + 0x18]
mov dword [edx + 0x6c], eax
mov eax, 1
jmp 0x428ca7
xor edi, edi
mov ecx, ebx
call fcn.00420fc0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x54], eax
lea eax, [edi + 1]
jmp 0x428ca7
xor edi, edi
mov ecx, ebx
call fcn.00420fc0
mov edx, dword [esp + 0x18]
mov dword [edx + 0x58], eax
lea eax, [edi + 1]
jmp 0x428ca7
mov ecx, dword [0x4c6458]
mov eax, 0x4a7978
call fcn.00473c80
mov ecx, ebx
test eax, eax
je 0x4283e8
mov dword [edi], 0xffffffff
mov dword [edi + 4], 0xffffffff
xor edi, edi
call fcn.00420fc0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x24], eax
lea eax, [edi + 1]
jmp 0x428ca7
mov dword [edi + 0x24], 0xffffffff
xor edi, edi
call fcn.00420fc0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 4], edx
mov edx, eax
or edx, dword [ecx + 4]
mov dword [ecx], eax
jne 0x42840f
mov dword [ecx], 0xa
mov dword [ecx + 4], edi
mov eax, 1
jmp 0x428ca7
mov esi, dword [0x4c6458]
push 7
call fcn.004144a0
add esp, 4
cmp eax, 7
je 0x42843a
cmp eax, 1
sete al
mov byte [edi + 0xef], al
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov esi, dword [0x4c6458]
call fcn.00414110
dec eax
cmp eax, 5
ja case.default.0x42845d
jmp dword [eax*4 + 0x42961c]
mov ebx, dword [esp + 0x14]
mov eax, 1
mov dword [edi + 0x20], eax
jmp 0x428ca7
mov ebx, dword [esp + 0x14]
mov dword [edi + 0x20], 2
mov eax, 1
jmp 0x428ca7
mov ebx, dword [esp + 0x14]
mov dword [edi + 0x20], 4
mov eax, 1
jmp 0x428ca7
mov ebx, dword [esp + 0x14]
mov dword [edi + 0x20], 3
mov eax, 1
jmp 0x428ca7
mov ebx, dword [esp + 0x14]
mov byte [edi + 0xe5], 1
mov eax, 1
jmp 0x428ca7
mov ebx, dword [esp + 0x14]
mov byte [edi + 0xe5], 0
mov eax, 1
jmp 0x428ca7
mov ecx, dword [0x4c6458]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push str.Parameter_1_invalid.
call fcn.0042df10
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov edx, dword [0x4c6458]
push 5
push str.Float
push edx
call fcn.0048d597
add esp, 0xc
test eax, eax
jne 0x4285f0
lea edi, [eax + 1]
mov ecx, ebx
call fcn.00420f30
cmp eax, 0x1e
jb 0x428532
mov eax, edi
jmp 0x428ca7
mov ecx, dword [esp + 0x14]
call fcn.00420fc0
mov edi, eax
mov eax, dword [0x4c645c]
push 0x2e
push eax
mov ebx, edx
call fcn.0048db21
mov esi, eax
add esp, 8
mov dword [esp + 0x40], esi
test esi, esi
je 0x428567
add esi, 2
call fcn.004130a0
mov esi, dword [esp + 0x40]
jmp 0x42856b
xor eax, eax
xor edx, edx
add edi, eax
adc ebx, edx
add edi, 2
adc ebx, 0
mov dword [esp + 0x34], ebx
js 0x428593
jg 0x428585
cmp edi, 0xff
jbe 0x428593
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov eax, dword [0x4c645c]
push 0
push 1
push 1
push 1
call fcn.00473730
add esp, 0x10
mov ecx, 0x4a7980
test eax, eax
jne 0x4285b6
mov ecx, 0x4ab02c
mov eax, 0x4ab02c
test esi, esi
jne 0x4285c4
mov eax, 0x4a6820
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [0x4c645c]
push eax
push ecx
add edx, 0x74
push 0x4a7984
push edx
call fcn.0048d153
mov ebx, dword [esp + 0x28]
add esp, 0x14
mov eax, 1
jmp 0x428ca7
mov eax, dword [0x4c6458]
push 7
push str.Integer
push eax
call fcn.0048d597
add esp, 0xc
test eax, eax
jne case.0x428621.69
mov ecx, dword [0x4c645c]
movzx eax, word [ecx]
add eax, 0xffffffbc
cmp eax, 0x24
ja case.0x428621.69
movzx edx, byte [eax + 0x429640]
jmp dword [edx*4 + 0x429634]
mov byte [edi + 0xf1], 0x44
mov eax, 1
jmp 0x428ca7
mov al, byte [ecx]
mov byte [edi + 0xf1], al
mov eax, 1
jmp 0x428ca7
mov ecx, dword [0x4c6460]
push ecx
mov ecx, dword [0x4c645c]
call fcn.0043b860
jmp 0x428ca7
mov ecx, dword [0x4c646c]
mov dl, 3
cmp dl, byte [ebx + 1]
mov edx, dword [0x4c6468]
sbb eax, eax
and eax, dword [0x4c640c]
push eax
mov eax, dword [0x4c6464]
push ecx
mov ecx, dword [0x4c6460]
push edx
mov edx, dword [0x4c6458]
push eax
mov eax, dword [0x4c645c]
push ecx
push edx
push 0x4c8640
call fcn.00469890
jmp 0x428ca7
mov eax, dword [0x4c6464]
mov ecx, dword [0x4c6460]
mov edx, dword [0x4c6458]
push eax
push ecx
mov ecx, dword [0x4c645c]
push 0x4c8640
call fcn.0045bcd0
jmp 0x428ca7
mov ecx, dword [0x4c645c]
mov dl, 2
cmp dl, byte [ebx + 1]
mov edx, dword [0x4c6458]
sbb eax, eax
and eax, dword [0x4c6408]
push eax
mov eax, dword [0x4c6460]
push ecx
push edx
push ebx
call fcn.0045c5f0
jmp 0x428ca7
mov eax, dword [0x4c6464]
mov ecx, dword [0x4c6460]
mov edx, dword [0x4c645c]
push eax
push ecx
push edx
push ebx
call fcn.0045d580
jmp 0x428ca7
mov esi, dword [0x4c6458]
call fcn.004145a0
cmp eax, 7
ja case.0x428729.3
jmp dword [eax*4 + 0x429668]
cmp byte [0x4c6610], 0
jne case.0x428729.3
call fcn.0042d950
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
cmp byte [0x4c6610], 0
je case.0x428729.3
call fcn.0042d950
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov edi, 1
mov ecx, ebx
call fcn.00420fc0
mov esi, dword [0x4c6458]
test eax, eax
setne cl
movzx edx, cl
push edx
call fcn.004144f0
push eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.0042d9a0
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov esi, dword [0x4c6458]
push 7
call fcn.004144a0
add esp, 4
cmp eax, 7
je 0x4287bd
cmp eax, 1
sete cl
mov byte [edi + 0xf0], cl
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov esi, dword [0x4c6458]
call fcn.00414550
mov byte [edi + 0xee], al
cmp al, 4
jne 0x4287e7
mov byte [edi + 0xee], 0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov esi, dword [0x4c6458]
push 7
call fcn.004144a0
add esp, 4
cmp eax, 7
je 0x428816
cmp eax, 1
sete dl
mov byte [edi + 0xe6], dl
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov esi, dword [0x4c6458]
push 7
call fcn.004144a0
add esp, 4
cmp eax, 7
je 0x428845
cmp eax, 1
sete al
mov byte [edi + 0xe7], al
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov esi, dword [0x4c6458]
call fcn.00414620
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x428871.3
movzx ecx, byte [ecx + 0x4296a0]
jmp dword [ecx*4 + 0x429688]
mov bl, 1
call fcn.0042daa0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
xor bl, bl
call fcn.0042daa0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov ebx, dword [esp + 0x14]
mov dword [0x4c29c8], eax
mov eax, 1
jmp 0x428ca7
or byte [0x4c6ec6], 2
cmp dword [0x4c65ec], 0
mov byte [0x4c6ec5], 1
jne case.0x428871.3
mov edx, dword [0x4c3acc]
movzx eax, word [edx]
push eax
call fcn.00408030
mov ebx, dword [esp + 0x18]
add esp, 4
mov eax, 1
jmp 0x428ca7
mov byte [0x4c6ec5], 0
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov esi, dword [0x4c6458]
mov edi, str._a_a_a_v
mov al, 0x90
call fcn.004430c0
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov esi, dword [0x4c6458]
mov edi, 0x4c29c0
mov al, 0x14
call fcn.004430c0
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov esi, dword [0x4c6458]
mov edi, 0x4c29c4
mov al, 0x91
call fcn.004430c0
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov al, 1
mov edx, 0x4c8640
call fcn.00416090
mov eax, 1
jmp 0x428ca7
xor edi, edi
mov ecx, ebx
call fcn.00420fc0
jmp 0x427113
mov ecx, dword [0x4c645c]
mov ebx, dword [0x4c6464]
mov edx, dword [0x4c6460]
push ecx
mov ecx, dword [0x4c6468]
call fcn.0046ff00
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov edx, dword [0x4c6458]
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4c6464]
mov ebx, dword [0x4c6460]
push edx
mov edx, dword [0x4c645c]
push eax
call fcn.00470150
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
cmp byte [ebx + 1], 3
mov edx, dword [0x4c645c]
sbb ecx, ecx
not ecx
and ecx, dword [0x4c6460]
push ecx
push edx
mov edx, dword [0x4c6458]
push ebx
call fcn.00470290
jmp 0x428ca7
cmp byte [ebx + 1], 2
jae 0x428a16
mov edi, dword [edi + 0x14]
test edi, edi
je 0x428a16
lea eax, [edi + 0x808]
push eax
mov eax, dword [edi + 4]
lea ecx, [edi + 8]
push ecx
push ebx
call fcn.00470300
jmp 0x428ca7
mov ecx, dword [0x4c645c]
lea edx, [esp + 0x2f]
push edx
lea eax, [esp + 0x5c]
push eax
push 2
push ecx
call fcn.00413d70
mov esi, eax
mov eax, dword [esp + 0x68]
add esp, 0x10
test eax, eax
jne 0x428a4c
mov eax, dword [0x4c6460]
mov ecx, dword [0x4c6464]
mov dword [esp + 0x58], eax
jmp 0x428a52
mov ecx, dword [0x4c6460]
push ecx
push eax
push ebx
mov eax, esi
call fcn.00470300
cmp byte [esp + 0x2f], 0
mov edi, eax
je 0x428a70
test esi, esi
je 0x428a70
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
jmp 0x428ca7
cmp byte [ebx + 1], 2
jae 0x428aaa
mov edi, dword [edi + 0x14]
test edi, edi
je 0x428aaa
mov edx, dword [0x4c6458]
push edx
lea eax, [edi + 0x808]
push eax
mov eax, dword [edi + 4]
lea ecx, [edi + 8]
push ecx
mov ecx, dword [edi + 0x1008]
push ebx
call fcn.00470720
jmp 0x428ca7
mov ecx, dword [0x4c645c]
lea edx, [esp + 0x2f]
push edx
lea eax, [esp + 0x5c]
push eax
push 2
push ecx
call fcn.00413d70
mov edi, eax
mov eax, dword [esp + 0x68]
add esp, 0x10
test eax, eax
jne 0x428ae6
mov eax, dword [0x4c6460]
mov ecx, dword [0x4c6464]
mov edx, dword [0x4c6468]
mov dword [esp + 0x58], eax
jmp 0x428af2
mov ecx, dword [0x4c6460]
mov edx, dword [0x4c6464]
mov esi, dword [0x4c6458]
push edx
push ecx
push eax
call fcn.00413fe0
mov edx, dword [esp + 0x20]
mov ecx, eax
push edx
mov eax, edi
call fcn.00470720
cmp byte [esp + 0x2f], 0
mov esi, eax
je 0x428b22
test edi, edi
je 0x428b22
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [esp + 0x14]
mov eax, esi
jmp 0x428ca7
cmp byte [ebx + 1], 1
jae 0x428ba6
mov edi, dword [edi + 0x14]
test edi, edi
je 0x428ba6
cmp dword [edi + 0x1008], 0xfffffffe
lea eax, [edi + 0x808]
jne 0x428b8c
push eax
add edi, 8
push edi
push str._s_s
mov esi, 0x400
lea edi, [esp + 0x10c]
call fcn.004738d0
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx + 0x14]
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x20]
add esp, 0xc
push eax
push ecx
mov eax, 0x4ab02c
mov ebx, edi
call fcn.00470b30
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov edx, dword [edi + 4]
mov ecx, dword [esp + 0x14]
push edx
lea ebx, [edi + 8]
push ecx
call fcn.00470b30
mov ebx, dword [esp + 0x14]
jmp 0x428ca7
mov ecx, dword [0x4c6458]
lea edx, [esp + 0x2f]
push edx
lea eax, [esp + 0x5c]
push eax
push 2
push ecx
call fcn.00413d70
mov ebx, dword [esp + 0x68]
add esp, 0x10
mov esi, eax
test ebx, ebx
jne 0x428bdc
mov ebx, dword [0x4c645c]
mov eax, dword [0x4c6460]
mov dword [esp + 0x58], ebx
jmp 0x428be1
mov eax, dword [0x4c645c]
mov edx, dword [esp + 0x14]
push esi
push edx
call fcn.00470b30
cmp byte [esp + 0x2f], 0
mov edi, eax
je 0x428c00
test esi, esi
je 0x428c00
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [esp + 0x14]
mov eax, edi
jmp 0x428ca7
mov esi, dword [0x4c6458]
call fcn.00414060
mov esi, eax
cmp esi, 0xffffffff
jne 0x428c28
mov eax, dword [0x4c6458]
push eax
jmp 0x4284e5
call fcn.00474e70
test eax, eax
je 0x428c37
mov dword [edi + 0xcc], esi
mov ebx, dword [esp + 0x14]
mov eax, 1
jmp 0x428ca7
mov ecx, dword [0x4c6458]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, 1
jmp 0x428ca7
xor edi, edi
mov ecx, ebx
call fcn.00420fc0
push eax
call fcn.00454820
xor edx, edx
add esp, 4
test al, al
setne dl
mov eax, edx
jmp 0x428ca7
mov eax, dword [0x4c6458]
call fcn.00414c50
cmp eax, 0xffffffff
jne 0x428c98
mov eax, dword [0x4c6458]
push eax
push 0
push str.Parameter_1_invalid.
mov ecx, ebx
call fcn.0042df10
jmp 0x428ca7
mov dword [edi + 0xf8], eax
mov eax, 1
jmp 0x428ca7
xor eax, eax
mov dword [esp + 0x24], eax
test eax, eax
je 0x424d0d
cmp dword [ebp + 8], 3
je 0x424d0d
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x14], ecx
cmp dword [esp + 0x14], 0
je 0x424d08
mov edi, dword [esp + 0x54]
mov ebx, dword [esp + 0x14]
xor esi, esi
jmp 0x424a28
mov eax, dword [esp + 0x24]
cmp eax, 7
jne 0x424d0d
jmp 0x424d08
test esi, esi
je 0x428d4f
cmp dword [esi + 8], 0
jne 0x428d4f
mov eax, dword [0x4c6400]
test eax, eax
je 0x428d40
cmp byte [eax + 0x17], 0
jne 0x428d0e
mov ecx, dword [eax + 0xc]
jmp 0x428d10
mov ecx, eax
test byte [ecx + 0x15], 2
je 0x428d40
mov edi, esi
call fcn.00413410
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [esi + 8], 0
mov ecx, dword [0x4c6458]
mov dword [esi], ecx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [ebx + 0x18]
test ebx, ebx
je 0x428d95
mov eax, dword [ebx + 0x18]
mov ecx, dword [esp + 0x4c]
mov dword [ecx], eax
cmp byte [eax], 0x6c
jne 0x424d08
mov edx, dword [eax + 0x14]
mov dword [ecx], edx
jmp 0x424d08
mov eax, 5
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [ebx + 0x18]
test ebx, ebx
je 0x428dbe
mov eax, dword [esp + 0x4c]
mov dword [eax], ebx
mov eax, 6
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4c645c]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push str.Parameter_2_invalid.
call fcn.0042df10
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4c6460]
mov ecx, dword [esp + 0x14]
push edx
push 0
push str.Parameter_3_invalid.
call fcn.0042df10
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [edi + 0x104], 0
jne 0x428e4a
lea esi, [edi + 0xfc]
call fcn.0042e610
xor eax, eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test esi, esi
je 0x428e70
lea esi, [esp + 0x30]
call fcn.0042e610
test ebx, ebx
je 0x428ea7
cmp ebx, 8
je 0x428ea7
mov ecx, dword [0x4c8c70]
push 0x4ab02c
push 0
push str.Jumps_cannot_exit_a_FINALLY_block.
call fcn.0042df10
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, ebx
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x4c]
mov dword [ecx], eax
jmp 0x424d08
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x4c]
mov dword [ecx], edx
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [ebx + 1], 0
jne 0x428f1c
push 0x4ab02c
push 0
push str.An_exception_was_thrown.
mov ecx, ebx
call fcn.0042dc50
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [edi + 0xfc], 0
lea esi, [edi + 0xfc]
mov dword [esp + 0x7c], esi
je 0x428f3c
call fcn.0042e610
mov edi, dword [esp + 0x54]
mov ebx, dword [esp + 0x14]
push 0x10
call fcn.0048e99a
mov esi, eax
add esp, 4
test esi, esi
jne 0x428f75
push 0x4ab02c
push eax
push str.Out_of_memory.
mov ecx, ebx
call fcn.0042df10
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4c8568]
test eax, eax
jne 0x428fd9
mov edx, dword [ebx + 8]
movzx eax, word [edx + 2]
mov ecx, 0xff
mov ebx, ecx
cmp ax, cx
jb 0x428f93
mov ebx, eax
inc ebx
lea edx, [ebx + ebx]
push edx
call fcn.0048cdd4
add esp, 4
mov dword [0x4c8568], eax
test eax, eax
jne 0x428fdf
mov ecx, dword [esp + 0x14]
push 0x4ab02c
push eax
push str.Out_of_memory.
mov dword [0x4c856c], eax
call fcn.0042df10
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [0x4c856c]
xor ecx, ecx
push ecx
mov dword [esp + 0x40], eax
mov dword [esp + 0x78], eax
lea eax, [esp + 0x84]
push eax
lea edx, [esp + 0x78]
push edx
lea eax, [esp + 0x48]
push eax
lea edx, [esp + 0x84]
push edx
push esi
lea eax, [esp + 0x3c]
push eax
push ecx
mov dword [0x4c8568], ecx
mov dword [0x4c856c], ecx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], ecx
mov ecx, dword [esp + 0x34]
push ecx
mov dword [esp + 0x94], ebx
mov dword [esi + 8], 0x41
call fcn.00457f70
mov ebx, eax
cmp ebx, dword [esp + 0x3c]
jne 0x42904a
mov dword [esi + 0xc], ebx
jmp 0x42908f
cmp dword [esp + 0x3c], 0
mov dword [esi + 0xc], 0
je 0x42908f
mov eax, dword [0x4c8568]
test eax, eax
je 0x42907c
push eax
call fcn.0048e3af
add esp, 4
cmp dword [0x4c856c], 0x400000
jbe 0x42907c
dec dword [0x4c8570]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x70]
mov dword [0x4c8568], edx
mov dword [0x4c856c], eax
test ebx, ebx
jne 0x4290b7
push esi
call fcn.0048e8d9
mov eax, dword [esp + 0x28]
add esp, 4
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [esi + 8], 0x41
jne 0x4290c6
mov dword [esi + 8], 0
mov dword [esi], ebx
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x7c]
mov dword [edi + 0x100], ecx
mov dword [edx], esi
xor eax, eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4c3acc]
cmp word [eax], 0
jne 0x42911e
cmp dword [0x4c7eb8], 0
jne 0x42911e
cmp dword [0x4c65e8], 0
jne 0x42911e
cmp dword [0x4c65ec], 0
jne 0x42911e
cmp byte [0x4c6608], 0
je case.0x424d3a.222
mov eax, 8
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x14]
xor edi, edi
call fcn.00420fc0
push eax
push 0x4c8640
xor eax, eax
lea edx, [edi + 9]
call fcn.004160c0
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je 0x424d08
push 0x4ab02c
push 0
push str.A__return__must_be_encountered_prior_to_this___.
mov ecx, ebx
call fcn.0042df10
mov ecx, dword [esp + 0x934]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc