Function at 0x424fc0
Capabilities:
Check for time delay via gettickcount
Find taskbar
Move file
Print debug messages
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x49587b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x568
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
xor edi, edi
mov dword [esp + 0xc4], ecx
cmp eax, edi
jne 0x424ffb
lea eax, [esp + 0xa8]
mov ebx, dword [0x4a6440]
mov edx, eax
mov esi, ecx
mov dword [esp + 0x80], eax
mov dword [edx], edi
mov dword [esp + 0x74], ebx
mov dword [esp + 0x48], esi
cmp ecx, edi
je 0x4292da
mov edi, edi
cmp dword [0x4ac3f8], edi
je 0x425054
cmp dword [0x4ac3e8], edi
je 0x425042
mov eax, dword [0x4ac3e0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4ac3e8], edi
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x4ac3f8], edi
mov dword [0x4ac3e0], edi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov edx, dword [0x4a6440]
mov ecx, eax
sub ecx, dword [0x4ac39c]
cmp ecx, dword [edx + 0xb4]
jbe 0x42509f
push 0
push 0
push 0
push 0
lea eax, [esp + 0x134]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x425098
push 1
push 0xffffffffffffffff
call fcn.00401330
add esp, 8
call edi
mov dword [0x4ac39c], eax
cmp byte [ebx + 0xc8], 0
jne 0x4250d0
cmp byte [ebx + 0xca], 0
jne 0x4250d0
mov edx, dword [0x4ac390]
cmp edx, 0xffffffff
jle 0x4250d0
mov ecx, dword [ebx + 0x28]
cmp ecx, edx
jle 0x4250cc
mov byte [ebx + 0xc8], 1
jmp 0x4250d0
inc ecx
mov dword [ebx + 0x28], ecx
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
cmp ecx, 0xffffffff
jl 0x4250f3
jg 0x4250e1
cmp edx, 0xffffffff
jbe 0x4250f3
cmp dword [0x4ac38c], ecx
jg 0x425105
jl 0x4250f3
cmp dword [0x4ac388], edx
jae 0x425105
mov ecx, dword [ebx + 0x24]
cmp ecx, 0xffffffff
jle 0x425111
sub eax, dword [0x4ac398]
cmp eax, ecx
jb 0x425111
push 1
push 0xa
call fcn.00401330
add esp, 8
cmp byte [ebx + 0xd4], 0
je 0x425138
lea ebx, [ebx]
push 1
push 0x8000012f
call fcn.00401330
add esp, 8
cmp byte [ebx + 0xd4], 0
jne 0x425120
mov dword [0x4ac0f0], esi
cmp byte [ebx + 0xd5], 0
je 0x42517c
mov ecx, dword [0x4abcc0]
mov dword [ecx*4 + 0x4ab680], esi
call edi
mov ecx, dword [0x4abcc0]
mov dword [ecx*4 + 0x4a9628], eax
inc ecx
mov dword [0x4abcc0], ecx
cmp ecx, 0x190
jl 0x42517c
mov dword [0x4abcc0], 0
mov al, byte [esi]
cmp al, 1
je 0x4251a7
cmp al, 0x6b
je 0x4251a7
cmp al, 0x72
je 0x4251a7
mov edi, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push edi
push esi
call fcn.00459560
mov dword [esp + 0x58], eax
cmp eax, 1
jne 0x4292df
jmp 0x4251aa
mov edi, dword [ebp + 0xc]
mov cl, byte [esi]
mov byte [esp + 0xd0], cl
cmp cl, 9
jb 0x4252f8
cmp cl, 0x20
ja 0x4252f8
add dword [0x4ac388], 1
push esi
adc dword [0x4ac38c], 0
call fcn.00429cd0
mov ebx, 3
cmp eax, ebx
jne 0x425272
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x425211
mov edi, edi
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x5c]
push edx
push edi
push 2
call fcn.00424fc0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
mov ecx, dword [esi + 0x14]
cmp edx, ecx
je 0x4251f0
jmp 0x425225
lea eax, [esp + 0x5c]
push eax
push edi
push ebx
call fcn.00424fc0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
cmp edx, esi
je 0x4292c2
cmp dword [ebp + 8], ebx
je 0x4292f6
cmp eax, 1
jne 0x4292f6
test edx, edx
je 0x425258
mov ecx, dword [edx + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x4292d1
mov dword [esp + 0x48], edx
jmp 0x4292be
mov esi, dword [esi + 0x18]
cmp byte [esi], 0x21
mov dword [esp + 0x48], esi
jne 0x4292be
mov edx, esi
mov eax, dword [edx + 0x18]
jmp 0x4292ba
mov esi, dword [esi + 0x18]
cmp byte [esi], 0x21
mov dword [esp + 0x48], esi
jne 0x4252ea
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x4252a7
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x5c]
push edx
push edi
push 2
call fcn.00424fc0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
mov ecx, dword [esi + 0x14]
cmp edx, ecx
je 0x425286
jmp 0x4252bb
lea eax, [esp + 0x5c]
push eax
push edi
push ebx
call fcn.00424fc0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
cmp dword [ebp + 8], ebx
je 0x4292f6
cmp eax, 1
jne 0x4292f6
test edx, edx
je 0x425d27
mov ecx, dword [edx + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x429319
mov dword [esp + 0x48], edx
jmp 0x4292be
cmp dword [ebp + 8], ebx
je 0x4292da
jmp 0x4292be
movzx eax, cl
add eax, 0xffffffa0
cmp eax, 0x7e
ja case.0x42530e.98
movzx eax, byte [eax + 0x4297f8]
jmp dword [eax*4 + 0x4297bc]
mov ecx, 1
add dword [0x4ac388], ecx
adc dword [0x4ac38c], 0
mov eax, dword [esi + 0x18]
test eax, eax
je 0x4253a8
mov edx, eax
xor eax, eax
cmp dword [esi + 0xc], ecx
mov dword [esp + 0x98], edx
sete al
mov edi, eax
test edi, edi
je 0x42535f
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x94]
mov dword [eax + 0x98], ecx
mov dword [eax + 0x94], 0
mov ecx, edx
call fcn.00401210
mov dword [esp + 0x58], eax
test edi, edi
je 0x425388
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x98]
mov dword [ecx + 0x94], edx
mov dword [ecx + 0x98], 0
test eax, eax
je 0x4292df
cmp eax, 8
je 0x4292df
cmp dword [ebp + 8], 3
je 0x4255dd
jmp 0x4292b7
push esi
mov bl, cl
call fcn.00442960
mov edx, eax
mov dword [esp + 0x98], edx
test edx, edx
je 0x429487
mov ecx, dword [esp + 0x74]
cmp dword [ecx + 0x94], 0
je 0x4253e4
mov eax, dword [edx + 8]
call fcn.00442a10
test eax, eax
je 0x4253e4
mov edi, 1
jmp 0x425345
xor edi, edi
jmp 0x42535f
add dword [0x4ac388], 1
adc dword [0x4ac38c], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x98], eax
test eax, eax
jne 0x42541e
push esi
mov bl, 1
call fcn.00442960
mov dword [esp + 0x98], eax
test eax, eax
je 0x429487
cmp dword [ebp + 8], 3
mov ecx, dword [esp + 0x74]
mov dword [ecx + 0x9c], eax
je 0x429316
mov ecx, dword [eax + 8]
mov edx, dword [esi + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x429316
mov dword [esp + 0x48], ecx
jmp 0x4292be
add dword [0x4ac388], 1
mov eax, dword [esp + 0xc4]
adc dword [0x4ac38c], 0
mov edi, dword [eax + 0xc]
test edi, edi
jne 0x42549a
mov eax, dword [0x4a9cc0]
cmp byte [eax], 0
mov ebx, eax
je 0x425498
mov edi, dword [0x4abdb8]
test edi, edi
je 0x425498
lea esp, [esp]
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00484e01
add esp, 8
test eax, eax
je 0x42549a
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x425480
xor edi, edi
mov dword [esp + 0x58], 1
mov dword [esp + 0x78], 0
test edi, edi
je 0x4255b6
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x4254d2
push 0x49a15c
push eax
call fcn.00484e01
add esp, 8
test eax, eax
jne 0x4254d2
mov al, 1
jmp 0x4254d4
xor al, al
lea ecx, [esp + 0x98]
push ecx
push eax
push edi
xor eax, eax
call fcn.00477ae0
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x98]
test eax, eax
je 0x4255b6
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x1c]
test edx, edx
je 0x425547
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x42551b
lea esp, [esp]
cmp edx, ecx
je 0x425547
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x425510
push 0x4987f9
push 0
push str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov ecx, esi
call fcn.0042e430
xor eax, eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [esp + 0x74]
mov edx, dword [ebx + 0x94]
test edx, edx
je 0x4255eb
call fcn.00442a10
test eax, eax
je 0x4255eb
mov edi, 1
mov dword [ebx + 0x98], edx
mov dword [ebx + 0x94], 0
mov ecx, dword [esp + 0x98]
call fcn.00401210
mov dword [esp + 0x58], eax
test edi, edi
je 0x4255a5
mov edx, dword [ebx + 0x98]
mov dword [ebx + 0x94], edx
mov dword [ebx + 0x98], 0
test eax, eax
je 0x4292df
cmp eax, 8
je 0x4292df
cmp dword [esp + 0x78], 0
mov edx, dword [esp + 0xc4]
sete al
movzx ecx, al
push ecx
push edx
call fcn.0042e260
cmp dword [ebp + 8], 3
jne 0x4292b7
mov eax, dword [esp + 0x58]
cmp eax, 7
jne 0x4292df
jmp 0x4292da
xor edi, edi
jmp 0x42557b
mov ebx, dword [esi + 0xc]
mov eax, ebx
dec eax
mov dword [esp + 0x50], ebx
je 0x42564c
sub eax, 3
je 0x42562b
sub eax, 5
jne 0x4256e1
mov ecx, dword [0x4a9cc4]
push eax
push eax
push ecx
mov eax, 1
call fcn.00413730
add esp, 0xc
mov dword [esp + 0xa4], eax
jmp 0x4256e1
mov edx, dword [0x4a9cc0]
push 0
push 0
push edx
xor eax, eax
call fcn.00413730
add esp, 0xc
mov dword [esp + 0xa4], eax
jmp 0x4256e1
movzx eax, byte [esi + 1]
sub eax, 0
je 0x4256d8
dec eax
mov eax, dword [0x4a9cc0]
je 0x4256a0
push str.Read
push eax
call fcn.00484e01
add esp, 8
test eax, eax
jne 0x425678
lea ebx, [eax + 5]
jmp 0x4256dd
mov ecx, dword [0x4a9cc0]
push 0
push 0
push ecx
xor eax, eax
call fcn.00413730
xor ebx, ebx
add esp, 0xc
test eax, eax
setne bl
mov dword [esp + 0xa4], eax
add ebx, 3
jmp 0x4256dd
push 0
push 1
push 1
push 1
call fcn.00471f70
add esp, 0x10
test eax, eax
jne 0x4256d8
mov edx, dword [0x4a9cc0]
push eax
push eax
push edx
call fcn.00413730
xor ebx, ebx
add esp, 0xc
test eax, eax
setne bl
mov dword [esp + 0xa4], eax
add ebx, 3
jmp 0x4256dd
mov ebx, 2
mov dword [esp + 0x50], ebx
lea eax, [ebx - 3]
cmp eax, 7
ja case.0x4256f4.5
movzx eax, byte [eax + 0x429884]
jmp dword [eax*4 + 0x429878]
mov esi, dword [0x4a9cc4]
call fcn.004140e0
mov dword [esp + 0x90], eax
test eax, eax
je 0x429413
mov eax, dword [0x4a9cc8]
cmp byte [eax], 0x31
jne 0x425739
cmp byte [eax + 1], 0
jne 0x425739
mov esi, dword [esp + 0x48]
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x9c], 1
jmp case.0x4256f4.5
mov esi, dword [esp + 0x48]
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x9c], 0
jmp case.0x4256f4.5
cmp ebx, 4
jne 0x425796
mov esi, dword [0x4a9cc8]
call fcn.004140e0
mov dword [esp + 0x90], eax
mov eax, dword [0x4a9ccc]
cmp byte [eax], 0x31
jne 0x425785
cmp byte [eax + 1], 0
jne 0x425785
mov esi, dword [esp + 0x48]
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x9c], 1
jmp 0x4257bd
mov esi, dword [esp + 0x48]
mov edi, dword [ebp + 0xc]
mov byte [esp + 0x9c], 0
jmp 0x4257bd
mov eax, dword [0x4a9cc8]
call fcn.00414130
mov dword [esp + 0x90], eax
shr eax, 2
and al, 1
mov byte [esp + 0x9c], al
je 0x4257bd
and dword [esp + 0x90], 0xfffffffb
cmp dword [esp + 0x90], 0
je 0x429441
mov byte [esp + 0x57], 0
mov dword [esp + 0x5c], 0
mov eax, dword [esi + 0x18]
cmp byte [eax], 0x6c
mov dword [esp + 0x64], eax
jne 0x4257ef
mov ebx, eax
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x64], ecx
jmp 0x4257f1
xor ebx, ebx
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
mov dword [esp + 0xb4], ecx
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x8c], ecx
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0xb0], edx
mov edx, dword [eax + 0x10]
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x78], edx
mov edx, dword [eax + 0x18]
mov dword [esp + 0x4c], edx
cmp ecx, 8
je 0x42583f
mov dword [eax + 8], 1
mov dword [eax + 0xc], 0
lea eax, [ecx - 2]
cmp eax, 8
ja case.default.0x42584b
jmp dword [eax*4 + 0x42988c]
cmp byte [esi + 1], 0
jbe 0x42586e
xor edi, edi
mov ecx, esi
call fcn.00420560
mov edi, dword [ebp + 0xc]
mov byte [esp + 0xc8], 0
jmp 0x42587a
xor eax, eax
xor edx, edx
mov byte [esp + 0xc8], 1
mov ecx, dword [esp + 0xc8]
push ecx
push edx
push eax
push ebx
lea edx, [esp + 0x6c]
push edx
lea eax, [esp + 0x6b]
push eax
push esi
mov ebx, edi
call fcn.0042b7e0
mov dword [esp + 0x58], eax
jmp case.default.0x42584b
mov esi, dword [esp + 0x48]
lea ecx, [esp + 0x5c]
push ecx
lea edx, [esp + 0x5b]
push edx
mov ebx, edi
call fcn.0042b9a0
mov dword [esp + 0x58], eax
jmp case.default.0x42584b
push ebx
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x5f]
push ecx
push edi
push esi
call fcn.0042bb90
mov dword [esp + 0x58], eax
jmp case.default.0x42584b
mov edx, dword [0x4a9cc8]
push 0x49c284
push edx
call fcn.00484e01
add esp, 8
push ebx
test eax, eax
je 0x42590c
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x5f]
push ecx
push edi
push esi
call fcn.0042c9e0
mov dword [esp + 0x58], eax
jmp case.default.0x42584b
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x5f]
push eax
push edi
push esi
call fcn.0042cc90
mov dword [esp + 0x58], eax
jmp case.default.0x42584b
lea esi, [esp + 0xec]
call fcn.00414780
mov dword [esp + 0x57c], 0
mov edx, dword [0x4a9cc4]
cmp byte [edx], 0
je 0x425995
mov ecx, dword [esp + 0x74]
mov eax, dword [ecx + 0xd8]
and eax, 0x7fffffff
push 0x30c
mov ecx, esi
call fcn.0046fc90
test al, al
je 0x425995
mov edx, esi
push edx
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x60]
push eax
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x5f]
push ecx
mov ecx, dword [0x4a9cc8]
push edx
push eax
mov edx, ebx
call fcn.0042cf50
mov dword [esp + 0x58], eax
call fcn.004146f0
jmp 0x42599d
mov dword [esp + 0x58], 1
lea ecx, [esp + 0xec]
mov dword [esp + 0x57c], 0xffffffff
call fcn.004147d0
mov esi, dword [esp + 0x48]
jmp case.default.0x42584b
cmp dword [esp + 0x50], 3
mov eax, dword [0x4a9cc0]
je 0x4259ce
mov eax, dword [0x4a9cc4]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x90]
push eax
push ecx
push edx
push ebx
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x6b]
push ecx
push edi
mov ecx, esi
call fcn.0042bfd0
mov dword [esp + 0x58], eax
jmp case.default.0x42584b
cmp dword [esp + 0x50], 4
lea edx, [esp + 0x87]
push edx
jne 0x425a28
mov eax, dword [0x4a9cc0]
push 0
push eax
xor eax, eax
call fcn.00413730
mov ecx, dword [0x4a9cc4]
mov dword [esp + 0xac], ecx
jmp 0x425a41
mov ecx, dword [0x4a9cc4]
lea eax, [esp + 0xa4]
push eax
push ecx
mov eax, 1
call fcn.00413730
add esp, 0xc
mov dword [esp + 0x50], eax
test eax, eax
je 0x425a9b
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
push edx
mov edx, dword [esp + 0xa0]
push eax
mov eax, dword [esp + 0x98]
push ecx
push edx
push eax
push ebx
lea ecx, [esp + 0x74]
push ecx
lea edx, [esp + 0x73]
push edx
push edi
mov ecx, esi
call fcn.0042c560
cmp byte [esp + 0x87], 0
mov dword [esp + 0x58], eax
je case.default.0x42584b
mov eax, dword [esp + 0x50]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x42584b
mov dword [esp + 0x58], 1
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x8c]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0x14], edx
mov edx, dword [esp + 0x68]
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], edx
mov eax, dword [esp + 0x58]
test eax, eax
je 0x4292df
cmp eax, 7
je 0x4292df
cmp eax, 8
je 0x4292df
cmp byte [esp + 0x57], 0
jne 0x4292c2
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x425b22
mov edx, dword [ecx + 0x1c]
cmp edx, dword [esi + 0x1c]
jne 0x429766
mov dword [esp + 0x48], ecx
mov esi, ecx
jmp 0x4292c2
cmp dword [ebp + 8], 3
je 0x4292da
mov eax, dword [esp + 0x64]
jmp 0x4292ba
mov dl, byte [ebx + 0xe4]
mov byte [esp + 0x63], dl
cmp cl, 0x70
jne 0x425bb2
mov ecx, dword [0x4a9c68]
test ecx, ecx
je 0x425b6b
mov eax, dword [esp + 0x74]
mov eax, dword [eax + 0xdc]
mov ebx, ecx
call fcn.00474630
test eax, eax
je 0x42946d
mov ebx, dword [esp + 0x74]
mov eax, dword [ebx + 0xdc]
cmp dword [eax + 8], 6
jne 0x425b81
mov eax, dword [eax]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebx + 0xdc]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x425b97
push eax
call fcn.00484e18
add esp, 4
mov ecx, dword [ebx + 0xdc]
push ecx
call fcn.00484b78
add esp, 4
mov dword [ebx + 0xdc], 0
jmp 0x425bb9
mov byte [ebx + 0xe4], 1
mov dword [esp + 0x5c], 0
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x73
jne 0x425bf1
lea esp, [esp]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x5c]
push edx
push edi
push 2
call fcn.00424fc0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
mov ecx, dword [esi + 0x14]
cmp edx, ecx
je 0x425bd0
jmp 0x425c06
lea eax, [esp + 0x5c]
push eax
push edi
push 3
call fcn.00424fc0
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
mov cl, byte [esp + 0xd0]
mov esi, dword [esi + 0x18]
mov dword [esp + 0x48], esi
cmp cl, 0x6f
jne 0x425c70
mov cl, byte [esp + 0x63]
mov byte [ebx + 0xe4], cl
xor cl, cl
cmp byte [esi], 0x70
jne 0x425c40
cmp dword [ebx + 0xdc], 0
mov cl, 1
jne 0x4292be
mov esi, dword [esi + 0x18]
mov dword [esp + 0x48], esi
cmp byte [esi], 0x71
je 0x425c7a
test cl, cl
jne 0x425ce1
cmp dword [ebx + 0xdc], 0
lea esi, [ebx + 0xdc]
je 0x425ce1
call fcn.0042eaf0
mov eax, 1
mov dword [esp + 0x58], eax
jmp 0x425cdd
cmp cl, 0x70
jne 0x425ce1
cmp byte [esi], 0x71
jne 0x425ce1
cmp eax, 1
jne 0x425c8b
test edx, edx
je 0x4292be
mov esi, dword [esp + 0x48]
mov eax, dword [esp + 0x74]
mov ebx, dword [eax + 0xdc]
lea edx, [esp + 0xcc]
push edx
push 0
push 3
mov ecx, esi
mov dword [esp + 0x74], ebx
mov dword [eax + 0xdc], 0
call fcn.00424fc0
mov edi, eax
cmp edi, 1
jne 0x4294a0
cmp dword [esp + 0xcc], 0
jne 0x4294a0
mov eax, dword [esp + 0x74]
mov dword [eax + 0xdc], ebx
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
cmp dword [ebp + 8], 3
je 0x4292f6
cmp eax, 1
jne 0x4292f6
test edx, edx
je 0x4292be
mov ecx, dword [edx + 0x1c]
mov eax, dword [esp + 0x48]
cmp ecx, dword [eax + 0x1c]
jne 0x4292d1
mov dword [esp + 0x48], edx
jmp 0x4292be
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x48], ecx
jmp 0x4292be
cmp dword [esi + 0xc], 1
jne 0x425d33
mov edx, dword [esi + 0x18]
mov dword [esp + 0x48], edx
jmp 0x4292be
mov ecx, dword [esi + 0x14]
lea eax, [esp + 0x5c]
push eax
push edi
push 2
call fcn.00424fc0
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
cmp ecx, esi
je 0x4292c2
cmp dword [ebp + 8], 3
je 0x429766
cmp eax, 1
jne 0x429766
test ecx, ecx
je 0x425d81
mov edx, dword [esi + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x429758
mov dword [esp + 0x48], ecx
mov esi, ecx
jmp 0x4292c2
mov eax, dword [esi + 0x18]
jmp 0x4292ba
add dword [0x4ac388], 1
mov eax, dword [0x4a9c68]
mov ebx, dword [0x4a6440]
adc dword [0x4ac38c], 0
mov cl, byte [esi]
movzx edx, cl
dec edx
mov dword [esp + 0x4c], eax
cmp edx, 0xdf
ja case.0x425dbf.8
movzx edx, byte [edx + 0x429b34]
jmp dword [edx*4 + 0x4298b0]
push esi
call fcn.0043bc00
jmp 0x4292a9
cmp byte [esi + 1], 1
mov edx, dword [0x4a9cc4]
jbe 0x425e4f
mov eax, dword [esi + 8]
cmp byte [eax + 0x11], 0
je 0x425df0
mov eax, 1
jmp 0x4292a9
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x425e0d
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov eax, dword [esp + 0x4c]
push ecx
push edx
push eax
call fcn.00412b90
jmp 0x4292a9
mov eax, dword [0x4a9c6c]
test eax, eax
je 0x425e4f
cmp byte [edx], 0
jne 0x425e4f
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x425e28
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x425e41
sub ecx, 2
jne 0x425e4f
mov eax, dword [esp + 0x4c]
call fcn.00474740
jmp 0x4292a9
mov ecx, dword [esp + 0x4c]
call fcn.004744b0
jmp 0x4292a9
push 1
push 0
push 0xffffffffffffffff
push edx
mov edx, dword [esp + 0x5c]
push edx
call fcn.00474ce0
jmp 0x4292a9
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x425e85
cmp byte [eax + 0x11], 0
jne 0x425e85
mov dword [esp + 0x50], 1
mov edi, 1
xor ebx, ebx
jmp 0x425ec7
mov ebx, dword [0x4a9c6c]
mov eax, dword [0x4a9cc4]
mov dword [esp + 0x50], 0
test ebx, ebx
je 0x425eb3
cmp byte [eax], 0
jne 0x425eb3
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x425eae
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x425f10
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.00471f70
add esp, 0x10
mov edi, eax
mov eax, dword [esp + 0x4c]
push 1
call fcn.00412bf0
mov edx, dword [0x4a9cc8]
mov dword [esp + 0x68], eax
mov al, byte [edx]
test al, al
je 0x4260da
call fcn.00409310
movsx eax, al
push eax
push str.SMHD
call fcn.00485df1
add esp, 8
test eax, eax
je 0x4260da
test edi, edi
jne 0x425f1f
lea eax, [edi + 1]
jmp 0x4292a9
test ebx, ebx
je 0x425eb5
push 1
mov eax, ebx
call fcn.00412bf0
jmp 0x425ec5
cmp dword [esp + 0x50], 0
je 0x425f30
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x1c]
fild qword [ecx]
jmp 0x425f4e
test ebx, ebx
je 0x425f3f
push 0
mov eax, ebx
call fcn.00412d50
jmp 0x425f4e
mov esi, dword [0x4a9cc4]
call fcn.00412af0
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
fstp qword [esp + 0x68]
cmp byte [edi + 0x17], 0
jne 0x425f61
mov ebx, dword [edi + 0xc]
jmp 0x425f63
mov ebx, edi
test byte [ebx + 0x15], 8
je 0x425f70
mov eax, ebx
call fcn.00401150
mov al, byte [ebx + 0x17]
cmp al, 1
jne 0x425f89
test byte [ebx + 0x15], 4
je 0x425f84
mov eax, ebx
call fcn.0042ec60
mov eax, dword [ebx + 8]
jmp 0x425f99
cmp al, 2
jne 0x425f94
call fcn.00401000
jmp 0x425f99
mov eax, 0x4ab626
cmp byte [eax], 0
je 0x42600a
cmp byte [edi + 0x17], 0
jne 0x425fa9
mov ebx, dword [edi + 0xc]
jmp 0x425fab
mov ebx, edi
test byte [ebx + 0x15], 8
je 0x425fb8
mov eax, ebx
call fcn.00401150
mov al, byte [ebx + 0x17]
cmp al, 1
jne 0x425fd1
test byte [ebx + 0x15], 4
je 0x425fcc
mov eax, ebx
call fcn.0042ec60
mov eax, dword [ebx + 8]
jmp 0x425fe1
cmp al, 2
jne 0x425fdc
call fcn.00401000
jmp 0x425fe1
mov eax, 0x4ab626
lea edx, [esp + 0xbc]
push edx
call fcn.00471b50
add esp, 4
test eax, eax
jne 0x42602e
push 1
push eax
push 0xffffffffffffffff
push 0x4987f9
push edi
call fcn.00474ce0
jmp 0x4292a9
lea eax, [esp + 0xe4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea ecx, [esp + 0xbc]
push ecx
lea edx, [esp + 0xe8]
push edx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov eax, dword [0x4a9cc8]
mov al, byte [eax]
call fcn.00409310
movsx eax, al
add eax, 0xffffffbc
cmp eax, 0xf
ja case.0x42604c.69
movzx ecx, byte [eax + 0x429c28]
jmp dword [ecx*4 + 0x429c14]
fld qword [esp + 0x68]
fmul qword [0x4a0918]
jmp 0x426087
fld qword [esp + 0x68]
fmul qword [0x4a0910]
jmp 0x426087
fld qword [esp + 0x68]
fmul qword [0x4a0908]
jmp 0x426087
fld qword [esp + 0x68]
fmul qword [0x4a0900]
jmp 0x426087
fld qword [esp + 0x68]
mov esi, dword [esp + 0xbc]
mov ebx, dword [esp + 0xc0]
call fcn.004937f6
add esi, eax
adc ebx, edx
mov dword [esp + 0xbc], esi
push 0
lea eax, [esp + 0xc0]
lea esi, [esp + 0x144]
mov dword [esp + 0xc4], ebx
call fcn.00471de0
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
push edi
call fcn.00474ce0
mov esi, dword [esp + 0x48]
jmp 0x4292a9
cmp edi, 2
je 0x42613c
cmp dword [esp + 0x68], 2
je 0x42613c
cmp dword [esp + 0x50], 0
je 0x4260fa
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov ebx, dword [eax]
mov edi, dword [eax + 4]
jmp 0x42611c
test ebx, ebx
je 0x426109
push 0
mov eax, ebx
call fcn.00412c90
jmp 0x426118
mov esi, dword [0x4a9cc4]
call fcn.00412ac0
mov esi, dword [esp + 0x48]
mov edi, edx
mov ebx, eax
mov eax, dword [esp + 0x4c]
push 0
call fcn.00412c90
add eax, ebx
adc edx, edi
push edx
push eax
mov eax, dword [esp + 0x54]
push eax
call fcn.00412b90
jmp 0x4292a9
cmp dword [esp + 0x50], 0
je 0x42614d
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x42616b
test ebx, ebx
je 0x42615c
push 0
mov eax, ebx
call fcn.00412d50
jmp 0x42616b
mov esi, dword [0x4a9cc4]
call fcn.00412af0
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
fstp qword [esp + 0x68]
push 0
mov eax, edi
call fcn.00412d50
fadd qword [esp + 0x68]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412bc0
jmp 0x4292a9
mov eax, dword [0x4a9cc8]
mov al, byte [eax]
test al, al
je 0x4262f0
call fcn.00409310
movsx eax, al
push eax
push str.SMHD
call fcn.00485df1
add esp, 8
test eax, eax
je 0x4262f0
mov ebx, dword [0x4a9c6c]
mov edi, dword [0x4a9cc4]
test ebx, ebx
je 0x426229
cmp byte [edi], 0
jne 0x426229
mov al, byte [ebx + 0x17]
test al, al
jne 0x4261e0
mov ecx, dword [ebx + 0xc]
mov al, byte [ecx + 0x17]
cmp al, 1
jne 0x426229
test ebx, ebx
je 0x426229
cmp byte [ebx + 0x17], 0
jne 0x4261f1
mov ebx, dword [ebx + 0xc]
test byte [ebx + 0x15], 8
je 0x4261fe
mov eax, ebx
call fcn.00401150
mov al, byte [ebx + 0x17]
cmp al, 1
jne 0x426217
test byte [ebx + 0x15], 4
je 0x426212
mov eax, ebx
call fcn.0042ec60
mov edi, dword [ebx + 8]
jmp 0x426229
cmp al, 2
jne 0x426224
call fcn.00401000
mov edi, eax
jmp 0x426229
mov edi, 0x4ab626
mov ebx, dword [esp + 0x4c]
cmp byte [ebx + 0x17], 0
jne 0x426236
mov ebx, dword [ebx + 0xc]
test byte [ebx + 0x15], 8
je 0x426243
mov eax, ebx
call fcn.00401150
mov al, byte [ebx + 0x17]
cmp al, 1
jne 0x42625c
test byte [ebx + 0x15], 4
je 0x426257
mov eax, ebx
call fcn.0042ec60
mov eax, dword [ebx + 8]
jmp 0x42626c
cmp al, 2
jne 0x426267
call fcn.00401000
jmp 0x42626c
mov eax, 0x4ab626
push eax
lea ebx, [esp + 0x9b]
mov eax, edi
call fcn.00471e90
add esp, 4
cmp byte [esp + 0x97], 0
mov edi, eax
mov ebx, edx
je 0x4262a6
mov edx, dword [esp + 0x4c]
push 1
push 0
push 0xffffffffffffffff
push 0x4987f9
push edx
call fcn.00474ce0
jmp 0x4292a9
mov eax, dword [0x4a9cc8]
mov al, byte [eax]
call fcn.00409310
cmp al, 0x44
je 0x4262cd
cmp al, 0x48
je 0x4262c4
cmp al, 0x4d
jne 0x4262df
push 0
push 0x3c
jmp 0x4262d4
push 0
push 0xe10
jmp 0x4262d4
push 0
push 0x15180
push ebx
push edi
call fcn.00493870
mov edi, eax
mov ebx, edx
mov ecx, dword [esp + 0x4c]
push ebx
push edi
push ecx
call fcn.00412b90
jmp 0x4292a9
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x426310
cmp byte [eax + 0x11], 0
jne 0x426310
mov dword [esp + 0x50], 1
mov ebx, 1
xor edi, edi
jmp 0x426352
mov edi, dword [0x4a9c6c]
mov eax, dword [0x4a9cc4]
mov dword [esp + 0x50], 0
test edi, edi
je 0x42633e
cmp byte [eax], 0
jne 0x42633e
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x426339
mov edx, dword [edi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x42637b
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.00471f70
add esp, 0x10
mov ebx, eax
mov eax, dword [esp + 0x4c]
push 1
call fcn.00412bf0
cmp ebx, 2
je 0x4263cc
cmp eax, 2
je 0x4263cc
cmp dword [esp + 0x50], 0
je 0x42638a
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x4263ac
test edi, edi
je 0x426340
push 1
mov eax, edi
call fcn.00412bf0
jmp 0x426350
test edi, edi
je 0x426399
push 0
mov eax, edi
call fcn.00412c90
jmp 0x4263a8
mov esi, dword [0x4a9cc4]
call fcn.00412ac0
mov esi, dword [esp + 0x48]
mov ebx, edx
mov edi, eax
mov eax, dword [esp + 0x4c]
push 0
call fcn.00412c90
mov ecx, dword [esp + 0x4c]
sub eax, edi
sbb edx, ebx
push edx
push eax
push ecx
call fcn.00412b90
jmp 0x4292a9
cmp dword [esp + 0x50], 0
je 0x4263dd
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x4263fb
test edi, edi
je 0x4263ec
push 0
mov eax, edi
call fcn.00412d50
jmp 0x4263fb
mov esi, dword [0x4a9cc4]
call fcn.00412af0
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
fstp qword [esp + 0x68]
push 0
mov eax, edi
call fcn.00412d50
fsub qword [esp + 0x68]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412bc0
jmp 0x4292a9
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x426441
cmp byte [eax + 0x11], 0
jne 0x426441
mov dword [esp + 0x50], 1
mov ebx, 1
xor edi, edi
jmp 0x426483
mov edi, dword [0x4a9c6c]
mov eax, dword [0x4a9cc4]
mov dword [esp + 0x50], 0
test edi, edi
je 0x42646f
cmp byte [eax], 0
jne 0x42646f
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x42646a
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x4264ac
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.00471f70
add esp, 0x10
mov ebx, eax
mov eax, dword [esp + 0x4c]
push 1
call fcn.00412bf0
cmp ebx, 2
je 0x426502
cmp eax, 2
je 0x426502
cmp dword [esp + 0x50], 0
je 0x4264bb
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x4264dd
test edi, edi
je 0x426471
push 1
mov eax, edi
call fcn.00412bf0
jmp 0x426481
test edi, edi
je 0x4264ca
push 0
mov eax, edi
call fcn.00412c90
jmp 0x4264d9
mov esi, dword [0x4a9cc4]
call fcn.00412ac0
mov esi, dword [esp + 0x48]
mov ebx, edx
mov edi, eax
mov eax, dword [esp + 0x4c]
push 0
call fcn.00412c90
push ebx
push edi
push edx
push eax
call fcn.0048bd90
push edx
push eax
mov eax, dword [esp + 0x54]
push eax
call fcn.00412b90
jmp 0x4292a9
cmp dword [esp + 0x50], 0
je 0x426513
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x426531
test edi, edi
je 0x426522
push 0
mov eax, edi
call fcn.00412d50
jmp 0x426531
mov esi, dword [0x4a9cc4]
call fcn.00412af0
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
fstp qword [esp + 0x68]
push 0
mov eax, edi
call fcn.00412d50
fmul qword [esp + 0x68]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412bc0
jmp 0x4292a9
mov eax, dword [esi + 8]
cmp dword [eax + 0x1c], 0
je 0x426577
cmp byte [eax + 0x11], 0
jne 0x426577
mov dword [esp + 0x50], 1
mov ebx, 1
xor edi, edi
jmp 0x4265b9
mov edi, dword [0x4a9c6c]
mov eax, dword [0x4a9cc4]
mov dword [esp + 0x50], 0
test edi, edi
je 0x4265a5
cmp byte [eax], 0
jne 0x4265a5
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x4265a0
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x4265ea
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.00471f70
add esp, 0x10
mov ebx, eax
mov eax, dword [esp + 0x4c]
push 1
call fcn.00412bf0
cmp ebx, 2
je 0x426654
cmp eax, 2
je 0x426654
cmp dword [esp + 0x50], 0
je 0x4265f9
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
mov ebx, dword [eax]
mov edi, dword [eax + 4]
jmp 0x42661b
test edi, edi
je 0x4265a7
push 1
mov eax, edi
call fcn.00412bf0
jmp 0x4265b7
test edi, edi
je 0x426608
push 0
mov eax, edi
call fcn.00412c90
jmp 0x426617
mov esi, dword [0x4a9cc4]
call fcn.00412ac0
mov esi, dword [esp + 0x48]
mov edi, edx
mov ebx, eax
mov eax, ebx
or eax, edi
jne 0x42662f
mov ecx, dword [esp + 0x4c]
call fcn.00412b30
jmp 0x4292a9
mov eax, dword [esp + 0x4c]
push 0
call fcn.00412c90
push edi
push ebx
push edx
push eax
call fcn.00493870
mov ecx, dword [esp + 0x4c]
push edx
push eax
push ecx
call fcn.00412b90
jmp 0x4292a9
cmp dword [esp + 0x50], 0
je 0x426665
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426683
test edi, edi
je 0x426674
push 0
mov eax, edi
call fcn.00412d50
jmp 0x426683
mov esi, dword [0x4a9cc4]
call fcn.00412af0
mov esi, dword [esp + 0x48]
fst qword [esp + 0x68]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x4266a0
mov ecx, dword [esp + 0x4c]
call fcn.00412b30
jmp 0x4292a9
mov edi, dword [esp + 0x4c]
push 0
mov eax, edi
call fcn.00412d50
fdiv qword [esp + 0x68]
sub esp, 8
fstp qword [esp]
push edi
call fcn.00412bc0
jmp 0x4292a9
mov edi, 2
mov ecx, esi
call fcn.00420560
mov ebx, eax
test ebx, ebx
jns 0x4266d8
xor ebx, ebx
jmp 0x4266ea
mov edi, 1
mov ecx, esi
call fcn.004204e0
cmp ebx, eax
jle 0x4266ea
mov ebx, eax
mov ecx, dword [0x4a9cc4]
mov edx, dword [esp + 0x4c]
push 1
push 0
push ebx
push ecx
push edx
call fcn.00474ce0
jmp 0x4292a9
mov edi, 2
mov ecx, esi
call fcn.00420560
mov ebx, eax
test ebx, ebx
jns 0x426719
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.004204e0
cmp ebx, eax
jbe 0x42672b
mov ebx, eax
push 1
sub eax, ebx
add eax, dword [0x4a9cc4]
push 0
push ebx
push eax
mov eax, dword [esp + 0x5c]
push eax
call fcn.00474ce0
jmp 0x4292a9
cmp byte [esi + 1], 4
jb 0x42677c
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x34]
cmp byte [edx], 0
je 0x42677c
mov edi, 3
mov ecx, esi
call fcn.00420560
mov dword [esp + 0x50], eax
cmp eax, 1
jge 0x426784
mov ecx, dword [esp + 0x4c]
call fcn.00412b30
jmp 0x4292a9
mov dword [esp + 0x50], CreateStatusWindowA
mov edi, 2
mov ecx, esi
call fcn.00420560
mov ebx, eax
mov eax, dword [0x4a9cd0]
mov al, byte [eax]
call fcn.00409310
cmp al, 0x4c
jne 0x4267cf
cmp ebx, 1
jge 0x4267b5
mov ecx, dword [esp + 0x4c]
call fcn.00412b30
jmp 0x4292a9
mov eax, dword [esp + 0x50]
mov ecx, 1
sub ecx, eax
add ebx, ecx
cmp ebx, 1
jge 0x4267d9
lea edx, [eax + ebx - 1]
mov dword [esp + 0x50], edx
cmp ebx, 1
jge 0x4267d9
mov ebx, 1
mov edi, 1
mov ecx, esi
call fcn.004204e0
cmp eax, ebx
jae 0x4267f7
mov ecx, dword [esp + 0x4c]
call fcn.00412b30
jmp 0x4292a9
mov ecx, edi
sub ecx, ebx
add eax, ecx
mov ecx, dword [esp + 0x50]
cmp ecx, eax
jbe 0x426807
mov ecx, eax
mov edx, dword [0x4a9cc4]
mov eax, dword [esp + 0x4c]
push 1
push 0
push ecx
lea ebx, [ebx + edx - 1]
push ebx
push eax
call fcn.00474ce0
jmp 0x4292a9
mov edi, 2
mov ecx, esi
call fcn.00420560
mov ebx, eax
test ebx, ebx
jns 0x42683a
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.004204e0
cmp ebx, eax
jbe 0x42684c
mov ebx, eax
mov ecx, dword [0x4a9cc4]
mov edx, dword [esp + 0x4c]
push 1
push 0
sub eax, ebx
push eax
add ecx, ebx
push ecx
push edx
call fcn.00474ce0
jmp 0x4292a9
mov edi, 2
mov ecx, esi
call fcn.00420560
mov ebx, eax
test ebx, ebx
jns 0x42687f
xor ebx, ebx
mov edi, 1
mov ecx, esi
call fcn.004204e0
cmp ebx, eax
jbe 0x426891
mov ebx, eax
mov ecx, dword [esp + 0x4c]
push 1
push 0
sub eax, ebx
push eax
mov eax, dword [0x4a9cc4]
push eax
push ecx
call fcn.00474ce0
jmp 0x4292a9
mov edi, eax
cmp byte [edi + 0x17], 0
jne 0x4268ba
mov ebx, dword [edi + 0xc]
jmp 0x4268bc
mov ebx, edi
test byte [ebx + 0x15], 8
je 0x4268c9
mov eax, ebx
call fcn.00401150
mov al, byte [ebx + 0x17]
cmp al, 1
jne 0x4268d5
mov ebx, dword [ebx + 8]
jmp 0x4268e7
cmp al, 2
jne 0x4268e2
call fcn.00401000
mov ebx, eax
jmp 0x4268e7
mov ebx, 0x4ab626
cmp ebx, dword [0x4a9cc4]
jne 0x426900
mov al, byte [edi + 0x17]
test al, al
jne 0x4268fc
mov edx, dword [edi + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
je 0x42697a
push 1
push 0
mov edi, 1
mov ecx, esi
call fcn.004204e0
mov edi, dword [esp + 0x54]
push eax
push 0
push edi
call fcn.00474ce0
cmp eax, 1
jne case.0x425dbf.8
cmp byte [edi + 0x17], 0
jne 0x42692f
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x42693c
mov eax, edi
call fcn.00401150
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x426955
test byte [edi + 0x15], 4
je 0x426950
mov eax, edi
call fcn.0042ec60
mov ebx, dword [edi + 8]
jmp 0x426967
cmp al, 2
jne 0x426962
call fcn.00401000
mov ebx, eax
jmp 0x426967
mov ebx, 0x4ab626
mov ecx, dword [0x4a9cc4]
mov edx, ebx
nop
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x426970
mov eax, dword [0x4a9cc8]
mov al, byte [eax]
test al, al
je 0x4269b1
call fcn.00409310
cmp al, 0x54
jne 0x4269b1
mov ecx, dword [0x4a9cc8]
cmp byte [ecx + 1], 0
jne 0x4269b1
mov eax, ebx
call fcn.00412810
mov eax, dword [esp + 0x4c]
push 0
call fcn.004130d0
jmp 0x4292a9
cmp byte [esi], 0x31
push ebx
jne 0x4269cd
call dword [sym.imp.USER32.dll_CharLowerA]
mov eax, dword [esp + 0x4c]
push 0
call fcn.004130d0
jmp 0x4292a9
call dword [sym.imp.USER32.dll_CharUpperA]
mov eax, dword [esp + 0x4c]
push 0
call fcn.004130d0
jmp 0x4292a9
mov eax, dword [0x4a9c6c]
test eax, eax
je 0x426a19
cmp byte [eax + 0x17], 0
jne 0x4269fa
mov edx, dword [eax + 0xc]
mov cl, byte [edx + 0x15]
jmp 0x4269fd
mov cl, byte [eax + 0x15]
test cl, 1
je 0x426a19
call fcn.00413010
push 0
push eax
mov eax, dword [esp + 0x54]
push eax
call fcn.00412b90
jmp 0x4292a9
mov edi, 1
mov ecx, esi
call fcn.004204e0
push 0
push eax
mov eax, dword [esp + 0x54]
push eax
call fcn.00412b90
jmp 0x4292a9
mov esi, dword [0x4a9ccc]
mov al, byte [esi]
mov dword [esp + 0x68], esi
mov dword [esp + 0x78], 0xffffffff
test al, al
je 0x426aca
call fcn.00409310
movsx eax, al
push eax
push 0x49c300
call fcn.00485df1
add esp, 8
test eax, eax
je 0x426aca
inc esi
cmp byte [esi], 0
je 0x426aca
call fcn.0040ce00
mov dword [esp + 0x50], eax
test eax, eax
jle 0x426bdb
mov eax, dword [0x4a9cc8]
cmp byte [eax], 0
jne 0x426ad4
mov dword [esp + 0x78], 0
mov eax, 0x498884
mov edx, dword [0x4aa51c]
push 1
push 0
push 0xffffffffffffffff
push eax
push edx
call fcn.00474ce0
mov eax, dword [esp + 0x78]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x58]
call fcn.004010d0
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov dword [esp + 0x50], 1
jmp 0x426a80
mov ecx, dword [0x4a9cc4]
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0x48]
mov edi, 4
mov dword [esp + 0x64], eax
call fcn.00420560
mov esi, eax
test esi, esi
jns 0x426afb
xor esi, esi
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.004204e0
mov edi, eax
cmp esi, edi
jge 0x426bdb
mov edx, dword [esp + 0x68]
mov al, byte [edx]
cmp al, 0x31
je 0x426ba0
call fcn.00409310
cmp al, 0x52
je 0x426ba0
mov ecx, dword [esp + 0x48]
mov edi, 2
call fcn.004204e0
mov ebx, eax
mov eax, dword [esp + 0x8c]
mov edi, 1
add eax, esi
jmp 0x426b50
mov ecx, dword [0x4a6440]
mov cl, byte [ecx + 0xce]
test cl, cl
jne 0x426b6f
mov edx, dword [esp + 0x64]
push edx
call fcn.00472460
add esp, 4
jmp 0x426b91
cmp cl, 2
jne 0x426b83
mov ecx, dword [esp + 0x64]
push ecx
call fcn.00472730
add esp, 4
jmp 0x426b91
mov edx, dword [esp + 0x64]
push edx
push eax
call fcn.00485f32
add esp, 8
test eax, eax
je 0x426bdb
cmp edi, dword [esp + 0x50]
je 0x426bc6
inc edi
add eax, ebx
jmp 0x426b50
movzx ecx, byte [ebx + 0xce]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x64]
push eax
push ecx
mov ecx, dword [esp + 0x94]
push edx
mov eax, edi
sub eax, esi
push ecx
call fcn.00472260
add esp, 0x10
test eax, eax
je 0x426bdb
sub eax, dword [esp + 0x8c]
mov dword [esp + 0x78], eax
jns 0x426a92
mov eax, 0x499ee8
jmp 0x426a97
push esi
call fcn.0043c060
jmp 0x4292a9
mov eax, dword [0x4a9ccc]
mov ecx, dword [0x4a9cc8]
mov edx, dword [0x4a9cc4]
call fcn.00432070
jmp 0x4292a9
mov eax, dword [0x4a9ccc]
mov ecx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc0]
push ecx
mov ecx, dword [0x4a9cc4]
push esi
call fcn.0043c2b0
jmp 0x4292a9
mov edx, dword [0x4a9cc0]
push edx
mov eax, esi
call fcn.0043ca00
jmp 0x4292a9
mov eax, dword [0x4a9cc0]
mov ecx, dword [0x4a9cc4]
push eax
push esi
call fcn.0043cfd0
jmp 0x4292a9
push 0
push ecx
mov edi, 7
mov ecx, esi
call fcn.00420560
add esp, 4
push eax
mov edi, 6
mov ecx, esi
call fcn.00420560
push eax
push ecx
mov edi, 5
mov ecx, esi
call fcn.00420560
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00420560
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420560
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420560
mov ecx, dword [0x4a9ce0]
push eax
push esi
call fcn.004382f0
jmp 0x4292a9
mov ecx, dword [0x4a9cd8]
push ecx
push ecx
mov edi, 5
mov ecx, esi
call fcn.00420560
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.00420560
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420560
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.00420560
push eax
push esi
call fcn.00438a30
jmp 0x4292a9
mov edx, dword [0x4a9ccc]
push edx
push ecx
mov edi, 2
mov ecx, esi
call fcn.00420560
mov edi, 1
mov ecx, esi
mov ebx, eax
call fcn.00420560
add esp, 4
mov ecx, eax
push esi
mov eax, ebx
call fcn.0044fa80
jmp 0x4292a9
mov eax, dword [ebx + 0xb0]
cmp cl, 0x42
sete cl
push 0
movzx edx, cl
push eax
push edx
mov eax, dword [0x4a9cc0]
push eax
call fcn.0040d4a0
add esp, 0x10
mov eax, 1
jmp 0x4292a9
mov edx, dword [0x4a9cc0]
xor ecx, ecx
cmp dword [ebx + 0xb0], 3
push 0
sete cl
lea ecx, [ecx + ecx + 1]
push ecx
push 0
push edx
call fcn.0040d4a0
add esp, 0x10
mov eax, 1
jmp 0x4292a9
push 0
push 2
push 0
jmp 0x426d5a
mov ecx, dword [0x4a9cc0]
push 0
push 0
push 0
push ecx
call fcn.0040d4a0
add esp, 0x10
mov eax, 1
jmp 0x4292a9
mov edx, dword [0x4a9cc0]
push edx
call fcn.0040f4d0
add esp, 4
jmp 0x4292a9
mov eax, dword [0x4a9cd8]
mov edx, dword [0x4a9cd4]
push 0x4987f9
push eax
mov eax, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9ccc]
push eax
mov eax, dword [0x4a9cc8]
push edx
mov edx, dword [0x4a9cc4]
push eax
push edx
mov edx, dword [0x4a9cc0]
push ecx
mov eax, 0x4987f9
call fcn.0040f760
add esp, 0x20
jmp 0x4292a9
mov eax, dword [0x4a9cd4]
mov edx, dword [0x4a9cd8]
push eax
mov eax, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc4]
push 0x4987f9
push 0x4987f9
push edx
mov edx, dword [0x4a9cc0]
push eax
mov eax, dword [0x4a9ccc]
push ecx
call fcn.0040f760
add esp, 0x20
jmp 0x4292a9
mov edx, dword [0x4a9ccc]
mov eax, dword [0x4a9cc8]
push 0x4987f9
push edx
mov edx, dword [0x4a9cc4]
push eax
mov eax, dword [0x4a9cc0]
push 0x4987f9
push 0x4987f9
push edx
push eax
mov eax, 0x4987f9
push ecx
mov edx, eax
call fcn.0040f760
add esp, 0x20
jmp 0x4292a9
mov edi, 4
mov ecx, esi
call fcn.00420560
push eax
mov ecx, esi
call fcn.0043b0e0
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
mov esi, dword [0x4a9cc0]
cmp cl, 0x76
push 0
sete cl
movzx edx, cl
push 0
push edx
push eax
mov eax, dword [0x4a9ccc]
push ebx
mov ebx, dword [0x4a9cc8]
call fcn.00475a60
add esp, 0x14
test eax, eax
je 0x426f05
mov ecx, dword [0x4a6440]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x426f05
push 1
push eax
call fcn.00401330
add esp, 8
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov edx, dword [0x4a9cc0]
push 9
push str.ahk_group
push edx
call fcn.00485880
add esp, 0xc
test eax, eax
jne 0x426f47
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
jne 0x426f47
mov ecx, dword [0x4a9ccc]
cmp byte [ecx], 0
mov byte [esp + 0x63], 1
je 0x426f4c
mov byte [esp + 0x63], 0
mov al, byte [esi]
xor edx, edx
cmp byte [esp + 0x63], dl
setne dl
dec edx
and edx, 0x14
mov dword [esp + 0x64], edx
cmp al, 0x82
je 0x426fa8
cmp al, 0x83
je 0x426fa8
mov eax, dword [0x4a9cc8]
cmp byte [eax], 0
je 0x426fe5
mov al, byte [esi]
cmp al, 0x82
je 0x427052
cmp al, 0x83
je 0x427054
mov ecx, dword [0x4a9cc8]
mov edx, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9ccc]
push edx
mov edx, dword [0x4a9cc0]
push eax
call fcn.00433c50
jmp 0x4292a9
mov ecx, dword [0x4a9cc8]
cmp byte [ecx], 0
je 0x426fda
mov edi, 2
mov ecx, esi
call fcn.00420610
fmul qword [0x4a0878]
call fcn.004937c0
mov dword [esp + 0x64], eax
test eax, eax
jne 0x426fda
mov dword [esp + 0x64], 0x1f4
mov edx, dword [0x4a9cd0]
cmp byte [edx], 0
jne 0x426f71
cmp byte [esp + 0x63], 0
je 0x426f71
mov ecx, dword [0x4a9cc0]
add ecx, 9
mov al, byte [ecx]
cmp al, 0x20
je 0x426fff
cmp al, 9
jne 0x427002
inc ecx
jmp 0x426ff5
cmp byte [ecx], 0
mov dword [esp + 0x78], ecx
je 0x426f71
mov edi, dword [0x4abdb8]
test edi, edi
je 0x426f71
jmp 0x427024
mov ecx, dword [esp + 0x78]
mov eax, dword [edi + 4]
push ecx
push eax
call fcn.00484e01
add esp, 8
test eax, eax
je 0x427041
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x427020
jmp 0x426f71
mov edx, dword [esp + 0x64]
mov cl, byte [esi]
push edi
call fcn.00477910
jmp 0x4292a9
cmp al, 0x83
mov edx, dword [0x4a9cd0]
sete al
movzx ecx, al
mov eax, dword [esp + 0x64]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
push eax
mov eax, dword [0x4a9ccc]
push ecx
push ebx
mov ebx, dword [0x4a9cc0]
call fcn.00475d60
add esp, 0x14
test eax, eax
je case.0x428c0b.69
mov edx, dword [0x4a6440]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle case.0x428c0b.69
push 1
push eax
call fcn.00401330
add esp, 8
mov eax, 1
jmp 0x4292a9
mov ebx, dword [0x4a9cc4]
call fcn.00437b50
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
mov ecx, dword [0x4a9cc0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test eax, eax
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042e260
jmp 0x4292a9
lea ecx, [esp + 0xd4]
push ecx
push 0x3a98
push 1
push str.Environment
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
test eax, eax
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042e260
jmp 0x4292a9
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc0]
push ecx
push edx
push esi
call fcn.00451190
jmp 0x4292a9
mov eax, dword [0x4a9cc0]
push 0
push 0xffffffffffffffff
push eax
mov eax, 0x4ac3a0
call fcn.0046f680
mov ecx, dword [0x4a9cc4]
add esp, 0xc
push 0
push 0xffffffffffffffff
push ecx
mov eax, 0x4ac3ac
call fcn.0046f680
mov edx, dword [0x4a9cc8]
add esp, 0xc
push 0
push 0xffffffffffffffff
push edx
mov eax, 0x4ac3b8
call fcn.0046f680
add esp, 0xc
mov eax, 1
jmp 0x4292a9
mov eax, dword [0x4a9cc8]
push str.UseErrorLevel
call fcn.00472460
add esp, 4
test eax, eax
setne bl
mov al, 3
cmp al, byte [esi + 1]
mov eax, dword [0x4a9cc8]
sbb ecx, ecx
and ecx, dword [0x4a9c74]
mov byte [esp + 0xac], bl
mov edx, dword [esp + 0xac]
push ecx
push 1
push edx
push 0
test bl, bl
push eax
mov eax, dword [0x4a9cc4]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4a9cc0]
push eax
push 0
push 0x4abd80
call fcn.0042f190
test bl, bl
je 0x4292a9
test eax, eax
mov eax, 0x498884
jne 0x4271fe
mov eax, str.ERROR
mov ecx, dword [0x4aa51c]
push 1
push 0
push 0xffffffffffffffff
push eax
push ecx
call fcn.00474ce0
jmp 0x4292a9
push esi
call fcn.00433d30
jmp 0x4292a9
cmp byte [esi + 1], 2
jbe 0x427263
mov edx, dword [0x4a9cd8]
mov eax, dword [0x4a9cd4]
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9ccc]
push eax
mov eax, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cdc]
push edx
mov edx, dword [0x4a9cc0]
push eax
mov eax, dword [0x4a9cc4]
call fcn.00434400
jmp 0x4292a9
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc0]
push 0x4987f9
push 0x4987f9
push 0x4987f9
push ecx
mov ecx, 0x4987f9
push edx
mov eax, ecx
mov edx, ecx
call fcn.00434400
jmp 0x4292a9
mov eax, dword [0x4a9ce8]
mov ecx, dword [0x4a9ce4]
mov edx, dword [0x4a9ce0]
push eax
mov eax, dword [0x4a9cdc]
push ecx
mov ecx, dword [0x4a9cd8]
push edx
mov edx, dword [0x4a9ccc]
push eax
mov eax, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
mov edx, dword [0x4a9cc0]
push eax
push ecx
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9cd4]
push esi
call fcn.0044fed0
jmp 0x4292a9
mov edx, dword [0x4a9cd0]
cmp cl, 0x47
sete al
movzx ecx, al
mov eax, dword [0x4a9ccc]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
mov edx, dword [0x4a9cc0]
push eax
push ecx
mov ecx, dword [0x4a9cd4]
push edx
mov edx, dword [0x4a9cc8]
push esi
call fcn.00434520
jmp 0x4292a9
mov esi, dword [0x4a9ccc]
push 1
xor bl, bl
call fcn.0040ce30
add esp, 4
mov byte [esp + 0xa8], al
test al, al
jne 0x42735e
mov eax, dword [0x4a9ccc]
mov ecx, dword [esp + 0x48]
push eax
push 0
push str.Parameter_4_invalid.
call fcn.0042e430
mov esi, dword [esp + 0x48]
jmp 0x4292a9
mov ecx, dword [0x4a9cd0]
cmp byte [ecx], bl
je 0x427378
mov ecx, dword [esp + 0x48]
mov edi, 4
call fcn.00420560
jmp 0x42737d
mov eax, 1
mov edx, dword [0x4a9cd8]
mov ecx, dword [0x4a9cc8]
push edx
mov edx, dword [0x4a9cc0]
push ecx
mov ecx, dword [0x4a9cd4]
push edx
mov edx, dword [esp + 0xb4]
push ecx
mov ecx, dword [0x4a9cdc]
push eax
mov eax, dword [esp + 0x5c]
push edx
mov edx, dword [0x4a9cc4]
push eax
call fcn.004345e0
mov esi, dword [esp + 0x48]
jmp 0x4292a9
mov ecx, dword [0x4a9cdc]
mov edx, dword [0x4a9cd8]
mov eax, dword [0x4a9cd0]
push ecx
mov ecx, dword [0x4a9ccc]
push edx
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cc0]
push edx
mov edx, dword [0x4a9cd4]
push eax
push ecx
mov ecx, dword [0x4a9ce0]
push esi
call fcn.00434c20
jmp 0x4292a9
mov edx, dword [0x4a9ce0]
mov eax, dword [0x4a9cdc]
mov ecx, dword [0x4a9cd8]
push edx
mov edx, dword [0x4a9cd4]
push eax
mov eax, dword [0x4a9cd0]
push ecx
push edx
push eax
mov ecx, esi
call fcn.00434e50
jmp 0x4292a9
mov ecx, dword [0x4a9cd0]
mov edx, dword [0x4a9ccc]
mov eax, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
push eax
push ecx
push esi
call fcn.00434fa0
jmp 0x4292a9
mov edx, dword [0x4a9ccc]
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc0]
push edx
mov edx, dword [0x4a9cc4]
push eax
push ecx
mov ecx, dword [0x4a9cd0]
push esi
call fcn.00435170
jmp 0x4292a9
mov edx, dword [0x4a9cd0]
mov eax, dword [0x4a9ccc]
mov ecx, dword [0x4a9cc4]
mov esi, dword [0x4a9cc0]
push edx
mov edx, dword [esp + 0x4c]
push eax
push ecx
mov ecx, dword [0x4a9cd4]
push edx
mov edx, dword [0x4a9cc8]
call fcn.00435280
mov esi, dword [esp + 0x48]
jmp 0x4292a9
mov eax, dword [0x4a9cd0]
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9ccc]
push ecx
mov ecx, dword [0x4a9cd4]
push esi
call fcn.00435340
jmp 0x4292a9
mov edx, dword [0x4a9cd8]
mov eax, dword [0x4a9cd4]
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9ccc]
push eax
mov eax, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
mov edx, dword [0x4a9cc0]
push eax
push esi
call fcn.004501d0
jmp 0x4292a9
mov ecx, dword [0x4a9cdc]
mov edx, dword [0x4a9cd8]
mov eax, dword [0x4a9cd4]
push ecx
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9ccc]
push eax
mov eax, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
push eax
push esi
call fcn.00450970
jmp 0x4292a9
mov ecx, dword [0x4a9cd0]
mov eax, dword [0x4a9ccc]
mov edx, dword [0x4a9cc8]
mov edi, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cd4]
call fcn.00435bf0
jmp 0x4292a9
mov edx, dword [0x4a9cd8]
mov eax, dword [0x4a9cd4]
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cc0]
push edx
mov edx, dword [0x4a9ccc]
push eax
push ecx
mov ecx, dword [0x4a9cdc]
call fcn.00435c60
jmp 0x4292a9
cmp cl, 0x90
sete dl
movzx eax, dl
push eax
mov eax, esi
call fcn.00435d90
jmp 0x4292a9
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc0]
push ecx
mov ecx, dword [0x4a9cc8]
push esi
call fcn.004360a0
jmp 0x4292a9
mov edx, dword [0x4a9cd4]
mov eax, dword [0x4a9cd0]
mov ecx, dword [0x4a9ccc]
push edx
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cc0]
push edx
push eax
push esi
call fcn.00436700
jmp 0x4292a9
cmp byte [esi + 1], 1
jbe 0x427653
mov ecx, dword [0x4a9ccc]
mov edx, dword [0x4a9cc8]
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9cc0]
call fcn.00436b00
jmp 0x4292a9
mov edi, dword [0x4a9cc0]
mov ecx, 0x4987f9
push 0x4987f9
mov eax, ecx
mov edx, ecx
call fcn.004428c0
test eax, eax
je case.0x428c0b.69
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, 1
jmp 0x4292a9
mov eax, dword [0x4a9ccc]
mov ecx, dword [0x4a9cd0]
mov edx, dword [0x4a9cc4]
push eax
mov eax, dword [0x4a9cc8]
call fcn.00436b30
jmp 0x4292a9
mov ecx, dword [0x4a9ccc]
mov eax, dword [0x4a9cc8]
mov edx, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cd0]
call fcn.00436d40
jmp 0x4292a9
mov edx, dword [0x4a9cd0]
mov eax, dword [0x4a9ccc]
mov ecx, dword [0x4a9cc4]
push edx
mov edx, dword [0x4a9cc8]
push eax
push ecx
mov ecx, dword [0x4a9cd4]
push esi
call fcn.00436e60
jmp 0x4292a9
mov edx, dword [0x4a9ccc]
mov ecx, dword [0x4a9cd0]
mov eax, dword [0x4a9cc8]
push edx
mov edx, dword [0x4a9cc4]
push esi
call fcn.00437700
jmp 0x4292a9
mov eax, dword [0x4a9cdc]
mov ecx, dword [0x4a9cd8]
mov edx, dword [0x4a9cd4]
push eax
mov eax, dword [0x4a9cd0]
push ecx
push edx
push eax
mov eax, esi
call fcn.004379d0
jmp 0x4292a9
mov ecx, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cc4]
push esi
call fcn.00437ca0
jmp 0x4292a9
push 0
push 0x1a3
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov edx, dword [0x4a6440]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle case.0x428c0b.69
push 1
push eax
call fcn.00401330
add esp, 8
mov eax, 1
jmp 0x4292a9
push 0
push 0x1a0
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [0x4a6440]
mov eax, dword [eax + 0x54]
cmp eax, 0xffffffff
jle case.0x428c0b.69
push 1
push eax
call fcn.00401330
add esp, 8
mov eax, 1
jmp 0x4292a9
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x42781a
mov edi, dword [0x4a9cc0]
cmp byte [edi], al
je 0x42781a
mov eax, 0x4abd80
call fcn.00419ae0
test eax, eax
jne 0x42781a
mov ecx, dword [0x4a9cc0]
push ecx
push eax
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042e430
jmp 0x4292a9
mov dword [0x4ac330], eax
mov eax, 1
jmp 0x4292a9
mov ecx, dword [esi + 0xc]
test ecx, ecx
jne 0x42785c
mov dl, 1
cmp dl, byte [esi + 1]
sbb eax, eax
and eax, dword [0x4a9c6c]
je 0x42785c
cmp byte [eax + 0x17], cl
jne 0x427849
mov edx, dword [eax + 0xc]
jmp 0x42784b
mov edx, eax
test byte [edx + 0x15], 2
je 0x42785c
cmp byte [eax + 0x17], 0
jne 0x42785a
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
mov eax, dword [0x4a9cc8]
mov edx, dword [0x4a9cc4]
push eax
mov eax, dword [0x4a9cc0]
push edx
push eax
call fcn.0040a570
add esp, 0xc
jmp 0x4292a9
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x4278c8
mov ecx, dword [0x4a9cc0]
push edi
mov esi, 0x4abd80
call fcn.00419b20
mov edi, eax
test edi, edi
jne 0x4278c8
mov eax, dword [0x4a9cc0]
cmp byte [eax], 0
jne 0x4278ae
mov edi, dword [ebx + 0x9c]
test edi, edi
jne 0x4278c8
mov ecx, dword [esp + 0x48]
push eax
push 0
push str.Target_label_does_not_exist.
call fcn.0042e430
mov esi, dword [esp + 0x48]
jmp 0x4292a9
mov esi, dword [0x4a9cc4]
cmp byte [esi], 0
je 0x427978
push 0
call fcn.00413e00
add esp, 4
test eax, eax
jne 0x42794e
push eax
mov eax, dword [0x4a9cc4]
push 1
push 1
push 1
call fcn.00471f70
add esp, 0x10
test eax, eax
jne 0x42796f
mov ecx, dword [0x4a9cc4]
push str.Delete
push ecx
call fcn.00484e01
add esp, 8
test eax, eax
jne 0x42792e
push edi
push 0x4abd80
call fcn.004199f0
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov edx, dword [0x4a9cc4]
mov ecx, dword [esp + 0x48]
push edx
push 0
push str.Parameter_2_invalid.
call fcn.0042e430
mov esi, dword [esp + 0x48]
jmp 0x4292a9
jle 0x42796f
cmp eax, 2
jg 0x42796f
mov edx, dword [0x4a9cc8]
cmp eax, 1
sete al
push 0
movzx ecx, al
push ecx
push edx
push 0x4987f9
jmp 0x427990
mov esi, dword [0x4a9cc4]
cmp byte [esi], 0
mov ecx, dword [0x4a9cc8]
jne 0x427989
cmp byte [ecx], 0
je 0x427989
mov al, 1
jmp 0x42798b
xor al, al
push eax
push 1
push ecx
push esi
push edi
mov edi, 0x4abd80
call fcn.00419730
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov eax, dword [0x4a9cc0]
cmp byte [eax], 0
mov edi, 0x10
je 0x4279d9
push 0x49a4d4
push eax
call fcn.00484e01
add esp, 8
test eax, eax
je 0x4279d9
xor edi, edi
mov ecx, esi
call fcn.00420560
mov edi, eax
test edi, edi
je 0x4279de
mov eax, 1
mov byte [ebx + 0xca], al
test al, al
je 0x427a0a
or eax, 0xffffffff
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 0x24], eax
mov dword [ebx + 0xb4], edi
mov byte [ebx + 0xc8], 0
mov eax, 1
jmp 0x4292a9
mov dword [ebx + 0xb4], 5
mov byte [ebx + 0xc8], 1
mov eax, 1
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
call fcn.00413da0
dec eax
je 0x427acc
dec eax
je 0x427a84
dec eax
jne 0x427add
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x427a6e
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.00420560
or eax, edx
jne 0x427a6e
mov esi, dword [esp + 0x48]
mov eax, edi
mov byte [ebx + 0xc9], al
jmp 0x4292a9
mov esi, dword [esp + 0x48]
xor eax, eax
mov byte [ebx + 0xc9], al
mov eax, 1
jmp 0x4292a9
mov ecx, dword [0x4a9cc0]
cmp byte [ecx], 0
je 0x427aa2
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.00420560
mov dword [0x4ac394], eax
mov edx, dword [0x4a9cc4]
cmp byte [edx], 0
je 0x427add
mov ecx, dword [esp + 0x48]
mov edi, 2
call fcn.00420560
mov esi, dword [esp + 0x48]
mov dword [0x4ac390], eax
lea eax, [edi - 1]
jmp 0x4292a9
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.00420560
mov dword [ebx + 0x2c], eax
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov ebx, dword [esi + 0xc]
test ebx, ebx
jne 0x427b0e
mov edx, dword [0x4a9cc0]
push 0x4abd80
mov cl, 1
call fcn.004223d0
mov ebx, eax
test ebx, ebx
je case.0x425dbf.8
mov edi, dword [0x4a9ccc]
cmp byte [edi], 0
je 0x427b4a
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x427b47
mov eax, 0x4abd80
call fcn.00419ae0
test eax, eax
jne 0x427b47
mov eax, dword [0x4a9ccc]
push eax
push 0
push str.Target_label_does_not_exist.
mov ecx, esi
call fcn.0042e430
jmp 0x4292a9
mov dword [ebx + 0x10], eax
mov ecx, dword [0x4a9cd4]
mov edx, dword [0x4a9cd0]
mov eax, dword [0x4a9cc8]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
push eax
push ebx
call fcn.00477660
jmp 0x4292a9
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x427bb4
mov eax, dword [0x4a9cc0]
cmp byte [eax], 0
mov ebx, eax
je case.0x428c0b.69
mov edi, dword [0x4abdb8]
test edi, edi
je case.0x428c0b.69
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00484e01
add esp, 8
test eax, eax
je 0x427bb4
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x427b94
lea eax, [edi + 1]
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x427be4
push 0x49a15c
push eax
call fcn.00484e01
add esp, 8
test eax, eax
jne 0x427be4
mov al, 1
mov ecx, edi
push eax
call fcn.00477c60
mov eax, 1
jmp 0x4292a9
xor al, al
mov ecx, edi
push eax
call fcn.00477c60
mov eax, 1
jmp 0x4292a9
mov edi, dword [esi + 0xc]
test edi, edi
jne 0x427c40
mov eax, dword [0x4a9cc0]
cmp byte [eax], 0
mov ebx, eax
je case.0x428c0b.69
mov edi, dword [0x4abdb8]
test edi, edi
je case.0x428c0b.69
lea ecx, [ecx]
mov eax, dword [edi + 4]
push ebx
push eax
call fcn.00484e01
add esp, 8
test eax, eax
je 0x427c40
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x427c20
lea eax, [edi + 1]
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x427c9f
push 0x49afd4
push eax
call fcn.00484e01
add esp, 8
test eax, eax
jne 0x427c70
push edi
xor edx, edx
mov cl, 0x82
call fcn.00477910
mov eax, 1
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x427c9f
push 0x49a15c
push eax
call fcn.00484e01
add esp, 8
test eax, eax
jne 0x427c9f
mov al, 1
push eax
push edi
call fcn.004779d0
mov eax, 1
jmp 0x4292a9
xor al, al
push eax
push edi
call fcn.004779d0
mov eax, 1
jmp 0x4292a9
mov ecx, dword [0x4a9cc8]
mov eax, dword [0x4a9cc4]
push ecx
call fcn.0043db90
jmp 0x4292a9
test eax, eax
jne 0x427ce2
lea edi, [eax + 1]
mov ecx, esi
call fcn.00420560
call fcn.004124e0
mov eax, edi
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
push 0
push 1
push 0
push 1
call fcn.00471f70
add esp, 0x10
cmp eax, 2
je 0x427d1a
mov eax, dword [0x4a9cc8]
push 0
push 1
push 0
push 1
call fcn.00471f70
add esp, 0x10
cmp eax, 2
jne 0x427da8
mov edx, dword [0x4a9cc4]
cmp byte [edx], 0
je 0x427d33
mov edi, 1
mov ecx, esi
call fcn.00420610
jmp 0x427d35
fldz
mov eax, dword [0x4a9cc8]
fst qword [esp + 0x68]
cmp byte [eax], 0
je 0x427d6e
mov edi, 2
fstp st(0)
mov ecx, esi
call fcn.00420610
fst qword [esp + 0x78]
fld qword [esp + 0x68]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x427d7a
fstp qword [esp + 0x68]
fstp qword [esp + 0x78]
jmp 0x427d7e
fld qword [0x4a08f8]
fst qword [esp + 0x78]
jmp 0x427d5b
fstp st(0)
fstp st(0)
call fcn.00412650
fld qword [esp + 0x78]
fld qword [esp + 0x68]
mov ecx, dword [esp + 0x4c]
fsub st(1), st(0)
sub esp, 8
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push ecx
call fcn.00412bc0
jmp 0x4292a9
mov edx, dword [0x4a9cc4]
cmp byte [edx], 0
je 0x427dc7
mov edi, 1
mov ecx, esi
call fcn.00420560
mov ebx, eax
mov dword [esp + 0x78], eax
jmp 0x427dcd
xor ebx, ebx
mov dword [esp + 0x78], ebx
mov eax, dword [0x4a9cc8]
cmp byte [eax], 0
je 0x427de7
mov edi, 2
mov ecx, esi
call fcn.00420560
mov edi, eax
jmp 0x427dec
mov edi, SysReAllocString
cmp ebx, edi
jle 0x427dfa
mov eax, ebx
mov ebx, edi
mov dword [esp + 0x78], ebx
mov edi, eax
call fcn.00412600
mov ecx, eax
mov eax, ebx
cdq
mov ebx, eax
mov dword [esp + 0x68], edx
mov eax, edi
cdq
sub eax, ebx
sbb edx, dword [esp + 0x68]
add eax, 1
adc edx, 0
push edx
push eax
push 0
push ecx
call fcn.00494280
add eax, dword [esp + 0x78]
push 0x18
cdq
push edx
push eax
mov eax, dword [esp + 0x58]
call fcn.004010d0
mov eax, 1
jmp 0x4292a9
mov ecx, dword [0x4a9cc4]
push 1
push esi
call fcn.0043dd70
jmp 0x4292a9
mov edx, dword [0x4a9cc8]
mov eax, dword [0x4a9cc4]
mov ecx, dword [0x4a9cc0]
push edx
push esi
call fcn.0043df30
jmp 0x4292a9
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc4]
push esi
call fcn.0043e1d0
jmp 0x4292a9
mov eax, dword [0x4a9ccc]
mov edx, dword [0x4a9cc4]
push eax
xor eax, eax
cmp cl, 0x9b
sete al
push edx
dec eax
and eax, dword [0x4a9cc0]
push eax
push esi
call fcn.0043e750
jmp 0x4292a9
mov ecx, dword [0x4a9cc4]
cmp byte [ecx], 0
je 0x427ec7
mov edi, 1
mov ecx, esi
call fcn.00420560
dec eax
jmp 0x427ec9
xor eax, eax
cdq
test edx, edx
jg 0x427eda
jl 0x427ed4
test eax, eax
jae 0x427eda
xor eax, eax
mov dword [esp + 0x6c], eax
cmp byte [esi], 0x9d
push eax
jne 0x427eee
mov esi, dword [esp + 0x4c]
call fcn.0043f850
jmp 0x4292a9
mov edi, dword [0x4a9cc0]
mov ebx, esi
call fcn.0043f940
jmp 0x4292a9
mov edx, dword [0x4a9cc4]
cmp byte [edx], 0
je 0x427f1b
mov edi, 1
mov ecx, esi
call fcn.00420560
mov ebx, eax
jmp 0x427f20
mov ebx, 0x96
mov eax, dword [0x4a9cc0]
cmp byte [eax], 0
je 0x427f43
xor edi, edi
mov ecx, esi
call fcn.00420560
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
lea eax, [edi + 1]
jmp 0x4292a9
mov eax, 0x20b
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov eax, 1
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x427f7b
push str.wait
push eax
call fcn.00484e01
add esp, 8
test eax, eax
je 0x427fa0
mov eax, dword [0x4a9cc4]
push 0x499ee8
push eax
call fcn.00484e01
add esp, 8
test eax, eax
je 0x427fa0
xor al, al
push eax
mov eax, dword [0x4a9cc0]
push esi
call fcn.0043faa0
jmp 0x4292a9
mov eax, 1
push eax
mov eax, dword [0x4a9cc0]
push esi
call fcn.0043faa0
jmp 0x4292a9
cmp byte [esi + 1], 2
jae 0x427fc1
mov ebx, dword [ebx + 0x18]
jmp 0x427fc3
xor ebx, ebx
mov ecx, dword [0x4a9cc0]
mov edx, dword [0x4a9cc4]
push ebx
push ecx
push edx
push esi
call fcn.00440ef0
jmp 0x4292a9
mov ecx, dword [0x4a9cc4]
push esi
call fcn.00440520
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
mov ecx, dword [0x4a9cc8]
push eax
push esi
call fcn.00440b60
jmp 0x4292a9
push esi
call fcn.00441300
jmp 0x4292a9
mov eax, dword [0x4a9cc0]
mov esi, dword [esp + 0x48]
call fcn.00451ec0
jmp 0x4292a9
mov edi, dword [0x4a9cc0]
push esi
call fcn.00451fc0
jmp 0x4292a9
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc0]
push esi
call fcn.00441590
jmp 0x4292a9
add ebx, 0x30
push ebx
push 0
mov edi, 2
mov ecx, esi
call fcn.00420560
cmp eax, 1
mov eax, dword [0x4a9cc4]
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4a9cc0]
push eax
call fcn.00452660
add esp, 0x10
test eax, eax
jne 0x4280d0
mov ecx, dword [0x4aa51c]
push 1
push eax
push 0xffffffffffffffff
push 0x498884
push ecx
call fcn.00474ce0
jmp 0x4292a9
add ebx, 0x30
push ebx
push 1
mov edi, 2
mov ecx, esi
call fcn.00420560
mov ecx, dword [0x4a9cc4]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4a9cc0]
push eax
push ecx
call fcn.00452660
add esp, 0x10
push eax
push esi
call fcn.0042e320
jmp 0x4292a9
mov edi, 2
mov ecx, esi
call fcn.00420560
mov ecx, dword [0x4a9cc4]
cmp eax, 1
sete dl
movzx eax, dl
mov edx, dword [0x4a9cc0]
push eax
push ecx
call fcn.00452240
add esp, 8
test al, al
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042e260
jmp 0x4292a9
mov ecx, dword [0x4a9cc8]
mov al, byte [ecx]
call fcn.00409310
cmp al, 0x52
jne 0x428153
mov edx, dword [0x4a9cc4]
mov eax, dword [0x4a9cc0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
sete cl
movzx edx, cl
push edx
push esi
call fcn.0042e260
jmp 0x4292a9
mov edi, 2
mov ecx, esi
call fcn.00420560
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc0]
push ecx
mov edi, eax
call fcn.004523d0
add esp, 4
test al, al
sete dl
movzx eax, dl
push eax
push esi
call fcn.0042e260
jmp 0x4292a9
mov ecx, dword [0x4a9cc0]
push ecx
mov ecx, esi
call fcn.00440360
jmp 0x4292a9
mov edx, dword [0x4a9cc0]
cmp byte [edx], 0
je 0x4281dd
mov edi, 1
mov ecx, esi
call fcn.00420560
mov edx, dword [0x4a9cc0]
cmp eax, edi
sete al
movzx ecx, al
push ecx
call fcn.00452580
add esp, 4
test al, al
je 0x4281dd
xor al, al
push eax
push esi
call fcn.0042e260
jmp 0x4292a9
mov eax, 1
push eax
push esi
call fcn.0042e260
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
jne 0x428207
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
test ebx, ebx
jne 0x428207
mov eax, 0x4987f9
mov edi, esi
call fcn.00441730
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x428223
mov dword [esp + 0x78], eax
jmp 0x42823b
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x428233
add eax, 0x2c
mov dword [esp + 0x78], eax
jmp 0x42823b
mov dword [esp + 0x78], 0x4987f9
push 0
push ecx
mov ecx, dword [esp + 0x50]
mov edi, 3
call fcn.00420560
mov esi, dword [0x4a9cc8]
add esp, 4
cmp eax, 1
sete dl
movzx eax, dl
push eax
call fcn.004140e0
mov ecx, dword [esp + 0x80]
mov edx, dword [0x4a9cc0]
push eax
push ecx
mov ecx, dword [esp + 0x58]
push edx
call fcn.00441840
mov esi, dword [esp + 0x48]
xor eax, eax
cmp dword [ebx + 0xdc], eax
sete al
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
jne 0x4282aa
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
test ebx, ebx
jne 0x4282aa
mov eax, 0x4987f9
mov ecx, dword [0x4a9cc8]
movzx edx, byte [ecx]
push edx
mov edi, esi
call fcn.00441f20
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x4282d0
mov dword [esp + 0x78], eax
jmp 0x4282e8
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x4282e0
add eax, 0x2c
mov dword [esp + 0x78], eax
jmp 0x4282e8
mov dword [esp + 0x78], 0x4987f9
push 0
push ecx
mov ecx, dword [esp + 0x50]
mov edi, 4
call fcn.00420560
mov esi, dword [0x4a9ccc]
add esp, 4
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.004140e0
mov edx, dword [0x4a9cc8]
mov ecx, dword [esp + 0x80]
push eax
movzx eax, byte [edx]
mov edx, dword [0x4a9cc0]
push eax
push ecx
mov ecx, dword [esp + 0x5c]
push edx
call fcn.004420a0
mov esi, dword [esp + 0x48]
xor eax, eax
cmp dword [ebx + 0xdc], eax
sete al
jmp 0x4292a9
mov edi, dword [0x4a9cc4]
cmp byte [edi], 0
jne 0x428362
mov ebx, dword [ebx + 0x10]
lea edi, [ebx + 0x2c]
test ebx, ebx
jne 0x428362
mov edi, 0x4987f9
mov eax, dword [0x4a9cc8]
push eax
push esi
call fcn.00442660
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
jne 0x42838c
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
test ebx, ebx
jne 0x42838c
mov eax, 0x4987f9
push esi
call fcn.00452070
jmp 0x4292a9
mov edi, dword [0x4a9cc0]
call fcn.0043fc90
xor eax, eax
cmp dword [ebx + 0xdc], eax
sete al
jmp 0x4292a9
mov ecx, dword [0x4a9cd0]
mov edx, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9ccc]
push edx
mov edx, dword [0x4a9cc8]
push esi
call fcn.0043fd70
jmp 0x4292a9
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc4]
push eax
push ecx
mov ecx, dword [0x4a9ccc]
mov edx, esi
call fcn.004515b0
jmp 0x4292a9
mov edx, dword [0x4a9cc0]
push edx
push esi
call fcn.004518d0
jmp 0x4292a9
mov eax, dword [0x4a9ce0]
mov ecx, dword [0x4a9cdc]
mov edx, dword [0x4a9cd8]
mov ebx, dword [0x4a9cd0]
mov edi, dword [0x4a9ccc]
push eax
mov eax, dword [0x4a9cd4]
push ecx
mov ecx, dword [0x4a9cc4]
push edx
mov edx, dword [0x4a9cc0]
push eax
push ecx
mov ecx, dword [0x4a9cc8]
push edx
push esi
call fcn.00451c70
jmp 0x4292a9
push 0
mov ecx, 4
call fcn.0043a220
add esp, 4
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
push 7
call fcn.00413e00
add esp, 4
cmp eax, 7
jne 0x42848c
push 0
lea ecx, [eax - 6]
call fcn.0043a220
mov esi, dword [esp + 0x4c]
add esp, 4
jmp 0x4292a9
cmp byte [ebx + 0xd5], 0
je 0x4284b8
mov ecx, dword [0x4abcc0]
test ecx, ecx
jle 0x4284a2
dec ecx
jmp 0x4284a7
mov ecx, 0x18f
mov dword [0x4abcc0], ecx
mov dword [ecx*4 + 0x4ab680], 0
mov esi, dword [esp + 0x48]
cmp eax, 1
sete al
mov byte [ebx + 0xd5], al
mov eax, 1
jmp 0x4292a9
push 0
mov ecx, 2
call fcn.0043a220
add esp, 4
jmp 0x4292a9
push 0
mov ecx, 3
call fcn.0043a220
add esp, 4
jmp 0x4292a9
add ebx, 0x4c
call fcn.0045aa20
test eax, eax
je 0x428514
mov ecx, dword [0x4a6440]
mov edx, dword [ecx + 0x4c]
mov eax, dword [edx + 4]
jmp 0x428516
xor eax, eax
mov cl, byte [esi + 1]
push eax
test cl, cl
jne 0x428534
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push str.Press_OK_to_continue.
jmp 0x428579
cmp cl, 1
jne 0x428550
fldz
mov eax, dword [0x4a9cc0]
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push eax
jmp 0x428579
push ecx
mov edi, 3
mov ecx, esi
call fcn.00420610
push ecx
mov ecx, dword [0x4a9cc4]
fstp qword [esp]
push ecx
xor edi, edi
mov ecx, esi
call fcn.00420560
mov edx, dword [0x4a9cc8]
push eax
push edx
call fcn.004768d0
mov edi, eax
add esp, 0x18
test edi, edi
jne 0x4285ac
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x59e
jne 0x4285ac
mov eax, dword [0x4a9cc0]
push eax
push edi
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042e430
jmp 0x4292a9
xor eax, eax
test edi, edi
setne al
jmp 0x4292a9
mov ecx, dword [0x4a9cdc]
cmp byte [ecx], 0
je 0x4285da
mov edi, 7
mov ecx, esi
call fcn.00420560
mov dword [esp + 0x78], eax
mov ebx, SysReAllocString
jmp 0x4285e3
mov ebx, SysReAllocString
mov dword [esp + 0x78], ebx
mov edx, dword [0x4a9cd8]
cmp byte [edx], 0
je 0x428603
mov edi, 6
mov ecx, esi
call fcn.00420560
mov dword [esp + 0x8c], eax
jmp 0x42860a
mov dword [esp + 0x8c], ebx
mov eax, dword [0x4a9cd4]
cmp byte [eax], 0
je 0x428626
mov edi, 5
mov ecx, esi
call fcn.00420560
mov dword [esp + 0x64], eax
jmp 0x42862a
mov dword [esp + 0x64], ebx
mov ecx, dword [0x4a9cd0]
cmp byte [ecx], 0
je 0x428643
mov edi, 4
mov ecx, esi
call fcn.00420560
mov ebx, eax
mov edi, 9
mov ecx, esi
call fcn.00420610
mov edx, dword [0x4a9ce8]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x8c]
sub esp, 8
fstp qword [esp]
push edx
mov edx, dword [esp + 0x70]
push eax
mov eax, dword [0x4a9ccc]
mov al, byte [eax]
push ecx
push edx
call fcn.00409310
mov edx, dword [0x4a9cc8]
cmp al, 0x48
mov eax, dword [0x4a9cc4]
push edx
mov edx, dword [esp + 0x68]
push eax
sete cl
push edx
mov edi, ebx
call fcn.0043a4e0
add esp, 0x24
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je 0x4286ba
mov edi, 1
mov ecx, esi
call fcn.00420560
mov ebx, eax
jmp 0x4286bc
xor ebx, ebx
mov ecx, dword [0x4a9cc0]
cmp byte [ecx], 0
je 0x4286d2
xor edi, edi
mov ecx, esi
call fcn.00420560
jmp 0x4286d7
mov eax, 0xc8
mov edx, dword [0x4a9ccc]
mov ecx, dword [0x4a9cc8]
push edx
push ecx
push ebx
push eax
call fcn.0044fc60
jmp 0x4292a9
mov eax, dword [0x4a9d28]
test eax, eax
je 0x428712
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x428712
mov edx, dword [0x4a9d28]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4a9d28], 0
mov eax, 1
jmp 0x4292a9
mov eax, dword [0x4a9cd0]
mov ecx, dword [0x4a9ccc]
mov edx, dword [0x4a9cc8]
push 0
push eax
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cc0]
push edx
push eax
push ecx
push esi
mov ecx, 0x4987f9
call fcn.00430a90
jmp 0x4292a9
mov edx, dword [0x4a9cd4]
mov eax, dword [0x4a9cd0]
mov ecx, dword [0x4a9ccc]
push 1
push edx
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cc0]
push edx
push eax
push esi
call fcn.00430a90
jmp 0x4292a9
mov ecx, dword [0x4a9cc8]
mov edx, dword [0x4a9cc4]
mov eax, dword [0x4a9cc0]
push ecx
mov ecx, dword [0x4a9ccc]
push edx
push eax
push esi
call fcn.00431c60
jmp 0x4292a9
mov ecx, dword [0x4a9cc4]
mov edx, dword [0x4a9cc0]
mov edi, dword [0x4a9ccc]
mov esi, dword [0x4a9cc8]
push ecx
push edx
call fcn.00431f70
mov esi, dword [esp + 0x48]
jmp 0x4292a9
push esi
call fcn.00432cf0
jmp 0x4292a9
mov esi, dword [0x4a9cc4]
call fcn.00414380
mov esi, dword [0x4a9cc0]
movzx edi, ax
call fcn.004143f0
movzx ecx, ax
cmp ecx, 0xffffffff
je 0x42882a
cmp edi, 0xffffffff
je 0x42882a
mov edx, 3
shl dx, cl
shl di, cl
not dx
and dx, word [ebx + 0xcc]
or dx, di
mov word [ebx + 0xcc], dx
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
xor edi, edi
mov ecx, esi
call fcn.00420560
mov byte [ebx + 0xcb], al
cmp al, 0x64
jbe case.0x428c0b.69
mov byte [ebx + 0xcb], 2
lea eax, [edi + 1]
jmp 0x4292a9
mov eax, dword [ebx + 0xb0]
push eax
mov eax, dword [0x4a9cc0]
call fcn.00414050
mov dword [ebx + 0xb0], eax
add esp, 4
mov eax, 1
jmp 0x4292a9
xor edi, edi
mov ecx, esi
call fcn.00420560
cmp eax, 0x64
ja case.0x428c0b.69
mov byte [ebx + 0xd2], al
lea eax, [edi + 1]
jmp 0x4292a9
mov ecx, dword [0x4a9cc8]
push str.Play
push ecx
call fcn.00484e01
add esp, 8
test eax, eax
jne 0x4288f4
mov edx, dword [0x4a9cc0]
cmp byte [edx], al
je 0x4288d0
xor edi, edi
mov ecx, esi
call fcn.00420560
mov dword [ebx + 0x60], eax
mov eax, dword [0x4a9cc4]
cmp byte [eax], 0
je case.0x428c0b.69
mov edi, 1
mov ecx, esi
call fcn.00420560
mov dword [ebx + 0x68], eax
mov eax, edi
jmp 0x4292a9
mov ecx, dword [0x4a9cc0]
cmp byte [ecx], 0
je 0x42890b
xor edi, edi
mov ecx, esi
call fcn.00420560
mov dword [ebx + 0x5c], eax
mov edx, dword [0x4a9cc4]
cmp byte [edx], 0
je case.0x428c0b.69
mov edi, 1
mov ecx, esi
call fcn.00420560
mov dword [ebx + 0x64], eax
mov eax, edi
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
push str.Play
push eax
call fcn.00484e01
add esp, 8
xor edi, edi
mov ecx, esi
test eax, eax
jne 0x42895b
call fcn.00420560
mov dword [ebx + 0x70], eax
lea eax, [edi + 1]
jmp 0x4292a9
call fcn.00420560
mov dword [ebx + 0x6c], eax
mov eax, 1
jmp 0x4292a9
xor edi, edi
mov ecx, esi
call fcn.00420560
mov dword [ebx + 0x54], eax
lea eax, [edi + 1]
jmp 0x4292a9
xor edi, edi
mov ecx, esi
call fcn.00420560
mov dword [ebx + 0x58], eax
lea eax, [edi + 1]
jmp 0x4292a9
mov eax, dword [0x4a9cc0]
push 0x49c344
call fcn.00472460
add esp, 4
xor edi, edi
mov ecx, esi
test eax, eax
je 0x4289cc
mov dword [ebx], 0xffffffff
mov dword [ebx + 4], 0xffffffff
call fcn.00420560
mov dword [ebx + 0x24], eax
lea eax, [edi + 1]
jmp 0x4292a9
mov dword [ebx + 0x24], 0xffffffff
call fcn.00420560
mov ecx, eax
or ecx, edx
mov dword [ebx], eax
mov dword [ebx + 4], edx
jne case.0x428c0b.69
mov dword [ebx], 0xa
mov dword [ebx + 4], edi
lea eax, [ecx + 1]
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
push 7
call fcn.00413e00
add esp, 4
cmp eax, 7
je 0x428a19
cmp eax, 1
sete dl
mov byte [ebx + 0xcf], dl
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
call fcn.00413a70
dec eax
cmp eax, 5
ja case.default.0x428a3c
jmp dword [eax*4 + 0x429c38]
mov esi, dword [esp + 0x48]
mov eax, 1
mov dword [ebx + 0x20], eax
jmp 0x4292a9
mov esi, dword [esp + 0x48]
mov dword [ebx + 0x20], 2
mov eax, 1
jmp 0x4292a9
mov esi, dword [esp + 0x48]
mov dword [ebx + 0x20], 4
mov eax, 1
jmp 0x4292a9
mov esi, dword [esp + 0x48]
mov dword [ebx + 0x20], 3
mov eax, 1
jmp 0x4292a9
mov esi, dword [esp + 0x48]
mov byte [ebx + 0xc5], 1
mov eax, 1
jmp 0x4292a9
mov esi, dword [esp + 0x48]
mov byte [ebx + 0xc5], 0
mov eax, 1
jmp 0x4292a9
mov eax, dword [0x4a9cc0]
push eax
mov ecx, dword [esp + 0x4c]
push 0
push str.Parameter_1_invalid.
call fcn.0042e430
mov esi, dword [esp + 0x48]
jmp 0x4292a9
mov ecx, dword [0x4a9cc0]
push 5
push str.Float
push ecx
call fcn.00485880
add esp, 0xc
test eax, eax
jne 0x428bcf
lea edi, [eax + 1]
mov ecx, esi
call fcn.004204e0
cmp eax, 0x1e
jb 0x428b10
mov eax, edi
jmp 0x4292a9
mov ecx, esi
call fcn.00420560
mov dword [esp + 0xdc], edx
mov edx, dword [0x4a9cc4]
push 0x2e
push edx
mov edi, eax
call fcn.00485df1
mov esi, eax
add esp, 8
mov dword [esp + 0x68], esi
test esi, esi
je 0x428b47
inc esi
call fcn.00412ac0
mov esi, dword [esp + 0x68]
jmp 0x428b4b
xor eax, eax
xor edx, edx
add eax, edi
adc edx, dword [esp + 0xdc]
add eax, 2
adc edx, 0
mov dword [esp + 0x6c], edx
js 0x428b77
jg 0x428b69
cmp eax, 0xff
jbe 0x428b77
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
push 0
push 1
push 1
push 1
call fcn.00471f70
add esp, 0x10
mov ecx, 0x49c348
test eax, eax
jne 0x428b9a
mov ecx, 0x4987f9
mov eax, 0x4987f9
test esi, esi
jne 0x428ba8
mov eax, 0x49b47c
push ecx
push eax
mov eax, dword [0x4a9cc4]
push eax
push str.___s_s_s
add ebx, 0x74
push ebx
call fcn.00485338
mov esi, dword [esp + 0x5c]
add esp, 0x14
mov eax, 1
jmp 0x4292a9
mov ecx, dword [0x4a9cc0]
push 7
push str.Integer
push ecx
call fcn.00485880
add esp, 0xc
test eax, eax
jne case.0x428c0b.69
mov edx, dword [0x4a9cc4]
mov al, byte [edx]
movsx ecx, al
add ecx, 0xffffffbc
cmp ecx, 0x24
ja case.0x428c0b.69
movzx ecx, byte [ecx + 0x429c5c]
jmp dword [ecx*4 + 0x429c50]
mov byte [ebx + 0xd1], 0x44
mov eax, 1
jmp 0x4292a9
mov byte [ebx + 0xd1], al
mov eax, 1
jmp 0x4292a9
mov edx, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc4]
push edx
call fcn.0043b4b0
jmp 0x4292a9
mov edx, dword [0x4a9cd4]
mov al, 3
cmp al, byte [esi + 1]
mov eax, dword [0x4a9cd0]
sbb ecx, ecx
and ecx, dword [0x4a9c74]
push ecx
mov ecx, dword [0x4a9ccc]
push edx
mov edx, dword [0x4a9cc8]
push eax
mov eax, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cc0]
push edx
push eax
push ecx
push 0x4abd80
call fcn.004683d0
jmp 0x4292a9
mov edx, dword [0x4a9ccc]
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc4]
push edx
mov edx, dword [0x4a9cc0]
push eax
push 0x4abd80
call fcn.0045aa90
jmp 0x4292a9
mov eax, dword [0x4a9cc4]
mov cl, 2
cmp cl, byte [esi + 1]
mov ecx, dword [0x4a9cc0]
sbb edx, edx
and edx, dword [0x4a9c70]
push edx
push eax
mov eax, dword [0x4a9cc8]
push ecx
push esi
call fcn.0045b380
jmp 0x4292a9
mov edx, dword [0x4a9ccc]
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9cc4]
push edx
push eax
push ecx
push esi
call fcn.0045c3e0
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
call fcn.00413f00
cmp eax, 7
ja case.0x428d11.3
jmp dword [eax*4 + 0x429c84]
cmp byte [0x4a9e78], 0
jne case.0x428d11.3
call fcn.0042de70
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
cmp byte [0x4a9e78], 0
je case.0x428d11.3
call fcn.0042de70
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov ecx, dword [esp + 0x48]
mov edi, 1
call fcn.00420560
mov esi, dword [0x4a9cc0]
test eax, eax
setne al
movzx ecx, al
push ecx
call fcn.00413e50
mov edx, dword [esp + 0x4c]
push eax
push edx
call fcn.0042dec0
mov esi, dword [esp + 0x48]
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
push 7
call fcn.00413e00
add esp, 4
cmp eax, 7
je 0x428da7
cmp eax, 1
sete al
mov byte [ebx + 0xd0], al
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
call fcn.00413eb0
mov byte [ebx + 0xce], al
cmp al, 4
jne 0x428dd1
mov byte [ebx + 0xce], 0
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
push 7
call fcn.00413e00
add esp, 4
cmp eax, 7
je 0x428e00
cmp eax, 1
sete cl
mov byte [ebx + 0xc6], cl
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
push 7
call fcn.00413e00
add esp, 4
cmp eax, 7
je 0x428e2f
cmp eax, 1
sete dl
mov byte [ebx + 0xc7], dl
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
call fcn.00413f70
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x428e5b.3
movzx ecx, byte [ecx + 0x429cbc]
jmp dword [ecx*4 + 0x429ca4]
mov bl, 1
call fcn.0042dfc0
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
xor bl, bl
call fcn.0042dfc0
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov esi, dword [esp + 0x48]
mov dword [0x4a6450], eax
mov eax, 1
jmp 0x4292a9
or byte [0x4aa62a], 2
cmp dword [0x4a9e54], 0
mov byte [0x4aa629], 1
jne case.0x428e5b.3
mov edx, dword [0x4a7554]
movzx eax, word [edx]
push eax
call fcn.00407dd0
mov esi, dword [esp + 0x4c]
add esp, 4
mov eax, 1
jmp 0x4292a9
mov byte [0x4aa629], 0
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
mov edi, str._a_a_a_v
mov al, 0x90
call fcn.00442820
mov esi, dword [esp + 0x48]
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
mov edi, 0x4a6448
mov al, 0x14
call fcn.00442820
mov esi, dword [esp + 0x48]
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
mov edi, 0x4a644c
mov al, 0x91
call fcn.00442820
mov esi, dword [esp + 0x48]
jmp 0x4292a9
mov al, 1
mov edx, 0x4abd80
call fcn.004159e0
mov eax, 1
jmp 0x4292a9
xor edi, edi
mov ecx, esi
call fcn.00420560
push 1
push eax
call fcn.00401330
add esp, 8
lea eax, [edi + 1]
jmp 0x4292a9
mov ecx, dword [0x4a9ccc]
mov edx, dword [0x4a9cc4]
push ecx
mov ecx, dword [0x4a9cd0]
push edx
mov edx, dword [0x4a9cc8]
call fcn.0046e9b0
jmp 0x4292a9
mov eax, dword [0x4a9cc0]
mov ecx, dword [0x4a9ccc]
mov ebx, dword [0x4a9cc8]
mov edx, dword [0x4a9cc4]
push eax
push esi
call fcn.0046ead0
jmp 0x4292a9
cmp byte [esi + 1], 3
mov edx, dword [0x4a9cc4]
sbb ecx, ecx
not ecx
and ecx, dword [0x4a9cc8]
push ecx
push edx
mov edx, dword [0x4a9cc0]
push esi
call fcn.0046ebf0
jmp 0x4292a9
mov eax, 2
cmp byte [esi + 1], al
jae 0x429006
mov ebx, dword [ebx + 0x14]
test ebx, ebx
je 0x429006
lea eax, [ebx + 0x408]
push eax
mov eax, dword [ebx + 4]
lea ecx, [ebx + 8]
push ecx
push esi
call fcn.0046ec60
jmp 0x4292a9
lea edx, [esp + 0x62]
push edx
mov edx, dword [0x4a9cc4]
lea ecx, [esp + 0x8c]
push ecx
push edx
call fcn.00413730
mov edi, eax
mov eax, dword [esp + 0x94]
add esp, 0xc
test eax, eax
jne 0x429043
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9ccc]
mov dword [esp + 0x88], eax
jmp 0x429049
mov ecx, dword [0x4a9cc8]
push ecx
push eax
push esi
mov eax, edi
call fcn.0046ec60
cmp byte [esp + 0x62], 0
mov ebx, eax
je 0x429067
test edi, edi
je 0x429067
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x4292a9
cmp byte [esi + 1], 2
jae 0x4290a1
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x4290a1
mov ebx, dword [0x4a9cc0]
lea ecx, [eax + 0x408]
push ecx
mov ecx, dword [eax + 0x808]
lea edx, [eax + 8]
mov eax, dword [eax + 4]
push edx
push ecx
push esi
call fcn.0046f010
jmp 0x4292a9
mov ecx, dword [0x4a9cc4]
lea edx, [esp + 0x62]
push edx
lea eax, [esp + 0x8c]
push eax
push ecx
mov eax, 2
call fcn.00413730
mov edi, eax
mov eax, dword [esp + 0x94]
add esp, 0xc
test eax, eax
jne 0x4290e9
mov eax, dword [0x4a9cc8]
mov ecx, dword [0x4a9ccc]
mov ebx, dword [0x4a9cd0]
mov dword [esp + 0x88], eax
jmp 0x4290f5
mov ecx, dword [0x4a9cc8]
mov ebx, dword [0x4a9ccc]
mov esi, dword [0x4a9cc0]
push ecx
push eax
call fcn.004139a0
mov edx, dword [esp + 0x50]
push eax
push edx
mov eax, edi
call fcn.0046f010
cmp byte [esp + 0x62], 0
mov esi, eax
je 0x429123
test edi, edi
je 0x429123
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, esi
mov esi, dword [esp + 0x48]
jmp 0x4292a9
cmp byte [esi + 1], 1
jae 0x42919b
mov ecx, dword [ebx + 0x14]
test ecx, ecx
je 0x42919b
cmp dword [ecx + 0x808], 0xfffffffe
lea eax, [ecx + 0x408]
jne 0x429189
push eax
add ecx, 8
push ecx
push 0x49a6c8
mov esi, 0x400
lea edi, [esp + 0x14c]
call fcn.004720e0
mov ecx, dword [ebx + 0x14]
mov edx, dword [ecx + 4]
mov eax, dword [esp + 0x54]
add esp, 0xc
push edx
push eax
mov eax, 0x4987f9
mov ebx, edi
call fcn.0046f3f0
mov esi, dword [esp + 0x48]
jmp 0x4292a9
lea ebx, [ecx + 8]
mov ecx, dword [ecx + 4]
push ecx
push esi
call fcn.0046f3f0
jmp 0x4292a9
mov ecx, dword [0x4a9cc0]
lea edx, [esp + 0x62]
push edx
lea eax, [esp + 0x8c]
push eax
push ecx
mov eax, 2
call fcn.00413730
mov ebx, dword [esp + 0x94]
add esp, 0xc
mov edi, eax
test ebx, ebx
jne 0x4291dd
mov ebx, dword [0x4a9cc4]
mov eax, dword [0x4a9cc8]
mov dword [esp + 0x88], ebx
jmp 0x4291e2
mov eax, dword [0x4a9cc4]
push edi
push esi
call fcn.0046f3f0
cmp byte [esp + 0x62], 0
mov ebx, eax
je 0x429067
test edi, edi
je 0x429067
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
jmp 0x4292a9
mov esi, dword [0x4a9cc0]
call fcn.00413a20
mov esi, eax
cmp esi, 0xffffffff
jne 0x42922a
mov edx, dword [0x4a9cc0]
push edx
jmp 0x428ac3
call fcn.004735b0
test eax, eax
je 0x429239
mov dword [ebx + 0xac], esi
mov esi, dword [esp + 0x48]
mov eax, 1
jmp 0x4292a9
mov eax, dword [0x4a9cc0]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, 1
jmp 0x4292a9
xor edi, edi
mov ecx, esi
call fcn.00420560
push eax
call fcn.00452e70
xor ecx, ecx
add esp, 4
test al, al
setne cl
mov eax, ecx
jmp 0x4292a9
mov eax, dword [0x4a9cc0]
call fcn.004145b0
cmp eax, 0xffffffff
jne 0x42929a
mov edx, dword [0x4a9cc0]
push edx
push 0
push str.Parameter_1_invalid.
mov ecx, esi
call fcn.0042e430
jmp 0x4292a9
mov dword [ebx + 0xd8], eax
mov eax, 1
jmp 0x4292a9
xor eax, eax
mov dword [esp + 0x58], eax
test eax, eax
je 0x4292df
cmp dword [ebp + 8], 3
je 0x4292df
mov eax, dword [esi + 0x14]
mov dword [esp + 0x48], eax
mov esi, dword [esp + 0x48]
test esi, esi
je 0x4292da
mov ebx, dword [esp + 0x74]
xor edi, edi
jmp 0x425020
mov ecx, dword [esp + 0x80]
mov dword [ecx], edx
mov eax, 1
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x80]
mov dword [ecx], edx
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x80]
mov dword [eax], edx
jmp 0x4292da
test edi, edi
je 0x429384
cmp dword [edi + 8], 0
jne 0x429384
mov eax, dword [0x4a9c68]
test eax, eax
je 0x429375
cmp byte [eax + 0x17], 0
jne 0x429342
mov ecx, dword [eax + 0xc]
jmp 0x429344
mov ecx, eax
test byte [ecx + 0x15], 2
je 0x429375
mov edi, dword [ebp + 0xc]
call fcn.00412e30
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 8], 0
mov ecx, dword [0x4a9cc0]
mov dword [edi], ecx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x4293cb
mov eax, dword [esi + 0x18]
mov ecx, dword [esp + 0x80]
mov dword [ecx], eax
cmp byte [eax], 0x6c
jne 0x4292da
mov edx, dword [eax + 0x14]
jmp 0x4292d8
mov eax, 5
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x4293f7
mov eax, dword [esp + 0x80]
mov dword [eax], esi
mov eax, 6
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4a9cc4]
push ecx
mov ecx, dword [esp + 0x4c]
push 0
push str.Parameter_2_invalid.
call fcn.0042e430
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4a9cc8]
push edx
push 0
push str.Parameter_3_invalid.
mov ecx, esi
call fcn.0042e430
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x74]
cmp byte [eax + 0xe4], 0
jne 0x429487
mov esi, eax
add esi, 0xdc
call fcn.0042eaf0
xor eax, eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test ebx, ebx
je 0x4294ad
lea esi, [esp + 0x68]
call fcn.0042eaf0
test edi, edi
je 0x4294e4
cmp edi, 8
je 0x4294e4
mov ecx, dword [0x4ac0f0]
push 0x4987f9
push 0
push str.Jumps_cannot_exit_a_FINALLY_block.
call fcn.0042e430
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, edi
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [esi + 1], 0
jne 0x42952d
push 0x4987f9
push 0
push str.An_exception_was_thrown.
mov ecx, esi
call fcn.0042e170
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebx + 0xdc], 0
lea eax, [ebx + 0xdc]
mov dword [esp + 0xac], eax
je 0x42954e
mov esi, eax
call fcn.0042eaf0
mov esi, dword [esp + 0x48]
push 0x10
call fcn.00487060
mov edi, eax
add esp, 4
test edi, edi
je 0x429594
mov eax, dword [0x4abcc8]
test eax, eax
jne 0x4295be
mov edx, dword [esi + 8]
movzx eax, word [edx + 2]
mov ecx, 0xff
mov ebx, ecx
cmp ax, cx
jb 0x42957c
mov ebx, eax
inc ebx
push ebx
call fcn.00484fb9
add esp, 4
mov dword [0x4abcc8], eax
test eax, eax
jne 0x4295c4
mov dword [0x4abccc], eax
push 0x4987f9
push 0
push str.Out_of_memory.
mov ecx, esi
call fcn.0042e430
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [0x4abccc]
xor ecx, ecx
push ecx
mov dword [esp + 0x68], eax
mov dword [esp + 0xac], eax
lea edx, [esp + 0xb4]
push edx
lea eax, [esp + 0xa8]
push eax
lea edx, [esp + 0x70]
push edx
lea eax, [esp + 0xb8]
push eax
push edi
lea edx, [esp + 0x70]
push edx
push ecx
push esi
mov dword [esp + 0xc4], ebx
mov dword [0x4abcc8], ecx
mov dword [0x4abccc], ecx
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], ecx
mov dword [edi + 8], 0x41
call fcn.00456f00
mov ebx, eax
cmp ebx, dword [esp + 0x64]
jne 0x429631
mov dword [edi + 0xc], ebx
jmp 0x429679
cmp dword [esp + 0x64], 0
mov dword [edi + 0xc], 0
je 0x429679
mov eax, dword [0x4abcc8]
test eax, eax
je 0x429663
push eax
call fcn.00484e18
add esp, 4
cmp dword [0x4abccc], 0x400000
jbe 0x429663
dec dword [0x4abcd0]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0xa0]
mov dword [0x4abcc8], eax
mov dword [0x4abccc], ecx
test ebx, ebx
jne 0x4296a1
push edi
call fcn.00484b78
mov eax, dword [esp + 0x5c]
add esp, 4
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [edi + 8], 0x41
jne 0x4296b0
mov dword [edi + 8], 0
mov dword [edi], ebx
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0x74]
mov dword [eax], edi
mov dword [edx + 0xe0], esi
xor eax, eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4a7554]
cmp word [ecx], 0
jne 0x42970c
cmp dword [0x4ab61c], 0
jne 0x42970c
cmp dword [0x4a9e50], 0
jne 0x42970c
cmp dword [0x4a9e54], 0
jne 0x42970c
cmp byte [0x4a9e70], 0
je case.0x42530e.222
mov eax, 8
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor edi, edi
mov ecx, esi
call fcn.00420560
push eax
push 0x4abd80
xor eax, eax
lea edx, [edi + 9]
call fcn.00415a10
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x80]
mov dword [edx], ecx
jmp 0x4292da
mov edx, dword [esp + 0x80]
mov dword [edx], ecx
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je 0x4292da
push 0x4987f9
push 0
push str.A__return__must_be_encountered_prior_to_this___.
mov ecx, esi
call fcn.0042e430
mov ecx, dword [esp + 0x574]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc