Function at 0x4253a0
Capabilities:
Check for time delay via gettickcount
Find taskbar
Move file
Print debug messages
Resolve function by parsing pe exports
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x49858b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x928
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
mov dword [esp + 0x8c], ecx
test eax, eax
jne 0x4253d6
lea eax, [esp + 0x70]
mov ebx, dword [0x4bd41c]
mov edx, eax
mov esi, ecx
mov dword [esp + 0x4c], eax
mov dword [edx], 0
mov dword [esp + 0x50], ebx
mov dword [esp + 0x28], esi
test ecx, ecx
je 0x4256d3
mov edi, dword [esp + 0x70]
mov edi, edi
cmp dword [0x4c3164], 0
je 0x42543a
cmp dword [0x4c3154], 0
je 0x425428
mov eax, dword [0x4c314c]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4c3154], 0
call dword [sym.imp.USER32.dll_CloseClipboard]
xor eax, eax
mov dword [0x4c3164], eax
mov dword [0x4c314c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x4bd41c]
mov ecx, eax
sub ecx, dword [0x4c3c2c]
cmp ecx, dword [edx + 0xd0]
jbe 0x425487
push 0
push 0
push 0
push 0
lea eax, [esp + 0xf4]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x42547c
push 1
push 0xffffffffffffffff
call fcn.00401360
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4c3c2c], eax
cmp byte [ebx + 0xe4], 0
jne 0x4254b8
cmp byte [ebx + 0xe6], 0
jne 0x4254b8
mov edx, dword [0x4c3c20]
cmp edx, 0xffffffff
jle 0x4254b8
mov ecx, dword [ebx + 0x28]
cmp ecx, edx
jle 0x4254b4
mov byte [ebx + 0xe4], 1
jmp 0x4254b8
inc ecx
mov dword [ebx + 0x28], ecx
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
cmp ecx, 0xffffffff
jl 0x4254db
jg 0x4254c9
cmp edx, 0xffffffff
jbe 0x4254db
cmp dword [0x4c3c1c], ecx
jg 0x4254ed
jl 0x4254db
cmp dword [0x4c3c18], edx
jae 0x4254ed
mov ecx, dword [ebx + 0x24]
cmp ecx, 0xffffffff
jle 0x4254f9
sub eax, dword [0x4c3c28]
cmp eax, ecx
jb 0x4254f9
push 1
push 0xa
call fcn.00401360
add esp, 8
cmp byte [ebx + 0xee], 0
je 0x42551a
push 1
push 0x8000012f
call fcn.00401360
add esp, 8
cmp byte [ebx + 0xee], 0
jne 0x425502
mov dword [0x4c3794], esi
cmp byte [ebx + 0xef], 0
je 0x425562
mov ecx, dword [0x4c3098]
mov dword [ecx*4 + 0x4c2a58], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x4c3098]
mov dword [ecx*4 + 0x4c0788], eax
inc ecx
mov dword [0x4c3098], ecx
cmp ecx, 0x190
jl 0x425562
mov dword [0x4c3098], 0
mov al, byte [esi]
cmp al, 1
je 0x425585
cmp al, 0x6a
je 0x425585
mov edx, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push edx
push esi
call fcn.00455000
mov edi, eax
cmp edi, 1
jne 0x429196
mov al, byte [esi]
cmp al, 0xa
jb 0x4256ef
cmp al, 0x21
ja 0x4256ef
add dword [0x4c3c18], 1
push esi
adc dword [0x4c3c1c], 0
call fcn.00429930
cmp eax, 3
jne 0x425647
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x6e
jne 0x4255df
mov ebx, dword [ebp + 0xc]
nop
mov ecx, dword [ecx + 0x14]
lea eax, [esp + 0x3c]
push eax
push ebx
push 2
call fcn.004253a0
mov ecx, dword [esi + 0x14]
mov edi, eax
mov eax, dword [esp + 0x3c]
cmp eax, ecx
je 0x4255c0
jmp 0x4255f5
mov eax, dword [ebp + 0xc]
lea edx, [esp + 0x3c]
push edx
push eax
push 3
call fcn.004253a0
mov edi, eax
mov eax, dword [esp + 0x3c]
cmp eax, esi
je 0x426214
cmp dword [ebp + 8], 3
je 0x429190
cmp edi, 1
jne 0x429190
test eax, eax
je 0x425629
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x4291d9
mov dword [esp + 0x28], eax
jmp 0x426210
mov esi, dword [esi + 0x18]
cmp byte [esi], 9
mov dword [esp + 0x28], esi
jne 0x426210
mov edx, esi
mov eax, dword [edx + 0x18]
mov dword [esp + 0x28], eax
jmp 0x426210
mov esi, dword [esi + 0x18]
cmp byte [esi], 9
mov dword [esp + 0x28], esi
jne 0x4256c9
mov ecx, dword [esi + 0x14]
cmp byte [ecx], 0x6e
jne 0x42567f
mov ebx, dword [ebp + 0xc]
mov edi, edi
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x3c]
push edx
push ebx
push 2
call fcn.004253a0
mov ecx, dword [esi + 0x14]
mov edi, eax
mov eax, dword [esp + 0x3c]
cmp eax, ecx
je 0x425660
jmp 0x425695
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x3c]
push eax
push edx
push 3
call fcn.004253a0
mov edi, eax
mov eax, dword [esp + 0x3c]
cmp dword [ebp + 8], 3
je 0x429190
cmp edi, 1
jne 0x429190
test eax, eax
je 0x4256c1
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x4291d9
mov dword [esp + 0x28], eax
jmp 0x426210
mov edx, dword [esi + 0x18]
jmp 0x42620c
cmp dword [ebp + 8], 3
jne 0x426210
mov eax, 1
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
movzx eax, al
add eax, 0xfffffff8
cmp eax, 0xd0
ja case.0x425707.9
movzx eax, byte [eax + 0x429424]
jmp dword [eax*4 + 0x4293f4]
mov ecx, 1
add dword [0x4c3c18], ecx
adc dword [0x4c3c1c], 0
mov eax, dword [esi + 0x18]
test eax, eax
je 0x4257a1
xor ebx, ebx
cmp dword [esi + 0xc], ecx
mov edx, eax
sete bl
mov dword [esp + 0x68], edx
test ebx, ebx
je 0x425753
mov eax, dword [esp + 0x50]
mov ecx, dword [eax + 0xb4]
mov dword [eax + 0xb8], ecx
mov dword [eax + 0xb4], 0
mov ecx, edx
call fcn.004012b0
mov edi, eax
test ebx, ebx
je 0x42577a
mov eax, dword [esp + 0x50]
mov edx, dword [eax + 0xb8]
mov dword [eax + 0xb4], edx
mov dword [eax + 0xb8], 0
test edi, edi
je 0x429196
cmp edi, 8
je 0x429196
cmp dword [ebp + 8], 3
je 0x4291af
mov eax, dword [esi + 0x14]
mov dword [esp + 0x28], eax
jmp 0x426210
push esi
mov bl, cl
call fcn.004403e0
mov edx, eax
mov dword [esp + 0x68], edx
test edx, edx
je 0x4258f1
mov ecx, dword [esp + 0x50]
cmp dword [ecx + 0xb4], 0
je 0x4257da
mov eax, dword [edx + 4]
call fcn.004404b0
test eax, eax
je 0x4257da
mov ebx, 1
jmp 0x425739
xor ebx, ebx
jmp 0x425753
add dword [0x4c3c18], 1
adc dword [0x4c3c1c], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x68], eax
test eax, eax
jne 0x42580e
push esi
mov bl, 1
call fcn.004403e0
mov dword [esp + 0x68], eax
test eax, eax
je 0x4258f1
cmp dword [ebp + 8], 3
mov ecx, dword [esp + 0x50]
mov dword [ecx + 0xbc], eax
je 0x4291d6
mov ecx, dword [eax + 4]
mov edx, dword [esi + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x4291d6
mov dword [esp + 0x28], ecx
jmp 0x426210
add dword [0x4c3c18], 1
mov eax, dword [esp + 0x8c]
adc dword [0x4c3c1c], 0
mov eax, dword [eax + 0xc]
mov dword [esp + 0x30], eax
test eax, eax
jne 0x425870
mov ecx, dword [0x4c0dc8]
push eax
push ecx
mov ecx, 0x4c3168
call fcn.00422940
mov dword [esp + 0x30], eax
mov edi, 1
test eax, eax
je 0x425980
mov eax, dword [0x4c0dcc]
cmp word [eax], 0
je 0x42589e
push 0x49e978
push eax
call fcn.00486339
add esp, 8
test eax, eax
jne 0x42589e
mov al, 1
jmp 0x4258a0
xor al, al
lea edx, [esp + 0x68]
push edx
push eax
mov eax, dword [esp + 0x38]
push eax
xor eax, eax
call fcn.00470940
mov edx, dword [esp + 0x68]
mov dword [esp + 0x54], eax
test edx, edx
je 0x425974
mov eax, dword [edx + 4]
mov edi, dword [eax + 0x1c]
test edi, edi
je 0x42590a
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x4258de
cmp edi, ecx
je 0x42590a
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x4258d3
push 0x4a596c
push 0
push str.A_Goto_Gosub_must_not_jump_into_a_block_that_doesnt_enclose_it.
mov ecx, esi
call fcn.0042d460
xor eax, eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edi, dword [ebx + 0xb4]
test edi, edi
je 0x4259a9
call fcn.004404b0
test eax, eax
je 0x4259a9
mov dword [esp + 0x48], 1
mov dword [ebx + 0xb8], edi
mov dword [ebx + 0xb4], 0
mov ecx, edx
call fcn.004012b0
cmp dword [esp + 0x48], 0
mov edi, eax
je 0x425963
mov ecx, dword [ebx + 0xb8]
mov dword [ebx + 0xb4], ecx
mov dword [ebx + 0xb8], 0
test edi, edi
je 0x429196
cmp edi, 8
je 0x429196
cmp dword [esp + 0x54], 0
mov eax, 0x49b8d0
jne 0x425985
mov eax, 0x49e30c
mov ecx, dword [0x4c17f0]
push 1
push 0
push 0xffffffffffffffff
push eax
call fcn.0046dd60
cmp dword [ebp + 8], 3
je 0x4291af
mov edx, dword [esi + 0x14]
jmp 0x42620c
mov dword [esp + 0x48], 0
jmp 0x42593d
mov eax, dword [esi + 0xc]
mov dword [esp + 0x34], eax
cmp eax, 4
jne 0x4259d8
mov ebx, dword [0x4c0dc8]
push 0
call fcn.004130a0
add esp, 4
mov dword [esp + 0x6c], eax
jmp 0x425ac6
cmp eax, 1
ja 0x425a78
movzx eax, byte [esi + 1]
sub eax, 0
je 0x425a45
dec eax
mov eax, dword [0x4c0dc8]
je 0x425a31
push str.Read
push eax
call fcn.00486339
add esp, 8
test eax, eax
jne 0x425a11
mov dword [esp + 0x34], 5
jmp 0x425b11
mov ebx, dword [0x4c0dc8]
push 0
call fcn.004130a0
xor ecx, ecx
add esp, 4
test eax, eax
setne cl
add ecx, 3
mov dword [esp + 0x34], ecx
jmp 0x425a70
push 0
push 1
push 1
push 1
call fcn.0046b180
add esp, 0x10
test eax, eax
je 0x425a52
mov dword [esp + 0x34], 2
jmp 0x425b11
mov ebx, dword [0x4c0dc8]
push 0
call fcn.004130a0
xor edx, edx
add esp, 4
test eax, eax
setne dl
add edx, 3
mov dword [esp + 0x34], edx
mov ebx, dword [esp + 0x50]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x34]
cmp eax, 3
jne 0x425ac1
cmp byte [esi + 1], 1
ja 0x425a91
mov dword [esp + 0x60], 1
jmp 0x425aa8
mov esi, dword [0x4c0dcc]
call fcn.00413cf0
mov dword [esp + 0x60], eax
test eax, eax
je 0x4292bd
mov eax, dword [0x4c0dd0]
cmp word [eax], 0x31
jne 0x425b04
cmp word [eax + 2], 0
jne 0x425b04
mov byte [esp + 0x64], 1
jmp 0x425b09
cmp eax, 4
jne 0x425b11
cmp byte [esi + 1], 2
ja 0x425ad6
mov dword [esp + 0x60], 1
jmp 0x425aed
mov esi, dword [0x4c0dd0]
call fcn.00413cf0
mov dword [esp + 0x60], eax
test eax, eax
je 0x4292eb
mov eax, dword [0x4c0dd4]
cmp word [eax], 0x31
jne 0x425b04
cmp word [eax + 2], 0
mov byte [esp + 0x64], 1
je 0x425b09
mov byte [esp + 0x64], 0
mov ebx, dword [esp + 0x50]
mov esi, dword [esp + 0x28]
xor ecx, ecx
mov byte [esp + 0x2f], 0
mov dword [esp + 0x3c], ecx
mov eax, dword [esi + 0x18]
cmp byte [eax], 0x6b
mov dword [esp + 0x48], eax
jne 0x425b35
mov dword [esp + 0x30], eax
mov eax, dword [eax + 0x14]
mov dword [esp + 0x48], eax
jmp 0x425b39
mov dword [esp + 0x30], ecx
mov eax, dword [ebx + 0xc]
mov edx, dword [ebx + 8]
mov dword [esp + 0x94], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x58], eax
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x90], edx
mov edx, dword [ebx + 0x10]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x54], edx
mov edx, dword [ebx + 0x18]
mov dword [esp + 0x80], edx
cmp eax, 8
je 0x425b7f
mov dword [ebx + 8], 1
mov dword [ebx + 0xc], ecx
add eax, 0xfffffffe
cmp eax, 6
ja case.default.0x425b8b
jmp dword [eax*4 + 0x4294f8]
cmp byte [esi + 1], cl
jbe 0x425bb2
xor edi, edi
mov ecx, esi
call fcn.0041f690
cmp byte [esi], 8
jne 0x425bab
mov ecx, eax
or ecx, edx
je 0x425bb6
mov byte [esp + 0x74], 0
jmp 0x425bbb
xor eax, eax
xor edx, edx
mov byte [esp + 0x74], 1
mov ecx, dword [esp + 0x74]
push ecx
push edx
mov edx, dword [esp + 0x38]
push eax
push edx
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x43]
push ecx
push edx
mov edi, esi
call fcn.0042af90
mov edi, eax
jmp case.default.0x425b8b
mov ebx, dword [ebp + 0xc]
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x33]
push ecx
mov edi, esi
call fcn.0042b080
mov edi, eax
jmp case.default.0x425b8b
mov edx, dword [esp + 0x30]
push edx
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x37]
push ecx
push edx
push esi
call fcn.0042b1e0
mov edi, eax
jmp case.default.0x425b8b
mov eax, dword [0x4c0dd0]
push 0x4a25e0
push eax
call fcn.00486339
add esp, 8
test eax, eax
je 0x425c55
mov ecx, dword [esp + 0x30]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x37]
push eax
push ecx
push esi
call fcn.0042be50
mov edi, eax
jmp case.default.0x425b8b
mov edx, dword [esp + 0x30]
push edx
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x37]
push ecx
push edx
push esi
call fcn.0042c130
mov edi, eax
jmp case.default.0x425b8b
lea esi, [esp + 0xb0]
call fcn.00414230
mov dword [esp + 0x93c], 0
mov eax, dword [0x4c0dcc]
cmp word [eax], 0
je 0x425d24
mov ecx, dword [esp + 0x50]
mov esi, dword [ecx + 0xf0]
mov edx, dword [esp + 0xb0]
push 0x30c
push eax
mov eax, dword [edx + 4]
lea ecx, [esp + 0xb8]
and esi, 0x7fffffff
mov dword [esp + 0xc0], 0
call eax
test al, al
je 0x425d24
mov eax, esi
mov ebx, 0x30c
lea ecx, [esp + 0xb0]
call fcn.00468f50
test al, al
je 0x425d24
mov edx, dword [esp + 0x30]
mov ebx, dword [ebp + 0xc]
lea ecx, [esp + 0xb0]
push ecx
push edx
mov edx, dword [esp + 0x30]
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x3b]
push ecx
mov ecx, dword [0x4c0dd0]
push edx
call fcn.0042c430
lea esi, [esp + 0xb0]
mov edi, eax
call fcn.00414140
jmp 0x425d29
mov edi, 1
lea ecx, [esp + 0xb0]
mov dword [esp + 0x93c], 0xffffffff
call fcn.00414280
mov esi, dword [esp + 0x28]
jmp case.default.0x425b8b
mov eax, dword [0x4c0dc8]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x60]
push eax
mov eax, dword [esp + 0x34]
push ecx
push edx
push eax
mov eax, dword [ebp + 0xc]
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x43]
push edx
push eax
mov ecx, esi
call fcn.0042b570
mov edi, eax
jmp case.default.0x425b8b
mov ebx, dword [0x4c0dc8]
lea ecx, [esp + 0x5f]
push ecx
call fcn.004130a0
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x425dd3
mov edx, dword [0x4c0dcc]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x64]
push edx
mov edx, dword [esp + 0x64]
push ebx
push eax
mov eax, dword [esp + 0x3c]
push ecx
push edx
push eax
mov eax, dword [ebp + 0xc]
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x4b]
push edx
push eax
mov ecx, esi
call fcn.0042ba50
cmp byte [esp + 0x5f], 0
mov edi, eax
je case.default.0x425b8b
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp case.default.0x425b8b
mov edi, 1
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x58]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x14], edx
mov edx, dword [esp + 0x40]
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], edx
test edi, edi
je 0x429196
cmp edi, 7
je 0x429196
cmp edi, 8
je 0x429196
cmp byte [esp + 0x2f], 0
jne 0x426214
cmp dword [ebp + 8], 3
je 0x429318
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x425e5d
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [esi + 0x1c]
jne 0x429327
mov dword [esp + 0x28], eax
mov esi, eax
jmp 0x426214
mov edx, dword [esp + 0x48]
jmp 0x42620c
cmp dword [esi + 0xc], 1
jne 0x425e78
mov eax, dword [esi + 0x18]
mov dword [esp + 0x28], eax
jmp 0x426210
mov edx, dword [ebp + 0xc]
lea ecx, [esp + 0x3c]
push ecx
mov ecx, dword [esi + 0x14]
push edx
push 2
call fcn.004253a0
mov edi, eax
mov eax, dword [esp + 0x3c]
cmp eax, esi
je 0x426214
cmp dword [ebp + 8], 3
je 0x429190
cmp edi, 1
jne 0x429190
test eax, eax
je 0x4256c1
mov ecx, dword [esi + 0x1c]
cmp ecx, dword [eax + 0x1c]
jne 0x4291d9
mov dword [esp + 0x28], eax
mov esi, eax
jmp 0x426214
mov eax, dword [esp + 0x28]
mov esi, dword [0x4c0e18]
mov ebx, dword [0x4bd41c]
mov edi, 1
add dword [0x4c3c18], edi
mov edx, 0
mov dword [esp + 0x30], esi
adc dword [0x4c3c1c], edx
mov al, byte [eax]
movzx ecx, al
dec ecx
cmp ecx, 0xd9
ja case.0x425f0e.8
movzx ecx, byte [ecx + 0x429790]
jmp dword [ecx*4 + 0x429514]
mov edx, dword [esp + 0x28]
push edx
call fcn.0043a1f0
jmp 0x4261f1
mov eax, dword [esp + 0x28]
cmp byte [eax + 1], 1
mov ebx, dword [0x4c0dcc]
jbe 0x425f91
mov eax, dword [eax + 8]
cmp byte [eax + 0x11], dl
jne case.0x425f0e.3
mov eax, dword [eax + 0x1c]
cmp eax, edx
je 0x425f53
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
jmp 0x4261eb
mov eax, dword [0x4c0e1c]
cmp eax, edx
je 0x425f91
cmp word [ebx], dx
jne 0x425f91
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x425f6e
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
sub ecx, edi
je 0x425f85
sub ecx, 2
jne 0x425f91
push esi
call fcn.0046d830
jmp 0x4261f1
mov ecx, esi
call fcn.0046d610
jmp 0x4261f1
push 1
push 0
push 0xffffffffffffffff
push ebx
mov ecx, esi
call fcn.0046dd60
jmp 0x4261f1
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 8]
cmp dword [eax + 0x1c], edx
je 0x425fbf
cmp byte [eax + 0x11], dl
jne 0x425fbf
mov dword [esp + 0x34], edi
mov ebx, edi
xor edi, edi
jmp 0x425ffd
mov edi, dword [0x4c0e1c]
mov eax, dword [0x4c0dcc]
mov dword [esp + 0x34], edx
cmp edi, edx
je 0x425fe9
cmp word [eax], dx
jne 0x425fe9
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x425fe4
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x426046
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.0046b180
add esp, 0x10
mov ebx, eax
push 1
mov eax, esi
call fcn.00412730
mov edx, dword [0x4c0dd0]
mov dword [esp + 0x40], eax
movzx eax, word [edx]
test ax, ax
je 0x42618e
call fcn.00409040
movzx eax, ax
push eax
push str.SMHD
call fcn.00487101
add esp, 8
test eax, eax
je 0x42618e
test ebx, ebx
jne 0x426055
lea edi, [ebx + 1]
jmp case.0x425f0e.3
cmp edi, edx
je 0x425feb
push 1
mov eax, edi
call fcn.00412730
jmp 0x425ffb
cmp dword [esp + 0x34], 0
je 0x42606a
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426088
test edi, edi
je 0x426079
push 0
mov eax, edi
call fcn.00412820
jmp 0x426088
mov esi, dword [0x4c0dcc]
call fcn.004125e0
mov esi, dword [esp + 0x30]
push 0
fstp qword [esp + 0x44]
push 1
mov ecx, esi
call fcn.00401240
cmp word [eax], 0
je 0x4260cf
lea ecx, [esp + 0x78]
push ecx
push 0
push 1
mov ecx, esi
call fcn.00401240
call fcn.0046ad40
add esp, 4
test eax, eax
jne 0x4260f0
push 1
push eax
push 0xffffffffffffffff
push 0x4a596c
mov ecx, esi
call fcn.0046dd60
jmp 0x4261f1
lea edx, [esp + 0x98]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [esp + 0x78]
push eax
lea ecx, [esp + 0x9c]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov edx, dword [0x4c0dd0]
mov ax, word [edx]
call fcn.00409040
movzx eax, ax
add eax, 0xffffffbc
cmp eax, 0xf
ja case.0x426110.69
movzx eax, byte [eax + 0x429880]
jmp dword [eax*4 + 0x42986c]
fld qword [esp + 0x40]
fmul qword [0x4b7730]
jmp 0x42614b
fld qword [esp + 0x40]
fmul qword [0x4b7728]
jmp 0x42614b
fld qword [esp + 0x40]
fmul qword [0x4b7720]
jmp 0x42614b
fld qword [esp + 0x40]
fmul qword [0x4b7718]
jmp 0x42614b
fld qword [esp + 0x40]
mov esi, dword [esp + 0x78]
mov edi, dword [esp + 0x7c]
call fcn.004964f6
add esi, eax
adc edi, edx
mov dword [esp + 0x78], esi
push 0
lea eax, [esp + 0x7c]
lea esi, [esp + 0x104]
mov dword [esp + 0x80], edi
call fcn.0046aff0
mov ecx, dword [esp + 0x34]
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
call fcn.0046dd60
jmp 0x4261f1
cmp ebx, 2
je 0x426225
cmp dword [esp + 0x40], 2
je 0x426225
cmp dword [esp + 0x34], 0
je 0x4261ba
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x4261dc
test edi, edi
je 0x4261c9
push 0
mov eax, edi
call fcn.004127a0
jmp 0x4261d8
mov esi, dword [0x4c0dcc]
call fcn.004125b0
mov esi, dword [esp + 0x30]
mov ebx, edx
mov edi, eax
push 0
mov eax, esi
call fcn.004127a0
add eax, edi
adc edx, ebx
push edx
push eax
push esi
call fcn.00412620
mov edi, eax
test edi, edi
je 0x429196
cmp dword [ebp + 8], 3
je 0x429196
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx + 0x14]
mov dword [esp + 0x28], edx
mov esi, dword [esp + 0x28]
test esi, esi
je 0x4256d3
mov ebx, dword [esp + 0x50]
jmp 0x425400
cmp dword [esp + 0x34], 0
je 0x42623a
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x426258
test edi, edi
je 0x426249
push 0
mov eax, edi
call fcn.00412820
jmp 0x426258
mov esi, dword [0x4c0dcc]
call fcn.004125e0
mov esi, dword [esp + 0x30]
push 0
fstp qword [esp + 0x44]
mov eax, esi
call fcn.00412820
fadd qword [esp + 0x40]
sub esp, 8
fstp qword [esp]
push esi
call fcn.00412650
jmp 0x4261f1
mov eax, dword [0x4c0dd0]
movzx eax, word [eax]
cmp ax, dx
je 0x426369
call fcn.00409040
movzx ecx, ax
push ecx
push str.SMHD
call fcn.00487101
add esp, 8
test eax, eax
je 0x426369
mov ecx, dword [0x4c0e1c]
mov edi, dword [0x4c0dcc]
test ecx, ecx
je 0x4262df
cmp word [edi], 0
jne 0x4262df
mov al, byte [ecx + 0x17]
test al, al
jne 0x4262cc
mov edx, dword [ecx + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
jne 0x4262df
test ecx, ecx
je 0x4262df
push 0
push 1
call fcn.00401240
mov edi, eax
push 0
push 1
mov ecx, esi
call fcn.00401240
push eax
lea ebx, [esp + 0x62]
mov eax, edi
call fcn.0046b0a0
add esp, 4
cmp byte [esp + 0x5e], 0
mov esi, eax
mov edi, edx
je 0x42631d
mov ecx, dword [esp + 0x30]
push 1
push 0
push 0xffffffffffffffff
push 0x4a596c
call fcn.0046dd60
jmp 0x4261f1
mov eax, dword [0x4c0dd0]
mov ax, word [eax]
call fcn.00409040
movzx eax, ax
cmp eax, 0x44
je 0x42634b
cmp eax, 0x48
je 0x426342
cmp eax, 0x4d
jne 0x42635d
push 0
push 0x3c
jmp 0x426352
push 0
push 0xe10
jmp 0x426352
push 0
push 0x15180
push edi
push esi
call fcn.00496570
mov esi, eax
mov edi, edx
mov ecx, dword [esp + 0x30]
push edi
push esi
push ecx
jmp 0x4261ec
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 8]
cmp dword [eax + 0x1c], 0
je 0x426384
cmp byte [eax + 0x11], 0
jne 0x426384
mov dword [esp + 0x34], edi
xor ebx, ebx
jmp 0x4263c7
mov ebx, dword [0x4c0e1c]
mov eax, dword [0x4c0dcc]
mov dword [esp + 0x34], 0
test ebx, ebx
je 0x4263b3
cmp word [eax], 0
jne 0x4263b3
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x4263ae
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x426402
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.0046b180
add esp, 0x10
mov edi, eax
push 1
mov eax, esi
call fcn.00412730
cmp edi, 2
je 0x426445
cmp eax, 2
je 0x426445
cmp dword [esp + 0x34], 0
je 0x426411
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
push 0
mov eax, esi
call fcn.004127a0
sub eax, edi
sbb edx, ebx
jmp 0x4261e9
test ebx, ebx
je 0x4263b5
push 1
mov eax, ebx
call fcn.00412730
jmp 0x4263c5
test ebx, ebx
je 0x426420
push 0
mov eax, ebx
call fcn.004127a0
jmp 0x42642f
mov esi, dword [0x4c0dcc]
call fcn.004125b0
mov esi, dword [esp + 0x30]
mov edi, eax
push 0
mov eax, esi
mov ebx, edx
call fcn.004127a0
sub eax, edi
sbb edx, ebx
jmp 0x4261e9
cmp dword [esp + 0x34], 0
je 0x42645a
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426478
test ebx, ebx
je 0x426469
push 0
mov eax, ebx
call fcn.00412820
jmp 0x426478
mov esi, dword [0x4c0dcc]
call fcn.004125e0
mov esi, dword [esp + 0x30]
push 0
fstp qword [esp + 0x44]
mov eax, esi
call fcn.00412820
fsub qword [esp + 0x40]
sub esp, 8
fstp qword [esp]
push esi
call fcn.00412650
jmp 0x4261f1
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx + 8]
cmp dword [eax + 0x1c], edx
je 0x4264b3
cmp byte [eax + 0x11], dl
jne 0x4264b3
mov dword [esp + 0x34], edi
xor ebx, ebx
jmp 0x4264f1
mov ebx, dword [0x4c0e1c]
mov eax, dword [0x4c0dcc]
mov dword [esp + 0x34], edx
cmp ebx, edx
je 0x4264dd
cmp word [eax], dx
jne 0x4264dd
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x4264d8
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x42651c
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.0046b180
add esp, 0x10
mov edi, eax
push 1
mov eax, esi
call fcn.00412730
cmp edi, 2
je 0x426564
cmp eax, 2
je 0x426564
cmp dword [esp + 0x34], 0
je 0x42652b
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x42654d
cmp ebx, edx
je 0x4264df
push 1
mov eax, ebx
call fcn.00412730
jmp 0x4264ef
test ebx, ebx
je 0x42653a
push 0
mov eax, ebx
call fcn.004127a0
jmp 0x426549
mov esi, dword [0x4c0dcc]
call fcn.004125b0
mov esi, dword [esp + 0x30]
mov ebx, edx
mov edi, eax
push 0
mov eax, esi
call fcn.004127a0
push ebx
push edi
push edx
push eax
call fcn.0048d210
jmp 0x4261e9
cmp dword [esp + 0x34], 0
je 0x426579
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x426597
test ebx, ebx
je 0x426588
push 0
mov eax, ebx
call fcn.00412820
jmp 0x426597
mov esi, dword [0x4c0dcc]
call fcn.004125e0
mov esi, dword [esp + 0x30]
push 0
fstp qword [esp + 0x44]
mov eax, esi
call fcn.00412820
fmul qword [esp + 0x40]
sub esp, 8
fstp qword [esp]
push esi
call fcn.00412650
jmp 0x4261f1
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx + 8]
cmp dword [eax + 0x1c], edx
je 0x4265d2
cmp byte [eax + 0x11], dl
jne 0x4265d2
mov dword [esp + 0x34], edi
xor ebx, ebx
jmp 0x426610
mov ebx, dword [0x4c0e1c]
mov eax, dword [0x4c0dcc]
mov dword [esp + 0x34], edx
cmp ebx, edx
je 0x4265fc
cmp word [eax], dx
jne 0x4265fc
mov cl, byte [ebx + 0x17]
test cl, cl
jne 0x4265f7
mov ecx, dword [ebx + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
je 0x42663b
xor ebx, ebx
push 1
push 1
push 0
push 1
call fcn.0046b180
add esp, 0x10
mov edi, eax
push 1
mov eax, esi
call fcn.00412730
cmp edi, 2
je 0x426689
cmp eax, 2
je 0x426689
cmp dword [esp + 0x34], 0
je 0x42664a
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
jmp 0x42666c
cmp ebx, edx
je 0x4265fe
push 1
mov eax, ebx
call fcn.00412730
jmp 0x42660e
test ebx, ebx
je 0x426659
push 0
mov eax, ebx
call fcn.004127a0
jmp 0x426668
mov esi, dword [0x4c0dcc]
call fcn.004125b0
mov esi, dword [esp + 0x30]
mov ebx, edx
mov edi, eax
mov ecx, edi
or ecx, ebx
je 0x4266cb
push 0
mov eax, esi
call fcn.004127a0
push ebx
push edi
push edx
push eax
call fcn.00496570
jmp 0x4261e9
cmp dword [esp + 0x34], 0
je 0x42669e
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 0x1c]
fild qword [ecx]
jmp 0x4266bc
test ebx, ebx
je 0x4266ad
push 0
mov eax, ebx
call fcn.00412820
jmp 0x4266bc
mov esi, dword [0x4c0dcc]
call fcn.004125e0
mov esi, dword [esp + 0x30]
fst qword [esp + 0x40]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x4266df
push 1
push 0
push 0xffffffffffffffff
push 0
mov ecx, esi
call fcn.0046dd60
jmp 0x4261f1
push 0
mov eax, esi
call fcn.00412820
fdiv qword [esp + 0x40]
sub esp, 8
fstp qword [esp]
push esi
call fcn.00412650
jmp 0x4261f1
mov ecx, dword [esp + 0x28]
mov edi, 2
call fcn.0041f690
mov ebx, eax
test ebx, ebx
jns 0x42672a
mov edx, dword [0x4c0dcc]
push 1
xor ebx, ebx
push ebx
push ebx
push edx
mov ecx, esi
call fcn.0046dd60
jmp 0x4261f1
mov ecx, dword [esp + 0x28]
mov edi, 1
call fcn.0041f600
cmp ebx, eax
jle 0x42673e
mov ebx, eax
mov edx, dword [0x4c0dcc]
push 1
push 0
push ebx
push edx
mov ecx, esi
call fcn.0046dd60
jmp 0x4261f1
mov ecx, dword [esp + 0x28]
mov edi, 2
call fcn.0041f690
mov ebx, eax
test ebx, ebx
jns 0x42676c
xor ebx, ebx
mov ecx, dword [esp + 0x28]
mov edi, 1
call fcn.0041f600
cmp ebx, eax
jbe 0x426780
mov ebx, eax
mov ecx, dword [0x4c0dcc]
push 1
push 0
sub eax, ebx
lea eax, [ecx + eax*2]
push ebx
push eax
mov ecx, esi
call fcn.0046dd60
jmp 0x4261f1
mov eax, dword [esp + 0x28]
cmp byte [eax + 1], 4
jb 0x4267dd
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x34]
cmp word [ecx], dx
je 0x4267dd
mov ecx, dword [esp + 0x28]
mov edi, 3
call fcn.0041f690
mov dword [esp + 0x30], eax
cmp eax, 1
jge 0x4267e5
push 1
push 0
push 0xffffffffffffffff
push 0
mov ecx, esi
call fcn.0046dd60
jmp 0x4261f1
mov dword [esp + 0x30], SysStringLen
mov ecx, dword [esp + 0x28]
mov edi, 2
call fcn.0041f690
mov edx, dword [0x4c0dd8]
mov ebx, eax
mov ax, word [edx]
call fcn.00409040
cmp ax, 0x4c
jne 0x42682c
cmp ebx, 1
jl 0x4266cb
mov eax, dword [esp + 0x30]
mov ecx, 1
sub ecx, eax
add ebx, ecx
cmp ebx, 1
jge 0x426836
lea edx, [eax + ebx - 1]
mov dword [esp + 0x30], edx
cmp ebx, 1
jge 0x426836
mov ebx, 1
mov ecx, dword [esp + 0x28]
mov edi, 1
call fcn.0041f600
cmp eax, ebx
jb 0x4266cb
mov ecx, edi
sub ecx, ebx
add eax, ecx
cmp dword [esp + 0x30], eax
jbe 0x42685c
mov dword [esp + 0x30], eax
mov edx, dword [0x4c0dcc]
mov eax, dword [esp + 0x30]
push 1
push 0
lea ebx, [edx + ebx*2 - 2]
push eax
push ebx
mov ecx, esi
call fcn.0046dd60
jmp 0x4261f1
mov ecx, dword [esp + 0x28]
mov edi, 2
call fcn.0041f690
mov ebx, eax
test ebx, ebx
jns 0x426892
xor ebx, ebx
mov ecx, dword [esp + 0x28]
mov edi, 1
call fcn.0041f600
cmp ebx, eax
jbe 0x4268a6
mov ebx, eax
mov ecx, dword [0x4c0dcc]
push 1
push 0
sub eax, ebx
lea ecx, [ecx + ebx*2]
push eax
push ecx
mov ecx, esi
call fcn.0046dd60
jmp 0x4261f1
mov ecx, dword [esp + 0x28]
mov edi, 2
call fcn.0041f690
mov ebx, eax
test ebx, ebx
jns 0x4268d9
xor ebx, ebx
mov ecx, dword [esp + 0x28]
mov edi, 1
call fcn.0041f600
cmp ebx, eax
jbe 0x4268ed
mov ebx, eax
mov edx, dword [0x4c0dcc]
push 1
push 0
sub eax, ebx
push eax
push edx
mov ecx, esi
call fcn.0046dd60
jmp 0x4261f1
push 1
push 1
mov ecx, esi
call fcn.00401240
mov edi, eax
cmp edi, dword [0x4c0dcc]
jne 0x42692d
mov al, byte [esi + 0x17]
test al, al
jne 0x426929
mov eax, dword [esi + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
je 0x426976
mov ecx, dword [esp + 0x28]
push 1
push 0
mov edi, 1
call fcn.0041f600
push eax
push 0
mov ecx, esi
call fcn.0046dd60
cmp eax, edi
jne case.0x425f0e.8
push 0
push edi
mov ecx, esi
call fcn.00401240
mov ecx, dword [0x4c0dcc]
mov edi, eax
mov edx, edi
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x426965
mov ecx, dword [0x4c0dd0]
movzx eax, word [ecx]
test ax, ax
je 0x4269a5
call fcn.00409040
cmp ax, 0x54
jne 0x4269a5
mov edx, dword [0x4c0dd0]
cmp word [edx + 2], 0
jne 0x4269a5
mov eax, edi
call fcn.00412390
jmp 0x4269bd
mov eax, dword [esp + 0x28]
cmp byte [eax], 0x31
push edi
jne 0x4269b7
call dword [sym.imp.USER32.dll_CharLowerW]
jmp 0x4269bd
call dword [sym.imp.USER32.dll_CharUpperW]
cmp byte [esi + 0x17], 0
jne 0x4269c6
mov esi, dword [esi + 0xc]
cmp byte [esi + 0x17], 2
jne 0x4269e4
cmp dword [0x4c3158], 0
je 0x4269e4
mov ecx, 0x4c314c
call fcn.00403d50
jmp 0x4261f1
and byte [esi + 0x15], 0x86
mov eax, 1
jmp 0x4261f1
mov eax, dword [0x4c0e1c]
cmp eax, edx
je 0x426a1c
cmp byte [eax + 0x17], dl
jne 0x426a08
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x15]
jmp 0x426a0b
mov cl, byte [eax + 0x15]
test cl, 1
je 0x426a1c
call fcn.00412a60
push 0
jmp 0x4261ea
mov ecx, dword [esp + 0x28]
call fcn.0041f600
push 0
jmp 0x4261ea
mov esi, dword [0x4c0dd4]
movzx eax, word [esi]
mov dword [esp + 0x40], esi
mov dword [esp + 0x48], 0xffffffff
cmp ax, dx
je 0x426ac0
call fcn.00409040
movzx edx, ax
push edx
push 0x4a26dc
call fcn.00487101
add esp, 8
test eax, eax
je 0x426ac0
add esi, 2
cmp word [esi], 0
je 0x426ac0
call fcn.0040ca10
mov dword [esp + 0x34], eax
test eax, eax
jle 0x426bbb
mov eax, dword [0x4c0dd0]
cmp word [eax], 0
jne 0x426ac6
mov dword [esp + 0x48], 0
mov eax, 0x49b8d0
mov ecx, dword [0x4c17f0]
push 1
push 0
push 0xffffffffffffffff
push eax
call fcn.0046dd60
mov eax, dword [esp + 0x48]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x3c]
call fcn.004010e0
mov edi, 1
jmp case.0x425f0e.3
mov dword [esp + 0x34], edi
jmp 0x426a7a
mov ecx, dword [0x4c0dcc]
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x28]
mov edi, 4
mov dword [esp + 0x54], eax
call fcn.0041f690
mov esi, eax
test esi, esi
jns 0x426aea
xor esi, esi
mov ecx, dword [esp + 0x28]
mov edi, 1
call fcn.0041f600
mov edi, eax
cmp esi, edi
jge 0x426bbb
mov edx, dword [esp + 0x40]
movzx eax, word [edx]
cmp eax, 0x31
je 0x426b84
call fcn.00409040
cmp ax, 0x52
je 0x426b84
mov ecx, dword [esp + 0x28]
mov edi, 2
call fcn.0041f600
mov ebx, eax
mov eax, dword [esp + 0x58]
lea ecx, [eax + esi*2]
mov esi, dword [esp + 0x54]
mov edi, 1
lea esp, [esp]
mov edx, dword [0x4bd41c]
mov al, byte [edx + 0xe9]
test al, al
jne 0x426b59
mov eax, esi
call fcn.0046b6b0
jmp 0x426b74
cmp al, 2
jne 0x426b6a
push ecx
mov eax, esi
call fcn.0046b920
add esp, 4
jmp 0x426b74
push esi
push ecx
call fcn.00487128
add esp, 8
test eax, eax
je 0x426bbb
cmp edi, dword [esp + 0x34]
je 0x426ba7
inc edi
lea ecx, [eax + ebx*2]
jmp 0x426b40
movzx ecx, byte [ebx + 0xe9]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x54]
push eax
push ecx
mov ecx, dword [esp + 0x60]
push edx
mov eax, edi
sub eax, esi
push ecx
call fcn.0046b4a0
add esp, 0x10
test eax, eax
je 0x426bbb
sub eax, dword [esp + 0x58]
sar eax, 1
mov dword [esp + 0x48], eax
jns 0x426a8d
mov eax, 0x49e30c
jmp 0x426a92
mov edx, dword [esp + 0x28]
push edx
call fcn.0043a610
jmp 0x4261f1
mov eax, dword [0x4c0dd0]
mov ecx, dword [0x4c0dcc]
push eax
mov eax, dword [0x4c0dd4]
call fcn.00430a20
jmp 0x4261f1
mov ecx, dword [0x4c0dd4]
mov edx, dword [0x4c0dd0]
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [0x4c0dcc]
push edx
push eax
mov eax, dword [0x4c0dc8]
call fcn.0043a820
jmp 0x4261f1
mov ecx, dword [0x4c0dc8]
mov eax, dword [esp + 0x28]
push ecx
call fcn.0043ab40
jmp 0x4261f1
mov edx, dword [0x4c0dc8]
mov eax, dword [esp + 0x28]
mov ecx, dword [0x4c0dcc]
push edx
push eax
call fcn.0043b1c0
jmp 0x4261f1
mov esi, dword [esp + 0x28]
push 0
push ecx
mov edi, 7
mov ecx, esi
call fcn.0041f690
add esp, 4
push eax
mov edi, 6
mov ecx, esi
call fcn.0041f690
push eax
push ecx
mov edi, 5
mov ecx, esi
call fcn.0041f690
add esp, 4
push eax
mov edi, 4
mov ecx, esi
call fcn.0041f690
push eax
push ecx
mov edi, 3
mov ecx, esi
call fcn.0041f690
add esp, 4
push eax
mov edi, 2
mov ecx, esi
call fcn.0041f690
push eax
mov eax, dword [0x4c0de8]
push esi
call fcn.00436a50
jmp 0x4261f1
mov esi, dword [esp + 0x28]
mov edi, 5
mov ecx, esi
call fcn.0041f690
push eax
push ecx
mov edi, 4
mov ecx, esi
call fcn.0041f690
add esp, 4
push eax
mov edi, 3
mov ecx, esi
call fcn.0041f690
push eax
push ecx
mov edi, 2
mov ecx, esi
call fcn.0041f690
add esp, 4
push eax
mov eax, dword [0x4c0de0]
mov ecx, esi
call fcn.00437130
jmp 0x4261f1
mov ecx, dword [0x4c0dd4]
mov esi, dword [esp + 0x28]
push ecx
push ecx
mov edi, 2
mov ecx, esi
call fcn.0041f690
mov edi, 1
mov ecx, esi
mov ebx, eax
call fcn.0041f690
add esp, 4
mov ecx, eax
push esi
mov eax, ebx
call fcn.0044c8a0
jmp 0x4261f1
mov edx, dword [ebx + 0xcc]
cmp al, 0x42
sete al
push 0
push edx
mov edx, dword [0x4c0dc8]
movzx ecx, al
push ecx
push edx
call fcn.0040ce20
add esp, 0x10
jmp case.0x425f0e.3
mov ecx, dword [0x4c0dc8]
xor eax, eax
cmp dword [ebx + 0xcc], 3
push 0
sete al
lea eax, [eax + eax + 1]
push eax
push 0
push ecx
call fcn.0040ce20
add esp, 0x10
jmp case.0x425f0e.3
mov edx, dword [0x4c0dc8]
push 0
push 2
push 0
push edx
call fcn.0040ce20
add esp, 0x10
jmp case.0x425f0e.3
mov eax, dword [0x4c0dc8]
push 0
push 0
push 0
push eax
call fcn.0040ce20
add esp, 0x10
jmp case.0x425f0e.3
mov ecx, dword [0x4c0dc8]
push ecx
call fcn.0040f170
add esp, 4
jmp 0x4261f1
mov edx, dword [0x4c0de0]
mov ecx, dword [0x4c0dd8]
push 0x4a596c
push 0x4a596c
push edx
mov edx, dword [0x4c0dd4]
push ecx
mov ecx, dword [0x4c0dd0]
push edx
mov edx, dword [0x4c0dcc]
push ecx
push edx
mov edx, dword [0x4c0dc8]
push eax
mov eax, dword [0x4c0ddc]
call fcn.0040f3e0
add esp, 0x20
jmp 0x4261f1
mov ecx, dword [0x4c0ddc]
mov edx, dword [0x4c0dd4]
push ecx
mov ecx, dword [0x4c0de0]
push edx
mov edx, dword [0x4c0dd0]
push ecx
mov ecx, dword [0x4c0dcc]
push 0x4a596c
push 0x4a596c
push edx
mov edx, dword [0x4c0dc8]
push ecx
push eax
mov eax, dword [0x4c0dd8]
call fcn.0040f3e0
add esp, 0x20
jmp 0x4261f1
mov edx, dword [0x4c0dd4]
mov ecx, dword [0x4c0dcc]
push 0x4a596c
push 0x4a596c
push edx
mov edx, dword [0x4c0dc8]
push 0x4a596c
push 0x4a596c
push ecx
push edx
push eax
mov eax, dword [0x4c0dd0]
mov edx, 0x4a596c
call fcn.0040f3e0
add esp, 0x20
jmp 0x4261f1
mov esi, dword [esp + 0x28]
mov edi, 4
mov ecx, esi
call fcn.0041f690
push eax
mov ecx, esi
call fcn.00439650
jmp 0x4261f1
mov ecx, dword [0x4c0dd0]
push 0
cmp al, 0x71
mov eax, dword [0x4c0dd4]
push 0
push eax
mov eax, dword [0x4c0dcc]
push ecx
mov ecx, dword [0x4c0dc8]
sete dl
push eax
call fcn.0046e9c0
add esp, 0x14
test eax, eax
je case.0x425f0e.3
mov ecx, dword [0x4bd41c]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle case.0x425f0e.3
push 1
push eax
call fcn.00401360
add esp, 8
jmp case.0x425f0e.3
mov edx, dword [0x4c0dc8]
push 9
push str.ahk_group
push edx
call fcn.00486b72
add esp, 0xc
test eax, eax
jne 0x426f4b
mov eax, dword [0x4c0dcc]
cmp word [eax], 0
jne 0x426f4b
mov ecx, dword [0x4c0dd4]
cmp word [ecx], 0
mov byte [esp + 0x3b], 1
je 0x426f50
mov byte [esp + 0x3b], 0
mov esi, dword [esp + 0x28]
mov al, byte [esi]
xor edx, edx
cmp byte [esp + 0x3b], dl
setne dl
lea edi, [edx - 1]
and edi, 0x14
cmp al, 0x7d
je 0x426faf
cmp al, 0x7e
je 0x426faf
mov eax, dword [0x4c0dd0]
cmp word [eax], 0
je 0x426fe9
mov al, byte [esi]
cmp al, 0x7d
je 0x427021
cmp al, 0x7e
je 0x427023
mov ecx, dword [0x4c0dd0]
mov edx, dword [0x4c0dcc]
push ecx
mov ecx, dword [0x4c0dc8]
push edx
mov edx, dword [0x4c0dd4]
push eax
call fcn.004327a0
jmp 0x4261f1
mov ecx, dword [0x4c0dd0]
cmp word [ecx], 0
je 0x426fdd
mov edi, 2
mov ecx, esi
call fcn.0041f740
fmul qword [0x4b7690]
call fcn.004964c0
mov edi, eax
test edi, edi
jne 0x426fdd
mov edi, 0x1f4
mov edx, dword [0x4c0dd8]
cmp word [edx], 0
jne 0x426f78
cmp byte [esp + 0x3b], 0
je 0x426f78
mov eax, dword [0x4c0dc8]
push 0
add eax, 0x12
call fcn.004090c0
push eax
mov ecx, 0x4c3168
call fcn.00422940
test eax, eax
je 0x426f78
mov cl, byte [esi]
push eax
mov edx, edi
call fcn.00470770
jmp 0x4261f1
cmp al, 0x7e
mov edx, dword [0x4c0dd8]
sete al
movzx ecx, al
mov eax, dword [0x4c0dcc]
push ecx
push edx
push edi
push eax
mov eax, dword [0x4c0dd4]
push ebx
mov ebx, dword [0x4c0dc8]
call fcn.0046ecc0
add esp, 0x14
test eax, eax
je 0x427069
mov ecx, dword [0x4bd41c]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x427069
push 1
push eax
call fcn.00401360
add esp, 8
mov edi, 1
jmp case.0x425f0e.3
mov ecx, dword [0x4c0dcc]
call fcn.00436370
jmp 0x4261f1
mov edx, dword [0x4c0dcc]
mov eax, dword [0x4c0dc8]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
test eax, eax
mov eax, 0x49b8d0
jne 0x4270a4
mov eax, 0x49e30c
mov ecx, dword [0x4c17f0]
push 1
push 0
push 0xffffffffffffffff
push eax
call fcn.0046dd60
jmp 0x4261f1
lea ecx, [esp + 0xac]
push ecx
push 0x3a98
push 1
push str.Environment
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
mov ecx, dword [0x4c17f0]
push 1
push 0
push 0xffffffffffffffff
test eax, eax
je 0x4270fd
push 0x49b8d0
call fcn.0046dd60
jmp 0x4261f1
push 0x49e30c
call fcn.0046dd60
jmp 0x4261f1
mov edx, dword [0x4c0dcc]
mov eax, dword [0x4c0dc8]
push edx
push eax
call fcn.0044dfd0
jmp 0x4261f1
mov eax, dword [0x4c0dc8]
mov ecx, 0x4c3c30
call fcn.00468b00
mov eax, dword [0x4c0dcc]
mov ecx, 0x4c3c3c
call fcn.00468b00
mov eax, dword [0x4c0dd0]
mov ecx, 0x4c3c48
call fcn.00468b00
jmp case.0x425f0e.3
mov ecx, dword [0x4c0dd0]
mov eax, str.UseErrorLevel
call fcn.0046b6b0
test eax, eax
je 0x4271c8
mov edx, dword [esp + 0x28]
mov cl, 3
cmp cl, byte [edx + 1]
mov ecx, dword [0x4c0dd0]
mov edx, dword [0x4c0dcc]
sbb eax, eax
and eax, dword [0x4c0e24]
push eax
push 1
push 1
push 0
push ecx
push 0
push edx
mov edx, dword [0x4c0dc8]
push 0
push 0x4c3168
call fcn.0042de60
test eax, eax
mov eax, 0x49b8d0
jne 0x4271b1
mov eax, str.ERROR
mov ecx, dword [0x4c17f0]
push 1
push 0
push 0xffffffffffffffff
push eax
call fcn.0046dd60
jmp 0x4261f1
mov ecx, dword [esp + 0x28]
mov al, 3
cmp al, byte [ecx + 1]
mov eax, dword [0x4c0dd0]
mov ecx, dword [0x4c0dcc]
sbb edx, edx
and edx, dword [0x4c0e24]
push edx
mov edx, dword [0x4c0dc8]
push 1
push 0
push 0
push eax
push 1
push ecx
push 0
push 0x4c3168
call fcn.0042de60
jmp 0x4261f1
mov edx, dword [esp + 0x28]
push edx
call fcn.00432880
jmp 0x4261f1
mov eax, dword [esp + 0x28]
cmp byte [eax + 1], 2
jbe 0x42725c
mov ecx, dword [0x4c0de0]
mov edx, dword [0x4c0ddc]
mov eax, dword [0x4c0dd8]
push ecx
mov ecx, dword [0x4c0dd4]
push edx
mov edx, dword [0x4c0dd0]
push eax
mov eax, dword [0x4c0dcc]
push ecx
mov ecx, dword [0x4c0dc8]
push edx
mov edx, dword [0x4c0de4]
call fcn.00432f60
jmp 0x4261f1
mov eax, dword [0x4c0dcc]
mov ecx, dword [0x4c0dc8]
push 0x4a596c
push 0x4a596c
push 0x4a596c
push eax
mov edx, 0x4a596c
push ecx
mov eax, edx
mov ecx, edx
call fcn.00432f60
jmp 0x4261f1
mov edx, dword [0x4c0df0]
mov eax, dword [0x4c0dec]
mov ecx, dword [0x4c0de8]
push edx
mov edx, dword [0x4c0de4]
push eax
mov eax, dword [0x4c0de0]
push ecx
mov ecx, dword [0x4c0dd0]
push edx
mov edx, dword [0x4c0dcc]
push eax
mov eax, dword [0x4c0dc8]
push ecx
mov ecx, dword [0x4c0dd8]
push edx
mov edx, dword [0x4c0ddc]
push eax
mov eax, dword [0x4c0dd4]
call fcn.0044cca0
jmp 0x4261f1
cmp al, 0x47
mov eax, dword [0x4c0ddc]
sete cl
movzx edx, cl
mov ecx, dword [0x4c0dd8]
push edx
mov edx, dword [0x4c0dd4]
push eax
mov eax, dword [0x4c0dd0]
push ecx
mov ecx, dword [0x4c0dcc]
push edx
push eax
mov eax, dword [0x4c0dc8]
push ecx
call fcn.00433080
jmp 0x4261f1
mov esi, dword [0x4c0dd4]
push 1
xor bl, bl
call fcn.0040ca40
add esp, 4
mov byte [esp + 0x70], al
test al, al
jne 0x42734a
mov edx, dword [0x4c0dd4]
mov ecx, dword [esp + 0x28]
push edx
push 0
push str.Invalid_mouse_button__The_current_thread_will_exit.
call fcn.0042d460
jmp 0x4261f1
mov eax, dword [0x4c0dd8]
cmp word [eax], 0
je 0x427365
mov ecx, dword [esp + 0x28]
mov edi, 4
call fcn.0041f690
jmp 0x427367
mov eax, edi
mov ecx, dword [0x4c0de4]
mov edx, dword [0x4c0de0]
push ecx
mov ecx, dword [0x4c0dd0]
push edx
mov edx, dword [0x4c0dcc]
push ecx
mov ecx, dword [0x4c0dc8]
push edx
mov edx, dword [esp + 0x80]
push ecx
push eax
mov eax, dword [0x4c0ddc]
push edx
call fcn.00433120
jmp 0x4261f1
mov eax, dword [0x4c0de4]
mov ecx, dword [0x4c0dd8]
mov edx, dword [0x4c0dd4]
push eax
mov eax, dword [0x4c0dd0]
push ecx
mov ecx, dword [0x4c0dcc]
push edx
mov edx, dword [0x4c0dc8]
push eax
mov eax, dword [0x4c0de0]
push ecx
mov ecx, dword [0x4c0ddc]
push edx
mov edx, dword [0x4c0de8]
call fcn.004336f0
jmp 0x4261f1
mov eax, dword [0x4c0de8]
mov ecx, dword [0x4c0de4]
mov edx, dword [0x4c0de0]
push eax
mov eax, dword [0x4c0ddc]
push ecx
mov ecx, dword [0x4c0dd8]
push edx
push eax
push ecx
mov ecx, dword [esp + 0x3c]
call fcn.004338f0
jmp 0x4261f1
mov edx, dword [0x4c0dd8]
mov eax, dword [0x4c0dd4]
mov ecx, dword [0x4c0dd0]
push edx
mov edx, dword [0x4c0dcc]
push eax
push ecx
push edx
call fcn.00433a60
jmp 0x4261f1
mov eax, dword [0x4c0dd8]
mov ecx, dword [0x4c0dd4]
mov edx, dword [0x4c0dd0]
push eax
mov eax, dword [0x4c0dcc]
push ecx
mov ecx, dword [0x4c0dc8]
push edx
push eax
push ecx
call fcn.00433c50
jmp 0x4261f1
mov edx, dword [0x4c0ddc]
mov eax, dword [0x4c0dd8]
mov ecx, dword [0x4c0dd4]
mov esi, dword [0x4c0dc8]
push edx
mov edx, dword [0x4c0dd0]
push eax
mov eax, dword [0x4c0dcc]
push ecx
push edx
push eax
call fcn.00433d50
jmp 0x4261f1
mov ecx, dword [0x4c0ddc]
mov edx, dword [0x4c0dd8]
mov eax, dword [0x4c0dd4]
push ecx
mov ecx, dword [0x4c0dd0]
push edx
mov edx, dword [0x4c0dcc]
push eax
push ecx
push edx
call fcn.00433df0
jmp 0x4261f1
mov eax, dword [0x4c0de0]
mov ecx, dword [0x4c0ddc]
mov edx, dword [0x4c0dd8]
push eax
mov eax, dword [0x4c0dd4]
push ecx
mov ecx, dword [0x4c0dd0]
push edx
mov edx, dword [0x4c0dc8]
push eax
mov eax, dword [0x4c0dcc]
push ecx
push edx
call fcn.0044cf60
jmp 0x4261f1
mov eax, dword [0x4c0de4]
mov ecx, dword [0x4c0de0]
mov edx, dword [0x4c0ddc]
push eax
mov eax, dword [0x4c0dd8]
push ecx
mov ecx, dword [0x4c0dd4]
push edx
mov edx, dword [0x4c0dd0]
push eax
mov eax, dword [0x4c0dcc]
push ecx
push edx
push eax
call fcn.0044d7b0
jmp 0x4261f1
mov ecx, dword [0x4c0dd8]
mov edx, dword [0x4c0ddc]
mov eax, dword [0x4c0dd4]
mov edi, dword [0x4c0dcc]
push ecx
mov ecx, dword [0x4c0dd0]
call fcn.00434530
jmp 0x4261f1
mov edx, dword [0x4c0de0]
mov eax, dword [0x4c0ddc]
mov ecx, dword [0x4c0dd8]
push edx
mov edx, dword [0x4c0dd0]
push eax
mov eax, dword [0x4c0dcc]
push ecx
mov ecx, dword [0x4c0dc8]
push edx
mov edx, dword [0x4c0de4]
push eax
push ecx
mov ecx, dword [0x4c0dd4]
call fcn.004345a0
jmp 0x4261f1
cmp al, 0x8b
sete dl
movzx eax, dl
push eax
mov eax, dword [esp + 0x2c]
call fcn.004346d0
jmp 0x4261f1
mov ecx, dword [0x4c0dcc]
mov edx, dword [esp + 0x28]
push ecx
mov ecx, dword [0x4c0dd0]
push edx
mov edx, dword [0x4c0dc8]
call fcn.00434980
jmp 0x4261f1
mov eax, dword [0x4c0ddc]
mov ecx, dword [0x4c0dd8]
mov edx, dword [0x4c0dd4]
push eax
mov eax, dword [0x4c0dd0]
push ecx
mov ecx, dword [0x4c0dcc]
push edx
mov edx, dword [esp + 0x34]
push eax
push ecx
mov ecx, dword [0x4c0dc8]
push edx
call fcn.00434fd0
jmp 0x4261f1
mov eax, dword [esp + 0x28]
cmp byte [eax + 1], 1
jbe 0x427638
mov ecx, dword [0x4c0dd4]
mov edx, dword [0x4c0dd0]
mov eax, dword [0x4c0dcc]
push ecx
mov ecx, dword [0x4c0dc8]
push edx
mov edx, dword [0x4c0dd8]
call fcn.00435420
jmp 0x4261f1
mov esi, dword [0x4c0dc8]
mov edx, 0x4a596c
push 0x4a596c
mov eax, edx
mov ecx, edx
call fcn.004402a0
test eax, eax
je 0x42765d
push esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, edi
jmp 0x4261f1
mov eax, dword [0x4c0dd4]
mov edx, dword [0x4c0dd8]
mov ecx, dword [0x4c0dcc]
push eax
mov eax, dword [0x4c0dd0]
call fcn.00435450
jmp 0x4261f1
mov ecx, dword [0x4c0dd4]
mov edx, dword [0x4c0dd8]
mov eax, dword [0x4c0dd0]
push ecx
mov ecx, dword [0x4c0dcc]
call fcn.004355b0
jmp 0x4261f1
mov edx, dword [0x4c0dd4]
mov eax, dword [0x4c0dd0]
mov ecx, dword [0x4c0dcc]
push edx
mov edx, dword [esp + 0x2c]
push eax
push ecx
mov ecx, dword [0x4c0ddc]
push edx
mov edx, dword [0x4c0dd8]
call fcn.004356e0
jmp 0x4261f1
mov eax, dword [0x4c0dd8]
mov ecx, dword [0x4c0dd4]
mov edx, dword [0x4c0dd0]
push eax
mov eax, dword [0x4c0dcc]
push ecx
push edx
push eax
call fcn.00435f90
jmp 0x4261f1
mov ecx, dword [0x4c0de4]
mov edx, dword [0x4c0de0]
mov eax, dword [0x4c0ddc]
push ecx
mov ecx, dword [0x4c0dd8]
push edx
push eax
mov eax, dword [esp + 0x34]
push ecx
call fcn.004361f0
jmp 0x4261f1
mov edx, dword [0x4c0dd0]
mov eax, dword [esp + 0x28]
mov ecx, dword [0x4c0dcc]
push edx
push eax
call fcn.004363c0
jmp 0x4261f1
push 0
push 0x1a3
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [0x4bd41c]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle case.0x425f0e.3
push 1
push eax
call fcn.00401360
add esp, 8
jmp case.0x425f0e.3
push 0
push 0x1a0
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [0x4bd41c]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle case.0x425f0e.3
push 1
push eax
call fcn.00401360
add esp, 8
jmp case.0x425f0e.3
mov ecx, dword [0x4c0dc8]
cmp word [ecx], dx
jne 0x4277d9
mov dword [0x4c3bc4], edx
jmp case.0x425f0e.3
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0xc]
cmp eax, edx
jne 0x427810
mov edi, ecx
mov eax, 0x4c3168
call fcn.00419470
test eax, eax
jne 0x427810
mov ecx, dword [0x4c0dc8]
push ecx
mov ecx, dword [esp + 0x2c]
push 0
push str.Target_label_does_not_exist.__The_current_thread_will_exit.
call fcn.0042d460
jmp 0x4261f1
mov dword [0x4c3bc4], eax
mov edi, 1
jmp case.0x425f0e.3
mov edx, dword [0x4c0dd0]
mov eax, dword [0x4c0dcc]
mov ecx, dword [0x4c0dc8]
push edx
mov edx, dword [esp + 0x2c]
push eax
push ecx
mov ecx, dword [edx + 0xc]
call fcn.0040a100
add esp, 0xc
jmp 0x4261f1
mov eax, dword [esp + 0x28]
mov edi, dword [eax + 0xc]
cmp edi, edx
jne 0x427868
mov edi, dword [0x4c0dc8]
mov eax, 0x4c3168
call fcn.00419470
mov edi, eax
test edi, edi
je 0x4277f4
mov esi, dword [0x4c0dcc]
cmp word [esi], 0
je 0x4278e0
push 0
call fcn.00413a00
add esp, 4
test eax, eax
jne 0x4278b5
push eax
mov eax, dword [0x4c0dcc]
push 1
push 1
push 1
call fcn.0046b180
add esp, 0x10
test eax, eax
jne 0x4278d6
mov edx, dword [0x4c0dcc]
mov ecx, dword [esp + 0x28]
push edx
push eax
push str.Parameter_2_invalid
call fcn.0042d460
jmp 0x4261f1
jle 0x4278d6
cmp eax, 2
jg 0x4278d6
mov edx, dword [0x4c0dd0]
cmp eax, 1
sete al
push 0
movzx ecx, al
push ecx
push edx
push 0x4a596c
jmp 0x4278f9
mov esi, dword [0x4c0dcc]
cmp word [esi], 0
mov ecx, dword [0x4c0dd0]
jne 0x4278f2
cmp word [ecx], 0
je 0x4278f2
mov al, 1
jmp 0x4278f4
xor al, al
push eax
push 1
push ecx
push esi
mov ecx, edi
mov edx, 0x4c3168
call fcn.004191c0
mov edi, 1
jmp case.0x425f0e.3
mov eax, dword [0x4c0dc8]
mov esi, 0x10
cmp word [eax], dx
je 0x427941
push 0x49f0d4
push eax
call fcn.00486339
add esp, 8
test eax, eax
je 0x427941
mov ecx, dword [esp + 0x28]
xor edi, edi
call fcn.0041f690
mov esi, eax
test esi, esi
je 0x427946
mov eax, 1
mov byte [ebx + 0xe6], al
test al, al
je 0x427970
or eax, 0xffffffff
mov dword [ebx + 0xd0], esi
mov byte [ebx + 0xe4], 0
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 0x24], eax
lea edi, [eax + 2]
jmp case.0x425f0e.3
mov dword [ebx + 0xd0], 5
mov byte [ebx + 0xe4], 1
mov edi, 1
jmp case.0x425f0e.3
mov esi, dword [0x4c0dc8]
call fcn.004139a0
dec eax
je 0x427a24
dec eax
je 0x4279e1
dec eax
jne 0x427a30
mov eax, dword [0x4c0dcc]
cmp word [eax], 0
je 0x4279d1
mov ecx, dword [esp + 0x28]
call fcn.0041f690
or eax, edx
jne 0x4279d1
mov eax, edi
mov byte [ebx + 0xe5], al
mov edi, 1
jmp case.0x425f0e.3
xor eax, eax
mov byte [ebx + 0xe5], al
lea edi, [eax + 1]
jmp case.0x425f0e.3
mov ecx, dword [0x4c0dc8]
cmp word [ecx], 0
je 0x4279fb
mov ecx, dword [esp + 0x28]
call fcn.0041f690
mov dword [0x4c3c24], eax
mov edx, dword [0x4c0dcc]
cmp word [edx], 0
je 0x427a30
mov ecx, dword [esp + 0x28]
mov edi, 2
call fcn.0041f690
mov dword [0x4c3c20], eax
mov edi, 1
jmp case.0x425f0e.3
mov ecx, dword [esp + 0x28]
call fcn.0041f690
mov dword [ebx + 0x2c], eax
mov edi, 1
jmp case.0x425f0e.3
mov eax, dword [esp + 0x28]
mov esi, dword [eax + 0xc]
cmp esi, edx
jne 0x427a62
mov ecx, dword [0x4c0dc8]
push 1
push ecx
mov ecx, 0x4c3168
call fcn.00422940
mov esi, eax
test esi, esi
je case.0x425f0e.8
mov edi, dword [0x4c0dd4]
cmp word [edi], 0
je 0x427aa5
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 0x18]
test eax, eax
jne 0x427aa2
mov eax, 0x4c3168
call fcn.00419470
test eax, eax
jne 0x427aa2
mov eax, dword [0x4c0dd4]
mov ecx, dword [esp + 0x28]
push eax
push 0
push str.Target_label_does_not_exist.__The_current_thread_will_exit.
call fcn.0042d460
jmp 0x4261f1
mov dword [esi + 0x10], eax
mov ecx, dword [0x4c0ddc]
mov edx, dword [0x4c0dd8]
mov eax, dword [0x4c0dcc]
push ecx
mov ecx, dword [0x4c0dd0]
push edx
push eax
push esi
call fcn.00470530
jmp 0x4261f1
mov ecx, dword [esp + 0x28]
mov esi, dword [ecx + 0xc]
cmp esi, edx
jne 0x427af2
mov edx, dword [0x4c0dc8]
push 0
push edx
mov ecx, 0x4c3168
call fcn.00422940
mov esi, eax
test esi, esi
je case.0x425f0e.3
mov eax, dword [0x4c0dcc]
cmp word [eax], 0
je 0x427b1e
push 0x49e978
push eax
call fcn.00486339
add esp, 8
test eax, eax
jne 0x427b1e
mov al, 1
mov ecx, esi
push eax
call fcn.00470ab0
jmp case.0x425f0e.3
xor al, al
mov ecx, esi
push eax
call fcn.00470ab0
jmp case.0x425f0e.3
mov eax, dword [esp + 0x28]
mov esi, dword [eax + 0xc]
cmp esi, edx
jne 0x427b57
mov ecx, dword [0x4c0dc8]
push 0
push ecx
mov ecx, 0x4c3168
call fcn.00422940
mov esi, eax
test esi, esi
je case.0x425f0e.3
xor edx, edx
mov eax, dword [0x4c0dcc]
cmp word [eax], dx
je 0x427bad
push 0x4a04a8
push eax
call fcn.00486339
add esp, 8
test eax, eax
jne 0x427b82
push esi
xor edx, edx
mov cl, 0x7d
call fcn.00470770
jmp case.0x425f0e.3
mov eax, dword [0x4c0dcc]
cmp word [eax], 0
je 0x427bad
push 0x49e978
push eax
call fcn.00486339
add esp, 8
test eax, eax
jne 0x427bad
mov al, 1
push eax
push esi
call fcn.00470830
jmp case.0x425f0e.3
xor al, al
push eax
push esi
call fcn.00470830
jmp case.0x425f0e.3
mov edx, dword [0x4c0dd0]
mov esi, dword [0x4c0dcc]
push edx
call fcn.0043bd50
jmp 0x4261f1
cmp esi, edx
jne 0x427bed
mov ecx, dword [esp + 0x28]
call fcn.0041f690
push eax
call fcn.00412010
add esp, 4
jmp case.0x425f0e.3
mov eax, dword [0x4c0dcc]
push 0
push 1
push 0
push 1
call fcn.0046b180
add esp, 0x10
cmp eax, 2
je 0x427c25
mov eax, dword [0x4c0dd0]
push 0
push 1
push 0
push 1
call fcn.0046b180
add esp, 0x10
cmp eax, 2
jne 0x427cbc
mov eax, dword [0x4c0dcc]
cmp word [eax], 0
je 0x427c3b
mov ecx, dword [esp + 0x28]
call fcn.0041f740
jmp 0x427c3d
fldz
mov ecx, dword [0x4c0dd0]
fst qword [esp + 0x40]
cmp word [ecx], 0
je 0x427c80
mov ecx, dword [esp + 0x28]
fstp st(0)
mov edi, 2
call fcn.0041f740
fst qword [esp + 0x80]
fld qword [esp + 0x40]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x427c8f
fstp qword [esp + 0x40]
fstp qword [esp + 0x80]
jmp 0x427c93
fld qword [0x4b76c8]
fst qword [esp + 0x80]
jmp 0x427c6a
fstp st(0)
fstp st(0)
call fcn.004121d0
fld qword [esp + 0x80]
fld qword [esp + 0x40]
sub esp, 8
fsub st(1), st(0)
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push esi
call fcn.00412650
jmp 0x4261f1
mov edx, dword [0x4c0dcc]
cmp word [edx], 0
je 0x427cd9
mov ecx, dword [esp + 0x28]
call fcn.0041f690
mov ebx, eax
mov dword [esp + 0x48], eax
jmp 0x427cdf
xor ebx, ebx
mov dword [esp + 0x48], ebx
mov eax, dword [0x4c0dd0]
cmp word [eax], 0
je 0x427cfc
mov ecx, dword [esp + 0x28]
mov edi, 2
call fcn.0041f690
mov edi, eax
jmp 0x427d01
mov edi, SysReAllocString
cmp ebx, edi
jle 0x427d0f
mov eax, ebx
mov ebx, edi
mov dword [esp + 0x48], ebx
mov edi, eax
call fcn.00412130
mov ecx, eax
mov eax, ebx
cdq
mov ebx, eax
mov dword [esp + 0x40], edx
mov eax, edi
cdq
sub eax, ebx
sbb edx, dword [esp + 0x40]
add eax, 1
adc edx, 0
push edx
push eax
push 0
push ecx
call fcn.00496e50
add eax, dword [esp + 0x48]
push 0x18
cdq
push edx
push eax
mov eax, esi
call fcn.004010e0
mov edi, 1
jmp case.0x425f0e.3
mov eax, dword [0x4c0dcc]
mov bl, 1
call fcn.0043bf10
jmp 0x4261f1
mov edx, dword [0x4c0dd0]
mov eax, dword [0x4c0dcc]
mov ecx, dword [0x4c0dc8]
push edx
call fcn.0043c0b0
jmp 0x4261f1
mov eax, dword [0x4c0dd0]
mov ecx, dword [0x4c0dcc]
call fcn.0043c330
jmp 0x4261f1
mov eax, dword [0x4c0dd4]
cmp word [eax], dx
je 0x427daf
mov ecx, dword [esp + 0x28]
mov edi, 3
call fcn.0041f690
dec eax
jmp 0x427db1
xor eax, eax
cdq
mov ebx, eax
test edx, edx
jg 0x427dc4
jl 0x427dbe
test ebx, ebx
jae 0x427dc4
xor ebx, ebx
mov dword [esp + 0x44], ebx
mov edi, dword [0x4c0dcc]
cmp word [edi], 0
mov dword [esp + 0x54], 1
je 0x427de9
lea ecx, [esp + 0x54]
push ecx
call fcn.004132c0
add esp, 4
mov edi, eax
jmp 0x427dee
mov edi, 4
mov esi, dword [0x4c0dd0]
cmp word [esi], 0
je 0x427e01
call fcn.004134c0
jmp 0x427e06
mov eax, 0x50030001
mov edx, dword [esp + 0x54]
push ebx
push eax
mov eax, dword [esp + 0x30]
xor ecx, ecx
cmp byte [eax], 0x96
push edx
sete cl
push edi
dec ecx
and ecx, dword [0x4c0dc8]
push ecx
push eax
call fcn.0043c980
jmp 0x4261f1
mov eax, dword [0x4c0dcc]
mov ebx, dword [esp + 0x28]
cmp word [eax], dx
je 0x427e45
mov ecx, ebx
call fcn.0041f690
dec eax
jmp 0x427e47
xor eax, eax
cdq
test edx, edx
jg 0x427e58
jl 0x427e52
test eax, eax
jae 0x427e58
xor eax, eax
mov dword [esp + 0x44], eax
cmp byte [ebx], 0x98
push eax
jne 0x427e68
call fcn.0043cf10
jmp 0x4261f1
mov edi, dword [0x4c0dc8]
call fcn.0043cfa0
jmp 0x4261f1
mov ecx, dword [0x4c0dcc]
cmp word [ecx], dx
je 0x427e90
mov ecx, dword [esp + 0x28]
call fcn.0041f690
mov esi, eax
jmp 0x427e95
mov esi, 0x96
mov edx, dword [0x4c0dc8]
cmp word [edx], 0
je 0x427ebe
mov ecx, dword [esp + 0x28]
xor edi, edi
call fcn.0041f690
push esi
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov edi, 1
jmp case.0x425f0e.3
mov eax, 0x20b
push esi
push eax
call dword [sym.imp.KERNEL32.dll_Beep]
mov edi, 1
jmp case.0x425f0e.3
mov eax, dword [0x4c0dcc]
cmp word [eax], dx
je 0x427ef6
push str.wait
push eax
call fcn.00486339
add esp, 8
test eax, eax
je 0x427f1a
mov eax, dword [0x4c0dcc]
push 0x49e30c
push eax
call fcn.00486339
add esp, 8
test eax, eax
je 0x427f1a
xor al, al
push eax
mov eax, dword [0x4c0dc8]
call fcn.0043d0e0
jmp 0x4261f1
mov eax, 1
push eax
mov eax, dword [0x4c0dc8]
call fcn.0043d0e0
jmp 0x4261f1
mov eax, dword [esp + 0x28]
cmp byte [eax + 1], 2
jae 0x427f3e
mov ebx, dword [ebx + 0x18]
jmp 0x427f40
xor ebx, ebx
mov ecx, dword [0x4c0dc8]
mov edx, dword [0x4c0dcc]
mov eax, dword [esp + 0x28]
push ebx
push ecx
push edx
push eax
call fcn.0043e3f0
jmp 0x4261f1
mov ecx, dword [esp + 0x28]
mov eax, dword [0x4c0dcc]
push ecx
call fcn.0043dbc0
jmp 0x4261f1
mov edx, dword [0x4c0dcc]
mov ecx, dword [0x4c0dd0]
push edx
call fcn.0043e070
jmp 0x4261f1
mov eax, dword [esp + 0x28]
push eax
call fcn.0043ed80
jmp 0x4261f1
mov eax, dword [0x4c0dc8]
call fcn.0044ebb0
jmp 0x4261f1
mov edi, dword [0x4c0dc8]
call fcn.0044ecb0
jmp 0x4261f1
mov ecx, dword [0x4c0dcc]
mov edx, dword [0x4c0dc8]
push ecx
mov ecx, dword [0x4c0dd0]
push edx
call fcn.0043f000
jmp 0x4261f1
mov ecx, dword [esp + 0x28]
add ebx, 0x30
push ebx
push 0
mov edi, 2
call fcn.0041f690
mov edx, dword [0x4c0dcc]
cmp eax, 1
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4c0dc8]
call fcn.0044f340
add esp, 0x10
test eax, eax
jne 0x428026
mov ecx, dword [0x4c17f0]
push 1
push eax
push 0xffffffffffffffff
push 0x49b8d0
call fcn.0046dd60
jmp 0x4261f1
cmp byte [0x4c3c0f], 0
je 0x42807d
mov ecx, dword [0x4c17f0]
push 1
push 0
push 0xffffffffffffffff
push 0x49e30c
call fcn.0046dd60
jmp 0x4261f1
mov ecx, dword [esp + 0x28]
add ebx, 0x30
push ebx
push 1
mov edi, 2
call fcn.0041f690
mov edx, dword [0x4c0dcc]
cmp eax, 1
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4c0dc8]
call fcn.0044f340
add esp, 0x10
cdq
push 0x18
push edx
push eax
mov eax, dword [0x4c17f0]
call fcn.004010e0
mov edi, 1
jmp case.0x425f0e.3
mov ecx, dword [esp + 0x28]
mov edi, 2
call fcn.0041f690
mov edx, dword [0x4c0dcc]
cmp eax, 1
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4c0dc8]
call fcn.0044eeb0
add esp, 8
test al, al
mov eax, 0x49b8d0
jne 0x4270a4
mov ecx, dword [0x4c17f0]
push 1
push 0
mov eax, 0x49e30c
push 0xffffffffffffffff
push eax
call fcn.0046dd60
jmp 0x4261f1
mov eax, dword [0x4c0dd0]
mov ax, word [eax]
call fcn.00409040
cmp ax, 0x52
jne 0x428138
mov ecx, dword [0x4c0dcc]
mov edx, dword [0x4c0dc8]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
mov eax, 0x49b8d0
jne 0x428121
mov eax, 0x49e30c
mov ecx, dword [0x4c17f0]
push 1
push 0
push 0xffffffffffffffff
push eax
call fcn.0046dd60
jmp case.0x425f0e.3
mov ecx, dword [esp + 0x28]
mov edi, 2
call fcn.0041f690
mov ecx, dword [0x4c0dcc]
mov edx, dword [0x4c0dc8]
push ecx
mov edi, eax
call fcn.0044f080
add esp, 4
test al, al
mov eax, 0x49b8d0
jne 0x4270a4
mov ecx, dword [0x4c17f0]
push 1
push 0
mov eax, 0x49e30c
push 0xffffffffffffffff
push eax
call fcn.0046dd60
jmp 0x4261f1
mov edx, dword [0x4c0dc8]
mov ecx, dword [esp + 0x28]
push edx
call fcn.0043da40
jmp 0x4261f1
mov eax, dword [0x4c0dc8]
cmp word [eax], dx
je 0x42802f
mov ecx, dword [esp + 0x28]
call fcn.0041f690
cmp eax, 1
sete cl
movzx edx, cl
push edx
mov edx, dword [0x4c0dc8]
call fcn.0044f250
add esp, 4
test al, al
mov eax, 0x49b8d0
jne 0x4270a4
mov ecx, dword [0x4c17f0]
push 1
push 0
mov eax, 0x49e30c
push 0xffffffffffffffff
push eax
call fcn.0046dd60
jmp 0x4261f1
mov eax, dword [0x4c0dcc]
cmp word [eax], dx
jne 0x42820c
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
cmp ebx, edx
jne 0x42820c
mov eax, 0x4a596c
call fcn.0043f2b0
jmp 0x4261f1
mov eax, dword [0x4c0dcc]
cmp word [eax], dx
je 0x428224
mov ebx, eax
jmp 0x428235
mov ebx, dword [ebx + 0x10]
cmp ebx, edx
je 0x428230
add ebx, 0x2c
jmp 0x428235
mov ebx, 0x4a596c
push 0
push ecx
mov ecx, dword [esp + 0x30]
mov edi, 3
call fcn.0041f690
mov esi, dword [0x4c0dd0]
add esp, 4
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.00413cf0
mov edx, dword [0x4c0dc8]
mov ecx, dword [esp + 0x30]
push eax
push ebx
push edx
call fcn.0043f380
mov edi, 1
jmp case.0x425f0e.3
mov eax, dword [0x4c0dcc]
cmp word [eax], dx
jne 0x428293
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
cmp ebx, edx
jne 0x428293
mov eax, 0x4a596c
mov ecx, dword [0x4c0dd0]
movzx edx, word [ecx]
push edx
call fcn.0043fa10
jmp 0x4261f1
mov eax, dword [0x4c0dcc]
cmp word [eax], dx
je 0x4282b5
mov ebx, eax
jmp 0x4282c6
mov ebx, dword [ebx + 0x10]
cmp ebx, edx
je 0x4282c1
add ebx, 0x2c
jmp 0x4282c6
mov ebx, 0x4a596c
push 0
push ecx
mov ecx, dword [esp + 0x30]
mov edi, 4
call fcn.0041f690
mov esi, dword [0x4c0dd4]
add esp, 4
cmp eax, 1
sete al
movzx ecx, al
push ecx
call fcn.00413cf0
mov edx, dword [0x4c0dd0]
mov ecx, dword [0x4c0dc8]
push eax
movzx eax, word [edx]
push eax
push ebx
push ecx
mov ecx, dword [esp + 0x40]
call fcn.0043fb50
mov edi, 1
jmp case.0x425f0e.3
mov eax, dword [0x4c0dcc]
cmp word [eax], dx
jne 0x42832e
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
cmp ebx, edx
jne 0x42832e
mov eax, 0x4a596c
mov edx, dword [0x4c0dd0]
push edx
call fcn.004400c0
jmp 0x4261f1
mov eax, dword [0x4c0dcc]
cmp word [eax], dx
jne 0x428358
mov ebx, dword [ebx + 0x10]
lea eax, [ebx + 0x2c]
cmp ebx, edx
jne 0x428358
mov eax, 0x4a596c
call fcn.0044ed40
jmp 0x4261f1
mov edi, dword [0x4c0dc8]
call fcn.0043d2d0
mov edi, 1
jmp case.0x425f0e.3
mov eax, dword [0x4c0dd8]
mov ecx, dword [0x4c0dcc]
mov edx, dword [0x4c0dd0]
push eax
push ecx
mov ecx, dword [0x4c0dd4]
call fcn.0043d3d0
jmp 0x4261f1
mov edx, dword [0x4c0dd0]
mov eax, dword [0x4c0dcc]
mov ecx, dword [0x4c0dd4]
push edx
push eax
call fcn.0044e350
jmp 0x4261f1
mov ecx, dword [0x4c0dc8]
mov eax, dword [esp + 0x28]
push ecx
call fcn.0044e660
jmp 0x4261f1
mov edx, dword [0x4c0de8]
mov eax, dword [0x4c0de0]
mov ecx, dword [0x4c0ddc]
mov ebx, dword [0x4c0de4]
mov edi, dword [0x4c0dd4]
push edx
mov edx, dword [0x4c0dd8]
push eax
mov eax, dword [0x4c0dcc]
push ecx
mov ecx, dword [0x4c0dc8]
push edx
push eax
mov eax, dword [0x4c0dd0]
push ecx
call fcn.0044e9e0
jmp 0x4261f1
push 0
mov ecx, 4
call fcn.00438960
add esp, 4
jmp 0x4261f1
mov esi, dword [0x4c0dc8]
push 7
call fcn.00413a00
add esp, 4
cmp eax, 7
jne 0x428449
push 0
mov ecx, edi
call fcn.00438960
add esp, 4
jmp 0x4261f1
cmp byte [ebx + 0xef], 0
je 0x428475
mov ecx, dword [0x4c3098]
test ecx, ecx
jle 0x42845f
dec ecx
jmp 0x428464
mov ecx, 0x18f
mov dword [0x4c3098], ecx
mov dword [ecx*4 + 0x4c2a58], 0
cmp eax, 1
sete dl
mov byte [ebx + 0xef], dl
jmp case.0x425f0e.3
push 0
mov ecx, 2
call fcn.00438960
add esp, 4
jmp 0x4261f1
push 0
mov ecx, 3
call fcn.00438960
add esp, 4
jmp 0x4261f1
mov eax, dword [0x4bd41c]
mov eax, dword [eax + 0x50]
cmp eax, 0x63
jae 0x4284ca
mov eax, dword [eax*4 + 0x4c1600]
cmp eax, edx
je 0x4284ca
mov eax, dword [eax]
jmp 0x4284cc
xor eax, eax
mov ecx, dword [esp + 0x28]
mov cl, byte [ecx + 1]
push eax
test cl, cl
jne 0x4284ee
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push str.Press_OK_to_continue.
jmp 0x428537
cmp cl, 1
jne 0x42850b
fldz
mov edx, dword [0x4c0dc8]
sub esp, 8
fstp qword [esp]
push 0
push 0x10000
push edx
jmp 0x428537
mov esi, dword [esp + 0x2c]
push ecx
mov edi, 3
mov ecx, esi
call fcn.0041f740
mov eax, dword [0x4c0dcc]
push ecx
fstp qword [esp]
push eax
xor edi, edi
mov ecx, esi
call fcn.0041f690
mov ecx, dword [0x4c0dd0]
push eax
push ecx
call fcn.0046f820
xor edx, edx
add esp, 0x18
test eax, eax
setne dl
mov edi, edx
jmp 0x4261f3
mov eax, dword [0x4c0de4]
mov ebx, dword [esp + 0x28]
cmp word [eax], dx
je 0x42856d
mov edi, 7
mov ecx, ebx
call fcn.0041f690
mov dword [esp + 0x54], eax
jmp 0x428575
mov dword [esp + 0x54], SysStringLen
mov ecx, dword [0x4c0de0]
cmp word [ecx], 0
je 0x428593
mov edi, 6
mov ecx, ebx
call fcn.0041f690
mov dword [esp + 0x48], eax
jmp 0x42859b
mov dword [esp + 0x48], SysStringLen
mov edx, dword [0x4c0ddc]
cmp word [edx], 0
je 0x4285b9
mov edi, 5
mov ecx, ebx
call fcn.0041f690
mov dword [esp + 0x58], eax
jmp 0x4285c1
mov dword [esp + 0x58], SysStringLen
mov eax, dword [0x4c0dd8]
cmp word [eax], 0
je 0x4285de
mov ecx, dword [esp + 0x28]
mov edi, 4
call fcn.0041f690
mov ebx, eax
jmp 0x4285e3
mov ebx, SysReAllocString
mov ecx, dword [esp + 0x28]
mov edi, 9
call fcn.0041f740
mov ecx, dword [0x4c0df0]
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x48]
sub esp, 8
fstp qword [esp]
push ecx
mov ecx, dword [esp + 0x64]
push edx
mov edx, dword [0x4c0dd4]
push eax
mov ax, word [edx]
push ecx
call fcn.00409040
mov ecx, dword [0x4c0dcc]
cmp ax, 0x48
mov eax, dword [0x4c0dd0]
push eax
push ecx
sete dl
mov ecx, ebx
mov edi, esi
call fcn.00438b90
add esp, 0x20
jmp 0x4261f1
mov eax, dword [0x4c0dcc]
cmp word [eax], dx
je 0x428657
mov ecx, dword [esp + 0x28]
call fcn.0041f690
mov esi, eax
jmp 0x428659
xor esi, esi
mov ecx, dword [0x4c0dc8]
cmp word [ecx], 0
je 0x428672
mov ecx, dword [esp + 0x28]
xor edi, edi
call fcn.0041f690
jmp 0x428677
mov eax, 0xc8
mov edx, dword [0x4c0dd4]
mov ecx, dword [0x4c0dd0]
push edx
push ecx
push eax
mov eax, esi
call fcn.0044ca20
jmp 0x4261f1
mov eax, dword [0x4c0e7c]
cmp eax, edx
je 0x4286b3
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4286b3
mov edx, dword [0x4c0e7c]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4c0e7c], 0
jmp case.0x425f0e.3
mov eax, dword [0x4c0dd8]
mov ecx, dword [0x4c0dd4]
mov edx, dword [0x4c0dd0]
push 0
push eax
mov eax, dword [0x4c0dcc]
push ecx
mov ecx, dword [0x4c0dc8]
push edx
mov edx, dword [esp + 0x38]
push eax
push ecx
push edx
mov ecx, 0x4a596c
call fcn.0042f3d0
jmp 0x4261f1
mov eax, dword [0x4c0ddc]
mov ecx, dword [0x4c0dd8]
mov edx, dword [0x4c0dd4]
push 1
push eax
mov eax, dword [0x4c0dd0]
push ecx
mov ecx, dword [0x4c0dcc]
push edx
mov edx, dword [esp + 0x38]
push eax
push ecx
mov ecx, dword [0x4c0dc8]
push edx
call fcn.0042f3d0
jmp 0x4261f1
mov eax, dword [0x4c0dd0]
mov ecx, dword [0x4c0dcc]
mov edx, dword [0x4c0dc8]
push eax
mov eax, dword [esp + 0x2c]
push ecx
mov ecx, dword [0x4c0dd4]
push edx
push eax
call fcn.004305e0
jmp 0x4261f1
mov ecx, dword [0x4c0dcc]
mov edx, dword [0x4c0dc8]
mov edi, dword [0x4c0dd4]
mov esi, dword [0x4c0dd0]
push ecx
push edx
call fcn.00430920
jmp 0x4261f1
mov eax, dword [esp + 0x28]
push eax
call fcn.00431c50
jmp 0x4261f1
mov eax, dword [0x4c0dcc]
cmp word [eax], dx
je 0x4287cb
push str.Screen
push eax
call fcn.00486339
add esp, 8
test eax, eax
je 0x4287cb
mov ecx, dword [0x4c0dcc]
push str.Relative
push ecx
call fcn.00486339
add esp, 8
test eax, eax
jne case.0x425f0e.3
mov byte [esp + 0x3b], al
jmp 0x4287d0
mov byte [esp + 0x3b], 1
mov esi, dword [0x4c0dc8]
call fcn.00413ea0
test al, al
je case.0x425f0e.3
cmp byte [esp + 0x3b], 0
je 0x4287f5
or byte [ebx + 0xe8], al
jmp case.0x425f0e.3
not al
and byte [ebx + 0xe8], al
jmp case.0x425f0e.3
mov ecx, dword [esp + 0x28]
xor edi, edi
call fcn.0041f690
mov byte [ebx + 0xe7], al
cmp al, 0x64
jbe 0x42881e
mov byte [ebx + 0xe7], 2
mov edi, 1
jmp case.0x425f0e.3
mov edx, dword [ebx + 0xcc]
mov eax, dword [0x4c0dc8]
push edx
call fcn.00413c60
add esp, 4
mov dword [ebx + 0xcc], eax
jmp case.0x425f0e.3
mov eax, dword [0x4c0dd0]
push str.Play
push eax
call fcn.00486339
add esp, 8
test eax, eax
jne 0x428899
mov ecx, dword [0x4c0dc8]
cmp word [ecx], ax
je 0x428877
mov ecx, dword [esp + 0x28]
xor edi, edi
call fcn.0041f690
mov dword [ebx + 0x60], eax
mov edx, dword [0x4c0dcc]
cmp word [edx], 0
je 0x4288cf
mov ecx, dword [esp + 0x28]
mov edi, 1
call fcn.0041f690
mov dword [ebx + 0x68], eax
jmp case.0x425f0e.3
mov eax, dword [0x4c0dc8]
cmp word [eax], 0
je 0x4288b2
mov ecx, dword [esp + 0x28]
xor edi, edi
call fcn.0041f690
mov dword [ebx + 0x5c], eax
mov ecx, dword [0x4c0dcc]
cmp word [ecx], 0
je 0x4288cf
mov ecx, dword [esp + 0x28]
mov edi, 1
call fcn.0041f690
mov dword [ebx + 0x64], eax
mov edi, 1
jmp case.0x425f0e.3
mov edx, dword [0x4c0dcc]
push str.Play
push edx
call fcn.00486339
mov ecx, dword [esp + 0x30]
add esp, 8
xor edi, edi
test eax, eax
jne 0x428909
call fcn.0041f690
mov dword [ebx + 0x70], eax
mov edi, 1
jmp case.0x425f0e.3
call fcn.0041f690
mov dword [ebx + 0x6c], eax
mov edi, 1
jmp case.0x425f0e.3
mov ecx, dword [esp + 0x28]
xor edi, edi
call fcn.0041f690
mov dword [ebx + 0x54], eax
mov edi, 1
jmp case.0x425f0e.3
mov ecx, dword [esp + 0x28]
xor edi, edi
call fcn.0041f690
mov dword [ebx + 0x58], eax
mov edi, 1
jmp case.0x425f0e.3
mov ecx, dword [0x4c0dc8]
mov eax, 0x4a27e4
call fcn.0046b6b0
mov ecx, dword [esp + 0x28]
xor edi, edi
test eax, eax
je 0x428984
mov dword [ebx], 0xffffffff
mov dword [ebx + 4], 0xffffffff
call fcn.0041f690
mov dword [ebx + 0x24], eax
mov edi, 1
jmp case.0x425f0e.3
mov dword [ebx + 0x24], 0xffffffff
call fcn.0041f690
mov dword [ebx], eax
or eax, edx
mov dword [ebx + 4], edx
jne 0x4289a2
mov dword [ebx], 0xa
mov dword [ebx + 4], edi
mov edi, 1
jmp case.0x425f0e.3
mov esi, dword [0x4c0dc8]
push 7
call fcn.00413a00
add esp, 4
cmp eax, 7
je case.0x425f0e.3
cmp eax, 1
sete cl
mov byte [ebx + 0xea], cl
jmp case.0x425f0e.3
mov esi, dword [0x4c0dc8]
call fcn.00413670
dec eax
cmp eax, 5
ja case.default.0x4289e7
jmp dword [eax*4 + 0x429890]
mov dword [ebx + 0x20], edi
jmp case.0x425f0e.3
mov dword [ebx + 0x20], 2
jmp case.0x425f0e.3
mov dword [ebx + 0x20], 4
jmp case.0x425f0e.3
mov dword [ebx + 0x20], 3
jmp case.0x425f0e.3
mov byte [ebx + 0xe1], 1
jmp case.0x425f0e.3
mov byte [ebx + 0xe1], 0
jmp case.0x425f0e.3
mov edx, dword [0x4c0dc8]
mov ecx, dword [esp + 0x28]
push edx
push 0
push str.Requires_1_2_3_Slow_Fast__The_current_thread_will_exit.
call fcn.0042d460
jmp 0x4261f1
mov eax, dword [0x4c0dc8]
push 5
push str.Float
push eax
call fcn.00486b72
add esp, 0xc
test eax, eax
jne 0x428b3e
mov esi, dword [esp + 0x28]
mov ecx, esi
call fcn.0041f600
cmp eax, 0x1e
jae case.0x425f0e.3
mov ecx, esi
call fcn.0041f690
mov ecx, dword [0x4c0dcc]
mov esi, edx
push 0x2e
push ecx
mov edi, eax
mov dword [esp + 0xac], esi
call fcn.00487101
add esp, 8
mov dword [esp + 0x40], eax
test eax, eax
je 0x428abb
lea esi, [eax + 2]
call fcn.004125b0
mov esi, dword [esp + 0xa4]
jmp 0x428abf
xor eax, eax
xor edx, edx
add edi, eax
adc esi, edx
add edi, 2
adc esi, 0
mov dword [esp + 0x84], esi
js 0x428ae6
jg 0x428adc
cmp edi, 0xff
jbe 0x428ae6
mov edi, 1
jmp case.0x425f0e.3
mov eax, dword [0x4c0dcc]
push 0
push 1
push 1
push 1
call fcn.0046b180
add esp, 0x10
mov ecx, 0x4a2860
test eax, eax
jne 0x428b09
mov ecx, 0x4a596c
cmp dword [esp + 0x40], 0
mov eax, 0x4a596c
jne 0x428b1a
mov eax, 0x4a0c70
mov edx, dword [0x4c0dcc]
push ecx
push eax
push edx
push 0x4a2864
add ebx, 0x74
push ebx
call fcn.00486743
add esp, 0x14
mov edi, 1
jmp case.0x425f0e.3
mov eax, dword [0x4c0dc8]
push 7
push str.Integer
push eax
call fcn.00486b72
add esp, 0xc
test eax, eax
jne case.0x428b6f.69
mov ecx, dword [0x4c0dcc]
movzx eax, word [ecx]
add eax, 0xffffffbc
cmp eax, 0x24
ja case.0x428b6f.69
movzx edx, byte [eax + 0x4298b4]
jmp dword [edx*4 + 0x4298a8]
mov byte [ebx + 0xec], 0x44
mov edi, 1
jmp case.0x425f0e.3
mov al, byte [ecx]
mov byte [ebx + 0xec], al
mov edi, 1
jmp case.0x425f0e.3
mov ecx, dword [0x4c0dd0]
push ecx
mov ecx, dword [0x4c0dcc]
call fcn.004399c0
jmp 0x4261f1
mov edx, dword [0x4c0ddc]
mov eax, dword [0x4c0dd8]
mov ecx, dword [0x4c0dd4]
push edx
mov edx, dword [0x4c0dd0]
push eax
mov eax, dword [0x4c0dc8]
push ecx
mov ecx, dword [0x4c0dcc]
push edx
push eax
mov edx, 0x4c3168
call fcn.00462300
jmp 0x4261f1
mov ecx, dword [0x4c0dd4]
mov edx, dword [0x4c0dd0]
push ecx
mov ecx, dword [0x4c0dcc]
push edx
mov edx, dword [0x4c0dc8]
push 0x4c3168
call fcn.004561b0
jmp 0x4261f1
mov eax, dword [0x4c0dd0]
mov ecx, dword [0x4c0dcc]
mov edx, dword [0x4c0dc8]
push eax
push ecx
push edx
call fcn.00456840
jmp 0x4261f1
mov eax, dword [0x4c0dd4]
mov ecx, dword [0x4c0dd0]
mov edx, dword [0x4c0dcc]
push eax
push ecx
push edx
call fcn.00457780
jmp 0x4261f1
mov esi, dword [0x4c0dc8]
call fcn.00413b00
cmp eax, 7
ja case.0x425f0e.3
jmp dword [eax*4 + 0x4298dc]
call fcn.0042d2c0
jmp case.0x425f0e.3
cmp byte [0x4c0fcb], 0
jne case.0x425f0e.3
call fcn.0042d2c0
jmp case.0x425f0e.3
cmp byte [0x4c0fcb], 0
je case.0x425f0e.3
call fcn.0042d2c0
jmp case.0x425f0e.3
mov ecx, dword [esp + 0x28]
call fcn.0041f690
mov esi, dword [0x4c0dc8]
test eax, eax
setne cl
movzx edx, cl
push edx
call fcn.00413a50
push eax
mov eax, dword [esp + 0x30]
push eax
call fcn.0042d310
jmp 0x4261f1
mov esi, dword [0x4c0dc8]
push 7
call fcn.00413a00
add esp, 4
cmp eax, 7
je case.0x425f0e.3
cmp eax, 1
sete cl
mov byte [ebx + 0xeb], cl
jmp case.0x425f0e.3
mov esi, dword [0x4c0dc8]
call fcn.00413ab0
mov byte [ebx + 0xe9], al
cmp al, 4
jne case.0x425f0e.3
mov byte [ebx + 0xe9], 0
jmp case.0x425f0e.3
mov esi, dword [0x4c0dc8]
push 7
call fcn.00413a00
add esp, 4
cmp eax, 7
je case.0x425f0e.3
cmp eax, 1
sete dl
mov byte [ebx + 0xe2], dl
jmp case.0x425f0e.3
mov esi, dword [0x4c0dc8]
push 7
call fcn.00413a00
add esp, 4
cmp eax, 7
je case.0x425f0e.3
cmp eax, 1
sete al
mov byte [ebx + 0xe3], al
jmp case.0x425f0e.3
mov esi, dword [0x4c0dc8]
call fcn.00413b80
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x425f0e.3
movzx ecx, byte [ecx + 0x429914]
jmp dword [ecx*4 + 0x4298fc]
mov bl, 1
call fcn.0042d410
jmp case.0x425f0e.3
xor bl, bl
call fcn.0042d410
jmp case.0x425f0e.3
mov dword [0x4bd4f8], eax
jmp case.0x425f0e.3
or byte [0x4c1a30], 2
cmp dword [0x4c0fa8], 0
mov byte [0x4c1a03], 1
jne case.0x425f0e.3
mov edx, dword [0x4be600]
movzx eax, word [edx]
push eax
call fcn.00407b00
add esp, 4
jmp case.0x425f0e.3
mov byte [0x4c1a03], 0
jmp case.0x425f0e.3
mov esi, dword [0x4c0dc8]
push str._a_a_a_v
mov al, 0x90
call fcn.004401f0
add esp, 4
jmp 0x4261f1
mov esi, dword [0x4c0dc8]
push 0x4bd4f0
mov al, 0x14
call fcn.004401f0
add esp, 4
jmp 0x4261f1
mov esi, dword [0x4c0dc8]
push 0x4bd4f4
mov al, 0x91
call fcn.004401f0
add esp, 4
jmp 0x4261f1
mov al, 1
mov edx, 0x4c3168
call fcn.00415450
jmp case.0x425f0e.3
mov ecx, dword [esp + 0x28]
xor edi, edi
call fcn.0041f690
jmp 0x42705e
mov ecx, dword [0x4c0dcc]
mov edi, dword [0x4c0dd4]
mov ebx, dword [0x4c0dd0]
push ecx
mov ecx, dword [0x4c0dd8]
call fcn.00467970
jmp 0x4261f1
mov edx, dword [0x4c0dd4]
mov eax, dword [0x4c0dd0]
mov ecx, dword [esp + 0x28]
push edx
mov edx, dword [0x4c0dcc]
push eax
mov eax, dword [0x4c0dc8]
push ecx
call fcn.00467bb0
jmp 0x4261f1
mov edx, dword [esp + 0x28]
cmp byte [edx + 1], 3
mov ecx, dword [0x4c0dcc]
mov edx, dword [0x4c0dc8]
sbb eax, eax
not eax
and eax, dword [0x4c0dd0]
push eax
push ecx
call fcn.00467cc0
jmp 0x4261f1
mov eax, dword [esp + 0x28]
mov al, byte [eax + 1]
cmp al, 2
jae 0x428f00
mov ebx, dword [ebx + 0x14]
cmp ebx, edx
je 0x428f00
lea ecx, [ebx + 0x808]
push ecx
mov ecx, dword [ebx + 4]
lea edx, [ebx + 8]
push edx
call fcn.00467d50
jmp 0x4261f1
cmp al, 4
ja 0x428f31
mov esi, dword [0x4c0dcc]
call fcn.00413240
test eax, eax
jne 0x428f31
mov ebx, dword [0x4c0dcc]
lea eax, [esp + 0x3a]
push eax
call fcn.004130a0
mov ecx, dword [0x4c0dd4]
mov edx, dword [0x4c0dd0]
jmp 0x428f4d
mov ebx, dword [0x4c0dd0]
lea eax, [esp + 0x3a]
push eax
call fcn.004130a0
mov ecx, dword [0x4c0dd8]
mov edx, dword [0x4c0dd4]
add esp, 4
push ecx
mov esi, eax
push edx
mov ecx, esi
call fcn.00467d50
mov edi, eax
cmp byte [esp + 0x3a], 0
je 0x4261f3
test esi, esi
je 0x4261f3
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4261f3
mov eax, dword [esp + 0x28]
cmp byte [eax + 1], 2
jae 0x428fb1
mov eax, dword [ebx + 0x14]
cmp eax, edx
je 0x428fb1
mov ebx, dword [0x4c0dc8]
lea ecx, [eax + 0x808]
push ecx
mov ecx, dword [eax + 4]
lea edx, [eax + 8]
push edx
mov edx, dword [eax + 0x1008]
call fcn.004680d0
jmp 0x4261f1
mov ebx, dword [0x4c0dcc]
lea eax, [esp + 0x3a]
push eax
call fcn.004130a0
mov ecx, dword [0x4c0dd4]
mov edx, dword [0x4c0dd0]
mov esi, dword [0x4c0dc8]
add esp, 4
push ecx
push edx
mov edi, eax
call fcn.00413240
mov ebx, dword [0x4c0dd8]
mov ecx, edi
mov edx, eax
call fcn.004680d0
cmp byte [esp + 0x3a], 0
mov esi, eax
je 0x429002
test edi, edi
je 0x429002
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, esi
jmp 0x4261f3
mov eax, dword [esp + 0x28]
cmp byte [eax + 1], 1
jae 0x4290ba
mov eax, dword [ebx + 0x14]
cmp eax, edx
je 0x4290ba
cmp dword [eax + 0x1008], 0xfffffffe
jne 0x429083
lea ecx, [eax + 0x808]
push ecx
add eax, 8
push eax
push 0x49f3dc
mov esi, 0x400
lea edi, [esp + 0x10c]
call fcn.0046b300
mov edx, dword [ebx + 0x14]
mov ecx, dword [0x4c17f0]
mov esi, dword [edx + 4]
add esp, 0xc
push 1
push 0
push 0xffffffffffffffff
push 0x49e30c
call fcn.0046dd60
test esi, esi
je 0x4269e8
push esi
mov eax, 0x4a596c
call fcn.004684a0
jmp 0x4261f1
mov ecx, dword [0x4c17f0]
mov esi, dword [eax + 4]
push 1
push 0
push 0xffffffffffffffff
push 0x49e30c
lea ebx, [eax + 0x808]
lea edi, [eax + 8]
call fcn.0046dd60
test esi, esi
je 0x4269e8
push esi
mov eax, ebx
call fcn.004684a0
jmp 0x4261f1
mov ebx, dword [0x4c0dc8]
lea eax, [esp + 0x3a]
push eax
call fcn.004130a0
mov ecx, dword [0x4c17f0]
mov ebx, dword [0x4c0dd0]
mov edi, dword [0x4c0dcc]
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push 0x49e30c
mov esi, eax
call fcn.0046dd60
test esi, esi
je 0x429102
push esi
mov eax, ebx
call fcn.004684a0
jmp 0x428f5b
mov edi, 1
jmp 0x428f5d
mov ecx, dword [0x4c0dc8]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp case.0x425f0e.3
mov ecx, dword [esp + 0x28]
xor edi, edi
call fcn.0041f690
push eax
call fcn.0044fc60
xor edx, edx
add esp, 4
test al, al
setne dl
mov edi, edx
jmp 0x4261f3
mov eax, dword [0x4c0dc8]
call fcn.00414050
cmp eax, 0xffffffff
jne 0x42916a
mov eax, dword [0x4c0dc8]
mov ecx, dword [esp + 0x28]
push eax
push 0
push str.Parameter_1_invalid
call fcn.0042d460
jmp 0x4261f1
mov dword [ebx + 0xf0], eax
jmp case.0x425f0e.3
xor edi, edi
mov eax, edi
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x4c]
mov dword [edx], eax
mov eax, edi
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, 1
cmp edi, 7
je 0x4256d8
mov eax, edi
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [eax + 4]
mov ecx, dword [esp + 0x4c]
mov dword [ecx], eax
jmp 0x4256d3
mov edx, dword [ebp + 0xc]
test edx, edx
je 0x429245
cmp dword [edx + 8], 0
jne 0x429245
mov ecx, dword [0x4c0e18]
test ecx, ecx
je 0x429236
mov al, byte [ecx + 0x17]
test al, al
jne 0x429208
mov eax, dword [ecx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x429236
mov esi, edx
call fcn.004128d0
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edx + 8], 0
mov ecx, dword [0x4c0dc8]
mov dword [edx], ecx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x429278
mov edx, dword [esi + 0x18]
mov eax, dword [esp + 0x4c]
mov dword [eax], edx
mov eax, 5
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esi + 0x18]
test esi, esi
je 0x4292a1
mov ecx, dword [esp + 0x4c]
mov dword [ecx], esi
mov eax, 6
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4c0dcc]
mov ecx, dword [esp + 0x28]
push edx
push 0
push str.Parameter_2_invalid__The_current_thread_will_exit.
call fcn.0042d460
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4c0dd0]
mov ecx, dword [esp + 0x28]
push eax
push 0
push str.Parameter_3_invalid__The_current_thread_will_exit.
call fcn.0042d460
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x3c]
mov dword [ecx], edx
jmp 0x4256d3
mov ecx, dword [esp + 0x4c]
mov dword [ecx], eax
mov eax, edi
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4be600]
cmp word [edx], 0
jne 0x429376
cmp dword [0x4c29f8], 0
jne 0x429376
cmp dword [0x4c0fa4], 0
jne 0x429376
cmp dword [0x4c0fa8], 0
jne 0x429376
cmp byte [0x4c0e97], 0
je case.0x425707.216
mov eax, 8
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor edi, edi
mov ecx, esi
call fcn.0041f690
push eax
push edi
push 9
mov ecx, 0x4c3168
call fcn.00415480
mov ecx, dword [esp + 0x934]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je 0x4256d3
push 0x4a596c
push 0
push str.A__return__must_be_encountered_prior_to_this___.__The_current_thread_will_exit.
mov ecx, esi
call fcn.0042d460
mov ecx, dword [esp + 0x934]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc