Function at 0x401ad0
Capabilities:
Delete file
Delete registry key
Get installed programs
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x416ca5
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x3390
call fcn.00414740
mov eax, dword [0x41d474]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 0x10]
xor edi, edi
push 0x206
lea ecx, [ebp - 0x239e]
xor eax, eax
push edi
mov dword [ebp - 0x3218], edi
push ecx
mov dword [ebp - 0x3228], edi
mov word [ebp - 0x23a0], ax
call fcn.0040a830
add esp, 0xc
push esi
lea edx, [ebp - 0x23a0]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x23a0]
push eax
lea esi, [ebp - 0x320c]
call fcn.00401780
add esp, 4
push 6
push str._quiet
mov ecx, esi
push ecx
mov dword [ebp - 4], edi
call fcn.00404ce0
cmp eax, edi
jl 0x401b78
mov dword [ebp - 0x3228], 1
push 0x206
lea eax, [ebp - 0x2196]
mov ebx, 1
xor edx, edx
push edi
mov byte [ebp - 4], bl
push eax
mov word [ebp - 0x2198], dx
call fcn.0040a830
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x2198]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x2198]
push edx
lea esi, [ebp - 0x31f0]
call fcn.00401780
add esp, 4
push 0x41a074
mov eax, esi
mov byte [ebp - 4], 2
call fcn.00404d80
mov ecx, dword [ebp - 0x31e0]
dec ecx
push ecx
push eax
mov ecx, esi
call fcn.004039d0
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x1d86]
push eax
mov word [ebp - 0x1d88], dx
call fcn.0040a830
mov eax, dword [ebp - 0x31f0]
mov edi, 0x10
add esp, 0xc
cmp dword [ebp - 0x31dc], edi
jae 0x401c19
mov eax, esi
mov ecx, dword [ebp - 0x31e0]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
inc ecx
push ecx
push eax
push 0
push 0
call esi
mov ecx, dword [ebp - 0x31f0]
cmp dword [ebp - 0x31dc], edi
jae 0x401c46
lea ecx, [ebp - 0x31f0]
push eax
mov eax, dword [ebp - 0x31e0]
lea edx, [ebp - 0x1d88]
push edx
inc eax
push eax
push ecx
push 0
push 0
call esi
push 0x41a078
lea ecx, [ebp - 0x1d88]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0x1d88]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x936]
push ecx
mov word [ebp - 0x938], ax
call fcn.0040a830
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x135e]
push eax
mov word [ebp - 0x1360], dx
call fcn.0040a830
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0xb3e]
push edx
mov word [ebp - 0xb40], cx
call fcn.0040a830
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0xf4e]
push ecx
mov word [ebp - 0xf50], ax
call fcn.0040a830
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x1566]
push eax
mov word [ebp - 0x1568], dx
call fcn.0040a830
mov ebx, dword [sym.imp.USER32.dll_LoadStringW]
add esp, 0x3c
push 0x104
lea ecx, [ebp - 0x938]
push ecx
push 0x7df
push edi
call ebx
push 0x104
lea edx, [ebp - 0x1360]
push edx
push 0x7e0
push edi
call ebx
push 0x104
lea eax, [ebp - 0xb40]
push eax
push 0x7dd
push edi
call ebx
push 0x104
lea ecx, [ebp - 0xf50]
push ecx
push 0x7cb
push edi
call ebx
push 0x104
lea edx, [ebp - 0x1568]
push edx
push 0x7cc
push edi
call ebx
lea eax, [ebp - 0x938]
lea edx, [eax + 2]
jmp 0x401d80
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x401d80
sub eax, edx
sar eax, 1
jne 0x401db1
mov ecx, str.GstarCAD_2016
lea edx, [ebp - 0x938]
lea esp, [esp]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x401da0
lea eax, [ebp - 0x1360]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x401dc0
sub eax, edx
sar eax, 1
jne 0x401df1
mov ecx, str.GstarCAD_2016_Uninstall_is_complete_
lea edx, [ebp - 0x1360]
lea esp, [esp]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x401de0
lea eax, [ebp - 0xb40]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x401e00
sub eax, edx
sar eax, 1
jne 0x401e31
mov ecx, str.GstarCAD_2016_Uninstall_is_complete_
lea edx, [ebp - 0xb40]
lea esp, [esp]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x401e20
lea eax, [ebp - 0xf50]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x401e40
sub eax, edx
sar eax, 1
jne 0x401e71
mov ecx, str.Gstarsoft
lea edx, [ebp - 0xf50]
lea esp, [esp]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x401e60
lea eax, [ebp - 0x1568]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x401e80
sub eax, edx
sar eax, 1
jne 0x401eb1
mov ecx, str.GstarCAD
lea edx, [ebp - 0x1568]
lea esp, [esp]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x401ea0
mov ebx, 0xc
lea eax, [ebp - 0x31f0]
call fcn.00404bf0
push 0x206
xor ebx, ebx
lea ecx, [ebp - 0x31b6]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x31b8], ax
call fcn.0040a830
add esp, 0xc
mov dword [ebp - 0x321c], 0x80000002
mov dword [ebp - 0x32d8], 0x41a418
mov byte [ebp - 4], 3
or dword [ebp - 0x3218], 1
push ebx
xor eax, eax
lea ecx, [ebp - 0x3270]
mov dword [ebp - method.std::basic_istream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov dword [ebp - 0x32d0], ebx
mov dword [ebp - 0x32cc], ebx
mov dword [ebp - 0x3240], ebx
mov dword [ebp - 0x3268], ebx
mov dword [ebp - 0x3260], ebx
mov dword [ebp - 0x325c], 0x201
mov dword [ebp - 0x3258], 6
mov dword [ebp - 0x3254], ebx
mov dword [ebp - 0x3250], ebx
mov dword [ebp - 0x324c], ebx
mov dword [ebp - 0x3248], ebx
mov dword [ebp - 0x3244], ebx
call fcn.004015a0
push 4
call fcn.004071a8
mov edi, eax
add esp, 4
cmp edi, ebx
je 0x401fad
call fcn.004063a3
mov dword [edi], eax
call fcn.00406162
push ebx
lea ecx, [ebp - 0x3390]
mov esi, eax
call fcn.00406097
mov eax, dword [esi + 4]
cmp eax, 0xffffffff
jae 0x401f9e
inc eax
mov dword [esi + 4], eax
lea ecx, [ebp - 0x3390]
call fcn.004060bf
mov eax, edi
jmp 0x401faf
xor eax, eax
mov dword [ebp - 0x3240], eax
lea edx, [ebp - 0x32c8]
lea edi, [ebp - 0x3398]
lea eax, [ebp - 0x3270]
mov dword [ebp - 0x3238], edx
mov dword [ebp - 0x3234], ebx
call fcn.004016a0
mov edi, eax
mov dword [ebp - 4], 5
call fcn.00405cf0
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0x3398]
mov dword [ebp - 0x3220], eax
cmp esi, ebx
je 0x40203a
push ebx
lea ecx, [ebp - 0x33a0]
call fcn.00406097
mov eax, dword [esi + 4]
cmp eax, ebx
jbe 0x402016
cmp eax, 0xffffffff
jae 0x402016
dec eax
mov dword [esi + 4], eax
mov edi, dword [esi + 4]
neg edi
sbb edi, edi
not edi
lea ecx, [ebp - 0x33a0]
and edi, esi
call fcn.004060bf
cmp edi, ebx
je 0x40203a
mov eax, dword [edi]
mov edx, dword [eax]
push 1
mov ecx, edi
call edx
mov ecx, dword [ebp - 0x3220]
mov eax, dword [ecx]
mov edx, dword [eax + 0x18]
push 0x20
call edx
mov byte [ebp - 0x3230], al
cmp dword [ebp - 0x3238], ebx
jne 0x40206c
mov eax, dword [ebp - 0x3264]
or eax, 4
push ebx
lea ecx, [ebp - 0x3270]
call fcn.004015a0
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x32d8]
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x32c8]
push edx
mov dword [ebp + ecx - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
call fcn.00405990
lea eax, [ebp - 0x32c0]
mov dword [ebp - 0x32b8], eax
lea ecx, [ebp - 0x32bc]
lea edx, [ebp - 0x32b0]
lea eax, [ebp - 0x32ac]
mov dword [ebp - 0x32b4], ecx
mov dword [ebp - 0x32a8], edx
mov dword [ebp - 0x32a4], eax
mov eax, dword [0x41f4c8]
lea ecx, [ebp - 0x32a0]
lea edx, [ebp - 0x329c]
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov byte [ebp - 0x3278], 0
mov byte [ebp - 0x327f], 0
mov dword [ebp - 0x3298], ecx
mov dword [ebp - 0x3294], edx
mov dword [ebp - 0x32bc], ebx
mov dword [ebp - 0x32ac], ebx
mov dword [ebp - 0x329c], ebx
mov dword [ebp - 0x32c0], ebx
mov dword [ebp - 0x32b0], ebx
mov dword [ebp - 0x32a0], ebx
mov dword [ebp - 0x3274], ebx
mov dword [ebp - 0x327c], eax
mov dword [ebp - 0x3284], ebx
mov byte [ebp - 4], 7
cmp dword [ebp - 0x31dc], 0x10
mov eax, dword [ebp - 0x31f0]
jae 0x402147
lea eax, [ebp - 0x31f0]
push eax
lea ecx, [ebp - 0x32c8]
call fcn.00405a80
cmp eax, ebx
jne 0x40217b
mov ecx, dword [ebp - 0x32d8]
mov ecx, dword [ecx + 4]
mov eax, dword [ebp + ecx - 0x32cc]
lea ecx, [ebp + ecx - 0x32d8]
or eax, 2
cmp dword [ecx + 0x38], ebx
jne 0x40219c
or eax, 4
jmp 0x40219c
mov edx, dword [ebp - 0x32d8]
mov ecx, dword [edx + 4]
mov eax, dword [ebp + ecx - 0x32a0]
lea ecx, [ebp + ecx - 0x32d8]
neg eax
sbb eax, eax
and eax, 0xfffffffc
add eax, 4
push ebx
call fcn.004015a0
cmp dword [ebp - 0x3274], ebx
je 0x4027fb
jmp 0x4021b2
xor ebx, ebx
mov eax, dword [ebp - 0x32d8]
mov ecx, dword [eax + 4]
mov eax, dword [ebp + ecx - 0x32cc]
cmp eax, ebx
jne 0x40270b
test al, 1
jne 0x40270b
push 0x103
lea edx, [ebp - 0x117]
push ebx
push edx
mov byte [ebp - 0x118], 0
call fcn.0040a830
add esp, 0xc
push ebx
push 0x104
lea eax, [ebp - 0x118]
push eax
lea esi, [ebp - 0x32d8]
call fcn.00403bf0
push 0x206
lea edx, [ebp - 0x526]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0x528], cx
call fcn.0040a830
lea eax, [ebp - 0x118]
add esp, 0xc
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402230
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
sub eax, edx
push ebx
inc eax
push eax
lea eax, [ebp - 0x118]
push eax
push ebx
push ebx
call edi
lea ecx, [ebp - 0x118]
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x402257
push eax
sub ecx, esi
lea edx, [ebp - 0x528]
push edx
inc ecx
push ecx
lea eax, [ebp - 0x118]
push eax
push ebx
push ebx
call edi
lea ecx, [ebp - 0x528]
push ecx
lea esi, [ebp - 0x31d4]
call fcn.00401780
add esp, 4
push 0xb
push str.File:_wrote
mov edx, esi
push edx
mov byte [ebp - 4], 8
call fcn.00404ce0
cmp eax, ebx
jl 0x402418
push 1
push 0x41a148
mov eax, esi
push eax
call fcn.00404ce0
mov esi, dword [ebp - 0x31c4]
lea edi, [eax + 1]
cmp esi, edi
jae 0x4022c3
mov edi, esi
cmp edi, ebx
jbe 0x40231c
mov eax, dword [ebp - 0x31c0]
mov ecx, dword [ebp - 0x31d4]
cmp eax, 0x10
jae 0x402341
lea ecx, [ebp - 0x31d4]
mov eax, ecx
sub esi, edi
push esi
add ecx, edi
push ecx
push eax
call fcn.00406c90
mov eax, dword [ebp - 0x31c4]
mov ecx, dword [ebp - 0x31d4]
sub eax, edi
add esp, 0xc
cmp dword [ebp - 0x31c0], 0x10
mov dword [ebp - 0x31c4], eax
jae 0x402312
lea ecx, [ebp - 0x31d4]
mov byte [ecx + eax], 0
mov esi, dword [ebp - 0x31c4]
push 0x41a148
mov ebx, 1
lea eax, [ebp - 0x31d4]
mov edi, esi
call fcn.00404d80
cmp esi, eax
jae 0x402349
push str.invalid_string_position
call fcn.004068cc
mov eax, dword [ebp - 0x31d4]
jmp 0x4022e0
mov ecx, esi
sub ecx, eax
cmp ecx, esi
jae 0x402353
mov edi, ecx
mov ebx, 0x10
test edi, edi
je 0x4023b7
mov edx, dword [ebp - 0x31c0]
mov esi, dword [ebp - 0x31d4]
cmp edx, ebx
jae 0x4024d3
lea esi, [ebp - 0x31d4]
mov edx, esi
sub ecx, edi
add esi, eax
push ecx
add esi, edi
add edx, eax
push esi
push edx
call fcn.00406c90
mov eax, dword [ebp - 0x31c4]
mov ecx, dword [ebp - 0x31d4]
sub eax, edi
add esp, 0xc
mov dword [ebp - 0x31c4], eax
cmp dword [ebp - 0x31c0], ebx
jae 0x4023ad
lea ecx, [ebp - 0x31d4]
mov byte [ecx + eax], 0
mov esi, dword [ebp - 0x31c4]
mov eax, dword [ebp - 0x31d4]
cmp dword [ebp - 0x31c0], ebx
jae 0x4023cb
lea eax, [ebp - 0x31d4]
push 0
push 0
inc esi
push esi
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push eax
push 0
push 0
call esi
mov ecx, dword [ebp - 0x31d4]
cmp dword [ebp - 0x31c0], ebx
jae 0x4023f2
lea ecx, [ebp - 0x31d4]
push eax
mov eax, dword [ebp - 0x31c4]
lea edx, [ebp - 0x528]
push edx
inc eax
push eax
push ecx
push 0
push 0
call esi
lea ecx, [ebp - 0x528]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor ebx, ebx
push 0x14
push str.CreateShortCut:_out:
lea edx, [ebp - 0x31d4]
push edx
call fcn.00404ce0
cmp eax, ebx
jl 0x4026db
push 1
push 0x41a148
lea eax, [ebp - 0x31d4]
push eax
call fcn.00404ce0
mov esi, dword [ebp - 0x31c4]
lea edi, [eax + 1]
cmp esi, edi
jae 0x402455
mov edi, esi
cmp edi, ebx
jbe 0x4024ae
mov eax, dword [ebp - 0x31c0]
mov ecx, dword [ebp - 0x31d4]
cmp eax, 0x10
jae 0x4024de
lea ecx, [ebp - 0x31d4]
mov eax, ecx
sub esi, edi
push esi
add ecx, edi
push ecx
push eax
call fcn.00406c90
mov eax, dword [ebp - 0x31c4]
mov ecx, dword [ebp - 0x31d4]
sub eax, edi
add esp, 0xc
cmp dword [ebp - 0x31c0], 0x10
mov dword [ebp - 0x31c4], eax
jae 0x4024a4
lea ecx, [ebp - 0x31d4]
mov byte [ecx + eax], 0
mov esi, dword [ebp - 0x31c4]
push 0x41a148
mov ebx, 1
lea eax, [ebp - 0x31d4]
mov edi, esi
call fcn.00404d80
cmp esi, eax
jae 0x4024e6
push str.invalid_string_position
call fcn.004068cc
mov edx, dword [ebp - 0x31d4]
jmp 0x402378
mov eax, dword [ebp - 0x31d4]
jmp 0x402472
mov ecx, esi
sub ecx, eax
cmp ecx, esi
jae 0x4024f0
mov edi, ecx
test edi, edi
je 0x40254f
mov ecx, dword [ebp - 0x31c0]
mov edx, dword [ebp - 0x31d4]
cmp ecx, 0x10
jae 0x40256f
lea edx, [ebp - 0x31d4]
mov ecx, edx
sub esi, edi
sub esi, eax
add edx, edi
add edx, eax
push esi
push edx
add eax, ecx
push eax
call fcn.00406c90
mov eax, dword [ebp - 0x31c4]
mov ecx, dword [ebp - 0x31d4]
sub eax, edi
add esp, 0xc
cmp dword [ebp - 0x31c0], 0x10
mov dword [ebp - 0x31c4], eax
jae 0x402545
lea ecx, [ebp - 0x31d4]
mov byte [eax + ecx], 0
mov esi, dword [ebp - 0x31c4]
push 0x41a148
lea eax, [ebp - 0x31d4]
mov edi, esi
call fcn.00404d80
cmp esi, eax
jae 0x402577
push str.invalid_string_position
call fcn.004068cc
mov ecx, dword [ebp - 0x31d4]
jmp 0x40250d
mov ecx, esi
sub ecx, eax
cmp ecx, esi
jae 0x402581
mov edi, ecx
test edi, edi
je 0x4025e1
mov ecx, dword [ebp - 0x31c0]
mov edx, dword [ebp - 0x31d4]
cmp ecx, 0x10
jae 0x402601
lea edx, [ebp - 0x31d4]
mov ecx, edx
sub esi, edi
sub esi, eax
push esi
lea esi, [edi + eax]
add esi, edx
add eax, ecx
push esi
push eax
call fcn.00406c90
mov eax, dword [ebp - 0x31c4]
mov ecx, dword [ebp - 0x31d4]
sub eax, edi
add esp, 0xc
cmp dword [ebp - 0x31c0], 0x10
mov dword [ebp - 0x31c4], eax
jae 0x4025d7
lea ecx, [ebp - 0x31d4]
mov byte [eax + ecx], 0
mov esi, dword [ebp - 0x31c4]
push 0x41a148
lea eax, [ebp - 0x31d4]
mov edi, esi
call fcn.00404d80
cmp esi, eax
jae 0x402609
push str.invalid_string_position
call fcn.004068cc
mov ecx, dword [ebp - 0x31d4]
jmp 0x40259e
mov ecx, esi
sub ecx, eax
cmp ecx, esi
jae 0x402613
mov edi, ecx
mov ebx, 0x10
test edi, edi
je 0x40267a
mov ecx, dword [ebp - 0x31c0]
mov edx, dword [ebp - 0x31d4]
cmp ecx, ebx
jae 0x402700
lea edx, [ebp - 0x31d4]
mov ecx, edx
sub esi, edi
sub esi, eax
push esi
lea esi, [edi + eax]
add esi, edx
add eax, ecx
push esi
push eax
call fcn.00406c90
mov eax, dword [ebp - 0x31c4]
mov ecx, dword [ebp - 0x31d4]
sub eax, edi
add esp, 0xc
mov dword [ebp - 0x31c4], eax
cmp dword [ebp - 0x31c0], ebx
jae 0x402670
lea ecx, [ebp - 0x31d4]
mov byte [eax + ecx], 0
mov esi, dword [ebp - 0x31c4]
mov eax, dword [ebp - 0x31d4]
cmp dword [ebp - 0x31c0], ebx
jae 0x40268e
lea eax, [ebp - 0x31d4]
push 0
push 0
inc esi
push esi
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push eax
push 0
push 0
call esi
mov ecx, dword [ebp - 0x31d4]
cmp dword [ebp - 0x31c0], ebx
jae 0x4026b5
lea ecx, [ebp - 0x31d4]
push eax
mov eax, dword [ebp - 0x31c4]
lea edx, [ebp - 0x528]
push edx
inc eax
push eax
push ecx
push 0
push 0
call esi
lea ecx, [ebp - 0x528]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor ebx, ebx
mov byte [ebp - 4], 7
cmp dword [ebp - 0x31c0], 0x10
jb 0x4021b0
mov edx, dword [ebp - 0x31d4]
push edx
call fcn.00406c71
add esp, 4
jmp 0x4021b2
mov ecx, dword [ebp - 0x31d4]
jmp 0x402638
lea esi, [ebp - 0x32c8]
cmp dword [ebp - 0x3274], ebx
je 0x402739
mov ebx, esi
call fcn.00405300
test al, al
jne 0x402726
xor esi, esi
mov eax, dword [ebp - 0x3274]
push eax
call fcn.004081ea
add esp, 4
test eax, eax
je 0x40273b
xor esi, esi
xor eax, eax
lea ecx, [ebp - 0x32c0]
mov dword [ebp - 0x32b8], ecx
lea edx, [ebp - 0x32bc]
lea ecx, [ebp - 0x32b0]
mov dword [ebp - 0x32b4], edx
mov dword [ebp - 0x32a8], ecx
lea edx, [ebp - 0x32ac]
lea ecx, [ebp - 0x32a0]
mov dword [ebp - 0x32a4], edx
mov dword [ebp - 0x3298], ecx
mov ecx, dword [0x41f4c8]
lea edx, [ebp - 0x329c]
mov byte [ebp - 0x3278], al
mov byte [ebp - 0x327f], al
mov dword [ebp - 0x3294], edx
mov dword [ebp - 0x32bc], eax
mov dword [ebp - 0x32ac], eax
mov dword [ebp - 0x329c], eax
mov dword [ebp - 0x32c0], eax
mov dword [ebp - 0x32b0], eax
mov dword [ebp - 0x32a0], eax
mov dword [ebp - 0x3274], eax
mov dword [ebp - 0x327c], ecx
mov dword [ebp - 0x3284], eax
cmp esi, eax
jne 0x4027fb
mov edx, dword [ebp - 0x32d8]
mov ecx, dword [edx + 4]
mov eax, dword [ebp + ecx - 0x32cc]
lea ecx, [ebp + ecx - 0x32d8]
or eax, 2
cmp dword [ecx + 0x38], 0
jne 0x4027f4
or eax, 4
push 0
call fcn.004015a0
push 0x206
xor ebx, ebx
lea ecx, [ebp - 0x72e]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x730], ax
call fcn.0040a830
add esp, 0xc
mov dword [ebp - 0x3388], 0x41a418
mov byte [ebp - 4], 9
or dword [ebp - 0x3218], 4
push ebx
xor eax, eax
lea ecx, [ebp - 0x3320]
mov dword [ebp - method.std::basic_istream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov dword [ebp - 0x3380], ebx
mov dword [ebp - 0x337c], ebx
mov dword [ebp - 0x32f0], ebx
mov dword [ebp - 0x3318], ebx
mov dword [ebp - 0x3310], ebx
mov dword [ebp - 0x330c], 0x201
mov dword [ebp - 0x3308], 6
mov dword [ebp - 0x3304], ebx
mov dword [ebp - 0x3300], ebx
mov dword [ebp - 0x32fc], ebx
mov dword [ebp - 0x32f8], ebx
mov dword [ebp - 0x32f4], ebx
call fcn.004015a0
push 4
call fcn.004071a8
mov edi, eax
add esp, 4
cmp edi, ebx
je 0x4028dd
call fcn.004063a3
mov dword [edi], eax
call fcn.00406162
push ebx
lea ecx, [ebp - 0x3394]
mov esi, eax
call fcn.00406097
mov eax, dword [esi + 4]
cmp eax, 0xffffffff
jae 0x4028ce
inc eax
mov dword [esi + 4], eax
lea ecx, [ebp - 0x3394]
call fcn.004060bf
mov eax, edi
jmp 0x4028df
xor eax, eax
mov dword [ebp - 0x32f0], eax
lea edx, [ebp - 0x3378]
lea edi, [ebp - 0x338c]
lea eax, [ebp - 0x3320]
mov dword [ebp - 0x32e8], edx
mov dword [ebp - 0x32e4], ebx
call fcn.004016a0
mov edi, eax
mov dword [ebp - 4], 0xb
call fcn.00405cf0
mov byte [ebp - 4], 0xa
mov esi, dword [ebp - 0x338c]
mov dword [ebp - 0x3220], eax
cmp esi, ebx
je 0x40296a
push ebx
lea ecx, [ebp - 0x339c]
call fcn.00406097
mov eax, dword [esi + 4]
cmp eax, ebx
jbe 0x402946
cmp eax, 0xffffffff
jae 0x402946
dec eax
mov dword [esi + 4], eax
mov edi, dword [esi + 4]
neg edi
sbb edi, edi
not edi
lea ecx, [ebp - 0x339c]
and edi, esi
call fcn.004060bf
cmp edi, ebx
je 0x40296a
mov eax, dword [edi]
mov edx, dword [eax]
push 1
mov ecx, edi
call edx
mov ecx, dword [ebp - 0x3220]
mov eax, dword [ecx]
mov edx, dword [eax + 0x18]
push 0x20
call edx
mov byte [ebp - 0x32e0], al
cmp dword [ebp - 0x32e8], ebx
jne 0x40299c
mov eax, dword [ebp - 0x3314]
or eax, 4
push ebx
lea ecx, [ebp - 0x3320]
call fcn.004015a0
mov dword [ebp - 4], 0xc
mov eax, dword [ebp - 0x3388]
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x3378]
push edx
mov dword [ebp + ecx - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
call fcn.00405990
lea eax, [ebp - 0x3370]
mov dword [ebp - 0x3368], eax
lea ecx, [ebp - 0x336c]
lea edx, [ebp - 0x3360]
lea eax, [ebp - 0x335c]
mov dword [ebp - 0x3364], ecx
mov dword [ebp - 0x3358], edx
mov dword [ebp - 0x3354], eax
mov eax, dword [0x41f4c8]
lea ecx, [ebp - 0x3350]
lea edx, [ebp - 0x334c]
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov byte [ebp - 0x3328], 0
mov byte [ebp - 0x332f], 0
mov dword [ebp - 0x3348], ecx
mov dword [ebp - 0x3344], edx
mov dword [ebp - 0x336c], ebx
mov dword [ebp - 0x335c], ebx
mov dword [ebp - 0x334c], ebx
mov dword [ebp - 0x3370], ebx
mov dword [ebp - 0x3360], ebx
mov dword [ebp - 0x3350], ebx
mov dword [ebp - 0x3324], ebx
mov dword [ebp - 0x332c], eax
mov dword [ebp - 0x3334], ebx
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x31dc], 0x10
mov eax, dword [ebp - 0x31f0]
jae 0x402a77
lea eax, [ebp - 0x31f0]
push eax
lea ecx, [ebp - 0x3378]
call fcn.00405a80
cmp eax, ebx
jne 0x402aab
mov ecx, dword [ebp - 0x3388]
mov ecx, dword [ecx + 4]
mov eax, dword [ebp + ecx - 0x337c]
lea ecx, [ebp + ecx - 0x3388]
or eax, 2
cmp dword [ecx + 0x38], ebx
jne 0x402acc
or eax, 4
jmp 0x402acc
mov edx, dword [ebp - 0x3388]
mov ecx, dword [edx + 4]
mov eax, dword [ebp + ecx - 0x3350]
lea ecx, [ebp + ecx - 0x3388]
neg eax
sbb eax, eax
and eax, 0xfffffffc
add eax, 4
push ebx
call fcn.004015a0
cmp dword [ebp - 0x3324], ebx
je 0x402f32
mov dword [ebp - 0x3224], ebx
mov eax, dword [ebp - 0x3388]
mov ecx, dword [eax + 4]
mov eax, dword [ebp + ecx - 0x337c]
test eax, eax
jne 0x402e43
test al, 1
jne 0x402e43
push eax
push 0x4b4
lea edx, [ebp - 0x27a0]
push edx
lea esi, [ebp - 0x3388]
call fcn.00403bf0
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x526]
push ecx
mov word [ebp - 0x528], ax
call fcn.0040a830
lea eax, [ebp - 0x27a0]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402b43
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
sub eax, edx
push 0
inc eax
push eax
lea edx, [ebp - 0x27a0]
push edx
push 0
push 0
call esi
lea ecx, [ebp - 0x27a0]
lea edi, [ecx + 1]
mov edi, edi
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x402b70
push eax
sub ecx, edi
lea eax, [ebp - 0x528]
push eax
inc ecx
push ecx
lea ecx, [ebp - 0x27a0]
push ecx
push 0
push 0
call esi
lea edx, [ebp - 0x528]
push edx
lea esi, [ebp - 0x31d4]
call fcn.00401780
add esp, 4
push 0xf
push str.CreateDirectory
mov eax, esi
push eax
mov byte [ebp - 4], 0xe
call fcn.00404ce0
mov esi, eax
push 0x41a174
mov ebx, 3
lea eax, [ebp - 0x31d4]
call fcn.00404d80
mov edi, eax
push str.created
mov ebx, 7
lea eax, [ebp - 0x31d4]
call fcn.00404d80
test esi, esi
js 0x402e1a
test edi, edi
jns 0x402bfa
test eax, eax
js 0x402e1a
push 1
push 0x41a148
lea ecx, [ebp - 0x31d4]
push ecx
call fcn.00404ce0
mov esi, dword [ebp - 0x31c4]
lea ebx, [eax + 1]
cmp esi, ebx
jae 0x402c1c
mov ebx, esi
test ebx, ebx
je 0x402c76
mov eax, dword [ebp - 0x31c0]
mov ecx, dword [ebp - 0x31d4]
cmp eax, 0x10
jae 0x402c9b
lea ecx, [ebp - 0x31d4]
mov eax, ecx
sub esi, ebx
push esi
lea edx, [ebx + ecx]
push edx
push eax
call fcn.00406c90
mov eax, dword [ebp - 0x31c4]
mov ecx, dword [ebp - 0x31d4]
sub eax, ebx
add esp, 0xc
cmp dword [ebp - 0x31c0], 0x10
mov dword [ebp - 0x31c4], eax
jae 0x402c6c
lea ecx, [ebp - 0x31d4]
mov byte [eax + ecx], 0
mov esi, dword [ebp - 0x31c4]
push 0x41a148
mov ebx, 1
lea eax, [ebp - 0x31d4]
mov edi, esi
call fcn.00404d80
cmp esi, eax
jae 0x402ca3
push str.invalid_string_position
call fcn.004068cc
mov eax, dword [ebp - 0x31d4]
jmp 0x402c39
mov ecx, esi
sub ecx, eax
cmp ecx, esi
jae 0x402cad
mov edi, ecx
mov ebx, 0x10
test edi, edi
je 0x402d12
mov edx, dword [ebp - 0x31c0]
mov esi, dword [ebp - 0x31d4]
cmp edx, ebx
jae 0x402e0f
lea esi, [ebp - 0x31d4]
mov edx, esi
sub ecx, edi
push ecx
lea ecx, [eax + edi]
add ecx, esi
push ecx
add eax, edx
push eax
call fcn.00406c90
mov eax, dword [ebp - 0x31c4]
mov ecx, dword [ebp - 0x31d4]
sub eax, edi
add esp, 0xc
mov dword [ebp - 0x31c4], eax
cmp dword [ebp - 0x31c0], ebx
jae 0x402d08
lea ecx, [ebp - 0x31d4]
mov byte [ecx + eax], 0
mov esi, dword [ebp - 0x31c4]
mov eax, dword [ebp - 0x31d4]
cmp dword [ebp - 0x31c0], ebx
jae 0x402d26
lea eax, [ebp - 0x31d4]
push 0
push 0
inc esi
push esi
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push eax
push 0
push 0
call esi
mov ecx, dword [ebp - 0x31d4]
cmp dword [ebp - 0x31c0], ebx
jae 0x402d4d
lea ecx, [ebp - 0x31d4]
push eax
mov eax, dword [ebp - 0x31c4]
lea edx, [ebp - 0x528]
push edx
inc eax
push eax
push ecx
push 0
push 0
call esi
push 0x103
lea ecx, [ebp - 0x117]
push 0
push ecx
mov byte [ebp - 0x118], 0
call fcn.0040a830
lea eax, [ebp - 0x528]
add esp, 0xc
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x402d90
push 0
push 0
sub eax, edx
push 0x104
sar eax, 1
lea edx, [ebp - 0x118]
push edx
inc eax
push eax
lea eax, [ebp - 0x528]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea ecx, [ebp - 0x118]
push 0
push ecx
call fcn.004075e3
add esp, 8
cmp eax, 0xffffffff
je 0x402e1f
mov eax, dword [ebp - 0x3224]
inc eax
mov dword [ebp - 0x3224], eax
cmp eax, 1
jne 0x402dfe
lea edx, [ebp - 0x528]
push edx
lea eax, [ebp - 0x730]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x528]
push ecx
call fcn.00401800
add esp, 4
jmp 0x402e1f
mov edx, dword [ebp - 0x31d4]
jmp 0x402cd2
mov ebx, 0x10
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x31c0], ebx
jb 0x402ae4
mov edx, dword [ebp - 0x31d4]
push edx
call fcn.00406c71
add esp, 4
jmp 0x402ae4
cmp dword [ebp - 0x3324], 0
lea esi, [ebp - 0x3378]
je 0x402e72
mov ebx, esi
call fcn.00405300
test al, al
jne 0x402e5f
xor esi, esi
mov eax, dword [ebp - 0x3324]
push eax
call fcn.004081ea
add esp, 4
test eax, eax
je 0x402e74
xor esi, esi
xor edx, edx
lea ecx, [ebp - 0x3370]
mov dword [ebp - 0x3368], ecx
lea eax, [ebp - 0x336c]
lea ecx, [ebp - 0x3360]
mov dword [ebp - 0x3364], eax
mov dword [ebp - 0x3358], ecx
lea eax, [ebp - 0x335c]
lea ecx, [ebp - 0x3350]
mov dword [ebp - 0x3354], eax
mov dword [ebp - 0x3348], ecx
mov ecx, dword [0x41f4c8]
lea eax, [ebp - 0x334c]
mov byte [ebp - 0x3328], dl
mov byte [ebp - 0x332f], dl
mov dword [ebp - 0x3344], eax
mov dword [ebp - 0x336c], edx
mov dword [ebp - 0x335c], edx
mov dword [ebp - 0x334c], edx
mov dword [ebp - 0x3370], edx
mov dword [ebp - 0x3360], edx
mov dword [ebp - 0x3350], edx
mov dword [ebp - 0x3324], edx
mov dword [ebp - 0x332c], ecx
mov dword [ebp - 0x3334], edx
cmp esi, edx
jne 0x402f32
mov eax, dword [ebp - 0x3388]
mov ecx, dword [eax + 4]
mov eax, dword [ebp + ecx - 0x337c]
lea ecx, [ebp + ecx - 0x3388]
or eax, 2
cmp dword [ecx + 0x38], edx
jne 0x402f2c
or eax, 4
push edx
call fcn.004015a0
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x176e]
push edx
mov word [ebp - 0x1770], cx
call fcn.0040a830
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x1b7e]
push ecx
mov word [ebp - 0x1b80], ax
call fcn.0040a830
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyW]
add esp, 0x18
lea edx, [ebp - 0x730]
push edx
lea eax, [ebp - 0x1770]
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
push str.install.log
lea ecx, [ebp - 0x1770]
push ecx
call esi
lea edx, [ebp - 0x730]
push edx
lea eax, [ebp - 0x1b80]
push eax
call ebx
push str.uninst.exe
lea ecx, [ebp - 0x1b80]
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea edx, [ebp - 0x1770]
push edx
call edi
lea eax, [ebp - 0x1b80]
push eax
call edi
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0xd46]
push edx
mov word [ebp - 0xd48], cx
call fcn.0040a830
add esp, 0xc
lea eax, [ebp - 0x730]
push eax
lea ecx, [ebp - 0xd48]
push ecx
call ebx
push str.Setup.ini
lea edx, [ebp - 0xd48]
push edx
call esi
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x1156]
push ecx
mov word [ebp - 0x1158], ax
call fcn.0040a830
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x1976]
push eax
mov word [ebp - 0x1978], dx
call fcn.0040a830
add esp, 0x18
lea ecx, [ebp - 0xd48]
push ecx
push 0x104
lea edx, [ebp - 0x1158]
push edx
push 0x41a1cc
push str.LANGUAGE
push 0x41a1e4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x1158]
push eax
call fcn.00407902
add esp, 4
lea ecx, [ebp - 0xd48]
push ecx
push 0
push 0x41a1ec
push str.SETUP
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
xor edx, edx
push 0x206
mov dword [ebp - 0x3214], eax
push edx
lea eax, [ebp - 0x31e]
push eax
mov word [ebp - 0x320], dx
call fcn.0040a830
add esp, 0xc
lea ecx, [ebp - 0x730]
push ecx
lea edx, [ebp - 0x320]
push edx
call ebx
push str.Setup.exe
lea eax, [ebp - 0x320]
push eax
call esi
lea ecx, [ebp - 0x320]
push ecx
call edi
lea edx, [ebp - 0x730]
push edx
lea eax, [ebp - 0x320]
push eax
call ebx
push str.Setup.ini
lea ecx, [ebp - 0x320]
push ecx
call esi
lea edx, [ebp - 0x320]
push edx
call edi
lea eax, [ebp - 0x730]
push eax
lea ecx, [ebp - 0x320]
push ecx
call ebx
push 0x41a078
lea edx, [ebp - 0x320]
push edx
call esi
lea eax, [ebp - 0x320]
push eax
call edi
lea ecx, [ebp - 0x730]
push ecx
lea edx, [ebp - 0x320]
push edx
call ebx
push 0x41a218
lea eax, [ebp - 0x320]
push eax
call esi
lea ecx, [ebp - 0x320]
push ecx
call edi
lea edx, [ebp - 0x730]
push edx
lea eax, [ebp - 0x320]
push eax
call ebx
push str.mfc100u.dll
lea ecx, [ebp - 0x320]
push ecx
call esi
lea edx, [ebp - 0x320]
push edx
call edi
lea eax, [ebp - 0x730]
push eax
lea ecx, [ebp - 0x320]
push ecx
call ebx
push str.msvcp100.dll
lea edx, [ebp - 0x320]
push edx
call esi
lea eax, [ebp - 0x320]
push eax
call edi
lea ecx, [ebp - 0x730]
push ecx
lea edx, [ebp - 0x320]
push edx
call ebx
push str.msvcr100.dll
lea eax, [ebp - 0x320]
push eax
call esi
lea ecx, [ebp - 0x320]
push ecx
call edi
push 0x103
lea edx, [ebp - 0x117]
push 0
push edx
mov byte [ebp - 0x118], 0
call fcn.0040a830
lea eax, [ebp - 0x730]
add esp, 0xc
lea edx, [eax + 2]
jmp 0x4031f0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4031f0
push 0
push 0
sub eax, edx
push 0x104
sar eax, 1
lea ecx, [ebp - 0x118]
push ecx
inc eax
push eax
lea edx, [ebp - 0x730]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x118]
push 0
push eax
call fcn.004075e3
add esp, 8
cmp eax, 0xffffffff
je 0x403247
lea ecx, [ebp - 0x730]
push ecx
call fcn.00401800
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x1f8e]
push eax
mov word [ebp - 0x1f90], dx
call fcn.0040a830
add esp, 0xc
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall
lea ecx, [ebp - 0x1f90]
push ecx
call ebx
lea edx, [ebp - 0x321c]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0x1f90]
push eax
push 0x80000002
mov dword [ebp - 0x321c], 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40344a
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x526]
push edx
mov word [ebp - 0x528], cx
call fcn.0040a830
add esp, 0xc
lea eax, [ebp - 0x938]
push eax
lea ecx, [ebp - 0x528]
push ecx
call ebx
push 0x41a2f0
lea edx, [ebp - 0x528]
push edx
call esi
lea eax, [ebp - 0x1158]
push eax
lea ecx, [ebp - 0x528]
push ecx
call esi
mov eax, dword [ebp - 0x321c]
lea edx, [ebp - 0x528]
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
test eax, eax
je 0x40344a
mov ecx, dword [ebp - 0x321c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x3228], 0
jne 0x40333e
push 0x51010
lea edx, [ebp - 0x938]
push edx
lea eax, [ebp - 0xb40]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0x3388]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x3320]
mov ebx, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov dword [ebp - 0x3214], ecx
mov dword [ebp + eax - 0x3388], ebx
lea ecx, [ebp - 0x3378]
mov byte [ebp - 4], 0xf
call fcn.00404020
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x3388]
mov edx, dword [ecx + 4]
lea eax, [ebp - 0x3320]
mov edi, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov dword [ebp + edx - 0x3388], edi
mov esi, vtable.std::ios_base.0
push eax
mov dword [ebp - 0x3320], esi
call fcn.0040681f
mov edx, dword [ebp - 0x32d8]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x3270]
add esp, 4
mov dword [ebp - 0x3214], ecx
mov dword [ebp + eax - 0x32d8], ebx
lea ecx, [ebp - 0x32c8]
mov byte [ebp - 4], 0x10
call fcn.00404020
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x32d8]
mov edx, dword [ecx + 4]
lea eax, [ebp - 0x3270]
mov dword [ebp + edx - 0x32d8], edi
push eax
mov dword [ebp - 0x3270], esi
call fcn.0040681f
mov esi, 0x10
add esp, 4
cmp dword [ebp - 0x31dc], esi
jb 0x403411
mov ecx, dword [ebp - 0x31f0]
push ecx
call fcn.00406c71
add esp, 4
mov dword [ebp - 0x31dc], 0xf
mov dword [ebp - 0x31e0], 0
mov byte [ebp - 0x31f0], 0
cmp dword [ebp - 0x31f8], esi
jb 0x403443
mov edx, dword [ebp - 0x320c]
push edx
call fcn.00406c71
add esp, 4
xor eax, eax
jmp 0x4038b5
mov eax, dword [ebp - 0x321c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x1158]
push ecx
lea esi, [ebp - 0x31d4]
call fcn.00401780
add esp, 4
mov esi, eax
lea edx, [ebp - 0x31f0]
cmp edx, esi
je 0x4034f6
cmp dword [ebp - 0x31dc], 0x10
jb 0x403490
mov eax, dword [ebp - 0x31f0]
push eax
call fcn.00406c71
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x31dc], edi
mov dword [ebp - 0x31e0], 0
mov byte [ebp - 0x31f0], 0
cmp dword [esi + 0x14], 0x10
jae 0x4034c9
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [ebp - 0x31f0]
push esi
push ecx
call fcn.00406c90
add esp, 0xc
jmp 0x4034d7
mov edx, dword [esi]
mov dword [ebp - 0x31f0], edx
mov dword [esi], 0
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x31e0], eax
mov ecx, dword [esi + 0x14]
mov dword [ebp - 0x31dc], ecx
mov dword [esi + 0x14], edi
mov dword [esi + 0x10], 0
mov byte [esi], 0
mov esi, 0x10
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x31c0], esi
jb 0x403516
mov edx, dword [ebp - 0x31d4]
push edx
call fcn.00406c71
add esp, 4
mov ecx, dword [ebp - 0x31e0]
mov byte [ebp - 0x3210], 0x5f
test ecx, ecx
je 0x403623
mov dword [ebp - 0x3220], ecx
cmp ecx, 1
jb 0x403623
mov eax, dword [ebp - 0x31f0]
cmp dword [ebp - 0x31dc], esi
jae 0x40354e
lea eax, [ebp - 0x31f0]
push ecx
movsx ecx, byte [ebp - 0x3210]
push ecx
push eax
mov dword [ebp - 0x3224], eax
call fcn.00407070
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0x3218], ecx
test ecx, ecx
je 0x403623
mov eax, 1
lea edx, [ebp - 0x3210]
mov esi, ecx
cmp eax, 4
jb 0x403599
mov edi, dword [esi]
cmp edi, dword [edx]
jne 0x40359d
sub eax, 4
add edx, 4
add esi, 4
jmp 0x403583
test eax, eax
je 0x4035e6
movzx ecx, byte [esi]
movzx edi, byte [edx]
sub ecx, edi
jne 0x4035d8
cmp eax, 1
jbe 0x4035e0
movzx ecx, byte [esi + 1]
movzx edi, byte [edx + 1]
sub ecx, edi
jne 0x4035d8
cmp eax, 2
jbe 0x4035e0
movzx ecx, byte [esi + 2]
movzx edi, byte [edx + 2]
sub ecx, edi
jne 0x4035d8
cmp eax, 3
jbe 0x4035e0
movzx ecx, byte [esi + 3]
movzx edx, byte [edx + 3]
sub ecx, edx
sar ecx, 0x1f
or ecx, 1
jne 0x4035ff
mov ecx, dword [ebp - 0x3218]
cmp dword [ebp - 0x31dc], 0x10
mov eax, dword [ebp - 0x31f0]
jae 0x4035fb
lea eax, [ebp - 0x31f0]
sub ecx, eax
jmp 0x403626
mov eax, dword [ebp - 0x3218]
mov ecx, dword [ebp - 0x3224]
mov edx, dword [ebp - 0x3220]
sub ecx, eax
lea ecx, [edx + ecx - 1]
mov dword [ebp - 0x3220], ecx
inc eax
jmp 0x40354e
or ecx, 0xffffffff
push ecx
lea esi, [ebp - 0x31f0]
call fcn.00403a60
mov eax, dword [ebp - 0x31f0]
mov edi, 0x10
cmp dword [ebp - 0x31dc], edi
jae 0x403647
mov eax, esi
mov ecx, dword [ebp - 0x31e0]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
inc ecx
push ecx
push eax
push 0
push 0
call esi
mov ecx, dword [ebp - 0x31f0]
cmp dword [ebp - 0x31dc], edi
jae 0x403674
lea ecx, [ebp - 0x31f0]
push eax
mov eax, dword [ebp - 0x31e0]
lea edx, [ebp - 0x1978]
push edx
inc eax
push eax
push ecx
push 0
push 0
call esi
lea ecx, [ebp - 0x1978]
push ecx
lea edx, [ebp - 0x31b8]
push edx
call ebx
xor eax, eax
push 0x7fe
push eax
lea ecx, [ebp - 0x2fae]
push ecx
mov word [ebp - 0x2fb0], ax
call fcn.0040a830
add esp, 0xc
push 0x41a2f4
lea edx, [ebp - 0x2fb0]
push edx
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0xf50]
push eax
lea ecx, [ebp - 0x2fb0]
push ecx
call esi
push 0x41a044
lea edx, [ebp - 0x2fb0]
push edx
call esi
lea eax, [ebp - 0x1568]
push eax
lea ecx, [ebp - 0x2fb0]
push ecx
call esi
mov eax, dword [ebp - 0x3214]
cmp eax, 0x2c
jne 0x403714
push str._44R16.0_
lea edx, [ebp - 0x2fb0]
push edx
jmp 0x403733
cmp eax, 0x2b
jne 0x403727
push str._43R16.0_
lea eax, [ebp - 0x2fb0]
push eax
jmp 0x403733
push str.R16.0_
lea ecx, [ebp - 0x2fb0]
push ecx
call esi
lea edx, [ebp - 0x1978]
push edx
lea eax, [ebp - 0x2fb0]
push eax
mov dword [ebp - 0x321c], 0x80000001
call esi
mov esi, dword [ebp - 0x321c]
lea ecx, [ebp - 0x2fb0]
push ecx
lea edx, [ebp - 0x27b0]
push edx
call ebx
lea eax, [ebp - 0x27b0]
push eax
push esi
call fcn.00401960
add esp, 8
test eax, eax
jne 0x40379d
cmp dword [ebp - 0x3228], eax
jne 0x4037c1
push 0x51010
lea ecx, [ebp - 0x938]
push ecx
lea edx, [ebp - 0xb40]
push edx
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4037a6
cmp dword [ebp - 0x3228], 0
jne 0x4037c1
push 0x51040
lea eax, [ebp - 0x938]
push eax
lea ecx, [ebp - 0x1360]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [ebp - 0x3388]
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x3320]
mov ebx, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov dword [ebp - 0x3214], edx
mov dword [ebp + ecx - 0x3388], ebx
lea ecx, [ebp - 0x3378]
mov byte [ebp - 4], 0x12
call fcn.00404020
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x3388]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x3320]
mov edi, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov dword [ebp + eax - 0x3388], edi
mov esi, vtable.std::ios_base.0
push ecx
mov dword [ebp - 0x3320], esi
call fcn.0040681f
mov eax, dword [ebp - 0x32d8]
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x3270]
add esp, 4
mov dword [ebp - 0x3214], edx
mov dword [ebp + ecx - 0x32d8], ebx
lea ecx, [ebp - 0x32c8]
mov byte [ebp - 4], 0x13
call fcn.00404020
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x32d8]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x3270]
mov dword [ebp + eax - 0x32d8], edi
push ecx
mov dword [ebp - 0x3270], esi
call fcn.0040681f
add esp, 4
cmp dword [ebp - 0x31dc], 0x10
jb 0x403890
mov edx, dword [ebp - 0x31f0]
push edx
call fcn.00406c71
add esp, 4
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
cmp dword [ebp - 0x31f8], 0x10
jb 0x4038b0
mov eax, dword [ebp - 0x320c]
push eax
call fcn.00406c71
add esp, 4
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00406aec
mov esp, ebp
pop ebp
ret 0x10