Function at 0x425cc0
Capabilities:
Check for time delay via gettickcount
Empty the recycle bin
Find taskbar
Move file
Print debug messages
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x4978eb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x568
mov eax, dword [ebp + 0x10]
push ebx
push esi
push edi
mov dword [esp + 0xa0], ecx
test eax, eax
jne 0x425cf6
lea eax, [esp + 0x7c]
mov esi, dword [0x4a8978]
mov edx, eax
mov ebx, ecx
mov dword [esp + 0x40], eax
mov dword [edx], 0
mov dword [esp + 0x50], esi
mov dword [esp + 0x10], ebx
test ecx, ecx
je case.0x426025.116
mov edi, dword [esp + 0x7c]
mov edi, edi
cmp dword [0x4ad8f8], 0
je 0x425d5a
cmp dword [0x4ad8e8], 0
je 0x425d48
mov eax, dword [0x4ad8e0]
push eax
call dword [sym.imp.KERNEL32.DLL_GlobalUnlock]
mov dword [0x4ad8e8], 0
call dword [sym.imp.USER32.DLL_CloseClipboard]
xor eax, eax
mov dword [0x4ad8f8], eax
mov dword [0x4ad8e0], eax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov edx, dword [0x4a8978]
mov ecx, eax
sub ecx, dword [0x4ad89c]
cmp ecx, dword [edx + 0xb8]
jbe 0x425da7
push 0
push 0
push 0
push 0
lea eax, [esp + 0x134]
push eax
call dword [sym.imp.USER32.DLL_PeekMessageA]
test eax, eax
je 0x425d9c
push 1
push 0xffffffffffffffff
call fcn.004013c0
add esp, 8
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [0x4ad89c], eax
cmp byte [esi + 0xcc], 0
jne 0x425dd8
cmp byte [esi + 0xce], 0
jne 0x425dd8
mov edx, dword [0x4ad890]
cmp edx, 0xffffffff
jle 0x425dd8
mov ecx, dword [esi + 0x28]
cmp ecx, edx
jle 0x425dd4
mov byte [esi + 0xcc], 1
jmp 0x425dd8
inc ecx
mov dword [esi + 0x28], ecx
mov ecx, dword [esi + 4]
mov edx, dword [esi]
cmp ecx, 0xffffffff
jl 0x425dfb
jg 0x425de9
cmp edx, 0xffffffff
jbe 0x425dfb
cmp dword [0x4ad88c], ecx
jg 0x425e0d
jl 0x425dfb
cmp dword [0x4ad888], edx
jae 0x425e0d
mov ecx, dword [esi + 0x24]
cmp ecx, 0xffffffff
jle 0x425e19
sub eax, dword [0x4ad898]
cmp eax, ecx
jb 0x425e19
push 1
push 0xa
call fcn.004013c0
add esp, 8
cmp byte [esi + 0xd8], 0
je 0x425e3a
push 1
push 0x8000012f
call fcn.004013c0
add esp, 8
cmp byte [esi + 0xd8], 0
jne 0x425e22
mov dword [0x4ad5dc], ebx
cmp byte [esi + 0xd9], 0
je 0x425e82
mov ecx, dword [0x4acba4]
mov dword [ecx*4 + 0x4acba8], ebx
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [0x4acba4]
mov dword [ecx*4 + 0x4abbd8], eax
inc ecx
mov dword [0x4acba4], ecx
cmp ecx, 0x190
jl 0x425e82
mov dword [0x4acba4], 0
mov al, byte [ebx]
cmp al, 1
je 0x425ea9
cmp al, 0x6b
je 0x425ea9
cmp al, 0x72
je 0x425ea9
mov edx, dword [ebp + 0xc]
push 0
push 0xffffffffffffffff
push edx
push ebx
call fcn.0045a1b0
mov edi, eax
cmp edi, 1
jne 0x42a32f
mov cl, byte [ebx]
mov byte [esp + 0xd0], cl
cmp cl, 9
jb 0x42600d
cmp cl, 0x20
ja 0x42600d
add dword [0x4ad888], 1
push ebx
adc dword [0x4ad88c], 0
call fcn.0042ac80
cmp eax, 3
jne 0x425f6f
mov ecx, dword [ebx + 0x14]
cmp byte [ecx], 0x75
jne 0x425f0f
mov esi, dword [ebp + 0xc]
lea esp, [esp]
mov ecx, dword [ecx + 0x14]
lea eax, [esp + 0x28]
push eax
push esi
push 2
call fcn.00425cc0
mov ecx, dword [ebx + 0x14]
mov edi, eax
mov eax, dword [esp + 0x28]
cmp eax, ecx
je 0x425ef0
jmp 0x425f25
mov eax, dword [ebp + 0xc]
lea edx, [esp + 0x28]
push edx
push eax
push 3
call fcn.00425cc0
mov edi, eax
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x42710c
cmp dword [ebp + 8], 3
je 0x42a329
cmp edi, 1
jne 0x42a329
test eax, eax
je 0x425f55
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [ebx + 0x1c]
jne 0x42a372
jmp 0x427108
mov ebx, dword [ebx + 0x18]
cmp byte [ebx], 0x21
mov dword [esp + 0x10], ebx
jne 0x42710c
mov edx, ebx
mov eax, dword [edx + 0x18]
jmp 0x427108
mov ebx, dword [ebx + 0x18]
cmp byte [ebx], 0x21
mov dword [esp + 0x10], ebx
jne 0x425fe7
mov ecx, dword [ebx + 0x14]
cmp byte [ecx], 0x75
jne 0x425fa5
mov esi, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push esi
push 2
call fcn.00425cc0
mov ecx, dword [ebx + 0x14]
mov edi, eax
mov eax, dword [esp + 0x28]
cmp eax, ecx
je 0x425f86
jmp 0x425fbb
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x28]
push eax
push edx
push 3
call fcn.00425cc0
mov edi, eax
mov eax, dword [esp + 0x28]
cmp dword [ebp + 8], 3
je 0x42a329
cmp edi, 1
jne 0x42a329
test eax, eax
je 0x426d99
mov ecx, dword [eax + 0x1c]
cmp ecx, dword [ebx + 0x1c]
jne 0x42a372
jmp 0x427108
cmp dword [ebp + 8], 3
jne 0x42710c
mov eax, 1
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
movzx eax, cl
add eax, 0xffffffa0
cmp eax, 0x80
ja case.0x426025.98
movzx eax, byte [eax + 0x42a78c]
jmp dword [eax*4 + 0x42a748]
mov edi, 1
add dword [0x4ad888], edi
adc dword [0x4ad88c], 0
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x4260b9
xor ecx, ecx
cmp dword [ebx + 0xc], edi
mov edx, eax
sete cl
mov dword [esp + 0x60], edx
mov ebx, ecx
test ebx, ebx
je 0x42606f
mov eax, dword [esi + 0x94]
mov dword [esi + 0x98], eax
mov dword [esi + 0x94], 0
mov ecx, edx
call fcn.00401280
mov edi, eax
test ebx, ebx
je 0x426092
mov ecx, dword [esi + 0x98]
mov dword [esi + 0x94], ecx
mov dword [esi + 0x98], 0
test edi, edi
je 0x42a32f
cmp edi, 8
je 0x42a32f
cmp dword [ebp + 8], 3
je 0x42a348
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 0x14]
jmp 0x427108
mov edx, dword [esp + 0x10]
push edx
mov bl, 1
call fcn.00442790
mov edx, eax
mov dword [esp + 0x60], edx
test edx, edx
je 0x42a682
cmp dword [esi + 0x94], 0
je 0x4260ef
mov eax, dword [edx + 8]
call fcn.00442840
test eax, eax
je 0x4260ef
mov ebx, edi
jmp 0x426059
xor ebx, ebx
jmp 0x42606f
add dword [0x4ad888], 1
adc dword [0x4ad88c], 0
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x60], eax
test eax, eax
jne 0x426127
mov ecx, dword [esp + 0x10]
push ecx
mov bl, 1
call fcn.00442790
mov dword [esp + 0x60], eax
test eax, eax
je 0x42a682
cmp dword [ebp + 8], 3
mov dword [esi + 0x9c], eax
je 0x42a36f
mov edx, dword [esp + 0x10]
mov ecx, dword [eax + 8]
mov edx, dword [edx + 0x1c]
cmp edx, dword [ecx + 0x1c]
jne 0x42a36f
mov dword [esp + 0x10], ecx
jmp 0x42710c
add dword [0x4ad888], 1
mov eax, dword [esp + 0xa0]
adc dword [0x4ad88c], 0
mov ebx, dword [eax + 0xc]
test ebx, ebx
jne 0x42619e
mov eax, dword [0x4ac268]
mov edi, eax
cmp byte [eax], bl
je 0x42619c
mov ebx, dword [0x4ad2a0]
test ebx, ebx
je 0x42619c
mov eax, dword [ebx + 4]
push edi
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
je 0x42619e
mov ebx, dword [ebx + 0x14]
test ebx, ebx
jne 0x426184
xor ebx, ebx
mov edi, 1
mov dword [esp + 0x38], 0
test ebx, ebx
je 0x4262a3
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
je 0x4261d3
push 0x49c4dc
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x4261d3
mov al, 1
jmp 0x4261d5
xor al, al
lea ecx, [esp + 0x60]
push ecx
push eax
push ebx
xor eax, eax
call fcn.00479b30
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x60]
test eax, eax
je 0x4262a3
mov eax, dword [eax + 8]
mov edi, dword [eax + 0x1c]
test edi, edi
je 0x42623d
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 0x1c]
test edx, edx
je 0x426213
cmp edi, edx
je 0x42623d
mov edx, dword [edx + 0x1c]
test edx, edx
jne 0x426208
push 0x49a8ad
push 0
push 0x4a0220
call fcn.0042efe0
xor eax, eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esi + 0x94]
test edx, edx
je 0x4262d6
call fcn.00442840
test eax, eax
je 0x4262d6
mov ebx, 1
mov dword [esi + 0x98], edx
mov dword [esi + 0x94], 0
mov ecx, dword [esp + 0x60]
call fcn.00401280
mov edi, eax
test ebx, ebx
je 0x426292
mov edx, dword [esi + 0x98]
mov dword [esi + 0x94], edx
mov dword [esi + 0x98], 0
test edi, edi
je 0x42a32f
cmp edi, 8
je 0x42a32f
cmp dword [esp + 0x38], 0
mov edx, dword [esp + 0xa0]
sete al
movzx ecx, al
push ecx
push edx
call fcn.0042ee10
cmp dword [ebp + 8], 3
je 0x42a348
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x10], ecx
jmp 0x42710c
xor ebx, ebx
jmp 0x42626d
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x24], eax
dec eax
je 0x42632b
sub eax, 3
je 0x42630e
sub eax, 5
jne 0x4263a3
mov edx, dword [0x4ac26c]
push eax
push eax
push 1
push edx
call fcn.00414ed0
add esp, 0x10
mov dword [esp + 0x64], eax
jmp 0x4263a3
mov eax, dword [0x4ac268]
push 0
push 0
push 0
push eax
call fcn.00414ed0
add esp, 0x10
mov dword [esp + 0x64], eax
jmp 0x4263a3
movzx eax, byte [ebx + 1]
sub eax, 0
je 0x42639b
dec eax
je 0x426359
mov ecx, dword [0x4ac268]
push 0x49db5c
push ecx
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x426372
mov dword [esp + 0x24], 5
jmp 0x4263a3
mov eax, dword [0x4ac268]
push 0
push 1
push 1
push 1
call fcn.00473bb0
add esp, 0x10
test eax, eax
jne 0x42639b
mov edx, dword [0x4ac268]
push 0
push 0
push 0
push edx
call fcn.00414ed0
xor ecx, ecx
add esp, 0x10
test eax, eax
setne cl
mov dword [esp + 0x64], eax
add ecx, 3
mov dword [esp + 0x24], ecx
jmp 0x4263a3
mov dword [esp + 0x24], 2
mov ecx, dword [esp + 0x24]
lea eax, [ecx - 3]
cmp eax, 7
ja case.0x4263ba.5
movzx edx, byte [eax + 0x42a81c]
jmp dword [edx*4 + 0x42a810]
mov esi, dword [0x4ac26c]
call fcn.004156f0
mov dword [esp + 0x58], eax
test eax, eax
je 0x42a45e
mov eax, dword [0x4ac270]
cmp byte [eax], 0x31
jne 0x4263fa
cmp byte [eax + 1], 0
jne 0x4263fa
mov esi, dword [esp + 0x50]
mov ebx, dword [esp + 0x10]
mov byte [esp + 0x5c], 1
jmp case.0x4263ba.5
mov esi, dword [esp + 0x50]
mov ebx, dword [esp + 0x10]
mov byte [esp + 0x5c], 0
jmp case.0x4263ba.5
cmp ecx, 4
jne 0x42644b
mov esi, dword [0x4ac270]
call fcn.004156f0
mov dword [esp + 0x58], eax
mov eax, dword [0x4ac274]
cmp byte [eax], 0x31
jne 0x42643c
cmp byte [eax + 1], 0
jne 0x42643c
mov esi, dword [esp + 0x50]
mov ebx, dword [esp + 0x10]
mov byte [esp + 0x5c], 1
jmp 0x426469
mov esi, dword [esp + 0x50]
mov ebx, dword [esp + 0x10]
mov byte [esp + 0x5c], 0
jmp 0x426469
mov eax, dword [0x4ac270]
call fcn.00415740
mov dword [esp + 0x58], eax
shr eax, 2
and al, 1
mov byte [esp + 0x5c], al
je 0x426469
and dword [esp + 0x58], 0xfffffffb
cmp dword [esp + 0x58], 0
je 0x42a48c
mov byte [esp + 0x23], 0
mov dword [esp + 0x28], 0
mov ebx, dword [ebx + 0x18]
cmp byte [ebx], 0x6c
mov dword [esp + 0x1c], ebx
jne 0x426496
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x1c], eax
jmp 0x426498
xor ebx, ebx
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0xb0], ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0xb4], edx
mov edx, dword [esi + 0x18]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
cmp eax, 8
je 0x4264df
mov dword [esi + 8], 1
mov dword [esi + 0xc], 0
lea ecx, [eax - 2]
cmp ecx, 8
ja case.default.0x4264eb
jmp dword [ecx*4 + 0x42a824]
mov esi, dword [esp + 0x10]
cmp byte [esi + 1], 0
jbe 0x42650f
xor edi, edi
mov ecx, esi
call fcn.004221a0
mov byte [esp + 0x88], 0
jmp 0x42651b
xor eax, eax
xor edx, edx
mov byte [esp + 0x88], 1
mov ecx, dword [esp + 0x88]
push ecx
push edx
push eax
push ebx
mov ebx, dword [ebp + 0xc]
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x37]
push eax
push esi
call fcn.0042c200
mov edi, eax
jmp case.default.0x4264eb
mov ebx, dword [ebp + 0xc]
mov esi, dword [esp + 0x10]
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x27]
push edx
call fcn.0042c3c0
mov edi, eax
jmp case.default.0x4264eb
mov edx, dword [ebp + 0xc]
push ebx
lea eax, [esp + 0x2c]
push eax
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x2b]
push ecx
push edx
push eax
call fcn.0042c5b0
mov edi, eax
jmp case.default.0x4264eb
mov ecx, dword [0x4ac270]
push 0x49e6a4
push ecx
call fcn.00486ea1
add esp, 8
push ebx
test eax, eax
je 0x4265b5
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x2c]
push edx
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x2b]
push eax
push ecx
push edx
call fcn.0042d630
mov edi, eax
jmp case.default.0x4264eb
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x2c]
push eax
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x2b]
push ecx
push edx
push eax
call fcn.0042d8e0
mov edi, eax
jmp case.default.0x4264eb
lea esi, [esp + 0xec]
call fcn.00415da0
mov dword [esp + 0x57c], 0
mov edx, dword [0x4ac26c]
cmp byte [edx], 0
je 0x426641
mov ecx, dword [esp + 0x50]
mov eax, dword [ecx + 0xdc]
and eax, 0x7fffffff
push 0x30c
mov ecx, esi
call fcn.004717a0
test al, al
je 0x426641
mov edx, dword [0x4ac270]
push edx
mov edx, dword [ebp + 0xc]
lea eax, [esp + 0x2c]
push eax
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x2b]
push ecx
push edx
push eax
mov ecx, esi
mov edx, ebx
call fcn.0042dba0
mov edi, eax
call fcn.00415d10
jmp 0x426646
mov edi, 1
lea ecx, [esp + 0xec]
mov dword [esp + 0x57c], 0xffffffff
call fcn.00415df0
jmp case.default.0x4264eb
cmp eax, 3
mov eax, dword [0x4ac268]
je 0x426671
mov eax, dword [0x4ac26c]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x58]
push eax
push ecx
push edx
mov edx, dword [ebp + 0xc]
push ebx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x37]
push ecx
mov ecx, dword [esp + 0x28]
push edx
call fcn.0042ca20
mov edi, eax
jmp case.default.0x4264eb
cmp eax, 4
lea eax, [esp + 0x4f]
push eax
jne 0x4266c4
mov ecx, dword [0x4ac268]
push 0
push 0
push ecx
call fcn.00414ed0
mov edx, dword [0x4ac26c]
mov dword [esp + 0xb4], edx
jmp 0x4266da
mov edx, dword [0x4ac26c]
lea ecx, [esp + 0xa8]
push ecx
push 1
push edx
call fcn.00414ed0
mov esi, eax
add esp, 0x10
test esi, esi
je 0x426725
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x5c]
push esi
push ecx
push edx
push eax
mov eax, dword [ebp + 0xc]
push ebx
lea ecx, [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x3f]
push edx
push eax
call fcn.0042d1b0
cmp byte [esp + 0x4f], 0
mov edi, eax
je case.default.0x4264eb
push esi
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
jmp case.default.0x4264eb
mov edi, 1
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x14]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x18]
mov dword [eax + 0x14], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], edx
test edi, edi
je 0x42a32f
cmp edi, 7
je 0x42a32f
cmp edi, 8
je 0x42a32f
cmp byte [esp + 0x23], 0
jne 0x42710c
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4267ba
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 0x10]
cmp ecx, dword [edx + 0x1c]
je 0x427108
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
mov eax, edi
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 3
je case.0x426025.116
mov eax, dword [esp + 0x1c]
jmp 0x427108
mov eax, dword [esi + 0xe0]
mov dword [esp + 0x38], eax
cmp cl, 0x70
jne 0x426823
mov ebx, dword [0x4ac218]
mov eax, dword [esi + 0xe4]
mov dword [esp + 0x30], eax
mov dword [esi + 0xe4], 0
test ebx, ebx
je 0x426803
call fcn.00476560
mov edi, eax
jmp 0x426808
mov edi, 1
lea esi, [esp + 0x30]
call fcn.0042f800
test edi, edi
je 0x42a682
mov esi, dword [esp + 0x50]
mov ebx, dword [esp + 0x10]
jmp 0x42683d
or eax, 1
mov dword [esi + 0xe0], eax
mov ecx, dword [ebx + 0x18]
cmp byte [ecx], 0x71
je 0x42683d
or eax, 2
mov dword [esi + 0xe0], eax
mov dword [esp + 0x28], 0
mov ecx, dword [ebx + 0x14]
cmp byte [ecx], 0x75
jne 0x426872
lea ecx, [ecx]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x14]
lea edx, [esp + 0x28]
push edx
push eax
push 2
call fcn.00425cc0
mov ecx, dword [ebx + 0x14]
mov edx, dword [esp + 0x28]
mov edi, eax
cmp edx, ecx
je 0x426850
jmp 0x426888
mov eax, dword [ebp + 0xc]
lea edx, [esp + 0x28]
push edx
push eax
push 3
call fcn.00425cc0
mov edx, dword [esp + 0x28]
mov edi, eax
mov al, byte [esp + 0xd0]
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x10], ecx
cmp al, 0x6f
jne 0x4268ec
mov eax, dword [esp + 0x38]
mov dword [esi + 0xe0], eax
xor al, al
cmp byte [ecx], 0x70
jne 0x4268c1
cmp dword [esi + 0xe4], 0
mov al, 1
jne 0x42710c
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x10], ecx
cmp byte [ecx], 0x71
je 0x4268fd
test al, al
jne 0x4269ae
add esi, 0xe4
cmp dword [esi], 0
je 0x4269ae
call fcn.0042f800
mov edi, 1
jmp 0x4269aa
cmp al, 0x70
jne 0x4269ae
cmp byte [ecx], 0x71
jne 0x4269ae
cmp edi, 1
jne 0x42690e
test edx, edx
je 0x42710c
mov ecx, dword [esp + 0x10]
mov edx, dword [esi + 0xe4]
mov ebx, dword [0x4ad1ec]
mov dword [esp + 0x38], edx
mov edx, dword [0x4ad1f0]
xor eax, eax
mov dword [esp + 0x30], edx
lea edx, [esp + 0xd8]
push edx
push eax
push 3
mov dword [esi + 0xe4], eax
mov dword [0x4ad1ec], eax
mov dword [0x4ad1f0], eax
call fcn.00425cc0
mov dword [esp + 0x1c], eax
test ebx, ebx
je 0x426985
mov eax, dword [0x4ad1ec]
test eax, eax
je 0x426976
push eax
call fcn.00486eb8
add esp, 4
cmp dword [0x4ad1f0], 0x400000
jbe 0x426976
dec dword [0x4ad1f4]
mov eax, dword [esp + 0x30]
mov dword [0x4ad1ec], ebx
mov dword [0x4ad1f0], eax
mov ebx, dword [esp + 0x1c]
cmp ebx, 1
jne 0x42a4b8
cmp dword [esp + 0xd8], 0
jne 0x42a4b8
mov ecx, dword [esp + 0x38]
mov dword [esi + 0xe4], ecx
mov edx, dword [esp + 0x28]
cmp dword [ebp + 8], 3
je 0x42a512
cmp edi, 1
jne 0x42a512
test edx, edx
je 0x42710c
mov eax, dword [edx + 0x1c]
mov ecx, dword [esp + 0x10]
cmp eax, dword [ecx + 0x1c]
jne 0x42a507
mov dword [esp + 0x10], edx
jmp 0x42710c
mov edx, dword [ebx + 0x14]
mov dword [esp + 0x10], edx
jmp 0x42710c
mov ebx, dword [0x4ad1ec]
mov ecx, dword [0x4ad1f0]
mov esi, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], ebx
mov dword [esp + 0x14], ecx
mov dword [0x4ad1ec], eax
mov dword [0x4ad1f0], eax
mov dword [esp + 0x9c], eax
cmp dword [esi + 0xc], eax
jne 0x426a32
mov dword [esp + 0x98], 0x41
lea edi, [eax + 1]
jmp 0x426a88
lea edx, [esp + 0x24]
push edx
lea ecx, [esp + 0x94]
push ecx
push eax
push esi
lea ebx, [esp + 0x24]
call fcn.00459c10
mov ebx, dword [esp + 0x24]
mov edi, eax
cmp edi, 1
jne 0x426ca1
cmp dword [esp + 0x98], 0
jne 0x426a88
cmp dword [esp + 0x90], ebx
jne 0x426a88
mov edx, dword [esp + 0x14]
mov dword [esp + 0x9c], ebx
xor ebx, ebx
mov dword [esp + 0xd4], edx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x14], ebx
mov eax, dword [esi + 0x14]
mov eax, dword [eax + 0x14]
cmp byte [eax], 0x74
mov dword [esp + 0x18], eax
jne 0x426c4f
jmp 0x426aa0
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x38], eax
test eax, eax
jne 0x426abb
mov ecx, dword [ecx + 0x14]
mov dword [esp + 0x1c], ecx
jmp 0x426c33
xor esi, esi
cmp dword [esp + 0x38], esi
jle 0x426c33
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x6c]
push eax
push esi
push ecx
lea ebx, [esp + 0x24]
call fcn.00459c10
mov edi, eax
cmp edi, 1
jne 0x426c18
cmp dword [esp + 0x70], 0
jne 0x426b02
mov dword [esp + 0x70], 5
mov dword [esp + 0x6c], 0
cmp dword [esp + 0x98], 0x41
jne 0x426bdb
lea edx, [esp + 0x68]
push edx
call fcn.0044e670
add esp, 4
dec eax
je 0x426bbe
dec eax
je 0x426b69
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x68]
cmp ecx, 6
je 0x426bd0
cmp ecx, 4
jne 0x426b50
cmp byte [eax + 0x17], 0
jne 0x426b46
mov eax, dword [eax + 0xc]
test byte [eax + 0x15], 2
jne 0x426bd0
xor ecx, ecx
lea eax, [esp + 0x68]
call fcn.0044e900
xor ecx, ecx
cmp byte [eax], cl
setne cl
mov eax, ecx
jmp 0x426bef
mov eax, dword [esp + 0x70]
dec eax
cmp eax, 5
ja case.0x426b73.3
jmp dword [eax*4 + 0x42a848]
fild qword [esp + 0x68]
jmp 0x426bac
fld qword [esp + 0x68]
jmp 0x426bac
mov eax, dword [esp + 0x68]
push 1
call fcn.00414540
jmp 0x426bac
mov eax, dword [esp + 0x6c]
test eax, eax
je case.0x426b73.3
fild qword [eax]
jmp 0x426bac
mov edx, dword [esp + 0x68]
push edx
call fcn.00489000
add esp, 4
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp case.0x426b73.6
mov eax, 1
jmp 0x426bef
push 1
lea ecx, [esp + 0x6c]
call fcn.0044e7c0
add esp, 4
or eax, edx
je case.0x426b73.6
mov eax, 1
jmp 0x426bef
xor eax, eax
jmp 0x426bef
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x94]
call fcn.0044eba0
add esp, 4
test eax, eax
setne bl
cmp dword [esp + 0x70], 6
jne 0x426c07
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test bl, bl
jne 0x426c22
inc esi
cmp esi, dword [esp + 0x38]
jl 0x426ac7
jmp 0x426c33
mov dword [esp + 0x1c], 0
jmp 0x426c2d
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x1c], ecx
cmp esi, dword [esp + 0x38]
jl 0x426c47
mov edx, dword [esp + 0x18]
mov eax, dword [edx + 0x18]
cmp byte [eax], 0x74
mov dword [esp + 0x18], eax
je 0x426aa0
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x10]
cmp dword [esp + 0x98], 6
jne 0x426c68
mov eax, dword [esp + 0x90]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [esp + 0x9c], 0
je 0x426ca1
test ebx, ebx
je 0x426c8f
push ebx
call fcn.00486eb8
add esp, 4
cmp dword [esp + 0x14], 0x400000
jbe 0x426c8f
dec dword [0x4ad1f4]
mov eax, dword [esp + 0xd4]
mov ebx, dword [esp + 0x9c]
mov dword [esp + 0x14], eax
test ebx, ebx
je 0x426cdf
cmp dword [0x4ad1ec], 0
je 0x426ccf
mov ecx, dword [0x4ad1ec]
push ecx
call fcn.00486eb8
add esp, 4
cmp dword [0x4ad1f0], 0x400000
jbe 0x426ccf
dec dword [0x4ad1f4]
mov edx, dword [esp + 0x14]
mov dword [0x4ad1ec], ebx
mov dword [0x4ad1f0], edx
cmp dword [esp + 0x1c], 0
je 0x426d02
mov ecx, dword [ebp + 0xc]
lea eax, [esp + 0x28]
push eax
push ecx
mov ecx, dword [esp + 0x24]
push 2
call fcn.00425cc0
mov edi, eax
mov eax, dword [esp + 0x28]
jmp 0x426d08
xor eax, eax
mov dword [esp + 0x28], eax
cmp edi, 1
jne 0x42679b
cmp dword [ebp + 8], 3
je 0x42679b
test eax, eax
je 0x426d36
mov edx, dword [eax + 0x1c]
cmp edx, dword [esi + 0x1c]
je 0x427108
mov edx, dword [esp + 0x40]
mov dword [edx], eax
jmp case.0x426025.116
mov eax, dword [esi + 0x18]
jmp 0x427108
cmp dword [ebx + 0xc], 1
jne 0x426d50
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x10], ecx
jmp 0x42710c
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebx + 0x14]
lea edx, [esp + 0x28]
push edx
push eax
push 2
call fcn.00425cc0
mov edi, eax
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x42710c
cmp dword [ebp + 8], 3
je 0x42a329
cmp edi, 1
jne 0x42a329
test eax, eax
je 0x426d99
mov ecx, dword [ebx + 0x1c]
cmp ecx, dword [eax + 0x1c]
jne 0x42a372
jmp 0x427108
mov edx, dword [ebx + 0x18]
mov dword [esp + 0x10], edx
jmp 0x42710c
add dword [0x4ad888], 1
mov ebx, dword [esp + 0x10]
mov esi, dword [0x4ac218]
adc dword [0x4ad88c], 0
mov cl, byte [ebx]
mov edi, dword [0x4a8978]
movzx edx, cl
dec edx
mov dword [esp + 0x24], esi
mov dword [esp + 0x18], edi
cmp edx, 0xe1
ja case.0x426de4.8
movzx eax, byte [edx + 0x42aae4]
jmp dword [eax*4 + 0x42a860]
push ebx
call fcn.0043c510
jmp 0x4270f1
cmp byte [ebx + 1], 1
mov edx, dword [0x4ac26c]
jbe 0x426e66
mov eax, dword [ebx + 8]
cmp byte [eax + 0x11], 0
je 0x426e15
mov edi, 1
jmp 0x4270fb
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x426e28
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
jmp 0x4270eb
mov eax, dword [0x4ac21c]
test eax, eax
je 0x426e66
cmp byte [edx], 0
jne 0x426e66
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x426e43
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
movzx ecx, cl
dec ecx
je 0x426e5a
sub ecx, 2
jne 0x426e66
mov eax, esi
call fcn.00476670
jmp 0x4270f1
mov ecx, esi
call fcn.004763e0
jmp 0x4270f1
push 1
push 0
push 0xffffffffffffffff
push edx
push esi
call fcn.00476c10
jmp 0x4270f1
mov eax, dword [ebx + 8]
cmp dword [eax + 0x1c], 0
je 0x426e94
cmp byte [eax + 0x11], 0
jne 0x426e94
mov eax, 1
mov dword [esp + 0x14], eax
xor edi, edi
jmp 0x426ed4
mov edi, dword [0x4ac21c]
mov eax, dword [0x4ac26c]
mov dword [esp + 0x14], 0
test edi, edi
je 0x426ec2
cmp byte [eax], 0
jne 0x426ec2
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x426ebd
mov edx, dword [edi + 0xc]
mov cl, byte [edx + 0x17]
cmp cl, 1
je 0x426f23
xor edi, edi
push 1
push 1
push 0
push 1
call fcn.00473bb0
add esp, 0x10
push 1
mov ecx, esi
mov dword [esp + 0x20], eax
call fcn.00414410
mov dword [esp + 0x30], eax
mov eax, dword [0x4ac270]
mov al, byte [eax]
test al, al
je 0x42707f
call fcn.00409350
movsx eax, al
push eax
push 0x49e714
call fcn.00487e91
add esp, 8
test eax, eax
je 0x42707f
cmp dword [esp + 0x1c], 0
jne 0x426f32
mov edi, 1
jmp 0x4270fb
test edi, edi
je 0x426ec4
push 1
mov ecx, edi
call fcn.00414410
jmp 0x426ed4
cmp dword [esp + 0x14], 0
je 0x426f43
mov ecx, dword [ebx + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x426f65
test edi, edi
je 0x426f52
push 0
mov eax, edi
call fcn.00414540
jmp 0x426f65
mov esi, dword [0x4ac26c]
call fcn.00414310
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x24]
push 0
fstp qword [esp + 0x34]
push 1
mov ecx, esi
call fcn.00401210
cmp byte [eax], 0
je 0x426fad
lea eax, [esp + 0x80]
push eax
push 0
push 1
mov ecx, esi
call fcn.00401210
call fcn.00473790
add esp, 4
test eax, eax
jne 0x426fd1
push 1
push eax
push 0xffffffffffffffff
push 0x49a8ad
push esi
call fcn.00476c10
jmp 0x4270f1
lea ecx, [esp + 0xe0]
push ecx
call dword [sym.imp.KERNEL32.DLL_GetSystemTimeAsFileTime]
lea edx, [esp + 0x80]
push edx
lea eax, [esp + 0xe4]
push eax
call dword [sym.imp.KERNEL32.DLL_FileTimeToLocalFileTime]
mov ecx, dword [0x4ac270]
mov al, byte [ecx]
call fcn.00409350
movsx eax, al
add eax, 0xffffffbc
cmp eax, 0xf
ja case.0x426ff0.69
movzx edx, byte [eax + 0x42abdc]
jmp dword [edx*4 + 0x42abc8]
fld qword [esp + 0x30]
fmul qword [0x4a2e98]
jmp 0x42702b
fld qword [esp + 0x30]
fmul qword [0x4a2e90]
jmp 0x42702b
fld qword [esp + 0x30]
fmul qword [0x4a2e88]
jmp 0x42702b
fld qword [esp + 0x30]
fmul qword [0x4a2e80]
jmp 0x42702b
fld qword [esp + 0x30]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0x84]
call fcn.00495886
add esi, eax
adc edi, edx
mov dword [esp + 0x80], esi
push 0
lea eax, [esp + 0x84]
lea esi, [esp + 0x144]
mov dword [esp + 0x88], edi
call fcn.00473a20
add esp, 4
push 1
push 0
push 0xffffffffffffffff
push eax
mov eax, dword [esp + 0x34]
push eax
call fcn.00476c10
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov eax, 2
cmp dword [esp + 0x1c], eax
je 0x427121
cmp dword [esp + 0x30], eax
je 0x427121
cmp dword [esp + 0x14], 0
je 0x4270ac
mov ecx, dword [ebx + 8]
mov eax, dword [ecx + 0x1c]
mov edi, dword [eax]
mov edx, dword [eax + 4]
jmp 0x4270d0
test edi, edi
je 0x4270bb
push 0
mov eax, edi
call fcn.004144c0
jmp 0x4270ce
mov esi, dword [0x4ac26c]
call fcn.004142e0
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x24]
mov edi, eax
push 0
mov eax, esi
mov dword [esp + 0xc8], edx
call fcn.004144c0
add eax, edi
adc edx, dword [esp + 0xc4]
push edx
push eax
push esi
call fcn.004143b0
mov edi, eax
test edi, edi
je 0x42a32f
cmp dword [ebp + 8], 3
je 0x42a32f
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x10]
test ebx, ebx
je case.0x426025.116
mov esi, dword [esp + 0x50]
jmp 0x425d20
cmp dword [esp + 0x14], 0
je 0x427132
mov eax, dword [ebx + 8]
mov ecx, dword [eax + 0x1c]
fild qword [ecx]
jmp 0x427154
test edi, edi
je 0x427141
push 0
mov eax, edi
call fcn.00414540
jmp 0x427154
mov esi, dword [0x4ac26c]
call fcn.00414310
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x24]
push 0
fstp qword [esp + 0x34]
mov eax, esi
call fcn.00414540
fadd qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push esi
call fcn.004143e0
jmp 0x4270f1
mov edx, dword [0x4ac270]
mov al, byte [edx]
test al, al
je 0x427267
call fcn.00409350
movsx eax, al
push eax
push 0x49e714
call fcn.00487e91
add esp, 8
test eax, eax
je 0x427267
mov ecx, dword [0x4ac21c]
mov edi, dword [0x4ac26c]
test ecx, ecx
je 0x4271d9
cmp byte [edi], 0
jne 0x4271d9
mov al, byte [ecx + 0x17]
test al, al
jne 0x4271c6
mov eax, dword [ecx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x4271d9
test ecx, ecx
je 0x4271d9
push 0
push 1
call fcn.00401210
mov edi, eax
push 0
push 1
mov ecx, esi
call fcn.00401210
push eax
lea ebx, [esp + 0x5b]
mov eax, edi
call fcn.00473ad0
add esp, 4
cmp byte [esp + 0x57], 0
mov edi, eax
mov ebx, edx
je 0x42721a
push 1
push 0
push 0xffffffffffffffff
push 0x49a8ad
mov ecx, esi
push ecx
call fcn.00476c10
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov edx, dword [0x4ac270]
mov al, byte [edx]
call fcn.00409350
cmp al, 0x44
je 0x427242
cmp al, 0x48
je 0x427239
cmp al, 0x4d
jne 0x427254
push 0
push 0x3c
jmp 0x427249
push 0
push 0xe10
jmp 0x427249
push 0
push 0x15180
push ebx
push edi
call fcn.00495900
mov edi, eax
mov ebx, edx
push ebx
push edi
mov eax, esi
push eax
call fcn.004143b0
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov eax, dword [ebx + 8]
xor edx, edx
cmp dword [eax + 0x1c], edx
je 0x427285
cmp byte [eax + 0x11], dl
jne 0x427285
mov edi, 1
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edx
jmp 0x4272d7
mov edi, dword [0x4ac21c]
mov eax, dword [0x4ac26c]
mov dword [esp + 0x14], edx
cmp edi, edx
je 0x4272c1
cmp byte [eax], dl
jne 0x4272c1
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x4272a9
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x4272c1
mov dword [esp + 0x18], edi
cmp edi, edx
je 0x4272c5
push 1
mov ecx, edi
call fcn.00414410
jmp 0x4272d5
mov dword [esp + 0x18], edx
push 1
push 1
push 0
push 1
call fcn.00473bb0
add esp, 0x10
mov edi, eax
push 1
mov ecx, esi
call fcn.00414410
cmp edi, 2
je 0x427362
cmp eax, 2
je 0x427362
cmp dword [esp + 0x14], 0
je 0x42731e
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xcc], eax
push 0
mov eax, esi
call fcn.004144c0
sub eax, edi
sbb edx, dword [esp + 0xcc]
jmp 0x4270e9
mov eax, dword [esp + 0x18]
test eax, eax
je 0x42732f
push 0
call fcn.004144c0
jmp 0x427342
mov esi, dword [0x4ac26c]
call fcn.004142e0
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x24]
mov edi, eax
push 0
mov eax, esi
mov dword [esp + 0xd0], edx
call fcn.004144c0
sub eax, edi
sbb edx, dword [esp + 0xcc]
jmp 0x4270e9
cmp dword [esp + 0x14], 0
je 0x427373
mov ecx, dword [ebx + 8]
mov edx, dword [ecx + 0x1c]
fild qword [edx]
jmp 0x427397
mov eax, dword [esp + 0x18]
test eax, eax
je 0x427384
push 0
call fcn.00414540
jmp 0x427397
mov esi, dword [0x4ac26c]
call fcn.00414310
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x24]
push 0
fstp qword [esp + 0x34]
mov eax, esi
call fcn.00414540
fsub qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push esi
call fcn.004143e0
jmp 0x4270f1
mov eax, dword [ebx + 8]
xor edx, edx
cmp dword [eax + 0x1c], edx
je 0x4273d7
cmp byte [eax + 0x11], dl
jne 0x4273d7
mov edi, 1
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edx
jmp 0x427429
mov edi, dword [0x4ac21c]
mov eax, dword [0x4ac26c]
mov dword [esp + 0x14], edx
cmp edi, edx
je 0x427413
cmp byte [eax], dl
jne 0x427413
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x4273fb
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x427413
mov dword [esp + 0x18], edi
cmp edi, edx
je 0x427417
push 1
mov ecx, edi
call fcn.00414410
jmp 0x427427
mov dword [esp + 0x18], edx
push 1
push 1
push 0
push 1
call fcn.00473bb0
add esp, 0x10
mov edi, eax
push 1
mov ecx, esi
call fcn.00414410
cmp edi, 2
je 0x4274a2
cmp eax, 2
je 0x4274a2
cmp dword [esp + 0x14], 0
je 0x427457
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xbc], eax
jmp 0x427484
mov eax, dword [esp + 0x18]
test eax, eax
je 0x427468
push 0
call fcn.004144c0
jmp 0x42747b
mov esi, dword [0x4ac26c]
call fcn.004142e0
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x24]
mov dword [esp + 0xbc], edx
mov edi, eax
push 0
mov eax, esi
call fcn.004144c0
mov ecx, dword [esp + 0xbc]
push ecx
push edi
push edx
push eax
call fcn.0048e0c0
jmp 0x4270e9
cmp dword [esp + 0x14], 0
je 0x4274b3
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x4274d7
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4274c4
push 0
call fcn.00414540
jmp 0x4274d7
mov esi, dword [0x4ac26c]
call fcn.00414310
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x24]
push 0
fstp qword [esp + 0x34]
mov eax, esi
call fcn.00414540
fmul qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push esi
call fcn.004143e0
jmp 0x4270f1
mov eax, dword [ebx + 8]
xor edx, edx
cmp dword [eax + 0x1c], edx
je 0x427517
cmp byte [eax + 0x11], dl
jne 0x427517
mov edi, 1
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edx
jmp 0x427569
mov edi, dword [0x4ac21c]
mov eax, dword [0x4ac26c]
mov dword [esp + 0x14], edx
cmp edi, edx
je 0x427553
cmp byte [eax], dl
jne 0x427553
mov cl, byte [edi + 0x17]
test cl, cl
jne 0x42753b
mov ecx, dword [edi + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 1
jne 0x427553
mov dword [esp + 0x18], edi
cmp edi, edx
je 0x427557
push 1
mov ecx, edi
call fcn.00414410
jmp 0x427567
mov dword [esp + 0x18], edx
push 1
push 1
push 0
push 1
call fcn.00473bb0
add esp, 0x10
mov edi, eax
push 1
mov ecx, esi
call fcn.00414410
cmp edi, 2
je 0x427604
cmp eax, 2
je 0x427604
cmp dword [esp + 0x14], 0
je 0x42759f
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xac], eax
jmp 0x4275cf
cmp dword [esp + 0x18], 0
je 0x4275b3
mov eax, dword [esp + 0x18]
push 0
call fcn.004144c0
jmp 0x4275c6
mov esi, dword [0x4ac26c]
call fcn.004142e0
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x24]
mov dword [esp + 0xac], edx
mov edi, eax
mov ecx, edi
or ecx, dword [esp + 0xac]
jne 0x4275e6
mov ecx, esi
call fcn.00414350
jmp 0x4270f1
push 0
mov eax, esi
call fcn.004144c0
mov ecx, dword [esp + 0xac]
push ecx
push edi
push edx
push eax
call fcn.00495900
jmp 0x4270e9
cmp dword [esp + 0x14], 0
je 0x427615
mov edx, dword [ebx + 8]
mov eax, dword [edx + 0x1c]
fild qword [eax]
jmp 0x427639
mov eax, dword [esp + 0x18]
test eax, eax
je 0x427626
push 0
call fcn.00414540
jmp 0x427639
mov esi, dword [0x4ac26c]
call fcn.00414310
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x24]
fst qword [esp + 0x30]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x427654
mov ecx, esi
call fcn.00414350
jmp 0x4270f1
push 0
mov eax, esi
call fcn.00414540
fdiv qword [esp + 0x30]
sub esp, 8
fstp qword [esp]
push esi
call fcn.004143e0
jmp 0x4270f1
mov edi, 2
mov ecx, ebx
call fcn.004221a0
mov dword [esp + 0x14], eax
test eax, eax
jns 0x427690
mov dword [esp + 0x14], 0
jmp 0x4276a6
mov edi, 1
mov ecx, ebx
call fcn.00422120
cmp dword [esp + 0x14], eax
jle 0x4276a6
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x14]
mov edx, dword [0x4ac26c]
push 1
push 0
push ecx
push edx
push esi
call fcn.00476c10
jmp 0x4270f1
mov ecx, dword [esp + 0x10]
mov edi, 2
call fcn.004221a0
mov ebx, eax
test ebx, ebx
jns 0x4276d7
xor ebx, ebx
mov ecx, dword [esp + 0x10]
mov edi, 1
call fcn.00422120
cmp ebx, eax
jbe 0x4276eb
mov ebx, eax
push 1
push 0
sub eax, ebx
add eax, dword [0x4ac26c]
push ebx
push eax
push esi
call fcn.00476c10
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
cmp byte [ebx + 1], 4
jb 0x42773a
mov eax, dword [ebx + 8]
mov ecx, dword [eax + 0x34]
cmp byte [ecx], 0
je 0x42773a
mov edi, 3
mov ecx, ebx
call fcn.004221a0
mov dword [esp + 0x14], eax
cmp eax, 1
jge 0x427742
mov ecx, esi
call fcn.00414350
jmp 0x4270f1
mov dword [esp + 0x14], CreateStatusWindowA
mov ecx, dword [esp + 0x10]
mov edi, 2
call fcn.004221a0
mov edx, dword [0x4ac278]
mov ebx, eax
mov al, byte [edx]
call fcn.00409350
cmp al, 0x4c
jne 0x427792
cmp ebx, 1
jge 0x427778
mov ecx, esi
call fcn.00414350
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov eax, dword [esp + 0x14]
mov ecx, 1
sub ecx, eax
add ebx, ecx
cmp ebx, 1
jge 0x42779c
lea edx, [eax + ebx - 1]
mov dword [esp + 0x14], edx
cmp ebx, 1
jge 0x42779c
mov ebx, 1
mov ecx, dword [esp + 0x10]
mov edi, 1
call fcn.00422120
cmp eax, ebx
jae 0x4277be
mov ecx, esi
call fcn.00414350
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov ecx, edi
sub ecx, ebx
add eax, ecx
cmp dword [esp + 0x14], eax
jbe 0x4277ce
mov dword [esp + 0x14], eax
mov edx, dword [0x4ac26c]
mov eax, dword [esp + 0x14]
push 1
push 0
push eax
lea ebx, [ebx + edx - 1]
push ebx
push esi
call fcn.00476c10
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov ecx, dword [esp + 0x10]
mov edi, 2
call fcn.004221a0
mov ebx, eax
test ebx, ebx
jns 0x427807
xor ebx, ebx
mov ecx, dword [esp + 0x10]
mov edi, 1
call fcn.00422120
cmp ebx, eax
jbe 0x42781b
mov ebx, eax
mov ecx, dword [0x4ac26c]
push 1
push 0
sub eax, ebx
push eax
add ecx, ebx
push ecx
push esi
call fcn.00476c10
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov edi, 2
mov ecx, ebx
call fcn.004221a0
mov dword [esp + 0x14], eax
test eax, eax
jns 0x427856
mov dword [esp + 0x14], 0
mov edi, 1
mov ecx, ebx
call fcn.00422120
cmp dword [esp + 0x14], eax
jbe 0x42786c
mov dword [esp + 0x14], eax
sub eax, dword [esp + 0x14]
mov edx, dword [0x4ac26c]
push 1
push 0
push eax
push edx
push esi
call fcn.00476c10
jmp 0x4270f1
push 1
push 1
mov ecx, esi
call fcn.00401210
mov edi, eax
cmp edi, dword [0x4ac26c]
jne 0x4278ad
mov al, byte [esi + 0x17]
test al, al
jne 0x4278a9
mov eax, dword [esi + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
je 0x4278ec
push 1
push 0
mov edi, 1
mov ecx, ebx
call fcn.00422120
push eax
push 0
push esi
call fcn.00476c10
cmp eax, edi
jne case.0x426de4.8
push 0
push edi
mov ecx, esi
call fcn.00401210
mov ecx, dword [0x4ac26c]
mov edi, eax
mov edx, edi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4278e2
mov ecx, dword [0x4ac270]
mov al, byte [ecx]
test al, al
je 0x427922
call fcn.00409350
cmp al, 0x54
jne 0x427922
mov edx, dword [0x4ac270]
cmp byte [edx + 1], 0
jne 0x427922
mov eax, edi
call fcn.00414030
push 0
mov eax, esi
call fcn.00414830
jmp 0x4270f1
cmp byte [ebx], 0x31
push edi
jne 0x42793c
call dword [sym.imp.USER32.DLL_CharLowerA]
push 0
mov eax, esi
call fcn.00414830
jmp 0x4270f1
call dword [sym.imp.USER32.DLL_CharUpperA]
push 0
mov eax, esi
call fcn.00414830
jmp 0x4270f1
mov eax, dword [0x4ac21c]
test eax, eax
je 0x42797b
cmp byte [eax + 0x17], 0
jne 0x427967
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x15]
jmp 0x42796a
mov cl, byte [eax + 0x15]
test cl, 1
je 0x42797b
call fcn.004147a0
push 0
jmp 0x4270ea
mov edi, 1
mov ecx, ebx
call fcn.00422120
push 0
jmp 0x4270ea
mov esi, dword [0x4ac274]
mov al, byte [esi]
mov dword [esp + 0x30], esi
mov dword [esp + 0x14], 0xffffffff
test al, al
je 0x427a25
call fcn.00409350
movsx eax, al
push eax
push 0x49e71c
call fcn.00487e91
add esp, 8
test eax, eax
je 0x427a25
inc esi
cmp byte [esi], 0
je 0x427a25
call fcn.0040e430
mov dword [esp + 0x1c], eax
test eax, eax
jle 0x427b19
mov eax, dword [0x4ac270]
cmp byte [eax], 0
jne 0x427a2f
mov dword [esp + 0x14], 0
mov eax, 0x49a8c8
mov edx, dword [0x4acad0]
push 1
push 0
push 0xffffffffffffffff
push eax
push edx
call fcn.00476c10
mov eax, dword [esp + 0x14]
cdq
push 0x18
push edx
push eax
mov eax, dword [esp + 0x30]
call fcn.004010d0
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov dword [esp + 0x1c], 1
jmp 0x4279db
mov edx, dword [0x4ac26c]
mov ecx, dword [esp + 0x10]
mov edi, 4
mov dword [esp + 0x38], edx
mov esi, eax
call fcn.004221a0
mov ebx, eax
test ebx, ebx
jns 0x427a51
xor ebx, ebx
mov ecx, dword [esp + 0x10]
mov edi, 1
call fcn.00422120
mov edi, eax
cmp ebx, edi
jge 0x427b19
mov eax, dword [esp + 0x30]
mov al, byte [eax]
cmp al, 0x31
je 0x427ae4
call fcn.00409350
cmp al, 0x52
je 0x427ae4
mov ecx, dword [esp + 0x10]
mov edi, 2
call fcn.00422120
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x30], eax
mov edi, 1
lea eax, [ecx + ebx]
lea ebx, [ebx]
mov edx, dword [0x4a8978]
mov cl, byte [edx + 0xd2]
push esi
test cl, cl
jne 0x427abb
call fcn.004740a0
add esp, 4
jmp 0x427ad3
cmp cl, 2
jne 0x427aca
call fcn.00474320
add esp, 4
jmp 0x427ad3
push eax
call fcn.00487fd2
add esp, 8
test eax, eax
je 0x427b19
cmp edi, dword [esp + 0x1c]
je 0x427b07
inc edi
add eax, dword [esp + 0x30]
jmp 0x427aa0
mov ecx, dword [esp + 0x18]
movzx edx, byte [ecx + 0xd2]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
push eax
push edx
push esi
mov eax, edi
sub eax, ebx
push ecx
call fcn.00473ea0
add esp, 0x10
test eax, eax
je 0x427b19
sub eax, dword [esp + 0x38]
mov dword [esp + 0x14], eax
jns 0x4279ed
mov eax, 0x49bec0
jmp 0x4279f2
push ebx
call fcn.0043c900
jmp 0x4270f1
mov eax, dword [0x4ac274]
mov ecx, dword [0x4ac270]
mov edx, dword [0x4ac26c]
call fcn.00432d20
jmp 0x4270f1
mov eax, dword [0x4ac274]
mov ecx, dword [0x4ac270]
push eax
mov eax, dword [0x4ac268]
push ecx
mov ecx, dword [0x4ac26c]
push ebx
call fcn.0043cb10
jmp 0x4270f1
mov edx, dword [0x4ac268]
push edx
mov eax, ebx
call fcn.0043d2b0
jmp 0x4270f1
mov eax, dword [0x4ac268]
mov ecx, dword [0x4ac26c]
push eax
push ebx
call fcn.0043d880
jmp 0x4270f1
push 0
push ecx
mov edi, 7
mov ecx, ebx
call fcn.004221a0
add esp, 4
push eax
mov edi, 6
mov ecx, ebx
call fcn.004221a0
push eax
push ecx
mov edi, 5
mov ecx, ebx
call fcn.004221a0
add esp, 4
push eax
mov edi, 4
mov ecx, ebx
call fcn.004221a0
push eax
push ecx
mov edi, 3
mov ecx, ebx
call fcn.004221a0
add esp, 4
push eax
mov edi, 2
mov ecx, ebx
call fcn.004221a0
mov ecx, dword [0x4ac288]
push eax
push ebx
call fcn.00438930
jmp 0x4270f1
mov ecx, dword [0x4ac280]
push ecx
push ecx
mov edi, 5
mov ecx, ebx
call fcn.004221a0
add esp, 4
push eax
mov edi, 4
mov ecx, ebx
call fcn.004221a0
push eax
push ecx
mov edi, 3
mov ecx, ebx
call fcn.004221a0
add esp, 4
push eax
mov edi, 2
mov ecx, ebx
call fcn.004221a0
push eax
push ebx
call fcn.00439140
jmp 0x4270f1
mov edx, dword [0x4ac274]
push edx
push ecx
mov edi, 2
mov ecx, ebx
call fcn.004221a0
mov edi, 1
mov ecx, ebx
mov esi, eax
call fcn.004221a0
add esp, 4
mov ecx, eax
push ebx
mov eax, esi
call fcn.004505a0
jmp 0x4270f1
mov eax, dword [edi + 0xb4]
xor edx, edx
cmp cl, 0x42
sete dl
push 0
push eax
push edx
mov eax, dword [0x4ac268]
push eax
call fcn.0040e9c0
add esp, 0x10
mov edi, 1
jmp 0x4270fb
mov edx, dword [0x4ac268]
xor ecx, ecx
cmp dword [edi + 0xb4], 3
push 0
sete cl
lea ecx, [ecx + ecx + 1]
push ecx
push 0
push edx
call fcn.0040e9c0
add esp, 0x10
mov edi, 1
jmp 0x4270fb
push 0
push 2
push 0
jmp 0x427c97
mov ecx, dword [0x4ac268]
push 0
push 0
push 0
push ecx
call fcn.0040e9c0
add esp, 0x10
mov edi, 1
jmp 0x4270fb
mov edx, dword [0x4ac268]
push edx
call fcn.00410b80
add esp, 4
jmp 0x4270f1
mov eax, dword [0x4ac280]
mov edx, dword [0x4ac27c]
push 0x49a8ad
push eax
mov eax, dword [0x4ac278]
push edx
mov edx, dword [0x4ac274]
push eax
mov eax, dword [0x4ac270]
push edx
mov edx, dword [0x4ac26c]
push eax
push edx
mov edx, dword [0x4ac268]
mov eax, 0x49a8ad
push ecx
call fcn.00410e10
add esp, 0x20
jmp 0x4270f1
mov eax, dword [0x4ac27c]
mov edx, dword [0x4ac280]
push eax
mov eax, dword [0x4ac278]
push edx
mov edx, dword [0x4ac270]
push eax
mov eax, dword [0x4ac26c]
push 0x49a8ad
push 0x49a8ad
push edx
mov edx, dword [0x4ac268]
push eax
mov eax, dword [0x4ac274]
push ecx
call fcn.00410e10
add esp, 0x20
jmp 0x4270f1
mov edx, dword [0x4ac274]
mov eax, dword [0x4ac270]
push 0x49a8ad
push edx
mov edx, dword [0x4ac26c]
push eax
mov eax, dword [0x4ac268]
push 0x49a8ad
push 0x49a8ad
push edx
push eax
mov eax, 0x49a8ad
mov edx, eax
push ecx
call fcn.00410e10
add esp, 0x20
jmp 0x4270f1
mov edi, 4
mov ecx, ebx
call fcn.004221a0
push eax
mov ecx, ebx
call fcn.0043ba00
jmp 0x4270f1
mov eax, dword [0x4ac26c]
mov ebx, dword [0x4ac270]
mov esi, dword [0x4ac268]
cmp cl, 0x78
push 0
sete cl
movzx edx, cl
push 0
push edx
push eax
mov eax, dword [0x4ac274]
push edi
call fcn.00477980
add esp, 0x14
test eax, eax
je 0x427e42
mov ecx, dword [0x4a8978]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x427e42
push 1
push eax
call fcn.004013c0
add esp, 8
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov edx, dword [0x4ac268]
push 9
push 0x49e720
push edx
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x427e84
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
jne 0x427e84
mov ecx, dword [0x4ac274]
cmp byte [ecx], 0
mov byte [esp + 0x47], 1
je 0x427e89
mov byte [esp + 0x47], 0
mov al, byte [ebx]
xor edx, edx
cmp byte [esp + 0x47], dl
setne dl
dec edx
and edx, 0x14
mov dword [esp + 0x1c], edx
cmp al, 0x84
je 0x427ee5
cmp al, 0x85
je 0x427ee5
mov eax, dword [0x4ac270]
cmp byte [eax], 0
je 0x427f26
mov al, byte [ebx]
cmp al, 0x84
je 0x427f92
cmp al, 0x85
je 0x427f94
mov edx, dword [0x4ac270]
mov ecx, dword [0x4ac26c]
push edx
mov edx, dword [0x4ac268]
push ecx
mov ecx, dword [0x4ac274]
push eax
call fcn.00434610
jmp 0x4270f1
mov ecx, dword [0x4ac270]
cmp byte [ecx], 0
je 0x427f1b
mov edi, 2
mov ecx, ebx
call fcn.00422250
fmul qword [0x4a2df8]
call fcn.00495850
mov edi, dword [esp + 0x18]
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x427f1b
mov dword [esp + 0x1c], 0x1f4
mov edx, dword [0x4ac278]
cmp byte [edx], 0
jne 0x427eae
cmp byte [esp + 0x47], 0
je 0x427eae
mov ecx, dword [0x4ac268]
add ecx, 9
mov al, byte [ecx]
cmp al, 0x20
je 0x427f40
cmp al, 9
jne 0x427f43
inc ecx
jmp 0x427f36
cmp byte [ecx], 0
mov dword [esp + 0x38], ecx
je 0x427eae
mov esi, dword [0x4ad2a0]
test esi, esi
je 0x427eae
mov edi, edi
mov ecx, dword [esp + 0x38]
mov eax, dword [esi + 4]
push ecx
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
je 0x427f81
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x427f60
jmp 0x427eae
mov edx, dword [esp + 0x1c]
mov cl, byte [ebx]
push esi
call fcn.00479960
jmp 0x4270f1
cmp al, 0x85
mov ecx, dword [0x4ac278]
mov ebx, dword [0x4ac268]
sete dl
movzx eax, dl
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [0x4ac26c]
push ecx
push edx
push eax
mov eax, dword [0x4ac274]
push edi
call fcn.00477c80
add esp, 0x14
test eax, eax
je 0x427e42
mov ecx, dword [0x4a8978]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle 0x427e42
push 1
push eax
call fcn.004013c0
mov ebx, dword [esp + 0x18]
add esp, 8
mov edi, 1
jmp 0x4270fb
mov ebx, dword [0x4ac26c]
call fcn.004382a0
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov edx, dword [0x4ac26c]
mov eax, dword [0x4ac268]
push edx
push eax
call dword [sym.imp.KERNEL32.DLL_SetEnvironmentVariableA]
test eax, eax
sete cl
movzx edx, cl
push edx
push ebx
call fcn.0042ee10
jmp 0x4270f1
lea eax, [esp + 0xe8]
push eax
push 0x3a98
push 1
push 0x49e72c
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.DLL_SendMessageTimeoutA]
test eax, eax
sete cl
movzx edx, cl
push edx
push ebx
call fcn.0042ee10
jmp 0x4270f1
mov eax, dword [0x4ac26c]
push eax
mov eax, dword [0x4ac268]
push ebx
call fcn.00451c70
jmp 0x4270f1
mov ecx, dword [0x4ac268]
push 0
push 0xffffffffffffffff
push ecx
mov eax, 0x4ad8a0
call fcn.00471190
mov edx, dword [0x4ac26c]
add esp, 0xc
push 0
push 0xffffffffffffffff
push edx
mov eax, 0x4ad8ac
call fcn.00471190
mov eax, dword [0x4ac270]
add esp, 0xc
push 0
push 0xffffffffffffffff
push eax
mov eax, 0x4ad8b8
call fcn.00471190
add esp, 0xc
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac270]
push 0x49bea4
call fcn.004740a0
add esp, 4
test eax, eax
setne al
mov cl, 3
cmp cl, byte [ebx + 1]
mov byte [esp + 0x8c], al
mov ecx, dword [esp + 0x8c]
sbb edx, edx
and edx, dword [0x4ac224]
test al, al
push edx
mov edx, dword [0x4ac270]
push 1
push ecx
push 0
push edx
mov edx, dword [0x4ac26c]
sete al
movzx ecx, al
push ecx
push edx
mov edx, dword [0x4ac268]
push 0
push 0x4ad268
call fcn.0042ffb0
cmp byte [esp + 0x8c], 0
je 0x4270f1
test eax, eax
mov eax, 0x49a8c8
jne 0x42814a
mov eax, 0x49e738
push 1
push 0
push 0xffffffffffffffff
push eax
mov eax, dword [0x4acad0]
push eax
call fcn.00476c10
jmp 0x4270f1
push ebx
call fcn.004346f0
jmp 0x4270f1
cmp byte [ebx + 1], 2
jbe 0x4281af
mov ecx, dword [0x4ac280]
mov edx, dword [0x4ac27c]
mov eax, dword [0x4ac278]
push ecx
mov ecx, dword [0x4ac274]
push edx
mov edx, dword [0x4ac270]
push eax
mov eax, dword [0x4ac26c]
push ecx
mov ecx, dword [0x4ac284]
push edx
mov edx, dword [0x4ac268]
call fcn.00434de0
jmp 0x4270f1
mov eax, dword [0x4ac26c]
mov ecx, dword [0x4ac268]
push 0x49a8ad
push 0x49a8ad
push 0x49a8ad
push eax
push ecx
mov ecx, 0x49a8ad
mov eax, ecx
mov edx, ecx
call fcn.00434de0
jmp 0x4270f1
mov edx, dword [0x4ac290]
mov eax, dword [0x4ac28c]
mov ecx, dword [0x4ac288]
push edx
mov edx, dword [0x4ac284]
push eax
mov eax, dword [0x4ac280]
push ecx
mov ecx, dword [0x4ac274]
push edx
mov edx, dword [0x4ac270]
push eax
mov eax, dword [0x4ac26c]
push ecx
mov ecx, dword [0x4ac268]
push edx
mov edx, dword [0x4ac27c]
push eax
push ecx
mov ecx, dword [0x4ac278]
push ebx
call fcn.004509f0
jmp 0x4270f1
mov eax, dword [0x4ac278]
xor edx, edx
cmp cl, 0x47
mov ecx, dword [0x4ac274]
sete dl
push edx
mov edx, dword [0x4ac26c]
push eax
mov eax, dword [0x4ac268]
push ecx
mov ecx, dword [0x4ac27c]
push edx
mov edx, dword [0x4ac270]
push eax
push ebx
call fcn.00434f00
jmp 0x4270f1
mov esi, dword [0x4ac274]
push 1
xor bl, bl
call fcn.0040e460
add esp, 4
mov byte [esp + 0xdc], al
test al, al
jne 0x4282a8
mov ecx, dword [0x4ac274]
push ecx
mov ecx, dword [esp + 0x14]
push 0
push 0x49db70
call fcn.0042efe0
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov edx, dword [0x4ac278]
cmp byte [edx], 0
je 0x4282c3
mov ecx, dword [esp + 0x10]
mov edi, 4
call fcn.004221a0
jmp 0x4282c8
mov eax, 1
mov ecx, dword [0x4ac280]
mov edx, dword [0x4ac270]
push ecx
mov ecx, dword [0x4ac268]
push edx
mov edx, dword [0x4ac27c]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
mov edx, dword [0x4ac26c]
push eax
mov eax, dword [esp + 0xf0]
push eax
push ecx
mov ecx, dword [0x4ac284]
call fcn.00434fc0
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov edx, dword [0x4ac284]
mov eax, dword [0x4ac280]
mov ecx, dword [0x4ac278]
push edx
mov edx, dword [0x4ac274]
push eax
mov eax, dword [0x4ac270]
push ecx
mov ecx, dword [0x4ac26c]
push edx
mov edx, dword [0x4ac268]
push eax
push ecx
mov ecx, dword [0x4ac288]
push edx
mov edx, dword [0x4ac27c]
push ebx
call fcn.00435600
jmp 0x4270f1
mov eax, dword [0x4ac288]
mov ecx, dword [0x4ac284]
mov edx, dword [0x4ac280]
push eax
mov eax, dword [0x4ac27c]
push ecx
mov ecx, dword [0x4ac278]
push edx
push eax
push ecx
mov ecx, ebx
call fcn.00435830
jmp 0x4270f1
mov edx, dword [0x4ac278]
mov eax, dword [0x4ac274]
mov ecx, dword [0x4ac270]
push edx
mov edx, dword [0x4ac26c]
push eax
push ecx
push edx
push ebx
call fcn.00435980
jmp 0x4270f1
mov eax, dword [0x4ac274]
mov ecx, dword [0x4ac270]
mov edx, dword [0x4ac268]
push eax
push ecx
mov ecx, dword [0x4ac278]
push edx
mov edx, dword [0x4ac26c]
push ebx
call fcn.00435b50
jmp 0x4270f1
mov eax, dword [0x4ac278]
mov ecx, dword [0x4ac274]
mov edx, dword [0x4ac26c]
mov esi, dword [0x4ac268]
push eax
push ecx
mov ecx, dword [0x4ac27c]
push edx
mov edx, dword [0x4ac270]
push ebx
call fcn.00435c60
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov eax, dword [0x4ac278]
mov ecx, dword [0x4ac26c]
mov edx, dword [0x4ac270]
push eax
mov eax, dword [0x4ac274]
push ecx
mov ecx, dword [0x4ac27c]
push ebx
call fcn.00435d20
jmp 0x4270f1
mov edx, dword [0x4ac280]
mov eax, dword [0x4ac27c]
mov ecx, dword [0x4ac278]
push edx
mov edx, dword [0x4ac274]
push eax
mov eax, dword [0x4ac270]
push ecx
mov ecx, dword [0x4ac26c]
push edx
mov edx, dword [0x4ac268]
push eax
push ebx
call fcn.00450d10
jmp 0x4270f1
mov ecx, dword [0x4ac284]
mov edx, dword [0x4ac280]
mov eax, dword [0x4ac27c]
push ecx
mov ecx, dword [0x4ac278]
push edx
mov edx, dword [0x4ac274]
push eax
mov eax, dword [0x4ac270]
push ecx
mov ecx, dword [0x4ac26c]
push edx
push eax
push ebx
call fcn.004514b0
jmp 0x4270f1
mov ecx, dword [0x4ac278]
mov eax, dword [0x4ac274]
mov edx, dword [0x4ac270]
mov edi, dword [0x4ac26c]
push ecx
mov ecx, dword [0x4ac27c]
call fcn.004364c0
jmp 0x4270f1
mov edx, dword [0x4ac280]
mov eax, dword [0x4ac27c]
mov ecx, dword [0x4ac278]
push edx
mov edx, dword [0x4ac270]
push eax
mov eax, dword [0x4ac26c]
push ecx
mov ecx, dword [0x4ac268]
push edx
mov edx, dword [0x4ac274]
push eax
push ecx
mov ecx, dword [0x4ac284]
call fcn.00436530
jmp 0x4270f1
cmp cl, 0x92
sete dl
movzx eax, dl
push eax
mov eax, ebx
call fcn.00436660
jmp 0x4270f1
mov ecx, dword [0x4ac26c]
mov edx, dword [0x4ac268]
push ecx
mov ecx, dword [0x4ac270]
push ebx
call fcn.00436970
jmp 0x4270f1
mov edx, dword [0x4ac27c]
mov eax, dword [0x4ac278]
mov ecx, dword [0x4ac274]
push edx
mov edx, dword [0x4ac270]
push eax
push ecx
mov ecx, dword [0x4ac26c]
push edx
mov edx, dword [0x4ac268]
push ebx
call fcn.00436fc0
jmp 0x4270f1
cmp byte [ebx + 1], 1
jbe 0x428599
mov eax, dword [0x4ac274]
mov ecx, dword [0x4ac270]
mov edx, dword [0x4ac268]
push eax
mov eax, dword [0x4ac26c]
push ecx
mov ecx, dword [0x4ac278]
call fcn.004373a0
jmp 0x4270f1
mov esi, dword [0x4ac268]
mov ecx, 0x49a8ad
push 0x49a8ad
mov eax, ecx
mov edx, ecx
call fcn.00442660
test eax, eax
je 0x4285be
push esi
push eax
call dword [sym.imp.USER32.DLL_SetWindowTextA]
mov eax, 1
jmp 0x4270f1
mov edx, dword [0x4ac274]
mov ecx, dword [0x4ac278]
mov eax, dword [0x4ac270]
push edx
mov edx, dword [0x4ac26c]
call fcn.004373d0
jmp 0x4270f1
mov eax, dword [0x4ac274]
mov ecx, dword [0x4ac278]
mov edx, dword [0x4ac26c]
push eax
mov eax, dword [0x4ac270]
call fcn.00437520
jmp 0x4270f1
mov ecx, dword [0x4ac278]
mov edx, dword [0x4ac274]
mov eax, dword [0x4ac26c]
push ecx
mov ecx, dword [0x4ac27c]
push edx
mov edx, dword [0x4ac270]
push eax
push ebx
call fcn.00437640
jmp 0x4270f1
mov ecx, dword [0x4ac274]
mov eax, dword [0x4ac270]
mov edx, dword [0x4ac26c]
push ecx
mov ecx, dword [0x4ac278]
push ebx
call fcn.00437e90
jmp 0x4270f1
mov edx, dword [0x4ac284]
mov eax, dword [0x4ac280]
mov ecx, dword [0x4ac27c]
push edx
mov edx, dword [0x4ac278]
push eax
push ecx
push edx
mov eax, ebx
call fcn.00438120
jmp 0x4270f1
mov eax, dword [0x4ac270]
mov ecx, dword [0x4ac26c]
push eax
push ebx
call fcn.00438380
jmp 0x4270f1
push 0
push 0x1a3
push 0x111
push 0
push 0x49d18c
call dword [sym.imp.USER32.DLL_FindWindowA]
push eax
call dword [sym.imp.USER32.DLL_PostMessageA]
mov ecx, dword [0x4a8978]
mov eax, dword [ecx + 0x54]
cmp eax, 0xffffffff
jle case.0x429c38.69
push 1
push eax
call fcn.004013c0
add esp, 8
mov edi, 1
jmp 0x4270fb
push 0
push 0x1a0
push 0x111
push 0
push 0x49d18c
call dword [sym.imp.USER32.DLL_FindWindowA]
push eax
call dword [sym.imp.USER32.DLL_PostMessageA]
mov edx, dword [0x4a8978]
mov eax, dword [edx + 0x54]
cmp eax, 0xffffffff
jle case.0x429c38.69
push 1
push eax
call fcn.004013c0
add esp, 8
mov edi, 1
jmp 0x4270fb
mov eax, dword [ebx + 0xc]
test eax, eax
jne 0x42875d
mov edi, dword [0x4ac268]
cmp byte [edi], al
je 0x42875d
mov eax, 0x4ad268
call fcn.0041b3b0
test eax, eax
jne 0x42875d
mov eax, dword [0x4ac268]
push eax
push 0
push 0x49c008
mov ecx, ebx
call fcn.0042efe0
jmp 0x4270f1
mov dword [0x4ad830], eax
mov edi, 1
jmp 0x4270fb
mov edx, dword [ebx + 0xc]
mov eax, dword [0x4ac270]
push edx
mov edx, dword [0x4ac26c]
mov ecx, 1
cmp cl, byte [ebx + 1]
push eax
mov eax, dword [0x4ac268]
sbb ecx, ecx
and ecx, dword [0x4ac21c]
push edx
push eax
call fcn.0040a690
add esp, 0x10
jmp 0x4270f1
mov ebx, dword [ebx + 0xc]
test ebx, ebx
jne 0x428848
mov ecx, dword [0x4ac268]
push 0x4ad268
mov eax, esi
call fcn.0041b3f0
mov ebx, eax
test ebx, ebx
jne 0x428848
mov eax, dword [0x4ac268]
mov ecx, dword [esp + 0x10]
cmp byte [eax], bl
je 0x4287e9
push eax
push ebx
push 0x49c008
call fcn.0042efe0
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
cmp byte [ecx + 1], 0
jbe 0x428814
mov edx, dword [ecx + 8]
mov eax, dword [edx + 4]
cmp byte [eax], 0
je 0x428814
push 0x49a8ad
push 0
push 0x49c2c4
call fcn.0042efe0
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov ebx, dword [edi + 0x9c]
test ebx, ebx
jne 0x428848
mov edi, dword [edi + 0xa0]
test edi, edi
je 0x42882e
mov ebx, dword [edi]
test ebx, ebx
jne 0x428848
push 0x49a8ad
push 0
push 0x49e740
call fcn.0042efe0
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov eax, dword [0x4ac26c]
push 0
push 1
push 1
push 1
call fcn.00473bb0
add esp, 0x10
test eax, eax
jne 0x4288e9
mov esi, dword [0x4ac26c]
push eax
call fcn.00409460
add esp, 4
test eax, eax
jne 0x4288c8
mov eax, dword [0x4ac26c]
push 0x49b98c
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x4288a8
push ebx
push 0x4ad268
call fcn.0041b2c0
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov ecx, dword [0x4ac26c]
push ecx
mov ecx, dword [esp + 0x14]
push 0
push 0x49c2dc
call fcn.0042efe0
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
jle 0x4288e9
cmp eax, 2
jg 0x4288e9
mov ecx, dword [0x4ac270]
cmp eax, 1
sete dl
push 0
movzx eax, dl
push eax
push ecx
push 0x49a8ad
jmp 0x42890a
mov ecx, dword [0x4ac26c]
cmp byte [ecx], 0
mov edx, dword [0x4ac270]
jne 0x428903
cmp byte [edx], 0
je 0x428903
mov al, 1
jmp 0x428905
xor al, al
push eax
push 1
push edx
push ecx
push ebx
mov edi, 0x4ad268
call fcn.0041b000
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac268]
cmp byte [eax], 0
mov esi, 0x10
je 0x428957
push 0x49e770
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
je 0x428957
xor edi, edi
mov ecx, ebx
call fcn.004221a0
mov edi, dword [esp + 0x18]
mov esi, eax
test esi, esi
je 0x42895c
mov eax, 1
mov byte [edi + 0xce], al
test al, al
je 0x428986
or eax, 0xffffffff
mov dword [edi + 0xb8], esi
mov byte [edi + 0xcc], 0
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 0x24], eax
lea edi, [eax + 2]
jmp 0x4270fb
mov dword [edi + 0xb8], 5
mov byte [edi + 0xcc], 1
mov edi, 1
jmp 0x4270fb
mov esi, dword [0x4ac268]
call fcn.00415480
dec eax
je 0x428a4f
dec eax
je 0x428a06
dec eax
jne 0x428a64
mov edx, dword [0x4ac26c]
cmp byte [edx], al
je 0x4289f2
mov ecx, dword [esp + 0x10]
lea edi, [eax + 1]
call fcn.004221a0
or eax, edx
jne 0x4289ee
mov ebx, dword [esp + 0x10]
mov eax, edi
mov edi, dword [esp + 0x18]
mov byte [edi + 0xcd], al
mov edi, eax
jmp 0x4270fb
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x10]
xor eax, eax
mov byte [edi + 0xcd], al
lea edi, [eax + 1]
jmp 0x4270fb
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
je 0x428a23
mov ecx, dword [esp + 0x10]
mov edi, 1
call fcn.004221a0
mov dword [0x4ad894], eax
mov ecx, dword [0x4ac270]
cmp byte [ecx], 0
je 0x428a64
mov ecx, dword [esp + 0x10]
mov edi, 2
call fcn.004221a0
mov ebx, dword [esp + 0x10]
mov dword [0x4ad890], eax
mov edi, 1
jmp 0x4270fb
mov ecx, dword [esp + 0x10]
mov edi, 1
call fcn.004221a0
mov edx, dword [esp + 0x18]
mov dword [edx + 0x2c], eax
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov esi, dword [ebx + 0xc]
test esi, esi
jne 0x428a95
mov edx, dword [0x4ac268]
push 0x4ad268
mov cl, 1
call fcn.00422eb0
mov esi, eax
test esi, esi
je case.0x426de4.8
mov edi, dword [0x4ac274]
cmp byte [edi], 0
je 0x428ad1
mov eax, dword [ebx + 0x18]
test eax, eax
jne 0x428ace
mov eax, 0x4ad268
call fcn.0041b3b0
test eax, eax
jne 0x428ace
mov eax, dword [0x4ac274]
push eax
push 0
push 0x49c008
mov ecx, ebx
call fcn.0042efe0
jmp 0x4270f1
mov dword [esi + 0x10], eax
mov ecx, dword [0x4ac27c]
mov edx, dword [0x4ac278]
mov eax, dword [0x4ac270]
push ecx
mov ecx, dword [0x4ac26c]
push edx
push eax
push esi
call fcn.004796b0
jmp 0x4270f1
mov esi, dword [ebx + 0xc]
test esi, esi
jne 0x428b40
mov eax, dword [0x4ac268]
cmp byte [eax], 0
mov edi, eax
je case.0x429c38.69
mov esi, dword [0x4ad2a0]
test esi, esi
je case.0x429c38.69
jmp 0x428b20
mov eax, dword [esi + 4]
push edi
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
je 0x428b40
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x428b20
lea edi, [esi + 1]
jmp 0x4270fb
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
je 0x428b70
push 0x49c4dc
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x428b70
mov al, 1
mov ecx, esi
push eax
call fcn.00479cb0
mov edi, 1
jmp 0x4270fb
xor al, al
mov ecx, esi
push eax
call fcn.00479cb0
mov edi, 1
jmp 0x4270fb
mov esi, dword [ebx + 0xc]
test esi, esi
jne 0x428bd0
mov eax, dword [0x4ac268]
cmp byte [eax], 0
mov edi, eax
je case.0x429c38.69
mov esi, dword [0x4ad2a0]
test esi, esi
je case.0x429c38.69
lea esp, [esp]
mov eax, dword [esi + 4]
push edi
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
je 0x428bd0
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x428bb0
lea edi, [esi + 1]
jmp 0x4270fb
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
je 0x428c2f
push 0x49d9f0
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x428c00
push esi
xor edx, edx
mov cl, 0x84
call fcn.00479960
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
je 0x428c2f
push 0x49c4dc
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x428c2f
mov al, 1
push eax
push esi
call fcn.00479a20
mov edi, 1
jmp 0x4270fb
xor al, al
push eax
push esi
call fcn.00479a20
mov edi, 1
jmp 0x4270fb
mov ecx, dword [0x4ac270]
mov esi, dword [0x4ac26c]
push ecx
call fcn.0043e330
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
test esi, esi
jne 0x428c75
lea edi, [esi + 1]
mov ecx, ebx
call fcn.004221a0
call fcn.00413d00
jmp 0x4270fb
mov eax, dword [0x4ac26c]
push 0
push 1
push 0
push 1
call fcn.00473bb0
add esp, 0x10
cmp eax, 2
je 0x428cad
mov eax, dword [0x4ac270]
push 0
push 1
push 0
push 1
call fcn.00473bb0
add esp, 0x10
cmp eax, 2
jne 0x428d37
mov edx, dword [0x4ac26c]
cmp byte [edx], 0
je 0x428cc6
mov edi, 1
mov ecx, ebx
call fcn.00422250
jmp 0x428cc8
fldz
mov eax, dword [0x4ac270]
fst qword [esp + 0x30]
cmp byte [eax], 0
je 0x428d01
mov edi, 2
fstp st(0)
mov ecx, ebx
call fcn.00422250
fst qword [esp + 0x38]
fld qword [esp + 0x30]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jp 0x428d0d
fstp qword [esp + 0x30]
fstp qword [esp + 0x38]
jmp 0x428d11
fld qword [0x4a2e78]
fst qword [esp + 0x38]
jmp 0x428cee
fstp st(0)
fstp st(0)
call fcn.00413e70
fld qword [esp + 0x38]
fld qword [esp + 0x30]
sub esp, 8
fsub st(1), st(0)
fxch st(2)
fmulp st(1)
faddp st(1)
fstp qword [esp]
push esi
call fcn.004143e0
jmp 0x4270f1
mov ecx, dword [0x4ac26c]
cmp byte [ecx], 0
je 0x428d54
mov edi, 1
mov ecx, ebx
call fcn.004221a0
mov dword [esp + 0x1c], eax
jmp 0x428d5c
mov dword [esp + 0x1c], 0
mov edx, dword [0x4ac270]
cmp byte [edx], 0
je 0x428d77
mov edi, 2
mov ecx, ebx
call fcn.004221a0
mov edi, eax
jmp 0x428d7c
mov edi, SysReAllocString
mov eax, dword [esp + 0x1c]
cmp eax, edi
jle 0x428d8a
mov dword [esp + 0x1c], edi
mov edi, eax
call fcn.00413e20
mov ecx, eax
mov eax, edi
cdq
mov edi, eax
mov eax, dword [esp + 0x1c]
mov ebx, edx
cdq
sub edi, eax
sbb ebx, edx
add edi, 1
adc ebx, 0
push ebx
push edi
push 0
push ecx
call fcn.00496360
add eax, dword [esp + 0x1c]
push 0x18
cdq
push edx
push eax
mov eax, esi
call fcn.004010d0
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov ecx, dword [0x4ac26c]
push 1
push ebx
call fcn.0043e440
jmp 0x4270f1
mov edx, dword [0x4ac270]
mov eax, dword [0x4ac26c]
mov ecx, dword [0x4ac268]
push edx
push ebx
call fcn.0043e570
jmp 0x4270f1
mov eax, dword [0x4ac270]
mov ecx, dword [0x4ac26c]
push ebx
call fcn.0043e810
jmp 0x4270f1
mov eax, dword [0x4ac274]
mov edx, dword [0x4ac26c]
push eax
xor eax, eax
cmp cl, 0x9d
sete al
push edx
dec eax
and eax, dword [0x4ac268]
push eax
push ebx
call fcn.0043ed90
jmp 0x4270f1
mov ecx, dword [0x4ac26c]
cmp byte [ecx], 0
je 0x428e57
mov edi, 1
mov ecx, ebx
call fcn.004221a0
dec eax
jmp 0x428e59
xor eax, eax
cdq
test edx, edx
jg 0x428e6a
jl 0x428e64
test eax, eax
jae 0x428e6a
xor eax, eax
mov dword [esp + 0x34], eax
cmp byte [ebx], 0x9f
push eax
jne 0x428e80
mov esi, ebx
call fcn.0043fe90
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov edi, dword [0x4ac268]
mov ebx, dword [esp + 0x14]
call fcn.0043ff80
jmp 0x4270f1
mov edx, dword [0x4ac26c]
cmp byte [edx], 0
je 0x428eaf
mov edi, 1
mov ecx, ebx
call fcn.004221a0
mov esi, eax
jmp 0x428eb4
mov esi, 0x96
mov eax, dword [0x4ac268]
cmp byte [eax], 0
je 0x428ed9
xor edi, edi
mov ecx, ebx
call fcn.004221a0
push esi
push eax
call dword [sym.imp.KERNEL32.DLL_Beep]
mov edi, 1
jmp 0x4270fb
mov eax, 0x20b
push esi
push eax
call dword [sym.imp.KERNEL32.DLL_Beep]
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
je 0x428f11
push 0x49e774
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
je 0x428f27
mov eax, dword [0x4ac26c]
push 0x49bec0
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
je 0x428f27
xor al, al
jmp 0x428f2c
mov eax, 1
mov ebx, dword [esp + 0x10]
push eax
mov eax, dword [0x4ac268]
call fcn.004400e0
jmp 0x4270f1
cmp byte [ebx + 1], 2
jae 0x428f4b
mov edi, dword [edi + 0x18]
jmp 0x428f4d
xor edi, edi
mov ecx, dword [0x4ac268]
mov edx, dword [0x4ac26c]
push edi
push ecx
push edx
push ebx
call fcn.00441390
jmp 0x4270f1
mov ecx, dword [0x4ac26c]
push ebx
call fcn.00440a20
jmp 0x4270f1
mov eax, dword [0x4ac26c]
mov ecx, dword [0x4ac270]
push eax
push ebx
call fcn.00441000
jmp 0x4270f1
mov eax, dword [0x4ac268]
mov ebx, dword [esp + 0x10]
call fcn.00441770
jmp 0x4270f1
mov eax, dword [0x4ac268]
mov esi, ebx
call fcn.00452910
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov ecx, dword [0x4ac268]
movsx eax, byte [ecx]
neg eax
sbb eax, eax
push 7
and eax, ecx
push eax
push 0
call dword [sym.imp.SHELL32.DLL_SHEmptyRecycleBinA]
test eax, eax
setne cl
movzx edx, cl
push edx
push ebx
call fcn.0042ee10
jmp 0x4270f1
mov eax, dword [0x4ac268]
mov ecx, dword [0x4ac26c]
push eax
mov eax, dword [0x4ac270]
push ebx
call fcn.004417f0
jmp 0x4270f1
add edi, 0x30
push edi
push 0
mov edi, 2
mov ecx, ebx
call fcn.004221a0
cmp eax, 1
mov eax, dword [0x4ac26c]
sete cl
movzx edx, cl
mov ecx, dword [0x4ac268]
push edx
push eax
call fcn.00452f50
add esp, 0x10
test eax, eax
jne 0x429081
mov ecx, dword [0x4acad0]
push 1
push eax
push 0xffffffffffffffff
push 0x49a8c8
push ecx
call fcn.00476c10
jmp 0x4270f1
add edi, 0x30
push edi
push 1
mov edi, 2
mov ecx, ebx
call fcn.004221a0
mov ecx, dword [0x4ac26c]
cmp eax, 1
sete dl
movzx eax, dl
push eax
push ecx
mov ecx, dword [0x4ac268]
call fcn.00452f50
add esp, 0x10
push eax
push ebx
call fcn.0042eed0
jmp 0x4270f1
push 0
push ecx
mov edi, 2
mov ecx, ebx
call fcn.004221a0
dec eax
add esp, 4
neg eax
sbb eax, eax
inc eax
mov edx, dword [0x4ac26c]
push eax
mov eax, dword [0x4ac268]
push edx
push eax
call fcn.00452be0
add esp, 0x10
test al, al
sete cl
movzx edx, cl
push edx
push ebx
call fcn.0042ee10
jmp 0x4270f1
mov eax, dword [0x4ac270]
mov al, byte [eax]
call fcn.00409350
cmp al, 0x52
jne 0x429107
mov ecx, dword [0x4ac26c]
mov edx, dword [0x4ac268]
push ecx
push edx
call dword [sym.imp.KERNEL32.DLL_MoveFileA]
test eax, eax
sete al
movzx ecx, al
push ecx
push ebx
call fcn.0042ee10
jmp 0x4270f1
push 1
push ecx
mov edi, 2
mov ecx, ebx
call fcn.004221a0
add esp, 4
jmp 0x4290a5
mov eax, dword [0x4ac268]
push 0
push eax
call fcn.00440950
add esp, 8
test al, al
sete cl
mov byte [esp + 0x7c], cl
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov edx, dword [0x4a8978]
mov dword [edx + 0x30], eax
mov eax, dword [esp + 0x7c]
push eax
push ebx
call fcn.0042ee10
jmp 0x4270f1
mov ecx, dword [0x4ac268]
cmp byte [ecx], 0
je 0x429192
mov edi, 1
mov ecx, ebx
call fcn.004221a0
cmp eax, edi
sete dl
movzx eax, dl
push eax
mov eax, dword [0x4ac268]
call fcn.00452e70
add esp, 4
test al, al
je 0x429192
xor al, al
push eax
push ebx
call fcn.0042ee10
jmp 0x4270f1
mov eax, 1
push eax
push ebx
call fcn.0042ee10
jmp 0x4270f1
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
jne 0x4291bf
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x140]
test edi, edi
jne 0x4291bf
mov eax, 0x49a8ad
mov edi, ebx
call fcn.00441990
jmp 0x4270f1
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
je 0x4291db
mov dword [esp + 0x38], eax
jmp 0x4291f6
mov edi, dword [edi + 0x10]
test edi, edi
je 0x4291ee
add edi, 0x140
mov dword [esp + 0x38], edi
jmp 0x4291f6
mov dword [esp + 0x38], 0x49a8ad
mov edi, 3
mov ecx, ebx
call fcn.004221a0
mov esi, dword [0x4ac270]
cmp eax, 1
sete cl
movzx edx, cl
push edx
call fcn.004156f0
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x40]
push eax
mov eax, dword [0x4ac268]
push ecx
call fcn.00441aa0
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
jne 0x429251
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x140]
test edi, edi
jne 0x429251
mov eax, 0x49a8ad
mov edx, dword [0x4ac270]
movzx ecx, byte [edx]
push ecx
mov edi, ebx
call fcn.004420a0
jmp 0x4270f1
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
je 0x429277
mov dword [esp + 0x38], eax
jmp 0x429292
mov edi, dword [edi + 0x10]
test edi, edi
je 0x42928a
add edi, 0x140
mov dword [esp + 0x38], edi
jmp 0x429292
mov dword [esp + 0x38], 0x49a8ad
mov edi, 4
mov ecx, ebx
call fcn.004221a0
mov esi, dword [0x4ac274]
cmp eax, 1
sete dl
movzx eax, dl
push eax
call fcn.004156f0
mov ecx, dword [0x4ac270]
movzx edx, byte [ecx]
mov edi, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x40]
push edx
push eax
mov eax, dword [0x4ac268]
call fcn.00442220
mov ebx, edi
jmp 0x4270f1
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
je 0x4292f6
mov ecx, dword [0x4ac270]
push ecx
mov edi, eax
push ebx
call fcn.004423c0
jmp 0x4270f1
mov edi, dword [edi + 0x10]
test edi, edi
je 0x429315
mov ecx, dword [0x4ac270]
push ecx
add edi, 0x140
push ebx
call fcn.004423c0
jmp 0x4270f1
mov ecx, dword [0x4ac270]
push ecx
mov edi, 0x49a8ad
push ebx
call fcn.004423c0
jmp 0x4270f1
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
jne 0x429348
mov edi, dword [edi + 0x10]
lea eax, [edi + 0x140]
test edi, edi
jne 0x429348
mov eax, 0x49a8ad
push ebx
call fcn.00452a10
jmp 0x4270f1
mov eax, dword [0x4ac268]
call fcn.004402c0
xor edx, edx
cmp dword [edi + 0xe4], edx
sete dl
mov edi, edx
jmp 0x4270f3
mov eax, dword [0x4ac278]
mov ecx, dword [0x4ac26c]
mov edx, dword [0x4ac270]
push eax
push ecx
mov ecx, dword [0x4ac274]
push ebx
call fcn.00440360
jmp 0x4270f1
mov edx, dword [0x4ac270]
mov eax, dword [0x4ac26c]
mov ecx, dword [0x4ac274]
push edx
push eax
mov edx, ebx
call fcn.00451ff0
jmp 0x4270f1
mov ecx, dword [0x4ac268]
push ecx
push ebx
call fcn.00452310
jmp 0x4270f1
mov edx, dword [0x4ac288]
mov eax, dword [0x4ac284]
mov ecx, dword [0x4ac280]
mov ebx, dword [0x4ac278]
mov edi, dword [0x4ac274]
push edx
mov edx, dword [0x4ac27c]
push eax
mov eax, dword [0x4ac26c]
push ecx
mov ecx, dword [0x4ac268]
push edx
mov edx, dword [esp + 0x20]
push eax
push ecx
mov ecx, dword [0x4ac270]
push edx
call fcn.004526b0
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
push 0
mov ecx, 4
call fcn.0043ab50
add esp, 4
jmp 0x4270f1
mov esi, dword [0x4ac268]
push 7
call fcn.00409460
add esp, 4
cmp eax, 7
jne 0x429450
push 0
lea ecx, [eax - 6]
call fcn.0043ab50
mov ebx, dword [esp + 0x14]
add esp, 4
jmp 0x4270f1
cmp byte [edi + 0xd9], 0
je 0x42947c
mov ecx, dword [0x4acba4]
test ecx, ecx
jle 0x429466
dec ecx
jmp 0x42946b
mov ecx, 0x18f
mov dword [0x4acba4], ecx
mov dword [ecx*4 + 0x4acba8], 0
mov ebx, dword [esp + 0x10]
cmp eax, 1
sete al
mov byte [edi + 0xd9], al
mov edi, 1
jmp 0x4270fb
push 0
mov ecx, 2
call fcn.0043ab50
add esp, 4
jmp 0x4270f1
push 0
mov ecx, 3
call fcn.0043ab50
add esp, 4
jmp 0x4270f1
mov ebx, dword [0x4a8978]
add ebx, 0x4c
call fcn.0045b5e0
test eax, eax
je 0x4294de
mov ecx, dword [0x4a8978]
mov edx, dword [ecx + 0x4c]
mov esi, dword [edx + 4]
jmp 0x4294e0
xor esi, esi
mov ebx, dword [esp + 0x10]
mov al, byte [ebx + 1]
test al, al
jne 0x429502
fldz
sub esp, 8
fstp qword [esp]
push esi
push 0
push 0x10000
push 0x49e77c
jmp 0x429549
cmp al, 1
jne 0x42951e
fldz
mov eax, dword [0x4ac268]
sub esp, 8
fstp qword [esp]
push esi
push 0
push 0x10000
push eax
jmp 0x429549
mov edi, 3
mov ecx, ebx
call fcn.00422250
mov ecx, dword [0x4ac26c]
sub esp, 8
fstp qword [esp]
push esi
push ecx
xor edi, edi
mov ecx, ebx
call fcn.004221a0
mov edx, dword [0x4ac270]
push eax
push edx
call fcn.00478840
mov esi, eax
add esp, 0x18
test esi, esi
jne 0x429580
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x59e
jne 0x429580
mov eax, dword [0x4ac268]
push eax
push esi
push 0x49c2c4
mov ecx, ebx
call fcn.0042efe0
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov ebx, dword [esp + 0x10]
xor ecx, ecx
test esi, esi
setne cl
mov edi, ecx
jmp 0x4270f3
mov edx, dword [0x4ac284]
cmp byte [edx], 0
je 0x4295af
mov edi, 7
mov ecx, ebx
call fcn.004221a0
mov dword [esp + 0x38], eax
jmp 0x4295b7
mov dword [esp + 0x38], CreateStatusWindowA
mov eax, dword [0x4ac280]
cmp byte [eax], 0
je 0x4295d3
mov edi, 6
mov ecx, ebx
call fcn.004221a0
mov dword [esp + 0x1c], eax
jmp 0x4295db
mov dword [esp + 0x1c], CreateStatusWindowA
mov ecx, dword [0x4ac27c]
cmp byte [ecx], 0
je 0x4295f8
mov edi, 5
mov ecx, ebx
call fcn.004221a0
mov dword [esp + 0x24], eax
jmp 0x429600
mov dword [esp + 0x24], CreateStatusWindowA
mov edx, dword [0x4ac278]
cmp byte [edx], 0
je 0x42961d
mov edi, 4
mov ecx, ebx
call fcn.004221a0
mov dword [esp + 0x14], eax
jmp 0x429625
mov dword [esp + 0x14], CreateStatusWindowA
mov edi, 9
mov ecx, ebx
call fcn.00422250
mov eax, dword [0x4ac290]
mov ecx, dword [0x4ac288]
sub esp, 8
fstp qword [esp]
push eax
mov al, byte [ecx]
call fcn.00409350
mov ecx, dword [esp + 0x44]
cmp al, 0x4c
sete dl
movzx eax, dl
mov edx, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [0x4ac274]
push edx
push eax
mov al, byte [ecx]
call fcn.00409350
mov edx, dword [0x4ac270]
mov edi, dword [esp + 0x30]
cmp al, 0x48
mov eax, dword [0x4ac26c]
push edx
push eax
sete cl
push esi
call fcn.0043adf0
add esp, 0x28
jmp 0x4270f1
mov ecx, dword [0x4ac26c]
cmp byte [ecx], 0
je 0x4296ae
mov edi, 1
mov ecx, ebx
call fcn.004221a0
mov esi, eax
jmp 0x4296b0
xor esi, esi
mov edx, dword [0x4ac268]
cmp byte [edx], 0
je 0x4296c6
xor edi, edi
mov ecx, ebx
call fcn.004221a0
jmp 0x4296cb
mov eax, 0xc8
mov ecx, dword [0x4ac274]
mov edx, dword [0x4ac270]
push ecx
push edx
push esi
push eax
call fcn.00450780
jmp 0x4270f1
mov eax, dword [0x4ac2d4]
test eax, eax
je 0x429705
push eax
call dword [sym.imp.USER32.DLL_IsWindow]
test eax, eax
je 0x429705
mov eax, dword [0x4ac2d4]
push eax
call dword [sym.imp.USER32.DLL_DestroyWindow]
mov dword [0x4ac2d4], 0
mov edi, 1
jmp 0x4270fb
mov ecx, dword [0x4ac278]
mov edx, dword [0x4ac274]
mov eax, dword [0x4ac270]
push 0
push ecx
mov ecx, dword [0x4ac26c]
push edx
mov edx, dword [0x4ac268]
push eax
push ecx
push edx
push ebx
mov ecx, 0x49a8ad
call fcn.00431730
jmp 0x4270f1
mov eax, dword [0x4ac27c]
mov ecx, dword [0x4ac278]
mov edx, dword [0x4ac274]
push 1
push eax
mov eax, dword [0x4ac270]
push ecx
mov ecx, dword [0x4ac26c]
push edx
push eax
push ecx
mov ecx, dword [0x4ac268]
push ebx
call fcn.00431730
jmp 0x4270f1
mov edx, dword [0x4ac270]
mov eax, dword [0x4ac26c]
mov ecx, dword [0x4ac268]
push edx
push eax
push ecx
mov ecx, dword [0x4ac274]
push ebx
call fcn.00432910
jmp 0x4270f1
mov edx, dword [0x4ac26c]
mov eax, dword [0x4ac268]
mov edi, dword [0x4ac274]
mov esi, dword [0x4ac270]
push edx
push eax
call fcn.00432c20
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov ecx, ebx
call fcn.00433930
jmp 0x4270f1
mov esi, dword [0x4ac26c]
call fcn.00415990
mov esi, dword [0x4ac268]
movzx ebx, ax
call fcn.00415a00
movzx ecx, ax
cmp ecx, 0xffffffff
je 0x42981e
cmp ebx, 0xffffffff
je 0x42981e
mov eax, 3
shl ax, cl
shl bx, cl
not ax
and ax, word [edi + 0xd0]
or ax, bx
mov word [edi + 0xd0], ax
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
xor edi, edi
mov ecx, ebx
call fcn.004221a0
mov ecx, dword [esp + 0x18]
mov byte [ecx + 0xcf], al
cmp al, 0x64
jbe case.0x429c38.69
mov byte [ecx + 0xcf], 2
mov edi, 1
jmp 0x4270fb
mov ecx, dword [edi + 0xb4]
mov eax, dword [0x4ac268]
push ecx
call fcn.00415660
mov dword [edi + 0xb4], eax
add esp, 4
mov edi, 1
jmp 0x4270fb
xor edi, edi
mov ecx, ebx
call fcn.004221a0
cmp eax, 0x64
ja case.0x429c38.69
mov edx, dword [esp + 0x18]
mov byte [edx + 0xd6], al
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac270]
push 0x49cfac
push eax
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x4298f9
mov ecx, dword [0x4ac268]
cmp byte [ecx], al
je 0x4298d3
xor edi, edi
mov ecx, ebx
call fcn.004221a0
mov edx, dword [esp + 0x18]
mov dword [edx + 0x60], eax
mov eax, dword [0x4ac26c]
cmp byte [eax], 0
je case.0x429c38.69
mov edi, 1
mov ecx, ebx
call fcn.004221a0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x68], eax
jmp 0x4270fb
mov edx, dword [0x4ac268]
cmp byte [edx], 0
je 0x429914
xor edi, edi
mov ecx, ebx
call fcn.004221a0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x5c], eax
mov edx, dword [0x4ac26c]
cmp byte [edx], 0
je case.0x429c38.69
mov edi, 1
mov ecx, ebx
call fcn.004221a0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x64], eax
jmp 0x4270fb
mov edx, dword [0x4ac26c]
push 0x49cfac
push edx
call fcn.00486ea1
add esp, 8
xor edi, edi
mov ecx, ebx
test eax, eax
jne 0x42996d
call fcn.004221a0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x70], eax
mov edi, 1
jmp 0x4270fb
call fcn.004221a0
mov edx, dword [esp + 0x18]
mov dword [edx + 0x6c], eax
mov edi, 1
jmp 0x4270fb
xor edi, edi
mov ecx, ebx
call fcn.004221a0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x54], eax
mov edi, 1
jmp 0x4270fb
xor edi, edi
mov ecx, ebx
call fcn.004221a0
mov edx, dword [esp + 0x18]
mov dword [edx + 0x58], eax
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac268]
push 0x49e794
call fcn.004740a0
add esp, 4
mov ecx, ebx
test eax, eax
je 0x4299f4
mov dword [edi], 0xffffffff
mov dword [edi + 4], 0xffffffff
xor edi, edi
call fcn.004221a0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x24], eax
mov edi, 1
jmp 0x4270fb
mov dword [edi + 0x24], 0xffffffff
xor edi, edi
call fcn.004221a0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 4], edx
mov edx, eax
or edx, dword [ecx + 4]
mov dword [ecx], eax
jne case.0x429c38.69
mov dword [ecx + 4], edi
mov dword [ecx], 0xa
lea edi, [edx + 1]
jmp 0x4270fb
mov esi, dword [0x4ac268]
push 7
call fcn.00409460
add esp, 4
cmp eax, 7
je 0x429a48
cmp eax, 1
sete al
mov byte [edi + 0xd3], al
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov esi, dword [0x4ac268]
call fcn.00415150
dec eax
cmp eax, 5
ja case.default.0x429a6b
jmp dword [eax*4 + 0x42abec]
mov ebx, dword [esp + 0x10]
mov dword [edi + 0x20], 1
mov edi, 1
jmp 0x4270fb
mov ebx, dword [esp + 0x10]
mov dword [edi + 0x20], 2
mov edi, 1
jmp 0x4270fb
mov ebx, dword [esp + 0x10]
mov dword [edi + 0x20], 4
mov edi, 1
jmp 0x4270fb
mov ebx, dword [esp + 0x10]
mov dword [edi + 0x20], 3
mov edi, 1
jmp 0x4270fb
mov ebx, dword [esp + 0x10]
mov byte [edi + 0xc9], 1
mov edi, 1
jmp 0x4270fb
mov ebx, dword [esp + 0x10]
mov byte [edi + 0xc9], 0
mov edi, 1
jmp 0x4270fb
mov ecx, dword [0x4ac268]
push ecx
mov ecx, dword [esp + 0x14]
push 0
push 0x49c2c4
call fcn.0042efe0
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov edx, dword [0x4ac268]
push 5
push 0x49d064
push edx
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x429bfd
lea edi, [eax + 1]
mov ecx, ebx
call fcn.00422120
cmp eax, 0x1e
jae 0x4270fb
mov ecx, dword [esp + 0x10]
call fcn.004221a0
mov edi, eax
mov eax, dword [0x4ac26c]
push 0x2e
push eax
mov ebx, edx
call fcn.00487e91
mov esi, eax
add esp, 8
mov dword [esp + 0x30], esi
test esi, esi
je 0x429b74
inc esi
call fcn.004142e0
mov esi, dword [esp + 0x30]
jmp 0x429b78
xor eax, eax
xor edx, edx
add edi, eax
adc ebx, edx
add edi, 2
adc ebx, 0
mov dword [esp + 0x34], ebx
js 0x429ba0
jg 0x429b92
cmp edi, 0xff
jbe 0x429ba0
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac26c]
push 0
push 1
push 1
push 1
call fcn.00473bb0
add esp, 0x10
mov ecx, 0x49e798
test eax, eax
jne 0x429bc3
mov ecx, 0x49a8ad
mov eax, 0x49a8ad
test esi, esi
jne 0x429bd1
mov eax, 0x49de48
mov edx, dword [esp + 0x18]
push ecx
mov ecx, dword [0x4ac26c]
push eax
push ecx
add edx, 0x74
push 0x49e79c
push edx
call fcn.004873d8
mov ebx, dword [esp + 0x24]
add esp, 0x14
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac268]
push 7
push 0x49d05c
push eax
call fcn.00487920
add esp, 0xc
test eax, eax
jne case.0x429c38.69
mov ecx, dword [0x4ac26c]
mov al, byte [ecx]
movsx ecx, al
add ecx, 0xffffffbc
cmp ecx, 0x24
ja case.0x429c38.69
movzx edx, byte [ecx + 0x42ac10]
jmp dword [edx*4 + 0x42ac04]
mov byte [edi + 0xd5], 0x44
mov edi, 1
jmp 0x4270fb
mov byte [edi + 0xd5], al
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac270]
mov ecx, dword [0x4ac26c]
push eax
call fcn.0043bdd0
jmp 0x4270f1
mov al, byte [ebx + 1]
mov cl, 4
cmp cl, al
sbb edx, edx
and edx, dword [0x4ac228]
mov cl, 3
push edx
cmp cl, al
mov eax, dword [0x4ac27c]
mov ecx, dword [0x4ac278]
sbb edx, edx
and edx, dword [0x4ac224]
push edx
mov edx, dword [0x4ac274]
push eax
mov eax, dword [0x4ac270]
push ecx
mov ecx, dword [0x4ac268]
push edx
push eax
mov eax, dword [0x4ac26c]
push ecx
push 0x4ad268
call fcn.004698e0
jmp 0x4270f1
mov edx, dword [0x4ac274]
mov eax, dword [0x4ac270]
mov ecx, dword [0x4ac26c]
push edx
push eax
push ecx
mov ecx, dword [0x4ac268]
push 0x4ad268
call fcn.0045b650
jmp 0x4270f1
mov ecx, dword [0x4ac26c]
mov dl, 2
cmp dl, byte [ebx + 1]
mov edx, dword [0x4ac268]
sbb eax, eax
and eax, dword [0x4ac220]
push eax
mov eax, dword [0x4ac270]
push ecx
push edx
push ebx
call fcn.0045bfa0
jmp 0x4270f1
mov eax, dword [0x4ac274]
mov ecx, dword [0x4ac270]
mov edx, dword [0x4ac26c]
push eax
push ecx
push edx
push ebx
call fcn.0045cf60
jmp 0x4270f1
mov eax, dword [0x4ac268]
call fcn.00415550
cmp eax, 7
ja case.0x429c38.69
jmp dword [eax*4 + 0x42ac38]
cmp byte [0x4ac42a], 0
jne case.0x429c38.69
call fcn.0042eac0
mov edi, 1
jmp 0x4270fb
cmp byte [0x4ac42a], 0
je case.0x429c38.69
call fcn.0042eac0
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac268]
push eax
push 0
push 0x49c2c4
mov ecx, ebx
call fcn.0042efe0
jmp 0x4270f1
mov edi, 1
mov ecx, ebx
call fcn.004221a0
test eax, eax
mov eax, dword [0x4ac268]
setne cl
movzx edx, cl
push edx
call fcn.004094d0
push eax
push ebx
call fcn.0042eb10
jmp 0x4270f1
mov esi, dword [0x4ac268]
push 7
call fcn.00409460
add esp, 4
cmp eax, 7
je 0x429df3
cmp eax, 1
sete al
mov byte [edi + 0xd4], al
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov esi, dword [0x4ac268]
call fcn.004154e0
mov byte [edi + 0xd2], al
cmp al, 4
jne 0x429e1d
mov byte [edi + 0xd2], 0
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov esi, dword [0x4ac268]
push 7
call fcn.00409460
add esp, 4
cmp eax, 7
je 0x429e4c
cmp eax, 1
sete cl
mov byte [edi + 0xca], cl
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov esi, dword [0x4ac268]
push 7
call fcn.00409460
add esp, 4
cmp eax, 7
je 0x429e7b
cmp eax, 1
sete dl
mov byte [edi + 0xcb], dl
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac268]
call fcn.004155b0
lea ecx, [eax - 1]
cmp ecx, 0xc
ja case.0x429c38.69
movzx ecx, byte [ecx + 0x42ac70]
jmp dword [ecx*4 + 0x42ac58]
push 1
call dword [sym.imp.USER32.DLL_BlockInput]
mov byte [0x4acade], 1
mov edi, 1
jmp 0x4270fb
push 0
call dword [sym.imp.USER32.DLL_BlockInput]
mov byte [0x4acade], 0
mov edi, 1
jmp 0x4270fb
mov dword [0x4a8988], eax
mov edi, 1
jmp 0x4270fb
or byte [0x4acb10], 2
cmp dword [0x4ac400], 0
mov byte [0x4acadf], 1
jne case.0x429c38.69
mov edx, dword [0x4a9ab4]
movzx eax, word [edx]
push eax
call fcn.00407c20
add esp, 4
mov edi, 1
jmp 0x4270fb
mov byte [0x4acadf], 0
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac268]
mov edi, 0x4a897c
mov cl, 0x90
call fcn.00442580
jmp 0x4270f1
mov eax, dword [0x4ac268]
mov edi, 0x4a8980
mov cl, 0x14
call fcn.00442580
jmp 0x4270f1
mov eax, dword [0x4ac268]
mov edi, 0x4a8984
mov cl, 0x91
call fcn.00442580
jmp 0x4270f1
mov al, 1
mov edx, 0x4ad268
call fcn.00417050
mov edi, 1
jmp 0x4270fb
xor edi, edi
mov ecx, ebx
call fcn.004221a0
push 1
push eax
call fcn.004013c0
add esp, 8
mov edi, 1
jmp 0x4270fb
mov ecx, dword [0x4ac274]
mov edx, dword [0x4ac270]
push ecx
mov ecx, dword [0x4ac278]
push edx
mov edx, dword [0x4ac26c]
call fcn.00470580
jmp 0x4270f1
mov eax, dword [0x4ac268]
mov ecx, dword [esp + 0x10]
mov ebx, dword [0x4ac270]
mov edx, dword [0x4ac26c]
push eax
push ecx
mov ecx, dword [0x4ac274]
call fcn.00470680
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
cmp byte [ebx + 1], 3
mov eax, dword [0x4ac26c]
sbb edx, edx
not edx
and edx, dword [0x4ac270]
push edx
mov edx, dword [0x4ac268]
push eax
push ebx
call fcn.004707a0
jmp 0x4270f1
cmp byte [ebx + 1], 2
jae 0x42a047
mov edi, dword [edi + 0x14]
test edi, edi
je 0x42a047
mov eax, dword [edi + 4]
lea ecx, [edi + 0x408]
push ecx
lea edx, [edi + 8]
push edx
push ebx
call fcn.00470810
jmp 0x4270f1
mov edx, dword [0x4ac26c]
lea eax, [esp + 0x2f]
push eax
lea ecx, [esp + 0x4c]
push ecx
push 2
push edx
call fcn.00414ed0
mov esi, eax
mov eax, dword [esp + 0x58]
add esp, 0x10
test eax, eax
jne 0x42a07d
mov eax, dword [0x4ac270]
mov ecx, dword [0x4ac274]
mov dword [esp + 0x48], eax
jmp 0x42a083
mov ecx, dword [0x4ac270]
push ecx
push eax
push ebx
mov eax, esi
call fcn.00470810
cmp byte [esp + 0x2f], 0
mov edi, eax
je 0x4270f3
test esi, esi
je 0x4270f3
push esi
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
jmp 0x4270f3
cmp byte [ebx + 1], 2
jae 0x42a0e9
mov edi, dword [edi + 0x14]
test edi, edi
je 0x42a0e9
mov edx, dword [edi + 0x808]
mov ebx, dword [0x4ac268]
lea eax, [edi + 0x408]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [edi + 8]
push ecx
push edx
push eax
mov eax, dword [edi + 4]
call fcn.00470b50
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov eax, dword [0x4ac26c]
lea ecx, [esp + 0x2f]
push ecx
lea edx, [esp + 0x4c]
push edx
push 2
push eax
call fcn.00414ed0
mov edi, eax
mov eax, dword [esp + 0x58]
add esp, 0x10
test eax, eax
jne 0x42a124
mov eax, dword [0x4ac270]
mov ecx, dword [0x4ac274]
mov ebx, dword [0x4ac278]
mov dword [esp + 0x48], eax
jmp 0x42a130
mov ecx, dword [0x4ac270]
mov ebx, dword [0x4ac274]
mov esi, dword [0x4ac268]
push ecx
push eax
call fcn.00415080
mov ecx, dword [esp + 0x18]
push eax
push ecx
mov eax, edi
call fcn.00470b50
cmp byte [esp + 0x2f], 0
mov esi, eax
je 0x42a15e
test edi, edi
je 0x42a15e
push edi
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
mov ebx, dword [esp + 0x10]
mov edi, esi
jmp 0x4270f3
cmp byte [ebx + 1], 1
jae 0x42a1e0
mov eax, dword [edi + 0x14]
test eax, eax
je 0x42a1e0
cmp dword [eax + 0x808], 0xfffffffe
lea ecx, [eax + 8]
jne 0x42a1bb
cmp byte [ecx], 0
je 0x42a1b1
add eax, 0x408
push eax
push ecx
push 0x49d16c
mov esi, 0x400
lea edi, [esp + 0x14c]
call fcn.00473d20
add esp, 0xc
mov ecx, edi
mov edi, dword [esp + 0x18]
xor eax, eax
jmp 0x42a1c0
lea ecx, [eax + 0x408]
xor eax, eax
jmp 0x42a1c0
add eax, 0x408
mov edx, dword [edi + 0x14]
mov ebx, dword [edx + 4]
push eax
mov eax, dword [esp + 0x14]
push eax
mov edi, ecx
mov dword [esp + 0x50], ecx
call fcn.00470f30
mov ebx, dword [esp + 0x10]
jmp 0x4270f1
mov eax, dword [0x4ac268]
lea ecx, [esp + 0x2f]
push ecx
lea edx, [esp + 0x4c]
push edx
push 2
push eax
call fcn.00414ed0
mov edi, dword [esp + 0x58]
add esp, 0x10
mov ebx, eax
test edi, edi
jne 0x42a216
mov edi, dword [0x4ac26c]
mov esi, dword [0x4ac270]
mov dword [esp + 0x48], edi
jmp 0x42a21c
mov esi, dword [0x4ac26c]
cmp byte [esi], 0
jne 0x42a225
xor esi, esi
jmp 0x42a23c
push 0x49e7a8
push esi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x42a23c
mov esi, 0x49a8ad
mov ecx, dword [esp + 0x10]
push esi
push ecx
call fcn.00470f30
cmp byte [esp + 0x2f], 0
mov edi, eax
je 0x42a25b
test ebx, ebx
je 0x42a25b
push ebx
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
mov ebx, dword [esp + 0x10]
jmp 0x4270f3
mov esi, dword [0x4ac268]
call fcn.00415100
mov esi, eax
cmp esi, 0xffffffff
jne 0x42a282
mov edx, dword [0x4ac268]
push edx
jmp 0x429af7
call fcn.004751a0
test eax, eax
je 0x42a291
mov dword [edi + 0xb0], esi
mov ebx, dword [esp + 0x10]
mov edi, 1
jmp 0x4270fb
mov eax, dword [0x4ac268]
push eax
call dword [sym.imp.KERNEL32.DLL_OutputDebugStringA]
mov edi, 1
jmp 0x4270fb
xor edi, edi
mov ecx, ebx
call fcn.004221a0
push eax
call fcn.00453470
xor ecx, ecx
add esp, 4
test al, al
setne cl
mov edi, ecx
jmp 0x4270f3
mov eax, dword [0x4ac268]
call fcn.00415bc0
cmp eax, 0xffffffff
jne 0x42a2fe
mov edx, dword [0x4ac268]
push edx
push 0
push 0x49c2c4
mov ecx, ebx
call fcn.0042efe0
jmp 0x4270f1
mov dword [edi + 0xdc], eax
mov edi, 1
jmp 0x4270fb
xor edi, edi
mov eax, edi
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x40]
mov dword [edx], eax
mov eax, edi
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, 1
cmp edi, 7
je 0x425ff6
mov eax, edi
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
jmp case.0x426025.116
cmp dword [ebp + 0xc], 0
je 0x42a3e4
mov edx, dword [ebp + 0xc]
cmp dword [edx + 8], 0
jne 0x42a3e4
mov ecx, dword [0x4ac218]
test ecx, ecx
je 0x42a3d3
cmp byte [ecx + 0x17], 0
jne 0x42a3a1
mov eax, dword [ecx + 0xc]
jmp 0x42a3a3
mov eax, ecx
test byte [eax + 0x15], 2
je 0x42a3d3
mov eax, edx
call fcn.00414650
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, edx
mov dword [eax + 8], 0
mov ecx, dword [0x4ac268]
mov dword [eax], ecx
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
and eax, 6
inc eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [ebx + 0x18]
test ebx, ebx
je 0x42a419
mov edx, dword [esp + 0x40]
mov dword [edx], ebx
jmp case.0x426025.116
mov eax, 5
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [ebx + 0x18]
test ebx, ebx
je 0x42a442
mov eax, dword [esp + 0x40]
mov dword [eax], ebx
mov eax, 6
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4ac26c]
push ecx
mov ecx, dword [esp + 0x14]
push 0
push 0x49c2dc
call fcn.0042efe0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4ac270]
push edx
push 0
push 0x49c2f4
mov ecx, ebx
call fcn.0042efe0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [esp + 0x38], 0
je 0x42a4c8
lea esi, [esp + 0x38]
call fcn.0042f800
test ebx, ebx
je 0x42a646
cmp ebx, 8
je 0x42a646
mov ecx, dword [0x4ad5dc]
push 0x49a8ad
push 0
push 0x49e448
call fcn.0042efe0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x40]
mov dword [eax], edx
jmp case.0x426025.116
mov ecx, dword [esp + 0x40]
mov dword [ecx], edx
mov eax, edi
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp byte [ebx + 1], 0
jne 0x42a561
push 0x49a8ad
push 0
push 0x49e6a8
mov ecx, ebx
call fcn.0042ed70
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x10
call fcn.00488595
mov edi, eax
add esp, 4
test edi, edi
jne 0x42a59a
push 0x49a8ad
push eax
push 0x49c0a0
mov ecx, ebx
call fcn.0042efe0
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4ad1f0]
mov edx, dword [0x4ad1ec]
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x3c], eax
xor eax, eax
push edi
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x18]
push eax
push edx
lea ebx, [esp + 0x48]
mov dword [0x4ad1ec], eax
mov dword [0x4ad1f0], eax
call fcn.00459c10
mov ebx, eax
cmp ebx, 1
jne 0x42a5fa
cmp dword [edi + 8], 0
jne 0x42a5fa
mov eax, dword [esp + 0x1c]
cmp dword [edi], eax
jne 0x42a5fa
cmp dword [esp + 0x38], 0x400000
mov ecx, eax
mov dword [edi + 0xc], ecx
jbe 0x42a666
dec dword [0x4ad1f4]
jmp 0x42a666
cmp dword [esp + 0x1c], 0
je 0x42a638
mov eax, dword [0x4ad1ec]
test eax, eax
je 0x42a625
push eax
call fcn.00486eb8
add esp, 4
cmp dword [0x4ad1f0], 0x400000
jbe 0x42a625
dec dword [0x4ad1f4]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
mov dword [0x4ad1ec], edx
mov dword [0x4ad1f0], eax
cmp ebx, 1
je 0x42a65f
push edi
call fcn.00486c18
add esp, 4
mov eax, ebx
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 0xc], 0
test byte [esi + 0xe0], 2
mov dword [esi + 0xe4], edi
jne 0x42a682
mov ecx, dword [esp + 0x10]
push ecx
call fcn.0042f4e0
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [0x4a9ab4]
cmp word [edx], 0
jne 0x42a6cb
cmp dword [0x4acb40], 0
jne 0x42a6cb
cmp dword [0x4ac3fc], 0
jne 0x42a6cb
cmp dword [0x4ac400], 0
jne 0x42a6cb
cmp byte [0x4ac40a], 0
je case.0x426025.224
mov eax, 8
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor edi, edi
mov ecx, ebx
call fcn.004221a0
push eax
push 7
push 0x4ad268
call fcn.00417080
mov ecx, dword [esp + 0x574]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp dword [ebp + 8], 2
je case.0x426025.116
push 0x49a8ad
push 0
push 0x49e6c4
mov ecx, ebx
call fcn.0042efe0
mov ecx, dword [esp + 0x574]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc