Function at 0x456cd3
Capabilities:
Encrypt data using rc4 ksa
Set current directory

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4d6c
call fcn.00470240
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x18]
push eax
push ebx
push esi
push edi
call fcn.0041be86
test eax, eax
je 0x456d01
mov eax, dword [ebp - 0x18]
jmp 0x456d7d
mov eax, 0x264
cmp esi, eax
jg 0x457d2b
je 0x457d21
mov eax, 0x126
cmp esi, eax
jg 0x45772a
je 0x457718
add eax, 0xffffffa4
cmp esi, eax
jg 0x457375
je 0x457361
cmp esi, 0x79
jg 0x45701c
je 0x45700c
cmp esi, 0x67
jg 0x456ed0
je 0x456e5c
xor edi, edi
sub esi, edi
je 0x456e52
dec esi
je 0x456e48
sub esi, 0x63
je 0x456d82
dec esi
je 0x458393
dec esi
je 0x458422
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
leave
ret
cmp ebx, 0xffff
jbe 0x456ddc
mov eax, dword [ebx + 4]
cmp eax, edi
je 0x456dc8
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00402d5b
push dword [ebx]
mov esi, dword [eax]
lea ecx, [ebp - 0x350c]
call fcn.004084cb
push dword [ebx + 8]
push esi
push eax
call fcn.0043316a
push dword [ebp - 0x10]
call dword [sym.imp.NSCRT.dll_free]
add esp, 0x10
mov dword [ebp - 0x10], edi
jmp 0x4583dd
push dword [ebx]
lea ecx, [ebp - 0x24cc]
call fcn.004084cb
push edi
push eax
jmp 0x4583d6
cmp ebx, edi
jne 0x456e15
mov eax, dword [0x493d34]
cmp eax, edi
je case.default.0x4587f0
push eax
lea ecx, [ebp - 0x454c]
call fcn.004084cb
push edi
push eax
call fcn.00434713
pop ecx
pop ecx
push dword [0x493d34]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [0x493d34], edi
jmp 0x4583dd
cmp dword [0x493d30], edi
jne 0x456e2f
push 0x104
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [0x493d34], eax
mov ecx, dword [0x493d30]
mov eax, dword [0x493d34]
inc dword [0x493d30]
mov byte [ecx + eax], bl
jmp case.default.0x4587f0
mov eax, str.5.531
jmp 0x456d7d
mov eax, 0x5053
jmp 0x456d7d
xor esi, esi
cmp ebx, esi
jne 0x456e9d
mov eax, dword [0x493d2c]
cmp eax, esi
je case.default.0x4587f0
mov ecx, dword [0x493d28]
push eax
mov byte [ecx + eax], 0
mov dword [0x493d28], esi
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push dword [0x493d2c]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [0x493d2c], esi
jmp case.default.0x4587f0
cmp dword [0x493d28], esi
jne 0x456eb7
push 0x104
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [0x493d2c], eax
mov ecx, dword [0x493d28]
mov eax, dword [0x493d2c]
inc dword [0x493d28]
mov byte [ecx + eax], bl
jmp case.default.0x4587f0
sub esi, 0x68
je 0x456fee
dec esi
je 0x456f9f
dec esi
je 0x456f2b
sub esi, 3
je case.0x457d67.617
sub esi, 0xb
jne case.default.0x4587f0
push 1
push 1
push 0x4845d8
call fcn.0045af3a
push 1
push 1
push 0x4861b0
call fcn.0045af3a
add esp, 0x18
call fcn.00431c56
test eax, eax
je case.0x457d67.636
call fcn.00431f91
jmp 0x456d7d
xor esi, esi
cmp dword [0x492504], esi
je case.0x457d67.636
mov eax, dword [0x48c76c]
cmp eax, esi
je case.0x457d67.636
cmp dword [eax + 0x14], esi
je case.0x457d67.636
call fcn.00431f91
push eax
call fcn.00431ae0
test eax, eax
pop ecx
jne case.0x457d67.636
cmp ebx, esi
jge 0x456f69
xor ebx, ebx
push ebx
call fcn.004273e9
test eax, eax
pop ecx
push esi
jge 0x456f87
push esi
push 0x402
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x4587f0
call fcn.004272db
cdq
mov ecx, 0x3e8
idiv ecx
push eax
call fcn.00416672
jmp 0x4585b9
test ebx, ebx
jne 0x456fb9
cmp dword [0x492504], ebx
je case.0x457d67.636
call fcn.004272db
jmp 0x456d7d
cmp ebx, 1
jne case.0x457d67.617
cmp dword [0x492504], 0
je 0x456fe4
mov eax, dword [0x48c76c]
test eax, eax
je 0x456fe4
call dword [eax + 0x4c]
cdq
mov ecx, 0x3e8
idiv ecx
jmp 0x456d7d
call fcn.00431999
jmp 0x456d7d
mov eax, dword [0x492500]
neg eax
sbb eax, eax
xor ecx, ecx
and eax, 2
cmp dword [0x492504], ecx
setne cl
or eax, ecx
jmp 0x456d7d
push ebx
call fcn.00433659
pop ecx
push 0
push 0
jmp 0x45818c
cmp esi, 0x7f
jg 0x457178
je 0x45712a
sub esi, 0x7a
je 0x4570e3
dec esi
je 0x457094
dec esi
je 0x45708a
dec esi
je 0x456f21
dec esi
jne case.default.0x4587f0
test ebx, ebx
jne 0x457056
mov eax, dword [0x496648]
jmp 0x456d7d
cmp ebx, 1
jne 0x457065
mov eax, dword [0x496a54]
jmp 0x456d7d
cmp ebx, 2
jne 0x457074
mov eax, dword [0x496a48]
jmp 0x456d7d
mov eax, ebx
sub eax, 5
neg eax
sbb eax, eax
not eax
and eax, dword [0x49665c]
jmp 0x456d7d
call fcn.00431c56
jmp 0x456d7d
cmp ebx, 0xfffffd66
jne 0x4570a8
movsx eax, byte [0x485a74]
jmp 0x456d7d
cmp bl, 0x81
mov al, bl
mov byte [0x485a74], al
jge 0x4570bb
mov al, 0x81
mov byte [0x485a74], al
cmp al, 0x7f
jle 0x4570c6
mov al, 0x7f
mov byte [0x485a74], al
movsx eax, al
push 0
push eax
call fcn.0044ad5f
movsx eax, byte [0x485a74]
push eax
call fcn.00427388
jmp 0x45886b
cmp ebx, 0xfffffd66
jne 0x4570f7
movzx eax, byte [0x482c90]
jmp 0x456d7d
cmp bl, 0xff
mov byte [0x482c90], bl
jbe 0x457109
mov byte [0x482c90], 0xff
movzx eax, byte [0x482c90]
push eax
call fcn.00427327
movzx eax, byte [0x482c90]
push 0
push eax
call fcn.0044af15
jmp 0x45886b
cmp ebx, 9
mov dword [0x493d24], ebx
ja 0x457141
movzx eax, byte [ebx + 0x483448]
jmp 0x456d7d
cmp ebx, 0xa
jne 0x457152
movzx eax, byte [0x482cc8]
jmp 0x456d7d
cmp ebx, 0xb
jne 0x457163
movzx eax, byte [0x485759]
jmp 0x456d7d
cmp ebx, 0xc
jne case.0x457d67.617
movzx eax, byte [0x4849f4]
jmp 0x456d7d
sub esi, 0x80
je 0x45727b
dec esi
je 0x457271
sub esi, 6
je 0x45725c
sub esi, 0x41
je 0x4571f1
dec esi
jne case.default.0x4587f0
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor esi, esi
cmp ebx, esi
je 0x4571c7
push esi
push esi
push 0x103
push ebx
push 0xffffffffffffffff
push 0x485028
push esi
push esi
call edi
cmp eax, esi
je 0x4571c7
mov byte [eax + ebx], 0
push esi
push esi
push 0x103
mov ebx, 0x493c20
push ebx
push 0xffffffffffffffff
push 0x4868d8
push esi
push esi
call edi
cmp eax, esi
je 0x4571ea
mov byte [eax + 0x493c20], 0
mov eax, ebx
jmp 0x456d7d
test ebx, ebx
je case.0x457d67.617
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je case.0x457d67.617
push 0
push ebx
lea ecx, [ebp - 4]
call fcn.00402d5b
push dword [ebp - 4]
mov esi, 0x4868d8
push esi
call dword [sym.imp.NSCRT.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x45724e
push dword [ebp - 4]
push 0x104
push esi
call fcn.00467521
push 0
push 0x9d63
push 0x111
push dword [0x4924ec]
call dword [sym.imp.USER32.dll_SendMessageA]
push dword [ebp - 4]
call dword [sym.imp.NSCRT.dll_free]
jmp 0x4585ba
push edi
mov dword [0x4924e0], 1
call fcn.00450ecf
jmp 0x4585ba
mov eax, 0x4849f8
jmp 0x456d7d
mov esi, dword [0x493d24]
mov eax, ebx
and eax, 0xff000000
cmp eax, 0xdb000000
jne 0x457293
movzx esi, byte [ebp + 0x12]
xor edi, edi
and ebx, 0xffff
cmp esi, edi
jl 0x4572ac
cmp esi, 9
jg 0x4572ac
mov byte [esi + 0x483448], bl
jmp 0x4572d1
cmp esi, 0xa
jne 0x4572b9
mov byte [0x482cc8], bl
jmp 0x4572fa
cmp esi, 0xb
jne 0x4572c6
mov byte [0x485759], bl
jmp 0x4572db
cmp esi, 0xc
jne 0x4572d1
mov byte [0x4849f4], bl
cmp esi, 0xb
je 0x4572db
cmp esi, 0xc
jne 0x4572fa
movzx eax, byte [0x4849f4]
push edi
push edi
push eax
movzx eax, byte [0x485759]
push eax
call fcn.00449529
add esp, 0x10
cmp esi, 0xc
je 0x457317
movzx eax, byte [0x482cc8]
push eax
movzx eax, byte [0x485759]
push 0x483448
push eax
call fcn.0042795a
add esp, 0xc
cmp dword [0x482ca4], edi
je 0x457344
cmp esi, edi
jl 0x457344
cmp esi, 0xa
jg 0x457344
mov eax, esi
sub eax, 0xa
inc esi
neg eax
push edi
sbb eax, eax
and eax, esi
push ebx
push eax
call fcn.00449469
add esp, 0xc
call fcn.004495a7
push 0x25b
push 3
push 0x400
push dword [0x4924ec]
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x457d67.617
test ebx, ebx
je case.0x457d67.617
push ebx
push edi
call fcn.00429f94
jmp 0x4585b9
lea eax, [esi - 0xd3]
cmp eax, 0x52
ja case.default.0x4587f0
movzx eax, byte [eax + 0x4589bb]
jmp dword [eax*4 + 0x45895f]
test ebx, ebx
jne 0x4573a0
mov eax, dword [0x496654]
jmp 0x456d7d
cmp ebx, 1
jne 0x4573af
mov eax, dword [0x496560]
jmp 0x456d7d
mov eax, ebx
dec eax
dec eax
neg eax
sbb eax, eax
not eax
and eax, dword [0x496728]
jmp 0x456d7d
test ebx, ebx
jne 0x4573d2
mov eax, dword [0x482ca4]
jmp 0x456d7d
mov eax, ebx
dec eax
neg eax
sbb eax, eax
not eax
and eax, dword [0x482cb4]
jmp 0x456d7d
cmp ebx, 1
jne 0x4573f5
call fcn.00428073
jmp 0x456d7d
call fcn.00428302
jmp 0x456d7d
cmp ebx, 0xffffffff
jne 0x45740a
dec dword [0x492514]
cmp ebx, 1
jne 0x457415
inc dword [0x492514]
mov eax, dword [0x492514]
jmp 0x456d7d
cmp ebx, 0xffffffff
jne 0x45742e
mov eax, dword [0x497284]
jmp 0x456d7d
test ebx, ebx
jne 0x45743c
mov eax, dword [0x496720]
jmp 0x456d7d
jbe case.0x457d67.617
cmp ebx, 0xb
jae case.0x457d67.617
dec ebx
push ebx
push dword [0x48a50c]
call dword [sym.imp.USER32.dll_GetSubMenu]
jmp 0x456d7d
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
xor eax, eax
cmp ebx, 0xdeadbeef
setne al
mov ebx, eax
push ebx
push edi
call esi
push ebx
push dword [0x496560]
call esi
push ebx
push dword [0x496654]
call esi
jmp case.0x457d67.617
mov dword [0x49250c], 1
jmp case.0x457d67.617
call fcn.00431c56
test ebx, ebx
mov edi, eax
je 0x4574f4
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
xor esi, esi
test edi, edi
mov dword [ebp - 4], eax
jle case.0x457d67.617
push 0
lea eax, [ebp - 0xa64]
push eax
push esi
call fcn.00433a0a
push dword [ebp - 4]
lea eax, [ebp - 0xa64]
push eax
push ebx
call dword [sym.imp.NSCRT.dll__wcsnicmp]
add esp, 0x18
test eax, eax
jne 0x4574ea
push eax
push esi
call fcn.00431926
pop ecx
pop ecx
inc esi
cmp esi, edi
jl 0x4574ba
jmp case.0x457d67.617
xor esi, esi
test edi, edi
jle case.0x457d67.617
push 0
push esi
call fcn.00431926
inc esi
cmp esi, edi
pop ecx
pop ecx
jl 0x4574fe
jmp case.0x457d67.617
xor edi, edi
push edi
push ebx
lea ecx, [ebp - 0x14]
call fcn.00402d5b
mov esi, dword [eax]
push ebx
lea ecx, [ebp - 0x148c]
call fcn.004084cb
push 1
push esi
mov ebx, eax
call fcn.00432ed7
push eax
push ebx
call fcn.00433bfc
push dword [ebp - 0x14]
call dword [sym.imp.NSCRT.dll_free]
add esp, 0x14
push edi
mov dword [ebp - 0x14], edi
push edi
jmp 0x4584ee
push 0
mov esi, 0x493810
push esi
push ebx
call fcn.00432c9a
jmp 0x457585
push 0
mov esi, 0x492ff0
push esi
jmp 0x45757f
mov esi, 0x493810
push esi
push 0
jmp 0x45755b
mov esi, 0x492ff0
push esi
push 0
push ebx
call fcn.00432d35
add esp, 0xc
neg eax
sbb eax, eax
not eax
and eax, esi
jmp 0x456d7d
push dword [ebx + 4]
lea ecx, [ebp - 0x1cac]
call fcn.004084cb
push eax
push dword [ebx]
call fcn.00427fc0
pop ecx
pop ecx
push 0x64
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push pe_nt_image_headers32
push 0x100
push 0
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x4575b7
jmp 0x457bf1
mov eax, fcn.0040d1e7
jmp 0x456d7d
call fcn.004176fe
jmp 0x456d7d
xor eax, eax
cmp byte [0x484c08], al
jmp 0x4575fe
xor eax, eax
cmp byte [0x4844c8], al
setne al
jmp 0x456d7d
xor eax, eax
cmp byte [0x484c08], al
setne al
xor ecx, ecx
test ebx, ebx
setne cl
cmp eax, ecx
je case.default.0x4587f0
push 0
push 0x9c57
push 0x111
jmp 0x456f7b
xor eax, eax
cmp byte [0x4844c8], al
setne al
xor ecx, ecx
test ebx, ebx
setne cl
cmp eax, ecx
je case.default.0x4587f0
push 0
push 0x9c56
jmp 0x457627
cmp dword [ebx + 4], 2
jne 0x45766a
cmp byte [0x4867ca], 1
jne 0x45766a
xor esi, esi
mov dword [ebx + 4], esi
jmp 0x45766c
xor esi, esi
push dword [ebx]
lea ecx, [ebp - 0xa64]
call fcn.004084cb
lea eax, [ebp - 0xa64]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsURLW]
test eax, eax
je 0x4576d3
lea eax, [ebp - 0xa64]
push eax
call fcn.0043207d
cmp eax, esi
pop ecx
je 0x4576d3
cmp word [eax], si
je 0x4576d3
push esi
push esi
push eax
lea ecx, [ebp - 0xc]
call fcn.00402b8d
push dword [ebx + 0x10]
push dword [eax]
push dword [ebx + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push dword [ebp - 0xc]
call dword [sym.imp.NSCRT.dll_free]
mov dword [ebp - 0xc], esi
pop ecx
call fcn.004317a4
mov dword [ebx + 8], eax
jmp case.0x457d67.617
xor eax, eax
cmp dword [ebx + 4], esi
push esi
sete al
push esi
push eax
lea eax, [ebp - 0xa64]
push eax
call fcn.00432ed7
push eax
call fcn.0043289a
add esp, 0xc
push eax
lea ecx, [ebp - 8]
call fcn.00402b8d
push dword [ebx + 0x10]
push dword [eax]
push dword [ebx + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push dword [ebp - 8]
call dword [sym.imp.NSCRT.dll_free]
mov dword [ebp - 8], esi
jmp 0x4576c5
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.004244c0
jmp 0x4583ff
mov eax, 0x1a0
cmp esi, eax
jg 0x457b1c
je 0x457b11
add eax, 0xffffffb1
cmp esi, eax
jg 0x4578a0
je 0x457868
mov eax, 0x14b
cmp esi, eax
jg 0x457813
je 0x4577f7
sub esi, 0x127
je 0x4577ed
dec esi
je case.0x45738b.290
dec esi
je 0x4577b4
dec esi
je 0x4577a1
dec esi
jne case.default.0x4587f0
push dword [ebx + 4]
lea ecx, [ebp - 0x2cec]
call fcn.004084cb
push dword [ebx]
lea ecx, [ebp - 0x3d2c]
mov esi, eax
call fcn.004084cb
push esi
push eax
jmp 0x4585b4
test ebx, ebx
je case.0x457d67.617
push ebx
call fcn.004198fe
jmp 0x4585ba
test ebx, ebx
je case.0x457d67.617
push ebx
call fcn.00419790
jmp 0x4585ba
test ebx, ebx
je case.0x457d67.617
mov eax, dword [ebx]
test eax, eax
je case.0x457d67.617
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push eax
call fcn.004240e1
jmp 0x4587c6
call fcn.00423e0a
jmp 0x456d7d
cmp ebx, 0x10100000
jne 0x457809
mov eax, 0x48390c
jmp 0x456d7d
mov eax, 0x46ffcc
jmp 0x456d7d
sub esi, 0x14c
je 0x45785f
dec esi
je 0x457849
dec esi
je 0x45783f
dec esi
je 0x457835
dec esi
jne case.default.0x4587f0
mov eax, 0x485760
jmp 0x456d7d
mov eax, 0x486ef8
jmp 0x456d7d
mov eax, 0x487000
jmp 0x456d7d
push ebx
mov ecx, 0x49035c
call fcn.00410b72
push ebx
call fcn.00437afb
jmp 0x4585ba
and dword [ebx + 0x18], 0
jmp 0x458594
xor eax, eax
cmp dword [0x492fe8], eax
jne 0x457896
push eax
push eax
push 0x486ae8
call fcn.00402b25
mov esi, eax
push esi
call dword [sym.imp.NSCRT.dll__strdup]
push esi
mov dword [0x492fe8], eax
call dword [sym.imp.NSCRT.dll_free]
add esp, 0x14
mov eax, dword [0x492fe8]
jmp 0x456d7d
mov eax, 0x16c
cmp esi, eax
jg 0x457aa5
je 0x457a1a
sub esi, 0x152
je 0x457a10
sub esi, 0x16
je 0x457a03
dec esi
je 0x457992
dec esi
je 0x457980
dec esi
jne case.default.0x4587f0
lea eax, [ebp - 0xc6c]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x3c]
xor edi, edi
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x30], str.__foo
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x28], 0x44ef13
mov dword [ebp - 0x24], edi
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov esi, eax
cmp esi, edi
je case.default.0x4587f0
lea eax, [ebp - 0x244]
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
push esi
call fcn.00412d78
pop ecx
mov ecx, dword [0x49257c]
lea eax, [ebp - 0x244]
push eax
call fcn.0045645e
call fcn.00432daa
xor eax, eax
mov al, byte [0x4867c8]
shr eax, 1
not eax
and eax, 1
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.00433784
test byte [0x4867c8], 1
pop ecx
pop ecx
je 0x457976
push edi
push 2
call fcn.00434a2b
pop ecx
pop ecx
call fcn.00419219
jmp 0x4583dd
push 0
push ebx
push 1
call fcn.0040fe61
add esp, 0xc
jmp 0x458427
xor edi, edi
sub ebx, edi
je 0x4579bf
dec ebx
je 0x4579bb
dec ebx
je 0x4579b7
dec ebx
je 0x4579b3
dec ebx
je 0x4579af
dec ebx
jne case.default.0x4587f0
push 5
jmp 0x4579c1
push 3
jmp 0x4579c1
push 4
jmp 0x4579c1
push 6
jmp 0x4579c1
push 2
jmp 0x4579c1
push 7
mov esi, dword [sym.imp.USER32.dll_GetSubMenu]
push 3
push dword [0x497284]
call esi
push eax
call esi
mov esi, eax
cmp esi, edi
je case.default.0x4587f0
call dword [sym.imp.USER32.dll_GetMessagePos]
push edi
push dword [ebp + 8]
mov dword [ebp - 4], eax
movsx ecx, word [ebp - 2]
push edi
push ecx
movsx eax, ax
push eax
push 2
push esi
call dword [sym.imp.USER32.dll_TrackPopupMenu]
jmp case.default.0x4587f0
push ebx
push 0xffffffffffffffff
call fcn.00410277
jmp 0x457f31
mov eax, 0x486ae8
jmp 0x456d7d
mov ecx, dword [0x490354]
test ecx, ecx
mov esi, dword [sym.imp.USER32.dll_SetWindowLongA]
mov eax, ebx
push 0xfffffffffffffff8
mov dword [0x4924f4], eax
pop edi
je 0x457a47
test ebx, ebx
jne 0x457a3d
mov eax, dword [0x4924ec]
push eax
push edi
push ecx
call esi
mov eax, dword [0x4924f4]
mov ecx, dword [0x483b34]
test ecx, ecx
je 0x457a64
test eax, eax
jne 0x457a5a
mov eax, dword [0x4924ec]
push eax
push edi
push ecx
call esi
mov eax, dword [0x4924f4]
mov ecx, dword [0x48a508]
test ecx, ecx
je 0x457a81
test eax, eax
jne 0x457a77
mov eax, dword [0x4924ec]
push eax
push edi
push ecx
call esi
mov eax, dword [0x4924f4]
mov ecx, dword [0x48a504]
test ecx, ecx
je 0x457a99
test eax, eax
jne 0x457a94
mov eax, dword [0x4924ec]
push eax
push edi
push ecx
call esi
push ebx
call fcn.004092aa
pop ecx
jmp case.default.0x4587f0
sub esi, 0x16d
je 0x457afa
dec esi
je 0x457aef
sub esi, 0xe
je 0x457ad8
sub esi, 0x14
je 0x457ace
sub esi, 9
jne case.default.0x4587f0
push ebx
call fcn.0040dae5
jmp 0x4585ba
mov eax, dword [0x4965ac]
jmp 0x456d7d
cmp ebx, 0xffffffff
je 0x457ae3
mov dword [0x490350], ebx
push 1
call fcn.00438395
jmp 0x4585ba
push ebx
call fcn.004091f7
jmp 0x4585ba
mov eax, dword [0x4924f4]
test eax, eax
jne 0x456d7d
mov eax, dword [0x4924ec]
jmp 0x456d7d
mov dword [0x491d08], ebx
jmp case.0x457d67.617
cmp esi, 0x25b
jg 0x457ca5
cmp esi, 0x25a
jge case.0x457d67.617
lea eax, [esi - 0x1f7]
cmp eax, 0x1e
ja case.default.0x4587f0
movzx eax, byte [eax + 0x458a53]
jmp dword [eax*4 + 0x458a0f]
test ebx, ebx
jne 0x457b69
push str.genex.bmp
push 0xfc
call fcn.0044792c
jmp 0x457f31
cmp ebx, 1
jne 0x457b78
call fcn.0042b327
jmp 0x456d7d
cmp ebx, 2
jne 0x457b94
push 0
push 0
push 0x70
call fcn.0045edbd
push eax
call dword [sym.imp.NSCRT.dll_atoi]
jmp 0x4587c6
mov eax, ebx
sub eax, 3
neg eax
sbb eax, eax
not eax
and eax, dword [0x4823c4]
jmp 0x456d7d
test ebx, ebx
je 0x457bb9
push ebx
call fcn.004096a0
jmp 0x4588c4
mov eax, fcn.004096a0
jmp 0x456d7d
mov edi, 0x488c7c
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [0x488c78]
jmp 0x457be4
push ebx
push esi
call dword [ebx]
test eax, eax
pop ecx
pop ecx
jne 0x457bf8
mov esi, dword [esi + 0x1c]
test esi, esi
jne 0x457bd7
xor esi, esi
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
jmp 0x456d7d
mov esi, eax
jmp 0x457bea
mov edi, 0x488c7c
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x488c78]
jmp 0x457c16
cmp eax, ebx
je 0x457c1c
mov eax, dword [eax + 0x1c]
test eax, eax
jne 0x457c0f
jmp 0x457be8
xor esi, esi
inc esi
jmp 0x457bea
push ebx
call fcn.00408942
jmp 0x4588c4
push ebx
call fcn.00408b5c
jmp 0x4588c4
push ebx
call fcn.00408288
jmp 0x457a9f
push ebx
call fcn.00408288
jmp 0x457a9f
push ebx
call fcn.0040830f
jmp 0x4588c4
push ebx
call fcn.00408386
jmp 0x457a9f
push ebx
call fcn.004082df
jmp 0x457a9f
push ebx
call fcn.004083a4
jmp 0x457a9f
push ebx
call fcn.004083a4
jmp 0x457a9f
push ebx
call fcn.004083c0
jmp 0x4588c4
push ebx
call fcn.00408444
jmp 0x4588c4
push ebx
call fcn.0046719f
jmp 0x4588c4
sub esi, 0x25e
je 0x457d01
dec esi
dec esi
je 0x457cf5
dec esi
je 0x457cd5
dec esi
je 0x457cc9
dec esi
jne case.default.0x4587f0
mov dword [0x4924f0], ebx
jmp case.default.0x4587f0
movzx eax, byte [0x485d88]
jmp 0x456d7d
cmp ebx, 0xffffffff
jne 0x457ce0
dec dword [0x49251c]
cmp ebx, 1
jne 0x457ceb
inc dword [0x49251c]
mov eax, dword [0x49251c]
jmp 0x456d7d
movzx eax, byte [0x48554d]
jmp 0x456d7d
cmp ebx, 0xffffffff
jne 0x457d0c
dec dword [0x492518]
cmp ebx, 1
jne 0x457d17
inc dword [0x492518]
mov eax, dword [0x492518]
jmp 0x456d7d
mov eax, dword [0x4924f0]
jmp 0x456d7d
mov eax, 0x3b0
cmp esi, eax
jg 0x458338
je 0x458320
mov eax, 0x28c
cmp esi, eax
jg 0x45801d
je 0x457fd8
lea eax, [esi - 0x265]
cmp eax, 0x26
ja case.default.0x4587f0
movzx eax, byte [eax + 0x458acf]
jmp dword [eax*4 + 0x458a73]
movzx eax, byte [0x482bf6]
jmp 0x456d7d
movzx eax, byte [0x485d89]
jmp 0x456d7d
xor eax, eax
cmp dword [0x492530], eax
jmp 0x457fbc
inc dword [0x492530]
jmp 0x457da1
dec dword [0x492530]
mov eax, dword [0x492530]
jmp 0x456d7d
xor eax, eax
test ebx, ebx
sete al
mov dword [0x4924d8], eax
jmp case.default.0x4587f0
mov dword [0x492524], ebx
jmp case.default.0x4587f0
xor eax, eax
cmp ebx, eax
jl 0x456d7d
cmp ebx, 0x1d
jge 0x456d7d
cmp byte [0x482c78], al
je 0x456d7d
cmp dword [0x492524], eax
jne 0x456d7d
mov eax, dword [ebx*4 + 0x48af78]
jmp 0x456d7d
mov eax, str.out_ds.dll
jmp 0x456d7d
cmp bx, 1
jne 0x457e21
mov ecx, dword [0x4965a8]
xor eax, eax
cmp ecx, dword [0x496644]
jmp 0x457fbc
cmp bx, 2
jne 0x457e31
mov eax, 0x485868
jmp 0x456d7d
cmp bx, 3
jne 0x457e41
mov eax, 0x485550
jmp 0x456d7d
cmp bx, 4
jne 0x457ea5
xor edi, edi
cmp word [0x492de0], di
mov esi, 0x492de0
jne 0x457bf1
cmp word [0x485e98], di
push 0x104
je 0x457e94
push 0x485e98
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push esi
call fcn.00417162
cmp eax, edi
pop ecx
je 0x457bf1
push eax
push esi
call dword [sym.imp.USER32.dll_CharPrevW]
mov word [eax], di
jmp 0x457bf1
push str.English__US_
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
jmp 0x457bf1
cmp bx, 5
jne 0x457ebf
mov ecx, dword [0x49258c]
shr ebx, 0x10
push ebx
call fcn.0045ee05
jmp 0x456d7d
mov eax, dword [0x4965a8]
jmp 0x456d7d
cmp dword [0x482cbc], 0xe
mov ecx, dword [ebx]
mov dword [0x482cb8], ecx
je 0x457f0f
mov eax, dword [0x48d7a0]
test eax, eax
mov ebx, dword [ebx + 4]
mov dword [0x482cbc], ebx
je case.0x457d67.617
push 0x14
push 0x10
push 0x48
add ebx, 0xffffffe6
push ebx
add ecx, 0xffffff21
push ecx
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp case.0x457d67.617
mov eax, dword [ebx + 4]
mov dword [0x4860a0], eax
jmp case.0x457d67.617
call fcn.0042926b
jmp 0x456d7d
push ebx
push 0x900
call fcn.0044efac
pop ecx
jmp 0x4588c4
push 0
push 0x901
jmp 0x457f2c
mov eax, dword [0x490354]
jmp 0x456d7d
xor eax, eax
cmp byte [0x482c84], al
jmp 0x457fbc
xor eax, eax
cmp byte [0x482c84], al
setne al
xor ecx, ecx
test ebx, ebx
sete cl
cmp eax, ecx
je case.default.0x4587f0
push 0
push 0x9dcb
jmp 0x457627
mov eax, dword [0x492528]
jmp 0x456d7d
xor eax, eax
test ebx, ebx
setne al
mov dword [0x492528], eax
jmp case.default.0x4587f0
or eax, 0xffffffff
jmp 0x456d7d
cmp ebx, 0xffffffff
jne 0x457fae
movzx eax, byte [0x485758]
jmp 0x456d7d
cmp ebx, 1
jne 0x457fc4
xor eax, eax
cmp dword [0x482cbc], 0xe
sete al
jmp 0x456d7d
test ebx, ebx
jne case.0x457d67.617
movzx eax, byte [0x485441]
jmp 0x456d7d
mov ecx, dword [0x49252c]
lea eax, [ecx + 1]
jmp 0x45800c
lea esi, [edi*4 + 0x496580]
mov eax, dword [esi]
test eax, eax
je 0x458009
push eax
call fcn.004185e0
push dword [esi]
call dword [sym.imp.NSCRT.dll_free]
and dword [esi], 0
pop ecx
pop ecx
mov ecx, dword [0x49252c]
lea eax, [edi + 1]
push 0xa
cdq
pop esi
idiv esi
mov edi, edx
cmp edi, ecx
jne 0x457fe3
jmp case.0x457d67.617
mov eax, 0x3a5
cmp esi, eax
jg 0x45821a
je 0x4581cc
mov eax, 0x320
cmp esi, eax
jg 0x458112
je 0x4580e1
sub esi, 0x28d
je 0x4580d1
dec esi
je 0x4580c1
sub esi, 3
je 0x4580b7
sub esi, 9
je 0x4580ad
sub esi, 0x68
jne case.default.0x4587f0
cmp ebx, 0xffff
jbe 0x458096
and dword [ebx + 8], 0
cmp dword [0x48b144], 0
je case.0x457d67.617
push 0x483920
push ebx
call fcn.0044f00f
mov eax, dword [0x48b144]
mov dword [ebx + 8], eax
jmp 0x4585b9
test ebx, ebx
jne case.0x457d67.617
mov dword [0x490350], 0x14
jmp 0x457ae3
mov eax, dword [0x4838e0]
jmp 0x456d7d
mov eax, dword [0x496724]
jmp 0x456d7d
call fcn.00431f91
push eax
call fcn.00431f5e
jmp 0x4588c4
call fcn.00431f91
push eax
call fcn.00431f2b
jmp 0x4588c4
test ebx, ebx
jne 0x4580ef
mov eax, 0x42f52e
jmp 0x456d7d
cmp ebx, 1
jne 0x4580fe
mov eax, 0x42f50f
jmp 0x456d7d
mov eax, ebx
dec eax
dec eax
neg eax
sbb eax, eax
not eax
and eax, 0x42f55c
jmp 0x456d7d
sub esi, 0x321
je 0x4581ba
sub esi, 0x31
je case.0x457d67.617
dec esi
je 0x4581a7
sub esi, 0x31
je 0x45819d
sub esi, 0x14
jne case.default.0x4587f0
xor esi, esi
cmp ebx, esi
je case.0x457d67.617
mov eax, dword [ebx]
cmp eax, esi
je 0x458169
mov ecx, dword [ebx + 4]
cmp ecx, esi
je 0x458169
cmp eax, 6
jb 0x458157
push 6
pop eax
shl eax, 2
push eax
push ecx
push 0x482d60
call sub.NSCRT.dll_memcpy
add esp, 0xc
mov ebx, dword [ebx + 8]
cmp ebx, esi
je 0x458177
push ebx
call fcn.0044b390
pop ecx
push esi
call fcn.0044826c
cmp dword [0x482cb4], esi
pop ecx
je case.0x457d67.617
push esi
push esi
push dword [0x496560]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp case.0x457d67.617
mov eax, dword [0x482ca8]
jmp 0x456d7d
test ebx, ebx
je case.0x457d67.617
push ebx
call fcn.00419998
jmp 0x4588c4
mov eax, ebx
neg eax
sbb eax, eax
not eax
and eax, 0x42fcf8
jmp 0x456d7d
xor esi, esi
cmp ebx, esi
je case.0x457d67.617
push esi
push dword [ebx]
push esi
push dword [ebx + 8]
push dword [ebx + 4]
push 0x180
push 1
push dword [0x497284]
call dword [sym.imp.USER32.dll_GetSubMenu]
push eax
call dword [sym.imp.USER32.dll_TrackPopupMenu]
cmp eax, esi
je case.0x457d67.617
push esi
push eax
push 0x111
push dword [0x496654]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.0x457d67.617
lea eax, [esi - 0x3a6]
cmp eax, 9
ja case.default.0x4587f0
jmp dword [eax*4 + 0x458af7]
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040e566
jmp 0x45841a
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040e77a
jmp 0x45841a
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040e7cb
jmp 0x45841a
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040e8c9
jmp 0x45841a
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040edf0
jmp 0x45841a
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040e9c8
jmp 0x45841a
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040eb90
jmp 0x45841a
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040ebe1
jmp 0x45841a
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040edf0
jmp 0x45841a
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040ec32
jmp 0x45841a
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040ed46
jmp 0x45841a
mov eax, 0xbc3
cmp esi, eax
jg 0x45864c
je 0x458638
mov eax, 0x50d
cmp esi, eax
jg 0x45855d
je 0x458526
mov eax, 0x44e
cmp esi, eax
jg 0x458434
je 0x458422
sub esi, 0x3b1
je 0x458407
dec esi
je 0x4583f2
sub esi, 0x36
je 0x4583e7
sub esi, 0x64
je 0x4583af
dec esi
jne case.default.0x4587f0
xor edi, edi
call fcn.00431c56
xor ecx, ecx
test eax, eax
setg cl
mov esi, ecx
call fcn.00432daa
push edi
call fcn.004342c9
pop ecx
jmp 0x45842a
cmp ebx, 0xffff
jbe case.default.0x4587f0
mov eax, dword [ebx + 4]
test eax, eax
je 0x4583d2
push dword [ebx + 8]
push eax
push dword [ebx]
call fcn.0043316a
add esp, 0xc
jmp 0x4583dd
push 0
push dword [ebx]
call fcn.00434713
pop ecx
pop ecx
call fcn.00434aa8
jmp case.default.0x4587f0
push ebx
call fcn.00434d0d
jmp 0x457a9f
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040e0d2
add esp, 0xc
jmp 0x456d7d
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0040edf0
add esp, 0x14
jmp 0x456d7d
call fcn.00419219
xor esi, esi
inc esi
call fcn.00434aa8
jmp 0x457bf1
sub esi, 0x4b1
je 0x458508
sub esi, 0x27
je 0x4584fe
sub esi, 5
je 0x4584d8
sub esi, 0x2e
je 0x458477
dec esi
jne case.default.0x4587f0
cmp ebx, 1
jne 0x45846d
call fcn.00428a16
jmp 0x456d7d
call fcn.00428403
jmp 0x456d7d
cmp dword [ebx + 4], 2
jne 0x45848a
cmp byte [0x4867ca], 1
jne 0x45848a
and dword [ebx + 4], 0
push dword [ebx]
call dword [sym.imp.SHLWAPI.dll_PathIsURLW]
test eax, eax
je 0x4584ad
push dword [ebx]
call fcn.0043207d
test eax, eax
pop ecx
je 0x4584ad
cmp word [eax], 0
je 0x4584ad
push dword [ebx + 0x10]
jmp 0x4584c9
push dword [ebx + 0x10]
xor eax, eax
cmp dword [ebx + 4], eax
sete al
push eax
push dword [ebx]
call fcn.00432ed7
push eax
call fcn.0043289a
add esp, 0xc
push eax
push dword [ebx + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
jmp 0x4576c6
push 1
push ebx
call fcn.00432ed7
push eax
push ebx
call fcn.00433bfc
add esp, 0x10
push 0
push 0
push 0x401
push dword [0x496560]
jmp 0x45820f
mov eax, fcn.0040d00b
jmp 0x456d7d
test ebx, ebx
je 0x45851c
push 0x485028
push 0x104
push ebx
call fcn.00467521
mov eax, 0x4868d8
jmp 0x456d7d
push dword [ebx + 4]
push dword [ebx]
call fcn.00427fc0
pop ecx
pop ecx
push 0x64
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push pe_nt_image_headers32
push 0x100
push 0
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x45853c
jmp 0x457bf1
mov eax, 0xbb9
cmp esi, eax
jg 0x4585cc
je 0x4585c2
sub esi, 0x513
je 0x4585af
dec esi
je 0x4585a7
sub esi, 0x20
je 0x45858d
sub esi, 0x29f
je case.0x458673.3018
dec esi
jne case.default.0x4587f0
jmp case.0x457d67.617
mov dword [ebx + 0x18], 1
push ebx
mov ecx, 0x49035c
call fcn.00410c0b
push ebx
call fcn.004379c9
jmp 0x4585ba
mov dword [0x482e60], ebx
jmp case.0x457d67.617
push dword [ebx + 4]
push dword [ebx]
call fcn.00423e88
pop ecx
pop ecx
xor eax, eax
jmp 0x456d7d
call fcn.0040f89f
jmp 0x456d7d
sub esi, 0xbbc
je 0x45861b
dec esi
je 0x4585f4
dec esi
dec esi
je 0x4585e3
sub esi, 3
jmp case.default.0x4587f0
xor eax, eax
test ebx, ebx
sete al
mov dword [0x4924dc], eax
jmp case.default.0x4587f0
cmp dword [0x48c774], 0
jne 0x458604
push ebx
call fcn.00433c8e
pop ecx
mov ecx, dword [0x492570]
push 0
push ebx
push 0xa
push 0x6d657461
call fcn.00455ab1
jmp case.0x457d67.617
cmp dword [0x48c774], 0
jne case.0x457d67.617
push ebx
lea ecx, [ebp - 0x4d6c]
call fcn.004084cb
push eax
call fcn.00433c8e
jmp 0x4585ba
cmp ebx, 2
ja case.0x457d67.617
push ebx
call fcn.00405779
jmp 0x4585ba
cmp esi, 0xbd3
jg 0x4587ce
cmp esi, 0xbd2
jge 0x4587a5
lea eax, [esi - 0xbc4]
cmp eax, 0xd
ja case.default.0x4587f0
jmp dword [eax*4 + 0x458b1f]
mov eax, dword [0x492560]
jmp 0x456d7d
xor eax, eax
cmp dword [0x487334], eax
jmp 0x457fbc
mov eax, 0x493d3c
jmp 0x456d7d
test ebx, ebx
mov eax, dword [0x483908]
jne 0x4586af
inc dword [0x483908]
jmp 0x456d7d
add dword [0x483908], ebx
jmp 0x456d7d
push ebx
mov ecx, 0x493d50
call fcn.0045962f
jmp case.default.0x4587f0
push dword [0x4924ec]
call fcn.0042aaea
pop ecx
mov ecx, 0x493d74
call fcn.0045a97c
jmp case.default.0x4587f0
sub ebx, 0
je 0x4586fb
dec ebx
jne case.default.0x4587f0
mov eax, fcn.0045b798
jmp 0x456d7d
mov eax, fcn.0045b790
jmp 0x456d7d
call fcn.00459d6a
jmp 0x456d7d
push dword [ebx + 4]
mov ecx, 0x493d3c
push dword [ebx]
call fcn.0045a03e
jmp 0x4576cb
mov eax, 0x485238
jmp 0x456d7d
push 0x15
push str.http:__client.winamp.com
push ebx
call dword [sym.imp.NSCRT.dll__strnicmp]
add esp, 0xc
test eax, eax
jne 0x45879f
push 0x168
call sub.NSCRT.dll_void____cdecl_operator_new_unsigned_int_
test eax, eax
pop ecx
je 0x45875a
mov ecx, eax
call fcn.00456c9e
jmp 0x45875c
xor eax, eax
mov ecx, eax
mov dword [0x48e400], eax
call fcn.0042b48a
mov ecx, dword [0x48e400]
push 1
call fcn.0041f525
mov eax, dword [0x48e400]
push 5
push dword [eax + 0x34]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x48e400]
push dword [eax + 0x34]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [0x48e400]
push ebx
call fcn.0042b589
push ebx
jmp 0x457251
test ebx, ebx
je case.0x457d67.617
mov eax, dword [ebx]
test eax, eax
je case.0x457d67.617
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push eax
call fcn.0042429c
add esp, 0x10
jmp 0x456d7d
mov eax, 0x10000
cmp esi, eax
jg case.default.0x4587f0
je 0x4588ca
lea eax, [esi - 0xbd4]
cmp eax, 8
ja case.default.0x4587f0
jmp dword [eax*4 + 0x458b57]
mov eax, ebx
sub eax, 0
je 0x45882a
dec eax
je 0x45881b
push ebx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x457d67.617
push ebx
call fcn.00418295
jmp 0x4585ba
call fcn.004181d3
neg eax
sbb eax, eax
inc eax
jmp 0x456d7d
call fcn.0041809a
jmp 0x458820
mov al, byte [ebx]
cmp al, 0x68
je 0x45883b
cmp al, 0x48
jne 0x45884e
cmp byte [ebx + 1], 0
jne 0x45884e
push ebx
push 0
call fcn.00458b97
jmp 0x4585b9
push 0
push ebx
lea ecx, [ebp - 0x1c]
call fcn.00402d5b
push dword [eax]
push 0
call fcn.00458b97
push dword [ebp - 0x1c]
call dword [sym.imp.NSCRT.dll_free]
add esp, 0xc
jmp case.0x457d67.617
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.00423c02
jmp 0x4583ff
push ebx
call fcn.0043181f
jmp 0x4588c4
call fcn.00431879
jmp 0x456d7d
mov eax, 0x496a60
jmp 0x456d7d
mov eax, 0x496240
jmp 0x456d7d
and dword [ebp - 4], 0
lea eax, [ebp - 4]
push eax
push ebx
call fcn.00427c56
jmp 0x457f31
push ebx
call fcn.00404301
pop ecx
jmp 0x456d7d
test ebx, ebx
je case.0x457d67.617
mov eax, dword [0x492dd8]
test eax, eax
mov dword [ebp - 4], 0x10001
mov esi, eax
mov edi, eax
je 0x458907
push ebx
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x4588ff
inc dword [ebp - 4]
mov edi, esi
mov esi, dword [esi + 4]
test esi, esi
jne 0x4588e6
test esi, esi
jne 0x458956
test edi, edi
jne 0x458931
push 8
call dword [sym.imp.NSCRT.dll_malloc]
test eax, eax
pop ecx
mov dword [0x492dd8], eax
je case.0x457d67.617
and dword [eax + 4], 0
push ebx
call dword [sym.imp.NSCRT.dll__strdup]
pop ecx
mov ecx, dword [0x492dd8]
jmp 0x458954
push 8
call dword [sym.imp.NSCRT.dll_malloc]
test eax, eax
pop ecx
mov dword [edi + 4], eax
je case.0x457d67.617
and dword [eax + 4], 0
push ebx
call dword [sym.imp.NSCRT.dll__strdup]
pop ecx
mov ecx, dword [edi + 4]
mov dword [ecx], eax
mov eax, dword [ebp - 4]
jmp 0x456d7d