Function at 0x430cd0
Capabilities:
Lock the desktop
Shutdown system

Disassembly:
push 0x38
push 0xaa59a8
call fcn.004f0bc0
mov eax, ecx
mov dword [ebp - 0x20], eax
cmp dword [ebp + 0x1c], 0
jne 0x432193
xor esi, esi
mov dword [ebp - 4], esi
mov edx, dword [ebp + 0xc]
xor edi, edi
inc edi
cmp edx, 5
jne 0x430d24
mov dword [ebp - 0x1c], edi
lea ecx, [ebp - 0x1c]
push ecx
sub esp, 0xc
mov ecx, eax
call fcn.00433b2d
mov ebx, dword [ebp + 0x18]
mov dword [ebx], eax
cmp dword [ebp - 0x1c], esi
je 0x430d29
mov dword [ebp - 4], 0xfffffffe
mov eax, edi
jmp 0x432195
mov ebx, dword [ebp + 0x18]
jmp 0x430d2f
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
cmp edx, 0x10
jne 0x430d52
mov dword [ebp - 0x1c], edi
lea ecx, [ebp - 0x1c]
push ecx
push ecx
push dword [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.00433c13
mov dword [ebx], eax
cmp dword [ebp - 0x1c], 0
jne 0x430d16
mov edx, dword [ebp + 0xc]
cmp edx, 2
jne 0x430d74
mov dword [ebp - 0x1c], edi
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
mov ecx, dword [ebp - 0x20]
call fcn.00435332
mov dword [ebx], eax
cmp dword [ebp - 0x1c], 0
jne 0x430d16
mov edx, dword [ebp + 0xc]
cmp edx, edi
jne 0x430d8a
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, dword [ebp - 0x20]
call fcn.00432f8b
mov dword [ebx], eax
jmp 0x430d16
cmp edx, 0x113
jne 0x430da5
mov dword [ebp - 0x1c], edi
push ecx
push ecx
push dword [ebp + 0x10]
push ecx
mov ecx, dword [ebp - 0x20]
call fcn.00433601
jmp 0x430d86
cmp edx, 0x122
jne 0x430dc0
mov dword [ebp - 0x1c], edi
push ecx
push ecx
push dword [ebp + 0x10]
push ecx
mov ecx, dword [ebp - 0x20]
call fcn.00434a0e
jmp 0x430d86
cmp edx, 0x16
jne 0x430dea
mov dword [ebp - 0x1c], edi
mov eax, dword [0xd58f54]
test eax, eax
mov ecx, esi
je 0x430dd6
lea ecx, [eax + 0x5c]
push edi
call fcn.00420a66
mov ecx, edi
call fcn.004df2fa
mov dword [ebx], esi
jmp 0x430d16
cmp edx, 0x24
jne 0x430e05
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp + 0x14]
mov dword [eax + 0x18], 0x64
mov dword [eax + 0x1c], 0x50
jmp 0x430de3
mov eax, dword [ebp - 0x20]
cmp edx, dword [eax + 0x118c]
jne 0x430e33
mov dword [ebp - 0x1c], edi
lea ecx, [ebp - 0x1c]
push ecx
sub esp, 0xc
mov ecx, eax
call fcn.004345bd
mov dword [ebx], eax
cmp dword [ebp - 0x1c], 0
jne 0x430d16
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x20]
cmp edx, 0x312
jne 0x430e50
mov dword [ebp - 0x1c], edi
push ecx
push ecx
push dword [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004356bd
jmp 0x430d86
cmp edx, 0x112
jne 0x430e7a
mov dword [ebp - 0x1c], edi
lea ecx, [ebp - 0x1c]
push ecx
push ecx
push dword [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.00433bbb
mov dword [ebx], eax
cmp dword [ebp - 0x1c], 0
jne 0x430d16
mov edx, dword [ebp + 0xc]
cmp edx, 0x11f
jne 0x430e8d
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], edi
jmp 0x430de3
mov eax, dword [ebp + 0x10]
movzx ecx, ax
cmp edx, 0x111
jne 0x430ee7
mov eax, ecx
mov ebx, ecx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], eax
mov eax, 0xe141
cmp ax, cx
mov ebx, dword [ebp + 0x18]
jne 0x430efb
mov dword [ebp - 0x1c], edi
push esi
push esi
push pe_nt_image_headers32
mov eax, dword [ebp - 0x20]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_PostMessageA]
push str.ID_APP_EXIT
mov edx, str.OnFileExit
mov dword [ebx], esi
mov ecx, str.CMainFrame
call fcn.0041e74f
pop ecx
jmp 0x430d16
movzx ebx, ax
mov dword [ebp - 0x24], ebx
movzx ebx, ax
mov dword [ebp - 0x28], ebx
movzx ebx, ax
mov dword [ebp - 0x2c], ebx
jmp 0x430f01
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x38]
movzx ebx, cx
mov dword [ebp - 0x30], ebx
movzx ebx, cx
mov dword [ebp - 0x34], ebx
movzx ebx, cx
mov dword [ebp - 0x38], ebx
movzx ecx, cx
mov dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, cx
mov ebx, dword [ebp - 0x28]
movzx ebx, bx
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x2c]
movzx ebx, bx
mov dword [ebp - 0x2c], ebx
cmp edx, 0x111
jne 0x430f7f
mov eax, dword [ebp - 0x38]
movzx ecx, ax
mov eax, dword [ebp - 0x34]
movzx eax, ax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x30]
movzx ebx, ax
mov dword [ebp - 0x2c], ebx
movzx eax, ax
mov dword [ebp - 0x24], eax
mov eax, 0x834e
cmp ax, word [ebp - 0x44]
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x430f85
mov dword [ebp - 0x1c], edi
call fcn.004b2f6c
push str.ID_SAVE_HAJACKTHIS
mov edx, str.OnSaveHajackthis
jmp 0x430ed5
movzx ebx, ax
mov dword [ebp - 0x24], ebx
movzx ebx, cx
mov dword [ebp - 0x34], ebx
movzx edx, cx
mov dword [ebp - 0x38], edx
movzx edx, cx
mov dword [ebp - 0x44], edx
movzx ecx, cx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, cx
mov ebx, dword [ebp - 0x2c]
movzx edx, bx
mov dword [ebp - 0x2c], edx
mov ebx, dword [ebp - 0x24]
movzx edx, bx
mov dword [ebp - 0x28], edx
mov edx, dword [ebp + 0xc]
cmp edx, 0x111
jne 0x43100f
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x38]
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
movzx ebx, ax
mov dword [ebp - 0x28], ebx
movzx eax, ax
mov dword [ebp - 0x24], eax
mov eax, 0x8122
cmp ax, word [ebp - 0x30]
mov ebx, dword [ebp + 0x18]
jne 0x431015
mov dword [ebp - 0x1c], edi
mov ecx, dword [ebp - 0x20]
call fcn.00436884
mov eax, dword [ebp - 0x20]
mov dword [eax + 0x1014], edi
push str.ID_CHECK_VERSION
mov edx, str.OnVersionCheck
jmp 0x430ed5
movzx ebx, ax
mov dword [ebp - 0x24], ebx
movzx ebx, cx
mov dword [ebp - 0x34], ebx
movzx eax, cx
mov dword [ebp - 0x38], eax
movzx eax, cx
mov dword [ebp - 0x44], eax
movzx eax, cx
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x2c]
movzx ecx, cx
mov ebx, dword [ebp - 0x28]
movzx eax, bx
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x24]
movzx eax, bx
mov dword [ebp - 0x28], eax
cmp edx, 0x111
mov eax, dword [ebp + 0x10]
jne 0x4310b7
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x38]
movzx ebx, ax
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x34]
movzx eax, bx
mov dword [ebp - 0x28], eax
movzx ebx, bx
mov dword [ebp - 0x24], ebx
mov eax, 0x83a7
cmp ax, word [ebp - 0x30]
mov ebx, dword [ebp + 0x18]
jne 0x4310bd
mov dword [ebp - 0x1c], edi
cmp dword [0xd5b5d8], 0
jne 0x43109f
mov dword [0xd5b5d8], edi
mov dword [ebp + 0x18], str.SeShutdownPrivilege
mov edx, edi
lea ecx, [ebp + 0x18]
call fcn.0042627e
push esi
push 8
call dword [sym.imp.USER32.dll_ExitWindowsEx]
push str.ID_TOOLS_TURNOFF
mov edx, str.OnToolsTurnOff
jmp 0x430ed5
movzx ebx, ax
mov dword [ebp - 0x24], ebx
movzx ebx, cx
mov dword [ebp - 0x34], ebx
movzx eax, cx
mov dword [ebp - 0x38], eax
movzx eax, cx
mov dword [ebp - 0x44], eax
movzx eax, cx
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x2c]
movzx ecx, cx
mov ebx, dword [ebp - 0x28]
movzx eax, bx
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x24]
movzx eax, bx
mov dword [ebp - 0x28], eax
cmp edx, 0x111
mov eax, dword [ebp + 0x10]
jne 0x431162
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x38]
movzx ebx, ax
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x34]
movzx eax, bx
mov dword [ebp - 0x28], eax
movzx ebx, bx
mov dword [ebp - 0x24], ebx
mov eax, 0x83a8
cmp ax, word [ebp - 0x30]
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x431168
mov dword [ebp - 0x1c], edi
cmp dword [0xd5b5d4], 0
jne 0x43114a
mov dword [0xd5b5d4], edi
mov dword [ebp - 0x44], str.SeShutdownPrivilege
mov edx, edi
lea ecx, [ebp - 0x44]
call fcn.0042627e
push esi
push 2
call dword [sym.imp.USER32.dll_ExitWindowsEx]
push str.ID_TOOLS_RESTART
mov edx, str.OnToolsRestart
jmp 0x430ed5
movzx ebx, ax
mov dword [ebp - 0x24], ebx
movzx ebx, cx
mov dword [ebp - 0x34], ebx
movzx edx, cx
mov dword [ebp - 0x38], edx
movzx edx, cx
mov dword [ebp - 0x44], edx
movzx ecx, cx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, cx
mov ebx, dword [ebp - 0x28]
movzx edx, bx
mov dword [ebp - 0x2c], edx
mov ebx, dword [ebp - 0x24]
movzx edx, bx
mov dword [ebp - 0x28], edx
cmp dword [ebp + 0xc], 0x111
jne 0x4311ea
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x38]
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
movzx ebx, ax
mov dword [ebp - 0x28], ebx
movzx eax, ax
mov dword [ebp - 0x24], eax
mov eax, 0x83a9
cmp ax, word [ebp - 0x30]
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x4311f0
mov dword [ebp - 0x1c], edi
push esi
push esi
call dword [sym.imp.USER32.dll_ExitWindowsEx]
push str.ID_TOOLS_LOGOFF
mov edx, str.OnToolsLogOff
jmp 0x430ed5
movzx ebx, ax
mov dword [ebp - 0x24], ebx
movzx ebx, cx
mov dword [ebp - 0x34], ebx
movzx edx, cx
mov dword [ebp - 0x38], edx
movzx edx, cx
mov dword [ebp - 0x44], edx
movzx ecx, cx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, cx
mov ebx, dword [ebp - 0x28]
movzx edx, bx
mov dword [ebp - 0x2c], edx
mov ebx, dword [ebp - 0x24]
movzx edx, bx
mov dword [ebp - 0x28], edx
cmp dword [ebp + 0xc], 0x111
jne 0x431270
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x38]
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
movzx ebx, ax
mov dword [ebp - 0x28], ebx
movzx eax, ax
mov dword [ebp - 0x24], eax
mov eax, 0x83aa
cmp ax, word [ebp - 0x30]
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x431276
mov dword [ebp - 0x1c], edi
call dword [sym.imp.USER32.dll_LockWorkStation]
push str.ID_TOOLS_SWITCHUSER
mov edx, str.OnToolsSwitchUser
jmp 0x430ed5
movzx ebx, ax
mov dword [ebp - 0x24], ebx
movzx ebx, cx
mov dword [ebp - 0x34], ebx
movzx edx, cx
mov dword [ebp - 0x38], edx
movzx edx, cx
mov dword [ebp - 0x44], edx
movzx ecx, cx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, cx
mov ebx, dword [ebp - 0x28]
movzx edx, bx
mov dword [ebp - 0x2c], edx
mov ebx, dword [ebp - 0x24]
movzx edx, bx
mov dword [ebp - 0x28], edx
mov edx, dword [ebp + 0xc]
cmp edx, 0x111
jne 0x4312fc
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x38]
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
movzx ebx, ax
mov dword [ebp - 0x28], ebx
movzx eax, ax
mov dword [ebp - 0x24], eax
mov eax, 0xe800
cmp ax, word [ebp - 0x30]
mov ebx, dword [ebp + 0x18]
jne 0x431302
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, dword [ebp - 0x20]
call fcn.00433a27
mov dword [ebx], eax
push str.ID_VIEW_TOOLBAR
mov edx, str.OnViewToolBar
jmp 0x430ed7
movzx ebx, ax
mov dword [ebp - 0x24], ebx
movzx ebx, cx
mov dword [ebp - 0x34], ebx
movzx eax, cx
mov dword [ebp - 0x38], eax
movzx eax, cx
mov dword [ebp - 0x44], eax
movzx eax, cx
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x2c]
movzx ecx, cx
mov ebx, dword [ebp - 0x28]
movzx eax, bx
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x24]
movzx eax, bx
mov dword [ebp - 0x28], eax
cmp edx, 0x111
mov eax, dword [ebp + 0x10]
jne 0x4313ac
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x38]
movzx ebx, ax
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x34]
movzx eax, bx
mov dword [ebp - 0x28], eax
movzx ebx, bx
mov dword [ebp - 0x24], ebx
mov eax, 0xe801
cmp ax, word [ebp - 0x30]
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x4313b2
mov dword [ebp - 0x1c], edi
mov eax, dword [0xd58f54]
test eax, eax
mov edx, esi
je 0x4313a8
lea edx, [eax + 0x5c]
lea ecx, [eax + 0x5c]
xor eax, eax
cmp dword [edx + 0x38c], esi
sete al
mov dword [ecx + 0x38c], eax
mov ecx, dword [ebp - 0x20]
call fcn.00433a74
push str.ID_VIEW_STATUS_BAR
mov edx, str.OnViewStatusBar
jmp 0x430ed5
mov ecx, esi
jmp 0x431380
movzx ebx, ax
mov dword [ebp - 0x24], ebx
movzx ebx, cx
mov dword [ebp - 0x34], ebx
movzx edx, cx
mov dword [ebp - 0x38], edx
movzx edx, cx
mov dword [ebp - 0x44], edx
movzx ecx, cx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, cx
mov ebx, dword [ebp - 0x28]
movzx edx, bx
mov dword [ebp - 0x2c], edx
mov ebx, dword [ebp - 0x24]
movzx edx, bx
mov dword [ebp - 0x28], edx
mov edx, dword [ebp + 0xc]
cmp edx, 0x111
jne 0x431438
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x38]
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
movzx ebx, ax
mov dword [ebp - 0x28], ebx
movzx eax, ax
mov dword [ebp - 0x24], eax
mov eax, 0x83d0
cmp ax, word [ebp - 0x30]
mov ebx, dword [ebp + 0x18]
jne 0x43143e
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, dword [ebp - 0x20]
call fcn.00433ae1
mov dword [ebx], eax
push str.ID_VIEW_NAME_FILTER
mov edx, str.OnViewNameFilter
jmp 0x430ed7
movzx ebx, ax
mov dword [ebp - 0x24], ebx
movzx ebx, cx
mov dword [ebp - 0x34], ebx
movzx eax, cx
mov dword [ebp - 0x38], eax
movzx eax, cx
mov dword [ebp - 0x44], eax
movzx eax, cx
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x2c]
movzx ecx, cx
mov ebx, dword [ebp - 0x28]
movzx eax, bx
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x24]
movzx eax, bx
mov dword [ebp - 0x28], eax
cmp edx, 0x111
mov eax, dword [ebp + 0x10]
jne 0x4314e5
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x38]
movzx ebx, ax
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x34]
movzx eax, bx
mov dword [ebp - 0x28], eax
movzx ebx, bx
mov dword [ebp - 0x24], ebx
mov eax, 0x8072
cmp ax, word [ebp - 0x30]
mov ebx, dword [ebp + 0x18]
jne 0x4314ee
mov dword [ebp - 0x1c], edi
mov eax, dword [0xd58f54]
test eax, eax
mov edx, esi
je 0x4314e1
lea edx, [eax + 0x5c]
lea ecx, [eax + 0x5c]
xor eax, eax
cmp dword [edx + 0x380], esi
sete al
mov dword [ecx + 0x380], eax
mov ecx, dword [ebp - 0x20]
call fcn.004336c2
push str.ID_VIEW_ALWAYSONTOP
mov edx, str.OnViewAlwaysOnTop
jmp 0x430ed5
mov ecx, esi
jmp 0x4314b9
movzx edx, ax
mov dword [ebp - 0x24], edx
mov edx, dword [ebp + 0xc]
movzx ebx, cx
mov dword [ebp - 0x34], ebx
movzx eax, cx
mov dword [ebp - 0x38], eax
movzx eax, cx
mov dword [ebp - 0x44], eax
movzx ecx, cx
mov ebx, dword [ebp - 0x2c]
movzx ebx, bx
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x28]
movzx eax, bx
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
movzx eax, bx
mov dword [ebp - 0x24], eax
cmp edx, 0x111
mov eax, dword [ebp + 0x10]
jne 0x431573
mov eax, dword [ebp - 0x44]
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x38]
movzx eax, bx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
movzx ebx, ax
mov dword [ebp - 0x24], ebx
movzx eax, ax
mov dword [ebp - 0x30], eax
lea eax, [ecx + 0x7c97]
cmp ax, 0x13
mov ebx, dword [ebp + 0x18]
ja 0x431579
mov dword [ebp - 0x1c], edi
mov dword [ebx], esi
push ecx
mov edx, str.OnLanguage
mov ecx, str.CMainFrame
call fcn.0041e6ff
jmp 0x430ee1
movzx eax, ax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
movzx ecx, ax
mov dword [ebp - 0x44], ecx
movzx ecx, ax
mov dword [ebp - 0x38], ecx
movzx ecx, ax
mov dword [ebp - 0x34], ecx
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
movzx eax, ax
mov ecx, dword [ebp - 0x24]
movzx ecx, cx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, cx
mov dword [ebp - 0x24], ecx
cmp edx, 0x111
jne 0x4317a2
mov eax, dword [ebp - 0x34]
movzx eax, ax
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov ebx, dword [ebp - 0x44]
movzx ebx, bx
mov dword [ebp - 0x24], ebx
mov ebx, 0x811b
cmp bx, word [ebp - 0x2c]
mov ebx, dword [ebp + 0x18]
jne 0x431626
mov dword [ebp - 0x1c], edi
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
mov ecx, dword [ebp - 0x20]
call fcn.00433705
mov dword [ebx], eax
push str.ID_PROC_HIGHLIGHT_NEW
mov edx, str.OnHighlightNew
mov ecx, str.CMainFrame
call fcn.0041e74f
pop ecx
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov ecx, dword [ebp - 0x34]
movzx ecx, cx
mov edx, dword [ebp - 0x38]
movzx edx, dx
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x1c], 0
jne 0x430d16
mov edx, dword [ebp + 0xc]
movzx ebx, ax
mov dword [ebp - 0x44], ebx
movzx ebx, ax
mov dword [ebp - 0x34], ebx
movzx eax, ax
mov dword [ebp - 0x38], eax
movzx eax, cx
mov ecx, dword [ebp - 0x24]
movzx ecx, cx
cmp edx, 0x111
jne 0x4316a4
mov eax, ebx
movzx eax, ax
mov ecx, dword [ebp - 0x44]
movzx ecx, cx
mov ebx, 0x811c
cmp bx, word [ebp - 0x38]
mov ebx, dword [ebp + 0x18]
jne 0x4316a4
mov dword [ebp - 0x1c], edi
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
mov ecx, dword [ebp - 0x20]
call fcn.00433759
mov dword [ebx], eax
push str.ID_PROC_HIDE_MICROSOFT
mov edx, str.OnHideMicrosoft
mov ecx, str.CMainFrame
call fcn.0041e74f
pop ecx
mov eax, dword [ebp - 0x38]
movzx eax, ax
mov ecx, dword [ebp - 0x34]
movzx ecx, cx
cmp dword [ebp - 0x1c], 0
jne 0x430d16
mov edx, dword [ebp + 0xc]
movzx ebx, ax
mov dword [ebp - 0x44], ebx
movzx eax, ax
mov dword [ebp - 0x38], eax
movzx eax, cx
cmp edx, 0x111
mov ebx, dword [ebp + 0x18]
jne 0x43170b
mov eax, dword [ebp - 0x44]
movzx eax, ax
mov ecx, 0x811d
cmp cx, word [ebp - 0x38]
jne 0x43170b
mov dword [ebp - 0x1c], edi
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
mov ecx, dword [ebp - 0x20]
call fcn.004337ea
mov dword [ebx], eax
push str.ID_HIGHLIGHT_RUNNING
mov edx, str.OnHighlightRun
mov ecx, str.CMainFrame
call fcn.0041e74f
pop ecx
mov eax, dword [ebp - 0x38]
movzx eax, ax
cmp dword [ebp - 0x1c], 0
jne 0x430d16
mov edx, dword [ebp + 0xc]
movzx eax, ax
cmp edx, 0x111
jne 0x431756
mov ecx, 0x8120
cmp cx, ax
jne 0x431756
mov dword [ebp - 0x1c], edi
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
mov ecx, dword [ebp - 0x20]
call fcn.0043383e
mov dword [ebx], eax
push str.ID_STARTUP_SECURITY_ANALISIS_COLOR
mov edx, str.OnHighlightStartup
mov ecx, str.CMainFrame
call fcn.0041e74f
pop ecx
cmp dword [ebp - 0x1c], 0
jne 0x430d16
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
movzx ecx, ax
mov dword [ebp - 0x44], ecx
cmp edx, 0x111
jne 0x4317aa
movzx eax, cx
mov ebx, eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], eax
lea eax, [ecx + 0x7e50]
cmp ax, 0x63
mov ebx, dword [ebp + 0x18]
ja 0x4317c1
mov dword [ebp - 0x1c], edi
push ecx
push ecx
push ecx
push ecx
call fcn.00436916
mov dword [ebx], eax
push dword [ebp - 0x44]
mov edx, str.OnToolsNtStuff
jmp 0x431564
mov ecx, dword [ebp - 0x28]
jmp 0x431626
movzx ecx, cx
movzx ebx, ax
mov dword [ebp - 0x38], ebx
movzx ebx, ax
mov dword [ebp - 0x34], ebx
movzx ebx, ax
mov dword [ebp - 0x30], ebx
jmp 0x4317c7
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x2c]
movzx ebx, cx
mov dword [ebp - 0x28], ebx
movzx ebx, cx
mov dword [ebp - 0x2c], ebx
movzx ebx, cx
mov dword [ebp - 0x44], ebx
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov ebx, dword [ebp - 0x34]
movzx ebx, bx
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x30]
movzx ebx, bx
mov dword [ebp - 0x34], ebx
cmp edx, 0x111
jne 0x43184d
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x28]
movzx ebx, ax
mov dword [ebp - 0x34], ebx
movzx eax, ax
mov dword [ebp - 0x30], eax
mov eax, 0x8352
cmp ax, word [ebp - 0x24]
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x431853
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, dword [ebp - 0x20]
call fcn.00433984
mov dword [ebx], eax
push str.ID_TOOLS_VIRUSTOTAL
mov edx, str.OnToolsVirusTotal
jmp 0x430ed7
movzx ebx, ax
mov dword [ebp - 0x30], ebx
movzx ebx, cx
mov dword [ebp - 0x28], ebx
movzx edx, cx
mov dword [ebp - 0x2c], edx
movzx edx, cx
mov dword [ebp - 0x44], edx
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov ebx, dword [ebp - 0x34]
movzx edx, bx
mov dword [ebp - 0x38], edx
mov ebx, dword [ebp - 0x30]
movzx edx, bx
mov dword [ebp - 0x34], edx
cmp dword [ebp + 0xc], 0x111
jne 0x4318d7
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x28]
movzx ebx, ax
mov dword [ebp - 0x34], ebx
movzx eax, ax
mov dword [ebp - 0x30], eax
mov eax, 0xe140
cmp ax, word [ebp - 0x24]
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x4318dd
mov dword [ebp - 0x1c], edi
sub esp, 0x10
call fcn.00436d90
mov dword [ebx], eax
push str.ID_APP_ABOUT
mov edx, str.OnAppAbout
jmp 0x430ed7
movzx ebx, ax
mov dword [ebp - 0x30], ebx
movzx ebx, cx
mov dword [ebp - 0x28], ebx
movzx edx, cx
mov dword [ebp - 0x2c], edx
movzx edx, cx
mov dword [ebp - 0x44], edx
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov ebx, dword [ebp - 0x34]
movzx edx, bx
mov dword [ebp - 0x38], edx
mov ebx, dword [ebp - 0x30]
movzx edx, bx
mov dword [ebp - 0x34], edx
cmp dword [ebp + 0xc], 0x111
jne 0x43195e
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x28]
movzx ebx, ax
mov dword [ebp - 0x34], ebx
movzx eax, ax
mov dword [ebp - 0x30], eax
mov eax, 0x83ca
cmp ax, word [ebp - 0x24]
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x431964
mov dword [ebp - 0x1c], edi
xor ecx, ecx
call fcn.004ad518
push str.ID_HELP_WELCOMEWIZARD
mov edx, str.OnWelcomeWizard
jmp 0x430ed5
movzx ebx, ax
mov dword [ebp - 0x30], ebx
movzx ebx, cx
mov dword [ebp - 0x28], ebx
movzx edx, cx
mov dword [ebp - 0x2c], edx
movzx edx, cx
mov dword [ebp - 0x44], edx
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov ebx, dword [ebp - 0x34]
movzx edx, bx
mov dword [ebp - 0x38], edx
mov ebx, dword [ebp - 0x30]
movzx edx, bx
mov dword [ebp - 0x34], edx
cmp dword [ebp + 0xc], 0x111
jne 0x4319e3
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x28]
movzx ebx, ax
mov dword [ebp - 0x34], ebx
movzx eax, ax
mov dword [ebp - 0x30], eax
mov eax, 0x8088
cmp ax, word [ebp - 0x24]
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x4319e9
mov dword [ebp - 0x1c], edi
call fcn.00436f4c
push str.ID_HELP_TIPOFTHEDAY
mov edx, str.TipOfTheDay
jmp 0x430ed5
movzx ebx, ax
mov dword [ebp - 0x30], ebx
movzx ebx, cx
mov dword [ebp - 0x28], ebx
movzx edx, cx
mov dword [ebp - 0x2c], edx
movzx edx, cx
mov dword [ebp - 0x44], edx
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov ebx, dword [ebp - 0x34]
movzx edx, bx
mov dword [ebp - 0x38], edx
mov ebx, dword [ebp - 0x30]
movzx edx, bx
mov dword [ebp - 0x34], edx
cmp dword [ebp + 0xc], 0x111
jne 0x431a6d
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x28]
movzx ebx, ax
mov dword [ebp - 0x34], ebx
movzx eax, ax
mov dword [ebp - 0x30], eax
mov eax, 0x83bf
cmp ax, word [ebp - 0x24]
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x431a73
mov dword [ebp - 0x1c], edi
mov ecx, str.tutorial_
call fcn.004135ea
push str.ID_HELP_TUTORIAL
mov edx, str.OnTutorial
jmp 0x430ed5
movzx ebx, ax
mov dword [ebp - 0x30], ebx
movzx ebx, cx
mov dword [ebp - 0x28], ebx
movzx edx, cx
mov dword [ebp - 0x2c], edx
movzx edx, cx
mov dword [ebp - 0x44], edx
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov ebx, dword [ebp - 0x34]
movzx edx, bx
mov dword [ebp - 0x38], edx
mov ebx, dword [ebp - 0x30]
movzx edx, bx
mov dword [ebp - 0x34], edx
cmp dword [ebp + 0xc], 0x111
jne 0x431aed
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x28]
movzx ebx, ax
mov dword [ebp - 0x34], ebx
movzx eax, ax
mov dword [ebp - 0x30], eax
mov eax, 0x803a
cmp ax, word [ebp - 0x24]
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x431af3
mov dword [ebp - 0x1c], edi
push str.ID_HELP_PURCHASE
mov edx, str.OnHelpPurchase
jmp 0x430ed5
movzx ebx, ax
mov dword [ebp - 0x30], ebx
movzx ebx, cx
mov dword [ebp - 0x28], ebx
movzx edx, cx
mov dword [ebp - 0x2c], edx
movzx edx, cx
mov dword [ebp - 0x44], edx
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov ebx, dword [ebp - 0x34]
movzx edx, bx
mov dword [ebp - 0x38], edx
mov ebx, dword [ebp - 0x30]
movzx edx, bx
mov dword [ebp - 0x34], edx
mov edx, dword [ebp + 0xc]
cmp edx, 0x111
jne 0x431b76
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x28]
movzx ebx, ax
mov dword [ebp - 0x34], ebx
movzx eax, ax
mov dword [ebp - 0x30], eax
mov eax, 0x803b
cmp ax, word [ebp - 0x24]
mov ebx, dword [ebp + 0x18]
jne 0x431b7c
mov dword [ebp - 0x1c], edi
sub esp, 0x10
call fcn.0043711e
mov dword [ebx], eax
push str.ID_HELP_REGISTRATION
mov edx, str.OnHelpRegistration
jmp 0x430ed7
movzx ebx, ax
mov dword [ebp - 0x30], ebx
movzx ebx, cx
mov dword [ebp - 0x28], ebx
movzx ebx, cx
mov dword [ebp - 0x2c], ebx
movzx ebx, cx
mov dword [ebp - 0x44], ebx
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov ebx, dword [ebp - 0x34]
movzx ebx, bx
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x30]
movzx ebx, bx
mov dword [ebp - 0x34], ebx
cmp edx, 0x111
jne 0x431bf6
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x28]
movzx eax, bx
mov dword [ebp - 0x34], eax
mov eax, 0x8034
cmp ax, word [ebp - 0x24]
mov ebx, dword [ebp + 0x18]
jne 0x431bf6
mov dword [ebp - 0x1c], edi
sub esp, 0x10
call fcn.004370d1
mov dword [ebx], eax
push str.ID_HELP_ONTHEWEB
mov edx, str.OnHelpOnTheWeb
jmp 0x430ed7
movzx ebx, cx
mov dword [ebp - 0x30], ebx
movzx ebx, cx
mov dword [ebp - 0x44], ebx
movzx ecx, cx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov ebx, dword [ebp - 0x34]
movzx ebx, bx
mov dword [ebp - 0x38], ebx
cmp edx, 0x111
mov ebx, dword [ebp + 0x18]
jne 0x431c55
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov eax, dword [ebp - 0x30]
movzx eax, ax
mov dword [ebp - 0x38], eax
mov eax, 0x83bb
cmp ax, word [ebp - 0x2c]
jne 0x431c55
mov dword [ebp - 0x1c], edi
xor edx, edx
call fcn.004047c8
push str.ID_RUN_AS_ADMIN
mov edx, str.OnRestartAsAdmin
jmp 0x430ed5
movzx eax, cx
mov dword [ebp - 0x44], eax
movzx eax, cx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
movzx ecx, ax
cmp edx, 0x111
mov eax, dword [ebp + 0x10]
jne 0x431ca8
mov ebx, dword [ebp - 0x44]
movzx ecx, bx
movzx ebx, bx
mov dword [ebp - 0x38], ebx
mov ebx, 0x83ee
cmp bx, word [ebp - 0x34]
mov ebx, dword [ebp + 0x18]
jne 0x431cae
mov dword [ebp - 0x1c], edi
sub esp, 0x10
call fcn.00436f0e
mov dword [ebx], eax
push str.ID_RUN_RESMONITOR
mov edx, str.OnRunResmonitor
jmp 0x430ed7
movzx ebx, ax
mov dword [ebp - 0x38], ebx
movzx eax, cx
mov dword [ebp - 0x44], eax
movzx eax, cx
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov dword [ebp - 0x34], ecx
cmp edx, 0x111
mov eax, dword [ebp + 0x10]
jne 0x431d02
mov ebx, dword [ebp - 0x44]
movzx ecx, bx
mov dword [ebp - 0x34], ecx
movzx ebx, bx
mov dword [ebp - 0x38], ebx
mov ebx, 0x83ef
cmp bx, word [ebp - 0x30]
mov ebx, dword [ebp + 0x18]
jne 0x431d0b
mov dword [ebp - 0x1c], edi
call fcn.00412984
push str.ID_RUN_OHMONITOR
mov edx, str.OnRunOHMonitor
jmp 0x430ed5
movzx edx, ax
mov dword [ebp - 0x38], edx
mov edx, dword [ebp + 0xc]
movzx ecx, cx
mov ebx, dword [ebp - 0x38]
movzx eax, bx
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x34]
movzx eax, bx
mov dword [ebp - 0x30], eax
cmp edx, 0x40b
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x431d44
mov dword [ebp - 0x1c], edi
push ecx
push dword [ebp + 0x14]
push eax
push ecx
mov ecx, dword [ebp - 0x20]
call fcn.00434c6a
jmp 0x430d86
cmp edx, dword [0xd59c8c]
jne 0x431d62
mov dword [ebp - 0x1c], edi
push ecx
push dword [ebp + 0x14]
push eax
push ecx
mov ecx, dword [ebp - 0x20]
call fcn.004374f8
jmp 0x430d86
mov ebx, dword [ebp - 0x44]
movzx ebx, bx
mov dword [ebp - 0x44], ebx
cmp edx, 0x111
jne 0x431dad
mov eax, ecx
mov ebx, ecx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ecx
mov ecx, 0x8025
cmp cx, word [ebp - 0x30]
mov ebx, dword [ebp + 0x18]
jne 0x431dc1
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, dword [ebp - 0x20]
call fcn.0043583b
mov dword [ebx], eax
push str.ID_VIEW_SETTINGS
mov edx, str.OnSettings
jmp 0x430ed7
movzx ecx, ax
movzx ebx, ax
mov dword [ebp - 0x38], ebx
movzx eax, ax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x44]
jmp 0x431dc4
mov ecx, dword [ebp - 0x44]
movzx edx, ax
mov dword [ebp - 0x2c], edx
movzx edx, ax
mov dword [ebp - 0x30], edx
movzx edx, ax
mov dword [ebp - 0x44], edx
movzx eax, ax
mov dword [ebp - 0x28], eax
movzx eax, cx
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x34]
movzx ecx, cx
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp + 0xc]
cmp edx, 0x111
jne 0x431e40
mov eax, dword [ebp - 0x44]
movzx eax, ax
mov ecx, dword [ebp - 0x30]
movzx ecx, cx
mov ebx, dword [ebp - 0x2c]
movzx ebx, bx
mov dword [ebp - 0x38], ebx
mov ebx, 0x8029
cmp bx, word [ebp - 0x28]
mov ebx, dword [ebp + 0x18]
jne 0x431e43
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x58]
test ecx, ecx
je 0x431e31
call fcn.00456266
push str.ID_TAB
mov edx, str.OnTab
jmp 0x430ed5
mov ecx, dword [ebp - 0x24]
movzx ebx, ax
mov dword [ebp - 0x34], ebx
movzx ebx, ax
mov dword [ebp - 0x44], ebx
movzx eax, ax
mov dword [ebp - 0x30], eax
movzx eax, cx
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
cmp edx, 0x111
jne 0x431ece
mov eax, ebx
movzx eax, ax
mov ecx, dword [ebp - 0x34]
movzx ecx, cx
mov ebx, 0x83ec
cmp bx, word [ebp - 0x30]
mov ebx, dword [ebp + 0x18]
jne 0x431ece
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x58]
mov dword [ebp + 0x18], eax
test eax, eax
je 0x431ebf
push dword [eax + 0x68]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x431ebf
push esi
push esi
push 0x130b
mov eax, dword [ebp + 0x18]
push dword [eax + 0x68]
call dword [sym.imp.USER32.dll_SendMessageA]
inc eax
cdq
push 6
pop ecx
idiv ecx
push edx
mov ecx, dword [ebp + 0x18]
call fcn.00456616
push str.ID_CtrlTab
mov edx, str.OnCtrlTab
jmp 0x430ed5
movzx ebx, ax
mov dword [ebp - 0x44], ebx
movzx eax, ax
mov dword [ebp - 0x34], eax
movzx ecx, cx
mov dword [ebp - 0x38], ecx
cmp edx, 0x111
mov ebx, dword [ebp + 0x18]
jne 0x431f33
mov eax, dword [ebp - 0x44]
movzx ecx, ax
mov dword [ebp - 0x38], ecx
mov eax, 0x834f
cmp ax, word [ebp - 0x34]
jne 0x431f33
mov dword [ebp - 0x1c], edi
lea eax, [ebp - 0x38]
push eax
push 0x1f4
push 2
push esi
push 0xf020
push 0x112
mov eax, dword [ebp - 0x20]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
push str.ID_ESC
mov edx, str.OnEscPressed
jmp 0x430ed5
movzx eax, cx
cmp edx, 0x111
jne 0x431f97
add eax, 0xfffff05f
mov dword [ebp + 0x18], 0xb
cmp ax, word [ebp + 0x18]
ja 0x431f97
mov dword [ebp - 0x1c], edi
movzx ecx, cx
lea eax, [ecx - 0xfa1]
cmp eax, dword [ebp + 0x18]
ja 0x431f84
lea eax, [ecx - 0xfa1]
mov dword [ebp + 0x18], eax
push ecx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x58]
call fcn.00456056
test eax, eax
je 0x431f84
push dword [ebp + 0x18]
mov ecx, eax
call fcn.0042b060
mov dword [ebx], esi
mov ecx, dword [ebp - 0x38]
movzx eax, cx
push eax
mov edx, str.OnKeyboardSort
jmp 0x431564
cmp edx, 0x4e
jne 0x431fe8
mov ecx, esi
mov dword [ebp - 0x3c], esi
cmp ecx, 6
jge 0x431fe8
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + ecx*4 + 0x1058]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
cmp eax, dword [ecx + 4]
je 0x431fc3
mov ecx, dword [ebp - 0x3c]
inc ecx
mov dword [ebp - 0x3c], ecx
jmp 0x431fa1
mov dword [ebp - 0x1c], edi
lea eax, [ebp - 0x1c]
push eax
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edx
mov ecx, dword [ebp - 0x20]
call fcn.004163d2
mov dword [ebx], eax
cmp dword [ebp - 0x1c], 0
jne 0x430d16
mov edx, dword [ebp + 0xc]
push ecx
push ebx
push ecx
push dword [ebp + 0x10]
push edx
push ecx
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx + 0x38]
call fcn.00442659
test eax, eax
jne 0x430d16
push esi
push ebx
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
mov ecx, dword [ebp - 0x20]
call fcn.00438f17
test eax, eax
jne 0x430d16
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x58]
test ecx, ecx
je 0x43218c
mov eax, dword [ecx]
push edi
push ebx
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [eax]
test eax, eax
jne 0x430d16
push ecx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x58]
call fcn.00456056
mov dword [ebp + 0x18], eax
test eax, eax
je 0x43218c
mov dword [ebp - 0x40], edi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
cmp ecx, 0x111
jne 0x432140
mov dword [ebp - 0x44], 0x8004
cmp dx, word [ebp - 0x44]
jne 0x432140
mov eax, dword [eax]
mov ecx, dword [ebp + 0x18]
call dword [eax + 0x14]
mov dword [ebp - 0x44], eax
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x44]
test ecx, ecx
je 0x432137
cmp dword [ecx], eax
je 0x432137
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x1c], esi
push 0x4b9
mov ecx, dword [ebp + 0x18]
mov eax, dword [ecx]
call dword [eax + 0x18]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edx, eax
mov eax, dword [ebp - 0x24]
sub edx, eax
neg edx
sbb edx, edx
add edx, 1
mov dword [ebp - 0x48], edx
jne 0x432115
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 0x58]
mov ecx, dword [ecx + 0x213d0]
test ecx, ecx
je 0x432112
call fcn.004a9206
test eax, eax
je 0x43210d
push 0x4b9
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x14]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp eax, dword [ebp - 0x24]
mov edx, edi
je 0x43210f
mov edx, esi
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x24]
test edx, edx
je 0x432137
push edi
push 0x2e
push 0x100
push eax
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
call esi
push edi
push 0x2e
push 0x101
push dword [ebp - 0x24]
call esi
mov eax, dword [ebp + 0x18]
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
cmp dword [ebp - 0x40], 0
je 0x43218c
mov eax, dword [eax]
push edi
push ebx
push dword [ebp + 0x14]
push edx
push ecx
push dword [ebp + 8]
mov ecx, dword [ebp + 0x18]
call dword [eax]
test eax, eax
je 0x43218c
jmp 0x430d16
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
call fcn.004f0c06
ret 0x18