Function at 0x431ef6
Capabilities:
Check if file exists
Encrypt data using rc4 ksa
Get graphical window text
Set current directory

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10ec
call fcn.004990f0
push ebx
mov ebx, dword [ebp + 0x10]
lea eax, [ebp - 0xc]
push esi
mov esi, dword [ebp + 0xc]
push edi
push eax
push ebx
xor edi, edi
push esi
mov dword [ebp - 0xc], edi
call fcn.0047f694
test eax, eax
je 0x431f28
mov eax, dword [ebp - 0xc]
jmp 0x431fed
mov eax, 0x264
mov edx, 0x46f
cmp esi, eax
jg 0x433591
je 0x433587
mov eax, 0x12b
cmp esi, eax
jg 0x432c09
je 0x432bb5
add eax, 0xffffffa8
cmp esi, eax
jg 0x4326ba
je 0x4326ae
cmp esi, 0x7b
jg 0x43234b
je 0x432304
cmp esi, 0x68
jg 0x432167
je 0x432148
xor ecx, ecx
sub esi, ecx
je 0x43213e
sub esi, 1
je 0x432134
sub esi, 0x63
je 0x432028
sub esi, 1
je 0x433cc7
sub esi, 1
je 0x433cbd
sub esi, 1
jne case.0x434118.3036
test ebx, ebx
jne 0x431ff2
mov edx, dword [0x50bb38]
test edx, edx
je case.0x434118.3036
mov eax, dword [0x50bb3c]
push edx
mov dword [0x50bb3c], ecx
mov byte [eax + edx], cl
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push dword [0x50bb38]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
and dword [0x50bb38], edi
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
leave
ret
mov eax, dword [0x50bb3c]
test eax, eax
jne 0x432017
push 0x104
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, eax
mov eax, dword [0x50bb3c]
mov dword [0x50bb38], ecx
jmp 0x43201d
mov ecx, dword [0x50bb38]
mov byte [eax + ecx], bl
inc eax
mov dword [0x50bb3c], eax
jmp case.0x434118.3036
cmp ebx, 0xffff
jbe 0x4320ac
cmp dword [ebx + 4], ecx
je 0x43207f
push ecx
push dword [ebx + 4]
call fcn.00405018
mov esi, eax
xor eax, eax
pop ecx
pop ecx
mov word [ebp - 0x8cc], ax
cmp dword [ebx], eax
je 0x43205f
lea eax, [ebp - 0x8cc]
push eax
push dword [ebx]
mov ecx, eax
call fcn.0041559c
push 0
push dword [ebx + 8]
lea eax, [ebp - 0x8cc]
push esi
push eax
call fcn.0049135b
push esi
call fcn.004a1b5f
add esp, 0x14
jmp 0x43422e
xor eax, eax
mov word [ebp - 0x8cc], ax
cmp dword [ebx], eax
je 0x43209e
lea eax, [ebp - 0x8cc]
push eax
push dword [ebx]
mov ecx, eax
call fcn.0041559c
xor ecx, ecx
push ecx
push ecx
lea eax, [ebp - 0x8cc]
push eax
jmp 0x434226
test ebx, ebx
jne 0x4320fb
mov eax, dword [0x50bb30]
test eax, eax
je case.0x434118.3036
xor ecx, ecx
mov word [ebp - 0x8cc], cx
lea ecx, [ebp - 0x8cc]
push ecx
push eax
call fcn.0041559c
push ebx
lea eax, [ebp - 0x8cc]
push ebx
push eax
call fcn.00491763
add esp, 0xc
push dword [0x50bb30]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [0x50bb30], ebx
jmp 0x43422e
mov eax, dword [0x50bb34]
test eax, eax
jne 0x432120
push 0x104
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, eax
mov eax, dword [0x50bb34]
mov dword [0x50bb30], ecx
jmp 0x432126
mov ecx, dword [0x50bb30]
mov byte [eax + ecx], bl
inc eax
mov dword [0x50bb34], eax
jmp case.0x434118.3036
mov eax, str.5.9.0_Build_9999
jmp 0x431fed
mov eax, 0x5090
jmp 0x431fed
mov ecx, dword [0x531f8c]
neg ecx
sbb ecx, ecx
xor eax, eax
and ecx, 2
cmp dword [0x531f90], eax
setne al
or eax, ecx
jmp 0x431fed
sub esi, 0x69
je 0x43228c
sub esi, 1
je 0x432231
sub esi, 3
je case.0x4335c8.617
sub esi, 0xb
je 0x4321ef
sub esi, 1
je 0x4321d5
sub esi, 1
jne case.0x434118.3036
cmp ebx, 0xfffffd66
jne 0x4321a9
movzx eax, byte [0x4f7c55]
jmp 0x431fed
movzx eax, bl
push eax
mov byte [0x4f7c55], bl
call fcn.0048a232
movzx eax, byte [0x4f7c55]
push edi
push eax
call fcn.0041da0b
push 0xfffffffffffffffe
call fcn.0041dbb5
add esp, 0x10
jmp case.0x4335c8.617
push ebx
call fcn.00492de2
pop ecx
push edi
push edi
push dword [0x531f78]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp case.0x4335c8.617
cmp dword [0x5337e4], edi
je 0x43221c
push 1
push 1
push 0x501f10
mov dword [0x5337e4], edi
call fcn.00441d09
push 1
push 1
push 0x501d08
call fcn.00441d09
add esp, 0x18
call fcn.00492412
test eax, eax
jne case.0x43236c.125
or eax, 0xffffffff
jmp 0x431fed
cmp dword [0x531f90], edi
je case.0x4335c8.636
mov eax, dword [0x531d70]
test eax, eax
je case.0x4335c8.636
cmp dword [eax + 0x14], edi
je case.0x4335c8.636
call fcn.00491c69
push eax
call fcn.00492743
pop ecx
test eax, eax
jne case.0x4335c8.636
test ebx, ebx
cmovs ebx, eax
push ebx
call fcn.00489f4e
pop ecx
push edi
test eax, eax
jns 0x432273
push edi
push 0x402
jmp 0x432a95
call fcn.00489cb7
cdq
mov ecx, 0x3e8
idiv ecx
push eax
call fcn.00479bab
pop ecx
jmp 0x433000
test ebx, ebx
jne 0x4322a2
cmp dword [0x531f90], edi
je case.0x4335c8.636
call fcn.00489cb7
jmp 0x431fed
cmp ebx, 1
jne 0x4322d2
cmp dword [0x531f90], edi
je 0x4322c8
mov eax, dword [0x531d70]
test eax, eax
je 0x4322c8
call dword [eax + 0x4c]
cdq
mov ecx, 0x3e8
idiv ecx
jmp 0x431fed
call fcn.00491ecf
jmp 0x431fed
cmp ebx, 2
jne case.0x4335c8.617
cmp dword [0x531f90], edi
je 0x4322f4
mov eax, dword [0x531d70]
test eax, eax
je 0x4322f4
call dword [eax + 0x4c]
jmp 0x431fed
call fcn.00491ecf
imul eax, eax, 0x3e8
jmp 0x431fed
cmp ebx, 0xfffffd66
jne 0x432318
movsx eax, byte [0x504ac0]
jmp 0x431fed
push 0xffffffffffffff81
pop ecx
cmp bl, cl
movzx eax, bl
push edi
cmovl eax, ecx
mov byte [0x504ac0], al
movsx eax, al
push eax
call fcn.0041cc28
movsx eax, byte [0x504ac0]
push eax
call fcn.0048a1ce
push 0xfffffffffffffffe
call fcn.0041dad5
jmp 0x4321cd
mov eax, 0xc7
cmp esi, eax
jg 0x4325db
je 0x432590
push 0xc
lea eax, [esi - 0x7c]
pop ecx
cmp eax, ecx
ja case.0x434118.3036
jmp dword [eax*4 + 0x4343fe]
mov esi, 0x29a
test ebx, ebx
jne 0x4323a0
cmp dword [0x50a210], edi
jne 0x4323cf
push 0x503770
lea ecx, [ebp - 0x4bc]
call fcn.0040dbab
push eax
call fcn.004a18bf
pop ecx
mov dword [0x50a210], eax
cmp ebx, esi
jne 0x4323cf
mov ecx, dword [0x50a214]
test ecx, ecx
jne 0x4323d5
push 0x503978
lea ecx, [ebp - 0x4bc]
call fcn.0040dbab
push eax
call fcn.004a18bf
pop ecx
mov ecx, eax
mov dword [0x50a214], ecx
jmp 0x4323d5
mov ecx, dword [0x50a214]
mov eax, dword [0x50a210]
cmp ebx, esi
cmove eax, ecx
jmp 0x431fed
mov eax, 0x503978
mov ecx, 0x503770
cmp ebx, 0x29a
cmovne eax, ecx
jmp 0x431fed
mov dword [0x5093d4], ebx
cmp ebx, 9
ja 0x432413
movzx eax, byte [ebx + 0x4f7ea8]
jmp 0x431fed
cmp ebx, 0xa
jne 0x432424
movzx eax, byte [0x4f7c66]
jmp 0x431fed
cmp ebx, 0xb
jne 0x432435
movzx eax, byte [0x504abb]
jmp 0x431fed
cmp ebx, ecx
jne case.0x4335c8.617
movzx eax, byte [0x504aba]
jmp 0x431fed
mov esi, dword [0x5093d4]
mov eax, ebx
and eax, 0xff000000
cmp eax, 0xdb000000
jne 0x432465
mov eax, ebx
shr eax, 0x10
movzx esi, al
movzx ebx, bx
cmp esi, 9
ja 0x432502
mov byte [esi + 0x4f7ea8], bl
cmp esi, 0xb
je 0x432480
cmp esi, ecx
jne 0x43249f
movzx eax, byte [0x504aba]
push edi
push edi
push eax
movzx eax, byte [0x504abb]
push eax
call fcn.0041bdf1
add esp, 0x10
cmp esi, 0xc
je 0x4324bd
mov al, byte [0x4f7c66]
movzx eax, al
push eax
movzx eax, byte [0x504abb]
push 0x4f7ea8
push eax
call fcn.00489109
add esp, 0xc
cmp dword [0x4f7c70], edi
je 0x4324e5
cmp esi, 0xa
ja 0x4324e5
xor ecx, ecx
lea eax, [esi + 1]
push edi
cmp esi, 0xa
push ebx
cmove eax, ecx
push eax
call fcn.0041beb8
add esp, 0xc
call fcn.0041b9f5
push 0x25b
push 3
push 0x400
push dword [0x531f70]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp case.0x4335c8.617
cmp esi, 0xa
jne 0x432510
mov al, bl
mov byte [0x4f7c66], al
jmp 0x4324a4
cmp esi, 0xb
jne 0x432520
mov byte [0x504abb], bl
jmp 0x432480
cmp esi, ecx
jne 0x43249f
mov byte [0x504aba], bl
jmp 0x432480
call fcn.00491c69
jmp 0x431fed
call fcn.00491bb4
jmp 0x431fed
test ebx, ebx
jne 0x432555
mov eax, dword [0x531f94]
jmp 0x431fed
cmp ebx, 1
jne 0x432564
mov eax, dword [0x533100]
jmp 0x431fed
cmp ebx, 2
jne 0x432573
mov eax, dword [0x533104]
jmp 0x431fed
cmp ebx, 5
jne case.0x4335c8.617
mov eax, dword [0x533108]
jmp 0x431fed
call fcn.00492412
jmp 0x431fed
test ebx, ebx
je case.0x4335c8.617
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.0x4335c8.617
push ebx
mov esi, 0x504ce0
push esi
call fcn.0049e71a
pop ecx
pop ecx
test eax, eax
je 0x4325c5
push ebx
push 0x104
push esi
call fcn.0040c4d6
push edi
push 0x9d63
push 0x111
push dword [0x531f70]
jmp 0x4329a9
sub esi, 0xc8
je 0x43264d
sub esi, 1
je 0x432610
sub esi, 1
jne case.0x434118.3036
test ebx, ebx
je case.0x4335c8.617
push edi
push ebx
call fcn.00405018
mov esi, eax
push esi
push dword [ebp + 8]
call fcn.00484972
jmp 0x4341d4
mov esi, 0x104
test ebx, ebx
je 0x43262e
push edi
push edi
push esi
push ebx
push 0xffffffffffffffff
push 0x504ee8
push edi
push edi
call fcn.00411e48
add esp, 0x20
push edi
push edi
push esi
mov esi, 0x50ba18
push esi
push 0xffffffffffffffff
push 0x504ce0
push edi
push edi
call fcn.00411e48
add esp, 0x20
jmp 0x4336e3
test ebx, ebx
je case.0x4335c8.617
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je case.0x4335c8.617
push edi
push ebx
call fcn.00405018
mov esi, eax
mov ebx, 0x504ce0
push esi
push ebx
call fcn.0049e71a
add esp, 0x10
test eax, eax
je 0x43268c
push esi
push 0x104
push ebx
call fcn.0040c4d6
push edi
push 0x9d63
push 0x111
push dword [0x531f70]
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
call fcn.004a1b5f
jmp 0x433000
push edi
mov esi, 0x5093d8
push esi
jmp 0x4329c4
add esi, 0xffffff2c
cmp esi, 0x56
ja case.0x434118.3036
movzx eax, byte [esi + 0x43449e]
jmp dword [eax*4 + 0x434432]
test ebx, ebx
je case.0x4335c8.617
push ebx
call fcn.004772ac
jmp 0x433000
test ebx, ebx
je case.0x4335c8.617
push ebx
call fcn.00477435
jmp 0x433000
test ebx, ebx
jne 0x43270b
mov eax, dword [0x531f74]
jmp 0x431fed
cmp ebx, 1
jne case.0x4335c8.617
mov eax, dword [0x531f78]
jmp 0x431fed
test ebx, ebx
jne 0x43272c
mov eax, dword [0x4f7c70]
jmp 0x431fed
cmp ebx, 1
jne case.0x4335c8.617
mov eax, dword [0x4f7c80]
jmp 0x431fed
cmp ebx, 1
jne 0x43274e
call fcn.00489658
jmp 0x431fed
call fcn.00489234
jmp 0x431fed
test ebx, ebx
jne 0x432784
mov esi, 0x50a218
cmp word [0x50a218], di
jne 0x4336e3
mov ecx, dword [0x531bd0]
push 0x400
push esi
call fcn.0040ec47
jmp 0x4336e3
cmp ebx, 1
jne 0x4327b1
mov esi, 0x50aa18
cmp word [0x50aa18], di
jne 0x4336e3
mov ecx, dword [0x531bd0]
push 0x400
push esi
call fcn.00431ec0
jmp 0x4336e3
cmp ebx, 2
jne 0x4327c0
mov eax, str..M3U_.PLS_.M3U8
jmp 0x431fed
cmp ebx, 3
jne case.0x4335c8.617
mov ebx, 0x50b218
cmp word [0x50b218], di
jne 0x432823
push 0x800
push edi
push ebx
mov esi, ebx
call fcn.0049a3b0
push 0x104
push ebx
push 0x134
call fcn.00441947
add esp, 0x18
movzx eax, word [esi]
test ax, ax
je 0x43281e
cmp eax, 0x7c
mov ebx, edi
push esi
cmove ebx, esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
test ebx, ebx
je 0x43281a
xor ecx, ecx
mov word [ebx], cx
test esi, esi
jne 0x4327f8
mov ebx, 0x50b218
mov eax, ebx
jmp 0x431fed
mov eax, dword [0x53310c]
cmp ebx, 0xffffffff
jne 0x43283a
dec eax
mov dword [0x53310c], eax
cmp ebx, 1
jne 0x431fed
inc eax
mov dword [0x53310c], eax
jmp 0x431fed
cmp ebx, 0xffffffff
jne 0x43285d
mov eax, dword [0x531e64]
jmp 0x431fed
test ebx, ebx
jne 0x43286b
mov eax, dword [0x531e60]
jmp 0x431fed
lea eax, [ebx - 1]
cmp eax, 9
ja case.0x4335c8.617
lea eax, [ebx - 1]
push eax
push dword [0x50bc88]
call dword [sym.imp.USER32.dll_GetSubMenu]
jmp 0x431fed
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
xor ebx, ebx
cmp dword [ebp + 0x10], 0xdeadbeef
setne bl
push ebx
push dword [ebp + 8]
call esi
push ebx
push dword [0x531f78]
call esi
push ebx
push dword [0x531f74]
call esi
jmp case.0x4335c8.617
mov dword [0x531f4c], 1
jmp case.0x4335c8.617
call fcn.00492412
mov dword [ebp - 4], eax
test ebx, ebx
je 0x432939
push 0x820
lea eax, [ebp - 0x8cc]
push edi
push eax
call fcn.0049a3b0
add esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, edi
mov dword [ebp - 8], eax
cmp dword [ebp - 4], esi
jle case.0x4335c8.617
push edi
lea eax, [ebp - 0x8cc]
push eax
push esi
call fcn.00491fa9
push dword [ebp - 8]
lea eax, [ebp - 0x8cc]
push eax
push ebx
call fcn.004a5076
add esp, 0x18
test eax, eax
jne 0x43292e
push edi
push esi
call fcn.00492cbc
pop ecx
pop ecx
inc esi
cmp esi, dword [ebp - 4]
jl 0x432900
jmp case.0x4335c8.617
mov esi, edi
test eax, eax
jle case.0x4335c8.617
push edi
push esi
call fcn.00492cbc
inc esi
pop ecx
pop ecx
cmp esi, dword [ebp - 4]
jl 0x432943
jmp case.0x4335c8.617
push edi
push ebx
call fcn.00405018
mov esi, eax
xor eax, eax
mov word [ebp - 0x8cc], ax
pop ecx
pop ecx
test ebx, ebx
je 0x43297e
lea eax, [ebp - 0x8cc]
push eax
push ebx
mov ecx, eax
call fcn.0041559c
push 1
push esi
call fcn.00492553
push eax
lea eax, [ebp - 0x8cc]
push eax
call fcn.00492cfd
push esi
call fcn.004a1b5f
add esp, 0x14
push edi
push edi
push 0x401
push dword [0x531f78]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x4335c8.617
push edi
mov esi, 0x5097e8
push esi
jmp 0x4329e1
mov esi, 0x5093d8
push esi
push edi
push ebx
call fcn.0049209e
add esp, 0xc
test eax, eax
jne case.0x4335c8.617
jmp 0x4336e3
mov esi, 0x5097e8
push esi
push edi
push ebx
call fcn.00492131
jmp 0x4329ca
xor eax, eax
mov word [ebp - 0x8cc], ax
cmp dword [ebx + 4], eax
je 0x432a08
lea eax, [ebp - 0x8cc]
push eax
push dword [ebx + 4]
mov ecx, eax
call fcn.0041559c
lea eax, [ebp - 0x8cc]
push eax
push dword [ebx]
call fcn.00489cc6
pop ecx
pop ecx
push 0x64
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push 0x109
push 0x100
push edi
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x432a22
jmp 0x4336e3
mov eax, 0x4314b4
jmp 0x431fed
call fcn.0047b25a
jmp 0x431fed
xor eax, eax
cmp byte [0x504abe], al
setne al
jmp 0x431fed
xor eax, eax
cmp byte [0x504abf], al
jmp 0x432a5e
xor ecx, ecx
cmp byte [0x504abe], cl
setne cl
xor eax, eax
test ebx, ebx
setne al
cmp ecx, eax
je case.0x434118.3036
push edi
push 0x9c57
push 0x111
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x434118.3036
xor ecx, ecx
cmp byte [0x504abf], cl
setne cl
xor eax, eax
test ebx, ebx
setne al
cmp ecx, eax
je case.0x434118.3036
push edi
push 0x9c56
jmp 0x432a90
test ebx, ebx
je case.0x4335c8.617
cmp dword [ebx], edi
je case.0x4335c8.617
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0042759c
jmp 0x433114
cmp dword [ebx + 4], 2
jne 0x432afc
cmp byte [0x4f7c49], 1
jne 0x432afc
mov dword [ebx + 4], edi
xor eax, eax
mov word [ebp - 0x8cc], ax
cmp dword [ebx], eax
je 0x432b19
lea eax, [ebp - 0x8cc]
push eax
push dword [ebx]
mov ecx, eax
call fcn.0041559c
lea eax, [ebp - 0x8cc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsURLW]
test eax, eax
je 0x432b6e
lea eax, [ebp - 0x8cc]
push eax
call fcn.00490de9
pop ecx
test eax, eax
je 0x432b6e
cmp word [eax], di
je 0x432b6e
push edi
push edi
push eax
call fcn.00404fb9
add esp, 0xc
push dword [ebx + 0x10]
mov esi, eax
push esi
push dword [ebx + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push esi
call fcn.004a1b5f
pop ecx
call fcn.00491c89
mov dword [ebx + 8], eax
jmp case.0x4335c8.617
xor eax, eax
cmp dword [ebx + 4], edi
sete al
push eax
lea eax, [ebp - 0x8cc]
push eax
call fcn.00492553
push eax
call fcn.004933e8
push edi
push edi
push eax
call fcn.00404fb9
add esp, 0x18
jmp 0x432b4b
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.00427a9b
add esp, 0xc
jmp 0x431fed
call fcn.00427ddd
jmp 0x431fed
xor eax, eax
mov word [ebp - 0x8cc], ax
cmp dword [ebx + 4], eax
je 0x432bd4
lea eax, [ebp - 0x8cc]
push eax
push dword [ebx + 4]
mov ecx, eax
call fcn.0041559c
xor eax, eax
mov word [ebp - 0x10ec], ax
cmp dword [ebx], eax
je 0x432bf1
lea eax, [ebp - 0x10ec]
push eax
push dword [ebx]
mov ecx, eax
call fcn.0041559c
lea eax, [ebp - 0x8cc]
push eax
lea eax, [ebp - 0x10ec]
push eax
call fcn.00427044
jmp 0x432286
mov eax, 0x17c
cmp esi, eax
jg 0x433006
je 0x432fe9
lea eax, [esi - 0x14b]
cmp eax, 0x23
ja case.0x434118.3036
movzx eax, byte [eax + 0x43454a]
jmp dword [eax*4 + 0x4344f6]
push ebx
mov ecx, 0x533718
call fcn.0040690c
push ebx
call fcn.0048e11c
jmp 0x433000
mov eax, 0x4f85d0
mov ecx, 0x497b30
cmp ebx, 0x10100000
jmp 0x4323f4
mov eax, dword [0x50bb1c]
test eax, eax
jne 0x431fed
push 0x5017f0
lea ecx, [ebp - 0x4bc]
call fcn.0040dbab
push eax
call fcn.004a18bf
pop ecx
mov dword [0x50bb1c], eax
jmp 0x431fed
mov eax, dword [0x50bb20]
test eax, eax
jne 0x431fed
push 0x5019f8
lea ecx, [ebp - 0x4bc]
call fcn.0040dbab
push eax
call fcn.004a18bf
pop ecx
mov dword [0x50bb20], eax
jmp 0x431fed
mov eax, dword [0x50bb24]
test eax, eax
jne 0x431fed
push 0x5011d8
lea ecx, [ebp - 0x4bc]
call fcn.0040dbab
push eax
call fcn.004a18bf
pop ecx
mov dword [0x50bb24], eax
jmp 0x431fed
mov eax, dword [0x50bb28]
test eax, eax
jne 0x431fed
push 0x502730
lea ecx, [ebp - 0x4bc]
call fcn.0040dbab
push eax
call fcn.004a18bf
pop ecx
mov dword [0x50bb28], eax
jmp 0x431fed
mov eax, dword [0x50bb2c]
test eax, eax
jne 0x431fed
push 0x500dc8
lea ecx, [ebp - 0x4bc]
call fcn.0040dbab
push eax
call fcn.004a18bf
pop ecx
mov dword [0x50bb2c], eax
jmp 0x431fed
mov eax, 0x500dc8
jmp 0x431fed
mov eax, 0x502b40
jmp 0x431fed
mov eax, 0x502f50
jmp 0x431fed
mov eax, 0x502d48
jmp 0x431fed
push ebx
push 0xffffffffffffffff
call fcn.004495e9
jmp 0x4330eb
push edi
push ebx
push 1
call fcn.004493ed
jmp 0x43422b
push 0x208
lea eax, [ebp - 0x2b4]
mov dword [ebp - 0x28], edi
xorps xmm0, xmm0
push edi
push eax
movlpd qword [ebp - 0x14], xmm0
call fcn.0049a3b0
add esp, 0xc
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x2b4]
mov dword [ebp - 0x20], str.__foo
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0x41
push eax
mov dword [ebp - 0x18], 0x48b699
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov esi, eax
test esi, esi
je case.0x434118.3036
push 0x208
lea eax, [ebp - 0xad4]
push edi
push eax
call fcn.0049a3b0
add esp, 0xc
lea eax, [ebp - 0xad4]
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
push esi
call fcn.00470a9c
pop ecx
mov ecx, dword [0x531bc4]
lea eax, [ebp - 0xad4]
push eax
call fcn.0040c2a4
call fcn.00491a51
movzx eax, byte [0x504ac8]
shr eax, 1
not eax
and eax, 1
push eax
lea eax, [ebp - 0xad4]
push eax
call fcn.00491084
test byte [0x504ac8], 1
pop ecx
pop ecx
je 0x432e53
push edi
push 2
call fcn.00492e83
pop ecx
pop ecx
call fcn.0048fa6a
jmp 0x43422e
sub ebx, edi
je 0x432ea7
sub ebx, 1
je 0x432e8e
sub ebx, 1
je 0x432e8a
sub ebx, 1
je 0x432e86
sub ebx, 1
je 0x432e82
sub ebx, 1
jne case.0x434118.3036
push 5
jmp 0x432e90
push 3
jmp 0x432e90
push 4
jmp 0x432e90
push 6
jmp 0x432e90
push 2
mov esi, dword [sym.imp.USER32.dll_GetSubMenu]
push 3
push dword [0x531e64]
call esi
push eax
call esi
mov esi, eax
jmp 0x432ec5
mov esi, dword [sym.imp.USER32.dll_GetSubMenu]
push 7
push 3
push dword [0x531e64]
call esi
push eax
call esi
mov esi, eax
push esi
call fcn.0048caa6
pop ecx
test esi, esi
je case.0x434118.3036
call dword [sym.imp.USER32.dll_GetMessagePos]
push dword [ebp + 8]
mov ecx, eax
cwde
shr ecx, 0x10
movsx ecx, cx
push ecx
push eax
push 2
push esi
call fcn.00479ad7
add esp, 0x14
jmp case.0x434118.3036
mov eax, dword [0x533114]
cmp eax, ebx
jne 0x432f14
push ebx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x432c32.364
call fcn.00421a47
jmp case.0x4335c8.617
mov eax, dword [0x533114]
push eax
call fcn.00421c51
pop ecx
mov dword [0x533114], ebx
push ebx
mov ebx, dword [sym.imp.USER32.dll_IsWindow]
call ebx
mov esi, dword [0x531f70]
test eax, eax
push dword [0x533714]
cmovne esi, dword [0x533114]
call ebx
mov edi, dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
je 0x432f56
push esi
push 0xfffffffffffffff8
push dword [0x533714]
call edi
push dword [0x4ff0c8]
call ebx
test eax, eax
je 0x432f6d
push esi
push 0xfffffffffffffff8
push dword [0x4ff0c8]
call edi
push dword [0x50bbf8]
call ebx
test eax, eax
je 0x432f84
push esi
push 0xfffffffffffffff8
push dword [0x50bbf8]
call edi
push dword [0x50bbfc]
call ebx
test eax, eax
je 0x432f9b
push esi
push 0xfffffffffffffff8
push dword [0x50bbfc]
call edi
mov esi, 0xc0e2
push esi
push dword [0x531f70]
call dword [sym.imp.USER32.dll_KillTimer]
push 0x431ea5
push 0xfa
push esi
push dword [0x531f70]
call dword [sym.imp.USER32.dll_SetTimer]
jmp case.0x434118.3036
push dword [0x533114]
call dword [sym.imp.USER32.dll_IsWindow]
mov ecx, dword [0x531f70]
test eax, eax
cmovne ecx, dword [0x533114]
jmp 0x43414b
mov eax, dword [0x533710]
cmp ebx, 0xffffffff
cmovne eax, ebx
mov dword [0x533710], eax
push 1
call fcn.0048de8f
pop ecx
jmp case.0x4335c8.617
mov eax, 0x204
cmp esi, eax
jg 0x4331d2
je 0x4331c7
add eax, 0xfffffff7
cmp esi, eax
jg 0x43314f
je 0x433144
mov eax, 0x1aa
cmp esi, eax
jg 0x43309d
je 0x433075
sub esi, 0x190
je 0x43306b
sub esi, 9
je 0x433063
sub esi, 1
je 0x43305b
sub esi, 6
jne case.0x434118.3036
mov dword [0x507334], ebx
jmp case.0x4335c8.617
push ebx
call fcn.0043fd2b
jmp 0x433000
push ebx
call fcn.0043fd14
jmp 0x433000
mov eax, dword [0x531ea4]
jmp 0x431fed
cmp ebx, 0xfffffd66
jne 0x433087
mov eax, dword [0x505130]
jmp 0x431fed
push ebx
push str.jtf_check
mov dword [0x505130], ebx
call fcn.0041202d
jmp 0x432286
sub esi, 0x1f7
je 0x4330d8
dec esi
sub esi, 1
je 0x4330bf
sub esi, 1
jne case.0x434118.3036
push ebx
call fcn.004162e6
jmp 0x4343f7
test ebx, ebx
je 0x4330ce
push ebx
call fcn.00423083
jmp 0x4343f7
mov eax, fcn.00423083
jmp 0x431fed
test ebx, ebx
jne 0x4330f1
push str.genex.bmp
push 0xfc
call fcn.00419d30
pop ecx
jmp 0x4343f7
cmp ebx, 1
jne 0x433100
call fcn.0047326e
jmp 0x431fed
cmp ebx, 2
jne 0x43311c
push edi
push edi
push 0x70
call fcn.00441922
push eax
call fcn.004a2efb
add esp, 0x10
jmp 0x431fed
cmp ebx, 3
jne 0x433131
push dword [0x4f738c]
call fcn.00419c34
jmp 0x4343f7
cmp ebx, 4
jne case.0x4335c8.617
mov eax, dword [0x4fa024]
jmp 0x431fed
push ebx
call fcn.0041625f
jmp 0x4334c9
sub esi, 0x1fc
je 0x4331bc
sub esi, 1
je 0x4331b1
sub esi, 1
je 0x4331a6
dec esi
sub esi, 1
je 0x43319b
sub esi, 1
je 0x433190
sub esi, 1
je 0x433185
sub esi, 1
jne case.0x434118.3036
push ebx
call fcn.0041650f
jmp 0x4343f7
push ebx
call fcn.0041692e
jmp 0x4343f7
push ebx
call fcn.004169af
jmp 0x4343f7
push ebx
call fcn.00416a2d
jmp 0x4334c9
push ebx
call fcn.004162ba
jmp 0x4334c9
push ebx
call fcn.0041623e
jmp 0x4334c9
push ebx
call fcn.004161ed
jmp 0x4343f7
push ebx
call fcn.0041625f
jmp 0x4334c9
mov eax, 0x21a
cmp esi, eax
jg 0x43347e
je 0x43346d
add eax, 0xfffffffc
cmp esi, eax
jg 0x4332b8
je 0x433290
sub esi, 0x205
je 0x433285
sub esi, 1
je 0x43327a
sub esi, 0xe
je 0x433240
sub esi, 1
jne case.0x434118.3036
mov esi, 0x507b64
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x507b7c]
jmp 0x43322f
cmp eax, ebx
je 0x433238
mov eax, dword [eax + 0x1c]
test eax, eax
jne 0x433228
jmp 0x433461
xor edi, edi
inc edi
jmp 0x433461
mov esi, 0x507b64
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x507b7c]
jmp 0x433266
push ebx
push eax
call dword [ebx]
mov dword [ebp - 8], eax
pop ecx
pop ecx
test eax, eax
jne 0x433272
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 4], eax
test eax, eax
jne 0x433253
jmp 0x433461
mov edi, dword [ebp - 8]
jmp 0x433461
push ebx
call fcn.0041671b
jmp 0x4343f7
push ebx
call fcn.00416a2d
jmp 0x4334c9
test ebx, ebx
je case.0x4335c8.617
cmp dword [ebx], 0x20
jne case.0x4335c8.617
push dword [ebx + 0x1c]
lea eax, [ebx + 8]
push dword [ebx + 0x18]
push eax
push dword [ebx + 4]
call fcn.00473bbf
jmp 0x433114
sub esi, 0x217
je 0x433391
sub esi, 1
je 0x433309
sub esi, 1
jne case.0x434118.3036
mov esi, 0x507b64
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [0x507b7c]
jmp 0x4332ed
cmp ecx, ebx
je 0x4332f6
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x4332e6
jmp 0x433461
lea eax, [ebx + 8]
push eax
lea eax, [ecx + 8]
push eax
call dword [sym.imp.USER32.dll_CopyRect]
jmp case.0x434118.3036
mov esi, 0x507b64
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
test ebx, ebx
je 0x433461
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x507b7c]
cmp eax, ebx
jne 0x433340
mov eax, dword [ebx + 0x1c]
mov dword [0x507b7c], eax
jmp 0x43334b
lea ecx, [eax + 0x1c]
mov eax, dword [ecx]
cmp eax, ebx
je 0x433346
test eax, eax
jne 0x433337
jmp 0x433351
mov eax, dword [ebx + 0x1c]
mov dword [ecx], eax
dec dword [0x507b80]
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx eax, word [0x5093cc]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetPropW]
mov dword [ebp - 8], eax
test eax, eax
je 0x433461
movzx ecx, word [0x5093cc]
push ecx
push dword [ebx]
call dword [sym.imp.USER32.dll_RemovePropW]
push dword [ebp - 8]
call fcn.004a1b5f
pop ecx
jmp 0x433461
mov edi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, 0x507b64
push esi
call edi
test ebx, ebx
je case.0x434118.3036
cmp ebx, 0x10000
jb case.0x434118.3036
push dword [ebx]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x434118.3036
push 4
push 1
call fcn.004a1b54
pop ecx
pop ecx
push eax
movzx eax, word [0x5093cc]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_SetPropW]
push 1
push str.WnShdProcIgnore
push dword [ebx]
call dword [sym.imp.USER32.dll_SetPropA]
or dword [ebx + 4], 0x20
push ebx
push 0xffffffffffffffeb
push dword [ebx]
call dword [sym.imp.USER32.dll_SetWindowLongW]
push esi
call edi
test byte [ebx + 4], 8
lea edi, [ebp - 0x1c]
mov esi, 0x4d8180
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
je 0x43341c
lea esi, [ebx + 0x2c]
lea edi, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x100
lea eax, [ebx + 0x1c]
push 0
push eax
call fcn.0049a3b0
add esp, 0xc
test byte [ebx + 4], 8
je 0x43343f
lea edi, [ebx + 0x2c]
lea esi, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [0x507b7c]
mov esi, 0x507b64
mov dword [ebx + 0x1c], eax
inc dword [0x507b80]
push esi
mov dword [0x507b7c], ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor edi, edi
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x433645
mov eax, fcn.004224d2
mov ecx, fcn.004225b5
test ebx, ebx
jmp 0x4323f4
sub esi, 0x25a
je case.0x4335c8.617
sub esi, 1
je 0x43352f
sub esi, 3
je 0x43350b
dec esi
sub esi, 1
je 0x4334ff
sub esi, 1
je 0x4334db
sub esi, 1
je 0x4334cf
sub esi, 1
jne case.0x434118.3036
cmp dword [0x53311c], ebx
je case.0x434118.3036
push ebx
mov dword [0x53311c], ebx
call fcn.0048486b
pop ecx
jmp case.0x434118.3036
movzx eax, byte [0x504ac2]
jmp 0x431fed
mov eax, dword [0x531f2c]
cmp ebx, 0xffffffff
jne 0x4334eb
dec eax
mov dword [0x531f2c], eax
cmp ebx, 1
jne 0x431fed
inc eax
mov dword [0x531f2c], eax
jmp 0x431fed
movzx eax, byte [0x504ac1]
jmp 0x431fed
mov eax, dword [0x533110]
cmp ebx, 0xffffffff
jne 0x43351b
dec eax
mov dword [0x533110], eax
cmp ebx, 1
jne 0x431fed
inc eax
mov dword [0x533110], eax
jmp 0x431fed
dec ebx
sub ebx, 1
jne case.0x4335c8.617
cmp dword [0x533114], edi
je case.0x4335c8.617
mov esi, 0x400
lea eax, [ebp - 0x4ac]
push esi
push edi
push eax
call fcn.0049a3b0
add esp, 0xc
lea eax, [ebp - 0x4ac]
push esi
push eax
push dword [0x531f70]
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea eax, [ebp - 0x4ac]
push eax
push dword [0x533114]
call dword [sym.imp.USER32.dll_SetWindowTextW]
jmp case.0x4335c8.617
mov eax, dword [0x53311c]
jmp 0x431fed
cmp esi, edx
jg 0x433d3d
je case.0x43236c.135
mov eax, 0x29a
cmp esi, eax
jg 0x433990
je 0x433986
add esi, 0xfffffd9b
cmp esi, 0x2d
ja case.0x434118.3036
movzx eax, byte [esi + 0x4345da]
jmp dword [eax*4 + 0x43456e]
movzx eax, byte [0x4f7bc2]
jmp 0x431fed
movzx eax, byte [0x504abd]
jmp 0x431fed
xor eax, eax
cmp dword [0x531f40], eax
jmp 0x434131
mov eax, dword [0x531f40]
inc eax
mov dword [0x531f40], eax
jmp 0x431fed
mov eax, dword [0x531f40]
dec eax
jmp 0x4335fa
xor eax, eax
test ebx, ebx
sete al
mov dword [0x531f3c], eax
jmp case.0x434118.3036
mov dword [0x531f38], ebx
jmp case.0x434118.3036
cmp ebx, 0x1c
ja 0x433645
cmp byte [0x4f7bc4], 0
je 0x433645
cmp dword [0x531f38], edi
jne 0x433645
mov edi, dword [ebx*4 + 0x52fa40]
mov eax, edi
jmp 0x431fed
mov eax, str.out_ds.dll
jmp 0x431fed
cmp bx, 1
jne 0x43366f
mov ecx, dword [0x531e58]
xor eax, eax
cmp ecx, dword [0x531f80]
jmp 0x434131
cmp bx, 2
jne 0x43367f
mov eax, 0x503b80
jmp 0x431fed
cmp bx, 3
jne 0x43368f
mov eax, 0x5043a0
jmp 0x431fed
cmp bx, 4
jne 0x4336ea
mov esi, 0x50a008
cmp word [0x50a008], di
jne 0x4336e3
push 0x104
cmp word [0x503f90], di
je 0x4336d7
push 0x503f90
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push esi
call fcn.00476738
pop ecx
test eax, eax
je 0x4336e3
push eax
push esi
call dword [sym.imp.USER32.dll_CharPrevW]
xor ecx, ecx
mov word [eax], cx
jmp 0x4336e3
push str.English__US_
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov eax, esi
jmp 0x431fed
cmp bx, 5
jne 0x433704
mov ecx, dword [0x531bf4]
shr ebx, 0x10
push ebx
call fcn.004401e3
jmp 0x431fed
mov eax, dword [0x531e58]
jmp 0x431fed
cmp dword [0x4f7c88], 0xe
mov ecx, dword [ebx]
mov dword [0x4f7c84], ecx
mov eax, dword [ebx + 4]
je 0x43375f
mov edx, dword [0x530df4]
mov dword [0x4f7c88], eax
test edx, edx
je 0x433764
lea esi, [ecx - 0xdf]
lea ebx, [eax - 0x1a]
cmp ecx, 0x15e
jl 0x43374c
cmp eax, 0xe
je 0x43374c
push 0x48
pop eax
jmp 0x43374e
mov eax, edi
push 0x14
push 0x10
push eax
push ebx
push esi
push edi
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x433764
mov dword [0x504ac4], eax
call fcn.004696db
jmp case.0x4335c8.617
call fcn.0048484b
jmp 0x431fed
push ebx
push 0x900
call fcn.0048d08a
mov esi, eax
pop ecx
pop ecx
test esi, esi
jne 0x4336e3
push 0x820
lea eax, [ebp - 0x8cc]
push edi
push eax
call fcn.0049a3b0
add esp, 0xc
lea eax, [ebp - 0x8cc]
push edi
push eax
call fcn.00491c69
push eax
call fcn.00492131
add esp, 0xc
test eax, eax
jne 0x4336e3
push 0x80
lea eax, [ebp - 0xac]
push edi
push eax
call fcn.0049a3b0
add esp, 0xc
test ebx, ebx
je 0x4337f2
push ebx
push 0x4d1278
lea eax, [ebp - 0xac]
push 0x40
push eax
call fcn.0040adba
add esp, 0x10
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x8cc]
push str.rating
push eax
call fcn.00427bfe
add esp, 0xc
call fcn.00427ddd
jmp 0x4336e3
push edi
push 0x901
call fcn.0048d08a
mov esi, eax
pop ecx
pop ecx
test esi, esi
jne 0x4336e3
cmp dword [0x509160], edi
jne 0x4336e3
push 0x820
lea eax, [ebp - 0x8cc]
push edi
push eax
call fcn.0049a3b0
add esp, 0xc
lea eax, [ebp - 0x8cc]
push edi
push eax
call fcn.00491c69
push eax
call fcn.00492131
add esp, 0xc
test eax, eax
jne 0x4336e3
push 0x80
lea eax, [ebp - 0xac]
push edi
push eax
call fcn.0049a3b0
push 0x40
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x8cc]
push str.rating
push eax
call fcn.00427818
lea eax, [ebp - 0xac]
push eax
call fcn.004a2eb4
add esp, 0x20
mov esi, eax
jmp 0x4336e3
push dword [0x533714]
call dword [sym.imp.USER32.dll_IsWindow]
neg eax
sbb eax, eax
and eax, dword [0x533714]
jmp 0x431fed
mov eax, dword [0x5332a8]
jmp 0x431fed
xor eax, eax
cmp byte [0x4f7c51], al
jmp 0x434131
xor eax, eax
cmp dword [0x531f54], eax
jmp 0x434131
xor ecx, ecx
cmp byte [0x4f7c51], cl
setne cl
xor eax, eax
test ebx, ebx
sete al
cmp ecx, eax
je case.0x434118.3036
push edi
push 0x9dcb
jmp 0x432a90
mov eax, dword [0x531f28]
jmp 0x431fed
xor eax, eax
test ebx, ebx
setne al
mov dword [0x531f28], eax
jmp case.0x434118.3036
cmp ebx, 0xffffffff
jne 0x43393f
movzx eax, byte [0x504ac3]
jmp 0x431fed
cmp ebx, 1
jne 0x433952
xor eax, eax
cmp dword [0x4f7c88], 0xe
jmp 0x434131
test ebx, ebx
jne case.0x4335c8.617
movzx eax, byte [0x504ac9]
jmp 0x431fed
call fcn.00491c69
push eax
call fcn.00490ede
jmp 0x4343f7
call fcn.00491c69
push eax
call fcn.00490ea6
jmp 0x4343f7
mov eax, dword [0x4fa5e8]
jmp 0x431fed
mov eax, 0x3ab
cmp esi, eax
jg 0x433bc1
je 0x433bac
add eax, 0xffffffed
cmp esi, eax
jg 0x433ace
je 0x433a7b
sub esi, 0x302
je 0x433a40
sub esi, 0x1e
je 0x433a10
sub esi, 1
je 0x4339fe
sub esi, 0x31
je case.0x4335c8.617
sub esi, 1
je 0x4339eb
sub esi, 0x31
jne case.0x434118.3036
mov eax, dword [0x4f7c74]
jmp 0x431fed
test ebx, ebx
je case.0x4335c8.617
push ebx
call fcn.00477182
jmp 0x4343f7
test ebx, ebx
jne case.0x4335c8.617
mov eax, 0x485400
jmp 0x431fed
test ebx, ebx
jne 0x433a1e
mov eax, 0x466c6b
jmp 0x431fed
cmp ebx, 1
jne 0x433a2d
mov eax, 0x466c99
jmp 0x431fed
cmp ebx, 2
jne case.0x4335c8.617
mov eax, 0x466c3b
jmp 0x431fed
cmp ebx, 0xffff
jbe 0x433a64
push 0x4f8de8
push ebx
mov dword [ebx + 8], edi
call fcn.0048d105
pop ecx
pop ecx
mov dword [ebx + 8], 2
jmp case.0x4335c8.617
test ebx, ebx
jne case.0x4335c8.617
mov dword [0x533710], 0x14
jmp 0x432ff9
test ebx, ebx
je case.0x4335c8.617
cmp dword [ebx], edi
je 0x433aa8
cmp dword [ebx + 4], edi
je 0x433aa8
push 6
pop eax
cmp dword [ebx], eax
cmovb eax, dword [ebx]
shl eax, 2
push eax
push dword [ebx + 4]
push 0x4fa020
call fcn.0049a510
add esp, 0xc
cmp dword [ebx + 8], edi
je 0x433ab6
push dword [ebx + 8]
call fcn.0041fb47
pop ecx
push edi
call fcn.0041a71c
pop ecx
cmp dword [0x4f7c80], edi
je case.0x4335c8.617
jmp 0x4321dc
sub esi, 0x3a5
je 0x433b66
sub esi, 1
je 0x433b4b
sub esi, 1
je 0x433b36
sub esi, 1
je 0x433b21
sub esi, 1
je 0x433b0c
sub esi, 1
jne case.0x434118.3036
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.004478f8
jmp 0x433b5e
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.004472e1
jmp 0x433b5e
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.00447944
jmp 0x433b5e
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0044748b
jmp 0x433b5e
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.00447097
add esp, 0x14
jmp 0x431fed
test ebx, ebx
je case.0x4335c8.617
push dword [ebx]
push dword [ebx + 8]
push dword [ebx + 4]
push 0x180
push 1
push dword [0x531e64]
call dword [sym.imp.USER32.dll_GetSubMenu]
push eax
call fcn.00479ad7
add esp, 0x14
test eax, eax
je case.0x4335c8.617
push edi
push eax
push 0x111
push dword [0x531f74]
jmp 0x4329a9
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0044759e
jmp 0x433b5e
mov eax, 0x3b2
cmp esi, eax
jg 0x433c9d
je 0x433c8d
sub esi, 0x3ac
je 0x433c75
sub esi, 1
je 0x433c5d
sub esi, 1
je 0x433c45
sub esi, 1
je 0x433c2d
sub esi, 1
je 0x433c15
sub esi, 1
jne case.0x434118.3036
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.004472e1
jmp 0x433b5e
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.004473e4
jmp 0x433b5e
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.004472ea
jmp 0x433b5e
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.004472e1
jmp 0x433b5e
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.004478ac
jmp 0x433b5e
push dword [ebx + 0x10]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.00447860
jmp 0x433b5e
push dword [ebx + 8]
push dword [ebx + 4]
call fcn.00447758
jmp 0x4330eb
sub esi, 0x3e7
je 0x433d08
sub esi, 1
je 0x433cfd
sub esi, 0x64
je 0x433ceb
sub esi, 1
je 0x433cc9
sub esi, 1
jne case.0x434118.3036
call fcn.0048fa6a
xor ebx, ebx
inc ebx
jmp 0x433ce1
xor edi, edi
call fcn.00492412
xor ebx, ebx
test eax, eax
setg bl
call fcn.00491a51
push edi
call fcn.00492880
pop ecx
call fcn.0045c8b5
jmp 0x432823
cmp ebx, 0xffff
jbe case.0x434118.3036
push edi
jmp 0x43420c
push ebx
call 0x45a78f
jmp 0x4334c9
mov ecx, dword [0x531e9c]
cmp ecx, 2
jne 0x433d1a
push ecx
pop eax
jmp 0x431fed
xor eax, eax
test ecx, ecx
jmp 0x434131
push dword [ebp + 8]
xor eax, eax
cmp esi, edx
sete al
inc eax
mov dword [0x533118], eax
call fcn.004423a7
jmp 0x433000
mov eax, 0xbca
cmp esi, eax
jg 0x4340f6
je 0x4340e0
mov eax, 0x53f
cmp esi, eax
jg 0x433f7f
je 0x433f75
add eax, 0xffffffd4
cmp esi, eax
jg 0x433ea7
je 0x433e9d
sub esi, 0x4b1
je 0x433e7f
sub esi, 0x27
je 0x433e75
sub esi, 5
je 0x433e5e
sub esi, 0x2e
je 0x433df5
sub esi, 1
je 0x433ddb
sub esi, 1
jne case.0x434118.3036
push dword [ebx + 4]
push dword [ebx]
call fcn.00489cc6
pop ecx
pop ecx
push 0x64
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push 0x109
push 0x100
push edi
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x433dbb
jmp 0x4336e3
cmp ebx, 1
jne 0x433deb
push edi
call fcn.00489938
jmp 0x4343f7
call fcn.0048942a
jmp 0x431fed
cmp dword [ebx + 4], 2
jne 0x433e07
cmp byte [0x4f7c49], 1
jne 0x433e07
mov dword [ebx + 4], edi
mov eax, dword [ebx]
test eax, eax
je 0x433e40
cmp word [eax], di
je 0x433e40
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsURLW]
test eax, eax
je 0x433e40
push dword [ebx]
call fcn.00490de9
pop ecx
test eax, eax
je 0x433e40
cmp word [eax], di
je 0x433e40
push dword [ebx + 0x10]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
jmp 0x432b61
push dword [ebx + 0x10]
xor eax, eax
cmp dword [ebx + 4], edi
sete al
push eax
push dword [ebx]
call fcn.00492553
push eax
call fcn.004933e8
add esp, 0xc
jmp 0x433e31
push 1
push ebx
call fcn.00492553
push eax
push ebx
call fcn.00492cfd
add esp, 0x10
jmp 0x43299c
mov eax, fcn.004314f7
jmp 0x431fed
test ebx, ebx
je 0x433e93
push 0x504ee8
push 0x104
push ebx
call fcn.0040c4d6
mov eax, 0x504ce0
jmp 0x431fed
push dword [ebx + 4]
push dword [ebx]
jmp 0x432bff
mov eax, esi
sub eax, 0x514
je 0x433f61
sub eax, 0x20
je case.0x432c32.332
dec eax
sub eax, 1
je 0x433eff
sub eax, 1
je 0x433ef5
sub eax, 1
je 0x433eeb
sub eax, 6
jne case.0x434118.3036
xor eax, eax
cmp esi, 0x156
push ebx
setne al
mov dword [ebx + 0x18], eax
call fcn.0048e1ca
jmp 0x433000
mov eax, 0x502730
jmp 0x431fed
mov eax, 0x5011d8
jmp 0x431fed
mov eax, 0x5019f8
jmp 0x431fed
xor eax, eax
lea edi, [ebp - 0x28]
cmp esi, 0x14c
push 7
setne al
pop ecx
mov dword [ebx + 0x18], eax
xor eax, eax
rep stosd dword es:[edi], eax
push 0x1c
lea eax, [ebp - 0x28]
push eax
push dword [ebx + 8]
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
je 0x433f4b
push 0x4d1468
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp eax, dword [ebp - 0x24]
jne 0x433f4b
mov dword [ebx + 0x10], 0xfffffffe
push ebx
mov ecx, 0x533718
call fcn.00406a4d
push ebx
call fcn.0048dfe9
jmp 0x433000
push ebx
push 0xb
mov ecx, 0x4fa180
call fcn.00475e7c
xor eax, eax
jmp 0x431fed
mov eax, 0x5017f0
jmp 0x431fed
mov eax, 0xbbd
cmp esi, eax
jg 0x434021
je 0x434009
sub esi, 0x540
je 0x433fff
sub esi, 0x102
je case.0x4335c8.617
sub esi, 0x191
je 0x4340e0
sub esi, 1
je case.0x4335c8.617
sub esi, 0x3e5
je 0x433ff5
sub esi, 3
jne case.0x434118.3036
cmp dword [0x531d38], edi
jne case.0x4335c8.617
xor eax, eax
mov word [ebp - 0x8cc], ax
test ebx, ebx
je 0x433fe4
lea eax, [ebp - 0x8cc]
push eax
push ebx
mov ecx, eax
call fcn.0041559c
lea eax, [ebp - 0x8cc]
push eax
call fcn.0049102d
jmp 0x433000
call fcn.00448f10
jmp 0x431fed
mov eax, 0x5013e0
jmp 0x431fed
cmp dword [0x531d38], edi
jne 0x434018
push ebx
call fcn.0049102d
pop ecx
push edi
push ebx
push 0xa
jmp 0x434312
sub esi, 0xbbf
je 0x4340c5
sub esi, 3
je case.0x434118.3036
sub esi, 1
je 0x4340b1
sub esi, 1
je 0x434099
sub esi, 3
je 0x434078
dec esi
sub esi, 1
jne case.0x434118.3036
lea eax, [ebp - 4]
push eax
call fcn.00428a83
pop ecx
test eax, eax
js case.0x434118.3036
mov ecx, dword [ebp - 4]
push ebx
call fcn.00418753
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp case.0x434118.3036
sub ebx, edi
je 0x43408f
sub ebx, 1
jne case.0x434118.3036
mov eax, fcn.004655ee
jmp 0x431fed
mov eax, fcn.00465916
jmp 0x431fed
push edi
call dword [sym.imp.USER32.dll_ReplyMessage]
push ebx
call fcn.0047a98f
push ebx
call fcn.004a1b5f
jmp 0x432286
cmp ebx, 2
ja case.0x4335c8.617
push ebx
call fcn.00414206
jmp 0x433000
mov eax, dword [0x531f30]
mov dword [0x531f34], eax
xor eax, eax
test ebx, ebx
sete al
mov dword [0x531f30], eax
jmp case.0x434118.3036
push dword [0x531f70]
call fcn.00473a66
pop ecx
call fcn.00428d9a
jmp case.0x434118.3036
mov eax, 0x10000
cmp esi, eax
jg case.0x434118.3036
je 0x4343f1
add esi, 0xfffff435
cmp esi, 0x1b
ja case.0x434118.3036
jmp dword [esi*4 + 0x43460a]
mov eax, dword [0x531bbc]
jmp 0x431fed
xor eax, eax
cmp dword [0x505118], eax
sete al
jmp 0x431fed
lea eax, [ebp - 8]
push eax
call fcn.00428aea
pop ecx
xor ecx, ecx
test eax, eax
cmovns ecx, dword [ebp - 8]
mov eax, ecx
jmp 0x431fed
mov eax, dword [0x4f85e4]
test ebx, ebx
jne 0x434169
lea ecx, [eax + 1]
mov dword [0x4f85e4], ecx
jmp 0x431fed
lea ecx, [eax + ebx]
jmp 0x43415e
mov eax, ebx
sub eax, edi
je 0x43419a
sub eax, 1
je 0x434193
push ebx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x4335c8.617
push ebx
call fcn.0047adf4
jmp 0x433000
call fcn.0047ae05
jmp 0x43419f
call fcn.0047af51
neg eax
sbb eax, eax
inc eax
jmp 0x431fed
mov al, byte [ebx]
cmp al, 0x68
je 0x4341b3
cmp al, 0x48
jne 0x4341b9
cmp byte [ebx + 1], 0
je 0x4341e2
push ebx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4341e2
push edi
push ebx
call fcn.00405018
mov esi, eax
push esi
push edi
call fcn.0040cb16
push esi
call fcn.004a1b5f
add esp, 0x14
jmp case.0x4335c8.617
push ebx
push edi
call fcn.0040cb16
jmp 0x432286
cmp ebx, 0xffff
jbe case.0x434118.3036
push 1
jmp 0x43420c
cmp ebx, 0xffff
jbe case.0x434118.3036
push 3
cmp dword [ebx + 4], edi
je 0x434223
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.0049135b
add esp, 0x10
jmp 0x43422e
push edi
push dword [ebx]
call fcn.00491763
add esp, 0xc
call fcn.0045c8b5
jmp case.0x434118.3036
push dword [ebx + 0xc]
mov ecx, 0x50bb88
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.004394a2
test al, al
jne case.0x434118.3036
test ebx, ebx
je case.0x4335c8.617
cmp dword [ebx], edi
je case.0x4335c8.617
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.00427818
jmp 0x433114
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
call fcn.00427bfe
jmp 0x432ba3
call fcn.00428d58
jmp 0x431fed
test ebx, ebx
je case.0x4335c8.617
lea eax, [ebp - 4]
push eax
call fcn.00428aea
pop ecx
test eax, eax
js 0x4342be
push dword [ebx + 4]
mov ecx, dword [ebp - 4]
push dword [ebx]
call fcn.00428668
mov dword [ebx + 8], eax
jmp 0x4342e1
mov dword [ebx + 8], edi
jmp case.0x4335c8.617
lea eax, [ebp - 4]
push eax
call fcn.00428aea
pop ecx
test eax, eax
js case.0x4335c8.617
mov ecx, dword [ebp - 4]
push ebx
call fcn.00428c87
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp case.0x4335c8.617
mov eax, 0x5045a8
jmp 0x431fed
push ebx
call fcn.00490f16
jmp 0x4343f7
call fcn.00490f63
jmp 0x431fed
push edi
push ebx
push 0x1e
mov ecx, dword [0x531bc0]
push 0x6d657461
call fcn.00476c16
jmp case.0x4335c8.617
mov eax, 0x5322a0
jmp 0x431fed
mov eax, 0x532ac0
jmp 0x431fed
lea eax, [ebp - 8]
mov dword [ebp - 8], edi
push eax
push ebx
call fcn.00489f65
jmp 0x4330eb
push 0x28
call fcn.0049909d
pop ecx
test eax, eax
je 0x433645
push ebx
mov ecx, eax
call fcn.0043a2b6
mov edi, eax
jmp 0x433645
test ebx, ebx
je case.0x434118.3044
cmp word [ebx], 0x22
jne 0x4343ae
push 0x800
lea eax, [ebp - 0x8ac]
push edi
push eax
call fcn.0049a3b0
push 0x400
lea eax, [ebp - 0x8ac]
push eax
push ebx
call fcn.0040f4c3
lea eax, [ebp - 0x8ac]
push eax
call fcn.0042fd9a
add esp, 0x1c
jmp case.0x4335c8.617
push ebx
call fcn.0042fd9a
jmp 0x433000
call fcn.004361df
jmp 0x431fed
xor eax, eax
mov dword [ebp - 4], edi
test ebx, ebx
sete al
push eax
lea eax, [ebp - 4]
push eax
call fcn.00411bde
pop ecx
pop ecx
test eax, eax
jne case.0x4335c8.617
mov eax, dword [ebp - 4]
test eax, eax
jne 0x431fed
jmp case.0x4335c8.617
push ebx
call fcn.0043467a
pop ecx
jmp 0x431fed