Function at 0x401000
Capabilities:
Allocate thread local storage
Log keystrokes via polling

Disassembly:
push 0x1a8
push 0
push 0x45d4f4
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x45d4f8], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x45d4f4], eax
mov eax, 0x44ea74
mov dword [0x45d530], eax
call fcn.004245e3
call fcn.0043ca40
call fcn.0043be4b
call fcn.0043baa0
call fcn.0043a380
call fcn.004384b4
call fcn.00437c40
call fcn.00437479
call fcn.00436997
call fcn.00435eb2
call fcn.00435c4f
call fcn.00435962
call fcn.00434eee
call fcn.004348cd
call fcn.004335d0
call fcn.004325b7
call fcn.00430a26
call fcn.0042abbf
call fcn.0042aa01
call fcn.0042a8d6
call fcn.0042a696
call fcn.0042a50d
call fcn.00428dc7
call fcn.00427afe
call fcn.00426ff7
call fcn.004265b9
call fcn.00424fcd
call fcn.00424c8b
call fcn.00424675
lea eax, [0x41bc80]
push eax
call fcn.00428b00
push 8
push 0x44ea40
lea eax, [0x45d68c]
push eax
push 4
call fcn.004369b6
mov dword [0x45d574], 0
push 0x45d684
push 0x44ea40
push 8
push 0xad
push 4
call fcn.0043598b
mov eax, str.shell32.dll
push eax
push 0xffffffff
call fcn.0042a580
mov dword [0x45d500], eax
mov eax, str.SHGetKnownFolderPath
push eax
push dword [0x45d500]
call fcn.0042a5da
mov dword [0x45d504], eax
push edx
call fcn.0043ca90
pop edx
push eax
mov ebp, 0x44ea74
push ebp
call fcn.00403eac
lea eax, [0x45d4fc]
push eax
call fcn.0043cad0
push dword [0x45d500]
call fcn.0042a4c0
push edx
call fcn.0043ca90
pop edx
push eax
call fcn.00418a46
mov edx, str.bin_
push edx
call fcn.0043cb60
lea eax, [0x45d524]
push eax
call fcn.0043cad0
mov edx, str.NDEwMDEyOTcxMTA2OTQ3AA
lea ecx, [0x45d50c]
call fcn.00424008
mov edx, str.aHR0cHM6Ly95b29tb25leS5ydS90by80MTAwMTI5NzExMDY5NDcA
lea ecx, [0x45d52c]
call fcn.00424008
mov edx, str.RUlUU0U4MTQA
lea ecx, [0x45d514]
call fcn.00424008
mov edx, str.aHR0cHM6Ly9xaXdpLmNvbS9uL0VJVFNFODE0AA
lea ecx, [0x45d550]
call fcn.00424008
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, dword [0x45d524]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
mov edx, str.settings.ini
push edx
call fcn.0043cb60
call fcn.00424232
add dword [esp], edx
call fcn.00427efb
call fcn.00424250
mov eax, str.Settings
push eax
call fcn.00427f39
push 0xffff0001
mov eax, str.Desktop_Width
push eax
call fcn.0042802d
push eax
lea ebp, [0x45d578]
pop dword [ebp]
push 0xffff0001
mov eax, str.Desktop_Height
push eax
call fcn.0042802d
push eax
pop dword [ebp + 4]
push 0
mov eax, str.Main_X
push eax
call fcn.0042802d
push eax
pop dword [ebp + 8]
push 0
mov eax, str.Main_Y
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xc]
push 0x1d9
mov eax, str.Main_Width
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x10]
push 0x10a
mov eax, str.Main_Height
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x14]
push 0
mov eax, str.Main_Maximize
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x18]
push 0
mov eax, str.Main_Top
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x1c]
push 0
mov eax, str.Open_Settings
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x20]
push 0xffff0001
mov eax, str.Setting_X
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x24]
push 0xffff0001
mov eax, str.Setting_Y
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x28]
push 0x18b
mov eax, str.Setting_Width
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x2c]
push 0x17f
mov eax, str.Setting_Height
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x30]
push 0
mov eax, str.Setting_Stage
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xc4]
push 0xf5
mov eax, str.Window_Transparency
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x34]
push 0x373737
mov eax, str.Editor_BackColor
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x38]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, 0x44a044
push eax
mov eax, str.Editor_FontName
push eax
call fcn.0042804a
lea eax, [ebp + 0x3c]
push eax
call fcn.0043cad0
push 0xe
mov eax, str.Editor_FontSize
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x40]
push 0xb4b4b4
mov eax, str.Editor_FontColor
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x44]
push 0
mov eax, str.Editor_FontStyle
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x48]
push 1
mov eax, str.Unpack_Super
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x4c]
push 1
mov eax, str.Unpack_System
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x50]
push 1
mov eax, str.Unpack_Vendor
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x54]
push 1
mov eax, str.Unpack_Product
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x58]
push 1
mov eax, str.Unpack_Odm
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x5c]
push 1
mov eax, str.Open_Folder
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x60]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, 0x44e5f4
push eax
mov eax, 0x44d2d0
push eax
call fcn.0042804a
lea eax, [ebp + 0x64]
push eax
call fcn.0043cad0
push 1
mov eax, str.Pack_Super
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x68]
push 1
mov eax, str.Pack_System
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x6c]
push 1
mov eax, str.Pack_Vendor
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x70]
push 1
mov eax, str.Pack_Product
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x74]
push 1
mov eax, str.Pack_Odm
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x78]
push 0
mov eax, str.Index_Add
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x8c]
push 0
mov eax, str.Open_UsbTool
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x7c]
push 0
mov eax, str.Framework
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xc8]
push 1
mov eax, str.SignatureApk
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xcc]
push 1
mov eax, str.Alignment
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xd0]
push 0
mov eax, str.Locale_ID
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x90]
push 0
mov eax, str.Not_Delete
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x94]
push 0
mov eax, str.Transfer
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x98]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, str.__verbose
push eax
mov eax, str.Decompress
push eax
call fcn.0042804a
lea eax, [ebp + 0x9c]
push eax
call fcn.0043cad0
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, str.__force___quality_7___verbose
push eax
mov eax, str.Compress
push eax
call fcn.0042804a
lea eax, [ebp + 0xa0]
push eax
call fcn.0043cad0
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, 0x44a3ae
push eax
mov eax, str.Compress_Level
push eax
call fcn.0042804a
lea eax, [ebp + 0xa4]
push eax
call fcn.0043cad0
push 1
mov eax, str.Signature
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xa8]
push 1
mov eax, str.Toolbar_Set
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xc0]
push 0x64
mov eax, str.Free_Space
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xac]
push 1
mov eax, str.Expand_Size
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xb0]
push 1
mov eax, str.Resize
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xb4]
push 1
mov eax, str.No_Backup
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xb8]
push 0
mov eax, str.No_Org
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xbc]
push 0
mov eax, str.Get_Hash
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xd4]
push 0
mov eax, str.Seven_Pack
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xd8]
push 0
mov eax, str.Delete_Archive
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xe4]
push 0
mov eax, str.Seven_UnPack
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xdc]
push 1
mov eax, str.Subfolder
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xe0]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, 0x44a3ae
push eax
mov eax, str.Seven_Level
push eax
call fcn.0042804a
lea eax, [ebp + 0xe8]
push eax
call fcn.0043cad0
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, 0x44a044
push eax
mov eax, str.Size_Part
push eax
call fcn.0042804a
lea eax, [ebp + 0xec]
push eax
call fcn.0043cad0
push 0
mov eax, str.Delete_Image
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xf0]
push 1
mov eax, str.Auto_Exit
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xf8]
push 0xa
mov eax, str.AutoExit_Time
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0xf4]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, 0x44a044
push eax
mov eax, str.Path_UsbTool
push eax
call fcn.0042804a
lea eax, [ebp + 0x80]
push eax
call fcn.0043cad0
push 1
mov eax, str.Finish_Sound
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x84]
push 0x14
mov eax, str.Volume_Level
push eax
call fcn.0042802d
push eax
pop dword [ebp + 0x88]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, 0x44a044
push eax
mov eax, str.Pack_Folder
push eax
call fcn.0042804a
lea eax, [ebp + 0xfc]
push eax
call fcn.0043cad0
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, 0x44a044
push eax
mov eax, str.Unpack_Folder
push eax
call fcn.0042804a
lea eax, [ebp + 0x100]
push eax
call fcn.0043cad0
call fcn.0042813e
mov ebp, 0x44eac4
push ebp
push 0
call fcn.00436031
mov ebp, 0x44ef42
push ebp
push 1
call fcn.00436031
mov ebp, 0x44f3c0
push ebp
push 2
call fcn.00436031
mov ebp, 0x44f83e
push ebp
push 3
call fcn.00436031
mov ebp, 0x44fcbc
push ebp
push 4
call fcn.00436031
mov ebp, 0x45013a
push ebp
push 5
call fcn.00436031
mov ebp, 0x4505b8
push ebp
push 6
call fcn.00436031
mov ebp, 0x450a36
push ebp
push 7
call fcn.00436031
mov ebp, 0x450eb4
push ebp
push 8
call fcn.00436031
mov ebp, 0x451332
push ebp
push 9
call fcn.00436031
mov ebp, 0x4517b0
push ebp
push 0xa
call fcn.00436031
mov ebp, 0x451c2e
push ebp
push 0xb
call fcn.00436031
mov ebp, 0x4520ac
push ebp
push 0xc
call fcn.00436031
mov ebp, 0x45252a
push ebp
push 0xe
call fcn.00436031
mov ebp, 0x4529a8
push ebp
push 0xf
call fcn.00436031
mov ebp, 0x454f66
push ebp
push 0x10
call fcn.00436031
mov ebp, 0x457524
push ebp
push 0x11
call fcn.00436031
mov ebp, 0x4579a2
push ebp
push 0x12
call fcn.00436031
mov ebp, 0x457e20
push ebp
push 0x13
call fcn.00436031
mov ebp, 0x45829e
push ebp
push 0x14
call fcn.00436031
mov ebp, 0x45871c
push ebp
push 0x15
call fcn.00436031
mov ebp, 0x458b9a
push ebp
push 0x16
call fcn.00436031
mov ebp, 0x459018
push ebp
push 0x17
call fcn.00436031
call fcn.00425803
mov dword [0x45d508], eax
cmp dword [0x45d508], 0
je 0x401a4b
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, dword [0x45d524]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
mov edx, str.Complete.wav
push edx
call fcn.0043cb60
call fcn.0043cbc0
push 0
call fcn.00424232
add dword [esp + 4], edx
call fcn.00425a11
call fcn.00424250
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, str.Multi_Image_Kitchen_v
push edx
call fcn.0043cb60
push edx
call fcn.0043ca90
pop edx
push eax
call fcn.0040c3c5
pop eax
mov edx, 0x44dd52
push edx
call fcn.0043cb60
call fcn.0043cbc0
lea eax, [0x45d520]
push eax
call fcn.0043cad0
mov edx, dword [0x45d524]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
mov edx, str.recent.ini
push edx
call fcn.0043cb60
lea eax, [0x45d528]
push eax
call fcn.0043cad0
push 8
push 0x44ea40
lea eax, [0x45d694]
push eax
push 4
call fcn.004369b6
call fcn.0041cb32
lea ebp, [0x45d578]
mov ebx, dword [ebp + 0x20]
cmp ebx, 1
jne 0x401ae6
call fcn.00405328
call fcn.0043068c
mov ebx, eax
cmp ebx, 0x46
jl 0x401b63
mov eax, 0x44a94c
push eax
push 0xffffffff
call fcn.0042a580
mov dword [0x45d570], eax
push 1
push 0x233
mov eax, str.ChangeWindowMessageFilter
push eax
push dword [0x45d570]
call fcn.0042a636
push 1
push 0x4a
mov eax, str.ChangeWindowMessageFilter
push eax
push dword [0x45d570]
call fcn.0042a636
push 1
push 0x49
mov eax, str.ChangeWindowMessageFilter
push eax
push dword [0x45d570]
call fcn.0042a636
push dword [0x45d570]
call fcn.0042a4c0
lea eax, [0x420407]
push eax
call fcn.00430ad5
call fcn.0042718b
and eax, eax
je 0x401c31
mov dword [0x45d538], 0
jmp 0x401b88
call fcn.0042718b
mov ebx, eax
dec ebx
cmp ebx, dword [0x45d538]
jl 0x401c31
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push dword [0x45d538]
call fcn.0042719f
call fcn.0043cbc0
mov edx, str._total
pop ecx
push ecx
call fcn.00424260
mov ecx, eax
call fcn.00424270
je 0x401bf0
push 0x11
call sub.USER32.dll_GetAsyncKeyState
and eax, eax
je 0x401be3
xor eax, eax
jmp 0x401be8
mov eax, 1
and eax, eax
je 0x401bee
jmp 0x401c31
jmp 0x401c25
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push dword [0x45d538]
call fcn.0042719f
call fcn.00424232
add dword [esp], edx
call fcn.00415109
call fcn.00424250
inc dword [0x45d538]
jno 0x401b88
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, dword [0x45d524]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
mov edx, 0x44e630
push edx
call fcn.0043cb60
call fcn.00424232
add dword [esp], edx
call fcn.00432743
call fcn.00424250
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x401c7c
cmp edi, 0xffffffff
jne 0x401c7c
xor eax, eax
jmp 0x401c81
mov eax, 1
or eax, eax
je 0x401cbe
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, dword [0x45d524]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
mov edx, 0x44e630
push edx
call fcn.0043cb60
call fcn.00424232
add dword [esp], edx
call fcn.0043289a
call fcn.00424250
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
call fcn.004271ed
lea eax, [0x45d56c]
push eax
call fcn.0043cad0
push dword [0x45d56c]
call fcn.0041dedd
push dword [0x45d56c]
call fcn.0043291a
mov ebx, eax
and ebx, 1
and ebx, ebx
je 0x401d9e
push edx
call fcn.0043ca90
pop edx
push eax
push 0
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, 0x44bf20
push edx
call fcn.0043cb60
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push pe_nt_image_headers32
push dword [0x45d56c]
call fcn.00432936
cdq
push edx
push eax
call fcn.0043a630
pop eax
call fcn.00424232
add dword [esp], edx
call fcn.0041e1f8
call fcn.00424250
push 0x64
push 0x65
call fcn.0042ac65
push 0
push 2
push 0x410
push 0x65
call fcn.0042ac9d
push eax
call sub.USER32.dll_SendMessageW
push 0
lea eax, [0x4184a7]
push eax
call fcn.00424d06
jmp 0x401db4
push 0
lea eax, [0x40efda]
push eax
call fcn.00424d06
mov dword [0x45d554], eax
call fcn.00430c10
mov dword [0x45d558], eax
push dword [0x45d558]
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x402c7a
call fcn.004349e7
mov dword [0x45d53c], eax
mov ebx, dword [0x45d53c]
cmp ebx, 0x64
jl 0x401df9
mov ebx, dword [0x45d53c]
cmp ebx, 0x6e
jge 0x401df9
mov eax, 1
jmp 0x401dfb
xor eax, eax
and eax, eax
je 0x401fe3
mov ebx, dword [0x45d53c]
add ebx, 0xffffff9c
push ebx
push dword [0x45d694]
call fcn.00436a48
mov ebp, dword [0x45d698]
mov edx, dword [ebp + 8]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
lea eax, [0x45d540]
push eax
call fcn.0043cad0
push dword [0x45d540]
call fcn.00432743
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x401e54
cmp edi, 0xffffffff
je 0x401e58
xor eax, eax
jmp 0x401e5d
mov eax, 1
or eax, eax
jne 0x401e8b
push dword [0x45d540]
call fcn.00432743
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x401e80
jl 0x401e7c
cmp ebx, 0
ja 0x401e80
xor eax, eax
jmp 0x401e85
mov eax, 1
or eax, eax
jne 0x401e8b
jmp 0x401e92
mov eax, 1
jmp 0x401e94
xor eax, eax
and eax, eax
je 0x401ead
push dword [0x45d540]
call fcn.00415109
call fcn.00403f68
jmp 0x401fde
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push dword [0x45d540]
call fcn.00432947
call fcn.0043cbc0
mov edx, 0x44a044
pop ecx
push ecx
call fcn.00424260
mov ecx, eax
call fcn.00424270
jne 0x401f61
push edx
call fcn.0043ca90
pop edx
push eax
push 0
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, str.______
push edx
call fcn.0043cb60
mov ebp, dword [0x45d684]
mov edx, dword [ebp + 0x1b8]
push edx
call fcn.0043cb60
mov edx, 0x44a046
push edx
call fcn.0043cb60
mov edx, dword [0x45d540]
push edx
call fcn.0043cb60
mov edx, 0x44d8e8
push edx
call fcn.0043cb60
mov edx, dword [ebp + 0x1c0]
push edx
call fcn.0043cb60
mov edx, 0x44a29e
push edx
call fcn.0043cb60
call fcn.00424232
add dword [esp], edx
call fcn.0041e1f8
call fcn.00424250
jmp 0x401fde
push edx
call fcn.0043ca90
pop edx
push eax
push 0
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, str.______
push edx
call fcn.0043cb60
mov ebp, dword [0x45d684]
mov edx, dword [ebp + 0x1bc]
push edx
call fcn.0043cb60
mov edx, 0x44a046
push edx
call fcn.0043cb60
mov edx, dword [0x45d540]
push edx
call fcn.0043cb60
mov edx, 0x44d8e8
push edx
call fcn.0043cb60
mov edx, dword [ebp + 0x1c4]
push edx
call fcn.0043cb60
mov edx, 0x44a29e
push edx
call fcn.0043cb60
call fcn.00424232
add dword [esp], edx
call fcn.0041e1f8
call fcn.00424250
jmp 0x402c75
push dword [0x45d53c]
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4020ea
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push 1
push 0
mov ebp, dword [0x45d684]
mov edx, dword [ebp + 8]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
mov edx, str._.img_.partition_.fex_.zip_.dat_.br_.apk_.img_.partition_.fex_.zip_.dat_.br_.apkAll_files__._.
push edx
call fcn.0043cb60
call fcn.0043cbc0
lea ebp, [0x45d578]
push dword [ebp + 0x100]
mov ebp, dword [0x45d684]
push dword [ebp + 4]
call fcn.00424232
add dword [esp + 8], edx
call fcn.00426696
lea eax, [0x45d51c]
push eax
call fcn.0043cad0
mov edx, dword [0x45d51c]
xor ecx, ecx
call fcn.00424270
jne 0x4020e5
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push dword [0x45d51c]
call fcn.004329ba
lea ebp, [0x45d578]
lea eax, [ebp + 0x100]
push eax
call fcn.0043cad0
mov edx, dword [0x45d51c]
xor ecx, ecx
call fcn.00424270
jne 0x4020e0
push dword [0x45d51c]
call fcn.00415109
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
call fcn.004265f2
lea eax, [0x45d51c]
push eax
call fcn.0043cad0
jmp 0x4020a3
call fcn.00403f68
jmp 0x402c74
mov ebx, 2
cmp ebx, dword [esp]
jne 0x4021ab
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
lea ebp, [0x45d578]
push dword [ebp + 0xfc]
mov ebp, dword [0x45d684]
push dword [ebp + 0xc]
call fcn.00426a93
lea eax, [0x45d560]
push eax
call fcn.0043cad0
mov edx, dword [0x45d560]
xor ecx, ecx
call fcn.00424270
jne 0x40216a
push dword [0x45d560]
call fcn.00432743
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x402156
cmp edi, 0xffffffff
je 0x40215a
xor eax, eax
jmp 0x40215f
mov eax, 1
or eax, eax
je 0x40216a
mov eax, 1
jmp 0x40216c
xor eax, eax
and eax, eax
je 0x4021a6
mov edx, dword [0x45d560]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
lea ebp, [0x45d578]
lea eax, [ebp + 0xfc]
push eax
call fcn.0043cad0
push dword [0x45d560]
call fcn.00415109
call fcn.00403f68
jmp 0x402c74
mov ebx, 6
cmp ebx, dword [esp]
jne 0x4021e2
push 0x21
call fcn.00429f4c
and eax, eax
je 0x4021dd
call fcn.00407744
push 0
call fcn.00430c18
push eax
push 0x21
call fcn.00429fda
jmp 0x402c74
mov ebx, 7
cmp ebx, dword [esp]
jne 0x402212
push dword [0x45d528]
call fcn.00432a67
push dword [0x45d694]
call fcn.00436b1a
mov eax, 0x44a044
push eax
call fcn.00409aa1
jmp 0x402c74
mov ebx, 8
cmp ebx, dword [esp]
jne 0x402226
call fcn.00405328
jmp 0x402c74
mov ebx, 9
cmp ebx, dword [esp]
jne 0x402249
call fcn.00413cac
mov ebx, eax
cmp ebx, 6
jne 0x402244
add esp, 8
jmp 0x403e2d
jmp 0x402c74
mov ebx, 0x14
cmp ebx, dword [esp]
jne 0x40229a
lea ebp, [0x45d578]
mov ebx, dword [ebp + 0x1c]
cmp ebx, 1
jne 0x402270
lea ebp, [0x45d578]
mov dword [ebp + 0x1c], 0
jmp 0x40227d
lea ebp, [0x45d578]
mov dword [ebp + 0x1c], 1
call fcn.00412062
lea ebp, [0x45d578]
push dword [ebp + 0x1c]
push 0
call fcn.00430c34
jmp 0x402c74
mov ebx, 0x15
cmp ebx, dword [esp]
jne 0x4022ea
lea ebp, [0x45d578]
mov ebx, dword [ebp + 0xc0]
and ebx, ebx
jne 0x4022c6
lea ebp, [0x45d578]
mov dword [ebp + 0xc0], 1
jmp 0x4022d6
lea ebp, [0x45d578]
mov dword [ebp + 0xc0], 0
call fcn.00412062
call fcn.0041b640
call fcn.0040e434
jmp 0x402c74
mov ebx, 0x16
cmp ebx, dword [esp]
jne 0x40236b
lea ebp, [0x45d578]
mov ebx, dword [ebp + 0xc0]
and ebx, ebx
je 0x402317
lea ebp, [0x45d578]
mov ebx, dword [ebp + 0xc0]
cmp ebx, 1
je 0x402317
jmp 0x40231e
mov eax, 1
jmp 0x402320
xor eax, eax
and eax, eax
je 0x402336
lea ebp, [0x45d578]
mov dword [ebp + 0xc0], 2
jmp 0x402357
lea ebp, [0x45d578]
mov ebx, dword [ebp + 0xc0]
cmp ebx, 2
jne 0x402357
lea ebp, [0x45d578]
mov dword [ebp + 0xc0], 1
call fcn.00412062
call fcn.0041b640
call fcn.0040e434
jmp 0x402c74
mov ebx, 0x17
cmp ebx, dword [esp]
jne 0x4023ad
lea ebp, [0x45d578]
mov ebx, dword [ebp + 0x20]
and ebx, ebx
jne 0x402396
call fcn.00405328
lea ebp, [0x45d578]
mov dword [ebp + 0x20], 1
jmp 0x4023a3
lea ebp, [0x45d578]
mov dword [ebp + 0x20], 0
call fcn.00412062
jmp 0x402c74
mov ebx, 0x18
cmp ebx, dword [esp]
jne 0x402476
push edx
call fcn.0043ca90
pop edx
push eax
push 0
mov eax, 0x44a044
push eax
push 1
mov eax, 0x44a044
push eax
mov eax, 0x44bc1a
push eax
mov eax, 0x44a044
push eax
mov edx, dword [0x45d4fc]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push 1
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
call fcn.004271ed
call fcn.00424232
add dword [esp], edx
call fcn.00432a75
pop eax
mov edx, str..lnk
push edx
call fcn.0043cb60
call fcn.0043cbc0
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
call fcn.004271ed
call fcn.00424232
add dword [esp], edx
call fcn.00424232
add dword [esp + 4], edx
call fcn.004158b0
call fcn.00424250
jmp 0x402c74
mov ebx, 0x19
cmp ebx, dword [esp]
jne 0x4024c4
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, 0x44a044
push eax
mov edx, dword [0x45d524]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
mov edx, str.Help.chm
push edx
call fcn.0043cb60
call fcn.00424232
add dword [esp], edx
call fcn.0042ab14
call fcn.00424250
jmp 0x402c74
mov ebx, 0x1d
cmp ebx, dword [esp]
jne 0x4024de
mov eax, str.https:__www.youtube.com_channel_UCW4P2Eb49_15phyn_T0i0Fg
push eax
call fcn.004277f2
jmp 0x402c74
mov ebx, 0x1e
cmp ebx, dword [esp]
jne 0x4024f2
call fcn.0040c181
jmp 0x402c74
mov ebx, 0x1f
cmp ebx, dword [esp]
jne 0x402506
call fcn.0041a22b
jmp 0x402c74
mov ebx, 0xa
cmp ebx, dword [esp]
jne 0x402525
push dword [0x45d55c]
push 0x64
call fcn.0042acb9
jmp 0x402c74
mov ebx, 0xb
cmp ebx, dword [esp]
jne 0x40259c
push dword [0x45d518]
call fcn.00424c97
and eax, eax
je 0x402549
push dword [0x45d518]
call fcn.00424da6
push 0
push 1
push 0x410
push 0x65
call fcn.0042ac9d
push eax
call sub.USER32.dll_SendMessageW
push 0
push 0x65
call fcn.0042ac65
mov edx, 0x44a044
lea ecx, [0x45d55c]
call fcn.00424008
push dword [0x45d55c]
push 0x64
call fcn.0042acb9
jmp 0x402c74
mov ebx, 0xc
cmp ebx, dword [esp]
jne 0x4025e9
push 0
push 0
push 0x301
push 0x64
call fcn.0042ac9d
push eax
call sub.USER32.dll_SendMessageW
push 0
push 0xffffffff
push 0xb1
push 0x64
call fcn.0042ac9d
push eax
call sub.USER32.dll_SendMessageW
jmp 0x402c74
mov ebx, 0xd
cmp ebx, dword [esp]
jne 0x40269a
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
call fcn.004356f6
call fcn.0043cbc0
mov edx, 0x44a044
pop ecx
push ecx
call fcn.00424260
mov ecx, eax
call fcn.00424270
jne 0x402695
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, dword [0x45d55c]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
mov edx, str._n_______Get_Clipboard_Text_______n
push edx
call fcn.0043cb60
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
call fcn.004356f6
pop eax
mov edx, str._n_______End_Clipboard_Text_______n_n
push edx
call fcn.0043cb60
call fcn.0043cbc0
push 0x64
call fcn.00424232
add dword [esp + 4], edx
call fcn.0042acb9
call fcn.00424250
push 0x64
call fcn.00415168
jmp 0x402c74
mov ebx, 0xe
cmp ebx, dword [esp]
jne 0x4026c8
push 0xffffffff
push 0
push 0xb1
push 0x64
call fcn.0042ac9d
push eax
call sub.USER32.dll_SendMessageW
jmp 0x402c74
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x4026dc
call fcn.0040c94b
jmp 0x402c74
mov ebx, 0x11
cmp ebx, dword [esp]
jne 0x402759
mov eax, dword [0x45d55c]
push eax
push 0
push 0x43e
push 0x64
call fcn.0042ac9d
push eax
call sub.USER32.dll_SendMessageW
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, str.https:__www.google.com_search_q
push edx
call fcn.0043cb60
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push 2
push dword [0x45d55c]
call fcn.0042a6aa
pop eax
call fcn.00424232
add dword [esp], edx
call fcn.004277f2
call fcn.00424250
jmp 0x402c74
mov ebx, 0x12
cmp ebx, dword [esp]
jne 0x402805
mov eax, dword [0x45d55c]
push eax
push 0
push 0x43e
push 0x64
call fcn.0042ac9d
push eax
call sub.USER32.dll_SendMessageW
push dword [0x45d55c]
mov edx, 0x44a044
pop ecx
call fcn.00424270
je 0x4027a7
mov eax, str.https:__4pda.to_forum_index.php_actsearch
push eax
call fcn.004277f2
jmp 0x402800
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, str.https:__4pda.to_forum_index.php_actsearchquery
push edx
call fcn.0043cb60
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push 0x18
push dword [0x45d55c]
call fcn.0042a6aa
pop eax
mov edx, str.usernameforums_5B_5Dallsubforums1sourceallsortrelresultposts
push edx
call fcn.0043cb60
call fcn.00424232
add dword [esp], edx
call fcn.004277f2
call fcn.00424250
jmp 0x402c74
mov ebx, 0x13
cmp ebx, dword [esp]
jne 0x40288d
mov eax, dword [0x45d55c]
push eax
push 0
push 0x43e
push 0x64
call fcn.0042ac9d
push eax
call sub.USER32.dll_SendMessageW
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, str.https:__translate.google.com__slautotlautotext
push edx
call fcn.0043cb60
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push 2
push dword [0x45d55c]
call fcn.0042a6aa
pop eax
mov edx, str.optranslate
push edx
call fcn.0043cb60
call fcn.00424232
add dword [esp], edx
call fcn.004277f2
call fcn.00424250
jmp 0x402c74
mov ebx, 0xf
cmp ebx, dword [esp]
jne 0x402c05
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push 0
mov eax, str._.txt_.txt
push eax
mov eax, str.LogFile.txt
push eax
mov ebp, dword [0x45d684]
push dword [ebp + 0x188]
call fcn.004266db
lea eax, [0x45d548]
push eax
call fcn.0043cad0
mov edx, dword [0x45d548]
xor ecx, ecx
call fcn.00424270
jne 0x402c03
push dword [0x45d548]
call fcn.00432743
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x40290b
jl 0x402907
cmp ebx, 0
ja 0x40290b
xor eax, eax
jmp 0x402910
mov eax, 1
or eax, eax
je 0x402977
push edx
call fcn.0043ca90
pop edx
push eax
push 0x21
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, 0x44ddf0
push edx
call fcn.0043cb60
mov edx, dword [0x45d548]
push edx
call fcn.0043cb60
mov edx, 0x44c33e
push edx
call fcn.0043cb60
call fcn.0043cbc0
mov eax, 0x44a044
push eax
call fcn.00424232
add dword [esp + 4], edx
call fcn.0040e5e6
call fcn.00424250
mov ebx, eax
cmp ebx, 1
jne 0x402977
mov eax, 1
jmp 0x402979
xor eax, eax
and eax, eax
jne 0x4029a5
push dword [0x45d548]
call fcn.00432743
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x402996
cmp edi, 0xffffffff
je 0x40299a
xor eax, eax
jmp 0x40299f
mov eax, 1
or eax, eax
jne 0x4029a5
jmp 0x4029ac
mov eax, 1
jmp 0x4029ae
xor eax, eax
and eax, eax
je 0x402c03
push dword [0x45d548]
push 0
call fcn.004337d0
and eax, eax
je 0x402c03
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, str.MIK_version:
push edx
call fcn.0043cb60
push edx
call fcn.0043ca90
pop edx
push eax
call fcn.0040c3c5
pop eax
mov edx, str._build:_3051
push edx
call fcn.0043cb60
call fcn.0043cbc0
push 0
call fcn.00424232
add dword [esp + 4], edx
call fcn.00433a40
call fcn.00424250
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, 0x44a5d4
push edx
call fcn.0043cb60
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
call fcn.004271ed
pop eax
call fcn.0043cbc0
push 0
call fcn.00424232
add dword [esp + 4], edx
call fcn.00433a40
call fcn.00424250
mov eax, 0x44a044
push eax
push 0
call fcn.00433a40
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, str.CPU_Name:
push edx
call fcn.0043cb60
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
call fcn.0043080f
pop eax
mov edx, 0x44a04c
push edx
call fcn.0043cb60
push 0
call fcn.0043085c
mov ebx, eax
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, ebx
cdq
push edx
push eax
call fcn.0043a630
pop eax
mov edx, str._core_
push edx
call fcn.0043cb60
call fcn.0043cbc0
push 0
call fcn.00424232
add dword [esp + 4], edx
call fcn.00433a40
call fcn.00424250
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, str.Full_Memory:
push edx
call fcn.0043cb60
push edx
call fcn.0043ca90
pop edx
push eax
push 0
call fcn.004308ad
push edx
push eax
call fcn.0041219b
pop eax
mov edx, str._____Free_Memory:
push edx
call fcn.0043cb60
push edx
call fcn.0043ca90
pop edx
push eax
push 1
call fcn.004308ad
push edx
push eax
call fcn.0041219b
pop eax
call fcn.0043cbc0
push 0
call fcn.00424232
add dword [esp + 4], edx
call fcn.00433a40
call fcn.00424250
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, str.Windows_Version:
push edx
call fcn.0043cb60
call fcn.0043068c
mov ebx, eax
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, ebx
cdq
push edx
push eax
call fcn.0043a630
pop eax
call fcn.0043cbc0
push 0
call fcn.00424232
add dword [esp + 4], edx
call fcn.00433a40
call fcn.00424250
mov eax, 0x44a044
push eax
push 0
call fcn.00433a40
push dword [0x45d55c]
push 0
call fcn.00433bc0
push 0
call fcn.00433500
jmp 0x402c74
mov ebx, 0x1a
cmp ebx, dword [esp]
jne 0x402c1c
mov eax, str.https:__4pda.to_forum_index.php_showtopic1017768
push eax
call fcn.004277f2
jmp 0x402c74
mov ebx, 0x1b
cmp ebx, dword [esp]
jne 0x402c33
mov eax, str.https:__t.me_IMG_TOOLS_NEWS
push eax
call fcn.004277f2
jmp 0x402c74
mov ebx, 0x1c
cmp ebx, dword [esp]
jne 0x402c4a
mov eax, str.https:__t.me_IMG_Tools
push eax
call fcn.004277f2
jmp 0x402c74
mov ebx, 0x23
cmp ebx, dword [esp]
jne 0x402c60
push 2
call fcn.00430989
jmp 0x402c74
mov ebx, 0x24
cmp ebx, dword [esp]
jne 0x402c74
push 3
call fcn.00430989
pop eax
jmp 0x403e27
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x403cfc
call fcn.004349f6
push eax
mov ebx, 0x67
cmp ebx, dword [esp]
jne 0x402cc9
push 0x67
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x1c]
call fcn.00412062
lea ebp, [0x45d578]
push dword [ebp + 0x1c]
push 0
call fcn.00430c34
jmp 0x403cf6
mov ebx, 0x69
cmp ebx, dword [esp]
jne 0x402d3f
push 0x69
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x34]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, dword [ebp + 0x34]
cdq
push edx
push eax
call fcn.0043a630
call fcn.0043cbc0
push 0x6a
call fcn.00424232
add dword [esp + 4], edx
call fcn.0042acb9
call fcn.00424250
push dword [ebp + 0x34]
push 0
call fcn.00430c18
push eax
call fcn.0040906a
jmp 0x403cf6
mov ebx, 0x6c
cmp ebx, dword [esp]
jne 0x402dde
lea ebp, [0x45d578]
push dword [ebp + 0x48]
push dword [ebp + 0x44]
push 0
push dword [ebp + 0x40]
push dword [ebp + 0x3c]
call fcn.00426c29
and eax, eax
je 0x402dd9
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
call fcn.00426d39
lea ebp, [0x45d578]
lea eax, [ebp + 0x3c]
push eax
call fcn.0043cad0
call fcn.00426d67
push eax
pop dword [ebp + 0x40]
call fcn.00426d73
push eax
pop dword [ebp + 0x48]
push dword [ebp + 0x48]
push dword [ebp + 0x40]
push dword [ebp + 0x3c]
push 1
call fcn.0043be98
push eax
push 0x64
call fcn.0042ad31
push 1
call fcn.0043bf61
and eax, eax
je 0x402dd9
push 1
call fcn.0043bf73
jmp 0x403cf6
mov ebx, 0x6b
cmp ebx, dword [esp]
jne 0x402e23
call fcn.00426e26
mov dword [0x45d568], eax
mov ebx, dword [0x45d568]
cmp ebx, 0xffffffff
jle 0x402e1e
push dword [0x45d568]
lea ebp, [0x45d578]
pop dword [ebp + 0x38]
push dword [ebp + 0x38]
push 2
push 0x64
call fcn.0042ada0
jmp 0x403cf6
mov ebx, 0x6d
cmp ebx, dword [esp]
jne 0x402e68
call fcn.00426e26
mov dword [0x45d54c], eax
mov ebx, dword [0x45d54c]
cmp ebx, 0xffffffff
jle 0x402e63
push dword [0x45d54c]
lea ebp, [0x45d578]
pop dword [ebp + 0x44]
push dword [ebp + 0x44]
push 1
push 0x64
call fcn.0042ada0
jmp 0x403cf6
mov ebx, 0x6e
cmp ebx, dword [esp]
jne 0x402f05
push 0x6e
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x40]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, dword [ebp + 0x40]
cdq
push edx
push eax
call fcn.0043a630
call fcn.0043cbc0
push 0x70
call fcn.00424232
add dword [esp + 4], edx
call fcn.0042acb9
call fcn.00424250
push dword [ebp + 0x48]
push dword [ebp + 0x40]
push dword [ebp + 0x3c]
push 1
call fcn.0043be98
push eax
push 0x64
call fcn.0042ad31
push 1
call fcn.0043bf61
and eax, eax
je 0x402f00
push 1
call fcn.0043bf73
jmp 0x403cf6
mov ebx, 0x71
cmp ebx, dword [esp]
jne 0x402f33
lea ebp, [0x45d578]
mov dword [ebp + 0xc0], 1
call fcn.00412062
call fcn.0041b640
call fcn.0040e434
jmp 0x403cf6
mov ebx, 0x72
cmp ebx, dword [esp]
jne 0x402f61
lea ebp, [0x45d578]
mov dword [ebp + 0xc0], 2
call fcn.00412062
call fcn.0041b640
call fcn.0040e434
jmp 0x403cf6
mov ebx, 0x73
cmp ebx, dword [esp]
jne 0x402f8f
lea ebp, [0x45d578]
mov dword [ebp + 0xc0], 0
call fcn.00412062
call fcn.0041b640
call fcn.0040e434
jmp 0x403cf6
mov ebx, 0x74
cmp ebx, dword [esp]
jne 0x402fdf
push 0x74
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xf8]
mov ebx, dword [ebp + 0xf8]
and ebx, ebx
jne 0x402fcb
push 1
push 0x75
call fcn.0042adcb
jmp 0x402fda
push 0
push 0x75
call fcn.0042adcb
jmp 0x403cf6
mov ebx, 0x75
cmp ebx, dword [esp]
jne 0x40302f
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push 0x75
call fcn.0042adf6
call fcn.00424232
add dword [esp], edx
call fcn.0043a790
call fcn.00424250
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xf4]
jmp 0x403cf6
mov ebx, 0x76
cmp ebx, dword [esp]
jne 0x403052
push 0x76
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x4c]
jmp 0x403cf6
mov ebx, 0x77
cmp ebx, dword [esp]
jne 0x403075
push 0x77
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x50]
jmp 0x403cf6
mov ebx, 0x78
cmp ebx, dword [esp]
jne 0x403098
push 0x78
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x54]
jmp 0x403cf6
mov ebx, 0x79
cmp ebx, dword [esp]
jne 0x4030bb
push 0x79
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x58]
jmp 0x403cf6
mov ebx, 0x7a
cmp ebx, dword [esp]
jne 0x4030de
push 0x7a
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x5c]
jmp 0x403cf6
mov ebx, 0x7b
cmp ebx, dword [esp]
jne 0x403101
push 0x7b
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x60]
jmp 0x403cf6
mov ebx, 0x7c
cmp ebx, dword [esp]
jne 0x403123
lea ebp, [0x45d578]
mov edx, 0x44e5f4
lea ecx, [ebp + 0x64]
call fcn.00424008
jmp 0x403cf6
mov ebx, 0x7d
cmp ebx, dword [esp]
jne 0x403145
lea ebp, [0x45d578]
mov edx, 0x44e5fc
lea ecx, [ebp + 0x64]
call fcn.00424008
jmp 0x403cf6
mov ebx, 0x7e
cmp ebx, dword [esp]
jne 0x403168
push 0x7e
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x68]
jmp 0x403cf6
mov ebx, 0x7f
cmp ebx, dword [esp]
jne 0x40318b
push 0x7f
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x6c]
jmp 0x403cf6
mov ebx, pe_nt_image_headers32
cmp ebx, dword [esp]
jne 0x4031ae
push pe_nt_image_headers32
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x70]
jmp 0x403cf6
mov ebx, 0x81
cmp ebx, dword [esp]
jne 0x4031d1
push 0x81
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x74]
jmp 0x403cf6
mov ebx, 0x82
cmp ebx, dword [esp]
jne 0x4031f4
push 0x82
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x78]
jmp 0x403cf6
mov ebx, 0x83
cmp ebx, dword [esp]
jne 0x4032a3
push 0x83
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x7c]
mov ebx, dword [ebp + 0x7c]
cmp ebx, 1
jne 0x40324b
push dword [ebp + 0x80]
call fcn.00432743
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x403237
cmp edi, 0xffffffff
je 0x40323b
xor eax, eax
jmp 0x403240
mov eax, 1
or eax, eax
je 0x40324b
mov eax, 1
jmp 0x40324d
xor eax, eax
and eax, eax
je 0x40329e
call fcn.00414943
lea ebp, [0x45d578]
push dword [ebp + 0x80]
call fcn.00432743
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x403275
cmp edi, 0xffffffff
je 0x403279
xor eax, eax
jmp 0x40327e
mov eax, 1
or eax, eax
je 0x40329e
push 0
push 0x83
call fcn.0042ac65
lea ebp, [0x45d578]
mov dword [ebp + 0x7c], 0
jmp 0x403cf6
mov ebx, 0x86
cmp ebx, dword [esp]
jne 0x4032b7
call fcn.00414943
jmp 0x403cf6
mov ebx, 0x9f
cmp ebx, dword [esp]
jne 0x4032dd
push 0x9f
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xd4]
jmp 0x403cf6
mov ebx, 0xa0
cmp ebx, dword [esp]
jne 0x40336d
push 0xa0
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xd8]
mov ebx, dword [ebp + 0xd8]
and ebx, ebx
jne 0x40333b
push 1
push 0xa4
call fcn.0042adcb
push 1
push 0xa5
call fcn.0042adcb
push 1
push 0xa6
call fcn.0042adcb
jmp 0x403368
push 0
push 0xa4
call fcn.0042adcb
push 0
push 0xa5
call fcn.0042adcb
push 0
push 0xa6
call fcn.0042adcb
jmp 0x403cf6
mov ebx, 0xa1
cmp ebx, dword [esp]
jne 0x403393
push 0xa1
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xdc]
jmp 0x403cf6
mov ebx, 0xa2
cmp ebx, dword [esp]
jne 0x4033e3
push 0xa2
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xe0]
mov ebx, dword [ebp + 0xe0]
and ebx, ebx
jne 0x4033cf
push 1
push 0xa1
call fcn.0042adcb
jmp 0x4033de
push 0
push 0xa1
call fcn.0042adcb
jmp 0x403cf6
mov ebx, 0xa3
cmp ebx, dword [esp]
jne 0x403409
push 0xa3
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xe4]
jmp 0x403cf6
mov ebx, 0x9b
cmp ebx, dword [esp]
jne 0x403507
push 0x9b
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xc8]
mov ebx, dword [ebp + 0xc8]
cmp ebx, 1
jne 0x403494
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, dword [0x45d524]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
mov edx, str.framework_framework_res.apk
push edx
call fcn.0043cb60
call fcn.00424232
add dword [esp], edx
call fcn.00432743
call fcn.00424250
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x403480
cmp edi, 0xffffffff
je 0x403484
xor eax, eax
jmp 0x403489
mov eax, 1
or eax, eax
je 0x403494
mov eax, 1
jmp 0x403496
xor eax, eax
and eax, eax
je 0x403502
call fcn.0041a48d
push edx
call fcn.0043ca90
pop edx
push eax
mov edx, dword [0x45d524]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
mov edx, str.framework_framework_res.apk
push edx
call fcn.0043cb60
call fcn.00424232
add dword [esp], edx
call fcn.00432743
call fcn.00424250
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x4034e6
cmp edi, 0xffffffff
je 0x4034ea
xor eax, eax
jmp 0x4034ef
mov eax, 1
or eax, eax
je 0x403502
push 0
push 0x9b
call fcn.0042ac65
jmp 0x403cf6
mov ebx, 0x9c
cmp ebx, dword [esp]
jne 0x40351b
call fcn.0041a48d
jmp 0x403cf6
mov ebx, 0x9d
cmp ebx, dword [esp]
jne 0x403541
push 0x9d
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xcc]
jmp 0x403cf6
mov ebx, 0x9e
cmp ebx, dword [esp]
jne 0x403567
push 0x9e
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xd0]
jmp 0x403cf6
mov ebx, 0x87
cmp ebx, dword [esp]
jne 0x40358d
push 0x87
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x84]
jmp 0x403cf6
mov ebx, 0x89
cmp ebx, dword [esp]
jne 0x403634
push 0x89
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x88]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
mov eax, dword [ebp + 0x88]
cdq
push edx
push eax
call fcn.0043a630
call fcn.0043cbc0
push 0x8a
call fcn.00424232
add dword [esp + 4], edx
call fcn.0042acb9
call fcn.00424250
cmp dword [0x45d508], 0
je 0x403613
push 0
call fcn.00425a23
and eax, eax
je 0x403613
mov eax, 1
jmp 0x403615
xor eax, eax
and eax, eax
je 0x40362f
lea ebp, [0x45d578]
push dword [ebp + 0x88]
push 0
call fcn.00425ad5
jmp 0x403cf6
mov ebx, 0x8b
cmp ebx, dword [esp]
jne 0x4036c7
push 0x8b
call fcn.0042ad04
mov ebx, eax
cmp ebx, 1
jne 0x403694
cmp dword [0x45d508], 0
je 0x403671
push 0
call fcn.00425a23
and eax, eax
je 0x403671
mov eax, 1
jmp 0x403673
xor eax, eax
and eax, eax
je 0x403692
lea ebp, [0x45d578]
push dword [ebp + 0x88]
push 1
push 0
call fcn.00425b7d
jmp 0x4036c2
cmp dword [0x45d508], 0
je 0x4036b2
push 0
call fcn.00425a23
and eax, eax
je 0x4036b2
mov eax, 1
jmp 0x4036b4
xor eax, eax
and eax, eax
je 0x4036c2
push 0
call fcn.00425e67
jmp 0x403cf6
mov ebx, 0x8c
cmp ebx, dword [esp]
jne 0x4036ed
push 0x8c
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x8c]
jmp 0x403cf6
mov ebx, 0x8e
cmp ebx, dword [esp]
jne 0x4039da
lea ebp, [0x45d578]
push dword [ebp + 0x90]
pop dword [0x45d510]
push 0x8e
call fcn.0042ad04
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x403734
lea ebp, [0x45d578]
mov dword [ebp + 0x90], 0
jmp 0x40383a
mov ebx, 1
cmp ebx, dword [esp]
jne 0x403753
lea ebp, [0x45d578]
mov dword [ebp + 0x90], 0x409
jmp 0x40383a
mov ebx, 2
cmp ebx, dword [esp]
jne 0x403772
lea ebp, [0x45d578]
mov dword [ebp + 0x90], 0x419
jmp 0x40383a
mov ebx, 3
cmp ebx, dword [esp]
jne 0x403791
lea ebp, [0x45d578]
mov dword [ebp + 0x90], 0x404
jmp 0x40383a
mov ebx, 4
cmp ebx, dword [esp]
jne 0x4037b0
lea ebp, [0x45d578]
mov dword [ebp + 0x90], 0x804
jmp 0x40383a
mov ebx, 5
cmp ebx, dword [esp]
jne 0x4037cc
lea ebp, [0x45d578]
mov dword [ebp + 0x90], 0x423
jmp 0x40383a
mov ebx, 6
cmp ebx, dword [esp]
jne 0x4037e8
lea ebp, [0x45d578]
mov dword [ebp + 0x90], 0x422
jmp 0x40383a
mov ebx, 7
cmp ebx, dword [esp]
jne 0x403804
lea ebp, [0x45d578]
mov dword [ebp + 0x90], 0x416
jmp 0x40383a
mov ebx, 8
cmp ebx, dword [esp]
jne 0x403820
lea ebp, [0x45d578]
mov dword [ebp + 0x90], 0x42a
jmp 0x40383a
mov ebx, 9
cmp ebx, dword [esp]
jne 0x40383a
lea ebp, [0x45d578]
mov dword [ebp + 0x90], 0x41f
pop eax
mov ebx, dword [0x45d510]
lea ebp, [0x45d578]
cmp ebx, dword [ebp + 0x90]
je 0x4039d5
lea ebp, [0x45d578]
push dword [ebp + 0x90]
call fcn.0041b906
push 1
call fcn.00430cfc
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x24]
push 1
call fcn.00430d6b
push eax
pop dword [ebp + 0x28]
push 1
call fcn.00430dc0
push eax
pop dword [ebp + 0x2c]
push 1
call fcn.00430e3d
push eax
pop dword [ebp + 0x30]
push 1
call fcn.00430989
call fcn.00405328
push 1
call fcn.00430e4b
and eax, eax
je 0x4038ce
push 6
push 0x66
call fcn.0042ac65
push dword [0x45d554]
call fcn.00424c97
and eax, eax
je 0x4038e1
xor eax, eax
jmp 0x4038e6
mov eax, 1
and eax, eax
je 0x4039ae
mov edx, 0x44a044
lea ecx, [0x45d55c]
call fcn.00424008
push dword [0x45d55c]
push 0x64
call fcn.0042acb9
push edx
call fcn.0043ca90
pop edx
push eax
push 0
mov ebp, dword [0x45d684]
mov edx, dword [ebp + 0x110]
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043cb60
mov edx, str.__.img__
push edx
call fcn.0043cb60
mov edx, dword [ebp + 0x190]
push edx
call fcn.0043cb60
mov edx, str.__.zip__
push edx
call fcn.0043cb60
mov edx, dword [ebp + 0x108]
push edx
call fcn.0043cb60
mov edx, str.__.img__.PARTITION__.fex__.new.dat__.new.dat.br_
push edx
call fcn.0043cb60
mov edx, dword [ebp + 0x10c]
push edx
call fcn.0043cb60
call fcn.00424232
add dword [esp], edx
call fcn.0041e1f8
call fcn.00424250
push 2
mov ebp, dword [0x45d684]
push dword [ebp + 0x11c]
push 1
push 0x20
call fcn.00425341
jmp 0x4039cb
push 2
mov ebp, dword [0x45d684]
push dword [ebp + 0x54]
push 1
push 0x20
call fcn.00425341
call fcn.00409cc5
call fcn.0041b640
jmp 0x403cf6
mov ebx, 0x85
cmp ebx, dword [esp]
jne 0x403a00
push 0x85
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x94]
jmp 0x403cf6
mov ebx, 0x8f
cmp ebx, dword [esp]
jne 0x403a26
push 0x8f
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0x98]
jmp 0x403cf6
mov ebx, 0x92
cmp ebx, dword [esp]
jne 0x403a61
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push 0x92
call fcn.0042adf6
lea ebp, [0x45d578]
lea eax, [ebp + 0xa4]
push eax
call fcn.0043cad0
jmp 0x403cf6
mov ebx, 0x94
cmp ebx, dword [esp]
jne 0x403a87
push 0x94
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xa8]
jmp 0x403cf6
mov ebx, 0x97
cmp ebx, dword [esp]
jne 0x403ad7
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push 0x97
call fcn.0042adf6
call fcn.00424232
add dword [esp], edx
call fcn.0043a790
call fcn.00424250
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xac]
jmp 0x403cf6
mov ebx, 0x95
cmp ebx, dword [esp]
jne 0x403b1d
push 0x95
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xb0]
push dword [ebp + 0xb0]
push 0x97
call fcn.0042adcb
push dword [ebp + 0xb0]
push 0x98
call fcn.0042adcb
jmp 0x403cf6
mov ebx, 0x98
cmp ebx, dword [esp]
jne 0x403b43
push 0x98
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xb4]
jmp 0x403cf6
mov ebx, 0x99
cmp ebx, dword [esp]
jne 0x403b69
push 0x99
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xb8]
jmp 0x403cf6
mov ebx, 0x9a
cmp ebx, dword [esp]
jne 0x403b8f
push 0x9a
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xbc]
jmp 0x403cf6
mov ebx, 0xa4
cmp ebx, dword [esp]
jne 0x403bca
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push 0xa4
call fcn.0042adf6
lea ebp, [0x45d578]
lea eax, [ebp + 0xe8]
push eax
call fcn.0043cad0
jmp 0x403cf6
mov ebx, 0xa5
cmp ebx, dword [esp]
jne 0x403c05
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push 0xa5
call fcn.0042adf6
lea ebp, [0x45d578]
lea eax, [ebp + 0xec]
push eax
call fcn.0043cad0
jmp 0x403cf6
mov ebx, 0xa6
cmp ebx, dword [esp]
jne 0x403c2b
push 0xa6
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xf0]
jmp 0x403cf6
mov ebx, 0xa7
cmp ebx, dword [esp]
jne 0x403c67
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push dword [0x45d52c]
call fcn.00405274
call fcn.00424232
add dword [esp], edx
call fcn.004277f2
call fcn.00424250
jmp 0x403cf6
mov ebx, 0xa8
cmp ebx, dword [esp]
jne 0x403ca0
push edx
call fcn.0043ca90
pop edx
push eax
push edx
call fcn.0043ca90
pop edx
push eax
push dword [0x45d550]
call fcn.00405274
call fcn.00424232
add dword [esp], edx
call fcn.004277f2
call fcn.00424250
jmp 0x403cf6
mov ebx, 0x66
cmp ebx, dword [esp]
jne 0x403cf6
call fcn.00434a05
mov ebx, eax
cmp ebx, 0x300
jne 0x403cf6
push 0
push 0x8b
call fcn.0042ac65
cmp dword [0x45d508], 0
je 0x403ce6
push 0
call fcn.00425a23
and eax, eax
je 0x403ce6
mov eax, 1
jmp 0x403ce8
xor eax, eax
and eax, eax
je 0x403cf6
push 0
call fcn.00425e67
pop eax
jmp 0x403e27
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x403e27
call fcn.00430e5d
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x403d30
call fcn.00413cac
mov ebx, eax
cmp ebx, 6
jne 0x403d2b
add esp, 8
jmp 0x403e2d
jmp 0x403e26
mov ebx, 1
cmp ebx, dword [esp]
jne 0x403dfc
push 0x66
call fcn.0042ad04
push eax
lea ebp, [0x45d578]
pop dword [ebp + 0xc4]
push 1
call fcn.00430cfc
push eax
pop dword [ebp + 0x24]
push 1
call fcn.00430d6b
push eax
pop dword [ebp + 0x28]
push 1
call fcn.00430dc0
push eax
pop dword [ebp + 0x2c]
push 1
call fcn.00430e3d
push eax
pop dword [ebp + 0x30]
push dword [0x45d544]
push 0xfffffffc
push 0x66
call fcn.0042ac9d
push eax
call sub.USER32.dll_SetWindowLongW
cmp dword [0x45d508], 0
je 0x403dc6
push 0
call fcn.00425a23
and eax, eax
je 0x403dc6
mov eax, 1
jmp 0x403dc8
xor eax, eax
and eax, eax
je 0x403dd6
push 0
call fcn.00425e67
push dword [0x45d534]
call fcn.0043bf61
and eax, eax
je 0x403df0
push dword [0x45d534]
call fcn.0043bf73
push 1
call fcn.00430989
jmp 0x403e26
mov ebx, 2
cmp ebx, dword [esp]
jne 0x403e12
push 2
call fcn.00430989
jmp 0x403e26
mov ebx, 3
cmp ebx, dword [esp]
jne 0x403e26
push 3
call fcn.00430989
pop eax
pop eax
jmp 0x401db4
push 0
call 0x403e4c
call fcn.0043ca70
push dword [0x45d4f4]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00424c49
call fcn.004261aa
call fcn.00427aec
call fcn.00428b20
call fcn.0042a501
call fcn.0042a8a6
call fcn.0042a9f3
call fcn.0042ab69
call fcn.00430a03
call fcn.004325a6
call fcn.00432b44
call fcn.004335c0
call fcn.004348af
call fcn.00435ea6
call fcn.0043746c
call fcn.0043a3a0
call fcn.0043bfb4
call fcn.0043c01a
call fcn.0043ba90
ret