Function at 0x438344
Capabilities:
Create process on windows
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2e4
test byte [0x4c3864], 1
push ebx
push esi
push edi
mov ebx, ecx
jne 0x438377
mov eax, dword [0x4b0550]
or byte [0x4c3864], 1
push 0x43a30d
mov dword [0x4c3860], eax
call fcn.0049d371
pop ecx
mov eax, dword [ebp + 0x14]
mov edi, dword [ebp + 0xc]
xor esi, esi
cmp edi, 0xb39a
mov dword [eax], esi
mov dword [ebp - 4], esi
jb 0x4383a8
cmp edi, 0xb3a9
ja 0x4383a8
push edi
mov ecx, ebx
call fcn.004381a8
mov dword [ebp - 4], 2
jmp 0x4384ab
cmp edi, 0xbd7b
jne 0x438437
xor eax, eax
cmp dword [0x4b39c0], esi
sete al
push eax
push str.disable_dark_theme
mov dword [0x4b39c0], eax
call fcn.0048f425
pop ecx
lea eax, [ebp + 0x10]
pop ecx
push str._start2.qdr
push eax
call fcn.00432fe8
pop ecx
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.0040a915
lea ecx, [ebp + 0x10]
call fcn.004038fb
push esi
push esi
push esi
push 1
push 1
push ecx
lea eax, [ebp + 0x14]
mov ecx, esp
push eax
call fcn.004038b5
mov ecx, ebx
call fcn.00441a15
push ecx
lea eax, [ebp + 0x14]
mov ecx, esp
push eax
call fcn.004038b5
mov ecx, ebx
call fcn.0043749e
push 0xaff
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp + 0x14]
call fcn.004038fb
jmp 0x43a1c6
cmp edi, 0xb408
jne 0x438469
xor eax, eax
cmp dword [0x4c3fb8], esi
push esi
sete al
push eax
push 0x4c3fc0
push dword [0x4c668c]
mov dword [0x4c3fb8], eax
call fcn.0044ad31
add esp, 0x10
jmp 0x43a1bf
cmp edi, 0x85b1
jne 0x438493
mov ecx, ebx
call fcn.0043f0cc
test eax, eax
je 0x43a1c6
mov ecx, ebx
call fcn.0043f0cc
mov ecx, eax
call fcn.004794b2
jmp 0x43a1c6
cmp edi, 0xb380
jne 0x4384ab
mov eax, dword [ebp + 0x14]
mov ecx, ebx
mov dword [eax], 1
call fcn.00440bdc
cmp edi, 0xb37f
jne 0x4384f0
mov eax, dword [ebp + 0x14]
cmp dword [ebp + 0x10], 0x3e8
mov dword [eax], 1
jne 0x43a11b
push 1
mov ecx, ebx
call fcn.0043bcd6
push 1
push esi
push ecx
mov ecx, esp
push 0x4bd5d8
call fcn.0040a4e8
mov ecx, ebx
call fcn.0043be61
mov ecx, ebx
call fcn.004423a6
cmp edi, 0xb3f5
jne 0x438513
mov ecx, ebx
call fcn.0043f0cc
cmp eax, esi
je 0x43a11b
mov ecx, eax
call fcn.0046e631
jmp 0x43a11b
cmp edi, 0xb3f6
jne 0x43853f
mov ecx, ebx
call fcn.0043f0cc
mov edi, eax
cmp edi, esi
je 0x43a11b
mov ecx, edi
call fcn.004730e7
mov ecx, edi
call fcn.0046e730
jmp 0x43a11b
cmp edi, 0x8012
jne 0x43855c
mov eax, dword [ebp + 0x14]
mov ecx, ebx
mov dword [eax], 1
call fcn.00438133
jmp 0x43a11b
cmp edi, 0x8503
jne 0x438581
mov eax, ebx
lea ecx, [ebx + 0x30]
neg eax
sbb eax, eax
and eax, ecx
mov dword [0x4cc234], eax
push dword [ebx + 4]
call fcn.00495b3e
jmp 0x439730
cmp edi, 0xb325
jne 0x4385ba
mov ecx, ebx
call fcn.0043f0cc
cmp eax, esi
je 0x43a11b
push ecx
lea ecx, [ebp - 0x14]
push esp
push ecx
mov ecx, eax
call fcn.0046e156
mov ecx, eax
call fcn.00489fbf
call fcn.00483131
pop ecx
lea ecx, [ebp - 0x14]
jmp 0x43983a
cmp edi, 0xb335
jne 0x4385d4
mov ecx, ebx
call fcn.0043f0cc
cmp eax, esi
je 0x43a11b
push esi
jmp 0x4385ed
cmp edi, 0xbd78
jne 0x4385fa
mov ecx, ebx
call fcn.0043f0cc
cmp eax, esi
je 0x43a11b
push 1
push esi
mov ecx, eax
call fcn.00478fc6
jmp 0x43a11b
cmp edi, 0xb409
jne 0x438609
mov ecx, ebx
call fcn.00444701
cmp edi, 0xb360
jne 0x43861d
push esi
push esi
call fcn.0040b810
jmp 0x43972f
cmp edi, 0xb358
jne 0x438651
lea eax, [ebp + 0x14]
mov dword [ebp + 0x14], esi
push eax
push 0x4ac578
push 0x15
push esi
push 0x4ac568
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x43864c
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp + 0x14]
jmp 0x438683
cmp edi, 0xb359
jne 0x438696
lea eax, [ebp + 0x14]
mov dword [ebp + 0x14], esi
push eax
push 0x4ac578
push 0x15
push esi
push 0x4ac568
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x438680
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
mov eax, dword [ebp + 0x14]
cmp eax, esi
je 0x43a11b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x43a11b
cmp edi, 0xb336
jne 0x4386cf
lea eax, [ebx + 0x88]
xor ecx, ecx
cmp dword [eax], esi
sete cl
push ecx
push ecx
mov dword [eax], ecx
mov ecx, esp
push str.adress_sw_driver
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
lea ecx, [ebx + 0x5c]
call fcn.0041089d
jmp 0x43a11b
mov eax, 0xb327
cmp edi, eax
jb 0x438731
mov ecx, 0xb329
cmp edi, ecx
ja 0x438731
cmp edi, eax
jne 0x4386eb
mov dword [0x4c7938], esi
cmp edi, 0xb328
jne 0x4386fd
mov dword [0x4c7938], 1
cmp edi, ecx
jne 0x43870b
mov dword [0x4c7938], 2
push dword [0x4c7938]
push ecx
mov ecx, esp
push str.show_ext_in_type
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
mov dword [ebp - 4], 1
jmp 0x438915
cmp edi, 0xb339
jne 0x438757
xor eax, eax
cmp dword [0x4c4270], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c4270], eax
push str.refresh_keep_sel
jmp 0x439e8f
cmp edi, 0xb33a
jne 0x43877d
xor eax, eax
cmp dword [0x4c4278], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c4278], eax
push str.refresh_keep_scroll
jmp 0x439e8f
cmp edi, 0xe124
jne 0x4387a0
mov ecx, ebx
call fcn.0043f0cc
cmp eax, esi
je 0x43a11b
mov ecx, eax
call fcn.0047724f
jmp 0x43a11b
cmp edi, 0x8552
jne 0x4387c6
xor eax, eax
cmp dword [0x4c7944], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c7944], eax
push str.only_label_or_icon_clk
jmp 0x439e8f
cmp edi, 0x8553
jne 0x4387ec
xor eax, eax
cmp dword [0x4c7948], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c7948], eax
push str.no_keep_grouping
jmp 0x439e8f
cmp edi, 0x851b
jne 0x4388dc
lea eax, [ebp + 0x14]
push 0xf4241
push eax
call fcn.00460aba
pop ecx
pop ecx
push 0x4bd614
lea ecx, [ebp + 0x10]
call fcn.00403927
mov edi, str.http:__
push esi
push edi
lea ecx, [ebp + 0x14]
call fcn.00403d34
test eax, eax
lea eax, [ebp + 0x14]
push eax
jne 0x438836
lea ecx, [ebp + 0x10]
call fcn.00403a8c
jmp 0x438851
lea eax, [ebp + 0xc]
push edi
push eax
call fcn.0040a961
push eax
lea ecx, [ebp + 0x10]
call fcn.00403a8c
lea ecx, [ebp + 0xc]
call fcn.004038fb
push esi
push 0x4b111c
lea ecx, [ebp + 0x14]
call fcn.00403d34
test eax, eax
jge 0x4388b7
push str._nNo_homepage___
lea ecx, [ebp + 0xc]
call fcn.00403927
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 8]
push 0xf4242
push eax
call fcn.00460aba
pop ecx
pop ecx
push eax
lea eax, [ebp + 8]
push eax
call fcn.00403b20
push esi
push 0x4bd5d8
push dword [eax]
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp + 8]
call fcn.004038fb
lea ecx, [ebp - 8]
call fcn.004038fb
lea ecx, [ebp + 0xc]
call fcn.004038fb
push 5
push esi
push esi
push dword [ebp + 0x10]
push str.open
push dword [ebx + 4]
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp + 0x10]
call fcn.004038fb
lea ecx, [ebp + 0x14]
jmp 0x43a116
cmp edi, 0xab7c
jb 0x438915
cmp edi, 0xaba8
ja 0x438915
mov eax, dword [ebx + 0x30]
lea ecx, [ebx + 0x30]
lea edx, [edi - 0xab7c]
push edx
call dword [eax]
push dword [0x4b412c]
push ecx
mov ecx, esp
push str.m_lang_id
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
mov eax, 0xb24f
cmp edi, eax
jne 0x438934
push dword [ebp + 0x14]
mov ecx, ebx
push dword [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.00437d1c
jmp 0x43a1c8
cmp edi, 0x84d0
jne 0x438966
xor eax, eax
cmp dword [0x4b9500], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b9500], eax
push str.tree_auto_chk_subdir
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
jmp 0x439115
cmp edi, 0xb337
jne 0x438989
xor eax, eax
cmp dword [0x4c7cb0], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c7cb0], eax
push str.tree_no_expando
jmp 0x438955
cmp edi, 0xb357
jne 0x4389b6
xor eax, eax
cmp dword [0x4c42f8], esi
sete al
push eax
push ecx
mov ecx, esp
push str.tree_auto_expand_from_list
mov dword [0x4c42f8], eax
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
cmp edi, 0xb31e
jne 0x4389dc
xor eax, eax
cmp dword [0x4b4134], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b4134], eax
push str.tree_auto_sel
jmp 0x439e8f
cmp edi, 0x84de
jne 0x4389ed
mov dword [0x4b9508], esi
push esi
jmp 0x4389fe
cmp edi, 0x84df
jne 0x438a0b
push 1
pop eax
mov dword [0x4b9508], eax
push eax
push ecx
mov ecx, esp
push str.tree_all_browsable
jmp 0x438955
cmp edi, 0x84e6
jne 0x438a1e
lea edi, [ebx + 0x12c]
push esi
mov dword [edi], esi
jmp 0x438a32
cmp edi, 0x84e7
jne 0x438a65
push 1
lea edi, [ebx + 0x12c]
pop eax
mov dword [edi], eax
push eax
push ecx
mov ecx, esp
push str.adresbar_style
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
push dword [edi]
lea ecx, [ebx + 0x5c]
call fcn.00410cb5
push 0x105
push esi
push esi
push dword [ebx + 0x60]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x43a11b
cmp edi, 0x84e9
jne 0x438a9c
mov dword [ebx + 0x130], esi
push esi
push ecx
mov ecx, esp
push str.adresbar_styleB
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
lea eax, [ebx + 0x5c]
push eax
push dword [ebx + 0x130]
call fcn.00410bd0
jmp 0x43972f
cmp edi, 0x84ea
jne 0x438ab0
push 1
pop eax
mov dword [ebx + 0x130], eax
push eax
jmp 0x438a74
cmp edi, 0x84e8
jne 0x438ae2
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push esi
push dword [ebx + 0x1f4]
call edi
xor eax, eax
cmp dword [0x4b18dc], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b18dc], eax
push str.adresbar_use_highlighted
jmp 0x438b12
cmp edi, 0x8555
jne 0x438b2d
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push esi
push dword [ebx + 0x1f4]
call edi
xor eax, eax
cmp dword [0x4b82c8], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b82c8], eax
push str.status_use_highlighted
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
push 5
push dword [ebx + 0x1f4]
call edi
jmp 0x43a11b
cmp edi, 0x858b
jne 0x438b53
xor eax, eax
cmp dword [0x4c7cbc], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c7cbc], eax
push str.tree_line_at_root
jmp 0x438955
cmp edi, 0x84d4
jne 0x438b79
xor eax, eax
cmp dword [0x4c7cb8], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c7cb8], eax
push str.tree_disable_line
jmp 0x438955
cmp edi, 0xb250
jne 0x438c37
xor eax, eax
cmp dword [0x4c7cc0], esi
sete al
cmp dword [0x4c7cb8], esi
mov dword [0x4c7cc0], eax
jne 0x438c24
cmp eax, esi
je 0x438c24
push 0x4b51b0
lea ecx, [ebp + 0xc]
call fcn.00403927
lea eax, [ebp - 0xc]
push 0x16b52
push eax
call fcn.00461770
pop ecx
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push 0x16b4f
push eax
call fcn.00461770
pop ecx
pop ecx
push eax
lea eax, [ebp - 8]
push eax
call fcn.00403b20
push eax
lea eax, [ebp + 8]
push eax
call fcn.00403b20
push esi
push 0x4bd5d8
push dword [eax]
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp + 8]
call fcn.004038fb
lea ecx, [ebp - 8]
call fcn.004038fb
lea ecx, [ebp - 0x18]
call fcn.004038fb
lea ecx, [ebp - 0xc]
call fcn.004038fb
lea ecx, [ebp + 0xc]
call fcn.004038fb
push dword [0x4c7cc0]
push ecx
mov ecx, esp
push str.tree_fullrowselect
jmp 0x438955
cmp edi, 0xb251
jne 0x438c5d
xor eax, eax
cmp dword [0x4c7cc4], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c7cc4], eax
push str.tree_expand_when_select
jmp 0x439e8f
cmp edi, 0xb252
jne 0x438c83
xor eax, eax
cmp dword [0x4c7cc8], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c7cc8], eax
push str.tree_single_expand
jmp 0x438955
cmp edi, 0xb35c
jne 0x438cbc
xor eax, eax
cmp dword [0x4c4294], esi
sete al
push eax
push ecx
mov ecx, esp
push str.Disable_Win7_Tree
mov dword [0x4c4294], eax
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
mov ecx, ebx
call fcn.0043809e
jmp 0x43a11b
cmp edi, 0x852e
jb 0x438d10
cmp edi, 0x853f
ja 0x438d10
lea ecx, [ebx + 0x1f0]
lea eax, [ebx + 0x1f4]
neg ecx
sbb ecx, ecx
and ecx, eax
push dword [ecx]
push edi
call fcn.00477998
pop ecx
test eax, eax
pop ecx
je 0x438e39
push esi
push dword [ebx + 0x1f4]
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
push dword [ebx + 0x1f4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x438e39
cmp edi, 0xb36e
jne 0x438d2c
mov dword [0x4c424c], esi
push esi
push ecx
mov ecx, esp
push str.autocomplete
jmp 0x439036
cmp edi, 0xb36f
jne 0x438d3f
push 1
pop eax
mov dword [0x4c424c], eax
push eax
jmp 0x438d1f
cmp edi, 0xb370
jne 0x438d65
xor eax, eax
cmp dword [0x4b4108], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b4108], eax
push str.autocomplete_url
jmp 0x439036
cmp edi, 0xb375
jne 0x438d83
push 1
pop eax
mov dword [0x4b410c], eax
push eax
push ecx
mov ecx, esp
push str.address_ico
jmp 0x4395bf
cmp edi, 0xb376
jne 0x438d94
mov dword [0x4b410c], esi
push esi
jmp 0x438d76
cmp edi, 0xb377
jne 0x438dc2
push 2
pop edi
push edi
push ecx
mov ecx, esp
push str.address_ico
mov dword [0x4b410c], edi
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
mov dword [ebp - 4], edi
jmp 0x43a124
cmp edi, 0x8562
jne 0x438dde
mov dword [0x4c42a4], esi
push esi
push ecx
mov ecx, esp
push str.media_preview_by
jmp 0x439e8f
cmp edi, 0x8563
jne 0x438df1
push 1
pop eax
mov dword [0x4c42a4], eax
push eax
jmp 0x438dd1
cmp edi, 0x8557
jne 0x438e0f
push 1
pop eax
mov dword [0x4b4124], eax
push eax
push ecx
mov ecx, esp
push str.show_tabs
jmp 0x4392cc
cmp edi, 0x8558
jne 0x438e39
push 2
pop eax
push eax
push ecx
mov ecx, esp
push str.show_tabs
mov dword [0x4b4124], eax
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
call fcn.00418408
cmp edi, 0xb36c
je 0x43914c
cmp edi, 0x8559
jne 0x438e56
mov dword [0x4b4124], esi
push esi
jmp 0x438e02
cmp edi, 0xb31d
jne 0x438e7c
xor eax, eax
cmp dword [0x4c4298], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c4298], eax
push str.close_ask
jmp 0x439e8f
cmp edi, 0x8568
jne 0x438e98
mov dword [0x4b8298], esi
push esi
push ecx
mov ecx, esp
push str.copy_cut_paste_mode
jmp 0x439e8f
cmp edi, 0x8569
jne 0x438eab
push 1
pop eax
mov dword [0x4b8298], eax
push eax
jmp 0x438e8b
cmp edi, 0x1d0
jne 0x438edd
xor eax, eax
cmp dword [0x4b829c], esi
sete al
push eax
push ecx
mov ecx, esp
push str.m_delete_thread
mov dword [0x4b829c], eax
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
jmp 0x439871
cmp edi, 0x856d
jne 0x438f03
xor eax, eax
cmp dword [0x4b82a0], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b82a0], eax
push str.disable_column_hl_new
jmp 0x439512
cmp edi, 0xb256
jne 0x438f52
xor eax, eax
cmp dword [0x4b82a4], esi
sete al
push eax
push ecx
mov ecx, esp
push str.noenumrefresh2
mov dword [0x4b82a4], eax
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
mov ecx, ebx
mov dword [ebp - 4], 2
call fcn.0043f0cc
cmp eax, esi
je 0x43a124
mov ecx, eax
call fcn.00479562
jmp 0x43a124
cmp edi, 0xb257
jne 0x438f78
xor eax, eax
cmp dword [0x4b82a8], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b82a8], eax
push str.header_in_all_views
jmp 0x4395bf
cmp edi, 0x85ad
jne 0x438f9d
call fcn.00422f23
test eax, eax
je 0x438f93
call fcn.004231cf
jmp 0x43a11b
call fcn.00423147
jmp 0x43a11b
cmp edi, 0x85ae
jne 0x438faf
call fcn.00423095
jmp 0x43a11b
cmp edi, 0xb330
jne 0x438fef
lea eax, [ebp + 0x14]
push 0x42023
push eax
call dword [sym.imp.SHELL32.dll_SHGetSettings]
mov eax, 0x800
test dword [ebp + 0x14], eax
je 0x438fd6
and byte [ebp - 0x57], 0xf7
jmp 0x438fd9
or dword [ebp - 0x58], eax
push 1
lea eax, [ebp - 0x58]
push 0x2000
push eax
call dword [sym.imp.SHELL32.dll_SHGetSetSettings]
jmp 0x43a11b
cmp edi, 0x8554
jne 0x439015
xor eax, eax
cmp dword [0x4c7918], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c7918], eax
push str.disable_up_down_edit
jmp 0x439e8f
cmp edi, 0xb3f1
jne 0x43904e
xor eax, eax
cmp dword [0x4c791c], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c791c], eax
push str.m_disable_grouping
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
mov dword [ebp - 4], 3
jmp 0x43a124
cmp edi, 0x8576
jne 0x439074
xor eax, eax
cmp dword [0x4b4120], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b4120], eax
push str.tab_use_context_menu
jmp 0x439e8f
cmp edi, 0x8570
jb 0x439098
cmp edi, 0x8575
ja 0x439098
lea eax, [edi - 0x8570]
push esi
push eax
mov ecx, ebx
call fcn.0043ac26
jmp 0x43914c
cmp edi, 0x8587
jne 0x4390be
xor eax, eax
cmp dword [0x4c425c], esi
sete al
mov dword [0x4c425c], eax
push eax
push ecx
mov ecx, esp
push str.disable_print_bg_color
jmp 0x439e8f
cmp edi, 0x8589
jne 0x4390d8
xor eax, eax
cmp dword [0x4c4260], esi
sete al
mov dword [0x4c4260], eax
jmp 0x4390b0
cmp edi, 0x8588
jne 0x4390fe
xor eax, eax
cmp dword [0x4c4264], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c4264], eax
push str.disable_print_txt_color
jmp 0x439e8f
cmp edi, 0x927c0
jb 0x43914c
cmp edi, 0x927d4
jae 0x43914c
push edi
call fcn.0043e40e
pop ecx
lea ecx, [ebx + 0x710]
call fcn.0048dbc7
lea ecx, [ebx + 0x4c78]
call fcn.0048dbc7
lea ecx, [ebx + 0x5324]
call fcn.0048dbc7
lea ecx, [ebx + 0x59d0]
call fcn.0048dbc7
lea ecx, [ebx + 0x607c]
call fcn.0048dbc7
cmp edi, 0xe123
je 0x43925f
cmp edi, 0xe125
je 0x43925f
cmp edi, 0xe122
je 0x43925f
cmp edi, 0xe12a
je 0x43925f
cmp edi, 0xb37b
je 0x43925f
cmp edi, 0x8556
je 0x43925f
cmp edi, 0x8565
je 0x43925f
cmp edi, 0x8566
je 0x43925f
cmp edi, 0xb25a
je 0x43925f
cmp edi, 0xb258
je 0x43925f
cmp edi, 0xb25b
je 0x43925f
cmp edi, 0x8567
je 0x43925f
mov eax, 0xe12b
cmp edi, eax
je 0x4391ea
inc eax
cmp edi, eax
jne 0x4391f7
push eax
mov ecx, ebx
call fcn.0043f1d8
jmp 0x43a11b
cmp edi, 0xb323
jne 0x43921d
xor eax, eax
cmp dword [0x4b1bf8], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b1bf8], eax
push str.tab_close_by_lbt_dblclk
jmp 0x439e8f
cmp edi, 0xb324
jne 0x439243
xor eax, eax
cmp dword [0x4b1bfc], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b1bfc], eax
push str.tab_close_by_mbt_clk
jmp 0x439e8f
cmp edi, 0xb32c
jne 0x439272
mov dword [0x4be9c4], esi
push esi
push ecx
mov ecx, esp
push str.tab_show_tooltips
jmp 0x439e8f
mov ecx, ebx
call fcn.0043f0cc
cmp eax, esi
je 0x439272
push edi
mov ecx, eax
call fcn.00473569
cmp edi, 0xb32d
jne 0x439285
push 1
pop eax
mov dword [0x4be9c4], eax
push eax
jmp 0x439252
cmp edi, 0xb32e
jne 0x4392ab
xor eax, eax
cmp dword [0x4b1c00], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b1c00], eax
push str.tab_new_tab_l_clk
jmp 0x439e8f
cmp edi, 0xbb81
jne 0x4392e2
xor eax, eax
cmp dword [0x4be9c8], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4be9c8], eax
push str.multiline_tab
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
call fcn.00418408
jmp 0x43a11b
cmp edi, 0xb32f
jne 0x439308
xor eax, eax
cmp dword [0x4be9cc], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4be9cc], eax
push str.tab_new_tab_l_dblclk
jmp 0x439e8f
cmp edi, 0xb332
jne 0x43932e
xor eax, eax
cmp dword [0x4b4114], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b4114], eax
push str.new_tab_m_clk_tree
jmp 0x439e8f
cmp edi, 0xb331
jne 0x439354
xor eax, eax
cmp dword [0x4b4110], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b4110], eax
push str.new_tab_m_clk_list
jmp 0x439e8f
cmp edi, 0xb35f
jne 0x43945f
mov ecx, ebx
call fcn.0043f0cc
mov edi, eax
cmp edi, esi
je 0x43a11b
lea ecx, [ebp - 0x14]
call fcn.0048997e
lea eax, [ebp - 0x14]
mov ecx, edi
push eax
call fcn.00476a7a
lea ecx, [ebp - 0x24]
call fcn.0046c8ed
mov eax, dword [0x4bd618]
cmp eax, esi
jne 0x4393a2
push 0x4bd618
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
jmp 0x4393a8
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x10]
neg eax
sbb eax, eax
and eax, ecx
mov eax, dword [eax]
push eax
mov dword [ebp + 8], eax
call fcn.0046ca0a
lea edi, [eax + 2]
push 1
push edi
mov dword [ebp + 0xc], eax
mov dword [ebp - 0xc], edi
call fcn.0049e19d
mov ecx, edi
mov dword [ebp + 0x14], eax
mov edi, dword [ebp + 0x14]
mov edx, ecx
xor eax, eax
add esp, 0xc
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
cmp dword [ebp + 0x14], esi
rep stosb byte es:[edi], al
je 0x439409
mov ecx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0x14]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor esi, esi
push dword [ebp - 0xc]
lea eax, [ebp + 0x10]
push dword [ebp + 0x14]
push eax
call fcn.0045f49f
push esi
push dword [ebp + 0x10]
push str.default_tab
push 0x4b0ae4
call fcn.0044ae5b
add esp, 0x1c
lea ecx, [ebp + 0x10]
call fcn.004038fb
mov eax, dword [0x4bd618]
cmp eax, esi
je 0x43944f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test eax, eax
jne 0x43944f
mov dword [0x4bd618], esi
lea ecx, [ebp - 0x24]
call fcn.0046c932
lea ecx, [ebp - 0x14]
jmp 0x43983a
cmp edi, 0xb25c
jne 0x43947b
push esi
push ecx
mov ecx, esp
mov dword [0x4b1c04], esi
push str.tab_width_mode
jmp 0x439e8f
cmp edi, 0xb25e
jne 0x4394cb
push 2
pop eax
push eax
mov dword [0x4b1c04], eax
push dword [0x4b1c08]
call fcn.00416211
pop ecx
mov dword [0x4b1c08], eax
pop ecx
push dword [0x4b1c04]
push ecx
mov ecx, esp
push str.tab_width_mode
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
push dword [0x4b1c08]
push ecx
mov ecx, esp
push str.tab_max_width
jmp 0x439e8f
cmp edi, 0xb333
jne 0x4394f1
xor eax, eax
cmp dword [0x4c4288], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c4288], eax
push str.list_view_auto_chk_sel
jmp 0x4395bf
cmp edi, 0xb35a
jne 0x43952a
xor eax, eax
cmp dword [0x4c428c], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c428c], eax
push str.list_disable_transparent_sel
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
mov dword [ebp - 4], 1
jmp 0x43a124
cmp edi, 0xb35d
jne 0x43953e
mov ecx, ebx
call fcn.00443efc
jmp 0x43a11b
cmp edi, 0xb35e
jne 0x439552
mov ecx, ebx
call fcn.00444167
jmp 0x43a11b
cmp edi, 0xb362
jne 0x439578
xor eax, eax
cmp dword [0x4c427c], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c427c], eax
push str.use_space_bar_for_list_scroll
jmp 0x439e8f
cmp edi, 0xb361
jne 0x43959e
xor eax, eax
cmp dword [0x4c4280], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c4280], eax
push str.expand_favorites_at_start
jmp 0x439e8f
cmp edi, 0xb334
jne 0x4395d7
xor eax, eax
cmp dword [0x4c4284], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c4284], eax
push str.list_view_chk_sel
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
mov dword [ebp - 4], 2
jmp 0x43a124
cmp edi, 0xb267
jb 0x43964e
cmp edi, 0xb28e
ja 0x43964e
push 1
lea eax, [edi + edi*4 - 0x37be5]
pop ecx
shl eax, 1
push ecx
push eax
mov dword [0x4b1c04], ecx
mov dword [0x4b1c08], eax
call fcn.00416211
pop ecx
mov dword [0x4b1c08], eax
pop ecx
push eax
push ecx
mov ecx, esp
push str.tab_max_width
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
cmp edi, 0xb267
jne 0x43962f
mov dword [0x4b1c04], esi
push dword [0x4b1c04]
push ecx
mov ecx, esp
push str.tab_width_mode
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
jmp 0x439ff3
cmp edi, 0x848c
jb 0x439662
cmp edi, 0x848e
jbe 0x439ff3
cmp edi, 0x80b1
jb 0x4396bd
cmp edi, 0x80b4
ja 0x4396bd
lea eax, [edi - 0x80b1]
push eax
push ecx
mov ecx, esp
push 0x4b2964
mov dword [0x4b4118], eax
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
cmp edi, 0x80b3
jne 0x4396af
push esi
push ecx
mov ecx, esp
push str.WinRCcur
call fcn.00403927
mov ecx, ebx
call fcn.00434184
mov eax, dword [ebp + 0x14]
mov dword [eax], 1
jmp 0x439ff3
cmp edi, 0xbd79
jne 0x4396db
push 7
pop eax
push eax
push ecx
mov ecx, esp
mov dword [0x4b4118], eax
push 0x4b2964
jmp 0x439e8f
cmp edi, 0xb31c
jne 0x439715
xor eax, eax
cmp dword [0x4c42a0], esi
sete al
push eax
push ecx
mov ecx, esp
push 0x4b5174
mov dword [0x4c42a0], eax
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
push dword [0x4c42a0]
call fcn.00432c15
jmp 0x439730
cmp edi, 0x84cf
jne 0x439736
push 0xffffffffffffffff
call fcn.0048313a
neg eax
sbb eax, eax
inc eax
push eax
call fcn.0048313a
pop ecx
pop ecx
jmp 0x43a11b
cmp edi, 0x80b5
jb 0x439754
cmp edi, 0x80b7
ja 0x439754
push edi
push dword [ebx + 4]
call fcn.00437f0c
jmp 0x439fce
cmp edi, 0x8497
jb 0x439768
cmp edi, 0x84a2
jbe 0x439ff3
cmp edi, 0x800a
jne 0x4397c5
push 1
lea ecx, [ebp - 0xdc]
call fcn.00404952
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov edi, eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xd4]
push eax
push 0x4c7a88
call fcn.0040827d
push esi
push 0x40b2b4
push edi
push 0xca
push dword [0x4c7a90]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
lea ecx, [ebp - 0xc0]
call fcn.00409b7f
jmp 0x43a11b
cmp edi, 0x807a
jne 0x4397d9
mov ecx, ebx
call fcn.0044398c
jmp 0x439871
cmp edi, 0xb31f
jne 0x439844
push esi
push 1
mov ecx, 0x4c3cc8
call fcn.004273f4
test eax, eax
je 0x43a1c6
lea eax, [ebp + 0x14]
push eax
call fcn.004273ab
mov eax, dword [eax]
pop ecx
push esi
push eax
lea ecx, [ebp - 0x14]
call fcn.00489f86
lea ecx, [ebp + 0x14]
call fcn.004038fb
mov ecx, ebx
call fcn.0043f0cc
mov edi, eax
cmp edi, esi
je 0x439837
push 0xffffffffffffffff
push ecx
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
push eax
call fcn.004171b4
mov ecx, edi
call fcn.0047808d
lea ecx, [ebp - 0x14]
call fcn.0048996a
jmp 0x43a11b
cmp edi, 0x800b
jne 0x43985b
mov ecx, 0x4c3cc8
call fcn.00426d8e
jmp 0x43a1c6
cmp edi, 0x8049
jne 0x439879
push 1
push 1
mov ecx, 0x4c3cc8
call fcn.004273f4
push 1
pop eax
jmp 0x43a1c8
cmp edi, 0xa770
jne 0x439899
mov ecx, ebx
call fcn.0043f0cc
cmp eax, esi
je 0x43a11b
mov ecx, eax
call fcn.00473072
jmp 0x4398e3
cmp edi, 0x805d
jne 0x4398f0
cmp dword [ebp + 0x10], 0x64
jne 0x4398c2
push 3
push esi
push esi
push esi
push esi
push esi
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetWindowPos]
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x4398e3
lea eax, [ebx + 0x49ac]
xor ecx, ecx
cmp dword [eax], esi
sete cl
mov dword [eax], ecx
cmp ecx, esi
mov ecx, ebx
je 0x4398de
call fcn.00440c75
jmp 0x4398e3
call fcn.00440d2f
mov ecx, dword [ebp + 0x14]
push 1
pop eax
mov dword [ecx], eax
jmp 0x43a1c8
cmp edi, 2
jne 0x43990d
cmp dword [ebx + 0x49ac], esi
je 0x439adc
mov ecx, ebx
call fcn.00440d2f
jmp 0x439adc
cmp edi, 0x8097
jne 0x439a9b
push esi
push 1
mov ecx, 0x4c3cc8
call fcn.004273f4
test eax, eax
je 0x43a1c6
lea eax, [ebp - 8]
push eax
call fcn.004273ab
pop ecx
mov edi, 0x4b0ef0
push edi
lea ecx, [ebp - 0x18]
call fcn.00403927
push edi
lea ecx, [ebp + 8]
call fcn.00403927
push edi
lea ecx, [ebp + 0xc]
call fcn.00403927
lea eax, [ebp - 0x10]
lea ecx, [ebx + 0x5dc4]
push eax
call fcn.0046ee3c
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebx + 0x5718]
call fcn.0046ee3c
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebx + 0x506c]
call fcn.0046ee3c
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebx + 0x49c0]
call fcn.0046ee3c
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00403b20
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00403b20
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00403b20
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00403b20
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.00403b20
push eax
lea eax, [ebp + 0x10]
push eax
call fcn.00403b20
lea ecx, [ebp - 0xc]
call fcn.004038fb
lea ecx, [ebp - 0x34]
call fcn.004038fb
lea ecx, [ebp - 0x2c]
call fcn.004038fb
lea ecx, [ebp - 0x28]
call fcn.004038fb
lea ecx, [ebp - 0x1c]
call fcn.004038fb
lea ecx, [ebp - 0x30]
call fcn.004038fb
lea ecx, [ebp - 0x38]
call fcn.004038fb
lea ecx, [ebp - 0x20]
call fcn.004038fb
lea ecx, [ebp - 0x10]
call fcn.004038fb
lea ecx, [ebp + 0xc]
call fcn.004038fb
lea ecx, [ebp + 8]
call fcn.004038fb
lea ecx, [ebp - 0x18]
call fcn.004038fb
push 0x4b5170
push 0x4b0efc
lea ecx, [ebp + 0x10]
call fcn.004040f7
push 0x4bd5d8
push 0x4b1aac
lea ecx, [ebp + 0x10]
call fcn.004040f7
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
push eax
call fcn.004038b5
push ecx
lea eax, [ebp - 8]
mov ecx, esp
push eax
call fcn.004038b5
mov ecx, ebx
call fcn.0043778b
mov eax, dword [ebp + 0x14]
lea ecx, [ebp + 0x10]
mov dword [eax], 1
call fcn.004038fb
lea ecx, [ebp - 8]
jmp 0x43a116
cmp edi, 0x8070
jne 0x439aa6
push esi
jmp 0x439abc
cmp edi, 0x8071
jne 0x439ab2
push 1
jmp 0x439abc
cmp edi, 0x8072
jne 0x439aea
push 2
mov ecx, ebx
call fcn.00442461
lea edi, [ebx + 0x890]
push esi
push dword [edi]
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
push dword [edi]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp + 0x14]
mov dword [eax], 1
jmp 0x43a11b
cmp edi, 0x808d
jne 0x439b20
mov eax, dword [ebp + 0x14]
lea ecx, [ebp - 0x60]
mov dword [eax], 1
call fcn.0043a1fd
push esi
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x60]
call fcn.00444d8b
lea ecx, [ebp - 0x60]
call fcn.0043a2dd
jmp 0x43a11b
cmp edi, 0x8481
jb 0x439b49
cmp edi, 0x8486
ja 0x439b49
lea eax, [edi - 0x8481]
push eax
push ecx
mov ecx, esp
mov dword [0x4c42fc], eax
push str.title_info
jmp 0x43963d
cmp edi, 0x84d5
jb 0x439b6d
cmp edi, 0x84da
ja 0x439b6d
lea eax, [edi - 0x84d5]
push esi
push eax
mov ecx, ebx
call fcn.0043acc8
jmp 0x439ff3
cmp edi, 0xb363
jb 0x439c40
mov eax, 0xb368
cmp edi, eax
ja 0x439c40
cmp edi, 0xb364
jne 0x439b9a
mov dword [0x4c7ca8], 9
jmp 0x439bea
cmp edi, 0xb365
jne 0x439bae
mov dword [0x4c7ca8], 0xc
jmp 0x439bea
cmp edi, 0xb366
jne 0x439bc2
mov dword [0x4c7ca8], 0x12
jmp 0x439bea
cmp edi, 0xb367
jne 0x439bd6
mov dword [0x4c7ca8], 0x18
jmp 0x439bea
cmp edi, eax
mov dword [0x4c7ca8], 0x20
je 0x439bea
mov dword [0x4c7ca8], esi
push dword [0x4c7ca8]
push ecx
mov ecx, esp
push str.tree_indent_width
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
lea ecx, [ebx + 0x710]
call fcn.0048dbc7
lea ecx, [ebx + 0x4c78]
call fcn.0048dbc7
lea ecx, [ebx + 0x5324]
call fcn.0048dbc7
lea ecx, [ebx + 0x59d0]
call fcn.0048dbc7
lea ecx, [ebx + 0x607c]
call fcn.0048dbc7
jmp 0x439ff3
cmp edi, 0x8522
jb 0x439c69
cmp edi, 0x8524
ja 0x439c69
lea eax, [edi - 0x8522]
push eax
push ecx
mov ecx, esp
mov dword [0x4c792c], eax
push str.status_selection_type
jmp 0x43963d
cmp edi, 0x857b
jb 0x439c92
cmp edi, 0x857d
ja 0x439c92
lea eax, [edi - 0x857b]
push eax
push ecx
mov ecx, esp
mov dword [0x4c7930], eax
push str.status_no_selection_type
jmp 0x43963d
cmp edi, 0x84db
je 0x439feb
cmp edi, 0x84dc
je 0x439feb
cmp edi, 0xb378
je 0x439feb
cmp edi, 0x84dd
je 0x439feb
cmp edi, 0xb37a
jne 0x439cf4
xor eax, eax
cmp dword [0x4b413c], esi
sete al
push eax
mov dword [0x4b413c], eax
call fcn.004141e5
pop ecx
push dword [0x4b413c]
push ecx
mov ecx, esp
push str.show_goto
jmp 0x439e8f
cmp edi, 0xa777
je 0x439fd2
cmp edi, 0xa778
je 0x439fd2
cmp edi, 0xa779
je 0x439fd2
cmp edi, 0x84eb
jne 0x439d3e
xor eax, eax
cmp dword [0x4c42d4], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c42d4], eax
push str.mousewheel_focus
jmp 0x439e8f
cmp edi, 0x84f4
jne 0x439d64
xor eax, eax
cmp dword [0x4b82c4], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b82c4], eax
push str.select_last_if_navigate_up
jmp 0x439e8f
cmp edi, 0x84f5
jne 0x439d8a
xor eax, eax
cmp dword [0x4b82bc], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b82bc], eax
push str.audio_click
jmp 0x439e8f
cmp edi, 0xb36b
jne 0x439db0
xor eax, eax
cmp dword [0x4c4248], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c4248], eax
push str.use_system_navigation_click
jmp 0x439e8f
cmp edi, 0x8505
jb 0x439e27
cmp edi, 0x8513
ja 0x439e27
lea ecx, [ebx + 0x1f4]
push esi
call fcn.0043a1ee
lea eax, [edi - 0x8505]
push eax
call fcn.0046781b
pop ecx
push 1
pop eax
push eax
push ecx
mov ecx, esp
push 0x4b47ec
mov dword [0x4b9504], eax
mov dword [0x4c7928], eax
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
push dword [0x4c7928]
push ecx
mov ecx, esp
push 0x4b4de0
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
push 5
lea ecx, [ebx + 0x1f4]
call fcn.0043a1ee
jmp 0x439ff3
cmp edi, 0x8518
jne 0x439ea0
lea edi, [ebx + 0x1f4]
push esi
mov ecx, edi
call fcn.0043a1ee
push esi
push ecx
mov ecx, esp
push 0x4b47ec
mov dword [0x4b9504], esi
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
push esi
call fcn.0046781b
pop ecx
push 5
mov ecx, edi
call fcn.0043a1ee
mov edi, dword [sym.imp.USER32.dll_GetSysColor]
push 5
call edi
push 5
mov dword [0x4b7340], eax
call edi
push esi
push ecx
mov ecx, esp
mov dword [0x4b734c], eax
mov dword [0x4c7928], esi
push 0x4b4de0
call fcn.0040a4e8
mov ecx, ebx
call fcn.004351d3
jmp 0x43a11b
cmp edi, 0xe107
jne 0x439ec3
mov ecx, ebx
call fcn.0043f0cc
cmp eax, esi
je 0x43a11b
mov ecx, eax
call fcn.0047783b
jmp 0x43a11b
cmp edi, 0x8549
jb 0x439faf
cmp edi, 0x8550
ja 0x439faf
lea ecx, [ebp + 0x10]
call fcn.0043a1d3
push 0xf003f
push str.SoftwareMicrosoftWindowsCurrentVersionExplorer_
push SHChangeNotifyRegister
lea ecx, [ebp + 0x10]
call fcn.00405cf0
test eax, eax
je 0x439f11
push esi
push 0x4bd5d8
push 0x4b50f4
lea ecx, [ebx + 4]
call fcn.00419b09
lea eax, [edi - 0x8549]
mov ecx, 0x80
cmp eax, esi
mov dword [ebp + 0x14], ecx
jne 0x439f2c
mov dword [ebp + 0x14], 0x30
jmp 0x439f88
cmp eax, 1
jne 0x439f3a
mov dword [ebp + 0x14], 0x40
jmp 0x439f88
cmp eax, 2
jne 0x439f48
mov dword [ebp + 0x14], 0x60
jmp 0x439f88
cmp eax, 3
jne 0x439f52
mov dword [ebp + 0x14], ecx
jmp 0x439f88
cmp eax, 4
jne 0x439f60
mov dword [ebp + 0x14], 0xa0
jmp 0x439f88
cmp eax, 5
jne 0x439f6e
mov dword [ebp + 0x14], 0xc0
jmp 0x439f88
cmp eax, 6
jne 0x439f7c
mov dword [ebp + 0x14], 0xe0
jmp 0x439f88
cmp eax, 7
jne 0x439f88
mov dword [ebp + 0x14], 0x100
lea eax, [ebp + 0x14]
push 4
push eax
push 4
push esi
push str.ThumbnailSize
lea ecx, [ebp + 0x10]
call fcn.0043a2eb
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea ecx, [ebp + 0x10]
call fcn.0043a1d9
jmp 0x439ff3
cmp edi, 0xb343
jb 0x439fbf
cmp edi, 0xb349
jbe 0x439fc7
cmp edi, 0xb351
jne 0x439ff3
push esi
push esi
call fcn.0040b810
pop ecx
pop ecx
jmp 0x439ff3
lea eax, [edi - 0xa777]
push eax
push ecx
mov ecx, esp
mov dword [0x4c7924], eax
push str.lmouse_dblclk
jmp 0x43963d
push edi
mov ecx, ebx
call fcn.0043ab3b
cmp edi, 0xb352
jne 0x43a019
xor eax, eax
cmp dword [0x4c426c], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c426c], eax
push str.default_new_tab
jmp 0x439e8f
cmp edi, 0xb37e
jne 0x43a03f
xor eax, eax
cmp dword [0x4c6754], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c6754], eax
push str.move_file_confirmation
jmp 0x439e8f
cmp edi, 0xb40a
jne 0x43a056
mov ecx, 0x4c3f30
call fcn.0043a2ee
jmp 0x43a11b
cmp edi, 0xb37c
jne 0x43a0c0
call fcn.00408173
test eax, eax
jne 0x43a0b5
lea eax, [ebp - 0x2e4]
push 0x104
push eax
mov ecx, 0x4c7a88
call fcn.0043a1cf
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push str.AutoStart2017_IZASSHJ
lea ecx, [ebp + 0x14]
call fcn.0040a4e8
push 5
push esi
lea ecx, [ebp + 0x14]
call fcn.0043a2eb
push eax
lea eax, [ebp - 0x2e4]
push eax
push 0x4b1138
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp + 0x14]
jmp 0x43a116
push esi
call fcn.00438034
jmp 0x439730
cmp edi, 0xb37d
jne 0x43a11b
push 0x4c67d8
lea ecx, [ebp + 0x14]
call fcn.004038b5
push esi
lea ecx, [ebp + 0x14]
call fcn.0043a2eb
push eax
call fcn.0049bdc5
pop ecx
pop ecx
test eax, eax
push esi
lea ecx, [ebp + 0x14]
jne 0x43a106
call fcn.0043a2eb
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call fcn.0049bc7f
add esp, 0xc
jmp 0x43a113
call fcn.0043a2eb
push eax
call fcn.0049bd62
pop ecx
pop ecx
lea ecx, [ebp + 0x14]
call fcn.004038fb
cmp dword [ebp - 4], esi
je 0x43a1c6
lea edi, [ebx + 0x49c0]
push esi
mov ecx, edi
call fcn.00474d39
lea ecx, [ebx + 0x506c]
push esi
call fcn.00474d39
lea ecx, [ebx + 0x5718]
push esi
call fcn.00474d39
lea ecx, [ebx + 0x5dc4]
push esi
call fcn.00474d39
cmp dword [ebp - 4], 2
jne 0x43a1b9
push ecx
mov esi, 0xbe
mov eax, esp
push esi
push eax
call fcn.00461770
pop ecx
pop ecx
mov ecx, edi
call fcn.00476260
push ecx
mov eax, esp
push esi
push eax
call fcn.00461770
pop ecx
pop ecx
lea ecx, [ebx + 0x506c]
call fcn.00476260
push ecx
mov eax, esp
push esi
push eax
call fcn.00461770
pop ecx
pop ecx
lea ecx, [ebx + 0x5718]
call fcn.00476260
push ecx
mov eax, esp
push esi
push eax
call fcn.00461770
pop ecx
pop ecx
lea ecx, [ebx + 0x5dc4]
call fcn.00476260
cmp dword [ebp - 4], 3
jne 0x43a1c6
mov ecx, ebx
call fcn.0043809e
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0x10