Function at 0x42fba0
Capabilities:
Check for time delay via gettickcount
Copy file
Create directory
Create process on windows
Hide graphical window
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x4a1f25
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, 0x1474
call fcn.00497d20
mov eax, dword [0x4cc99c]
xor eax, esp
mov dword [esp + 0x1470], eax
push ebx
push esi
push edi
mov eax, dword [0x4cc99c]
xor eax, esp
push eax
lea eax, [esp + 0x14b8]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
mov ebx, ecx
xor ecx, ecx
mov eax, 1
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x28], eax
cmp esi, eax
jne 0x42fc28
mov ecx, ebx
call fcn.0042dd40
mov eax, 1
xor ecx, ecx
jmp 0x430c4a
cmp esi, 0x439
jne 0x42fc5d
mov ecx, ebx
call fcn.004353c0
mov ecx, ebx
call fcn.004359c0
mov eax, dword [ebp + 8]
add eax, 0xfffffbee
cmp eax, 0x23
ja case.0x42fc56.1043
movzx eax, byte [eax + 0x431a44]
jmp dword [eax*4 + 0x431a0c]
cmp esi, 0x18
jne 0x42fc81
cmp byte [ebx + 0x2694], cl
je 0x430c4a
cmp edi, eax
jne 0x430c4a
mov dword [esp + 0x2c], ecx
mov edi, ecx
jmp 0x430c4a
cmp esi, 0x113
jne 0x42fd64
cmp edi, 0x83c
jne 0x42fcaf
mov eax, dword [ebx + 4]
push edi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov esi, ebx
call fcn.004378b0
mov esi, dword [ebp + 8]
jmp 0x4310e3
cmp edi, 0x83e
jne 0x42fcf0
cmp byte [ebx + 0x2694], cl
je 0x42fcd0
push 1
push 0
mov ecx, ebx
call dword [sym.imp.HFUILib.dll_public:_void___thiscall_CWindowWnd::ShowWindow_bool__bool_]
jmp 0x4310e3
mov ecx, dword [ebx + 4]
push 0x83e
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
push 1
push 1
mov ecx, ebx
call dword [sym.imp.HFUILib.dll_public:_void___thiscall_CWindowWnd::ShowWindow_bool__bool_]
jmp 0x4310e3
cmp edi, 0x840
jne 0x4310e3
mov edx, dword [ebx + 4]
push edi
push edx
call dword [sym.imp.USER32.dll_KillTimer]
call fcn.00405b40
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x6c], esp
push eax
call fcn.004657d0
sub esp, 0x18
mov dword [esp + 0x14f8], 0
mov ecx, esp
mov dword [esp + 0x58], esp
push ecx
call fcn.00465920
add esp, 4
mov dword [esp + 0x14f8], 0xffffffff
call fcn.00406740
mov edx, dword [0x4cb430]
mov eax, dword [ebx + 4]
add esp, 0x38
push 0
push edx
push edi
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x4310e3
cmp esi, 0x415
jne 0x42fd87
push 0x93
push 0
push 0
push 0
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x42fc3e
cmp esi, 0x437
jne 0x42fd9c
push edi
mov ecx, ebx
call fcn.0042df30
jmp 0x42fc3e
cmp esi, 0x436
jne 0x42fdad
mov dword [esp + 0x28], eax
jmp 0x42fc3e
cmp esi, 0x7e
jne 0x42fdf2
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x54]
push edx
call fcn.00468270
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x58]
mov edx, dword [ebx + 4]
add esp, 8
push 0x50
push eax
push ecx
push 0
push 0
push 0
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, ebx
call dword [sym.imp.HFUILib.dll_public:_void___thiscall_CWindowWnd::CenterWindow_void_]
lea eax, [esi - 0x7d]
xor ecx, ecx
jmp 0x430c4a
cmp esi, 0x434
jne 0x42fe21
push str.game
call fcn.00479990
add esp, 4
test edi, edi
je 0x42fc3e
push edi
mov ecx, ebx
call fcn.0042e600
mov eax, 1
jmp 0x4319e4
cmp esi, 0x432
jne 0x42feff
cmp edi, ecx
jne 0x42fe5e
push 0x4ab248
push str.WM_UNPACK_PROCESS:_strUpProcess_is_NULL.
push 0x2091
push str.CMainViewWnd::HandleMessage
push str.sourceMainView.cpp
push 4
call fcn.0047d210
add esp, 0x18
mov eax, 1
jmp 0x4319e4
cmp edx, ecx
jne 0x42fe8f
push 0x4ab248
push str.WM_UNPACK_PROCESS:_pGameID_is_NULL.
push 0x2097
push str.CMainViewWnd::HandleMessage
push str.sourceMainView.cpp
push 4
call fcn.0047d210
add esp, 0x18
mov eax, 1
jmp 0x4319e4
push edi
call dword [sym.imp.MSVCR100.dll__wtof]
fstp dword [esp + 0x54]
add esp, 4
push edi
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete___void__]
fldz
fld dword [esp + 0x54]
add esp, 4
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 0x41
jp 0x42feeb
sub esp, 8
fstp qword [esp]
push 0x4b4ad0
push str.WM_UNPACK_PROCESS:_fUpProcess_0.
push 0x20a1
push str.CMainViewWnd::HandleMessage
push str.sourceMainView.cpp
push 4
call fcn.0047d210
add esp, 0x20
mov eax, 1
jmp 0x4319e4
mov edx, dword [esp + 0x18]
push ecx
mov ecx, ebx
fstp dword [esp]
call fcn.0042eb70
jmp 0x4319e4
cmp esi, 0x501
jne 0x42ff1f
cmp edx, ecx
je 0x42fc3e
mov edx, dword [esp + 0x18]
mov ecx, ebx
call fcn.00439d70
jmp 0x42fc3e
cmp esi, 0x4a
jne 0x42ff4a
cmp edx, ecx
je 0x430c4a
cmp dword [edx + 8], ecx
je 0x430c4a
mov edx, dword [esp + 0x18]
mov ecx, ebx
call fcn.0043c5c0
lea eax, [esi - 0x49]
xor ecx, ecx
jmp 0x430c4a
cmp esi, 0x431
jne 0x42ffdb
cmp edi, ecx
je 0x42ffa6
mov edi, dword [edi + 4]
mov esi, dword [edi]
cmp esi, edi
je 0x42ff9d
mov ebx, dword [esi + 8]
mov edi, dword [esp + 0x24]
mov ecx, 1
mov edx, edi
mov dword [ebx + 0xd8a4], ecx
mov byte [ebx + 0xe8d4], cl
call fcn.00429e90
push 2
lea ecx, [ebx + 0x100]
push edi
call fcn.00436ba0
mov esi, dword [esi]
mov eax, dword [esp + 0x2c]
cmp esi, dword [eax + 4]
jne 0x42ff63
mov ebx, edi
mov esi, dword [esp + 0x2c]
call fcn.00431b70
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.scantime
call fcn.00465fe0
add esp, 8
cmp byte [0x4ce036], 0
je 0x42fc3e
push 0
push ebx
call fcn.00433d70
mov byte [0x4ce036], 0
jmp 0x42fc3e
cmp esi, 0x428
jne 0x430176
cmp edx, 0x201
jne 0x430107
mov ecx, dword [ebx + 0x26a0]
mov edx, dword [ebx + 4]
push ecx
push 0xffffffffffffffec
push edx
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov ecx, dword [ebx + 4]
lea eax, [esp + 0x34]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [ebx + 4]
push edx
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
je 0x430049
mov eax, dword [esp + 0x40]
sub eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
sub ecx, dword [esp + 0x34]
mov edx, dword [ebx + 4]
push 0x50
push eax
push ecx
push 0
push 0
push 0
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x430055
push 1
push 1
mov ecx, ebx
call dword [sym.imp.HFUILib.dll_public:_void___thiscall_CWindowWnd::ShowWindow_bool__bool_]
mov eax, dword [ebx + 0x23c4]
mov edi, dword [eax]
cmp edi, eax
je 0x430080
mov esi, 0x1b
mov eax, dword [edi + 0xc]
test eax, eax
je 0x430076
push eax
mov dword [eax + 0x10], esi
call fcn.0041e080
mov edi, dword [edi]
cmp edi, dword [ebx + 0x23c4]
jne 0x430066
mov eax, dword [ebx + 0x235c]
test eax, eax
je 0x4300a7
push eax
call fcn.0045b0f0
add esp, 4
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov dword [esp + 0x28], 0
jmp 0x42fc3e
mov edx, dword [ebx + 0x2698]
cmp edx, 2
jne 0x4300ba
mov eax, dword [ebx + 0x231c]
jmp 0x4300db
cmp edx, 3
jne 0x4300c7
mov eax, dword [ebx + 0x2320]
jmp 0x4300db
cmp edx, 1
jne 0x4300d4
mov eax, dword [ebx + 0x2318]
jmp 0x4300db
mov ecx, ebx
call fcn.00439190
test eax, eax
je 0x4300fa
mov eax, dword [eax + 4]
test eax, eax
je 0x4300fa
push eax
call fcn.0045b0a0
add esp, 4
test eax, eax
je 0x4300fa
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov dword [esp + 0x28], 0
jmp 0x42fc3e
cmp edx, 0x204
jne 0x42fc3e
cmp edi, 0x64
jne 0x42fc3e
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
cmp dword [ebx + 0x2608], 0
je 0x42fc3e
call fcn.004271b0
mov esi, ebx
mov eax, dword [esi + 0x2608]
mov edx, dword [eax + 4]
lea ecx, [esp + 0x34]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x40]
sub eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
sub ecx, eax
mov eax, dword [esi + 0x2608]
push ecx
push edx
push 1
call fcn.00445db0
jmp 0x42fc3e
cmp esi, 0x464
jne 0x430c38
lea eax, [edx + 4]
mov dword [esp + 0x24], eax
mov ecx, str.desktopput
mov edi, edi
mov di, word [eax]
cmp di, word [ecx]
jne 0x4301b6
test di, di
je 0x4301b2
mov di, word [eax + 2]
cmp di, word [ecx + 2]
jne 0x4301b6
add eax, 4
add ecx, 4
test di, di
jne 0x430190
xor eax, eax
jmp 0x4301bb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x430486
cmp word [edx + 0x2008], ax
lea esi, [edx + 0x2008]
je 0x430486
push 0x206
push eax
lea ecx, [esp + 0x27e]
push ecx
mov word [esp + 0x280], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [esp + 0x274]
push 0x104
push edx
call dword [sym.imp.HFUILib.dll_public:_static_struct_HINSTANCE______cdecl_CPaintManagerUI::GetResourceInstance_void_]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x430247
push 0x4ab248
lea ecx, [esp + 0x70]
call fcn.00402480
lea eax, [esp + 0x6c]
push eax
mov ecx, ebx
mov dword [esp + 0x14c4], 1
call fcn.00431d70
lea ecx, [esp + 0x6c]
call fcn.004024d0
xor eax, eax
jmp 0x4319e4
lea ecx, [esp + 0x274]
push ecx
lea ecx, [esp + 0x8c]
call fcn.00402480
push 1
push 0xffffffffffffffff
lea edx, [esp + 0x58]
mov dword [esp + 0x14c8], 2
push edx
lea ecx, [esp + 0x94]
mov dword [esp + 0x5c], 0x5c
call fcn.00408640
lea ecx, [esp + 0x88]
cmp eax, 0xffffffff
je 0x43023b
push eax
push 0
lea eax, [esp + 0xac]
push eax
call fcn.00408400
xor ecx, ecx
push 0x3fe
push ecx
lea edx, [esp + 0x486]
mov byte [esp + 0x14c8], 3
push edx
mov word [esp + 0x488], cx
call sub.MSVCR100.dll_memset
add esp, 0xc
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0x38]
call fcn.004083d0
lea eax, [ebx + 0x2360]
mov byte [esp + 0x14c0], 4
cmp dword [eax], 0
je 0x43042a
lea edi, [ebx + 0x23c0]
call fcn.0043d230
mov eax, dword [eax]
test eax, eax
je 0x43042a
cmp word [esi], 0
je 0x43042a
cmp word [eax + 0x38a4], 0
lea ecx, [eax + 0x38a4]
je 0x430333
push ecx
push str._s.ico
push 0x200
lea ecx, [esp + 0x488]
push ecx
jmp 0x430348
mov edx, dword [eax]
push edx
push str._u.ico
push 0x200
lea eax, [esp + 0x488]
push eax
call dword [sym.imp.MSVCR100.dll_swprintf_s]
add esp, 0x10
push str.ico
lea ecx, [esp + 0x38]
call fcn.00402500
cmp dword [esp + 0x48], 8
mov eax, dword [esp + 0x34]
jae 0x43036e
lea eax, [esp + 0x34]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea ecx, [esp + 0x47c]
push ecx
lea ecx, [esp + 0x38]
call fcn.00402500
push 0x10
call dword [sym.imp.gdiplus.dll_GdipAlloc]
mov edi, eax
test edi, edi
je 0x4303bc
lea edx, [esp + 0x30]
push edx
push esi
mov dword [edi], vtable.Gdiplus::Bitmap.0
mov dword [esp + 0x38], 0
call dword [sym.imp.gdiplus.dll_GdipCreateBitmapFromFile]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x30]
mov dword [edi + 4], eax
jmp 0x4303be
xor edi, edi
mov edx, dword [edi + 4]
push 0
lea ecx, [esp + 0x54]
push ecx
push edx
call dword [sym.imp.gdiplus.dll_GdipCreateHBITMAPFromBitmap]
test eax, eax
je 0x4303d6
mov dword [edi + 8], eax
mov eax, dword [esp + 0x50]
push eax
call fcn.0045b520
mov ecx, dword [esp + 0x38]
add esp, 4
cmp dword [esp + 0x48], 8
jae 0x4303f2
lea ecx, [esp + 0x34]
push ecx
push 0x18
push eax
call fcn.0045c120
add esp, 0xc
test al, al
je 0x43042a
cmp dword [esp + 0x48], 8
mov eax, dword [esp + 0x34]
jae 0x430411
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x70]
call fcn.00402480
lea ecx, [esp + 0x6c]
mov byte [esp + 0x14c0], 5
push ecx
jmp 0x430445
push 0x4ab248
lea ecx, [esp + 0x70]
call fcn.00402480
lea edx, [esp + 0x6c]
mov byte [esp + 0x14c0], 6
push edx
mov ecx, ebx
call fcn.00431d70
lea ecx, [esp + 0x6c]
call fcn.004024d0
lea ecx, [esp + 0x34]
call fcn.004024d0
lea ecx, [esp + 0xa4]
call fcn.004024d0
lea ecx, [esp + 0x88]
mov dword [esp + 0x14c0], 0xffffffff
call fcn.004024d0
jmp 0x4309a1
mov eax, dword [ebx + 0x239c]
mov edi, dword [eax]
cmp edi, eax
je 0x430724
jmp 0x4304a0
mov eax, dword [edi + 8]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x30], eax
add eax, 0x100
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4304d6
test dx, dx
je 0x4304d2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4304d6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4304b0
xor eax, eax
jmp 0x4304db
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4304ec
mov esi, dword [esp + 0x18]
cmp word [esi + 0x2008], ax
jne 0x4304fb
mov edi, dword [edi]
cmp edi, dword [ebx + 0x239c]
jne 0x4304a0
jmp 0x430724
xor eax, eax
push 0x7fe
push eax
lea ecx, [esp + 0x486]
push ecx
mov word [esp + 0x488], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [esp + 0x47c]
push 0x400
push edx
call dword [sym.imp.HFUILib.dll_public:_static_struct_HINSTANCE______cdecl_CPaintManagerUI::GetResourceInstance_void_]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x430577
push 0x4ab248
lea ecx, [esp + 0xa8]
call fcn.00402480
mov dword [esp + 0x14c0], 7
lea eax, [esp + 0xa4]
push eax
mov ecx, ebx
call fcn.00431d70
lea ecx, [esp + 0xa4]
call fcn.004024d0
xor eax, eax
jmp 0x4319e4
lea ecx, [esp + 0x47c]
push ecx
lea ecx, [esp + 0x8c]
call fcn.00402480
push 1
push 0xffffffffffffffff
lea edx, [esp + 0x58]
mov edi, 8
mov dword [esp + 0x14c8], edi
push edx
lea ecx, [esp + 0x94]
mov dword [esp + 0x5c], 0x5c
call fcn.00408640
lea ecx, [esp + 0x88]
cmp eax, 0xffffffff
je 0x43023b
push eax
push 0
lea eax, [esp + 0x3c]
push eax
call fcn.00408400
push str.image_
lea ecx, [esp + 0x38]
mov byte [esp + 0x14c4], 9
call fcn.00402500
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], edi
jae 0x4305f5
lea eax, [esp + 0x34]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov ecx, dword [esp + 0x30]
add ecx, 0x100
push ecx
lea ecx, [esp + 0x38]
call fcn.00402500
lea edi, [esi + 0x2008]
push edi
lea ecx, [esp + 0x70]
call fcn.00402480
push 1
push 0xffffffffffffffff
push 0x4acbd8
lea ecx, [esp + 0x78]
mov byte [esp + 0x14cc], 0xa
call fcn.00408640
lea ecx, [esp + 0x6c]
cmp eax, 0xffffffff
jne 0x430666
call fcn.004024d0
lea ecx, [esp + 0x34]
call fcn.004024d0
lea ecx, [esp + 0x88]
call fcn.004024d0
xor eax, eax
jmp 0x4319e4
mov edx, dword [esp + 0x7c]
push edx
push eax
lea eax, [esp + 0xac]
push eax
call fcn.00408400
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x14c4], 0xb
call fcn.004085c0
lea ecx, [esp + 0xa4]
mov byte [esp + 0x14c0], 0xa
call fcn.004024d0
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x74]
push ecx
lea ecx, [esp + 0x40]
call fcn.00402d10
mov eax, dword [esp + 0x34]
mov esi, 8
cmp dword [esp + 0x48], esi
jae 0x4306c4
lea eax, [esp + 0x34]
push 0
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x48], esi
jae 0x4306dc
lea eax, [esp + 0x34]
mov edx, dword [esp + 0x30]
push eax
push 0x4ab4fc
add edx, 0xa00
push 0x400
push edx
call dword [sym.imp.MSVCR100.dll_swprintf_s]
add esp, 0x10
lea ecx, [esp + 0x6c]
call fcn.004024d0
lea ecx, [esp + 0x34]
call fcn.004024d0
lea ecx, [esp + 0x88]
mov dword [esp + 0x14c0], 0xffffffff
call fcn.004024d0
mov eax, dword [ebx + 0x23a8]
mov esi, dword [eax]
cmp esi, eax
je 0x430994
mov eax, dword [esi + 8]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x30], eax
add eax, 0x100
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43076a
test dx, dx
je 0x430766
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43076a
add eax, 4
add ecx, 4
test dx, dx
jne 0x430744
xor eax, eax
jmp 0x43076f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x430780
mov edi, dword [esp + 0x18]
cmp word [edi + 0x2008], ax
jne 0x43078f
mov esi, dword [esi]
cmp esi, dword [ebx + 0x23a8]
jne 0x430734
jmp 0x430994
xor eax, eax
push 0x7fe
push eax
lea ecx, [esp + 0x486]
push ecx
mov word [esp + 0x488], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [esp + 0x47c]
push 0x400
push edx
call dword [sym.imp.HFUILib.dll_public:_static_struct_HINSTANCE______cdecl_CPaintManagerUI::GetResourceInstance_void_]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x4307ee
push 0x4ab248
lea ecx, [esp + 0xa8]
call fcn.00402480
mov dword [esp + 0x14c0], 0xc
jmp 0x430555
lea ecx, [esp + 0x47c]
push ecx
lea ecx, [esp + 0x8c]
call fcn.00402480
push 1
push 0xffffffffffffffff
lea edx, [esp + 0x58]
mov dword [esp + 0x14c8], 0xd
push edx
lea ecx, [esp + 0x94]
mov dword [esp + 0x5c], 0x5c
call fcn.00408640
lea ecx, [esp + 0x88]
cmp eax, 0xffffffff
je 0x43023b
push eax
push 0
lea eax, [esp + 0x3c]
push eax
call fcn.00408400
push str.image_
lea ecx, [esp + 0x38]
mov byte [esp + 0x14c4], 0xe
call fcn.00402500
cmp dword [esp + 0x48], 8
mov eax, dword [esp + 0x34]
jae 0x43086c
lea eax, [esp + 0x34]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov esi, dword [esp + 0x30]
lea ecx, [esi + 0x100]
push ecx
lea ecx, [esp + 0x38]
call fcn.00402500
add edi, 0x2008
push edi
lea ecx, [esp + 0x70]
call fcn.00402480
push 1
push 0xffffffffffffffff
push 0x4acbd8
lea ecx, [esp + 0x78]
mov byte [esp + 0x14cc], 0xf
call fcn.00408640
lea ecx, [esp + 0x6c]
cmp eax, 0xffffffff
jne 0x4308dd
call fcn.004024d0
lea ecx, [esp + 0x34]
call fcn.004024d0
lea ecx, [esp + 0x88]
call fcn.004024d0
xor eax, eax
jmp 0x4319e4
mov edx, dword [esp + 0x7c]
push edx
push eax
lea eax, [esp + 0xac]
push eax
call fcn.00408400
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x14c4], 0x10
call fcn.004085c0
lea ecx, [esp + 0xa4]
mov byte [esp + 0x14c0], 0xf
call fcn.004024d0
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x74]
push ecx
lea ecx, [esp + 0x40]
call fcn.00402d10
cmp dword [esp + 0x48], 8
mov eax, dword [esp + 0x34]
jae 0x430937
lea eax, [esp + 0x34]
push 0
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
cmp dword [esp + 0x48], 8
mov eax, dword [esp + 0x34]
jae 0x430950
lea eax, [esp + 0x34]
push eax
push 0x4ab4fc
push 0x400
add esi, 0xa00
push esi
call dword [sym.imp.MSVCR100.dll_swprintf_s]
add esp, 0x10
lea ecx, [esp + 0x6c]
call fcn.004024d0
lea ecx, [esp + 0x34]
call fcn.004024d0
lea ecx, [esp + 0x88]
mov dword [esp + 0x14c0], 0xffffffff
call fcn.004024d0
mov edx, dword [ebx + 0x26a4]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [esp + 0x18]
test eax, eax
je 0x42fc3e
mov ecx, dword [esp + 0x2c]
cmp ecx, 1
jne 0x4309c8
push eax
lea ecx, [ebx + 0x2540]
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CStdPtrArray::Add_void__]
jmp 0x42fc3e
cmp ecx, 2
jne 0x42fc3e
lea ecx, [ebx + 0x14]
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPaintManagerUI::IsEmpty_void_]
test al, al
jne 0x430240
mov eax, dword [esp + 0x24]
push eax
lea ecx, [ebx + 0x14]
call dword [sym.imp.HFUILib.dll_public:_class_CControlUI____thiscall_CPaintManagerUI::FindControl1_wchar_t_const__]
mov ecx, dword [esp + 0x18]
mov esi, eax
cmp esi, dword [ecx + 0x1004]
jne 0x430b6a
test esi, esi
je 0x430b54
mov edx, dword [esi]
mov eax, dword [edx + 0x28]
mov ecx, esi
call eax
test eax, eax
je 0x430a51
mov edx, dword [eax]
mov edx, dword [edx + 8]
lea ecx, [esp + 0xdc]
push ecx
mov ecx, eax
call edx
mov dword [esp + 0x14c0], 0x11
push str.headltop
mov ecx, eax
mov dword [esp + 0x24], 1
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CStdString::operator_wchar_t_const__const]
mov byte [esp + 0x17], 1
test al, al
jne 0x430a56
mov byte [esp + 0x17], 0
mov dword [esp + 0x14c0], 0xffffffff
test byte [esp + 0x20], 1
je 0x430a75
lea ecx, [esp + 0xdc]
call dword [sym.imp.HFUILib.dll_public_virtual:_void___thiscall_CStdString::destructor_void_]
cmp byte [esp + 0x17], 0
je 0x430a93
mov eax, dword [esp + 0x18]
add eax, 0x2008
push eax
mov ecx, esi
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPngImagePanelUI::SetImageIcon_wchar_t_const__]
jmp 0x430b54
mov eax, dword [ebx + 0x239c]
mov ecx, dword [eax]
mov dword [esp + 0x20], ecx
cmp ecx, eax
je 0x430b3b
mov ecx, dword [esp + 0x20]
mov edx, dword [esi]
mov edi, dword [ecx + 8]
mov edx, dword [edx + 8]
lea eax, [esp + 0xdc]
push eax
mov ecx, esi
call edx
mov ecx, eax
mov dword [esp + 0x14c0], 0x12
call dword [sym.imp.HFUILib.dll_public:_wchar_t_const____thiscall_CStdString::operator_wchar_t_const__void_const]
mov ecx, edi
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x430afa
test dx, dx
je 0x430af6
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x430afa
add ecx, 4
add eax, 4
test dx, dx
jne 0x430ad4
xor eax, eax
jmp 0x430aff
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0xdc]
sete byte [esp + 0x17]
mov dword [esp + 0x14c0], 0xffffffff
call dword [sym.imp.HFUILib.dll_public_virtual:_void___thiscall_CStdString::destructor_void_]
cmp byte [esp + 0x17], 0
jne 0x430b54
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov dword [esp + 0x20], eax
cmp eax, dword [ebx + 0x239c]
jne 0x430aa7
mov ecx, dword [esp + 0x18]
push 0
push 0
add ecx, 0x2008
push 0
push ecx
mov ecx, esi
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPngImagePanelUI::SetImage_wchar_t_const___bool__int__int_]
mov edx, dword [esp + 0x18]
add edx, 0x2008
push edx
lea ecx, [ebx + 0x25dc]
call fcn.00403830
lea ecx, [ebx + 0x2540]
call dword [sym.imp.HFUILib.dll_public:_int___thiscall_CStdPtrArray::GetSize_void_const]
xor edi, edi
mov dword [esp + 0x50], eax
test eax, eax
jle 0x430c25
jmp 0x430b90
push edi
lea ecx, [ebx + 0x2540]
call dword [sym.imp.HFUILib.dll_public:_void____thiscall_CStdPtrArray::GetAt_int_const]
mov ecx, dword [esp + 0x18]
mov esi, eax
mov eax, dword [esi + 0x1004]
cmp eax, dword [ecx + 0x1004]
jne 0x430be7
mov ecx, dword [esp + 0x24]
lea eax, [esi + 4]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x430bde
test dx, dx
je 0x430bda
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x430bde
add eax, 4
add ecx, 4
test dx, dx
jne 0x430bb8
xor eax, eax
jmp 0x430be3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x430c01
inc edi
cmp edi, dword [esp + 0x50]
jl 0x430b90
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
jmp 0x42fc3e
mov edx, dword [esi + 0x3010]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
lea ecx, [ebx + 0x2540]
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CStdPtrArray::Remove_int_]
push esi
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
jmp 0x42fc3e
cmp esi, 0x100
ja 0x4310bf
je 0x430f45
add esi, 0xfffffffe
cmp esi, 0xa0
ja case.0x42fc56.1043
movzx edx, byte [esi + 0x431aa0]
jmp dword [edx*4 + 0x431a68]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp case.0x42fc56.1043
cmp edi, ecx
jne case.0x430c60.70
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp eax, dword [ebx + 4]
jne case.0x430c60.70
mov eax, dword [ebx + 0x25fc]
mov esi, dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x430cca
cmp dword [eax + 4], 0
je 0x430cca
mov eax, dword [eax + 4]
push eax
call esi
test eax, eax
je 0x430cca
mov eax, dword [ebx + 0x25fc]
mov ecx, dword [eax + 4]
push 0x297
push 0
push 0
push 0
push 0
push 0
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [ebx + 0x2604]
test eax, eax
je 0x430cf6
cmp dword [eax + 4], 0
je 0x430cf6
mov edx, dword [eax + 4]
push edx
call esi
test eax, eax
je 0x430cf6
xor ecx, ecx
xor eax, eax
push ecx
push eax
mov eax, dword [ebx + 0x2604]
push ecx
call fcn.00445db0
mov eax, dword [ebx + 0x2600]
test eax, eax
je case.0x430c60.70
cmp dword [eax + 4], 0
je case.0x430c60.70
mov eax, dword [eax + 4]
push eax
call esi
test eax, eax
je case.0x430c60.70
xor ecx, ecx
xor eax, eax
push ecx
push eax
mov eax, dword [ebx + 0x2600]
push ecx
call fcn.00445db0
mov eax, dword [esp + 0x1c]
jmp 0x4319e4
mov ecx, ebx
call dword [sym.imp.HFUILib.dll_public:_struct_HWND______thiscall_CWindowWnd::operator_struct_HWND____void_const]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x430d52
mov dword [esp + 0x28], 0
xor ecx, ecx
test edi, edi
sete cl
mov dword [esp + 0x1c], ecx
jmp case.0x42fc56.1077
mov edi, dword [sym.imp.USER32.dll_IsWindowVisible]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebx + 0x2398], eax
mov eax, dword [ebx + 0x25fc]
cmp eax, ecx
je 0x430d96
mov edx, dword [eax + 4]
push edx
call edi
test eax, eax
je 0x430d96
mov eax, dword [ebx + 0x25fc]
mov ecx, dword [eax + 4]
push 0
push ecx
call esi
mov eax, dword [ebx + 0x2604]
test eax, eax
je 0x430db8
mov edx, dword [eax + 4]
push edx
call edi
test eax, eax
je 0x430db8
mov eax, dword [ebx + 0x2604]
mov ecx, dword [eax + 4]
push 0
push ecx
call esi
mov eax, dword [ebx + 0x2600]
test eax, eax
je case.0x42fc56.1043
mov edx, dword [eax + 4]
push edx
call edi
test eax, eax
je case.0x42fc56.1043
mov eax, dword [ebx + 0x2600]
mov ecx, dword [eax + 4]
push 0
push ecx
call esi
jmp case.0x42fc56.1043
mov dword [ebx + 0x2398], ecx
cmp dword [ebx + 0x235c], ecx
je case.0x42fc56.1043
lea eax, [ebx + 0x2360]
lea edi, [ebx + 0x23c0]
call fcn.0043d230
mov eax, dword [eax]
test eax, eax
je case.0x42fc56.1043
add eax, 0x3014
push eax
call dword [sym.imp.MSVCR100.dll__wtoi]
add esp, 4
cmp byte [ebx + 0x2694], 0
jne case.0x42fc56.1043
mov edx, dword [ebx + 0x235c]
push 1
push eax
push edx
call fcn.0041e0d0
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x2c]
mov eax, dword [ebp + 8]
lea edx, [esp + 0x30]
push edx
push edi
push esi
push eax
lea ecx, [ebx + 0x14]
mov dword [esp + 0x40], 0
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPaintManagerUI::MessageHandler_unsigned_int__unsigned_int__long_int__long_int__]
test al, al
je 0x4319d6
mov eax, dword [esp + 0x30]
jmp 0x4319e4
mov dword [esp + 0x1c], ecx
mov eax, ecx
jmp 0x4319e4
mov eax, dword [esp + 0x18]
push eax
mov ecx, ebx
call fcn.0042cf20
mov dword [esp + 0x1c], eax
jmp 0x4319e4
lea ecx, [esp + 0x28]
push ecx
mov ecx, ebx
call fcn.0042da40
mov dword [esp + 0x1c], eax
jmp case.0x42fc56.1077
mov esi, dword [esp + 0x18]
lea edx, [esp + 0x28]
push edx
mov ecx, ebx
call fcn.0042d710
mov dword [esp + 0x1c], eax
jmp case.0x42fc56.1077
cmp byte [ebx + 0x2694], 0
jne case.0x430c60.70
cmp dword [ebx + 0x2658], ecx
jne 0x4316bc
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x28]
push eax
mov ecx, ebx
call fcn.0042d800
mov dword [esp + 0x1c], eax
jmp case.0x42fc56.1077
cmp dword [ebx + 0x2368], ecx
je case.0x42fc56.1043
cmp dword [ebx + 0x235c], ecx
je case.0x42fc56.1043
lea eax, [ebx + 0x2360]
lea edi, [ebx + 0x23c0]
mov dword [ebx + 0x2368], 0
call fcn.0043d230
mov eax, dword [eax]
test eax, eax
je case.0x42fc56.1043
add eax, 0x3014
push eax
call dword [sym.imp.MSVCR100.dll__wtoi]
add esp, 4
cmp byte [ebx + 0x2694], 0
jne case.0x42fc56.1043
mov ecx, dword [ebx + 0x235c]
push 1
push eax
push ecx
jmp 0x430e23
cmp edi, 0x1b
jne 0x430f7a
cmp dword [ebx + 0x2658], ecx
je 0x43100f
mov eax, dword [ebx + 0x2638]
cmp eax, ecx
je 0x430f6c
mov edx, dword [eax + 4]
push 0
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
mov ecx, ebx
call fcn.00429a30
jmp 0x43100f
cmp edi, 0x7a
jne 0x430fd1
cmp dword [ebx + 0x235c], ecx
je 0x43100f
mov dword [ebx + 0x2658], eax
lea eax, [ebx + 0x2360]
lea edi, [ebx + 0x23c0]
call fcn.0043d230
mov eax, dword [eax]
test eax, eax
je 0x43100f
add eax, 0x3014
push eax
call dword [sym.imp.MSVCR100.dll__wtoi]
add esp, 4
cmp byte [ebx + 0x2694], 0
jne 0x43100f
push 1
push eax
mov eax, dword [ebx + 0x235c]
push eax
call fcn.0041e0d0
jmp 0x43100f
cmp edi, 0x74
jne 0x43100f
cmp dword [ebx + 0x235c], ecx
jne 0x43100f
cmp dword [ebx + 0x2318], ecx
je 0x43100f
cmp dword [ebx + 0x2698], eax
je 0x430240
lea esi, [esp + 0x47c]
call fcn.00425180
mov esi, dword [ebx + 0x2318]
cmp dword [esi + 0x3c], 0
je 0x43100f
call fcn.00417550
call fcn.00466940
test eax, eax
je case.0x42fc56.1043
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
call esi
mov ecx, 0x8000
test cx, ax
je 0x43103a
call fcn.004665c0
cmp eax, 1
je 0x431072
push 0x10
call esi
mov edx, 0x8000
test dx, ax
je 0x431052
call fcn.004665c0
cmp eax, 4
je 0x431072
push 0x11
call esi
mov ecx, 0x8000
test cx, ax
je case.0x430c60.70
call fcn.004665c0
cmp eax, 2
jne case.0x430c60.70
call fcn.004666a0
cmp dword [esp + 0x2c], eax
jne case.0x430c60.70
cmp dword [ebx + 0x2360], 0
lea eax, [ebx + 0x2360]
je case.0x430c60.70
lea edi, [ebx + 0x23c0]
call fcn.0043d230
mov eax, dword [eax]
test eax, eax
je case.0x430c60.70
push eax
mov dword [eax + 0x10], 0x13
call fcn.0041e080
mov eax, dword [esp + 0x1c]
jmp 0x4319e4
cmp esi, 0x411
ja 0x42fc3e
je 0x431494
cmp esi, 0x200
ja 0x4311f2
je case.0x42fc56.1043
lea eax, [esi - 0x101]
cmp eax, 0x11
ja case.0x42fc56.1043
movzx edx, byte [eax + 0x431b54]
jmp dword [edx*4 + 0x431b44]
call fcn.00466940
test eax, eax
je case.0x430c60.70
cmp dword [ebx + 0x2360], 0
lea eax, [ebx + 0x2360]
je case.0x430c60.70
lea edi, [ebx + 0x23c0]
call fcn.0043d230
mov eax, dword [eax]
test eax, eax
je case.0x430c60.70
push eax
mov dword [eax + 0x10], 0x14
call fcn.0041e080
push 1
push str.resetaccelmenu
call fcn.00465fe0
mov eax, dword [esp + 0x24]
add esp, 8
jmp 0x4319e4
cmp edi, 0xf060
jne 0x43117b
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [esp + 0x1c], 0
mov eax, dword [esp + 0x1c]
jmp 0x4319e4
push edi
lea ecx, [esp + 0x2c]
mov edx, ebx
call fcn.0042d440
mov dword [esp + 0x1c], eax
jmp case.0x42fc56.1077
call fcn.00466940
test eax, eax
je case.0x430c60.70
cmp edi, 0x12
jne 0x4311b5
call fcn.004665c0
cmp eax, 1
je 0x4311e4
mov eax, dword [esp + 0x1c]
jmp 0x4319e4
cmp edi, 0x10
jne 0x4311cd
call fcn.004665c0
cmp eax, 4
je 0x4311e4
mov eax, dword [esp + 0x1c]
jmp 0x4319e4
cmp edi, 0x11
jne case.0x430c60.70
call fcn.004665c0
cmp eax, 2
jne case.0x430c60.70
call fcn.00466860
cmp dword [esp + 0x18], eax
jmp 0x43107b
sub esi, 0x201
je 0x431266
sub esi, eax
je 0x43125b
sub esi, 0x110
jne case.0x42fc56.1043
cmp edi, 0x2101
jne case.0x430c60.70
call fcn.00465a70
test eax, eax
je case.0x430c60.70
cmp dword [ebx + 0x2658], esi
je 0x431233
push esi
mov ecx, ebx
call fcn.00429a30
mov ecx, ebx
call dword [sym.imp.HFUILib.dll_public:_struct_HWND______thiscall_CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
sete al
movzx ecx, al
push ecx
mov eax, ebx
call fcn.00429bb0
mov eax, dword [esp + 0x1c]
jmp 0x4319e4
mov dword [ebx + 0x2394], ecx
jmp case.0x42fc56.1043
lea ecx, [ebx + 0x14]
mov dword [ebx + 0x2394], eax
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPaintManagerUI::IsEmpty_void_]
test al, al
jne 0x430240
mov ecx, dword [esp + 0x18]
movsx eax, cx
shr ecx, 0x10
movsx ecx, cx
push ecx
push eax
lea ecx, [ebx + 0x14]
call dword [sym.imp.HFUILib.dll_public:_class_CControlUI____thiscall_CPaintManagerUI::FindControl0_struct_tagPOINT_const]
mov esi, eax
test esi, esi
je case.0x42fc56.1043
mov edx, dword [esi]
mov edx, dword [edx + 8]
lea eax, [esp + 0xdc]
push eax
mov ecx, esi
call edx
mov dword [esp + 0x14c0], 0x14
mov ecx, eax
mov dword [esp + 0x20], 2
mov edi, str.accl
call dword [sym.imp.HFUILib.dll_public:_wchar_t_const____thiscall_CStdString::operator_wchar_t_const__void_const]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x4312f6
test cx, cx
je 0x4312f2
mov cx, word [eax + 2]
cmp cx, word [edi + 2]
jne 0x4312f6
add eax, 4
add edi, 4
test cx, cx
jne 0x4312d0
xor eax, eax
jmp 0x4312fb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x43130d
cmp dword [ebx + 0x25fc], 0
mov byte [esp + 0x17], 1
jne 0x431312
mov byte [esp + 0x17], 0
lea ecx, [esp + 0xdc]
mov dword [esp + 0x14c0], 0xffffffff
call dword [sym.imp.HFUILib.dll_public_virtual:_void___thiscall_CStdString::destructor_void_]
cmp byte [esp + 0x17], 0
je 0x431343
mov eax, dword [ebx + 0x25fc]
mov eax, dword [eax + 4]
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [esi]
mov edx, dword [edx + 8]
lea eax, [esp + 0x1ec]
push eax
mov ecx, esi
call edx
mov dword [esp + 0x14c0], 0x15
mov ecx, eax
mov dword [esp + 0x20], 4
mov edi, str.setting
call dword [sym.imp.HFUILib.dll_public:_wchar_t_const____thiscall_CStdString::operator_wchar_t_const__void_const]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x43139a
test cx, cx
je 0x431396
mov cx, word [eax + 2]
cmp cx, word [edi + 2]
jne 0x43139a
add eax, 4
add edi, 4
test cx, cx
jne 0x431374
xor eax, eax
jmp 0x43139f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4313b1
cmp dword [ebx + 0x2604], 0
mov byte [esp + 0x17], 1
jne 0x4313b6
mov byte [esp + 0x17], 0
lea ecx, [esp + 0x1ec]
mov dword [esp + 0x14c0], 0xffffffff
call dword [sym.imp.HFUILib.dll_public_virtual:_void___thiscall_CStdString::destructor_void_]
cmp byte [esp + 0x17], 0
je 0x4313e7
mov eax, dword [ebx + 0x2604]
mov eax, dword [eax + 4]
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [esi]
mov edx, dword [edx + 8]
lea eax, [esp + 0x164]
push eax
mov ecx, esi
call edx
mov dword [esp + 0x14c0], 0x16
mov ecx, eax
mov dword [esp + 0x20], 8
mov edi, str.bonus
call dword [sym.imp.HFUILib.dll_public:_wchar_t_const____thiscall_CStdString::operator_wchar_t_const__void_const]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x43143e
test cx, cx
je 0x43143a
mov cx, word [eax + 2]
cmp cx, word [edi + 2]
jne 0x43143e
add eax, 4
add edi, 4
test cx, cx
jne 0x431418
xor eax, eax
jmp 0x431443
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x431455
cmp dword [ebx + 0x2600], 0
mov byte [esp + 0x17], 1
jne 0x43145a
mov byte [esp + 0x17], 0
lea ecx, [esp + 0x164]
mov dword [esp + 0x14c0], 0xffffffff
call dword [sym.imp.HFUILib.dll_public_virtual:_void___thiscall_CStdString::destructor_void_]
cmp byte [esp + 0x17], 0
je case.0x42fc56.1043
mov eax, dword [ebx + 0x2600]
mov ecx, dword [eax + 4]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.0x42fc56.1043
mov edx, dword [esp + 0x18]
push edx
lea ecx, [esp + 0x2c]
mov edx, ebx
call fcn.0041f6d0
mov dword [esp + 0x1c], eax
jmp case.0x42fc56.1077
mov ecx, dword [esp + 0x2c]
push ecx
lea ecx, [esp + 0xa8]
call fcn.00402480
sub esp, 0x1c
mov dword [esp + 0x14dc], 0x13
lea edx, [esp + 0xc0]
mov ecx, esp
mov dword [esp + 0x6c], esp
push edx
call fcn.004083d0
mov edx, dword [esp + 0x34]
mov ecx, ebx
call fcn.0043c130
mov dword [esp + 0x14c0], 0xffffffff
lea ecx, [esp + 0xa4]
call fcn.004024d0
cmp dword [esp + 0x28], 0
je case.0x42fc56.1043
mov eax, dword [esp + 0x1c]
jmp 0x4319e4
push 0
mov ecx, ebx
call fcn.00429a30
jmp case.0x42fc56.1077
mov eax, dword [esp + 0x18]
mov ecx, dword [ebx + 4]
push eax
push 0
push 0x424
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp case.0x42fc56.1077
lea edi, [ebx + 0x2660]
mov esi, 8
cmp dword [edi + 0x14], esi
jb 0x431549
mov eax, dword [edi]
jmp 0x43154b
mov eax, edi
push 1
push str.cancelflag
push eax
call fcn.00460cd0
add esp, 0xc
cmp dword [edi + 0x14], esi
jb 0x431564
mov eax, dword [edi]
jmp 0x431566
mov eax, edi
push str.installstate
push eax
call fcn.00467230
add esp, 8
cmp eax, 1
jne 0x4315a7
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x6c], esp
push edi
call fcn.004083d0
mov esi, ebx
call fcn.00428d90
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x70], esp
push edi
call fcn.004083d0
mov ecx, ebx
call fcn.00421a40
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x6c], esp
push edi
call fcn.004083d0
push ebx
call fcn.00428700
jmp case.0x42fc56.1077
mov eax, dword [ebx + 4]
test eax, eax
je 0x43160b
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
je 0x43160b
mov eax, dword [ebx + 4]
lea edx, [esp + 0x34]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [esp + 0x40]
sub ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
sub edx, dword [esp + 0x34]
mov eax, dword [ebx + 4]
push 0x81
push ecx
push edx
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x431617
mov ecx, dword [ebx + 4]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [ebx + 4]
push 0xffffffffffffffec
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [ebx + 0x26a0], eax
and eax, 0xfffbffff
or eax, 0x80
push eax
mov eax, dword [ebx + 4]
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov edi, dword [ebx + 0x2688]
test edi, edi
je case.0x42fc56.1077
mov ecx, dword [edi + 4]
push 0x291
push 0
push 0
push 0
push 0
push 0
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
call fcn.00442ae0
jmp case.0x42fc56.1077
push 1
mov eax, ebx
call fcn.004323b0
jmp case.0x42fc56.1077
push 0
mov eax, ebx
call fcn.004323b0
jmp case.0x42fc56.1077
mov edx, dword [esp + 0x2c]
mov edi, dword [esp + 0x18]
push edx
push ebx
lea eax, [esp + 0x30]
call fcn.0041f590
mov dword [esp + 0x1c], eax
jmp case.0x42fc56.1077
mov eax, dword [esp + 0x2c]
add eax, 0xfffffffc
cmp eax, 4
ja 0x4316c5
mov ecx, ebx
call fcn.0041f520
mov dword [esp + 0x1c], eax
jmp 0x4319e4
mov dword [esp + 0x1c], 1
mov eax, dword [esp + 0x1c]
jmp 0x4319e4
mov edi, dword [esp + 0x18]
lea eax, [esp + 0x28]
mov ecx, ebx
call fcn.0041f470
mov dword [esp + 0x1c], eax
jmp case.0x42fc56.1077
mov edx, dword [esp + 0x18]
test edx, edx
je 0x4316c5
mov ecx, ebx
call fcn.0041ed70
mov dword [esp + 0x1c], eax
jmp 0x4319e4
mov eax, dword [esp + 0x2c]
cmp eax, dword [0x4cb448]
jne 0x4318b4
mov esi, 7
xor ecx, ecx
mov dword [esp + 0x48], esi
mov dword [esp + 0x44], 0
mov word [esp + 0x34], cx
mov dword [esp + 0x14c0], 0x17
mov eax, dword [0x4cb628]
mov edi, 8
cmp dword [0x4cb63c], edi
jae 0x431750
mov eax, 0x4cb628
lea edx, [esp + 0x34]
push edx
push eax
call fcn.0047f030
lea eax, [esp + 0xc8]
push eax
call fcn.0047b400
add esp, 0xc
push eax
lea ecx, [esp + 0x54]
push ecx
mov byte [esp + 0x14c8], 0x18
call fcn.0047af30
add esp, 8
lea ecx, [esp + 0xc0]
mov byte [esp + 0x14c0], 0x1a
call fcn.004024d0
mov ecx, dword [esp + 0x34]
cmp dword [esp + 0x48], edi
jae 0x4317a3
lea ecx, [esp + 0x34]
mov eax, dword [esp + 0x50]
cmp dword [esp + 0x64], edi
jae 0x4317b1
lea eax, [esp + 0x50]
push ecx
push eax
lea edx, [esp + 0x90]
push 0x4b4b60
push edx
call fcn.0047cbe0
add esp, 0x10
mov eax, dword [esp + 0x88]
cmp dword [esp + 0x9c], edi
jae 0x4317df
lea eax, [esp + 0x88]
push 0x44
push 0x4b4ba8
push eax
mov eax, dword [ebx + 4]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x43181f
lea ecx, [esp + 0x88]
call fcn.004024d0
lea ecx, [esp + 0x50]
call fcn.004024d0
mov dword [esp + 0x14c0], 0xffffffff
lea ecx, [esp + 0x34]
jmp 0x4314f9
xor ecx, ecx
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], 0
mov word [esp + 0x6c], cx
mov byte [esp + 0x14c0], 0x1c
mov eax, dword [0x4cb644]
cmp dword [0x4cb658], edi
jae 0x43184f
mov eax, 0x4cb644
lea edx, [esp + 0x6c]
push edx
push eax
call fcn.0047f030
mov eax, dword [esp + 0x74]
add esp, 8
cmp dword [esp + 0x80], edi
jae 0x43186e
lea eax, [esp + 0x6c]
push 1
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x6c]
call fcn.004024d0
lea ecx, [esp + 0x88]
call fcn.004024d0
lea ecx, [esp + 0x50]
call fcn.004024d0
lea ecx, [esp + 0x34]
mov dword [esp + 0x14c0], 0xffffffff
call fcn.004024d0
push 0
mov ecx, ebx
call fcn.00429cd0
push 1
push 0
mov ecx, ebx
call dword [sym.imp.HFUILib.dll_public:_void___thiscall_CWindowWnd::ShowWindow_bool__bool_]
mov eax, dword [ebx + 4]
push 0x2101
push eax
call dword [sym.imp.USER32.dll_UnregisterHotKey]
cmp dword [esp + 0x18], 1
je 0x4319c8
lea ecx, [esp + 0x50]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [esp + 0x5c]
movzx ecx, word [esp + 0x5a]
push edx
movzx edx, word [esp + 0x5c]
push ecx
movzx ecx, word [esp + 0x5e]
push edx
movzx edx, word [esp + 0x5e]
push ecx
movzx ecx, word [esp + 0x60]
push edx
push ecx
push str._4d_.2d_.2d_.2d_.2d_.2d
lea eax, [ebx + 0x257c]
push 0x14
push eax
call dword [sym.imp.MSVCR100.dll_swprintf_s]
add esp, 0x24
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
sub edx, dword [ebx + 0x2578]
mov eax, 0x10624dd3
mul edx
mov edi, edx
push 0x15f8
shr edi, 6
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
test eax, eax
je 0x431960
mov esi, eax
call fcn.0041c740
mov esi, eax
jmp 0x431962
xor esi, esi
lea eax, [ebx + 0x2550]
push eax
push 0x4ab4fc
lea ecx, [esi + 0x1180]
push 0x14
push ecx
call dword [sym.imp.MSVCR100.dll_swprintf_s]
lea eax, [ebx + 0x257c]
push eax
push 0x4ab4fc
lea edx, [esi + 0x11a8]
push 0x14
push edx
call dword [sym.imp.MSVCR100.dll_swprintf_s]
push edi
push 0x4b17a8
lea eax, [esi + 0x11d0]
push 0x14
push eax
call dword [sym.imp.MSVCR100.dll_swprintf_s]
push esi
call fcn.00477f10
add esp, 0x34
mov ecx, ebx
call fcn.00437920
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebx + 4]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
xor eax, eax
jmp 0x4319e4
mov ecx, dword [ebp + 8]
push edi
push esi
push ecx
mov ecx, ebx
call dword [sym.imp.HFUILib.dll_protected_virtual:_long_int___thiscall_CWindowWnd::HandleMessage_unsigned_int__unsigned_int__long_int_]
mov ecx, dword [esp + 0x14b8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1470]
xor ecx, esp
call fcn.00497792
mov esp, ebp
pop ebp
ret 0xc