Function at 0x402a1b
Capabilities:
Create thread

Disassembly:
sub esp, 0x218
mov eax, dword [0x406004]
xor eax, esp
mov dword [esp + 0x214], eax
mov eax, dword [0x406024]
push ebx
push ebp
push esi
mov esi, dword [section..data]
dec esi
neg esi
sbb esi, esi
and esi, 0xffffffc0
xor ebx, ebx
add esi, 0x81
push edi
cmp eax, ebx
je 0x402a59
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov ebp, dword [sym.imp.USER32.dll_GetDlgItem]
push esi
push ebx
push ebx
push 0x3b
push ebx
push ebx
push 0x3ef
push dword [0x406020]
call ebp
mov edi, dword [sym.imp.USER32.dll_SetWindowPos]
push eax
call edi
push esi
push ebx
push ebx
push 0xc
push 0x16
push ebx
push 0x3ec
push dword [0x406020]
call ebp
push eax
call edi
push esi
push ebx
push ebx
push 0x1b
push 0x2c
push ebx
mov esi, 0x3ed
push esi
push dword [0x406020]
call ebp
push eax
call edi
mov eax, dword [section..data]
movzx eax, word [eax*2 + 0x404474]
push eax
call fcn.004029f6
xor ebx, ebx
inc ebx
pop ecx
cmp dword [section..data], ebx
je 0x402adf
push 0x41
xor eax, eax
push eax
push eax
push 0x46
push 0x2c
push eax
push dword [0x406024]
call edi
xor eax, eax
cmp dword [section..data], 2
sete al
push eax
push dword [0x406020]
call dword [sym.imp.SHELL32.dll_DragAcceptFiles]
mov eax, dword [section..data]
push dword [eax*4 + 0x40449c]
mov edi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push 0x3ec
push dword [0x406020]
call edi
mov eax, dword [section..data]
push dword [eax*4 + 0x4044c4]
push esi
push dword [0x406020]
call edi
mov esi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push ebx
push dword [0x409ac0]
push 0x30
push 0x3e9
push dword [0x406020]
call esi
push ebx
push dword [0x409ac0]
push 0x30
push 0x3ea
push dword [0x406020]
call esi
push ebx
push dword [0x409ac0]
push 0x30
push 0x3eb
push dword [0x406020]
call esi
mov eax, dword [section..data]
lea ecx, [eax - 1]
cmp ecx, 8
ja case.default.0x402b85
jmp dword [ecx*4 + 0x40335b]
push dword [eax*4 + 0x40449c]
push 0x3ec
push dword [0x406020]
call edi
mov eax, dword [section..data]
push dword [eax*4 + 0x4044c4]
push 0x3ed
push dword [0x406020]
call edi
push 0
push 0x3e9
push dword [0x406020]
call ebp
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push ebx
push 0x3ea
push dword [0x406020]
call ebp
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push str.v1.54
push 0x3fa
push dword [0x406024]
call edi
push str.This_wizard_will_guide_you_through_the_process_of_creating_a_self_extracting_archive_for_Windows._n_nFor_more_information__consult_the_included_documentation__by_pressing_F1__or_visit_the_FreeExtractor_homepage.
push 0x3f3
push dword [0x406024]
call edi
push 0x404854
push 0x3f4
push dword [0x406024]
call edi
jmp case.default.0x402b85
xor eax, eax
cmp byte [0x406138], al
setne al
push eax
push 0x3ea
push dword [0x406020]
call ebp
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push ebx
push 0x3e9
push dword [0x406020]
call ebp
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0x409c00
push 0x7d7
push dword [0x406024]
call edi
push 0x406030
push 0x3ff
push dword [0x406024]
call edi
push 0x406138
mov ebp, 0x400
push ebp
push dword [0x406024]
call edi
push ebx
push dword [0x409ac0]
push 0x30
pop edi
push edi
push 0x7f9
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x7d6
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x7d7
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x7d8
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x7fa
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x3ff
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x3fe
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x7fb
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push ebp
jmp 0x4032e3
push 0
push 0x4b
push 0xc5
push 0x3f2
push dword [0x406024]
call esi
push 0
push 0x2a3
push 0xc5
push 0x3f3
push dword [0x406024]
call esi
push 0
push 0xc8
push 0xc5
push 0x3f4
push dword [0x406024]
call esi
push 0x406660
push 0x3f4
push dword [0x406024]
call edi
push 0x4096c0
push 0x3f3
push dword [0x406024]
call edi
cmp byte [0x406458], 0
mov eax, 0x406458
jne 0x402dc3
mov eax, 0x404ca0
push eax
push 0x3f2
push dword [0x406024]
call edi
push ebx
push 0x3ea
push dword [0x406020]
call ebp
mov edi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call edi
push ebx
push 0x3e9
push dword [0x406020]
call ebp
push eax
call edi
push ebx
push dword [0x409ac0]
push 0x30
pop edi
push edi
push 0x7f9
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x7fc
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x7fd
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x7fe
jmp 0x4032e3
push 0
push 0xc8
push 0xc5
push 0x404
push dword [0x406024]
call esi
push 0
push 0xc8
push 0xc5
push 0x402
push dword [0x406024]
call esi
push 0x406350
push 0x402
push dword [0x406024]
call edi
push 0x406558
push 0x404
push dword [0x406024]
call edi
push dword [0x406134]
mov edi, dword [sym.imp.USER32.dll_CheckDlgButton]
push 0x401
push dword [0x406024]
call edi
push dword [0x40634c]
push 0x407
push dword [0x406024]
call edi
push dword [0x406454]
push 0x403
push dword [0x406024]
call edi
push dword [0x40665c]
push 0x405
push dword [0x406024]
call edi
push dword [0x409360]
push 0x7df
push dword [0x406024]
call edi
and dword [esp + 0x10], 0
mov edi, 0x408
mov eax, dword [esp + 0x10]
lea eax, [eax + 0x4045c4]
movzx ecx, byte [eax]
movzx eax, byte [eax + 1]
push ecx
push eax
lea eax, [esp + 0x1c]
push str._x._02x
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [esp + 0x14]
push eax
push 0
push 0x143
push edi
push dword [0x406024]
mov byte [esp + 0x2c], 0
call esi
add dword [esp + 0x10], 2
cmp dword [esp + 0x10], 0x16
jb 0x402f12
push 0x40623c
push 0
push 0x14d
push edi
push dword [0x406024]
call esi
push ebx
push 0x3ea
push dword [0x406020]
call ebp
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push ebx
push 0x3e9
push dword [0x406020]
call ebp
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push ebx
push dword [0x409ac0]
push 0x30
pop ebp
push ebp
push 0x7f9
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push ebp
push 0x401
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push ebp
push 0x407
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push ebp
push 0x403
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push ebp
push 0x405
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push ebp
push 0x402
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push ebp
push edi
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push ebp
push 0x7ff
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push ebp
push 0x7df
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push ebp
push 0x801
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push ebp
push 0x409
jmp 0x4032e3
call fcn.00401e8e
push ebx
push dword [0x409ac0]
push 0x30
pop edi
push edi
push 0x7f9
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x7f4
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x7f0
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push edi
push 0x7f1
jmp 0x4032e3
push ebx
push dword [0x409ac0]
push 0x30
push 0x7f9
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push 0x30
push 0x3f8
jmp 0x4032e3
call fcn.00401ce5
push ebx
push 0x3ea
push dword [0x406020]
call ebp
mov edi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call edi
push ebx
push 0x3e9
push dword [0x406020]
call ebp
push eax
call edi
push ebx
push dword [0x409ac0]
push 0x30
push 0x7f9
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push 0x30
push 0x7d5
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push 0x30
push 0x802
jmp 0x4032e3
push 0
push 0x3ea
push dword [0x406020]
call ebp
mov edi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call edi
push 0
push 0x3e9
push dword [0x406020]
call ebp
push eax
call edi
push dword [0x406028]
mov edi, 0x406b60
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov dword [esp + 0x14], eax
xor eax, eax
cmp dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
jle 0x403201
mov ebp, 0x400
push ebp
push 0x208
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x1c]
push dword [0x406028]
call dword [sym.imp.USER32.dll_GetMenuStringA]
lea eax, [esp + 0x1c]
push eax
push str.Shortcut_s
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
inc dword [esp + 0x10]
lea edi, [edi + eax + 1]
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x14]
jl 0x4031be
xor eax, eax
push eax
push eax
push eax
push 0x40139c
push eax
push eax
mov byte [edi], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
push dword [0x409ac0]
push 0x30
push 0x7f9
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push 0x30
push 0x7d0
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push 0x30
push 0x3f6
jmp 0x4032e3
push ebx
push 0x3ea
push dword [0x406020]
call ebp
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0
push 0x3e9
push dword [0x406020]
call ebp
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push str.New_SFX
push 0x3ea
push dword [0x406020]
call edi
push str.Finish
push 0x3eb
push dword [0x406020]
call edi
push ebx
push dword [0x409ac0]
push 0x30
push 0x7f9
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push 0x30
push 0x3f7
push dword [0x406024]
call esi
push ebx
push dword [0x409ac0]
push 0x30
push 0x7e2
push dword [0x406024]
call esi
push ebx
push 0
mov edi, 0xf4
push edi
push 0x3e9
push dword [0x406020]
call esi
push ebx
push 0
push edi
push 0x3ea
push dword [0x406020]
call esi
push dword [0x406020]
call dword [sym.imp.USER32.dll_SetFocus]
call dword [sym.imp.USER32.dll_GetFocus]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
mov ebp, eax
push 0x87
push ebp
call esi
test al, 0x20
je 0x403342
push ebx
push ebx
push edi
push ebp
call esi
mov ecx, dword [esp + 0x224]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00403e0a
add esp, 0x218
ret