Function at 0x44ddfd
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x440
mov eax, dword [0x4ce724]
xor eax, ebp
mov dword [ebp - 8], eax
push 8
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x440], ecx
cmp dword [ebp - 0x440], 0x459
jg 0x44d700
cmp dword [ebp - 0x440], 0x459
je 0x44de24
mov edx, dword [ebp - 0x440]
sub edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 7
ja case.0x44d6f9.4
mov eax, dword [ebp - 0x440]
jmp dword [eax*4 + 0x44e2e4]
jmp case.0x44d6f9.4
cmp dword [ebp - 4], 0
je 0x44db3d
push 0x51
mov ecx, dword [ebp - 4]
add ecx, 0x434
push ecx
push 0x462
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
push 0x51
mov eax, dword [ebp - 4]
add eax, 0x4d6
push eax
push 0x464
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
mov byte [ebp - 0x1ac], 0
xor edx, edx
mov dword [ebp - 0x1ab], edx
mov dword [ebp - 0x1a7], edx
mov dword [ebp - 0x1a3], edx
mov dword [ebp - 0x19f], edx
mov dword [ebp - 0x19b], edx
mov dword [ebp - 0x197], edx
mov dword [ebp - 0x193], edx
mov dword [ebp - 0x18f], edx
mov word [ebp - 0x18b], dx
mov byte [ebp - 0x189], dl
mov dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x18]
cmp ecx, 1
jne 0x44d864
push 0x24
lea edx, [ebp - 0x1ac]
push edx
push 0x459
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
cmp edx, 2
je 0x44d7d4
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
cmp ecx, 3
jne 0x44d7ff
push 1
push 0x1d
push 0
push 0x104
mov edx, dword [ebp - 4]
add edx, 0x24
push edx
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.0044bbf0
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
jmp 0x44d85f
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
cmp edx, 1
jne 0x44d836
push 1
push 0x18
push 0
push 0x104
mov eax, dword [ebp - 4]
add eax, 0x24
push eax
push 0
lea ecx, [ebp - 0x1ac]
push ecx
call fcn.0044bbf0
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
jmp 0x44d85f
push 1
push 0
push 0
push 0x104
mov edx, dword [ebp - 4]
add edx, 0x24
push edx
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.0044bbf0
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
jmp 0x44d9bb
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x18]
cmp edx, 2
jne 0x44d9bb
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
cmp ecx, 2
je 0x44d890
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
cmp eax, 3
jne 0x44d937
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1bc], 0
jmp 0x44d8b5
mov ecx, dword [ebp - 0x1bc]
add ecx, 1
mov dword [ebp - 0x1bc], ecx
cmp dword [ebp - 0x1bc], 7
jge 0x44d909
mov edx, 0x24
sub edx, dword [ebp - 0x1b8]
push edx
mov eax, dword [ebp - 0x1b8]
lea ecx, [ebp + eax - 0x1ac]
push ecx
mov edx, dword [ebp - 0x1bc]
add edx, 0x45a
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1b8], ecx
jmp 0x44d8a6
push 1
push 0x1d
push 0
push 0x104
mov edx, dword [ebp - 4]
add edx, 0x24
push edx
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.0044bbf0
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
jmp 0x44d9bb
mov dword [ebp - 0x1c0], 0
jmp 0x44d952
mov ecx, dword [ebp - 0x1c0]
add ecx, 1
mov dword [ebp - 0x1c0], ecx
cmp dword [ebp - 0x1c0], 6
jae 0x44d992
mov edx, dword [ebp - 0x1c0]
shl edx, 2
mov eax, 0x1e
sub eax, edx
push eax
mov ecx, dword [ebp - 0x1c0]
lea edx, [ebp + ecx*4 - 0x1ac]
push edx
mov eax, dword [ebp - 0x1c0]
add eax, 0x45a
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
jmp 0x44d943
push 1
push 0x18
push 0
push 0x104
mov edx, dword [ebp - 4]
add edx, 0x24
push edx
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.0044bbf0
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
push 0x40
lea ecx, [ebp - 0x88]
push ecx
push 0x258
mov edx, dword [ebp - 4]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x80
lea ecx, [ebp - 0x188]
push ecx
push 0x2bf
mov edx, dword [ebp - 4]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
cmp dword [ebp - 0x1b0], 0
jne 0x44db23
lea ecx, [ebp - 0x1e8]
push ecx
lea edx, [ebp - 0x1ac]
push edx
mov eax, dword [ebp - 4]
add eax, 8
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
call fcn.0048a842
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x1b0]
push ecx
lea edx, [ebp - 0x1ac]
push edx
push 0x4bbfd0
call fcn.004576a0
add esp, 0xc
cmp dword [ebp - 0x1b0], 0
jne 0x44db07
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1e]
push ecx
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1f]
push eax
movzx ecx, byte [ebp - 0x1e6]
push ecx
push str.SNV3GetDlg_OnCommand____ProductCode_d_ProductLanguage_d_ProductVersion_d
call fcn.004576a0
add esp, 0x10
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1d]
test eax, eax
je 0x44daa3
movzx ecx, byte [ebp - 0x1e6]
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1d]
cmp ecx, eax
jne 0x44dadd
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1f]
test edx, edx
je 0x44dac0
movzx eax, byte [ebp - 0x1e5]
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1f]
cmp eax, edx
jne 0x44dadd
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1e]
test ecx, ecx
je 0x44daf9
movzx edx, byte [ebp - 0x1e8]
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1e]
cmp edx, ecx
je 0x44daf9
push 0
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x188]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x44db05
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x44db21
push 0
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x188]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x44db3d
push 0
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x188]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, 1
jmp 0x44e2d4
cmp dword [ebp - 4], 0
je 0x44dd7a
push 0x51
mov eax, dword [ebp - 4]
add eax, 0x434
push eax
push 0x462
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
push 0x51
mov edx, dword [ebp - 4]
add edx, 0x4d6
push edx
push 0x464
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
mov byte [ebp - 0x390], 0
xor ecx, ecx
mov dword [ebp - 0x38f], ecx
mov dword [ebp - 0x38b], ecx
mov dword [ebp - 0x387], ecx
mov dword [ebp - 0x383], ecx
mov dword [ebp - 0x37f], ecx
mov dword [ebp - 0x37b], ecx
mov dword [ebp - 0x377], ecx
mov dword [ebp - 0x373], ecx
mov word [ebp - 0x36f], cx
mov byte [ebp - 0x36d], cl
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
xor ecx, ecx
cmp eax, 2
sete cl
push ecx
push 0
push 0
push 0x24
lea edx, [ebp - 0x390]
push edx
push 0
mov eax, dword [ebp - 4]
add eax, 0x128
push eax
call fcn.0044bbf0
add esp, 0x1c
mov dword [ebp - 0x36c], eax
push 0x40
lea ecx, [ebp - 0x268]
push ecx
push 0x258
mov edx, dword [ebp - 4]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x80
lea ecx, [ebp - 0x368]
push ecx
push 0x2bf
mov edx, dword [ebp - 4]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
cmp dword [ebp - 0x36c], 0
jne 0x44dd60
lea ecx, [ebp - 0x3b8]
push ecx
lea edx, [ebp - 0x390]
push edx
mov eax, dword [ebp - 4]
add eax, 8
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
call fcn.0048a842
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp - 0x36c]
push ecx
lea edx, [ebp - 0x390]
push edx
push str.SNV3GetDlg_OnCommand____SerialNumber_Validate__s____d
call fcn.004576a0
add esp, 0xc
cmp dword [ebp - 0x36c], 0
jne 0x44dd44
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x44dcc5
movzx edx, byte [ebp - 0x3b6]
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1d]
cmp edx, ecx
jne 0x44dcff
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1f]
test eax, eax
je 0x44dce2
movzx ecx, byte [ebp - 0x3b5]
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1f]
cmp ecx, eax
jne 0x44dcff
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1e]
test edx, edx
je 0x44dd1b
movzx eax, byte [ebp - 0x3b8]
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1e]
cmp eax, edx
je 0x44dd1b
push 0
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x368]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x44dd42
lea eax, [ebp - 0x390]
push eax
push 0x104
mov ecx, dword [ebp - 4]
add ecx, 0x24
push ecx
call fcn.0046a7ad
add esp, 0xc
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x44dd5e
push 0
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x368]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x44dd7a
push 0
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x368]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, 1
jmp 0x44e2d4
push 3
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
mov eax, 1
jmp 0x44e2d4
push 2
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
mov eax, 1
jmp 0x44e2d4
push str.SNV3GetDlg_OnCommand___IDPASTE
call fcn.00457270
add esp, 4
cmp dword [ebp - 4], 0
je 0x44ddf3
push 0
push 0
push 0x302
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x18]
sub eax, 1
neg eax
sbb eax, eax
neg eax
add eax, 0x459
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x44e2d4
mov edx, dword [ebp - 4]
add edx, 0x22c
je 0x44de24
push 5
push 0
push 0
mov eax, dword [ebp - 4]
add eax, 0x22c
push eax
push 0x4bc0cc
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [ebp + 0x14], 0x300
jne 0x44df9b
mov byte [ebp - 0x3e0], 0
xor ecx, ecx
mov dword [ebp - 0x3df], ecx
mov dword [ebp - 0x3db], ecx
mov dword [ebp - 0x3d7], ecx
mov dword [ebp - 0x3d3], ecx
mov dword [ebp - 0x3cf], ecx
mov dword [ebp - 0x3cb], ecx
mov dword [ebp - 0x3c7], ecx
mov dword [ebp - 0x3c3], ecx
mov word [ebp - 0x3bf], cx
mov byte [ebp - 0x3bd], cl
push 0x24
lea edx, [ebp - 0x3e0]
push edx
push 0x459
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x3e8], eax
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
cmp edx, 2
je 0x44dead
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
cmp ecx, 3
jne 0x44deb9
mov dword [ebp - 0x3e4], 0x1d
jmp 0x44dedb
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
cmp eax, 1
jne 0x44ded1
mov dword [ebp - 0x3e4], 0x18
jmp 0x44dedb
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x3bc], 0
cmp dword [ebp - 4], 0
je 0x44df41
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x19]
and edx, 2
je 0x44df41
cmp dword [ebp - 0x3e8], 0x18
jb 0x44df3f
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
xor edx, edx
cmp ecx, 2
sete dl
push edx
mov eax, dword [ebp - 0x3e4]
push eax
push 0
push 0x24
lea ecx, [ebp - 0x3e0]
push ecx
push 0
lea edx, [ebp - 0x3e0]
push edx
call fcn.0044bbf0
add esp, 0x1c
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0x3bc], eax
jmp 0x44df81
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
xor edx, edx
cmp ecx, 2
sete dl
push edx
mov eax, dword [ebp - 0x3e4]
push eax
push 0
push 0x24
lea ecx, [ebp - 0x3e0]
push ecx
push 0
lea edx, [ebp - 0x3e0]
push edx
call fcn.0044bbf0
add esp, 0x1c
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
push eax
push 1
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, 1
jmp 0x44e2d4
cmp dword [ebp + 0xc], 0x45a
jl 0x44e2d2
cmp dword [ebp + 0xc], 0x461
jge 0x44e2d2
cmp dword [ebp + 0x14], 0x300
jne 0x44e2cb
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
cmp eax, 2
je 0x44dfe8
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
cmp edx, 3
jne 0x44e168
mov byte [ebp - 0x40c], 0
xor eax, eax
mov dword [ebp - 0x40b], eax
mov dword [ebp - 0x407], eax
mov dword [ebp - 0x403], eax
mov dword [ebp - 0x3ff], eax
mov dword [ebp - 0x3fb], eax
mov dword [ebp - 0x3f7], eax
mov dword [ebp - 0x3f3], eax
mov byte [ebp - 0x3ef], al
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x414], 0
jmp 0x44e046
mov ecx, dword [ebp - 0x414]
add ecx, 1
mov dword [ebp - 0x414], ecx
cmp dword [ebp - 0x414], 7
jge 0x44e0e7
mov edx, 0x1e
sub edx, dword [ebp - 0x410]
push edx
mov eax, dword [ebp - 0x410]
lea ecx, [ebp + eax - 0x40c]
push ecx
mov edx, dword [ebp - 0x414]
add edx, 0x45a
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 4], 0
je 0x44e0d0
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x23]
test edx, edx
jne 0x44e0d0
mov eax, dword [ebp - 0x414]
add eax, 0x45a
cmp dword [ebp + 0xc], eax
jne 0x44e0d0
mov ecx, dword [ebp - 0x414]
mov edx, dword [ebp - 0x3ec]
cmp edx, dword [ecx*4 + 0x4ce5f0]
jne 0x44e0d0
push 0
push 0
push 0x28
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [ebp - 0x410]
add ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x410], ecx
jmp 0x44e037
cmp dword [ebp - 4], 0
je 0x44e11a
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x19]
and eax, 2
je 0x44e11a
xor ecx, ecx
cmp dword [ebp - 0x410], 0x1d
sete cl
push ecx
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x44e163
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
xor edx, edx
cmp ecx, 2
sete dl
push edx
push 0x1d
push 0
push 0x1e
lea eax, [ebp - 0x40c]
push eax
push 0
lea ecx, [ebp - 0x40c]
push ecx
call fcn.0044bbf0
add esp, 0x1c
neg eax
sbb eax, eax
add eax, 1
push eax
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x44e2cb
mov byte [ebp - 0x434], 0
xor eax, eax
mov dword [ebp - 0x433], eax
mov dword [ebp - 0x42f], eax
mov dword [ebp - 0x42b], eax
mov dword [ebp - 0x427], eax
mov dword [ebp - 0x423], eax
mov dword [ebp - 0x41f], eax
mov dword [ebp - 0x438], 0
mov dword [ebp - 0x43c], 0
jmp 0x44e1ba
mov ecx, dword [ebp - 0x43c]
add ecx, 1
mov dword [ebp - 0x43c], ecx
cmp dword [ebp - 0x43c], 6
jge 0x44e24f
mov edx, 0x19
sub edx, dword [ebp - 0x438]
push edx
mov eax, dword [ebp - 0x438]
lea ecx, [ebp + eax - 0x434]
push ecx
mov edx, dword [ebp - 0x43c]
add edx, 0x45a
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 4], 0
je 0x44e238
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x23]
test edx, edx
jne 0x44e238
mov eax, dword [ebp - 0x43c]
add eax, 0x45a
cmp dword [ebp + 0xc], eax
jne 0x44e238
cmp dword [ebp - 0x418], 4
jne 0x44e238
push 0
push 0
push 0x28
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [ebp - 0x438]
add edx, dword [ebp - 0x418]
mov dword [ebp - 0x438], edx
jmp 0x44e1ab
cmp dword [ebp - 4], 0
je 0x44e282
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x19]
and ecx, 2
je 0x44e282
xor edx, edx
cmp dword [ebp - 0x438], 0x18
sete dl
push edx
push 1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x44e2cb
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
xor eax, eax
cmp edx, 2
sete al
push eax
push 0x18
push 0
push 0x19
lea ecx, [ebp - 0x434]
push ecx
push 0
lea edx, [ebp - 0x434]
push edx
call fcn.0044bbf0
add esp, 0x1c
neg eax
sbb eax, eax
add eax, 1
push eax
push 1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, 1
jmp 0x44e2d4
xor eax, eax
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00467fff
mov esp, ebp
pop ebp
ret