Function at 0x41772b
Capabilities:
Create process on windows
Find taskbar

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x258
mov eax, dword [0x4421a0]
push ebx
push esi
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x14]
mov esi, ecx
push edi
xor ebx, ebx
push str._seiteKontakt
lea ecx, [ebp - 0x28]
mov dword [eax], ebx
call fcn.0040181a
mov edi, dword [ebp + 0xc]
push 3
pop ecx
mov eax, 0xcd8c
push 2
cmp edi, eax
pop edx
jg 0x417a2e
je 0x417a19
mov eax, 0x80a4
cmp edi, eax
jg 0x4178ec
je 0x4178b7
add eax, 0xfffffff1
cmp edi, eax
jg 0x417811
je 0x417806
mov eax, edi
sub eax, 0x1b76
je 0x4177f8
dec eax
je 0x4177f5
sub eax, 0x648a
je 0x4177e9
dec eax
je 0x4177dd
sub eax, 0x90
je 0x4177d2
dec eax
je 0x4177c3
dec eax
jne case.0x417bfc.54208
mov dword [0x443dd0], edx
jmp 0x417bce
mov dword [0x443dd0], 1
jmp 0x417bce
mov dword [0x443dd0], ebx
jmp 0x417bce
mov ecx, esi
call fcn.004213cd
jmp 0x417e01
mov ecx, esi
call fcn.004213ee
jmp 0x417e01
push ebx
jmp 0x4177fa
push 1
mov ecx, esi
call fcn.00422254
jmp 0x417e01
mov dword [0x443dd0], ecx
jmp 0x417bce
mov eax, edi
sub eax, 0x8096
je 0x4178a2
dec eax
je 0x417897
dec eax
je 0x417888
dec eax
je 0x41787d
sub eax, ecx
je 0x417868
sub eax, 6
je 0x41784b
dec eax
jne case.0x417bfc.54208
lea eax, [esi + 0xb00]
xor ecx, ecx
cmp dword [eax], ebx
sete cl
push ecx
mov dword [eax], ecx
push 1
jmp 0x41785c
lea eax, [esi + 0xb00]
xor ecx, ecx
cmp dword [eax], ebx
sete cl
push ecx
mov dword [eax], ecx
push ebx
mov ecx, esi
call fcn.004199d9
jmp 0x417e01
xor eax, eax
cmp dword [0x4a7164], ebx
sete al
mov dword [0x4a7164], eax
jmp 0x417bce
mov dword [0x4a7180], edx
jmp 0x417bce
mov dword [0x4a7180], 1
jmp 0x417bce
mov dword [0x4a7180], ebx
jmp 0x417bce
xor eax, eax
cmp dword [0x443dcc], ebx
sete al
mov dword [0x443dcc], eax
jmp 0x417bce
xor eax, eax
cmp dword [0x4a7198], ebx
sete al
push eax
push ecx
mov ecx, esp
push str.keep_sort
mov dword [0x4a7198], eax
call fcn.00407038
push ecx
mov ecx, esp
push 0x4a7054
call fcn.004017a8
call fcn.00412390
jmp 0x417a11
mov eax, 0x80ef
cmp edi, eax
jg 0x417988
je 0x417979
mov eax, edi
sub eax, 0x80af
je 0x417964
sub eax, ecx
je 0x417959
sub eax, 0x36
je 0x41794f
dec eax
je 0x417943
sub eax, edx
je 0x417937
sub eax, edx
je 0x41792b
dec eax
jne case.0x417bfc.54208
mov ecx, esi
call fcn.00422878
jmp 0x417e01
mov ecx, esi
call fcn.00421351
jmp 0x417e01
mov ecx, esi
call fcn.0042138f
jmp 0x417e01
mov ecx, esi
call fcn.00421330
jmp 0x417e01
call fcn.00438315
jmp 0x417e01
mov dword [0x4a7180], ecx
jmp 0x417bce
xor eax, eax
cmp dword [0x4a7168], ebx
sete al
mov dword [0x4a7168], eax
jmp 0x417bce
push ebx
push 1
call fcn.004228fa
pop ecx
pop ecx
jmp 0x417e01
mov eax, edi
sub eax, 0x80f0
je 0x4179fd
sub eax, 0x31c
je 0x4179f1
dec eax
je 0x4179e4
dec eax
je 0x4179d8
dec eax
je 0x4179d4
sub eax, 0x184d
je 0x4179c8
sub eax, 0x312f
jne case.0x417bfc.54208
xor eax, eax
cmp dword [0x443da0], ebx
sete al
mov dword [0x443da0], eax
jmp 0x417bce
mov ecx, esi
call fcn.004203e7
jmp 0x417e01
push 1
jmp 0x4179e5
mov ecx, esi
call fcn.00421fdc
jmp 0x417e01
push ebx
mov ecx, esi
call fcn.00422054
jmp 0x417e01
mov ecx, esi
call fcn.00414f42
jmp 0x417e01
push ebx
push ecx
mov ecx, esp
push str.RunCalc
call fcn.0040181a
push ebx
call fcn.00422109
add esp, 0xc
jmp 0x417e01
xor eax, eax
cmp dword [0x47d8e8], ebx
sete al
mov dword [0x47d8e8], eax
jmp 0x417bce
mov eax, 0xd3b9
cmp edi, eax
jg 0x417bda
je 0x417bbe
mov eax, 0xd18e
cmp edi, eax
jg 0x417b15
je 0x417b06
mov eax, edi
sub eax, 0xcd8d
je 0x417af1
sub eax, 0x3f6
je 0x417adc
dec eax
je 0x417ac7
dec eax
je 0x417ab2
dec eax
je 0x417a9d
dec eax
je 0x417a88
sub eax, 6
jne case.0x417bfc.54208
mov dword [0x4a70b0], ebx
jmp 0x417bce
xor eax, eax
cmp dword [0x4a70d4], ebx
sete al
mov dword [0x4a70d4], eax
jmp 0x417bce
xor eax, eax
cmp dword [0x4a70f4], ebx
sete al
mov dword [0x4a70f4], eax
jmp 0x417bce
xor eax, eax
cmp dword [0x443d98], ebx
sete al
mov dword [0x443d98], eax
jmp 0x417bce
xor eax, eax
cmp dword [0x443d94], ebx
sete al
mov dword [0x443d94], eax
jmp 0x417bce
xor eax, eax
cmp dword [0x443d90], ebx
sete al
mov dword [0x443d90], eax
jmp 0x417bce
xor eax, eax
cmp dword [0x4a70b4], ebx
sete al
mov dword [0x4a70b4], eax
jmp 0x417bce
mov dword [0x4a70b0], 1
jmp 0x417bce
mov eax, edi
sub eax, 0xd195
je 0x417bac
dec eax
je 0x417b9a
sub eax, 7
je 0x417b87
dec eax
je 0x417b75
sub eax, edx
je 0x417b56
sub eax, edx
je 0x417b4a
sub eax, 0x31
jne case.0x417bfc.54208
mov ecx, esi
call fcn.00421e87
jmp 0x417e01
mov ecx, esi
call fcn.00421ad9
jmp 0x417e01
xor eax, eax
cmp dword [0x443da8], ebx
sete al
mov dword [0x443da8], eax
push dword [0x4a7104]
mov ecx, esi
call fcn.0041604c
jmp 0x417bce
xor eax, eax
cmp dword [0x443da4], ebx
sete al
mov dword [0x443da4], eax
jmp 0x417b66
xor eax, eax
cmp dword [0x4a7104], ebx
sete al
mov dword [0x4a7104], eax
push eax
jmp 0x417b6c
xor eax, eax
cmp dword [0x4a70e8], ebx
sete al
mov dword [0x4a70e8], eax
jmp 0x417bce
xor eax, eax
cmp dword [0x4a70e0], ebx
sete al
mov dword [0x4a70e0], eax
jmp 0x417bce
xor eax, eax
cmp dword [0x4a7170], ebx
sete al
mov dword [0x4a7170], eax
mov ecx, esi
call fcn.00412568
jmp 0x417e01
mov eax, 0xd7af
cmp edi, eax
jg 0x417d3b
je 0x417d05
lea eax, [edi - 0xd3ba]
cmp eax, 0x12
ja case.0x417bfc.54208
jmp dword [eax*4 + 0x419384]
call fcn.004153ee
jmp case.0x417bfc.54208
push ecx
mov ecx, esp
push str.shell:::05D7B0F4_2121_4EFF_BF6B_ED3F69B894D9
call fcn.0040181a
call fcn.00411357
pop ecx
jmp case.0x417bfc.54208
xor eax, eax
cmp dword [0x4a716c], ebx
sete al
mov dword [0x4a716c], eax
jmp 0x417c8f
xor eax, eax
cmp dword [0x4a7174], ebx
sete al
mov dword [0x4a7174], eax
jmp 0x417c8f
xor eax, eax
cmp dword [0x4a6ae0], ebx
sete al
mov dword [0x4a6ae0], eax
jmp 0x417c8f
xor eax, eax
cmp dword [0x4a6ad8], ebx
sete al
mov dword [0x4a6ad8], eax
jmp 0x417c8f
xor eax, eax
cmp dword [0x4a6ad0], ebx
sete al
mov dword [0x4a6ad0], eax
jmp 0x417c8f
xor eax, eax
cmp dword [0x4a6a68], ebx
sete al
mov dword [0x4a6a68], eax
mov ecx, esi
call fcn.00412568
jmp case.0x417bfc.54208
push 1
jmp 0x417ca0
push ebx
mov ecx, esi
call fcn.00422ae0
jmp case.0x417bfc.54208
xor eax, eax
cmp dword [0x4a6a90], ebx
mov ecx, 0x4a6a90
sete al
mov dword [0x4a6a90], eax
jmp 0x417d58
push str._pageWindows
lea ecx, [ebp - 8]
call fcn.0040199b
push str._Info_DesktopOK_25
lea ecx, [ebp + 0x10]
call fcn.0040181a
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 8]
push eax
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp + 0x10]
call fcn.004017ee
jmp case.0x417bfc.54208
push dword [ebp + 0x10]
mov ecx, esi
call fcn.0041fb88
jmp case.0x417bfc.54208
push str._pageWindows
lea ecx, [ebp - 8]
call fcn.0040199b
push str._Info_DesktopOK_28
lea ecx, [ebp - 4]
call fcn.0040181a
mov eax, dword [ebp - 4]
lea ecx, [ebp - 8]
push eax
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp - 4]
call fcn.004017ee
jmp 0x417e01
cmp edi, 0xd804
jne case.0x417bfc.54208
xor eax, eax
cmp dword [0x4a6a88], ebx
mov ecx, 0x4a6a88
sete al
mov dword [0x4a6a88], eax
call fcn.0041311e
cmp edi, 0xd1c5
jne 0x417d86
xor eax, eax
cmp dword [0x4a70ec], ebx
mov ecx, esi
sete al
mov dword [0x4a70ec], eax
call fcn.00412568
mov dword [0x4a6c50], 1
cmp edi, 0xd1c8
jne 0x417daf
xor eax, eax
cmp dword [0x443d84], ebx
mov ecx, esi
sete al
mov dword [0x443d84], eax
call fcn.00412568
mov dword [0x4a6c50], 1
cmp edi, 0xd1c7
jne 0x417dd8
xor eax, eax
cmp dword [0x443d88], ebx
mov ecx, esi
sete al
mov dword [0x443d88], eax
call fcn.00412568
mov dword [0x4a6c50], 1
cmp edi, 0xd1d2
jne 0x417e01
xor eax, eax
cmp dword [0x443d8c], ebx
mov ecx, esi
sete al
mov dword [0x443d8c], eax
call fcn.00412568
mov dword [0x4a6c50], 1
mov edi, 0xd1cb
cmp dword [ebp + 0xc], edi
jne 0x417e27
lea eax, [edi - 0xd1cb]
mov ecx, esi
mov dword [0x4a70f0], eax
call fcn.00412568
mov dword [0x4a6c50], 1
inc edi
cmp edi, 0xd1d0
jle 0x417e06
mov eax, dword [ebp + 0xc]
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
cmp eax, 0x80e7
jne 0x417e74
mov eax, 0x47f638
neg eax
sbb eax, eax
and eax, 0x47f63c
cmp dword [eax], ebx
jne 0x417e5e
push ebx
push ebx
mov ecx, 0x47f638
call fcn.00423a25
push ebx
push dword [0x47f63c]
call edi
push 5
push dword [0x47f63c]
call edi
mov eax, dword [ebp + 0xc]
cmp eax, 0x1a85
jne 0x417ec8
push 5
push dword [esi + 4]
call edi
push 3
mov edi, dword [sym.imp.USER32.dll_SetWindowPos]
push ebx
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push dword [esi + 4]
call edi
push 3
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [esi + 4]
call edi
push 3
push ebx
push ebx
push ebx
push ebx
push 0xfffffffffffffffe
push dword [esi + 4]
call edi
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetActiveWindow]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 1
pop ebx
jmp 0x418f44
cmp eax, 0x80e3
jne 0x417edf
mov ecx, esi
mov dword [0x4a7190], ebx
call fcn.00412568
mov eax, dword [ebp + 0xc]
cmp eax, 0x80de
jne 0x417efa
mov ecx, esi
mov dword [0x4a7190], 1
call fcn.00412568
mov eax, dword [ebp + 0xc]
cmp eax, 0x80df
jne 0x417f15
mov ecx, esi
mov dword [0x4a7190], 2
call fcn.00412568
mov eax, dword [ebp + 0xc]
cmp eax, 0x80e0
jne 0x417f30
mov ecx, esi
mov dword [0x4a7190], 3
call fcn.00412568
mov eax, dword [ebp + 0xc]
cmp eax, 0x80e1
jne 0x417f4b
mov ecx, esi
mov dword [0x4a7190], 4
call fcn.00412568
mov eax, dword [ebp + 0xc]
cmp eax, 0x80e2
jne 0x417f66
mov ecx, esi
mov dword [0x4a7190], 5
call fcn.00412568
mov eax, dword [ebp + 0xc]
cmp eax, 0xe104
jne 0x417f7a
push dword [esi + 4]
mov ecx, esi
call fcn.0041d350
mov eax, dword [ebp + 0xc]
cmp eax, 0xe101
jne 0x417f8b
mov ecx, esi
call fcn.0041d749
mov eax, dword [ebp + 0xc]
cmp eax, 0x80a5
jne 0x417fc7
push 2
mov ecx, esi
call fcn.0041d91e
test eax, eax
je 0x417fac
push ebx
mov ecx, esi
call fcn.0041d91e
jmp 0x419244
mov ecx, esi
call fcn.00411a94
cmp eax, 1
jne 0x418f44
push eax
mov ecx, esi
call fcn.0041d91e
mov eax, dword [ebp + 0xc]
cmp eax, 0x9c5b
jne 0x417fe8
xor eax, eax
cmp dword [0x4a7140], ebx
mov ecx, esi
sete al
mov dword [0x4a7140], eax
call fcn.00412568
mov eax, dword [ebp + 0xc]
cmp eax, 0x8022
jne 0x41801b
push str._seiteFreeware_DesktopOK_Lizenz
lea ecx, [ebp - 8]
call fcn.0040199b
cmp dword [0x443de8], 1
jne 0x419244
push str._seiteFreeware_DesktopOK_Eula
lea ecx, [ebp - 8]
call fcn.0040199b
jmp 0x419244
cmp eax, 0x8025
jne 0x418063
push str.Bug_Report
lea ecx, [ebp + 0x10]
call fcn.0040181a
push ecx
mov edi, 0x4a7054
mov eax, esp
lea ecx, [ebp + 0x10]
push edi
push ecx
push eax
call fcn.004019df
push ecx
mov ecx, esp
push edi
call fcn.004017a8
push ecx
push esp
call fcn.00401030
pop ecx
call fcn.004012ca
add esp, 0xc
lea ecx, [ebp + 0x10]
jmp 0x418a87
cmp eax, 0x8024
jne 0x41807b
lea eax, [ebp - 0x28]
lea ecx, [ebp - 8]
push eax
call fcn.00407091
jmp 0x419244
cmp eax, 0x8023
jne 0x418089
push str._seiteDownload
jmp 0x41800e
cmp eax, 0x80a0
jne 0x4180c8
push str._seiteFreeware_
lea ecx, [ebp + 0x10]
call fcn.0040181a
lea eax, [ebp + 0x10]
push 0x4a7054
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004019df
push eax
lea ecx, [ebp - 8]
call fcn.00407091
lea ecx, [ebp - 0xc]
call fcn.004017ee
lea ecx, [ebp + 0x10]
jmp 0x418a87
cmp eax, 0xd3c3
jne 0x4180db
mov ecx, esi
call fcn.004222f7
jmp 0x419244
cmp eax, 0x8026
jne 0x418123
push str.Make_greater
lea ecx, [ebp + 0x10]
call fcn.0040181a
push ecx
mov edi, 0x4a7054
mov eax, esp
lea ecx, [ebp + 0x10]
push edi
push ecx
push eax
call fcn.004019df
push ecx
mov ecx, esp
push edi
call fcn.004017a8
push ecx
push esp
call fcn.00401030
pop ecx
call fcn.004012ca
add esp, 0xc
lea ecx, [ebp + 0x10]
jmp 0x418a87
cmp eax, 0x80a6
jne 0x418174
push str._seitePayPal
lea ecx, [ebp - 8]
call fcn.0040199b
push str.Program
lea ecx, [ebp + 0x10]
call fcn.0040181a
lea eax, [ebp + 0x10]
push 0x4a7054
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004019df
mov eax, dword [eax]
lea ecx, [ebp - 8]
push eax
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp - 0xc]
call fcn.004017ee
lea ecx, [ebp + 0x10]
jmp 0x418a87
cmp eax, 0x8027
jne 0x4181de
push str.faq0
lea ecx, [ebp - 4]
call fcn.0040181a
push str._seitefaq_
lea ecx, [ebp + 0x10]
call fcn.0040181a
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 0x10]
push 0x4a7054
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004019df
push eax
lea ecx, [ebp - 8]
call fcn.00407091
lea ecx, [ebp - 0xc]
call fcn.004017ee
lea ecx, [ebp - 0x14]
call fcn.004017ee
lea ecx, [ebp + 0x10]
call fcn.004017ee
lea ecx, [ebp - 4]
jmp 0x418a87
cmp eax, 0xd1d1
jne 0x418248
push str.faq27
lea ecx, [ebp - 4]
call fcn.0040181a
push str._seitefaq_
lea ecx, [ebp + 0x10]
call fcn.0040181a
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 0x10]
push 0x4a7054
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004019df
push eax
lea ecx, [ebp - 8]
call fcn.00407091
lea ecx, [ebp - 0x14]
call fcn.004017ee
lea ecx, [ebp - 0xc]
call fcn.004017ee
lea ecx, [ebp + 0x10]
call fcn.004017ee
lea ecx, [ebp - 4]
jmp 0x418a87
cmp eax, 0x808a
jne 0x418261
mov dword [esi + 0xa78], ebx
mov ecx, esi
call fcn.00412568
jmp 0x419244
cmp eax, 0x808b
jne 0x418274
mov dword [esi + 0xa78], 1
jmp 0x418255
cmp eax, 0x80a9
jne 0x418287
mov dword [esi + 0xa78], 2
jmp 0x418255
cmp eax, 0xd18a
jne 0x4182a0
xor eax, eax
cmp dword [0x4a70f8], ebx
sete al
mov dword [0x4a70f8], eax
jmp 0x418255
cmp eax, 0xd18b
jne 0x4182b9
xor eax, eax
cmp dword [0x4a70fc], ebx
sete al
mov dword [0x4a70fc], eax
jmp 0x418255
cmp eax, 0xd18c
jne 0x4182cc
mov ecx, esi
call fcn.00421aca
jmp 0x419244
cmp eax, 0xcd94
jne 0x41836c
lea ecx, [ebp - 0x4c]
call fcn.00433fc6
mov edi, 0x4a6ae8
lea ecx, [ebp - 0x30]
push edi
call fcn.00407091
lea eax, [ebp + 0x10]
push 0x7921
push eax
call fcn.00428fb5
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.00407091
lea ecx, [ebp + 0x10]
call fcn.004017ee
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [ebp + 0x10], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x44]
push eax
push 0x47ec30
call fcn.004030aa
push ebx
push 0x405b07
push dword [ebp + 0x10]
push 0xf5
push dword [0x47ec38]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.00407091
mov ecx, esi
mov dword [esi + 0xa78], 3
call fcn.00412568
lea ecx, [ebp - 0x4c]
call fcn.00434075
jmp 0x419244
cmp eax, 0x9c5a
jne 0x418388
xor eax, eax
cmp dword [0x4a7144], ebx
sete al
mov dword [0x4a7144], eax
jmp 0x418255
cmp eax, 0xa7e5
jne 0x4183a4
xor eax, eax
cmp dword [0x4a7148], ebx
sete al
mov dword [0x4a7148], eax
jmp 0x418255
cmp eax, 0xa7e6
jne 0x4183c0
xor eax, eax
cmp dword [0x4a714c], ebx
sete al
mov dword [0x4a714c], eax
jmp 0x418255
cmp eax, 0xd3c1
jne 0x41840a
xor eax, eax
cmp dword [0x4a6a98], ebx
sete al
cmp eax, ebx
mov dword [0x4a6a98], eax
je 0x4183eb
push 1
mov ecx, esi
pop eax
push eax
mov dword [0x4a7104], eax
call fcn.0041604c
mov ecx, esi
call fcn.00412568
push dword [esi + 4]
mov ecx, 0x4a6c78
push dword [0x4a6a98]
call fcn.00431dc5
jmp 0x419244
cmp eax, 0xd3c2
jne 0x41843c
xor eax, eax
cmp dword [0x4a6aa0], ebx
mov ecx, 0x4a6aa0
sete al
mov dword [0x4a6aa0], eax
call fcn.0041311e
push dword [0x4a6aa0]
call fcn.0042b2a7
pop ecx
jmp 0x419244
cmp eax, 0xd3c7
jne 0x418462
xor eax, eax
cmp dword [0x4a6a58], ebx
mov ecx, 0x4a6a58
sete al
mov dword [0x4a6a58], eax
call fcn.0041311e
jmp 0x419244
cmp eax, 0x80b4
jne 0x41847e
xor eax, eax
cmp dword [0x4a7184], ebx
sete al
mov dword [0x4a7184], eax
jmp 0x418255
cmp eax, 0x80a8
jne 0x41849a
xor eax, eax
cmp dword [0x4a718c], ebx
sete al
mov dword [0x4a718c], eax
jmp 0x418255
cmp eax, 0x840a
jne 0x4184c4
xor eax, eax
cmp dword [0x443dd4], ebx
mov ecx, esi
sete al
mov dword [0x443dd4], eax
call fcn.00412568
mov ecx, esi
call fcn.004142f3
jmp 0x419244
cmp eax, 0x80b5
jne 0x4184e0
xor eax, eax
cmp dword [0x443dd8], ebx
sete al
mov dword [0x443dd8], eax
jmp 0x418255
cmp eax, 0x80b6
jne 0x4184fc
xor eax, eax
cmp dword [0x443ddc], ebx
sete al
mov dword [0x443ddc], eax
jmp 0x418255
cmp eax, 0x80b7
jne 0x418518
xor eax, eax
cmp dword [0x443de0], ebx
sete al
mov dword [0x443de0], eax
jmp 0x418255
cmp eax, 0x80b8
jne 0x418534
xor eax, eax
cmp dword [0x443de4], ebx
sete al
mov dword [0x443de4], eax
jmp 0x418255
cmp eax, 0xa7da
jne 0x4185c5
xor eax, eax
cmp dword [0x4a7160], ebx
push 0x3f4
sete al
mov dword [0x4a7160], eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x4a7160]
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
push eax
call edi
push 0x3f3
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x4a7160]
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
push eax
call edi
push 0x3f3
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, eax
mov eax, dword [0x443dc0]
imul eax, eax, 0x3e8
mov dword [ebp + 0x10], eax
push ebx
fild dword [ebp + 0x10]
fmul qword [0x43ece0]
call sub.MSVCRT.dll__ftol
push eax
push 0x402
jmp 0x418852
cmp eax, 0x80bb
jne 0x418670
xor eax, eax
cmp dword [0x4a713c], ebx
sete al
cmp eax, ebx
mov dword [0x4a713c], eax
jne 0x418606
push 1
mov ecx, esi
call fcn.004203b9
push 5
push ebx
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call edi
cmp dword [0x4a713c], ebx
je 0x41860b
call fcn.004149b5
push 0x3f2
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x4a713c]
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
push eax
call edi
push 0x3f1
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x4a713c]
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
push eax
call edi
push 0x3f1
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x443dbc]
push ebx
imul ecx, ecx, 0x3e8
push ecx
push 0x402
push eax
jmp 0x418853
cmp eax, 0xcd91
jne 0x41868c
xor eax, eax
cmp dword [0x4a7158], ebx
sete al
mov dword [0x4a7158], eax
jmp 0x418255
cmp eax, 0x80c6
jne 0x4186a8
xor eax, eax
cmp dword [0x4a7154], ebx
sete al
mov dword [0x4a7154], eax
jmp 0x418255
cmp eax, 0x80d5
jne 0x4186dd
xor eax, eax
cmp dword [0x4a715c], ebx
sete al
cmp eax, ebx
mov dword [0x4a715c], eax
jne 0x418255
push 5
push ebx
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call edi
jmp 0x418255
cmp eax, 0x80c9
jne 0x4186f9
xor eax, eax
cmp dword [0x4a7150], ebx
sete al
mov dword [0x4a7150], eax
jmp 0x418255
cmp eax, 0x80c7
jne 0x41870f
mov dword [0x443db8], 1
jmp 0x419244
cmp eax, 0x80cb
jl 0x4187aa
cmp eax, 0x80d4
jg 0x4187aa
add eax, 0xffff7f36
push 1
cmp eax, 0xa
pop ecx
jne 0x418735
push 0x3c
pop ecx
cmp eax, 9
jne 0x41873d
push 0x1e
pop ecx
cmp eax, 8
jne 0x418745
push 0x14
pop ecx
cmp eax, 7
jne 0x41874d
push 0xf
pop ecx
cmp eax, 6
jne 0x418755
push 0xa
pop ecx
cmp eax, 5
jne 0x41875c
push eax
pop ecx
cmp eax, 4
jne 0x418763
push eax
pop ecx
cmp eax, 3
jne 0x41876a
push eax
pop ecx
cmp eax, 2
jne 0x418771
push eax
pop ecx
cmp eax, 1
jne 0x418778
push eax
pop ecx
push 0x3f1
mov dword [0x443dbc], ecx
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x443dbc]
imul ecx, ecx, 0x3e8
movzx ecx, cx
shl ecx, 0x10
push ecx
push ebx
push 0x401
jmp 0x41866a
cmp eax, 0xa7db
jl 0x41885e
cmp eax, 0xa7e4
jg 0x41885e
add eax, 0xffff5826
push 1
cmp eax, 0xa
pop ecx
jne 0x4187d0
push 0x3c
pop ecx
cmp eax, 9
jne 0x4187d8
push 0x1e
pop ecx
cmp eax, 8
jne 0x4187e0
push 0x14
pop ecx
cmp eax, 7
jne 0x4187e8
push 0xf
pop ecx
cmp eax, 6
jne 0x4187f0
push 0xa
pop ecx
cmp eax, 5
jne 0x4187f7
push eax
pop ecx
cmp eax, 4
jne 0x4187fe
push eax
pop ecx
cmp eax, 3
jne 0x418805
push eax
pop ecx
cmp eax, 2
jne 0x41880c
push eax
pop ecx
cmp eax, 1
jne 0x418813
push eax
pop ecx
push 0x3f3
mov dword [0x443dc0], ecx
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, eax
mov eax, dword [0x443dc0]
imul eax, eax, 0x3e8
mov dword [ebp + 0x10], eax
fild dword [ebp + 0x10]
fmul qword [0x43ece0]
call sub.MSVCRT.dll__ftol
movzx eax, ax
shl eax, 0x10
push eax
push ebx
push 0x401
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x418255
cmp eax, 0xd7a1
jl 0x4188d0
cmp eax, 0xd7ae
jg 0x4188d0
add eax, 0xffff2860
push 1
cmp eax, 0xe
pop ecx
jne 0x41887e
mov ecx, 0x258
cmp eax, 0xd
jne 0x418888
mov ecx, 0x12c
cmp eax, 0xc
jne 0x418890
push 0x78
pop ecx
cmp eax, 0xb
jne 0x418898
push 0x5a
pop ecx
cmp eax, 0xa
jne 0x4188a0
push 0x3c
pop ecx
cmp eax, 9
jne 0x4188a8
push 0x1e
pop ecx
cmp eax, 8
jne 0x4188b0
push 0x14
pop ecx
cmp eax, 7
jne 0x4188b8
push 0xf
pop ecx
cmp eax, 6
jne 0x4188c0
push 0xa
pop ecx
mov dword [0x4a6a80], ecx
mov ecx, 0x4a6a80
jmp 0x418458
cmp eax, 0x9c5f
jne 0x4188e2
mov dword [0x4a7118], ebx
jmp 0x418255
cmp eax, 0x9c5e
jne 0x4188f8
mov dword [0x4a7118], 1
jmp 0x418255
cmp eax, 0x9c5d
jne 0x418914
xor eax, eax
cmp dword [0x4a7114], ebx
sete al
mov dword [0x4a7114], eax
jmp 0x418255
cmp eax, 0x80e4
jne 0x418930
xor eax, eax
cmp dword [0x4a70bc], ebx
sete al
mov dword [0x4a70bc], eax
jmp 0x418255
cmp eax, 0x80e5
jne 0x41894c
xor eax, eax
cmp dword [0x4a6aec], ebx
sete al
mov dword [0x4a6aec], eax
jmp 0x418255
cmp eax, 0xd6d8
jl 0x4189db
cmp eax, 0xd7a0
jg 0x4189db
cmp eax, 0xd73c
jne 0x418974
push 1
pop ebx
push ebx
call fcn.0042905f
pop ecx
jmp 0x418f44
cmp eax, 0xd73d
jne 0x41899a
call fcn.0042967d
mov ecx, dword [0x4a7194]
push 1
pop ebx
push ebx
push dword [0x443de8]
call fcn.0041c655
jmp 0x418f44
mov eax, dword [ebp + 0xc]
lea edi, [eax - 0xd6d8]
mov eax, edi
push eax
push ecx
mov ecx, esp
push 0x444ca0
mov dword [0x443de8], eax
call fcn.00407038
push ecx
mov ecx, esp
push 0x4a7054
call fcn.004017a8
call fcn.00412390
add esp, 0xc
mov ecx, esi
push ebx
push edi
call fcn.0041c655
jmp 0x419244
cmp eax, 0x809b
jne 0x418a91
xor eax, eax
cmp dword [0x4a7188], ebx
sete al
cmp eax, ebx
mov dword [0x4a7188], eax
je 0x418255
push 1
mov ecx, 0x4a65a0
pop edi
push 0x47eaf4
mov dword [esi + 0x53c], edi
call fcn.0040199b
mov ecx, esi
call fcn.00412568
mov eax, dword [0x4421a0]
push 0x80
lea ecx, [ebp - 4]
mov dword [ebp - 4], eax
call fcn.00407108
push ebx
push dword [ebp - 4]
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call fcn.0043bd48
add esp, 0xc
lea ecx, [ebp + 0x10]
push 0x444cb4
call fcn.00407038
lea eax, [ebp + 0x10]
lea ecx, [esi + 0xadc]
push eax
call fcn.0040f322
cmp eax, 0xffffffff
jne 0x418a7c
push eax
push edi
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
push eax
call fcn.004017a8
mov ecx, esi
call fcn.0041a6a7
lea ecx, [ebp + 0x10]
call fcn.004017ee
lea ecx, [ebp - 4]
call fcn.004017ee
jmp 0x419244
cmp eax, 0xcd88
jne 0x418abc
lea eax, [ebp + 0x10]
push 0x26
push eax
call fcn.00428fb5
mov eax, dword [eax]
pop ecx
pop ecx
push ebx
push 0x47ec04
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp + 0x10]
jmp 0x418a87
cmp eax, 0x80a7
jne 0x418acf
mov ecx, esi
call fcn.0041e0d4
jmp 0x419244
cmp eax, 0x1b74
jne 0x418ae3
push ebx
mov ecx, esi
call fcn.0041e039
jmp 0x419244
cmp eax, 0x1b75
jne 0x418aee
push 1
jmp 0x418ad7
cmp eax, 0x80ec
jne 0x418b01
mov ecx, esi
call fcn.00411919
jmp 0x419244
cmp eax, 0x8091
jne 0x418b8e
xor eax, eax
cmp dword [0x4a717c], ebx
mov ecx, esi
sete al
mov dword [0x4a717c], eax
call fcn.00412568
cmp dword [0x4a717c], ebx
je 0x418b6f
mov edi, 0x3e8
push edi
push dword [esi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
lea eax, [esi + 0xa74]
push eax
call sub.MSVCRT.dll_time
pop ecx
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, esp
push str.Auto_Save
call fcn.00407038
mov ecx, esi
call fcn.0041a6a7
push ebx
push edi
push edi
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x419244
push 0x3f0
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push str....
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
jmp 0x419244
cmp eax, 0xe146
jne 0x418ba1
mov ecx, esi
call fcn.00423022
jmp 0x418f44
cmp eax, 0xd3c4
jne 0x418ccc
push str.mailto:support2008_softwareok.com
lea ecx, [ebp + 0x10]
call fcn.0040181a
mov edi, 0x4a7050
lea ecx, [ebp - 0xc]
push edi
push str._subjectBug_Report
call fcn.0040181a
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004019df
mov eax, dword [eax]
lea ecx, [ebp + 0x10]
push eax
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp - 0x14]
call fcn.004017ee
lea ecx, [ebp - 0xc]
call fcn.004017ee
push edi
push str.toSupport
lea ecx, [ebp - 0xc]
call fcn.0040181a
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004019df
mov eax, dword [eax]
lea ecx, [ebp + 0x10]
push eax
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp - 0x14]
call fcn.004017ee
lea ecx, [ebp - 0xc]
call fcn.004017ee
push str._0D_0A_0D_0A_0D_0A
lea ecx, [ebp - 4]
call fcn.0040181a
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
call fcn.004196d2
push eax
lea eax, [ebp - 4]
push eax
push edi
push str.BodyBug_Report
lea ecx, [ebp - 0x20]
call fcn.0040181a
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004019df
mov eax, dword [eax]
lea ecx, [ebp + 0x10]
push eax
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp - 0x14]
call fcn.004017ee
lea ecx, [ebp - 0xc]
call fcn.004017ee
lea ecx, [ebp - 0x1c]
call fcn.004017ee
lea ecx, [ebp - 0x20]
call fcn.004017ee
lea ecx, [ebp - 0x24]
call fcn.004017ee
lea ecx, [ebp - 4]
call fcn.004017ee
push 5
push ebx
push ebx
push dword [ebp + 0x10]
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp + 0x10]
jmp 0x418a87
cmp eax, 0x8032
jne 0x418d11
lea eax, [ebp - 0x258]
push 0x104
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x258]
lea ecx, [ebp + 0x10]
push eax
call fcn.00407038
lea eax, [ebp + 0x10]
push 0x480c2c
push eax
lea ecx, [ebp - 0x10]
push dword [esi + 4]
call fcn.00419402
lea ecx, [ebp + 0x10]
jmp 0x418a87
cmp eax, 0x8031
jne 0x418f05
push 0x480c30
lea ecx, [ebp + 0x10]
call fcn.004017a8
push dword [0x4a7054]
lea ecx, [ebp + 0x10]
push str.AP
call fcn.00401c27
push 0x47eaf4
lea ecx, [ebp - 0xc]
call fcn.0040181a
lea eax, [ebp - 0xc]
lea ecx, [ebp - 0x10]
push eax
call fcn.004017a8
push eax
push 0x4a7054
push str._siteFreeware_
lea ecx, [ebp - 0x18]
call fcn.00407038
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00432221
pop ecx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004019df
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004019df
push dword [eax]
lea ecx, [ebp + 0x10]
push str.IN
call fcn.00401c27
lea ecx, [ebp - 0x24]
call fcn.004017ee
lea ecx, [ebp - 0x20]
call fcn.004017ee
lea ecx, [ebp - 0x1c]
call fcn.004017ee
lea ecx, [ebp - 0x14]
call fcn.004017ee
lea ecx, [ebp - 0x18]
call fcn.004017ee
lea ecx, [ebp - 0x10]
call fcn.004017ee
lea eax, [ebp - 0x10]
push eax
call fcn.00432221
pop ecx
push dword [eax]
lea ecx, [ebp + 0x10]
push str.DL
call fcn.00401c27
lea ecx, [ebp - 0x10]
call fcn.004017ee
mov edi, str._0D_0A
lea ecx, [ebp - 0x10]
push edi
call fcn.0040181a
push dword [eax]
lea ecx, [ebp + 0x10]
push 0x445174
call fcn.00401c27
lea ecx, [ebp - 0x10]
call fcn.004017ee
push edi
lea ecx, [ebp - 0x10]
call fcn.0040181a
push dword [eax]
lea ecx, [ebp + 0x10]
push 0x4438d0
call fcn.00401c27
lea ecx, [ebp - 0x10]
call fcn.004017ee
push 0x445170
lea ecx, [ebp - 0x10]
call fcn.0040181a
push dword [eax]
lea ecx, [ebp + 0x10]
push 0x442920
call fcn.00401c27
lea ecx, [ebp - 0x10]
call fcn.004017ee
push str.mailto:
lea ecx, [ebp - 4]
call fcn.0040181a
push 0x480c2c
push str._subject
lea ecx, [ebp - 0x18]
call fcn.0040181a
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004019df
mov eax, dword [eax]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp - 0x10]
call fcn.004017ee
lea ecx, [ebp - 0x18]
call fcn.004017ee
lea eax, [ebp + 0x10]
lea ecx, [ebp - 0x18]
push eax
push str.Body
call fcn.0040181a
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004019df
mov eax, dword [eax]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401acd
lea ecx, [ebp - 0x10]
call fcn.004017ee
lea ecx, [ebp - 0x18]
call fcn.004017ee
push 5
push ebx
push ebx
push dword [ebp - 4]
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 4]
call fcn.004017ee
lea ecx, [ebp - 0xc]
call fcn.004017ee
lea ecx, [ebp + 0x10]
jmp 0x418a87
cmp eax, 0xe10b
jne 0x418f18
mov ecx, esi
call fcn.00421e91
jmp 0x419244
cmp eax, 0x8599
jne 0x418f5b
mov eax, dword [ebp + 0x14]
push 1
pop edi
mov dword [eax], edi
push dword [0x4a7190]
push ebx
push ecx
mov ecx, esp
push 0x47eaf4
call fcn.0040181a
mov ecx, esi
call fcn.0041a6a7
mov ebx, edi
lea ecx, [ebp - 0x28]
call fcn.004017ee
lea ecx, [ebp - 8]
call fcn.004017ee
mov eax, ebx
jmp 0x41937d
cmp eax, 0x8088
jne 0x418fb0
lea edi, [esi + 0xa88]
mov ecx, edi
call fcn.0042350e
test eax, eax
je 0x419244
mov ecx, edi
call fcn.0042357b
cmp eax, 0xffffffff
mov dword [ebp + 0x10], eax
jne 0x418f89
mov dword [ebp + 0x10], ebx
push ebx
mov ecx, edi
push dword [ebp + 0x10]
call fcn.0042360a
push ebx
mov ecx, edi
push dword [ebp + 0x10]
push 0x1076
call fcn.0040c8af
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x419244
cmp eax, 0x8089
jne 0x419010
lea edi, [esi + 0x53c]
xor eax, eax
lea ecx, [ebp + 0x10]
cmp dword [edi], ebx
sete al
mov dword [edi], eax
call fcn.004193e9
push 0x80
lea ecx, [ebp + 0x10]
call fcn.00407108
cmp dword [edi], ebx
push ebx
lea ecx, [ebp + 0x10]
je 0x418ffb
call fcn.0040c8af
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call fcn.0043bd48
add esp, 0xc
jmp 0x419008
call fcn.0040c8af
push eax
call fcn.0043be4c
pop ecx
pop ecx
lea ecx, [ebp + 0x10]
jmp 0x418a87
cmp eax, 0x80d6
je 0x419244
mov eax, dword [ebp + 0xc]
cmp eax, 0x1771
jne 0x41902f
call fcn.0041d08b
jmp 0x419244
cmp eax, 0xe120
jne 0x41904b
mov eax, dword [ebp + 0x14]
mov ecx, esi
mov dword [eax], 1
call fcn.00419be7
jmp 0x419244
cmp eax, 0xcd86
je 0x419234
cmp eax, 0xcd87
je 0x419234
cmp eax, 0x809e
jne 0x419082
mov eax, dword [ebp + 0x14]
push 1
pop edi
mov ecx, esi
mov dword [eax], edi
call fcn.0041d26d
mov dword [0x4a7138], edi
jmp 0x419244
cmp eax, 0xe102
jne 0x41909a
mov eax, dword [ebp + 0x14]
push 1
pop edi
mov ecx, esi
mov dword [eax], edi
call fcn.004198aa
jmp 0x419077
cmp eax, 0x800e
jne 0x41912b
mov eax, dword [ebp + 0x14]
push 8
mov dword [eax], 1
push dword [esi + 4]
call edi
test eax, eax
jne 0x4190ce
push 5
push dword [esi + 4]
call edi
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x419244
cmp dword [0x4a711c], ebx
jne 0x41911e
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebx
push 0x32
call edi
push eax
push 0x31
call edi
push eax
mov edi, 0x80
push 1
push edi
mov ecx, 0x47ec30
call fcn.004193d0
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
push 1
push ebx
push ecx
mov dword [ebp + 0x10], eax
mov ecx, esp
push edi
call fcn.0040181a
push dword [ebp + 0x10]
lea ecx, [esi + 0xa40]
push edi
call fcn.00433817
push dword [esi + 4]
call fcn.00433765
jmp 0x418436
cmp eax, 0xe132
jne 0x41915d
lea edi, [esi + 4]
push ebx
mov ecx, edi
call fcn.004193d4
push ebx
push ebx
push ebx
push 2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CascadeWindows]
push 1
mov ecx, edi
call fcn.004193d4
jmp 0x419244
cmp eax, 0xe133
jne 0x419176
lea edi, [esi + 4]
push ebx
mov ecx, edi
call fcn.004193d4
push ebx
push ebx
push ebx
push 3
jmp 0x41918d
cmp eax, 0xe134
jne 0x41919c
lea edi, [esi + 4]
push ebx
mov ecx, edi
call fcn.004193d4
push ebx
push ebx
push ebx
push 2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TileWindows]
jmp 0x41914f
cmp eax, 0x808f
jne 0x4191b7
lea eax, [esi + 0x540]
xor ecx, ecx
cmp dword [eax], ebx
sete cl
mov dword [eax], ecx
jmp 0x418255
cmp eax, 0x80ab
jne 0x4191da
lea ecx, [ebp + 0x10]
call fcn.0042a5ac
push 1
lea ecx, [ebp + 0x10]
call fcn.0042a649
lea ecx, [ebp + 0x10]
call fcn.0042a622
jmp 0x419244
cmp eax, 0x80aa
jne 0x4191f7
lea ecx, [ebp + 0x10]
call fcn.0042a5ac
push ebx
lea ecx, [ebp + 0x10]
call fcn.0042a649
lea ecx, [ebp + 0x10]
jmp 0x4191d3
cmp eax, 0xe131
jne 0x419210
push ebx
push ebx
push 0x228
call dword [sym.imp.USER32.dll_GetDesktopWindow]
jmp 0x418fa4
cmp eax, 0x809d
jne 0x419221
push ebx
mov ecx, esi
call fcn.0041ce35
jmp 0x419244
mov ecx, 0x8029
cmp eax, ecx
jne 0x419244
push ecx
mov ecx, esi
call fcn.004176d9
jmp 0x419244
mov eax, dword [ebp + 0x14]
mov ecx, esi
mov dword [eax], 1
call fcn.00419b37
lea ecx, [ebp - 8]
call fcn.004193e3
cmp eax, 3
jle 0x41929f
mov ecx, dword [ebp + 0x14]
push 1
pop eax
mov dword [ecx], eax
push eax
push ebx
lea eax, [ebp - 8]
push ebx
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.00432221
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004019df
mov ecx, eax
call fcn.0040c8af
push eax
push str.open
push dword [esi + 4]
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp + 0xc]
call fcn.004017ee
lea ecx, [ebp + 0x14]
call fcn.004017ee
jmp 0x41936a
mov eax, dword [ebp + 0xc]
cmp eax, 0xc350
jl 0x4192bd
cmp eax, 0xc3b4
jg 0x4192bd
push eax
mov ecx, esi
call fcn.0041e35d
jmp 0x41936a
cmp eax, 0x84d0
jl 0x4192dd
cmp eax, 0x8598
jg 0x4192dd
add eax, 0xffff7b30
mov ecx, esi
push eax
call fcn.0041986d
jmp 0x41936a
cmp eax, 0xd3ce
jne 0x4192f1
push ebx
mov ecx, 0x4a6a78
call fcn.00411191
jmp 0x41936a
cmp eax, 0xd3d1
jne 0x419304
mov ecx, 0x4a6a70
call fcn.004193f4
jmp 0x41936a
cmp eax, 0xd3cf
jne 0x41930f
push 1
jmp 0x4192e5
cmp eax, 0xd3d0
jne 0x41931a
push 2
jmp 0x4192e5
cmp eax, 0xcd89
jne 0x419333
xor eax, eax
cmp dword [0x4a70c0], ebx
sete al
mov dword [0x4a70c0], eax
jmp 0x419363
cmp eax, 0xd17d
jne 0x41934c
xor eax, eax
cmp dword [0x4a70c4], ebx
sete al
mov dword [0x4a70c4], eax
jmp 0x419363
cmp eax, 0xcd8a
jne 0x41936a
xor eax, eax
cmp dword [0x4a70c8], ebx
sete al
mov dword [0x4a70c8], eax
mov ecx, esi
call fcn.00412568
lea ecx, [ebp - 0x28]
call fcn.004017ee
lea ecx, [ebp - 8]
call fcn.004017ee
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret 0x10