Function at 0x44124b
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x4e0
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetScrollPos]
push edi
xor ebx, ebx
push ebx
push dword [0x50a148]
call esi
xor edi, edi
inc edi
push edi
push dword [0x50a148]
mov dword [ebp + 0x64], eax
call esi
mov dword [ebp + 0x60], eax
mov eax, dword [ebp + 0x78]
cmp eax, dword [0x50a154]
je 0x4423a5
cmp eax, dword [0x50a15c]
je 0x4423a5
mov edx, dword [0x50a164]
cmp eax, edx
jne 0x4412f8
cmp dword [ebp + 0x7c], 0x300
jne 0x4412f8
push edx
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov esi, eax
cmp esi, ebx
je 0x4412cb
cmp dword [0x515e6c], ebx
jne 0x4412c4
cmp esi, 3
jg 0x4412cb
mov edi, 0x1f4
jmp 0x4412ce
push 0x64
pop edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x4381bf
push edi
push 0x19091969
push dword [ebp + 0x70]
mov dword [0x50a110], eax
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x515e6c], esi
jmp 0x442450
cmp eax, dword [0x50a170]
jne 0x44130b
push ebx
call fcn.0043b3b6
jmp 0x442450
cmp eax, dword [0x50a174]
jne 0x441316
push edi
jmp 0x441301
cmp eax, dword [0x50a148]
jne 0x441325
mov eax, edi
jmp 0x442452
mov esi, dword [ebp + 0x74]
mov ecx, 0x9d85
cmp esi, ecx
jg 0x4418ca
je 0x4418b3
lea eax, [ecx - 0x72]
cmp esi, eax
jg 0x441597
je case.0x442004.41013
add eax, 0xffffffa6
cmp esi, eax
jg 0x4414a6
je 0x44149c
mov eax, 0x9ca4
cmp esi, eax
jg 0x44143f
je 0x44142d
mov eax, esi
dec eax
je 0x44140a
dec eax
je 0x441406
sub eax, 5
je case.0x442004.41017
sub eax, 0x9c84
jne case.0x442004.41018
mov esi, 0x50a1f8
push esi
call fcn.00426e6f
push ebx
push 0x426e9b
push dword [ebp + 0x70]
push 0xbb8
push dword [0x50a138]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne case.0x442004.41017
push esi
call fcn.00426e85
mov eax, dword [0x50a1fc]
cdq
and edx, 0xff
add eax, edx
sar eax, 8
dec eax
mov dword [0x4a1af8], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 1
push 0xfade
push 0x113
push dword [0x50a13c]
mov dword [0x50aaac], eax
call fcn.0043ad4a
jmp case.0x442004.41017
push ebx
push edi
jmp 0x44141d
push 0xd
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge case.0x442004.41017
push ebx
push ebx
push 0x1116
push dword [0x50a144]
jmp 0x442136
push ebx
push ebx
push 0x10
push dword [ebp + 0x70]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp case.0x442004.41017
mov eax, esi
sub eax, 0x9cae
je 0x4417e6
sub eax, 5
je 0x441464
sub eax, 5
jne case.0x442004.41018
call fcn.0043cc50
jmp case.0x442004.41017
push ebx
push ebx
push 0x7f02
call fcn.0043401d
call fcn.004322b1
push 0x452148
push 0x509520
call fcn.00428bcd
test eax, eax
je 0x441495
push ebx
push ebx
push 0x10
push dword [ebp + 0x70]
call dword [sym.imp.USER32.dll_PostMessageW]
push ebx
push ebx
jmp 0x441c60
call fcn.0043cd93
jmp case.0x442004.41017
mov eax, 0x9d09
cmp esi, eax
jg 0x4414ec
je 0x4414e1
mov eax, esi
sub eax, 0x9cbd
je case.0x442004.41016
dec eax
je case.0x442004.41017
dec eax
je case.0x442004.41015
sub eax, 0x49
jne case.0x442004.41018
push dword [0x50aaa0]
call fcn.00434a78
jmp case.0x442004.41017
push dword [0x50aaa0]
jmp 0x44234d
mov eax, esi
sub eax, 0x9d0a
je 0x442087
dec eax
je 0x442347
sub eax, 7
je 0x441fcb
mov edi, dword [sym.imp.USER32.dll_GetMenuStringW]
lea eax, [esi - 0xa4d8]
cmp eax, 0x62
ja 0x441547
push ebx
push 0x104
lea eax, [ebp - 0x280]
push eax
push esi
push dword [0x50c824]
call edi
test eax, eax
je 0x441547
push ebx
lea eax, [ebp - 0x280]
push eax
call fcn.0042abc6
push eax
call fcn.0042e484
lea eax, [esi - 0xa53c]
cmp eax, 0x62
ja case.0x442004.41017
push dword [0x50a13c]
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
push 0x200
lea eax, [ebp - 0x478]
push eax
push esi
push dword [0x50c828]
call edi
test eax, eax
je case.0x442004.41017
lea eax, [ebp - 0x478]
push eax
call fcn.0042abc6
push eax
call fcn.0042f1b3
jmp case.0x442004.41017
lea eax, [esi - 0x9d6c]
cmp eax, 0x18
ja case.0x442004.41018
jmp dword [eax*4 + 0x44245f]
xor eax, eax
cmp dword [0x4a1b10], ebx
sete al
mov dword [0x4a1b10], eax
push eax
push esi
call fcn.0043275a
jmp case.0x442004.41017
xor eax, eax
cmp dword [0x50c79c], ebx
sete al
mov dword [0x50c79c], eax
push eax
push esi
call fcn.0043275a
mov dword [0x50ab58], ebx
mov dword [0x50ab5c], ebx
call fcn.00416cab
jmp case.0x442004.41017
xor eax, eax
cmp dword [0x50c7a0], ebx
sete al
mov dword [0x50c7a0], eax
jmp 0x4415d9
xor eax, eax
cmp dword [0x50c7a4], ebx
sete al
mov dword [0x50c7a4], eax
jmp 0x4415d9
xor eax, eax
cmp dword [0x50c7c0], ebx
sete al
mov dword [0x50c7c0], eax
jmp 0x4415d9
xor eax, eax
cmp dword [0x50c7c4], ebx
sete al
push eax
push esi
mov dword [0x50c7c4], eax
call fcn.0043275a
mov eax, dword [0x50c788]
cmp eax, ebx
je case.0x442004.41017
xor edi, edi
cmp dword [eax + 0xc], ebx
jle case.0x442004.41017
push 0x14
pop esi
mov ecx, dword [esi + eax]
cmp ecx, ebx
je 0x4416a1
mov edx, dword [ecx + 0x14]
cmp edx, 9
jne 0x44167d
cmp dword [ecx + 0xfd0], ebx
je 0x44167d
cmp dword [ecx + 0xfc8], ebx
jne 0x441695
cmp edx, 1
jne 0x4416a1
mov edx, dword [ecx + 0xfd0]
cmp edx, ebx
je 0x4416a1
cmp dword [edx + 0x3a34], 1
jne 0x4416a1
push 1
call fcn.0040b6a5
mov eax, dword [0x50c788]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x44165e
jmp case.0x442004.41017
xor eax, eax
cmp dword [0x50c7c8], ebx
sete al
push eax
push esi
mov dword [0x50c7c8], eax
call fcn.0043275a
mov eax, dword [0x50c788]
cmp eax, ebx
je case.0x442004.41017
xor edi, edi
cmp dword [eax + 0xc], ebx
jle case.0x442004.41017
push 0x14
pop esi
mov ecx, dword [esi + eax]
cmp ecx, ebx
je 0x441724
mov edx, dword [ecx + 0x14]
cmp edx, 9
jne 0x441700
cmp dword [ecx + 0xfd0], ebx
je 0x441700
cmp dword [ecx + 0xfc8], ebx
jne 0x441718
cmp edx, 1
jne 0x441724
mov edx, dword [ecx + 0xfd0]
cmp edx, ebx
je 0x441724
cmp dword [edx + 0x3a34], 1
jne 0x441724
push 1
call fcn.0040b6a5
mov eax, dword [0x50c788]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x4416e1
jmp case.0x442004.41017
xor eax, eax
cmp dword [0x50c7d4], ebx
sete al
mov dword [0x50c7d4], eax
push eax
push esi
call fcn.0043275a
push ebx
call fcn.0043c570
jmp case.0x442004.41017
xor eax, eax
cmp dword [0x50c7d8], ebx
sete al
mov dword [0x50c7d8], eax
jmp 0x441742
xor eax, eax
cmp dword [0x50c7cc], ebx
sete al
push eax
push esi
mov dword [0x50c7cc], eax
call fcn.0043275a
mov eax, dword [0x50c788]
cmp eax, ebx
je case.0x442004.41017
xor edi, edi
cmp dword [eax + 0xc], ebx
jle case.0x442004.41017
push 0x14
pop esi
mov ecx, dword [esi + eax]
cmp ecx, ebx
je 0x4417c1
cmp dword [ecx + 0xfd0], ebx
je 0x4417c1
cmp dword [ecx + 0xfc8], ebx
jne 0x4417b5
cmp dword [ecx + 0x14], 4
jne 0x4417c1
push 1
call fcn.0040b6a5
mov eax, dword [0x50c788]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x441798
jmp case.0x442004.41017
xor eax, eax
cmp dword [0x4a1b20], ebx
sete al
push eax
push esi
mov dword [0x4a1b20], eax
call fcn.0043275a
cmp dword [0x50a0e8], ebx
jne case.0x442004.41017
push str.Refresh...
push ebx
push 1
push dword [0x50aab4]
call fcn.00405e29
add esp, 0x10
jmp 0x441749
xor eax, eax
cmp dword [0x50c7b0], ebx
sete al
push eax
push esi
mov dword [0x50c7b0], eax
call fcn.0043275a
cmp dword [0x50c7b0], ebx
je 0x44183d
push edi
mov dword [0x50c7b4], edi
push 0x9d81
call fcn.0043275a
call fcn.0043c283
jmp case.0x442004.41017
xor eax, eax
cmp dword [0x50c7b4], ebx
sete al
push eax
push esi
mov dword [0x50c7b4], eax
call fcn.0043275a
cmp dword [0x50c7b4], ebx
jne 0x44183d
push ebx
mov dword [0x50c7b0], ebx
push 0x9d80
jmp 0x441838
xor eax, eax
cmp dword [0x4a1b18], ebx
sete al
mov dword [0x4a1b18], eax
jmp 0x4415bd
xor eax, eax
cmp dword [0x4a1b1c], ebx
sete al
mov dword [0x4a1b1c], eax
jmp 0x4415bd
xor eax, eax
cmp dword [0x50c7b8], ebx
sete al
mov dword [0x50c7b8], eax
jmp 0x4415bd
xor eax, eax
cmp dword [0x50c7bc], ebx
sete al
push eax
mov dword [0x50c7bc], eax
push ecx
jmp 0x4415bf
mov eax, 0xa034
cmp esi, eax
jg 0x441fdb
je 0x441fcb
mov ecx, 0x9dbe
cmp esi, ecx
jg 0x441d79
je 0x441d58
lea eax, [ecx - 0x15]
cmp esi, eax
jg 0x441c6f
je 0x441af4
add ecx, 0xffffffc8
cmp esi, ecx
je 0x441add
cmp esi, 0x9d89
jle case.0x442004.41018
add eax, 0xffffffe2
cmp esi, eax
jle 0x441a82
cmp esi, 0x9d93
jle case.0x442004.41018
mov eax, 0x9d96
cmp esi, eax
jle 0x4419f9
cmp esi, 0x9da8
jne case.0x442004.41018
push 0x34
lea eax, [ebp + 0x2c]
push ebx
push eax
mov dword [ebp + 0x24], 0x3c
call fcn.004476fd
mov eax, dword [0x50a13c]
mov dword [ebp + 0x28], eax
mov eax, dword [0x50a120]
mov eax, dword [eax*4 + 0x509cc0]
mov dword [ebp + 0x3c], eax
add esp, 0xc
lea eax, [ebp + 0x24]
mov esi, 0x509ab8
push eax
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x30], esi
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], 0x4141
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
test eax, eax
je case.0x442004.41017
push esi
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push ebx
mov esi, eax
push esi
push 0x30
push dword [0x50a148]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [0x50a190]
call dword [sym.imp.GDI32.dll_DeleteObject]
push 1
push ebx
push dword [0x50a148]
mov dword [0x50a190], esi
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp + 0x3c]
mov ecx, dword [0x50a120]
push 1
push eax
push dword [0x50a148]
mov dword [ecx*4 + 0x509cc0], eax
call fcn.00429a5e
jmp case.0x442004.41017
push eax
push 0x9d94
lea ecx, [esi - 0x9d94]
push esi
mov dword [0x4a1b24], ecx
call fcn.004327a4
mov eax, dword [0x50c788]
cmp eax, ebx
je 0x441a77
cmp dword [eax + 0xc], ebx
mov dword [ebp + 0x78], ebx
jle 0x441a77
push 0x14
pop edi
mov esi, dword [eax + edi]
cmp esi, ebx
je 0x441a69
mov ecx, dword [esi + 0x14]
cmp ecx, 6
jl 0x441a69
cmp ecx, 7
jle 0x441a41
add ecx, 0xfffffff7
cmp ecx, 1
ja 0x441a69
lea eax, [esi + 0x20]
push eax
push ebx
push esi
call fcn.0040a9a4
lea eax, [esi + 0x424]
push eax
push 1
push esi
call fcn.0040a9a4
push 1
mov ecx, esi
call fcn.0040b6a5
mov eax, dword [0x50c788]
inc dword [ebp + 0x78]
mov ecx, dword [ebp + 0x78]
add edi, 4
cmp ecx, dword [eax + 0xc]
jl 0x441a25
push ebx
call fcn.0043c268
jmp case.0x442004.41017
xor ecx, ecx
cmp esi, eax
sete cl
push eax
push 0x9d8a
push esi
mov dword [0x50c7d0], ecx
call fcn.004327a4
mov eax, dword [0x50c788]
cmp eax, ebx
je case.0x442004.41017
xor edi, edi
cmp dword [eax + 0xc], ebx
jle case.0x442004.41017
push 0x14
pop esi
mov ecx, dword [esi + eax]
cmp ecx, ebx
je 0x441acf
cmp dword [ecx + 0x14], 6
jl 0x441acf
push 1
call fcn.0040b6a5
mov eax, dword [0x50c788]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x441ab6
jmp case.0x442004.41017
xor eax, eax
cmp dword [0x4a1b14], ebx
sete al
push eax
mov dword [0x4a1b14], eax
push ecx
jmp 0x441838
push 0x17
pop ecx
push 0x34
lea eax, [ebp + 0x2c]
push ebx
mov esi, 0x509a58
lea edi, [ebp - 0x78]
push eax
rep movsd dword es:[edi], dword [esi]
mov dword [ebp + 0x24], 0x3c
call fcn.004476fd
mov eax, dword [0x50a13c]
mov dword [ebp + 0x28], eax
add esp, 0xc
lea eax, [ebp - 0x78]
mov dword [ebp + 0x30], eax
mov esi, 0x47849c
push esi
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], 0x141
mov dword [ebp + 0x3c], ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x441b87
push 0x3e
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x1a]
push ebx
push eax
call fcn.004476fd
add esp, 0xc
push 0x20
lea eax, [ebp - 0x1c]
push eax
push esi
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionFontSubstitutes
push 0x80000002
call fcn.0042805e
test eax, eax
je 0x441b87
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp + 0x30]
add eax, 0x1c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp + 0x24]
push eax
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
test eax, eax
je case.0x442004.41017
push str.font
push 1
push 0x7f02
call fcn.0043401d
push 0x17
pop ecx
lea esi, [ebp - 0x78]
mov edi, 0x509a58
rep movsd dword es:[edi], dword [esi]
cmp dword [0x50a120], ebx
je 0x441bc6
mov eax, dword [0x4a1adc]
jmp 0x441bce
push 8
call dword [sym.imp.USER32.dll_GetSysColor]
push 0x509a58
mov dword [ebp + 0x3c], eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push ebx
mov esi, eax
push esi
push 0x30
push dword [0x50a144]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [0x50a194]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [0x50a194], esi
mov esi, dword [0x50a0e0]
call fcn.00435a60
cmp dword [0x50a0e0], esi
je 0x441c4a
mov eax, dword [0x50c788]
xor esi, esi
inc esi
cmp dword [eax + 0xc], esi
jle 0x441c4a
push 0x18
pop edi
push dword [edi + eax]
call fcn.0040778a
test eax, eax
je 0x441c3c
mov eax, dword [0x50c788]
push dword [edi + eax]
call fcn.00439387
mov eax, dword [0x50c788]
inc esi
add edi, 4
cmp esi, dword [eax + 0xc]
jl 0x441c23
push 1
push ebx
push dword [0x50a144]
call dword [sym.imp.USER32.dll_InvalidateRect]
push str.font
push 1
push 0x7f00
call fcn.0043401d
jmp case.0x442004.41017
mov eax, esi
sub eax, 0x9daa
je 0x441cab
dec eax
je case.0x442004.41017
sub eax, 0x12
jne case.0x442004.41018
cmp dword [0x4a1b2c], ebx
sete al
push eax
push 0x9dbd
mov dword [0x4a1b2c], eax
call fcn.0043275a
call fcn.0043281c
jmp case.0x442004.41017
mov eax, dword [0x50a120]
mov eax, dword [eax*4 + 0x50a010]
mov edx, 0x4a1ec0
cmp eax, ebx
je 0x441ceb
mov ecx, edx
cmp dword [ecx], eax
je 0x441ceb
add ecx, 4
cmp ecx, 0x4a1f00
jl 0x441cc2
xor ecx, ecx
cmp dword [ecx*4 + 0x4a1ec0], ebx
je 0x441ce4
inc ecx
cmp ecx, 0x10
jl 0x441cd3
jmp 0x441ceb
mov dword [ecx*4 + 0x4a1ec0], eax
mov ecx, dword [0x50a13c]
push 0x515e48
mov dword [0x515e48], 0x24
mov dword [0x515e4c], ecx
mov dword [0x515e54], eax
mov dword [0x515e58], edx
mov dword [0x515e5c], 3
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
test eax, eax
je case.0x442004.41017
mov eax, dword [0x515e54]
mov ecx, dword [0x50a120]
push eax
push ebx
push 0x443
push dword [0x50a148]
mov dword [ecx*4 + 0x50a010], eax
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.00434b6b
jmp case.0x442004.41017
xor eax, eax
cmp dword [0x50a120], ebx
sete al
push eax
push ecx
mov dword [0x50a120], eax
call fcn.0043275a
call fcn.00437369
jmp case.0x442004.41017
mov eax, 0x9fc4
cmp esi, eax
jg 0x441ed1
je 0x441ea6
mov ecx, 0x9dc1
cmp esi, ecx
je 0x441e70
add ecx, 5
cmp esi, ecx
je 0x441e3b
cmp esi, 0x9dcf
jle case.0x442004.41018
cmp esi, 0x9dd3
jg case.0x442004.41018
sub esi, 0x9dd0
mov eax, str.calc.exe
mov edi, 0x452148
mov dword [ebp + 0x78], 1
je 0x441dff
dec esi
je 0x441df8
dec esi
je 0x441dea
dec esi
jne 0x441e09
mov eax, str.control.exe
mov edi, str.ncpa.cpl
jmp 0x441e09
mov eax, str.eventvwr.exe
mov dword [ebp + 0x78], 3
jmp 0x441e09
mov edi, str.devmgmt.msc
jmp 0x441e04
mov edi, str.diskmgmt.msc
mov eax, str.mmc.exe
push eax
mov esi, 0x509728
push esi
lea eax, [ebp - 0x280]
push 0x4522dc
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push dword [ebp + 0x78]
lea eax, [ebp - 0x280]
push esi
push edi
push eax
call fcn.0042c72b
jmp case.0x442004.41017
xor eax, eax
cmp dword [0x50c7e0], ebx
sete al
push eax
push ecx
mov dword [0x50c7e0], eax
call fcn.0043275a
xor eax, eax
cmp dword [0x50c7e0], ebx
setne al
dec eax
dec eax
push eax
push dword [0x50a13c]
call fcn.0042a819
jmp case.0x442004.41017
xor eax, eax
cmp dword [0x50c7e4], ebx
sete al
push eax
push ecx
mov dword [0x50c7e4], eax
call fcn.0043275a
push 0x5097a8
push dword [0x50c7e4]
push str.OneInstance
push 0x456480
call fcn.004298db
jmp case.0x442004.41017
push dword [0x50a13c]
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
push 0x4389fd
push dword [0x50a13c]
push 0x66
push dword [0x50a138]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.0x442004.41017
mov eax, esi
sub eax, 0x9fc5
je 0x441fac
sub eax, 0x6d
je 0x4420e6
dec eax
jne case.0x442004.41018
mov esi, dword [sym.imp.USER32.dll_GetFocus]
call esi
mov edi, eax
push 0x20
lea eax, [ebp - 0x1c]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
push str.Tree
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x441f3f
push dword [0x50aaa8]
call fcn.00433f11
cmp eax, ebx
je case.0x442004.41017
push 1
push dword [eax + 0x824]
call fcn.0042e484
jmp case.0x442004.41017
call esi
cmp eax, dword [0x50a17c]
jne 0x441f56
push ebx
push ebx
push 0x301
push edi
jmp 0x442136
call esi
cmp eax, dword [0x50a164]
je 0x441f49
cmp edi, dword [0x50a148]
jne case.0x442004.41017
xor edi, edi
inc edi
push dword [0x50aaa8]
call fcn.00433f11
cmp eax, ebx
jne 0x442141
push str.Dlg_OnCommand
push 0x1343
push str..UsbTreeView.cpp
push str.INT3_in__S_line__u__function__S
push edi
call fcn.0044d31e
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp case.0x442004.41017
push dword [0x50a13c]
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
push 0x438df2
push dword [0x50a13c]
push 0x67
jmp 0x441ec0
push dword [0x50aaa0]
call fcn.0043d2cc
jmp case.0x442004.41017
mov eax, 0xa474
cmp esi, eax
jg 0x442092
je 0x442087
lea eax, [esi - 0xa035]
cmp eax, 0x12
ja case.0x442004.41018
movzx eax, byte [eax + 0x4424eb]
jmp dword [eax*4 + 0x4424c3]
push edx
push dword [0x50a13c]
call fcn.004299e8
jmp case.0x442004.41017
push dword [0x50a154]
push dword [0x50a13c]
call fcn.004299e8
push ebx
push 1
push 0x14f
push dword [0x50a154]
jmp 0x442136
push dword [0x50a15c]
push dword [0x50a13c]
call fcn.004299e8
push ebx
push 1
push 0x14f
push dword [0x50a15c]
jmp 0x442136
push ebx
call fcn.0043b3b6
jmp case.0x442004.41017
push 1
jmp 0x442065
call fcn.0043d173
jmp case.0x442004.41017
call fcn.00439f94
jmp case.0x442004.41017
push dword [0x50aaa8]
jmp 0x4414d7
cmp esi, 0xa475
je 0x442347
cmp esi, 0xa476
je case.0x442004.41013
cmp esi, 0xa487
jle case.0x442004.41018
cmp esi, 0xa48b
jle 0x4421ea
cmp esi, 0xa492
je 0x4421ea
cmp esi, 0xb600
je 0x441f6f
cmp esi, 0xb603
jne case.0x442004.41018
call dword [sym.imp.USER32.dll_GetFocus]
mov esi, eax
push 0x20
lea eax, [ebp + 0x40]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClassNameA]
cmp esi, ebx
je case.0x442004.41017
push 0x478338
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x44212d
push str.Rich
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je case.0x442004.41017
push 0xffffffffffffffff
push ebx
push 0xb1
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x442004.41017
mov eax, dword [eax + 0xc70]
mov dword [ebp + 0x7c], eax
cmp eax, ebx
je case.0x442004.41017
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
call edi
test eax, eax
je case.0x442004.41017
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x78]
push eax
push 0xb0
push dword [0x50a148]
mov dword [ebp + 0x78], ebx
mov dword [ebp + 0x70], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [ebp + 0x70]
mov eax, dword [ebp + 0x78]
cmp esi, eax
jle case.0x442004.41017
mov ecx, dword [ebp + 0x7c]
sub esi, eax
lea eax, [ecx + eax*2]
push eax
call edi
cmp eax, esi
jge 0x4421a1
mov esi, eax
xor ecx, ecx
push 2
pop edx
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00447831
mov ecx, dword [ebp + 0x7c]
mov edi, eax
mov eax, dword [ebp + 0x78]
add esi, esi
push esi
lea eax, [ecx + eax*2]
push eax
push edi
call fcn.00447767
add esp, 0x10
push 1
xor eax, eax
push edi
mov word [esi + edi], ax
call fcn.0042e484
push edi
call fcn.0044786c
pop ecx
jmp case.0x442004.41017
push dword [0x50aaa8]
call fcn.00433f11
mov edi, 0xa488
cmp esi, edi
mov dword [ebp + 0x70], eax
mov eax, dword [eax + 0xfd0]
mov dword [ebp + 0x78], ebx
jl 0x442222
cmp esi, 0xa489
jle 0x44227b
cmp esi, 0xa48a
je 0x442254
cmp esi, 0xa492
je 0x44227b
push str.Dlg_OnCommand
push ebx
push 0x7f8a
call fcn.0043401d
mov eax, esi
sub eax, edi
mov ecx, 0x44cfae
je 0x4422a8
dec eax
je 0x44229f
dec eax
je 0x442296
dec eax
je 0x44228d
sub eax, 7
jne 0x4422ab
mov dword [ebp + 0x78], 0x44b601
jmp 0x4422ab
mov eax, dword [ebp + 0x70]
cmp dword [eax + 0xfc8], ebx
jne 0x442222
push 0x30
push 0x4686ac
push str.Oops__no_port
push dword [0x50a13c]
call fcn.0044e971
jmp case.0x442004.41017
cmp eax, ebx
jne 0x442222
push 0x30
push 0x4686ac
push str.Oops__no_device
jmp 0x44226b
mov dword [ebp + 0x78], 0x44b5fc
jmp 0x4422ab
mov dword [ebp + 0x78], 0x44b424
jmp 0x4422ab
mov dword [ebp + 0x78], 0x44b33a
jmp 0x4422ab
mov dword [ebp + 0x78], ecx
mov eax, dword [ebp + 0x70]
mov eax, dword [eax + 0xfd0]
cmp eax, ebx
je 0x4422bd
mov edi, dword [eax + 0x10]
jmp 0x4422bf
xor edi, edi
cmp dword [ebp + 0x78], ecx
jne 0x4422e3
cmp dword [eax + 0x39f4], ebx
jne 0x4422d5
cmp word [eax + 0xc30], bx
jne 0x4422e3
push ebx
push dword [ebp + 0x70]
push 0x4410a9
call fcn.004284a5
cmp dword [ebp + 0x78], 0x44b33a
je 0x4422f5
cmp dword [ebp + 0x78], 0x44b424
jne 0x442310
cmp edi, ebx
je 0x442310
push 0x43d8f0
push 0xbb8
push edi
push dword [0x50a13c]
call dword [sym.imp.USER32.dll_SetTimer]
cmp esi, 0xa492
jne 0x442323
push dword [0x50a13c]
call fcn.00434b58
push ebx
push dword [ebp + 0x70]
push dword [ebp + 0x78]
call fcn.004284a5
jmp 0x441f9f
push dword [0x50aaa8]
call fcn.00433f11
push dword [eax + 8]
jmp 0x441fd1
push dword [0x50aaa8]
push dword [0x50a144]
call fcn.0043a0a0
mov esi, dword [sym.imp.USER32.dll_GetScrollPos]
push ebx
push dword [0x50a148]
call esi
mov edi, dword [sym.imp.USER32.dll_SetScrollPos]
cmp dword [ebp + 0x64], eax
je 0x44237f
push ebx
push dword [ebp + 0x64]
push ebx
push dword [0x50a148]
call edi
push 1
push dword [0x50a148]
call esi
cmp dword [ebp + 0x60], eax
je 0x442450
push ebx
push dword [ebp + 0x60]
push 1
push dword [0x50a148]
call edi
jmp 0x442450
cmp dword [ebp + 0x7c], 9
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x442435
push ebx
push ebx
push 0x147
push eax
call esi
push ebx
push eax
mov edi, 0x150
push edi
push dword [ebp + 0x78]
mov dword [ebp + 0x70], eax
call esi
push ebx
push dword [ebp + 0x70]
push edi
push dword [ebp + 0x78]
call esi
mov edi, eax
push edi
mov dword [ebp + 0x70], edi
call fcn.0040778a
test eax, eax
je 0x442432
cmp dword [edi + 8], ebx
je 0x442432
push dword [0x50a13c]
mov edi, dword [sym.imp.USER32.dll_UpdateWindow]
call edi
mov ecx, dword [ebp + 0x70]
push ebx
call fcn.00407857
push dword [0x50a144]
push dword [0x50a13c]
call fcn.004299e8
push dword [0x50a144]
call edi
mov eax, dword [ebp + 0x70]
push dword [eax + 8]
push 9
push 0x110b
push dword [0x50a144]
call esi
mov eax, dword [ebp + 0x78]
mov ecx, dword [0x50a154]
cmp eax, ecx
mov eax, dword [0x50a15c]
je 0x442446
mov eax, ecx
push ebx
push ebx
push 0x14e
push eax
call esi
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10