Function at 0x419aa3
Capabilities:
Create process on windows
Find taskbar

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x258
mov eax, dword [0x4581d0]
push ebx
push esi
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x14]
mov esi, ecx
push edi
xor ebx, ebx
push str._seiteKontakt
lea ecx, [ebp - 0x28]
mov dword [eax], ebx
call fcn.0040182e
mov edi, dword [ebp + 0xc]
push 3
pop ecx
mov eax, 0xcd8c
push 2
cmp edi, eax
pop edx
jg 0x419da6
je 0x419d91
mov eax, 0x80a4
cmp edi, eax
jg 0x419c64
je 0x419c2f
add eax, 0xfffffff1
cmp edi, eax
jg 0x419b89
je 0x419b7e
mov eax, edi
sub eax, 0x1b76
je 0x419b70
dec eax
je 0x419b6d
sub eax, 0x648a
je 0x419b61
dec eax
je 0x419b55
sub eax, 0x90
je 0x419b4a
dec eax
je 0x419b3b
dec eax
jne case.0x419f74.54208
mov dword [0x45a048], edx
jmp 0x419f46
mov dword [0x45a048], 1
jmp 0x419f46
mov dword [0x45a048], ebx
jmp 0x419f46
mov ecx, esi
call fcn.00423c57
jmp 0x41a179
mov ecx, esi
call fcn.00423c78
jmp 0x41a179
push ebx
jmp 0x419b72
push 1
mov ecx, esi
call fcn.00424cd3
jmp 0x41a179
mov dword [0x45a048], ecx
jmp 0x419f46
mov eax, edi
sub eax, 0x8096
je 0x419c1a
dec eax
je 0x419c0f
dec eax
je 0x419c00
dec eax
je 0x419bf5
sub eax, ecx
je 0x419be0
sub eax, 6
je 0x419bc3
dec eax
jne case.0x419f74.54208
lea eax, [esi + 0xb08]
xor ecx, ecx
cmp dword [eax], ebx
sete cl
push ecx
mov dword [eax], ecx
push 1
jmp 0x419bd4
lea eax, [esi + 0xb08]
xor ecx, ecx
cmp dword [eax], ebx
sete cl
push ecx
mov dword [eax], ecx
push ebx
mov ecx, esi
call fcn.0041bf95
jmp 0x41a179
xor eax, eax
cmp dword [0x4ca520], ebx
sete al
mov dword [0x4ca520], eax
jmp 0x419f46
mov dword [0x4ca53c], edx
jmp 0x419f46
mov dword [0x4ca53c], 1
jmp 0x419f46
mov dword [0x4ca53c], ebx
jmp 0x419f46
xor eax, eax
cmp dword [0x45a044], ebx
sete al
mov dword [0x45a044], eax
jmp 0x419f46
xor eax, eax
cmp dword [0x4ca554], ebx
sete al
push eax
push ecx
mov ecx, esp
push str.keep_sort
mov dword [0x4ca554], eax
call fcn.004070c2
push ecx
mov ecx, esp
push 0x4ca404
call fcn.004017bc
call fcn.00413dc6
jmp 0x419d89
mov eax, 0x80ef
cmp edi, eax
jg 0x419d00
je 0x419cf1
mov eax, edi
sub eax, 0x80af
je 0x419cdc
sub eax, ecx
je 0x419cd1
sub eax, 0x36
je 0x419cc7
dec eax
je 0x419cbb
sub eax, edx
je 0x419caf
sub eax, edx
je 0x419ca3
dec eax
jne case.0x419f74.54208
mov ecx, esi
call fcn.004252f7
jmp 0x41a179
mov ecx, esi
call fcn.00423bdb
jmp 0x41a179
mov ecx, esi
call fcn.00423c19
jmp 0x41a179
mov ecx, esi
call fcn.00423bba
jmp 0x41a179
call fcn.0043c36d
jmp 0x41a179
mov dword [0x4ca53c], ecx
jmp 0x419f46
xor eax, eax
cmp dword [0x4ca524], ebx
sete al
mov dword [0x4ca524], eax
jmp 0x419f46
push ebx
push 1
call fcn.00425379
pop ecx
pop ecx
jmp 0x41a179
mov eax, edi
sub eax, 0x80f0
je 0x419d75
sub eax, 0x31c
je 0x419d69
dec eax
je 0x419d5c
dec eax
je 0x419d50
dec eax
je 0x419d4c
sub eax, 0x184d
je 0x419d40
sub eax, 0x312f
jne case.0x419f74.54208
xor eax, eax
cmp dword [0x45a018], ebx
sete al
mov dword [0x45a018], eax
jmp 0x419f46
mov ecx, esi
call fcn.00422c71
jmp 0x41a179
push 1
jmp 0x419d5d
mov ecx, esi
call fcn.00424a5b
jmp 0x41a179
push ebx
mov ecx, esi
call fcn.00424ad3
jmp 0x41a179
mov ecx, esi
call fcn.00416ed6
jmp 0x41a179
push ebx
push ecx
mov ecx, esp
push str.RunCalc
call fcn.0040182e
push ebx
call fcn.00424b88
add esp, 0xc
jmp 0x41a179
xor eax, eax
cmp dword [0x49c994], ebx
sete al
mov dword [0x49c994], eax
jmp 0x419f46
mov eax, 0xd3b9
cmp edi, eax
jg 0x419f52
je 0x419f36
mov eax, 0xd18e
cmp edi, eax
jg 0x419e8d
je 0x419e7e
mov eax, edi
sub eax, 0xcd8d
je 0x419e69
sub eax, 0x3f6
je 0x419e54
dec eax
je 0x419e3f
dec eax
je 0x419e2a
dec eax
je 0x419e15
dec eax
je 0x419e00
sub eax, 6
jne case.0x419f74.54208
mov dword [0x4ca468], ebx
jmp 0x419f46
xor eax, eax
cmp dword [0x4ca48c], ebx
sete al
mov dword [0x4ca48c], eax
jmp 0x419f46
xor eax, eax
cmp dword [0x4ca4ac], ebx
sete al
mov dword [0x4ca4ac], eax
jmp 0x419f46
xor eax, eax
cmp dword [0x45a010], ebx
sete al
mov dword [0x45a010], eax
jmp 0x419f46
xor eax, eax
cmp dword [0x45a00c], ebx
sete al
mov dword [0x45a00c], eax
jmp 0x419f46
xor eax, eax
cmp dword [0x45a008], ebx
sete al
mov dword [0x45a008], eax
jmp 0x419f46
xor eax, eax
cmp dword [0x4ca46c], ebx
sete al
mov dword [0x4ca46c], eax
jmp 0x419f46
mov dword [0x4ca468], 1
jmp 0x419f46
mov eax, edi
sub eax, 0xd195
je 0x419f24
dec eax
je 0x419f12
sub eax, 7
je 0x419eff
dec eax
je 0x419eed
sub eax, edx
je 0x419ece
sub eax, edx
je 0x419ec2
sub eax, 0x31
jne case.0x419f74.54208
mov ecx, esi
call fcn.00424906
jmp 0x41a179
mov ecx, esi
call fcn.00424549
jmp 0x41a179
xor eax, eax
cmp dword [0x45a020], ebx
sete al
mov dword [0x45a020], eax
push dword [0x4ca4bc]
mov ecx, esi
call fcn.004183a2
jmp 0x419f46
xor eax, eax
cmp dword [0x45a01c], ebx
sete al
mov dword [0x45a01c], eax
jmp 0x419ede
xor eax, eax
cmp dword [0x4ca4bc], ebx
sete al
mov dword [0x4ca4bc], eax
push eax
jmp 0x419ee4
xor eax, eax
cmp dword [0x4ca4a0], ebx
sete al
mov dword [0x4ca4a0], eax
jmp 0x419f46
xor eax, eax
cmp dword [0x4ca498], ebx
sete al
mov dword [0x4ca498], eax
jmp 0x419f46
xor eax, eax
cmp dword [0x4ca52c], ebx
sete al
mov dword [0x4ca52c], eax
mov ecx, esi
call fcn.00413f9e
jmp 0x41a179
mov eax, 0xd7af
cmp edi, eax
jg 0x41a0b3
je 0x41a07d
lea eax, [edi - 0xd3ba]
cmp eax, 0x12
ja case.0x419f74.54208
jmp dword [eax*4 + 0x41b940]
call fcn.00417384
jmp case.0x419f74.54208
push ecx
mov ecx, esp
push str.shell:::05D7B0F4_2121_4EFF_BF6B_ED3F69B894D9
call fcn.0040182e
call fcn.00412baa
pop ecx
jmp case.0x419f74.54208
xor eax, eax
cmp dword [0x4ca528], ebx
sete al
mov dword [0x4ca528], eax
jmp 0x41a007
xor eax, eax
cmp dword [0x4ca530], ebx
sete al
mov dword [0x4ca530], eax
jmp 0x41a007
xor eax, eax
cmp dword [0x4c9e90], ebx
sete al
mov dword [0x4c9e90], eax
jmp 0x41a007
xor eax, eax
cmp dword [0x4c9e88], ebx
sete al
mov dword [0x4c9e88], eax
jmp 0x41a007
xor eax, eax
cmp dword [0x4c9e80], ebx
sete al
mov dword [0x4c9e80], eax
jmp 0x41a007
xor eax, eax
cmp dword [0x4c9e18], ebx
sete al
mov dword [0x4c9e18], eax
mov ecx, esi
call fcn.00413f9e
jmp case.0x419f74.54208
push 1
jmp 0x41a018
push ebx
mov ecx, esi
call fcn.0042555f
jmp case.0x419f74.54208
xor eax, eax
cmp dword [0x4c9e40], ebx
mov ecx, 0x4c9e40
sete al
mov dword [0x4c9e40], eax
jmp 0x41a0d0
push str._pageWindows
lea ecx, [ebp - 0xc]
call fcn.004019af
push str._Info_DesktopOK_25
lea ecx, [ebp + 0x10]
call fcn.0040182e
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0xc]
push eax
push dword [eax - 8]
call fcn.00401ae1
lea ecx, [ebp + 0x10]
call fcn.00401802
jmp case.0x419f74.54208
push dword [ebp + 0x10]
mov ecx, esi
call fcn.004223bc
jmp case.0x419f74.54208
push str._pageWindows
lea ecx, [ebp - 0xc]
call fcn.004019af
push str._Info_DesktopOK_28
lea ecx, [ebp - 4]
call fcn.0040182e
mov eax, dword [ebp - 4]
lea ecx, [ebp - 0xc]
push eax
push dword [eax - 8]
call fcn.00401ae1
lea ecx, [ebp - 4]
call fcn.00401802
jmp 0x41a179
cmp edi, 0xd804
jne case.0x419f74.54208
xor eax, eax
cmp dword [0x4c9e38], ebx
mov ecx, 0x4c9e38
sete al
mov dword [0x4c9e38], eax
call fcn.00414b9c
cmp edi, 0xd1c5
jne 0x41a0fe
xor eax, eax
cmp dword [0x4ca4a4], ebx
mov ecx, esi
sete al
mov dword [0x4ca4a4], eax
call fcn.00413f9e
mov dword [0x4ca000], 1
cmp edi, 0xd1c8
jne 0x41a127
xor eax, eax
cmp dword [0x459ffc], ebx
mov ecx, esi
sete al
mov dword [0x459ffc], eax
call fcn.00413f9e
mov dword [0x4ca000], 1
cmp edi, 0xd1c7
jne 0x41a150
xor eax, eax
cmp dword [0x45a000], ebx
mov ecx, esi
sete al
mov dword [0x45a000], eax
call fcn.00413f9e
mov dword [0x4ca000], 1
cmp edi, 0xd1d2
jne 0x41a179
xor eax, eax
cmp dword [0x45a004], ebx
mov ecx, esi
sete al
mov dword [0x45a004], eax
call fcn.00413f9e
mov dword [0x4ca000], 1
mov edi, 0xd1cb
cmp dword [ebp + 0xc], edi
jne 0x41a19f
lea eax, [edi - 0xd1cb]
mov ecx, esi
mov dword [0x4ca4a8], eax
call fcn.00413f9e
mov dword [0x4ca000], 1
inc edi
cmp edi, 0xd1d0
jle 0x41a17e
mov eax, dword [ebp + 0xc]
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
cmp eax, 0x80e7
jne 0x41a1ec
mov eax, 0x4a29e0
neg eax
sbb eax, eax
and eax, 0x4a29e4
cmp dword [eax], ebx
jne 0x41a1d6
push ebx
push ebx
mov ecx, 0x4a29e0
call fcn.00426446
push ebx
push dword [0x4a29e4]
call edi
push 5
push dword [0x4a29e4]
call edi
mov eax, dword [ebp + 0xc]
cmp eax, 0x1a85
jne 0x41a240
push 5
push dword [esi + 4]
call edi
push 3
mov edi, dword [sym.imp.USER32.dll_SetWindowPos]
push ebx
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push dword [esi + 4]
call edi
push 3
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [esi + 4]
call edi
push 3
push ebx
push ebx
push ebx
push ebx
push 0xfffffffffffffffe
push dword [esi + 4]
call edi
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetActiveWindow]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 1
pop ebx
jmp 0x41b4be
cmp eax, 0x80e3
jne 0x41a257
mov ecx, esi
mov dword [0x4ca54c], ebx
call fcn.00413f9e
mov eax, dword [ebp + 0xc]
cmp eax, 0x80de
jne 0x41a272
mov ecx, esi
mov dword [0x4ca54c], 1
call fcn.00413f9e
mov eax, dword [ebp + 0xc]
cmp eax, 0x80df
jne 0x41a28d
mov ecx, esi
mov dword [0x4ca54c], 2
call fcn.00413f9e
mov eax, dword [ebp + 0xc]
cmp eax, 0x80e0
jne 0x41a2a8
mov ecx, esi
mov dword [0x4ca54c], 3
call fcn.00413f9e
mov eax, dword [ebp + 0xc]
cmp eax, 0x80e1
jne 0x41a2c3
mov ecx, esi
mov dword [0x4ca54c], 4
call fcn.00413f9e
mov eax, dword [ebp + 0xc]
cmp eax, 0x80e2
jne 0x41a2de
mov ecx, esi
mov dword [0x4ca54c], 5
call fcn.00413f9e
mov eax, dword [ebp + 0xc]
cmp eax, 0xe104
jne 0x41a2f2
push dword [esi + 4]
mov ecx, esi
call fcn.0041f864
mov eax, dword [ebp + 0xc]
cmp eax, 0xe101
jne 0x41a303
mov ecx, esi
call fcn.0041fc79
mov eax, dword [ebp + 0xc]
cmp eax, 0x80a5
jne 0x41a33f
push 2
mov ecx, esi
call fcn.0041fe80
test eax, eax
je 0x41a324
push ebx
mov ecx, esi
call fcn.0041fe80
jmp 0x41b800
mov ecx, esi
call fcn.004133e7
cmp eax, 1
jne 0x41b4be
push eax
mov ecx, esi
call fcn.0041fe80
mov eax, dword [ebp + 0xc]
cmp eax, 0x9c5b
jne 0x41a360
xor eax, eax
cmp dword [0x4ca4fc], ebx
mov ecx, esi
sete al
mov dword [0x4ca4fc], eax
call fcn.00413f9e
mov eax, dword [ebp + 0xc]
cmp eax, 0x8022
jne 0x41a393
push str._seiteFreeware_DesktopOK_Lizenz
lea ecx, [ebp - 0xc]
call fcn.004019af
cmp dword [0x45a060], 1
jne 0x41b800
push str._seiteFreeware_DesktopOK_Eula
lea ecx, [ebp - 0xc]
call fcn.004019af
jmp 0x41b800
cmp eax, 0x8025
jne 0x41a3db
push str.Bug_Report
lea ecx, [ebp + 0x10]
call fcn.0040182e
push ecx
mov edi, 0x4ca404
mov eax, esp
lea ecx, [ebp + 0x10]
push edi
push ecx
push eax
call fcn.004019f3
push ecx
mov ecx, esp
push edi
call fcn.004017bc
push ecx
push esp
call fcn.00401044
pop ecx
call fcn.004012de
add esp, 0xc
lea ecx, [ebp + 0x10]
jmp 0x41af09
cmp eax, 0x8024
jne 0x41a3f3
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0xc]
push eax
call fcn.0040711b
jmp 0x41b800
cmp eax, 0x8023
jne 0x41a401
push str._seiteDownload
jmp 0x41a386
cmp eax, 0x80a0
jne 0x41a440
push str._seiteFreeware_
lea ecx, [ebp + 0x10]
call fcn.0040182e
lea eax, [ebp + 0x10]
push 0x4ca404
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019f3
push eax
lea ecx, [ebp - 0xc]
call fcn.0040711b
lea ecx, [ebp - 8]
call fcn.00401802
lea ecx, [ebp + 0x10]
jmp 0x41af09
cmp eax, 0xd3c3
jne 0x41a453
mov ecx, esi
call fcn.00424d76
jmp 0x41b800
cmp eax, 0x8026
jne 0x41a49b
push str.Make_greater
lea ecx, [ebp + 0x10]
call fcn.0040182e
push ecx
mov edi, 0x4ca404
mov eax, esp
lea ecx, [ebp + 0x10]
push edi
push ecx
push eax
call fcn.004019f3
push ecx
mov ecx, esp
push edi
call fcn.004017bc
push ecx
push esp
call fcn.00401044
pop ecx
call fcn.004012de
add esp, 0xc
lea ecx, [ebp + 0x10]
jmp 0x41af09
cmp eax, 0x80a6
jne 0x41a4ec
push str._seitePayPal
lea ecx, [ebp - 0xc]
call fcn.004019af
push str.Program
lea ecx, [ebp + 0x10]
call fcn.0040182e
lea eax, [ebp + 0x10]
push 0x4ca404
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019f3
mov eax, dword [eax]
lea ecx, [ebp - 0xc]
push eax
push dword [eax - 8]
call fcn.00401ae1
lea ecx, [ebp - 8]
call fcn.00401802
lea ecx, [ebp + 0x10]
jmp 0x41af09
cmp eax, 0x8027
jne 0x41a556
push str.faq0
lea ecx, [ebp - 4]
call fcn.0040182e
push str._seitefaq_
lea ecx, [ebp + 0x10]
call fcn.0040182e
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 0x10]
push 0x4ca404
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019f3
push eax
lea ecx, [ebp - 0xc]
call fcn.0040711b
lea ecx, [ebp - 8]
call fcn.00401802
lea ecx, [ebp - 0x14]
call fcn.00401802
lea ecx, [ebp + 0x10]
call fcn.00401802
lea ecx, [ebp - 4]
jmp 0x41af09
cmp eax, 0xd808
jne 0x41a595
push str._pageWindows_Info_
lea ecx, [ebp + 0x10]
call fcn.0040182e
lea eax, [ebp + 0x10]
push 0x4ca404
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004019f3
push eax
lea ecx, [ebp - 0xc]
call fcn.0040711b
lea ecx, [ebp - 0x14]
call fcn.00401802
lea ecx, [ebp + 0x10]
jmp 0x41af09
cmp eax, 0xd1d1
jne 0x41a5ff
push str.faq27
lea ecx, [ebp - 4]
call fcn.0040182e
push str._seitefaq_
lea ecx, [ebp + 0x10]
call fcn.0040182e
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 0x10]
push 0x4ca404
push eax
lea eax, [ebp - 8]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004019f3
push eax
lea ecx, [ebp - 0xc]
call fcn.0040711b
lea ecx, [ebp - 0x14]
call fcn.00401802
lea ecx, [ebp - 8]
call fcn.00401802
lea ecx, [ebp + 0x10]
call fcn.00401802
lea ecx, [ebp - 4]
jmp 0x41af09
cmp eax, 0x808a
jne 0x41a618
mov dword [esi + 0xa80], ebx
mov ecx, esi
call fcn.00413f9e
jmp 0x41b800
cmp eax, 0x808b
jne 0x41a62b
mov dword [esi + 0xa80], 1
jmp 0x41a60c
cmp eax, 0x80a9
jne 0x41a63e
mov dword [esi + 0xa80], 2
jmp 0x41a60c
cmp eax, 0xd18a
jne 0x41a657
xor eax, eax
cmp dword [0x4ca4b0], ebx
sete al
mov dword [0x4ca4b0], eax
jmp 0x41a60c
cmp eax, 0xd18b
jne 0x41a670
xor eax, eax
cmp dword [0x4ca4b4], ebx
sete al
mov dword [0x4ca4b4], eax
jmp 0x41a60c
cmp eax, 0xd18c
jne 0x41a683
mov ecx, esi
call fcn.0042453a
jmp 0x41b800
cmp eax, 0xcd94
jne 0x41a723
lea ecx, [ebp - 0x4c]
call fcn.00437773
mov edi, 0x4c9e98
lea ecx, [ebp - 0x30]
push edi
call fcn.0040711b
lea eax, [ebp + 0x10]
push 0x7921
push eax
call fcn.0042b86c
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040711b
lea ecx, [ebp + 0x10]
call fcn.00401802
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [ebp + 0x10], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x44]
push eax
push 0x4a1700
call fcn.004030aa
push ebx
push 0x405b78
push dword [ebp + 0x10]
push 0xf5
push dword [0x4a1708]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.0040711b
mov ecx, esi
mov dword [esi + 0xa80], 3
call fcn.00413f9e
lea ecx, [ebp - 0x4c]
call fcn.00437822
jmp 0x41b800
cmp eax, 0x9c5a
jne 0x41a73f
xor eax, eax
cmp dword [0x4ca500], ebx
sete al
mov dword [0x4ca500], eax
jmp 0x41a60c
cmp eax, 0xa7e5
jne 0x41a75b
xor eax, eax
cmp dword [0x4ca504], ebx
sete al
mov dword [0x4ca504], eax
jmp 0x41a60c
cmp eax, 0xa7e6
jne 0x41a777
xor eax, eax
cmp dword [0x4ca508], ebx
sete al
mov dword [0x4ca508], eax
jmp 0x41a60c
cmp eax, 0xd3c1
jne 0x41a7c1
xor eax, eax
cmp dword [0x4c9e48], ebx
sete al
cmp eax, ebx
mov dword [0x4c9e48], eax
je 0x41a7a2
push 1
mov ecx, esi
pop eax
push eax
mov dword [0x4ca4bc], eax
call fcn.004183a2
mov ecx, esi
call fcn.00413f9e
push dword [esi + 4]
mov ecx, 0x4ca028
push dword [0x4c9e48]
call fcn.004353c2
jmp 0x41b800
cmp eax, 0xd3c2
jne 0x41a7f3
xor eax, eax
cmp dword [0x4c9e50], ebx
mov ecx, 0x4c9e50
sete al
mov dword [0x4c9e50], eax
call fcn.00414b9c
push dword [0x4c9e50]
call fcn.0042db5e
pop ecx
jmp 0x41b800
cmp eax, 0xd809
jne 0x41a868
xor eax, eax
cmp dword [0x459ce4], ebx
sete al
push eax
push str.disable_dark_theme
mov dword [0x459ce4], eax
call fcn.00414e1f
pop ecx
lea eax, [ebp - 0x258]
pop ecx
push 0x104
push eax
push dword [0x4a17b0]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x258]
lea ecx, [ebp + 0x10]
push eax
call fcn.004070c2
push 5
push ebx
lea eax, [ebp - 0x258]
push ebx
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0xfefe
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp + 0x10]
jmp 0x41af09
cmp eax, 0xd80a
jne 0x41a8be
xor eax, eax
cmp dword [0x459ce0], ebx
sete al
push eax
push str.soft_paint
mov dword [0x459ce0], eax
call fcn.00414e1f
pop ecx
pop ecx
push 0x105
push ebx
push ebx
push dword [esi + 0x98]
call dword [sym.imp.USER32.dll_RedrawWindow]
push ebx
push dword [esi + 0x64]
call edi
push 5
push dword [esi + 0x64]
call edi
push ebx
push dword [esi + 0x60]
call edi
push 5
push dword [esi + 0x60]
call edi
jmp 0x41b800
cmp eax, 0xd3c7
jne 0x41a8e4
xor eax, eax
cmp dword [0x4c9e08], ebx
mov ecx, 0x4c9e08
sete al
mov dword [0x4c9e08], eax
call fcn.00414b9c
jmp 0x41b800
cmp eax, 0x80b4
jne 0x41a900
xor eax, eax
cmp dword [0x4ca540], ebx
sete al
mov dword [0x4ca540], eax
jmp 0x41a60c
cmp eax, 0x80a8
jne 0x41a91c
xor eax, eax
cmp dword [0x4ca548], ebx
sete al
mov dword [0x4ca548], eax
jmp 0x41a60c
cmp eax, 0x840a
jne 0x41a946
xor eax, eax
cmp dword [0x45a04c], ebx
mov ecx, esi
sete al
mov dword [0x45a04c], eax
call fcn.00413f9e
mov ecx, esi
call fcn.00415e18
jmp 0x41b800
cmp eax, 0x80b5
jne 0x41a962
xor eax, eax
cmp dword [0x45a050], ebx
sete al
mov dword [0x45a050], eax
jmp 0x41a60c
cmp eax, 0x80b6
jne 0x41a97e
xor eax, eax
cmp dword [0x45a054], ebx
sete al
mov dword [0x45a054], eax
jmp 0x41a60c
cmp eax, 0x80b7
jne 0x41a99a
xor eax, eax
cmp dword [0x45a058], ebx
sete al
mov dword [0x45a058], eax
jmp 0x41a60c
cmp eax, 0x80b8
jne 0x41a9b6
xor eax, eax
cmp dword [0x45a05c], ebx
sete al
mov dword [0x45a05c], eax
jmp 0x41a60c
cmp eax, 0xa7da
jne 0x41aa47
xor eax, eax
cmp dword [0x4ca51c], ebx
push 0x3f4
sete al
mov dword [0x4ca51c], eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x4ca51c]
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
push eax
call edi
push 0x3f3
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x4ca51c]
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
push eax
call edi
push 0x3f3
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, eax
mov eax, dword [0x45a038]
imul eax, eax, 0x3e8
mov dword [ebp + 0x10], eax
push ebx
fild dword [ebp + 0x10]
fmul qword [0x453c68]
call fcn.00442b7c
push eax
push 0x402
jmp 0x41acd4
cmp eax, 0x80bb
jne 0x41aaf2
xor eax, eax
cmp dword [0x4ca4f8], ebx
sete al
cmp eax, ebx
mov dword [0x4ca4f8], eax
jne 0x41aa88
push 1
mov ecx, esi
call fcn.00422c43
push 5
push ebx
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call edi
cmp dword [0x4ca4f8], ebx
je 0x41aa8d
call fcn.0041692a
push 0x3f2
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x4ca4f8]
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
push eax
call edi
push 0x3f1
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x4ca4f8]
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
push eax
call edi
push 0x3f1
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x45a034]
push ebx
imul ecx, ecx, 0x3e8
push ecx
push 0x402
push eax
jmp 0x41acd5
cmp eax, 0xcd91
jne 0x41ab0e
xor eax, eax
cmp dword [0x4ca514], ebx
sete al
mov dword [0x4ca514], eax
jmp 0x41a60c
cmp eax, 0x80c6
jne 0x41ab2a
xor eax, eax
cmp dword [0x4ca510], ebx
sete al
mov dword [0x4ca510], eax
jmp 0x41a60c
cmp eax, 0x80d5
jne 0x41ab5f
xor eax, eax
cmp dword [0x4ca518], ebx
sete al
cmp eax, ebx
mov dword [0x4ca518], eax
jne 0x41a60c
push 5
push ebx
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call edi
jmp 0x41a60c
cmp eax, 0x80c9
jne 0x41ab7b
xor eax, eax
cmp dword [0x4ca50c], ebx
sete al
mov dword [0x4ca50c], eax
jmp 0x41a60c
cmp eax, 0x80c7
jne 0x41ab91
mov dword [0x45a030], 1
jmp 0x41b800
cmp eax, 0x80cb
jl 0x41ac2c
cmp eax, 0x80d4
jg 0x41ac2c
add eax, 0xffff7f36
push 1
cmp eax, 0xa
pop ecx
jne 0x41abb7
push 0x3c
pop ecx
cmp eax, 9
jne 0x41abbf
push 0x1e
pop ecx
cmp eax, 8
jne 0x41abc7
push 0x14
pop ecx
cmp eax, 7
jne 0x41abcf
push 0xf
pop ecx
cmp eax, 6
jne 0x41abd7
push 0xa
pop ecx
cmp eax, 5
jne 0x41abde
push eax
pop ecx
cmp eax, 4
jne 0x41abe5
push eax
pop ecx
cmp eax, 3
jne 0x41abec
push eax
pop ecx
cmp eax, 2
jne 0x41abf3
push eax
pop ecx
cmp eax, 1
jne 0x41abfa
push eax
pop ecx
push 0x3f1
mov dword [0x45a034], ecx
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x45a034]
imul ecx, ecx, 0x3e8
movzx ecx, cx
shl ecx, 0x10
push ecx
push ebx
push 0x401
jmp 0x41aaec
cmp eax, 0xa7db
jl 0x41ace0
cmp eax, 0xa7e4
jg 0x41ace0
add eax, 0xffff5826
push 1
cmp eax, 0xa
pop ecx
jne 0x41ac52
push 0x3c
pop ecx
cmp eax, 9
jne 0x41ac5a
push 0x1e
pop ecx
cmp eax, 8
jne 0x41ac62
push 0x14
pop ecx
cmp eax, 7
jne 0x41ac6a
push 0xf
pop ecx
cmp eax, 6
jne 0x41ac72
push 0xa
pop ecx
cmp eax, 5
jne 0x41ac79
push eax
pop ecx
cmp eax, 4
jne 0x41ac80
push eax
pop ecx
cmp eax, 3
jne 0x41ac87
push eax
pop ecx
cmp eax, 2
jne 0x41ac8e
push eax
pop ecx
cmp eax, 1
jne 0x41ac95
push eax
pop ecx
push 0x3f3
mov dword [0x45a038], ecx
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, eax
mov eax, dword [0x45a038]
imul eax, eax, 0x3e8
mov dword [ebp + 0x10], eax
fild dword [ebp + 0x10]
fmul qword [0x453c68]
call fcn.00442b7c
movzx eax, ax
shl eax, 0x10
push eax
push ebx
push 0x401
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x41a60c
cmp eax, 0xd7a1
jl 0x41ad52
cmp eax, 0xd7ae
jg 0x41ad52
add eax, 0xffff2860
push 1
cmp eax, 0xe
pop ecx
jne 0x41ad00
mov ecx, 0x258
cmp eax, 0xd
jne 0x41ad0a
mov ecx, 0x12c
cmp eax, 0xc
jne 0x41ad12
push 0x78
pop ecx
cmp eax, 0xb
jne 0x41ad1a
push 0x5a
pop ecx
cmp eax, 0xa
jne 0x41ad22
push 0x3c
pop ecx
cmp eax, 9
jne 0x41ad2a
push 0x1e
pop ecx
cmp eax, 8
jne 0x41ad32
push 0x14
pop ecx
cmp eax, 7
jne 0x41ad3a
push 0xf
pop ecx
cmp eax, 6
jne 0x41ad42
push 0xa
pop ecx
mov dword [0x4c9e30], ecx
mov ecx, 0x4c9e30
jmp 0x41a8da
cmp eax, 0x9c5f
jne 0x41ad64
mov dword [0x4ca4d0], ebx
jmp 0x41a60c
cmp eax, 0x9c5e
jne 0x41ad7a
mov dword [0x4ca4d0], 1
jmp 0x41a60c
cmp eax, 0x9c5d
jne 0x41ad96
xor eax, eax
cmp dword [0x4ca4cc], ebx
sete al
mov dword [0x4ca4cc], eax
jmp 0x41a60c
cmp eax, 0x80e4
jne 0x41adb2
xor eax, eax
cmp dword [0x4ca474], ebx
sete al
mov dword [0x4ca474], eax
jmp 0x41a60c
cmp eax, 0x80e5
jne 0x41adce
xor eax, eax
cmp dword [0x4c9e9c], ebx
sete al
mov dword [0x4c9e9c], eax
jmp 0x41a60c
cmp eax, 0xd6d8
jl 0x41ae5d
cmp eax, 0xd7a0
jg 0x41ae5d
cmp eax, 0xd73c
jne 0x41adf6
push 1
pop ebx
push ebx
call fcn.0042b916
pop ecx
jmp 0x41b4be
cmp eax, 0xd73d
jne 0x41ae1c
call fcn.0042bf34
mov ecx, dword [0x4ca550]
push 1
pop ebx
push ebx
push dword [0x45a060]
call fcn.0041eb26
jmp 0x41b4be
mov eax, dword [ebp + 0xc]
lea edi, [eax - 0xd6d8]
mov eax, edi
push eax
push ecx
mov ecx, esp
push 0x45af30
mov dword [0x45a060], eax
call fcn.004070c2
push ecx
mov ecx, esp
push 0x4ca404
call fcn.004017bc
call fcn.00413dc6
add esp, 0xc
mov ecx, esi
push ebx
push edi
call fcn.0041eb26
jmp 0x41b800
cmp eax, 0x809b
jne 0x41af13
xor eax, eax
cmp dword [0x4ca544], ebx
sete al
cmp eax, ebx
mov dword [0x4ca544], eax
je 0x41a60c
push 1
mov ecx, 0x4c9950
pop edi
push 0x4a15c4
mov dword [esi + 0x548], edi
call fcn.004019af
mov ecx, esi
call fcn.00413f9e
mov eax, dword [0x4581d0]
push 0x80
lea ecx, [ebp - 4]
mov dword [ebp - 4], eax
call fcn.00407192
push ebx
push dword [ebp - 4]
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call fcn.0043fdac
add esp, 0xc
lea ecx, [ebp + 0x10]
push 0x45af44
call fcn.004070c2
lea eax, [ebp + 0x10]
lea ecx, [esi + 0xae4]
push eax
call fcn.00426411
cmp eax, 0xffffffff
jne 0x41aefe
push eax
push edi
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
push eax
call fcn.004017bc
mov ecx, esi
call fcn.0041cc63
lea ecx, [ebp + 0x10]
call fcn.00401802
lea ecx, [ebp - 4]
call fcn.00401802
jmp 0x41b800
cmp eax, 0xcd88
jne 0x41af3e
lea eax, [ebp + 0x10]
push 0x26
push eax
call fcn.0042b86c
mov eax, dword [eax]
pop ecx
pop ecx
push ebx
push 0x4a16d4
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp + 0x10]
jmp 0x41af09
cmp eax, 0x80a7
jne 0x41af51
mov ecx, esi
call fcn.00420636
jmp 0x41b800
cmp eax, 0x1b74
jne 0x41af65
push ebx
mov ecx, esi
call fcn.0042059b
jmp 0x41b800
cmp eax, 0x1b75
jne 0x41af70
push 1
jmp 0x41af59
cmp eax, 0x80ec
jne 0x41af83
mov ecx, esi
call fcn.0041326c
jmp 0x41b800
cmp eax, 0x8091
jne 0x41b010
xor eax, eax
cmp dword [0x4ca538], ebx
mov ecx, esi
sete al
mov dword [0x4ca538], eax
call fcn.00413f9e
cmp dword [0x4ca538], ebx
je 0x41aff1
mov edi, 0x3e8
push edi
push dword [esi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
lea eax, [esi + 0xa7c]
push eax
call fcn.0044300d
pop ecx
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, esp
push str.Auto_Save
call fcn.004070c2
mov ecx, esi
call fcn.0041cc63
push ebx
push edi
push edi
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x41b800
push 0x3f0
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push str....
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
jmp 0x41b800
cmp eax, 0xe146
jne 0x41b023
mov ecx, esi
call fcn.00425aa1
jmp 0x41b4be
cmp eax, 0xd3c4
jne 0x41b1ec
push str.mailto:support2008_softwareok.com
lea ecx, [ebp + 0x10]
call fcn.0040182e
mov edi, 0x4ca400
lea ecx, [ebp - 8]
push edi
push str._subjectBug_Report
call fcn.0040182e
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004019f3
mov eax, dword [eax]
lea ecx, [ebp + 0x10]
push eax
push dword [eax - 8]
call fcn.00401ae1
lea ecx, [ebp - 0x14]
call fcn.00401802
lea ecx, [ebp - 8]
call fcn.00401802
push edi
push str.toSupport
lea ecx, [ebp - 8]
call fcn.0040182e
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004019f3
mov eax, dword [eax]
lea ecx, [ebp + 0x10]
push eax
push dword [eax - 8]
call fcn.00401ae1
lea ecx, [ebp - 0x14]
call fcn.00401802
lea ecx, [ebp - 8]
call fcn.00401802
lea eax, [ebp - 4]
mov ecx, esi
push eax
call fcn.0041bc8e
push 0x45b530
push 0x458940
lea ecx, [ebp - 4]
call fcn.00401c3b
push str._0D_0A
push 0x459918
lea ecx, [ebp - 4]
call fcn.00401c3b
push str._0D_0A_0D_0A_0D_0A
lea ecx, [ebp - 8]
call fcn.0040182e
lea eax, [ebp - 4]
lea ecx, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
push edi
push str.BodyBug_Report
call fcn.0040182e
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004019f3
mov eax, dword [eax]
lea ecx, [ebp + 0x10]
push eax
push dword [eax - 8]
call fcn.00401ae1
lea ecx, [ebp - 0x14]
call fcn.00401802
lea ecx, [ebp - 0x18]
call fcn.00401802
lea ecx, [ebp - 0x24]
call fcn.00401802
lea ecx, [ebp - 0x20]
call fcn.00401802
lea ecx, [ebp - 8]
call fcn.00401802
push str._0D_0A_0D_0A_0D_0A
lea ecx, [ebp - 8]
call fcn.0040182e
lea eax, [ebp - 4]
lea ecx, [ebp - 0x14]
push eax
lea eax, [ebp - 8]
push eax
push edi
push str.BodyBug_Report
call fcn.0040182e
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004019f3
mov eax, dword [eax]
lea ecx, [ebp + 0x10]
push eax
push dword [eax - 8]
call fcn.00401ae1
lea ecx, [ebp - 0x20]
call fcn.00401802
lea ecx, [ebp - 0x24]
call fcn.00401802
lea ecx, [ebp - 0x18]
call fcn.00401802
lea ecx, [ebp - 0x14]
call fcn.00401802
lea ecx, [ebp - 8]
call fcn.00401802
push 5
push ebx
push ebx
push dword [ebp + 0x10]
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 4]
call fcn.00401802
lea ecx, [ebp + 0x10]
jmp 0x41af09
cmp eax, 0x8032
jne 0x41b231
lea eax, [ebp - 0x258]
push 0x104
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x258]
lea ecx, [ebp + 0x10]
push eax
call fcn.004070c2
lea eax, [ebp + 0x10]
push 0x4a3fd4
push eax
lea ecx, [ebp - 0x10]
push dword [esi + 4]
call fcn.0041b9be
lea ecx, [ebp + 0x10]
jmp 0x41af09
cmp eax, 0x8031
jne 0x41b47f
push 0x4a3fd8
lea ecx, [ebp + 0x10]
call fcn.004017bc
push dword [0x4ca404]
lea ecx, [ebp + 0x10]
push str.AP
call fcn.00401c3b
push 0x4a15c4
lea ecx, [ebp - 8]
call fcn.0040182e
lea eax, [ebp - 8]
lea ecx, [ebp - 0x10]
push eax
call fcn.004017bc
push eax
push 0x4ca404
push str._siteFreeware_
lea ecx, [ebp - 0x1c]
call fcn.004070c2
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0043581e
pop ecx
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004019f3
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004019f3
push dword [eax]
lea ecx, [ebp + 0x10]
push str.IN
call fcn.00401c3b
lea ecx, [ebp - 0x20]
call fcn.00401802
lea ecx, [ebp - 0x24]
call fcn.00401802
lea ecx, [ebp - 0x18]
call fcn.00401802
lea ecx, [ebp - 0x14]
call fcn.00401802
lea ecx, [ebp - 0x1c]
call fcn.00401802
lea ecx, [ebp - 0x10]
call fcn.00401802
lea eax, [ebp - 0x10]
push eax
call fcn.0043581e
pop ecx
push dword [eax]
lea ecx, [ebp + 0x10]
push str.DL
call fcn.00401c3b
lea ecx, [ebp - 0x10]
call fcn.00401802
mov edi, 0x45b4ac
lea ecx, [ebp - 0x10]
push edi
call fcn.0040182e
mov ecx, eax
call fcn.0040ba52
push eax
push 0x45b4a4
lea ecx, [ebp + 0x10]
call fcn.00401c3b
lea ecx, [ebp - 0x10]
call fcn.00401802
push edi
lea ecx, [ebp - 0x10]
call fcn.0040182e
mov ecx, eax
call fcn.0040ba52
push eax
push 0x459918
lea ecx, [ebp + 0x10]
call fcn.00401c3b
lea ecx, [ebp - 0x10]
call fcn.00401802
push edi
lea ecx, [ebp - 0x10]
call fcn.0040182e
mov ecx, eax
call fcn.0040ba52
push eax
push str._r_n
lea ecx, [ebp + 0x10]
call fcn.00401c3b
lea ecx, [ebp - 0x10]
call fcn.00401802
push edi
lea ecx, [ebp - 0x10]
call fcn.0040182e
mov ecx, eax
call fcn.0040ba52
push eax
push 0x45b48c
lea ecx, [ebp + 0x10]
call fcn.00401c3b
lea ecx, [ebp - 0x10]
call fcn.00401802
push 0x45b488
lea ecx, [ebp - 0x10]
call fcn.0040182e
mov ecx, eax
call fcn.0040ba52
push eax
push 0x458940
lea ecx, [ebp + 0x10]
call fcn.00401c3b
lea ecx, [ebp - 0x10]
call fcn.00401802
push str.mailto:
lea ecx, [ebp - 4]
call fcn.0040182e
push 0x4a3fd4
push str._subject
lea ecx, [ebp - 0x1c]
call fcn.0040182e
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004019f3
push eax
lea ecx, [ebp - 4]
call fcn.00401b5d
lea ecx, [ebp - 0x10]
call fcn.00401802
lea ecx, [ebp - 0x1c]
call fcn.00401802
lea eax, [ebp + 0x10]
lea ecx, [ebp - 0x1c]
push eax
push str.Body
call fcn.0040182e
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004019f3
push eax
lea ecx, [ebp - 4]
call fcn.00401b5d
lea ecx, [ebp - 0x10]
call fcn.00401802
lea ecx, [ebp - 0x1c]
call fcn.00401802
push 5
push ebx
push ebx
lea ecx, [ebp - 4]
call fcn.0040ba52
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 4]
call fcn.00401802
lea ecx, [ebp - 8]
call fcn.00401802
lea ecx, [ebp + 0x10]
jmp 0x41af09
cmp eax, 0xe10b
jne 0x41b492
mov ecx, esi
call fcn.00424910
jmp 0x41b800
cmp eax, 0x8599
jne 0x41b4d5
mov eax, dword [ebp + 0x14]
push 1
pop edi
mov dword [eax], edi
push dword [0x4ca54c]
push ebx
push ecx
mov ecx, esp
push 0x4a15c4
call fcn.0040182e
mov ecx, esi
call fcn.0041cc63
mov ebx, edi
lea ecx, [ebp - 0x28]
call fcn.00401802
lea ecx, [ebp - 0xc]
call fcn.00401802
mov eax, ebx
jmp 0x41b939
cmp eax, 0x8088
jne 0x41b52a
lea edi, [esi + 0xa90]
mov ecx, edi
call fcn.0042614e
test eax, eax
je 0x41b800
mov ecx, edi
call fcn.004261bb
cmp eax, 0xffffffff
mov dword [ebp + 0x10], eax
jne 0x41b503
mov dword [ebp + 0x10], ebx
push ebx
mov ecx, edi
push dword [ebp + 0x10]
call fcn.0042624a
push ebx
mov ecx, edi
push dword [ebp + 0x10]
push 0x1076
call fcn.0040ba52
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x41b800
cmp eax, 0x8089
jne 0x41b58a
lea edi, [esi + 0x548]
xor eax, eax
lea ecx, [ebp + 0x10]
cmp dword [edi], ebx
sete al
mov dword [edi], eax
call fcn.0041b9a5
push 0x80
lea ecx, [ebp + 0x10]
call fcn.00407192
cmp dword [edi], ebx
push ebx
lea ecx, [ebp + 0x10]
je 0x41b575
call fcn.0040ba52
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call fcn.0043fdac
add esp, 0xc
jmp 0x41b582
call fcn.0040ba52
push eax
call fcn.0043feb0
pop ecx
pop ecx
lea ecx, [ebp + 0x10]
jmp 0x41af09
cmp eax, 0x80d6
je 0x41b800
mov eax, dword [ebp + 0xc]
cmp eax, 0x1771
jne 0x41b5a9
call fcn.0041f555
jmp 0x41b800
cmp eax, 0xe120
jne 0x41b5c5
mov eax, dword [ebp + 0x14]
mov ecx, esi
mov dword [eax], 1
call fcn.0041c1a3
jmp 0x41b800
cmp eax, 0xcd86
je 0x41b7f0
cmp eax, 0xcd87
je 0x41b7f0
cmp eax, 0x809e
jne 0x41b5fc
mov eax, dword [ebp + 0x14]
push 1
pop edi
mov ecx, esi
mov dword [eax], edi
call fcn.0041f74d
mov dword [0x4ca4f4], edi
jmp 0x41b800
cmp eax, 0xe102
jne 0x41b614
mov eax, dword [ebp + 0x14]
push 1
pop edi
mov ecx, esi
mov dword [eax], edi
call fcn.0041be66
jmp 0x41b5f1
cmp eax, 0x800e
jne 0x41b6a5
mov eax, dword [ebp + 0x14]
push 8
mov dword [eax], 1
push dword [esi + 4]
call edi
test eax, eax
jne 0x41b648
push 5
push dword [esi + 4]
call edi
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x41b800
cmp dword [0x4ca4d4], ebx
jne 0x41b698
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebx
push 0x32
call edi
push eax
push 0x31
call edi
push eax
mov edi, 0x80
push 1
push edi
mov ecx, 0x4a1700
call fcn.0041b98c
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
push 1
push ebx
push ecx
mov dword [ebp + 0x10], eax
mov ecx, esp
push edi
call fcn.0040182e
push dword [ebp + 0x10]
lea ecx, [esi + 0xa48]
push edi
call fcn.00436f5d
push dword [esi + 4]
call fcn.00436eab
jmp 0x41a7ed
cmp eax, 0xe132
jne 0x41b6d7
lea edi, [esi + 4]
push ebx
mov ecx, edi
call fcn.0041b990
push ebx
push ebx
push ebx
push 2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CascadeWindows]
push 1
mov ecx, edi
call fcn.0041b990
jmp 0x41b800
cmp eax, 0xe133
jne 0x41b6f0
lea edi, [esi + 4]
push ebx
mov ecx, edi
call fcn.0041b990
push ebx
push ebx
push ebx
push 3
jmp 0x41b707
cmp eax, 0xe134
jne 0x41b716
lea edi, [esi + 4]
push ebx
mov ecx, edi
call fcn.0041b990
push ebx
push ebx
push ebx
push 2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TileWindows]
jmp 0x41b6c9
cmp eax, 0x808f
jne 0x41b731
lea eax, [esi + 0x54c]
xor ecx, ecx
cmp dword [eax], ebx
sete cl
mov dword [eax], ecx
jmp 0x41a60c
cmp eax, 0x80ab
jne 0x41b757
lea ecx, [ebp + 0x10]
call fcn.0042ce63
push 1
lea ecx, [ebp + 0x10]
call fcn.0042cf00
lea ecx, [ebp + 0x10]
call fcn.0042ced9
jmp 0x41b800
cmp eax, 0x80aa
jne 0x41b774
lea ecx, [ebp + 0x10]
call fcn.0042ce63
push ebx
lea ecx, [ebp + 0x10]
call fcn.0042cf00
lea ecx, [ebp + 0x10]
jmp 0x41b74d
cmp eax, 0x80f4
jne 0x41b795
call fcn.00421022
movzx eax, al
xor ecx, ecx
cmp eax, ebx
sete cl
push ecx
call fcn.004210c5
jmp 0x41a7ed
cmp eax, 0x80f5
jne 0x41b7b3
call fcn.0041740c
test al, al
jne 0x41b7ac
call fcn.004174f0
jmp 0x41b800
call fcn.004175fa
jmp 0x41b800
cmp eax, 0xe131
jne 0x41b7cc
push ebx
push ebx
push 0x228
call dword [sym.imp.USER32.dll_GetDesktopWindow]
jmp 0x41b51e
cmp eax, 0x809d
jne 0x41b7dd
push ebx
mov ecx, esi
call fcn.0041f33d
jmp 0x41b800
mov ecx, 0x8029
cmp eax, ecx
jne 0x41b800
push ecx
mov ecx, esi
call fcn.00419a51
jmp 0x41b800
mov eax, dword [ebp + 0x14]
mov ecx, esi
mov dword [eax], 1
call fcn.0041c0f3
lea ecx, [ebp - 0xc]
call fcn.0041b99f
cmp eax, 3
jle 0x41b85b
mov ecx, dword [ebp + 0x14]
push 1
pop eax
mov dword [ecx], eax
push eax
push ebx
lea eax, [ebp - 0xc]
push ebx
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.0043581e
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004019f3
mov ecx, eax
call fcn.0040ba52
push eax
push str.open
push dword [esi + 4]
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp + 0xc]
call fcn.00401802
lea ecx, [ebp + 0x14]
call fcn.00401802
jmp 0x41b926
mov eax, dword [ebp + 0xc]
cmp eax, 0xc350
jl 0x41b879
cmp eax, 0xc3b4
jg 0x41b879
push eax
mov ecx, esi
call fcn.0042084a
jmp 0x41b926
cmp eax, 0x84d0
jl 0x41b899
cmp eax, 0x8598
jg 0x41b899
add eax, 0xffff7b30
mov ecx, esi
push eax
call fcn.0041be29
jmp 0x41b926
cmp eax, 0xd3ce
jne 0x41b8ad
push ebx
mov ecx, 0x4c9e28
call fcn.00412a34
jmp 0x41b926
cmp eax, 0xd3d1
jne 0x41b8c0
mov ecx, 0x4c9e20
call fcn.0041b9b0
jmp 0x41b926
cmp eax, 0xd3cf
jne 0x41b8cb
push 1
jmp 0x41b8a1
cmp eax, 0xd3d0
jne 0x41b8d6
push 2
jmp 0x41b8a1
cmp eax, 0xcd89
jne 0x41b8ef
xor eax, eax
cmp dword [0x4ca478], ebx
sete al
mov dword [0x4ca478], eax
jmp 0x41b91f
cmp eax, 0xd17d
jne 0x41b908
xor eax, eax
cmp dword [0x4ca47c], ebx
sete al
mov dword [0x4ca47c], eax
jmp 0x41b91f
cmp eax, 0xcd8a
jne 0x41b926
xor eax, eax
cmp dword [0x4ca480], ebx
sete al
mov dword [0x4ca480], eax
mov ecx, esi
call fcn.00413f9e
lea ecx, [ebp - 0x28]
call fcn.00401802
lea ecx, [ebp - 0xc]
call fcn.00401802
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret 0x10