Function at 0x44c36c
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46ec68
push 0x461614
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ecx
mov eax, 0x27e0
call fcn.00461410
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov esi, dword [ebp + 0xc]
mov eax, 0x87d0
cmp esi, eax
jl 0x44c51c
cmp esi, dword [0x480a2c]
jge 0x44c51c
and dword [ebp - 0x28], 0
sub esi, eax
mov dword [ebp + 0xc], esi
push 0x469c3c
push 0x475628
call dword [sym.imp.NSCRT.dll_fopen]
pop ecx
pop ecx
mov edi, eax
test edi, edi
je 0x44d505
push edi
push 0x104
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.NSCRT.dll_fgets]
add esp, 0xc
test byte [edi + 0xc], 0x10
jne 0x44c50f
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push edi
push 0x1000
lea eax, [ebp - 0x1bc8]
push eax
call dword [sym.imp.NSCRT.dll_fgets]
add esp, 0xc
test byte [edi + 0xc], 0x10
jne 0x44c50f
cmp byte [ebp - 0x1bc8], 0
je 0x44c497
cmp byte [ebp - 0x220], 0
je 0x44c497
lea ebx, [ebp - 0x220]
dec ebx
lea eax, [ebp - 0x220]
push eax
call esi
cmp byte [eax + ebx], 0xa
jne 0x44c457
lea eax, [ebp - 0x220]
push eax
call esi
mov byte [eax + ebx], 0
lea ebx, [ebp - 0x1bc8]
dec ebx
lea eax, [ebp - 0x1bc8]
push eax
call esi
cmp byte [eax + ebx], 0xa
jne 0x44c47a
lea eax, [ebp - 0x1bc8]
push eax
call esi
mov byte [eax + ebx], 0
cmp byte [ebp - 0x1bc8], 0
je 0x44c497
cmp byte [ebp - 0x220], 0
je 0x44c497
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x28]
cmp eax, dword [ebp + 0xc]
je 0x44c4b9
push edi
push 0x104
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.NSCRT.dll_fgets]
add esp, 0xc
test byte [edi + 0xc], 0x10
je 0x44c402
jmp 0x44c50f
call fcn.004300b7
lea eax, [ebp - 0x220]
push eax
lea esi, [ebp - 0x27f8]
call fcn.004060e3
push 0
call fcn.004308c3
pop ecx
cmp byte [0x475838], 0
je 0x44c4ee
push 0xc4653600
call fcn.004313bf
pop ecx
jmp 0x44c4f5
xor eax, eax
call fcn.00430ebe
push 0x480520
mov ebx, 0x480d60
call fcn.00430d20
pop ecx
call fcn.004322a5
call fcn.00415552
push edi
call dword [sym.imp.NSCRT.dll_fclose]
pop ecx
jmp 0x44d505
cmp esi, 0x7fff
jl 0x44c63d
cmp esi, dword [0x481588]
jge 0x44c63d
xor ebx, ebx
mov byte [ebp - 0x524], bl
cmp esi, 0x8000
jl 0x44c5bd
mov dword [ebp - 0x88], 0x2c
mov dword [ebp - 0x84], 0x30
mov dword [ebp - 0x80], ebx
push 8
pop ecx
xor eax, eax
lea edi, [ebp - 0x7c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x524]
mov dword [ebp - 0x64], eax
mov edi, 0x200
mov dword [ebp - 0x60], edi
lea eax, [ebp - 0x88]
push eax
push ebx
push esi
push dword [0x480a20]
call dword [sym.imp.USER32.dll_GetMenuItemInfoA]
cmp dword [ebp - 0x68], 1
jne 0x44c598
push str..zip
jmp 0x44c5b0
cmp dword [ebp - 0x68], 2
jne 0x44c5a5
push str..wsz
jmp 0x44c5b0
cmp dword [ebp - 0x68], 4
jne 0x44c5bd
push str..wal
lea eax, [ebp - 0x524]
push edi
push eax
call fcn.0040380b
lea eax, [ebp - 0x524]
push eax
mov esi, 0x476ad0
push esi
call dword [sym.imp.NSCRT.dll__stricmp]
pop ecx
pop ecx
test eax, eax
je 0x44d505
lea eax, [ebp - 0x524]
push eax
push 0x104
push esi
call fcn.004025ff
push ebx
push 0x9d63
push 0x111
push dword [0x47b6c8]
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x28
pop esi
cmp dword [0x478ba8], esi
jne 0x44d505
cmp dword [0x47b678], ebx
je 0x44d505
mov dword [0x478ba8], ebx
push 1
call fcn.0043587c
mov dword [0x478ba8], esi
push 1
call fcn.0043587c
jmp 0x44d4ad
cmp esi, 0xafc8
jl 0x44c6b3
cmp esi, 0xd6d8
jge 0x44c6b3
xor edi, edi
push edi
push edi
call fcn.0044b937
pop ecx
pop ecx
mov ebx, eax
cmp ebx, edi
je 0x44d505
cmp dword [0x47b718], edi
jne 0x44d505
push ebx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x44c690
push edi
push 0x9dbb
push 0x111
push dword [0x47b6c8]
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x47b718], edi
jne 0x44d505
push 0x105
add esi, 0xffff5038
push esi
push 0x1400
push ebx
jmp 0x44d4ff
lea eax, [esi - 0x9c41]
cmp eax, 0x1c2
ja case.0x44c6c7.40002
movzx eax, byte [eax + 0x44d6a8]
jmp dword [eax*4 + 0x44d554]
push str.http:__winamp.com_support_help_50_
jmp 0x44d21f
mov eax, dword [0x47b6cc]
test eax, eax
je case.0x44c6c7.40002
push 0
mov ecx, dword [ebp + 0x14]
shl ecx, 0x10
or ecx, esi
push ecx
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret
push 0
push esi
push 0x111
push dword [0x480950]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x44c6fa
and dword [0x47b718], 0
jmp case.0x44c6c7.40002
lea esi, [esi + 0x47193d]
xor ebx, ebx
cmp byte [esi], bl
je 0x44d505
push ebx
call fcn.00415714
movsx eax, byte [esi]
push eax
push str.cda:___c
push 0x20
pop eax
lea edi, [ebp - 0x11c]
call fcn.00403796
call fcn.004300b7
push ebx
mov eax, edi
call fcn.004308c3
add esp, 0x10
call fcn.00415845
call fcn.004322a5
jmp 0x44d505
mov eax, dword [0x47b6d0]
test eax, eax
jne 0x44c782
mov eax, dword [0x47b6c8]
push eax
call fcn.004323fe
pop ecx
test eax, eax
je case.0x44c6c7.40002
jmp 0x44d505
mov eax, dword [0x47b6d0]
test eax, eax
jne 0x44c7a4
mov eax, dword [0x47b6c8]
push eax
call fcn.0045599f
jmp 0x44c516
push 0
push 0x469db8
push str.You_must_have_the_Winamp_Library_installed_to_edit_your_bookmarks
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44d505
lea eax, [ebp - 0x7b8]
push eax
lea eax, [ebp - 0x1fd8]
push eax
call fcn.00430f1d
call fcn.0042fecb
lea eax, [ebp - 0x7b8]
push eax
lea eax, [ebp - 0x1fd8]
push eax
call fcn.004571d2
add esp, 0x10
jmp 0x44d505
call fcn.00401132
jmp 0x44d505
mov word [ebp - 0x324], 0x22
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x322]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0xdc], 0x44
push 0x10
pop ecx
xor eax, eax
lea edi, [ebp - 0xd8]
rep stosd dword es:[edi], eax
push 0x103
lea eax, [ebp - 0x323]
push eax
xor esi, esi
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push str.___NEW
push 0x104
lea eax, [ebp - 0x324]
push eax
call fcn.0040380b
push 1
call fcn.004039c9
pop ecx
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xdc]
push eax
push esi
push esi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x324]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
jmp 0x44d505
xor edi, edi
inc edi
mov dword [0x4779a8], edi
xor esi, esi
push esi
push esi
push 0x7e
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [0x4779a8], esi
cmp dword [0x472d0c], esi
je 0x44c8c3
push esi
push esi
push dword [0x480840]
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp dword [0x472cfc], esi
je 0x44c8d9
push esi
push esi
push dword [0x480950]
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp dword [0x47b490], esi
je 0x44c8ef
push esi
push esi
push dword [0x481580]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, edi
jmp 0x44c6fa
mov dword [0x478ba8], 0x28
push 1
jmp 0x44cf2b
call fcn.00427aaf
test eax, eax
je 0x44c91a
call fcn.00427bfa
jmp 0x44d505
xor esi, esi
call fcn.00427ac3
jmp 0x44d505
mov dword [0x478ba8], 0x21
jmp 0x44c900
xor byte [0x472cea], 1
cmp byte [0x472cea], 1
jne 0x44c959
push 0
push 0xc8
push 0x27
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x44d505
xor ebx, ebx
cmp byte [0x472cea], bl
jne 0x44d505
push 0x27
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [0x47b55c], ebx
cmp dword [0x47b6e0], ebx
je 0x44c987
call fcn.00426417
jmp 0x44c98c
call fcn.0042f83b
mov ecx, 0x480520
push eax
push 0x47b55c
call fcn.0044668b
jmp 0x44d4ad
cmp word [0x480d60], 0
je 0x44d505
mov eax, dword [0x47b6d0]
test eax, eax
jne 0x44c9bd
mov eax, dword [0x47b6c8]
push eax
mov edi, 0x480d60
call fcn.0042659f
jmp 0x44c516
mov eax, dword [0x472d14]
push 0xe
pop ecx
cmp eax, ecx
jne 0x44c9f7
mov eax, dword [0x4763a4]
cmp eax, 0x74
jge 0x44c9e6
push 0x74
pop eax
mov dword [0x472d14], eax
and dword [0x4763a4], 0
jmp 0x44cf57
mov dword [0x4763a4], eax
mov dword [0x472d14], ecx
jmp 0x44cf57
cmp byte [0x475e69], 0
sete al
mov byte [0x475e69], al
push 1
call fcn.0040e9d9
pop ecx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x480950]
jne 0x44ca31
xor eax, eax
inc eax
jmp 0x44ca3c
xor eax, eax
cmp byte [0x472cda], al
sete al
call fcn.00444dc4
jmp 0x44d505
cmp byte [0x475f77], 0
sete al
mov byte [0x475f77], al
push 1
call fcn.0040e9d9
push dword [0x47b6e4]
movzx eax, byte [0x475f77]
push eax
xor eax, eax
inc eax
call fcn.0044578b
add esp, 0xc
push 0
push 0x2a
push 0x113
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
movzx eax, byte [0x472ceb]
call fcn.0042d50f
jmp 0x44d505
xor eax, eax
xor esi, esi
cmp dword [0x472d00], esi
sete al
mov dword [0x472d00], eax
cmp eax, esi
je 0x44cafd
cmp dword [0x472d0c], esi
je 0x44cb0b
mov edx, dword [0x472d10]
cmp edx, 0x15e
jl 0x44cb0b
mov ecx, dword [0x472d14]
cmp ecx, 0xe
je 0x44cb0b
lea eax, [edx - 0xe1]
mov dword [ebp - 0x3c], eax
add ecx, 0xffffffe6
mov dword [ebp - 0x38], ecx
add eax, 0x4d
mov dword [ebp - 0x34], eax
add ecx, 0x10
mov dword [ebp - 0x30], ecx
push esi
lea eax, [ebp - 0x3c]
push eax
push dword [0x480840]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x44cb06
push dword [ebp + 8]
call fcn.0044ab90
pop ecx
mov eax, dword [0x472d00]
neg eax
sbb eax, eax
and eax, 8
push eax
push 0x9d42
push dword [0x480a20]
call dword [sym.imp.USER32.dll_CheckMenuItem]
push esi
call fcn.0040e9d9
push 4
mov eax, dword [0x472d00]
call fcn.0044bac8
pop ecx
pop ecx
push 0x476ce4
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [0x476ce0]
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0
jne 0x44cb61
mov esi, dword [0x47b6c8]
mov eax, dword [0x472d00]
jmp 0x44cbcb
cmp dword [ebp - 0x1c], 1
jne 0x44cb74
mov esi, dword [0x480950]
mov eax, dword [0x472cfc]
jmp 0x44cbcb
cmp dword [ebp - 0x1c], 2
jne 0x44cb87
mov esi, dword [0x480840]
mov eax, dword [0x472d0c]
jmp 0x44cbcb
cmp dword [ebp - 0x1c], 3
jne 0x44cb97
mov esi, dword [0x480a28]
xor eax, eax
jmp 0x44cbcb
cmp dword [ebp - 0x1c], 4
jne 0x44cbaa
mov esi, dword [0x481580]
mov eax, dword [0x47b490]
jmp 0x44cbcb
test edi, edi
jne 0x44cbc2
cmp ebx, 1
jne 0x44cc06
mov edi, dword [0x476ce0]
or dword [ebp - 0x1c], 0xffffffff
push 2
pop ebx
jmp 0x44cbf7
mov esi, dword [edi]
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test ebx, ebx
jne 0x44cbea
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, esi
je 0x44cbe5
push eax
push esi
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
je 0x44cbee
xor ebx, ebx
inc ebx
jmp 0x44cbee
test eax, eax
jne 0x44cbff
cmp dword [ebp - 0x1c], 4
jle 0x44cbf7
mov edi, dword [edi + 0x1c]
inc dword [ebp - 0x1c]
jmp 0x44cb4e
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0x476ce4
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x44d505
push dword [0x47b6c8]
call fcn.00409d25
jmp 0x44c516
push 0
push 0x756
jmp 0x44d4a8
cmp dword [0x47b6e0], 0
je 0x44d505
mov eax, dword [0x47b5fc]
test eax, eax
je 0x44d505
cmp dword [eax + 0x14], 0
je 0x44d505
push dword [0x47b6c8]
call fcn.00409cde
jmp 0x44c516
mov eax, dword [0x47b5fc]
xor edi, edi
cmp eax, edi
je 0x44d505
cmp dword [eax + 0x14], edi
je 0x44d505
call fcn.00430f1d
call fcn.0042f99b
test eax, eax
jne 0x44d505
cmp esi, 0x9c7c
setne al
dec eax
and eax, 0x2710
add eax, 0xffffec78
mov esi, eax
cmp dword [0x47b6e0], edi
je 0x44d505
call fcn.00426408
add eax, esi
jns 0x44ccbd
xor eax, eax
push eax
call fcn.004264fb
pop ecx
push edi
test eax, eax
jge 0x44ccd7
push edi
push 0x402
push dword [ebp + 8]
jmp 0x44d4ff
call fcn.00426408
cdq
mov ecx, 0x3e8
idiv ecx
call fcn.004134e4
jmp 0x44c516
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x20], 0xd
xor ebx, ebx
cmp byte [0x475f75], bl
je 0x44cd14
mov dword [ebp - 0x24], 0xc
mov dword [ebp - 0x20], 0x1a
lea eax, [ebp - 0x24]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ClientToScreen]
cmp dword [ebp - 0x20], 0xffff8ad0
jle 0x44cd3d
cmp dword [ebp - 0x20], 0xffff92a0
jge 0x44cd3d
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push ebx
push dword [ebp + 8]
push ebx
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push 2
push dword [0x480a20]
call dword [sym.imp.USER32.dll_TrackPopupMenu]
jmp 0x44d505
xor esi, esi
inc esi
xor ebx, ebx
cmp byte [0x475838], bl
jne 0x44cd89
or eax, 0xffffffff
call fcn.00430f3d
test eax, eax
jge 0x44cd89
xor esi, esi
cmp byte [0x475100], bl
je 0x44cd89
inc esi
mov eax, 0x3b9aca00
call fcn.00430f3d
cmp esi, ebx
je case.0x44c6c7.40002
call fcn.0042ffcf
test eax, eax
je case.0x44c6c7.40002
cmp byte [0x475838], bl
je 0x44cdb6
push 0xffffffffffffffff
call fcn.004313bf
pop ecx
test eax, eax
jne 0x44d505
push 0x480520
mov ebx, 0x480d60
call fcn.00430d20
pop ecx
xor eax, eax
push eax
cmp dword [0x47b6e0], eax
je 0x44cde1
call fcn.00415714
pop ecx
call fcn.00415552
jmp case.0x44c6c7.40002
call fcn.00415714
jmp 0x44d228
push esi
push dword [ebp + 8]
call fcn.0044bded
pop ecx
jmp 0x44d54d
push dword [ebp + 8]
mov edi, esi
call fcn.0044bf03
jmp 0x44d54d
call fcn.0044bf9f
jmp 0x44c6fa
push esi
call fcn.0044bfc1
jmp 0x44d54d
push esi
push dword [ebp + 8]
call fcn.0044c086
jmp 0x44cdf4
xor eax, eax
cmp dword [0x47b70c], eax
jne case.0x44c6c7.40002
push eax
push eax
push 0x10
jmp 0x44cccf
mov eax, dword [0x47b6d0]
test eax, eax
jne 0x44ce4c
mov eax, dword [ebp + 8]
push eax
push 1
call fcn.0040c79b
pop ecx
pop ecx
jmp 0x44c76a
mov eax, dword [0x47b6d0]
test eax, eax
jne 0x44ce67
mov eax, dword [ebp + 8]
push 0
push eax
push 1
call fcn.0040c494
add esp, 0xc
jmp 0x44c76a
mov eax, dword [0x47b6d0]
test eax, eax
jne 0x44ce85
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5c], eax
and dword [ebp - 0x58], 0
lea eax, [ebp - 0xbc8]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], str.__foo
xor esi, esi
inc esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], 0x44b8b2
and dword [ebp - 0x44], 0
lea eax, [ebp - 0x5c]
push eax
call dword [0x473f48]
mov edi, eax
test edi, edi
je 0x44cf22
lea eax, [ebp - 0x9c0]
push eax
push edi
call dword [0x473f50]
push edi
call fcn.0040fbe2
pop ecx
lea eax, [ebp - 0x9c0]
push eax
mov ecx, dword [0x47b744]
call fcn.00451a76
call fcn.004300b7
xor eax, eax
mov al, byte [0x4769c4]
shr eax, 1
not eax
and eax, esi
push eax
lea eax, [ebp - 0x9c0]
push eax
call fcn.004317a8
pop ecx
pop ecx
test byte [0x4769c4], 1
je 0x44cf18
push 2
xor eax, eax
call fcn.00431688
pop ecx
call fcn.00415845
call fcn.004322a5
mov eax, esi
jmp 0x44c6fa
push 0
call fcn.0043587c
jmp 0x44c516
cmp byte [0x476195], 0
sete al
mov byte [0x476195], al
push 0
jmp 0x44cf59
cmp byte [0x475f75], 0
sete al
mov byte [0x475f75], al
push 1
call fcn.0040e9d9
jmp 0x44c516
cmp byte [0x472ce9], 0
sete al
mov byte [0x472ce9], al
neg al
sbb eax, eax
and eax, 8
push eax
push 0x9cfa
push dword [0x480a20]
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x44d505
xor ebx, ebx
cmp byte [0x475838], bl
sete al
mov byte [0x475838], al
neg al
sbb eax, eax
and eax, 8
push eax
push 0x9c57
push dword [0x480a20]
call dword [sym.imp.USER32.dll_CheckMenuItem]
movzx ecx, byte [0x475838]
xor eax, eax
call fcn.00446930
cmp byte [0x475838], bl
je 0x44d505
call fcn.004311e8
cmp byte [0x475838], bl
je 0x44d505
cmp dword [0x47b6e0], ebx
jne 0x44d505
push 0xc4653600
call fcn.004313bf
mov esi, 0x480520
push esi
mov ebx, 0x480d60
call fcn.00430d20
pop ecx
pop ecx
cmp dword [0x47b6e0], 0
je 0x44d01c
call fcn.00426417
jmp 0x44d021
call fcn.0042f83b
mov ecx, esi
jmp 0x44c991
cmp byte [0x475100], 0
sete al
mov byte [0x475100], al
neg al
sbb eax, eax
and eax, 8
push eax
push 0x9c56
push dword [0x480a20]
call dword [sym.imp.USER32.dll_CheckMenuItem]
movzx ecx, byte [0x475100]
xor eax, eax
call fcn.0044699b
jmp 0x44d505
cmp byte [0x472cdc], 0
sete al
mov byte [0x472cdc], al
jmp 0x44d505
call fcn.0042a1b3
jmp 0x44d505
call fcn.004322dd
jmp 0x44d505
call fcn.004294d0
jmp 0x44d505
cmp dword [0x47b490], 0
je 0x44d0aa
push 1
call fcn.0041cef3
jmp 0x44c516
call fcn.0041ce8c
jmp 0x44d505
cmp byte [0x476194], 0
sete al
mov byte [0x476194], al
neg al
sbb eax, eax
and eax, 0xfffffff8
add eax, 8
push eax
push 0x9c65
push dword [0x480a20]
mov esi, dword [sym.imp.USER32.dll_CheckMenuItem]
call esi
mov al, byte [0x476194]
neg al
sbb eax, eax
and eax, 8
push eax
jmp 0x44d13c
xor ebx, ebx
mov byte [0x476194], bl
push 8
push 0x9c65
push dword [0x480a20]
mov esi, dword [sym.imp.USER32.dll_CheckMenuItem]
call esi
push ebx
push 0x9c66
push dword [0x480a20]
call esi
push ebx
jmp 0x44d14b
mov byte [0x476194], 1
push 0
push 0x9c65
push dword [0x480a20]
mov esi, dword [sym.imp.USER32.dll_CheckMenuItem]
call esi
push 8
push 0x9c66
push dword [0x480a20]
call esi
push 0
push 0x2a
push 0x113
jmp 0x44cccf
cmp byte [0x472ce8], 0xfb
ja 0x44d169
add byte [0x472ce8], 4
jmp 0x44d170
mov byte [0x472ce8], 0xff
movzx eax, byte [0x472ce8]
push eax
call fcn.0042643d
movzx eax, byte [0x472ce8]
push eax
xor eax, eax
call fcn.00446a06
jmp 0x44d4ad
cmp byte [0x472ce8], 3
jbe 0x44d1a3
add byte [0x472ce8], 0xfc
jmp 0x44d170
mov byte [0x472ce8], 0
jmp 0x44d170
mov edi, dword [0x47b6e0]
test edi, edi
je 0x44d1be
push 0
call fcn.00415714
pop ecx
push 0xa
pop esi
push 0
push 0x9c6c
push 0x111
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
dec esi
jne 0x44d1c1
test edi, edi
je 0x44d505
call fcn.00415552
jmp 0x44d505
mov edi, dword [0x47b6e0]
test edi, edi
je 0x44d1fd
push 0
call fcn.00415714
pop ecx
push 0xa
pop esi
push 0
push 0x9c70
push 0x111
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
dec esi
jne 0x44d200
jmp 0x44d1d9
push str.http:__www.winamp.com_skins_
push dword [ebp + 8]
call fcn.00453a9a
pop ecx
pop ecx
jmp case.0x44c6c7.40002
push 0x475948
push 0x475418
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineA]
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
mov dword [ebp - 0x2c], esi
test esi, esi
je 0x44d505
push str.winampVisGetHeader
push esi
call dword [0x473f00]
call eax
movsx ecx, byte [0x475c5c]
push ecx
call dword [eax + 8]
pop ecx
test eax, eax
je 0x44d2db
mov dword [eax + 8], esi
mov ecx, dword [0x47b6c8]
mov dword [eax + 4], ecx
test byte [0x475834], 1
jne 0x44d2d1
and dword [ebp - 4], 0
push eax
call dword [eax + 0x924]
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x44d2f8
push eax
call dword [eax + 0x924]
pop ecx
jmp 0x44d2f8
push 0
push 0x4695c4
push 0xb
xor eax, eax
xor ecx, ecx
call fcn.0040a416
pop ecx
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x44d505
push 0x10
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
and ax, 0x8000
neg ax
sbb eax, eax
neg eax
mov dword [0x477a50], eax
push 6
push dword [0x47b6c8]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x44d505
call fcn.0041db44
jmp 0x44d505
push 0
push 0
call fcn.0044b937
pop ecx
pop ecx
mov esi, eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edi, eax
test esi, esi
je 0x44d377
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x44d377
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x44d377
push esi
push edi
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
je 0x44d377
push esi
jmp 0x44d386
mov eax, dword [0x47b6d0]
test eax, eax
jne 0x44d385
mov eax, dword [0x47b6c8]
push eax
push 0x107
call fcn.0044b937
pop ecx
pop ecx
call fcn.0044c353
jmp 0x44d505
call fcn.0044c353
push 0
push 0
call fcn.0044b937
pop ecx
pop ecx
mov esi, eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edi, eax
test esi, esi
je 0x44d3df
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x44d3df
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x44d3df
push esi
push edi
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
je 0x44d3df
push esi
jmp 0x44d3ee
mov eax, dword [0x47b6d0]
test eax, eax
jne 0x44d3ed
mov eax, dword [0x47b6c8]
push eax
push 0x10b
jmp 0x44d4a8
push 0
push 0
call fcn.0044b937
pop ecx
pop ecx
mov esi, eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edi, eax
test esi, esi
je 0x44d436
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x44d436
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x44d436
push esi
push edi
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
je 0x44d436
push esi
jmp 0x44d445
mov eax, dword [0x47b6d0]
test eax, eax
jne 0x44d444
mov eax, dword [0x47b6c8]
push eax
push 0x108
jmp 0x44d38b
push 0
push 0x109
jmp 0x44d38b
call fcn.0044c353
push 0x3e8
push 0x105
jmp 0x44d4a8
call fcn.0044c353
push 0xbb9
jmp 0x44d465
call fcn.0044c353
push 0x2710
jmp 0x44d465
call fcn.0044c353
push 0x2af8
jmp 0x44d465
call fcn.0044c353
push 0x2af9
jmp 0x44d465
call fcn.0044c353
push 0
push 0x10c
call fcn.0044b937
pop ecx
jmp 0x44c516
push 5
pop esi
push 0
push 0x9c7a
push 0x111
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
dec esi
jne 0x44d4b6
jmp 0x44d505
push 5
pop esi
push 0
push 0x9c7b
push 0x111
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
dec esi
jne 0x44d4d3
jmp 0x44d505
push 0x302
push 0
push 0x400
push dword [0x47b6c8]
call dword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
inc eax
jmp 0x44c6fa
push 5
jmp 0x44d523
push 4
jmp 0x44d523
push 3
jmp 0x44d523
push 2
jmp 0x44d523
push 1
jmp 0x44d523
push 0
push 0x900
call fcn.0044b937
jmp 0x44cdf4
push 5
jmp 0x44d548
push 4
jmp 0x44d548
push 3
jmp 0x44d548
push 2
jmp 0x44d548
push 1
jmp 0x44d548
push 0
call fcn.00432d37
pop ecx
jmp 0x44c6fa