Function at 0x424190
Capabilities:
Check for foreground window switch
Check for unmoving mouse cursor
Check http status code
Create thread
Get common file path
Get graphical window text
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4b4
mov eax, dword [0x572c40]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0xb66c7c]
push ebx
mov ebx, dword [ebp + 0x14]
push esi
mov ecx, dword [eax + ecx*4]
mov eax, dword [0xb63070]
mov esi, dword [ebp + 0x10]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x460], edi
mov dword [ebp - 0x468], esi
mov dword [ebp - 0x480], ebx
cmp eax, dword [ecx + 4]
jg 0x426201
xorps xmm0, xmm0
push 0xffffffffffffffeb
push edi
mov edi, dword [sym.imp.USER32.dll_GetWindowLongA]
movups xmmword [ebp - 0x44c], xmm0
movups xmmword [ebp - 0x43c], xmm0
movq qword [ebp - 0x42c], xmm0
call edi
mov eax, dword [ebp + 0xc]
cmp eax, 0x8000
ja 0x42519a
je 0x42518c
cmp eax, 0x2b1
ja 0x424576
je 0x424568
cmp eax, 0xff
ja 0x424456
je 0x424294
sub eax, 1
je 0x424266
sub eax, 0x11
je 0x424254
sub eax, 4
jne case.0x42555a.1013
call fcn.00423410
jmp case.0x42555a.1013
call fcn.00423410
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp case.0x42555a.1013
mov edi, dword [ebp - 0x460]
push 0
push 0x3e8
push 0x1234
push edi
mov dword [0x57c7d4], edi
mov dword [0x57c8fc], 0
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x4261d8
push 0x10
lea eax, [ebp - 0x484]
mov dword [ebp - 0x484], 0x28
push eax
lea eax, [ebp - 0x44c]
push eax
push 0x10000003
push ebx
call dword [sym.imp.USER32.dll_GetRawInputData]
movzx eax, word [ebp - 0x438]
dec eax
cmp eax, 7
ja case.0x42555a.1013
movzx eax, byte [eax + 0x42624c]
jmp dword [eax*4 + 0x426240]
cmp byte [0x57ca27], 0
je case.0x4242d2.1
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp - 0x470]
push dword [ebp - 0x474]
call dword [sym.imp.USER32.dll_WindowFromPoint]
push 0x10
lea ecx, [ebp - 0x45c]
mov dword [0xb63058], eax
push ecx
push 5
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x45c], xmm0
call dword [sym.imp.dwmapi.dll_DwmGetWindowAttribute]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jne 0x4243f5
movd xmm1, dword [ebp - 0x454]
movd xmm0, dword [ebp - 0x45c]
cvtdq2pd xmm1, xmm1
cvtdq2pd xmm0, xmm0
subsd xmm1, xmm0
cvttsd2si eax, xmm1
test eax, eax
jle 0x4243f5
lea eax, [ebp - 0x424]
push eax
push dword [0xb63058]
call dword [sym.imp.USER32.dll_GetWindowRect]
push dword [ebp - 0x420]
lea eax, [ebp - 0x45c]
push dword [ebp - 0x424]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [ebp - 0x470]
cmp eax, dword [ebp - 0x458]
jl case.0x4242d2.1
cmp eax, dword [ebp - 0x450]
jg case.0x4242d2.1
mov edi, dword [ebp - 0x474]
mov esi, dword [ebp - 0x45c]
cmp edi, esi
jl case.0x4242d2.1
movd xmm1, dword [ebp - 0x454]
mov eax, 0x55555556
movd xmm0, esi
cvtdq2pd xmm1, xmm1
cvtdq2pd xmm0, xmm0
subsd xmm1, xmm0
cvttsd2si ecx, xmm1
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, esi
cmp edi, eax
jle 0x42441d
push dword [0xb51a00]
mov edi, dword [ebp - 0x460]
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x4261d8
movsx ecx, word [ebp - 0x470]
movsx eax, word [ebp - 0x474]
shl ecx, 0x10
or ecx, eax
push ecx
push 0
push 0x84
push dword [0xb63058]
call ebx
cmp eax, 8
jne case.0x4242d2.1
push 0
push 0
push 0x1f
push dword [0xb63058]
call ebx
push dword [0xb63058]
mov edi, dword [ebp - 0x460]
push 0xffffffffffffffff
push 0x8000
push edi
call dword [sym.imp.USER32.dll_PostMessageA]
push dword [0xb51a00]
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x4261d8
sub eax, 0x111
je 0x4244f1
sub eax, 2
je 0x42448a
sub eax, 0x105
jne case.0x42555a.1013
cmp esi, 4
jne 0x42447b
call fcn.00423410
push ebx
push esi
call fcn.00415260
add esp, 8
jmp case.0x42555a.1013
push 0
call fcn.0048e759
push edx
push eax
mov dword [0xb63060], eax
mov dword [0xb63064], edx
call fcn.00414c60
push dword [0xb63064]
push dword [0xb63060]
call fcn.00414f00
mov edi, dword [sym.imp.USER32.dll_IsWindow]
add esp, 0x14
mov esi, 0x57b7d8
cmp byte [esi + 8], 0
je 0x4244da
push dword [esi]
call edi
test eax, eax
jne 0x4244da
push dword [esi]
call fcn.0040ad20
add esp, 4
add esi, 0xc
cmp esi, 0x57bad8
jle 0x4244c2
mov byte [0x57c7d1], 0
jmp case.0x42555a.1013
movzx eax, si
add eax, 0xffffefff
cmp eax, 4
ja case.0x42555a.1013
jmp dword [eax*4 + 0x426254]
call fcn.0040a900
push eax
call fcn.0040b070
add esp, 4
jmp case.0x42555a.1013
call fcn.0040a900
push eax
call fcn.0040a750
add esp, 4
jmp case.0x42555a.1013
call fcn.0040a900
push eax
call fcn.0040afc0
add esp, 4
jmp case.0x42555a.1013
call fcn.0040a900
push eax
call fcn.0040b030
add esp, 4
jmp case.0x42555a.1013
call fcn.0040a900
push eax
call fcn.0040a910
add esp, 4
jmp case.0x42555a.1013
push esi
call fcn.004159f0
add esp, 4
jmp case.0x42555a.1013
cmp eax, 0x464
ja 0x425150
je 0x424f5e
cmp eax, 0x312
je 0x42469e
cmp eax, 0x406
jne case.0x42555a.1013
mov eax, dword [0x57c7f0]
test eax, eax
je 0x4245ad
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x57c7f0], 0
test ebx, ebx
je case.0x42555a.1013
push 0x10
lea eax, [ebp - 0x45c]
push eax
push 9
push ebx
call dword [sym.imp.dwmapi.dll_DwmGetWindowAttribute]
test eax, eax
je 0x4245e3
lea eax, [ebp - 0x45c]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowRect]
xorps xmm0, xmm0
lea eax, [ebp - 0x4b4]
movups xmmword [ebp - 0x4b4], xmm0
push eax
movq qword [ebp - 0x494], xmm0
movups xmmword [ebp - 0x4a4], xmm0
mov dword [ebp - 0x490], str.WindowManagerCaptureOverlay
mov dword [ebp - 0x4b0], 0x4263b0
call dword [sym.imp.USER32.dll_RegisterClassA]
mov edx, dword [ebp - 0x458]
movd xmm1, dword [ebp - 0x450]
mov ecx, dword [ebp - 0x45c]
cvtdq2pd xmm1, xmm1
push 0
push dword [0xb64288]
movd xmm0, edx
cvtdq2pd xmm0, xmm0
push 0
push 0
subsd xmm1, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
cvttsd2si eax, xmm1
movd xmm1, dword [ebp - 0x454]
cvtdq2pd xmm1, xmm1
push eax
subsd xmm1, xmm0
cvttsd2si eax, xmm1
push eax
push edx
push ecx
push connect
push 0x51984f
push str.WindowManagerCaptureOverlay
push 0x88
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 8
push eax
mov dword [0x57c7f0], eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.0x42555a.1013
cmp byte [0x57c922], 0
je 0x4246cd
cmp byte [0x57c923], 0
je 0x4246bb
push 3
push 0
push 0x57c923
jmp 0x4246c7
push 0x110001
push 0
push 0x2a53
call dword [sym.imp.WINMM.dll_PlaySoundA]
cmp esi, 1
jne 0x4246fd
push str.HKY:_Open_Main_Dialog
call fcn.004133e0
add esp, 4
mov edi, dword [ebp - 0x460]
push 0
push 0x4d2
push 0x83ff
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x4261d8
cmp esi, 2
jne 0x424725
push str.HKY:_Trigger_Active_Profile
call fcn.004133e0
push 1
push 1
push 1
push dword [0x57c900]
call fcn.00423e00
add esp, 0x14
jmp case.0x42555a.1013
cmp esi, 3
jne 0x4247b9
imul edx, dword [0x57c900], 0xeb8
mov ecx, dword [0x5664d0]
cmp byte [edx + ecx + 0x104], 0
sete al
mov byte [edx + ecx + 0x104], al
imul ecx, dword [0x57c900], 0xeb8
mov eax, dword [0x5664d0]
movsx eax, byte [ecx + eax + 0x104]
push eax
push str.HKY:_Enable_Active_Profile___d_
call fcn.004133e0
push 1
call fcn.00423bc0
mov esi, dword [0x57c7d8]
add esp, 0xc
test esi, esi
je case.0x42555a.1013
imul ecx, dword [0x57c900], 0xeb8
xor edx, edx
mov eax, dword [0x5664d0]
cmp byte [ecx + eax + 0x104], dl
setne dl
push edx
push 0x427
push esi
call fcn.00433a50
add esp, 0xc
jmp case.0x42555a.1013
cmp esi, 5
jne 0x4247f1
push str.HKY:_Create_Rules__All_
call fcn.004133e0
push 1
push 0
imul eax, dword [0x57c900], 0xeb8
push 0xffffffffffffffff
add eax, dword [0x5664d0]
push eax
call fcn.00411240
add esp, 0x14
call fcn.00423410
jmp case.0x42555a.1013
cmp esi, 4
jne 0x424806
push str.HKY:_Create_Rules__Update_
call fcn.004133e0
push 1
push 1
jmp 0x4247cc
cmp esi, 6
jne 0x42486f
push str.HKY:_Create_Rule__Active_Window_
call fcn.004133e0
add esp, 4
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov esi, dword [0x57c8fc]
xor ecx, ecx
test esi, esi
jle case.0x42555a.1013
mov edx, 0x57cb5c
cmp dword [edx], eax
je 0x424847
inc ecx
add edx, 0x5d0
cmp ecx, esi
jl 0x424833
jmp case.0x42555a.1013
imul eax, dword [0x57c900], 0xeb8
push 0
push 0
push ecx
add eax, dword [0x5664d0]
push eax
call fcn.00411240
add esp, 0x10
call fcn.00423410
jmp case.0x42555a.1013
cmp esi, 7
jne 0x42491b
push str.HKY:_Transparency__Active_Window_
call fcn.004133e0
add esp, 4
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edi, dword [0x566508]
xor esi, esi
mov edx, eax
test edi, edi
jle 0x4248ae
mov ecx, dword [0x56650c]
nop
mov eax, dword [ecx]
cmp eax, edx
je 0x4248fa
inc esi
add ecx, 0xc
cmp esi, edi
jl 0x4248a0
mov eax, dword [0x57cb40]
mov ecx, 0xb64288
push 0
push eax
push edx
mov dword [ebp - 0x478], edx
mov dword [ebp - 0x474], eax
mov byte [ebp - 0x470], 0
call fcn.0042e5a0
test al, al
je case.0x42555a.1013
push 1
push dword [0x566508]
lea eax, [ebp - 0x478]
mov ecx, 0x566508
push eax
call fcn.00413210
jmp case.0x42555a.1013
push 0
push 0
push eax
mov ecx, 0xb64288
call fcn.0042e5a0
push 1
push esi
mov ecx, 0x566508
call fcn.00413c10
jmp case.0x42555a.1013
cmp esi, 8
jne 0x424a1d
push str.HKY:_Click_Through__Active_Window_
call fcn.004133e0
add esp, 4
xor bl, bl
call dword [sym.imp.USER32.dll_GetForegroundWindow]
xor esi, esi
mov ecx, eax
mov dword [ebp - 0x464], ecx
cmp dword [0x566508], esi
jle 0x4249d1
xor edi, edi
mov eax, dword [0x56650c]
cmp byte [eax + edi + 8], 0
je 0x4249b7
push 0
push 0
push dword [eax + edi]
mov ecx, 0xb64288
call fcn.0042e5a0
mov eax, dword [0x56650c]
push dword [eax + edi]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
test esi, esi
js 0x4249b1
mov edx, dword [0x566508]
dec edx
cmp esi, edx
jg 0x4249b1
mov dword [0x566508], edx
je 0x4249b1
mov ecx, dword [0x56650c]
sub edx, esi
add ecx, edi
lea eax, [edx + edx*2]
shl eax, 2
push eax
lea eax, [ecx + 0xc]
push eax
push ecx
call fcn.00482d10
add esp, 0xc
dec esi
mov bl, 1
sub edi, 0xc
inc esi
add edi, 0xc
cmp esi, dword [0x566508]
jl 0x424951
test bl, bl
jne case.0x42555a.1013
mov ecx, dword [ebp - 0x464]
mov eax, dword [0x57cb48]
push 1
push eax
mov dword [ebp - 0x478], ecx
push ecx
mov ecx, 0xb64288
mov dword [ebp - 0x474], eax
mov byte [ebp - 0x470], 1
call fcn.0042e5a0
test al, al
je case.0x42555a.1013
push 1
push dword [0x566508]
lea eax, [ebp - 0x478]
mov ecx, 0x566508
push eax
call fcn.00413210
jmp case.0x42555a.1013
cmp esi, 9
jne 0x424a71
push str.HKY:_Transparency_Off__All_Windows_
call fcn.004133e0
xor esi, esi
add esp, 4
cmp dword [0x566508], esi
jle 0x424a62
xor edi, edi
nop dword [eax + eax]
mov eax, dword [0x56650c]
mov ecx, 0xb64288
push 0
push 0
push dword [edi + eax]
call fcn.0042e5a0
inc esi
lea edi, [edi + 0xc]
cmp esi, dword [0x566508]
jl 0x424a40
mov dword [0x566508], 0
jmp case.0x42555a.1013
cmp esi, 0xa
jne 0x424aba
push str.HKY:_Toggle_always_on_top__Active_Window_
call fcn.004133e0
add esp, 4
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov esi, eax
push 0xffffffffffffffec
push esi
call edi
push 0x13
push 0
push 0
push 0
push 0
test al, 8
je 0x424aac
push 0xfffffffffffffffe
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp case.0x42555a.1013
push 0xffffffffffffffff
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp case.0x42555a.1013
cmp esi, 0x64
jb 0x424ae9
cmp esi, 0xc8
jae 0x424af1
add esi, 0xffffff9c
push esi
push str.HKY:_Switch_Desktop___d_
call fcn.004133e0
mov ecx, dword [0xb4cb68]
add esp, 8
mov eax, dword [ecx]
push esi
call dword [eax + 0x14]
jmp case.0x42555a.1013
cmp esi, 0xc8
jb 0x424b4c
cmp esi, 0x12c
jae 0x424b52
lea edi, [esi - 0xc8]
push edi
push str.HKY:_Move_Window_to_Desktop___d_
call fcn.004133e0
add esp, 8
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [0xb4cb68]
mov esi, eax
push esi
mov edx, dword [ecx]
call dword [edx + 0x20]
mov ecx, dword [0xb4cb68]
push edi
push esi
mov edx, dword [ecx]
call dword [edx + 0xc]
cmp byte [0x57ca32], 0
je case.0x42555a.1013
mov ecx, dword [0xb4cb68]
push edi
mov eax, dword [ecx]
call dword [eax + 0x14]
jmp case.0x42555a.1013
cmp esi, 0x12c
jne 0x424b9f
push str.HKY:_Pin_Window_to_All_Desktops
call fcn.004133e0
add esp, 4
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp byte [0x57ca2e], 0
mov esi, eax
mov ecx, dword [0xb4cb68]
push esi
je 0x424b95
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
call edx
mov ecx, dword [0xb4cb68]
test al, al
push esi
mov eax, dword [ecx]
je 0x424b97
call dword [eax + 0x20]
jmp case.0x42555a.1013
mov eax, dword [ecx]
call dword [eax + 0x1c]
jmp case.0x42555a.1013
cmp esi, 0x190
jne 0x424bd0
push str.HKY:_Unpin_Window_from_All_Desktops
call fcn.004133e0
mov eax, dword [0xb4cb68]
add esp, 4
mov esi, dword [eax]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [0xb4cb68]
push eax
call dword [esi + 0x20]
jmp case.0x42555a.1013
cmp dword [0x5664cc], 0
mov dword [ebp - 0x464], 0
jle case.0x42555a.1013
xor ebx, ebx
mov edi, 0xbfff
mov dword [ebp - 0x46c], ebx
mov eax, dword [0x5664d0]
add eax, ebx
push 0xffffffffffffffff
push eax
call fcn.00431b00
xor edx, edx
add esp, 8
lea eax, [eax + eax*2]
add eax, 0x1f4
div edi
mov edi, edx
cmp edi, esi
jne 0x424c2d
mov eax, dword [0x5664d0]
add eax, ebx
push eax
push str.HKY:_Profile_Trigger___s_
call fcn.004133e0
add esp, 8
lea ebx, [edi + 1]
cmp ebx, esi
jne 0x424c4d
mov eax, dword [0x5664d0]
add eax, dword [ebp - 0x46c]
push eax
push str.HKY:_Profile_Trigger___s____Active_Window_Only
call fcn.004133e0
add esp, 8
lea eax, [edi + 2]
mov dword [ebp - 0x47c], eax
cmp eax, esi
jne 0x424c73
mov eax, dword [0x5664d0]
add eax, dword [ebp - 0x46c]
push eax
push str.HKY:_Profile_Update___s_
call fcn.004133e0
add esp, 8
mov eax, dword [0x5664d0]
add eax, dword [ebp - 0x46c]
push 0xb63938
push eax
call fcn.00415940
add esp, 8
test al, al
je 0x424f29
mov esi, dword [ebp - 0x46c]
add esi, dword [0x5664d0]
cmp byte [esi + 0x222], 0
je 0x424d11
cmp edi, dword [ebp - 0x468]
jne 0x424d11
cmp byte [esi + 0x220], 0
je 0x424cfd
cmp byte [esi + 0x104], 0
je 0x424d11
push esi
push str.PRF:_Executing_Profile___s_
call fcn.004133e0
push 1
push esi
mov byte [0x5661e0], 0
call fcn.00414930
add esp, 0x10
cmp byte [esi + 0x28c], 0
je 0x424cf4
push 2
push esi
call fcn.00411f80
add esp, 8
mov byte [0x5661e0], 1
jmp 0x424d11
push 1
push 1
push 1
push dword [ebp - 0x464]
call fcn.00423e00
add esp, 0x10
mov eax, dword [0x5664d0]
mov edi, dword [ebp - 0x46c]
mov esi, dword [ebp - 0x468]
cmp byte [edi + eax + 0x25c], 0
je 0x424d94
cmp ebx, esi
jne 0x424d94
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov esi, dword [0x5664d0]
add esi, edi
mov dword [0x57c7ec], eax
cmp byte [esi + 0x104], 0
je 0x424d84
push esi
push str.PRF:_Executing_Profile___s_
call fcn.004133e0
push 1
push esi
mov byte [0x5661e0], 0
call fcn.00414930
add esp, 0x10
cmp byte [esi + 0x28c], 0
je 0x424d7d
push 2
push esi
call fcn.00411f80
add esp, 8
mov byte [0x5661e0], 1
mov esi, dword [ebp - 0x468]
mov dword [0x57c7ec], 0
add edi, dword [0x5664d0]
cmp byte [edi + 0x26d], 0
je 0x424f29
cmp dword [ebp - 0x47c], esi
jne 0x424f29
cmp byte [edi + 0x289], 0
je 0x424dce
mov eax, dword [ebp - 0x464]
cmp eax, dword [0x57c900]
jne 0x424f29
cmp byte [edi + 0x104], 0
je 0x424f29
cmp byte [edi + 0xeb4], 0
je 0x424ea7
push edi
push str.PRF:_Updating_Profile___s_
call fcn.004133e0
mov eax, dword [edi + 0x268]
add esp, 8
mov byte [edi + 0xeb4], 0
sub eax, 0
je 0x424e98
sub eax, 1
je 0x424e92
sub eax, 1
jne 0x424ea7
mov ecx, dword [edi + 0xe98]
xor esi, esi
cmp dword [ecx], esi
jle 0x424e7e
xor ebx, ebx
nop dword [eax]
mov edx, dword [ecx + 4]
add edx, ebx
test byte [edx + 0x108], 1
jne 0x424e6d
test esi, esi
js 0x424e66
mov eax, dword [ecx]
dec eax
cmp esi, eax
jg 0x424e66
mov dword [ecx], eax
je 0x424e66
sub eax, esi
imul eax, eax, 0x2740
push eax
lea eax, [edx + 0x2740]
push eax
push edx
call fcn.00482d10
add esp, 0xc
dec esi
sub ebx, 0x2740
mov ecx, dword [edi + 0xe98]
inc esi
add ebx, 0x2740
cmp esi, dword [ecx]
jl 0x424e30
push 1
push 0
push 0xffffffffffffffff
push edi
call fcn.00411240
mov esi, dword [ebp - 0x468]
jmp 0x424ea4
push 1
push 0
jmp 0x424e9c
push 1
push 1
push 0xffffffffffffffff
push edi
call fcn.00411240
add esp, 0x10
cmp byte [edi + 0x26c], 0
je 0x424ed4
lea eax, [ebp - 0x470]
push eax
push 0
push edi
push 0x423590
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x424ed4
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [0x57c7d8]
test edx, edx
je 0x424f29
imul eax, dword [0x57c900], 0xeb8
add eax, dword [0x5664d0]
nop
mov cl, byte [edi]
cmp cl, byte [eax]
jne 0x424f10
test cl, cl
je 0x424f0c
mov cl, byte [edi + 1]
cmp cl, byte [eax + 1]
jne 0x424f10
add edi, 2
add eax, 2
test cl, cl
jne 0x424ef0
xor eax, eax
jmp 0x424f15
sbb eax, eax
or eax, 1
test eax, eax
jne 0x424f29
push 0xffffffffffffffff
push 1
push 0x405
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [ebp - 0x464]
mov edi, 0xbfff
mov ebx, dword [ebp - 0x46c]
inc eax
add ebx, 0xeb8
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x46c], ebx
cmp eax, dword [0x5664cc]
jl 0x424bf4
jmp case.0x42555a.1013
cmp byte [0x57ca33], 0
je 0x42505a
cmp byte [0x57ca34], 0
je 0x42505a
cmp esi, 0xffffffff
je 0x424f8d
push 1
push dword [0x57cb54]
call fcn.00423510
add esp, 8
mov dword [0x57cb54], ebx
test ebx, ebx
jne 0x424fb2
push 0x57ca34
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0048dd93
add esp, 0xc
jmp 0x424fe2
lea eax, [ebx + 1]
push eax
push 0xb649bc
push str._sDesktop_d
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.00407090
lea eax, [ebp - 0x108]
push 1
push eax
call fcn.00431d50
add esp, 0x1c
lea eax, [ebp - 0x108]
push eax
push 0
push 0
push 0x10
call sub.SHELL32.dll_SHSetFolderPathA
lea eax, [ebp - 0x464]
push eax
push 0x10
push 0
call sub.SHELL32.dll_SHGetSpecialFolderLocation
push 0
push dword [ebp - 0x464]
push 0x1000
push 0x2000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
push dword [ebp - 0x464]
call dword [sym.imp.SHELL32.dll_ILFree]
push 0
push 0xbb8
push 2
push 0
push 0
push 0x1a
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageTimeoutA]
cmp ebx, 0xffffffff
je 0x42505a
cmp esi, 0xffffffff
sete al
movzx eax, al
push eax
push ebx
call fcn.00422800
add esp, 8
cmp esi, 0xffffffff
je case.0x42555a.1013
push ebx
push str.TRG:_Check_Desktop_Trigger___d_
call fcn.004133e0
xor ebx, ebx
add esp, 8
cmp dword [0x5664cc], ebx
jle case.0x42555a.1013
xor edi, edi
mov eax, dword [0x5664d0]
add eax, edi
cmp byte [eax + 0x228], 0
je 0x425138
mov ecx, dword [eax + 0x22c]
cmp ecx, 0xffffffff
je 0x4250ac
cmp ecx, dword [ebp - 0x480]
jne 0x425138
push 0xb63938
push eax
call fcn.00415940
add esp, 8
test al, al
je 0x425138
mov esi, dword [0x5664d0]
add esi, edi
cmp byte [esi + 0x220], 0
je 0x425116
cmp byte [esi + 0x104], 0
je 0x425125
push esi
push str.PRF:_Executing_Profile___s_
call fcn.004133e0
push 3
push esi
mov byte [0x5661e0], 0
call fcn.00414930
add esp, 0x10
cmp byte [esi + 0x28c], 0
je 0x42510d
push 2
push esi
call fcn.00411f80
add esp, 8
mov byte [0x5661e0], 1
jmp 0x425125
push 1
push 1
push 3
push ebx
call fcn.00423e00
add esp, 0x10
mov eax, dword [0x5664d0]
cmp byte [edi + eax + 0x221], 0
je case.0x42555a.1013
inc ebx
add edi, 0xeb8
cmp ebx, dword [0x5664cc]
jl 0x425081
jmp case.0x42555a.1013
sub eax, 0x465
je 0x425174
sub eax, 1
je 0x425165
sub eax, 3
jne case.0x42555a.1013
push 1
call fcn.00423300
add esp, 4
jmp case.0x42555a.1013
push dword [0xb51a00]
mov byte [0x57c7d2], 1
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp case.0x42555a.1013
push ebx
call fcn.0040a940
add esp, 4
jmp case.0x42555a.1013
cmp eax, 0x83ec
ja 0x42534b
je 0x42424a
sub eax, 0x8001
je 0x425328
sub eax, 1
je 0x4252e7
sub eax, 1
jne case.0x42555a.1013
imul ebx, ebx, 0x5d0
lea eax, [ebp - 0x20c]
push 0x104
push eax
mov esi, dword [ebx + 0x57cb5c]
push esi
call fcn.00413ba0
add esp, 0xc
test eax, eax
je 0x42612f
push 0x104
lea eax, [ebp - 0x108]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp byte [ebp - 0x108], 0
je 0x42612f
xor edi, edi
cmp dword [0x5664f4], edi
jle 0x42612f
xor esi, esi
mov eax, dword [0x5664f8]
add eax, esi
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.00482680
add esp, 8
test eax, eax
je 0x42525c
mov eax, dword [0x5664f8]
add eax, 0x104
add eax, esi
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00482680
add esp, 8
test eax, eax
jne 0x425280
inc edi
add esi, 0x30c
cmp edi, dword [0x5664f4]
jl 0x425221
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00481761
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 0xffffffff
je 0x42612f
cmp dword [ebx + 0x57d110], 0
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
jne 0x4252a2
push 9
push dword [ebx + 0x57cb5c]
call esi
cmp dword [ebx + 0x57d110], 2
jne 0x4252b5
push 3
push dword [ebx + 0x57cb5c]
call esi
push dword [ebx + 0x57cb5c]
mov edi, dword [ebp - 0x460]
push 0
push 0x8000
push edi
call dword [sym.imp.USER32.dll_PostMessageA]
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00481761
mov esp, ebp
pop ebp
ret 0x10
mov eax, ebx
sub eax, 0x200
je 0x42531a
sub eax, 2
je 0x42530c
sub eax, 3
jne case.0x42555a.1013
push esi
call fcn.0040a790
add esp, 4
jmp case.0x42555a.1013
push esi
call fcn.0040a6e0
add esp, 4
jmp case.0x42555a.1013
push esi
call fcn.0040ab00
add esp, 4
jmp case.0x42555a.1013
push ebx
cmp esi, 0x82
jne 0x42533e
call fcn.0040ad20
add esp, 4
jmp case.0x42555a.1013
call fcn.0040ac20
add esp, 4
jmp case.0x42555a.1013
add eax, 0xffff7c13
cmp eax, 0x20
ja case.0x42555a.1013
movzx eax, byte [eax + 0x426290]
jmp dword [eax*4 + 0x426268]
push esi
push 1
push 0
call fcn.00415600
add esp, 0xc
jmp case.0x42555a.1013
mov edx, esi
xor ecx, ecx
mov esi, dword [0xb63dd8]
test esi, esi
jle 0x4253a8
nop word [eax + eax]
mov eax, dword [ecx*4 + 0xb64000]
cmp dword [ecx*4 + 0xb63b58], eax
cmove eax, edx
inc ecx
mov edx, eax
cmp ecx, esi
jl 0x425390
push dword [ebp - 0x468]
push edx
push str.TRG:_Check_DPI_Change_Trigger___d_______d_
call fcn.004133e0
xor ebx, ebx
add esp, 0xc
cmp dword [0x5664cc], ebx
jle case.0x42555a.1013
xor edi, edi
nop dword [eax]
mov eax, dword [0x5664d0]
add eax, edi
cmp byte [eax + 0x227], 0
je 0x425482
push 0xb63938
push eax
call fcn.00415940
add esp, 8
test al, al
je 0x425482
mov eax, dword [0x5664d0]
push dword [edi + eax + 0x234]
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [0x5664d0]
add esi, edi
cmp byte [esi + 0x220], 0
je 0x425460
cmp byte [esi + 0x104], 0
je 0x42546f
push esi
push str.PRF:_Executing_Profile___s_
call fcn.004133e0
push 2
push esi
mov byte [0x5661e0], 0
call fcn.00414930
add esp, 0x10
cmp byte [esi + 0x28c], 0
je 0x425457
push 2
push esi
call fcn.00411f80
add esp, 8
mov byte [0x5661e0], 1
jmp 0x42546f
push 1
push 1
push 2
push ebx
call fcn.00423e00
add esp, 0x10
mov eax, dword [0x5664d0]
cmp byte [edi + eax + 0x221], 0
je case.0x42555a.1013
inc ebx
add edi, 0xeb8
cmp ebx, dword [0x5664cc]
jl 0x4253d0
jmp case.0x42555a.1013
mov eax, ebx
sub eax, 0x201
je case.0x42555a.1012
sub eax, 2
je case.0x42555a.1012
sub eax, 1
jne case.0x42555a.1013
cmp byte [0x57c914], 1
mov ecx, 0xb64288
sete al
movzx eax, al
push eax
push 0x3f3
call fcn.00428240
lea eax, [ebp - 0x48c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [0xb659a8]
mov ecx, 0xb64288
push dword [eax]
lea eax, [ebp - 0x48c]
push eax
push 0x3e8
call fcn.0042ea10
jmp case.0x42555a.1013
movzx eax, si
mov ecx, eax
add eax, 0xfffffbb3
cmp ax, 0xf
ja 0x42552f
push 1
push 1
lea eax, [ecx - 0x44d]
push 0
push eax
call fcn.00423e00
add esp, 0x10
jmp case.0x42555a.1013
cmp ecx, 0x515
ja 0x425c16
je 0x425c07
add ecx, 0xfffffc0d
cmp ecx, 0xc6
ja case.0x42555a.1013
movzx eax, byte [ecx + 0x4262e8]
jmp dword [eax*4 + 0x4262b4]
cmp byte [0x57c914], 1
setne al
movzx eax, al
push eax
call fcn.00421cd0
add esp, 4
jmp case.0x42555a.1013
mov eax, dword [0x57c7d8]
push 0
test eax, eax
je 0x42425b
push 0x409
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x42555a.1013
push 0
push 9
push 0x110a
push dword [0x57badc]
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je case.0x42555a.1013
imul esi, dword [0x57c900], 0xeb8
push 0
push 0
push 0
push eax
add esi, dword [0x5664d0]
mov edi, dword [esi + 0xe98]
call fcn.0040c3c0
push eax
push esi
call fcn.0040bd30
add esp, 0x18
test eax, eax
jns 0x4255f6
cmp eax, dword [edi]
jge case.0x42555a.1013
imul ecx, dword [0x57c900], 0xeb8
mov dword [ebp - 0x474], edi
add ecx, dword [0x5664d0]
mov dword [ebp - 0x478], ecx
imul ecx, eax, 0x2740
mov eax, dword [edi + 4]
add eax, ecx
mov dword [ebp - 0x470], eax
test byte [eax + 0x108], 1
lea eax, [ebp - 0x478]
push eax
je 0x425645
push 0x4167b0
push dword [0x57c7d8]
push 0x4de
jmp 0x425655
push 0x41e090
push dword [0x57c7d8]
push 0x4d0
push dword [0xb64288]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne case.0x42555a.1013
imul eax, dword [0x57c900], 0xeb8
push 0xffffffffffffffff
add eax, dword [0x5664d0]
push eax
call fcn.0040c8b0
add esp, 8
jmp case.0x42555a.1013
imul eax, dword [0x57c900], 0xeb8
add eax, dword [0x5664d0]
push eax
call fcn.0040c630
mov ebx, dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
add esp, 4
mov dword [0xb63060], 0x64
mov dword [0xb63064], 0
push 0x57bf8c
call ebx
mov edi, eax
test edi, edi
jne 0x425718
nop word [eax + eax]
mov ecx, dword [0xb63060]
mov esi, ecx
mov eax, dword [0xb63064]
add ecx, 0xffffffff
mov edx, eax
mov dword [0xb63060], ecx
adc eax, 0xffffffff
mov dword [0xb63064], eax
test edx, edx
jl 0x425718
jg 0x4256fa
test esi, esi
je 0x425718
push 0x3e5
push 0xa
mov ecx, 0xb64288
call fcn.0042aaa0
push 0x57bf8c
call ebx
mov edi, eax
test edi, edi
je 0x4256d0
imul ebx, dword [0x57c900], 0xeb8
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 9
push 0x110a
push dword [0x57badc]
add ebx, dword [0x5664d0]
call esi
mov dword [ebp - 0x47c], eax
test eax, eax
je 0x425799
push eax
push 1
push 0x110a
push dword [0x57badc]
call esi
push dword [ebp - 0x47c]
mov esi, eax
push 0
push 0x1101
push dword [0x57badc]
call dword [sym.imp.USER32.dll_SendMessageA]
push esi
push 9
push 0x110b
push dword [0x57badc]
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
call fcn.0040bec0
push 0xffffffffffffffff
push ebx
call fcn.0040c8b0
add esp, 0xc
test edi, edi
jmp 0x4259a8
imul eax, dword [0x57c900], 0xeb8
add eax, dword [0x5664d0]
push eax
call fcn.0040c630
mov ebx, dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
add esp, 4
mov dword [0xb63060], 0x64
mov dword [0xb63064], 0
push 0x57bf8c
call ebx
mov esi, eax
test esi, esi
jne 0x425828
mov ecx, dword [0xb63060]
mov edi, ecx
mov eax, dword [0xb63064]
add ecx, 0xffffffff
mov edx, eax
mov dword [0xb63060], ecx
adc eax, 0xffffffff
mov dword [0xb63064], eax
test edx, edx
jl 0x425828
jg 0x42580a
test edi, edi
je 0x425828
push 0x3e5
push 0xa
mov ecx, 0xb64288
call fcn.0042aaa0
push 0x57bf8c
call ebx
mov esi, eax
test esi, esi
je 0x4257e0
imul edi, dword [0x57c900], 0xeb8
push 0
push 9
push 0x110a
push dword [0x57badc]
add edi, dword [0x5664d0]
call dword [sym.imp.USER32.dll_SendMessageA]
mov ebx, eax
test ebx, ebx
je 0x42588c
push 0
push 0
push 0
push ebx
call fcn.0040c3c0
push eax
push edi
call fcn.0040bcf0
add esp, 0x18
test eax, eax
je 0x4258b1
test byte [eax + 0x108], 1
jne 0x42588c
push ebx
push 3
push 0x110a
push dword [0x57badc]
call dword [sym.imp.USER32.dll_SendMessageA]
mov ebx, eax
push ebx
push 0
push 0x1113
push dword [0x57badc]
call dword [sym.imp.USER32.dll_SendMessageA]
push edi
call fcn.0040bec0
push 0xffffffffffffffff
push edi
call fcn.0040c8b0
add esp, 0xc
test esi, esi
je case.0x42555a.1013
push 0x57bf8c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp case.0x42555a.1013
mov edi, dword [ebp - 0x460]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0x4b5
push 0x83ed
push edi
call esi
push 0
push 0x4b7
push 0x83ed
push edi
call esi
jmp 0x4261d8
imul eax, dword [0x57c900], 0xeb8
add eax, dword [0x5664d0]
push eax
call fcn.0040c630
mov ebx, dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
add esp, 4
mov dword [0xb63060], 0x64
mov dword [0xb63064], 0
push 0x57bf8c
call ebx
mov esi, eax
test esi, esi
jne 0x425988
nop dword [eax + eax]
mov ecx, dword [0xb63060]
mov edi, ecx
mov eax, dword [0xb63064]
add ecx, 0xffffffff
mov edx, eax
mov dword [0xb63060], ecx
adc eax, 0xffffffff
mov dword [0xb63064], eax
test edx, edx
jl 0x425988
jg 0x42596a
test edi, edi
je 0x425988
push 0x3e5
push 0xa
mov ecx, 0xb64288
call fcn.0042aaa0
push 0x57bf8c
call ebx
mov esi, eax
test esi, esi
je 0x425940
imul eax, dword [0x57c900], 0xeb8
push 0x566558
add eax, dword [0x5664d0]
push eax
call fcn.00416220
add esp, 8
test esi, esi
je 0x4259b5
push 0x57bf8c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.00424010
jmp case.0x42555a.1013
imul eax, dword [0x57c900], 0xeb8
add eax, dword [0x5664d0]
push eax
call fcn.0040c630
mov ebx, dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
add esp, 4
mov dword [0xb63060], 0x64
mov dword [0xb63064], 0
push 0x57bf8c
call ebx
mov esi, eax
test esi, esi
jne 0x425a48
nop
mov ecx, dword [0xb63060]
mov edi, ecx
mov eax, dword [0xb63064]
add ecx, 0xffffffff
mov edx, eax
mov dword [0xb63060], ecx
adc eax, 0xffffffff
mov dword [0xb63064], eax
test edx, edx
jl 0x425a48
jg 0x425a2a
test edi, edi
je 0x425a48
push 0x3e5
push 0xa
mov ecx, 0xb64288
call fcn.0042aaa0
push 0x57bf8c
call ebx
mov esi, eax
test esi, esi
je 0x425a00
push 0x566558
imul eax, dword [0x57c900], 0xeb8
add eax, dword [0x5664d0]
push eax
call fcn.00422f70
add esp, 8
jmp 0x4258b1
imul eax, dword [0x57c900], 0xeb8
add eax, dword [0x5664d0]
push eax
call fcn.0040b600
add esp, 4
jmp case.0x42555a.1013
push 0
push 0
push 0
push 0
push str.Rule_Export_Files__.rulexp_
push 0
call fcn.00431710
add esp, 0x18
test eax, eax
je case.0x42555a.1013
push eax
push 0x56656c
call fcn.00407620
mov ebx, dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
add esp, 8
mov dword [0xb63060], 0x64
mov dword [0xb63064], 0
push 0x57bf8c
call ebx
mov esi, eax
test esi, esi
jne 0x425b28
nop dword [eax]
mov ecx, dword [0xb63060]
mov edi, ecx
mov eax, dword [0xb63064]
add ecx, 0xffffffff
mov edx, eax
mov dword [0xb63060], ecx
adc eax, 0xffffffff
mov dword [0xb63064], eax
test edx, edx
jl 0x425b28
jg 0x425b0a
test edi, edi
je 0x425b28
push 0x3e5
push 0xa
mov ecx, 0xb64288
call fcn.0042aaa0
push 0x57bf8c
call ebx
mov esi, eax
test esi, esi
je 0x425ae0
push 0x56656c
jmp 0x425a4d
mov ebx, dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
push 0x57bf8c
mov dword [0xb63060], 0x64
mov dword [0xb63064], 0
call ebx
mov esi, eax
test esi, esi
jne 0x425ba8
nop dword [eax]
mov ecx, dword [0xb63060]
mov edi, ecx
mov eax, dword [0xb63064]
add ecx, 0xffffffff
mov edx, eax
mov dword [0xb63060], ecx
adc eax, 0xffffffff
mov dword [0xb63064], eax
test edx, edx
jl 0x425ba8
jg 0x425b8a
test edi, edi
je 0x425ba8
push 0x3e5
push 0xa
mov ecx, 0xb64288
call fcn.0042aaa0
push 0x57bf8c
call ebx
mov esi, eax
test esi, esi
je 0x425b60
imul eax, dword [0x57c900], 0xeb8
push 0x56656c
add eax, dword [0x5664d0]
push eax
call fcn.00416220
add esp, 8
test esi, esi
je 0x425bd5
push 0x57bf8c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0
push 0
push 0
push str.Rule_Export_Files__.rulexp_
push 1
call fcn.00431710
add esp, 0x18
test eax, eax
je case.0x42555a.1013
push eax
push 0x56656c
call fcn.00407520
add esp, 8
jmp case.0x42555a.1013
push 1
call fcn.0040c1f0
add esp, 4
jmp case.0x42555a.1013
cmp ecx, 0x516
jne case.0x42555a.1013
push 0
call fcn.0040c1f0
add esp, 4
jmp case.0x42555a.1013
cmp esi, 0x44c
jne 0x42612f
mov eax, dword [0x5664cc]
mov dword [ebp - 0x464], eax
cmp eax, 0x10
jle 0x425c59
mov dword [ebp - 0x464], 0x10
jmp 0x425c5f
xor edi, edi
test eax, eax
jle 0x425cbd
xor ebx, ebx
xor edi, edi
mov eax, dword [0x5664d0]
lea esi, [edi + 0x44d]
push 0xffffffffffffffff
add eax, ebx
mov ecx, 0xb657b8
push eax
push 0x104
push 0
push esi
call fcn.00427790
push eax
call fcn.0048dea4
add esp, 0x10
mov word [edi*2 + 0x566458], si
cmp edi, dword [0x57c900]
mov ecx, 0xb64288
sete al
movzx eax, al
push eax
push esi
call fcn.00428240
inc edi
add ebx, 0xeb8
cmp edi, dword [ebp - 0x464]
jl 0x425c63
mov eax, 0xffff
mov word [edi*2 + 0x566458], ax
mov eax, 0x566458
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00481761
mov esp, ebp
pop ebp
ret 0x10
mov edi, dword [ebp - 0x460]
push 0
push 0
push 0x12
push edi
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4261d8
push 1
call fcn.00423bc0
add esp, 4
call fcn.0040add0
mov ecx, dword [0xb4cb68]
test ecx, ecx
je case.0x42555a.1013
mov eax, dword [ecx]
call dword [eax]
jmp case.0x42555a.1013
cmp esi, 0x4d2
je 0x426144
push 0
push 0x208
lea eax, [ebp - 0x414]
push eax
push 0xffffffffffffffff
push str._DFC_Cmd
call fcn.004322a0
add esp, 0x14
lea eax, [ebp - 0x414]
mov ecx, 0xb64288
push eax
call fcn.0042dd70
mov eax, dword [0xb65a1c]
test eax, eax
jle 0x426144
xor ebx, ebx
test eax, eax
jle 0x42612f
xor edi, edi
mov esi, dword [0xb65a20]
mov ecx, str._PROFILE
add esi, edi
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x425da2
test dl, dl
je 0x425d9e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x425da2
add eax, 2
add ecx, 2
test dl, dl
jne 0x425d82
xor eax, eax
jmp 0x425da7
sbb eax, eax
or eax, 1
test eax, eax
jne 0x425dd5
cmp dword [esi + 0x104], eax
je 0x425dd5
push 1
push 1
push eax
push eax
push dword [esi + 0x108]
push 0x5664cc
call fcn.004230e0
add esp, 0xc
push eax
call fcn.00423e00
add esp, 0x10
mov esi, dword [0xb65a20]
mov ecx, str._LOAD
add esi, edi
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x425e04
test dl, dl
je 0x425e00
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x425e04
add eax, 2
add ecx, 2
test dl, dl
jne 0x425de4
xor eax, eax
jmp 0x425e09
sbb eax, eax
or eax, 1
test eax, eax
jne 0x425e35
cmp dword [esi + 0x104], eax
je 0x425e35
push eax
push eax
push eax
push eax
push dword [esi + 0x108]
push 0x5664cc
call fcn.004230e0
add esp, 0xc
push eax
call fcn.00423e00
add esp, 0x10
mov esi, dword [0xb65a20]
mov ecx, str._SAVE
add esi, edi
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x425e64
test dl, dl
je 0x425e60
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x425e64
add eax, 2
add ecx, 2
test dl, dl
jne 0x425e44
xor eax, eax
jmp 0x425e69
sbb eax, eax
or eax, 1
test eax, eax
jne 0x425f97
cmp dword [esi + 0x104], eax
je 0x425f7b
push eax
push dword [esi + 0x108]
push 0x5664cc
call fcn.004230e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x425f21
push 0xeb8
call fcn.00484f13
mov esi, eax
add esp, 4
test esi, esi
je 0x42611c
imul ecx, dword [0x57c900], 0xeb8
push esi
add ecx, dword [0x5664d0]
push ecx
call fcn.004162d0
xor eax, eax
mov word [esi + 0x224], ax
mov word [esi + 0x25e], ax
mov word [esi + 0x26e], ax
mov eax, dword [0xb65a20]
push 0xffffffffffffffff
push dword [edi + eax + 0x108]
push 0x104
push esi
call fcn.0048dea4
push 0x5664cc
push esi
call fcn.00422ec0
add esp, 0x20
mov ecx, 0x5664cc
push 0x4230c0
push esi
call fcn.00414860
push esi
call fcn.00484ef8
add esp, 4
jmp 0x425f7b
cmp eax, dword [0x57c900]
je 0x425f7b
imul esi, eax, 0xeb8
mov eax, dword [0x5664d0]
add eax, esi
push eax
call fcn.00421e50
mov ecx, dword [0x5664d0]
lea eax, [ecx + esi]
push eax
imul eax, dword [0x57c900], 0xeb8
add eax, ecx
push eax
call fcn.004162d0
mov eax, dword [0xb65a20]
push 0xffffffffffffffff
push dword [edi + eax + 0x108]
mov eax, dword [0x5664d0]
add eax, esi
push 0x104
push eax
call fcn.0048dea4
add esp, 0x1c
call fcn.00423410
mov eax, dword [0x57c7d8]
test eax, eax
je 0x425f97
push eax
push 0x5664cc
call fcn.00422420
add esp, 8
mov eax, dword [0xb65a20]
mov ecx, str._ALLWIN
add eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x425fc3
test dl, dl
je 0x425fbf
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x425fc3
add eax, 2
add ecx, 2
test dl, dl
jne 0x425fa3
xor eax, eax
jmp 0x425fc8
sbb eax, eax
or eax, 1
test eax, eax
jne 0x425fe2
push eax
push 0x411
push 0x111
push dword [0x57c7d8]
call fcn.00416c90
mov eax, dword [0xb65a20]
mov ecx, str._UPDATE
add eax, edi
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x426010
test dl, dl
je 0x42600c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x426010
add eax, 2
add ecx, 2
test dl, dl
jne 0x425ff0
xor eax, eax
jmp 0x426015
sbb eax, eax
or eax, 1
test eax, eax
jne 0x42602f
push eax
push 0x413
push 0x111
push dword [0x57c7d8]
call fcn.00416c90
mov eax, dword [0xb65a20]
mov ecx, str._ENABLE
add eax, edi
nop dword [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x426060
test dl, dl
je 0x42605c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x426060
add eax, 2
add ecx, 2
test dl, dl
jne 0x426040
xor eax, eax
jmp 0x426065
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4260a9
mov byte [0x57c914], 1
mov dword [0xb64bd8], 1
cmp dword [0x57c7d8], eax
je 0x42609f
push 1
push dword [0xb64288]
call dword [sym.imp.USER32.dll_LoadIconA]
push eax
push 0xffffffffffffffde
push dword [0x57c7d8]
call dword [sym.imp.USER32.dll_SetClassLongA]
push 1
call fcn.00423bc0
add esp, 4
mov eax, dword [0xb65a20]
mov ecx, str._DISABLE
add eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4260d5
test dl, dl
je 0x4260d1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4260d5
add eax, 2
add ecx, 2
test dl, dl
jne 0x4260b5
xor eax, eax
jmp 0x4260da
sbb eax, eax
or eax, 1
test eax, eax
jne 0x42611c
mov byte [0x57c914], al
mov dword [0xb64bd8], 0xa
cmp dword [0x57c7d8], eax
je 0x426112
push 0xa
push dword [0xb64288]
call dword [sym.imp.USER32.dll_LoadIconA]
push eax
push 0xffffffffffffffde
push dword [0x57c7d8]
call dword [sym.imp.USER32.dll_SetClassLongA]
push 1
call fcn.00423bc0
add esp, 4
inc ebx
add edi, 0x118
cmp ebx, dword [0xb65a1c]
jl 0x425d73
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00481761
mov esp, ebp
pop ebp
ret 0x10
call fcn.00423410
push 1
call fcn.00423bc0
mov eax, dword [0x57c7d8]
add esp, 4
test eax, eax
jne 0x426179
push eax
push fcn.00416c90
push eax
push 0x4cc
push dword [0xb64288]
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov eax, dword [0x57c7d8]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push dword [0x57c7d8]
call dword [sym.imp.USER32.dll_BringWindowToTop]
jmp case.0x42555a.1013
test esi, esi
je 0x4261c2
push str.About
push esi
call fcn.00484da1
add esp, 8
test eax, eax
jne 0x4261c2
push eax
call fcn.0043ca70
add esp, 4
mov esi, str.ConfigurationInformation.htm
test eax, eax
mov ecx, str.Purchasing.htm
cmovne esi, ecx
mov dword [ebp - 0x468], esi
push esi
push str.WindowManager.chm
mov ecx, 0xb64288
call fcn.0042e760
mov edi, dword [ebp - 0x460]
push dword [ebp - 0x480]
push dword [ebp - 0x468]
push dword [ebp + 0xc]
push edi
call dword [0xb64bc4]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00481761
mov esp, ebp
pop ebp
ret 0x10
push 0xb63070
call fcn.0048147b
add esp, 4
cmp dword [0xb63070], 0xffffffff
jne 0x4241e1
push 0
call fcn.0048e759
push 0xb63070
mov dword [0xb63068], eax
mov dword [0xb6306c], edx
call fcn.0048142a
add esp, 8
jmp 0x4241e1