Function at 0x40d470
Capabilities:
Hide graphical window
Inspect load icon resource

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x258
mov eax, dword [ecx + 4]
mov edi, dword [ecx]
mov esi, dword [ecx + 8]
mov ebx, dword [ecx + 0xc]
cmp eax, 0x111
je 0x40e320
jbe 0x40d5f0
cmp eax, 0x212
je 0x40e348
jbe 0x40de18
cmp eax, 0x214
je 0x40dff0
cmp eax, 0x405
jne case.0x40e33c.32772
cmp ebx, 0x203
je case.0x40e33c.32802
xor eax, eax
cmp ebx, 0x204
jne 0x40d5da
lea eax, [ebp - 0x218]
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetCursorPos]
mov eax, dword [0x4117d0]
sub esp, 4
mov dword [esp + 4], 0xffffffec
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetWindowLongW]
and eax, 8
sub esp, 8
mov edi, eax
mov eax, dword [0x4117cc]
mov dword [esp + 4], 0x8d
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadMenuW]
sub esp, 8
mov esi, eax
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetSubMenu]
mov ebx, eax
mov eax, dword [0x4117d0]
sub esp, 8
mov dword [esp], eax
call dword [sym.imp.user32.dll_IsWindowVisible]
sub esp, 4
mov dword [esp + 8], 0
mov dword [esp + 4], 0x8022
mov dword [esp], ebx
test eax, eax
je 0x40ea98
call dword [sym.imp.user32.dll_DeleteMenu]
sub esp, 0xc
test edi, edi
jne 0x40eb46
mov eax, dword [0x4117d0]
mov dword [esp], eax
call dword [sym.imp.user32.dll_SetForegroundWindow]
mov eax, dword [0x4117d0]
sub esp, 4
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x214]
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x218]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp], ebx
call dword [sym.imp.user32.dll_TrackPopupMenuEx]
sub esp, 0x18
mov dword [esp], esi
call dword [sym.imp.user32.dll_DestroyMenu]
xor eax, eax
sub esp, 4
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
cmp eax, 0x4e
je 0x40e360
jbe 0x40dd60
cmp eax, 0x85
je 0x40e3a0
cmp eax, 0x110
jne case.0x40e33c.32772
mov eax, dword [0x4117cc]
mov ebx, dword [sym.imp.user32.dll_LoadStringW]
mov dword [0x4117d0], edi
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], 0x4118e0
mov dword [esp + 4], 0x803a
mov dword [esp], eax
call ebx
mov eax, dword [0x4117cc]
sub esp, 0x10
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], 0x4144e0
mov dword [esp + 4], 0x803b
mov dword [esp], eax
call ebx
mov eax, dword [0x4117cc]
sub esp, 0x10
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], 0x4142e0
mov dword [esp + 4], 0x803c
mov dword [esp], eax
call ebx
mov eax, dword [0x4117cc]
sub esp, 0x10
mov dword [esp + 4], 0x88
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadIconW]
mov esi, dword [sym.imp.user32.dll_SendMessageW]
sub esp, 8
mov dword [esp + 0xc], eax
mov eax, dword [0x4117d0]
mov dword [ebp - 0x23c], esi
mov dword [esp + 8], 1
mov dword [esp + 4], pe_nt_image_headers32
mov dword [esp], eax
call esi
mov esi, dword [sym.imp.user32.dll_GetSystemMetrics]
sub esp, 0x10
mov dword [esp], 0x32
call esi
sub esp, 4
mov ebx, eax
mov dword [esp], 0x31
call esi
sub esp, 4
mov dword [esp + 0xc], eax
mov eax, dword [0x4117cc]
mov dword [esp + 0x10], ebx
lea ebx, [ebp - 0x228]
mov dword [esp + 0x14], 0x8000
mov dword [esp + 8], 1
mov dword [esp + 4], 0x88
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadImageW]
mov esi, dword [ebp - 0x23c]
sub esp, 0x18
mov dword [esp + 0xc], eax
mov eax, dword [0x4117d0]
mov dword [esp + 8], 0
mov dword [esp + 4], pe_nt_image_headers32
mov dword [esp], eax
call esi
sub esp, 0x10
call dword [sym.imp.comctl32.dll_InitCommonControls]
mov dword [esp + 4], ebx
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetWindowRect]
mov eax, dword [ebp - 0x220]
sub eax, dword [ebp - 0x228]
sub esp, 8
mov dword [0x411884], eax
mov eax, dword [ebp - 0x21c]
sub eax, dword [ebp - 0x224]
mov dword [esp + 0xc], 0x7d1
mov dword [0x411880], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0x54000100
call dword [sym.imp.comctl32.dll_CreateStatusWindowW]
mov ecx, eax
mov dword [0x411858], eax
sub esp, 0x10
xor eax, eax
test ecx, ecx
je 0x40d5da
lea edx, [ebp - 0x234]
mov dword [esp], ecx
mov dword [esp + 0xc], edx
mov dword [ebp - 0x234], 0x64
mov dword [ebp - 0x230], 0xd2
mov dword [ebp - 0x22c], 0x190
mov dword [esp + 8], 3
mov dword [esp + 4], 0x404
call esi
sub esp, 0x10
mov dword [esp + 4], 0x3f7
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetDlgItem]
mov esi, dword [sym.imp.user32.dll_CreateDialogParamW]
mov dword [0x41185c], eax
mov eax, dword [0x4117cc]
sub esp, 8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], sym._ApplicationPageWndProc_16
mov dword [esp + 8], edi
mov dword [esp + 4], 0x6a
mov dword [esp], eax
call esi
mov dword [0x4117b4], eax
mov eax, dword [0x4117cc]
sub esp, 0x14
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], sym._ProcessPageWndProc_16
mov dword [esp + 8], edi
mov dword [esp + 4], 0x85
mov dword [esp], eax
call esi
mov dword [0x411840], eax
mov eax, dword [0x4117cc]
sub esp, 0x14
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], sym._PerformancePageWndProc_16
mov dword [esp + 8], edi
mov dword [esp + 4], 0x86
mov dword [esp], eax
call esi
xor edx, edx
mov dword [0x4117d4], eax
sub esp, 0x14
xor eax, eax
mov dword [ebp + eax - 0x214], edx
add eax, 4
cmp eax, 0x18
jb 0x40d8ae
mov eax, dword [0x41185c]
lea esi, [ebp - 0x218]
mov dword [ebp - 0x218], 1
mov dword [ebp - 0x20c], 0x4118e0
mov dword [esp], eax
mov eax, dword [ebp - 0x23c]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x133e
call eax
xor edx, edx
xor eax, eax
sub esp, 0x10
mov dword [ebp + eax - 0x214], edx
add eax, 4
cmp eax, 0x18
jb 0x40d902
mov eax, dword [0x41185c]
mov dword [esp + 0xc], esi
mov dword [ebp - 0x218], 1
mov dword [esp], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x20c], 0x4144e0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x133e
call eax
xor edx, edx
xor eax, eax
sub esp, 0x10
mov dword [ebp + eax - 0x214], edx
add eax, 4
cmp eax, 0x18
jb 0x40d950
mov eax, dword [0x41185c]
mov dword [esp + 0xc], esi
mov dword [ebp - 0x218], 1
mov dword [esp], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x20c], 0x4142e0
mov dword [esp + 8], 2
mov dword [esp + 4], 0x133e
call eax
sub esp, 0x10
mov dword [esp + 4], ebx
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetClientRect]
mov eax, dword [ebp - 0x220]
mov ecx, dword [0x411604]
mov ebx, dword [0x411608]
mov edx, dword [0x411610]
sub esp, 8
mov dword [0x41188c], eax
mov eax, dword [ebp - 0x21c]
mov esi, ecx
or esi, ebx
mov dword [0x411888], eax
mov eax, dword [0x41160c]
or esi, eax
or esi, edx
je 0x40da09
sub edx, ebx
sub eax, ecx
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
mov dword [esp], edi
call dword [sym.imp.user32.dll_MoveWindow]
sub esp, 0x18
mov ebx, dword [0x411600]
test ebx, ebx
jne 0x40ea78
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetMenu]
mov ebx, dword [sym.imp.user32.dll_GetSubMenu]
sub esp, 4
mov esi, eax
mov dword [esp + 4], 1
mov dword [esp], eax
call ebx
sub esp, 8
mov dword [ebp - 0x240], eax
mov dword [esp], esi
mov dword [esp + 4], 2
call ebx
sub esp, 8
mov esi, eax
mov dword [esp + 4], 1
mov dword [esp], eax
call ebx
sub esp, 8
mov dword [ebp - 0x244], eax
mov dword [esp + 4], 7
mov dword [esp], esi
call ebx
mov ecx, dword [0x411618]
mov dword [ebp - 0x248], eax
sub esp, 8
test ecx, ecx
je 0x40e9c0
mov eax, dword [ebp - 0x240]
mov dword [esp + 8], 8
mov dword [esp + 4], 0x8005
mov ebx, dword [sym.imp.user32.dll_CheckMenuItem]
mov dword [esp], eax
call ebx
sub esp, 0xc
mov dword [esp + 0x18], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xffffffff
mov dword [esp], edi
call dword [sym.imp.user32.dll_SetWindowPos]
sub esp, 0x1c
mov edx, dword [0x41161c]
test edx, edx
je 0x40e9b0
mov dword [esp + 8], 8
mov eax, dword [ebp - 0x240]
mov dword [esp + 4], 0x8006
mov dword [esp], eax
call ebx
mov eax, dword [0x411620]
sub esp, 0xc
test eax, eax
je 0x40e9a0
mov dword [esp + 8], 8
mov eax, dword [ebp - 0x240]
mov dword [esp + 4], 0x8007
mov dword [esp], eax
call ebx
mov eax, dword [0x411624]
sub esp, 0xc
test eax, eax
je 0x40e990
mov dword [esp + 8], 8
mov eax, dword [ebp - 0x240]
mov dword [esp + 4], 0x801a
mov dword [esp], eax
call ebx
mov eax, dword [0x41162c]
sub esp, 0xc
test eax, eax
jne 0x40ea60
mov eax, dword [0x411630]
mov dword [esp + 0x10], 0
test eax, eax
je 0x40ea50
mov dword [esp + 0xc], 0x800b
mov eax, dword [sym.imp.user32.dll_CheckMenuRadioItem]
mov dword [esp + 8], 0x800c
mov dword [esp + 4], 0x800a
mov dword [esp], esi
mov dword [ebp - 0x240], eax
call eax
mov eax, dword [0x411774]
sub esp, 0x14
test eax, eax
je 0x40e970
mov dword [esp + 8], 8
mov dword [esp + 4], 0x801c
mov dword [esp], esi
call ebx
sub esp, 0xc
mov eax, dword [0x411628]
mov dword [esp + 0x10], 0
cmp eax, 1
je 0x40eb03
cmp eax, 2
je 0x40eb10
cmp eax, 4
je 0x40eab0
mov dword [esp + 0xc], 0x8010
mov eax, dword [ebp - 0x244]
mov dword [esp + 8], 0x8010
mov dword [esp + 4], 0x800d
mov dword [esp], eax
mov eax, dword [ebp - 0x240]
call eax
mov ecx, dword [0x411770]
sub esp, 0x14
test ecx, ecx
mov dword [esp + 0x10], 0
je 0x40e960
mov dword [esp + 0xc], 0x801e
mov eax, dword [ebp - 0x248]
mov dword [esp + 8], 0x801e
mov dword [esp + 4], 0x801d
mov dword [esp], eax
mov eax, dword [ebp - 0x240]
call eax
mov eax, dword [0x41185c]
mov esi, dword [ebp - 0x23c]
sub esp, 0x14
mov ebx, dword [0x411614]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1330
mov dword [esp], eax
call esi
mov eax, dword [0x41185c]
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x1330
mov dword [esp], eax
call esi
mov eax, dword [0x41185c]
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 2
mov dword [esp + 4], 0x1330
mov dword [esp], eax
call esi
mov eax, dword [0x41185c]
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x1330
mov dword [esp], eax
call esi
mov eax, dword [0x411628]
sub esp, 0x10
cmp eax, 1
je 0x40eada
cmp eax, 2
je 0x40eb1d
cmp eax, 4
je 0x40eb67
call sym._PerfDataRefresh
call sym._PerfDataRefresh
call sym._RefreshApplicationPage
call sym._RefreshProcessPage
call sym._RefreshPerformancePage
call sym._TrayIcon_ShellAddTrayIcon
mov eax, 1
jmp 0x40d5da
cmp eax, 5
je 0x40e058
cmp eax, 0xf
jne 0x40dea0
lea ebx, [ebp - 0x218]
mov dword [esp], edi
mov dword [esp + 4], ebx
call dword [sym.imp.user32.dll_BeginPaint]
sub esp, 8
mov dword [ebp - 0x240], eax
lea eax, [ebp - 0x228]
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetClientRect]
mov esi, dword [sym.imp.user32.dll_GetSysColor]
sub esp, 8
mov dword [esp], 0x14
call esi
sub esp, 4
mov dword [ebp - 0x23c], eax
mov dword [esp], 0x10
call esi
mov ecx, dword [ebp - 0x224]
mov edx, dword [ebp - 0x23c]
sub esp, 4
mov dword [esp + 8], eax
lea eax, [ecx + 2]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x220]
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x228]
mov dword [esp], eax
mov eax, dword [ebp - 0x240]
call sym._Draw3dRect
mov dword [esp + 4], ebx
mov dword [esp], edi
call dword [sym.imp.user32.dll_EndPaint]
xor eax, eax
sub esp, 8
jmp 0x40d5da
cmp eax, 0x11f
je 0x40df80
cmp eax, 0x211
jne 0x40df58
lea eax, [ebp - 0x218]
mov ebx, dword [sym.imp.user32.dll_SendMessageW]
mov dword [ebp - 0x218], 0xffffffff
mov dword [esp + 0xc], eax
mov eax, dword [0x411858]
mov dword [esp + 8], 1
mov dword [esp + 4], 0x404
mov dword [esp], eax
call ebx
mov eax, dword [0x411858]
mov dword [0x411780], 1
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x40b
mov dword [esp], eax
call ebx
xor eax, eax
sub esp, 0x10
jmp 0x40d5da
cmp eax, 2
jne case.0x40e33c.32772
mov dword [esp + 4], 0
mov dword [esp], edi
call dword [sym.imp.user32.dll_ShowWindow]
sub esp, 8
call sym._TrayIcon_ShellRemoveTrayIcon
lea eax, [ebp - 0x218]
mov dword [esp], edi
mov dword [ebp - 0x218], 0x2c
mov dword [esp + 4], eax
call dword [sym.imp.user32.dll_GetWindowPlacement]
mov eax, dword [ebp - 0x1fc]
sub esp, 8
mov dword [0x411604], eax
mov eax, dword [ebp - 0x1f8]
mov dword [esp], edi
mov dword [0x411608], eax
mov eax, dword [ebp - 0x1f4]
mov dword [0x41160c], eax
mov eax, dword [ebp - 0x1f0]
mov dword [0x411610], eax
call dword [sym.imp.user32.dll_IsZoomed]
mov edx, eax
mov eax, dword [ebp - 0x214]
sub esp, 4
mov dword [esp + 0xc], ebx
and eax, 2
mov dword [esp + 8], esi
or eax, edx
mov dword [esp + 4], 2
setne al
mov dword [esp], edi
movzx eax, al
mov dword [0x411600], eax
call dword [sym.imp.user32.dll_DefWindowProcW]
sub esp, 0x10
jmp 0x40d5da
cmp eax, 0x113
jne case.0x40e33c.32772
call sym._PerfDataRefresh
call sym._RefreshApplicationPage
call sym._RefreshProcessPage
call sym._RefreshPerformancePage
call sym._TrayIcon_ShellUpdateTrayIcon
xor eax, eax
jmp 0x40d5da
xor eax, eax
lea edi, [ebp - 0x218]
mov ecx, pe_nt_image_headers32
movzx esi, si
rep stosd dword es:[edi], eax
mov eax, dword [0x4117cc]
lea ebx, [ebp - 0x218]
mov dword [esp + 4], esi
mov dword [esp + 0xc], 0x100
mov dword [esp + 8], ebx
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadStringW]
mov eax, dword [0x411858]
sub esp, 0x10
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0x40b
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
xor eax, eax
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
cmp esi, 7
jbe 0x40e430
mov edx, dword [ebx]
mov ecx, dword [ebx + 8]
mov eax, dword [0x411884]
sub ecx, edx
cmp ecx, eax
jge 0x40e928
add eax, edx
mov dword [ebx + 8], eax
lea esi, [esi]
mov edx, dword [ebx + 0xc]
mov edi, dword [ebx + 4]
sub esi, 3
mov ecx, dword [0x411880]
mov eax, edx
sub eax, edi
mov dword [ebp - 0x23c], eax
cmp esi, 2
ja 0x40e93c
mov eax, 1
cmp ecx, dword [ebp - 0x23c]
jle 0x40d5da
sub edx, ecx
mov dword [ebx + 4], edx
jmp 0x40d5da
cmp esi, 1
je 0x40e470
movzx ecx, bx
mov edx, ebx
lea edi, [ebp - 0x218]
mov ebx, dword [sym.imp.user32.dll_GetWindowRect]
shr edx, 0x10
mov eax, ecx
sub eax, dword [0x41188c]
mov dword [esp + 4], edi
mov dword [ebp - 0x240], eax
mov eax, edx
sub eax, dword [0x411888]
mov dword [ebp - 0x244], eax
mov eax, dword [0x411858]
mov dword [0x41188c], ecx
mov dword [ebp - 0x248], ecx
mov dword [0x411888], edx
mov dword [ebp - 0x23c], edx
mov dword [esp], eax
call ebx
mov edx, dword [ebp - 0x23c]
mov eax, dword [ebp - 0x20c]
sub ax, word [ebp - 0x214]
sub esp, 8
mov ecx, dword [ebp - 0x248]
add edx, eax
mov eax, dword [0x411858]
mov dword [esp + 8], esi
shl edx, 0x10
mov dword [esp + 4], 5
mov dword [esp], eax
mov eax, dword [sym.imp.user32.dll_SendMessageW]
or edx, ecx
mov dword [esp + 0xc], edx
mov dword [ebp - 0x23c], eax
call eax
mov eax, dword [0x411780]
mov ecx, dword [ebp - 0x248]
lea edx, [ebp - 0x228]
sub esp, 0x10
test eax, eax
je 0x40ea28
mov dword [ebp - 0x228], 0xffffffff
mov eax, 1
mov dword [ebp - 0x224], 0xd2
mov dword [ebp - 0x220], ecx
mov dword [esp + 8], eax
mov eax, dword [0x411858]
mov dword [esp + 0xc], edx
mov dword [esp], eax
mov eax, dword [ebp - 0x23c]
mov dword [esp + 4], 0x404
call eax
mov eax, dword [0x41185c]
sub esp, 0x10
mov dword [esp + 4], edi
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x244]
mov edx, dword [ebp - 0x240]
sub esp, 8
add edx, dword [ebp - 0x210]
add eax, dword [ebp - 0x20c]
sub eax, dword [ebp - 0x214]
mov esi, dword [sym.imp.user32.dll_SetWindowPos]
mov dword [esp + 0x18], 0x216
mov dword [esp + 0x14], eax
mov eax, edx
sub eax, dword [ebp - 0x218]
mov dword [esp + 0x10], eax
mov eax, dword [0x41185c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call esi
mov eax, dword [0x4117b4]
sub esp, 0x1c
mov dword [esp + 4], edi
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x244]
mov ecx, dword [ebp - 0x240]
sub esp, 8
add ecx, dword [ebp - 0x210]
add eax, dword [ebp - 0x20c]
sub eax, dword [ebp - 0x214]
mov dword [esp + 0x18], 0x216
mov dword [esp + 0x14], eax
mov eax, ecx
sub eax, dword [ebp - 0x218]
mov dword [esp + 0x10], eax
mov eax, dword [0x4117b4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call esi
mov eax, dword [0x411840]
sub esp, 0x1c
mov dword [esp + 4], edi
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x244]
mov edx, dword [ebp - 0x240]
sub esp, 8
add edx, dword [ebp - 0x210]
add eax, dword [ebp - 0x20c]
sub eax, dword [ebp - 0x214]
mov dword [esp + 0x18], 0x216
mov dword [esp + 0x14], eax
mov eax, edx
sub eax, dword [ebp - 0x218]
mov dword [esp + 0x10], eax
mov eax, dword [0x411840]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call esi
mov eax, dword [0x4117d4]
sub esp, 0x1c
mov dword [esp + 4], edi
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x244]
add eax, dword [ebp - 0x20c]
sub esp, 8
sub eax, dword [ebp - 0x214]
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x240]
add eax, dword [ebp - 0x210]
sub eax, dword [ebp - 0x218]
mov dword [esp + 0x18], 0x216
mov dword [esp + 0x10], eax
mov eax, dword [0x4117d4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call esi
xor eax, eax
sub esp, 0x1c
jmp 0x40d5da
movzx eax, si
dec esi
cmp si, 1
jbe 0x40eac0
sub eax, 0x8003
cmp eax, 0x2c
ja case.0x40e33c.32772
jmp dword [eax*4 + 0x416210]
mov eax, edi
call sym._TaskManager_OnExitMenuLoop
xor eax, eax
jmp 0x40d5da
mov edx, dword [0x41185c]
xor eax, eax
cmp dword [ebx], edx
jne 0x40d5da
cmp dword [ebx + 4], 0x3f7
jne 0x40d5da
cmp dword [ebx + 8], 0xfffffdd9
jne 0x40d5da
mov dword [ebp - 0x23c], eax
call sym._TaskManager_OnTabWndSelChange
mov eax, dword [ebp - 0x23c]
jmp 0x40d5da
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetDC]
sub esp, 4
mov ebx, eax
lea eax, [ebp - 0x228]
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetClientRect]
mov esi, dword [sym.imp.user32.dll_GetSysColor]
sub esp, 8
mov dword [esp], 0x14
call esi
sub esp, 4
mov dword [ebp - 0x23c], eax
mov dword [esp], 0x10
call esi
mov ecx, dword [ebp - 0x224]
mov edx, dword [ebp - 0x23c]
sub esp, 4
mov dword [esp + 8], eax
lea eax, [ecx + 2]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x220]
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x228]
mov dword [esp], eax
mov eax, ebx
call sym._Draw3dRect
mov dword [esp + 4], ebx
mov dword [esp], edi
call dword [sym.imp.user32.dll_ReleaseDC]
xor eax, eax
sub esp, 8
jmp 0x40d5da
mov ecx, dword [ebx + 8]
mov edx, dword [ebx]
mov eax, dword [0x411884]
mov edi, ecx
sub edi, edx
mov dword [ebp - 0x23c], edi
mov edi, 0x92
bt edi, esi
jae 0x40eb90
cmp eax, dword [ebp - 0x23c]
jle 0x40e018
sub ecx, eax
mov dword [ebx], ecx
jmp 0x40e018
mov edx, dword [0x411620]
test edx, edx
je case.0x40e33c.32772
mov eax, dword [0x4117d0]
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.user32.dll_ShowWindow]
xor eax, eax
sub esp, 8
jmp 0x40dfe0
call sym._TaskManager_OnRestoreMainWindow
xor eax, eax
jmp 0x40d5da
call sym._TaskManager_OnFileNew
xor eax, eax
jmp 0x40d5da
mov eax, dword [0x4117d0]
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetMenu]
mov ebx, dword [sym.imp.user32.dll_GetSubMenu]
sub esp, 4
mov dword [esp + 4], 2
mov dword [esp], eax
call ebx
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], eax
call ebx
mov dword [0x411628], 1
sub esp, 8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x800d
mov dword [esp + 8], 0x8010
mov dword [esp + 4], 0x800d
mov dword [esp], eax
call dword [sym.imp.user32.dll_CheckMenuRadioItem]
mov eax, dword [0x4117d0]
sub esp, 0x14
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [sym.imp.user32.dll_KillTimer]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x3e8
mov eax, dword [0x4117d0]
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [sym.imp.user32.dll_SetTimer]
xor eax, eax
sub esp, 0x10
jmp 0x40dfe0
call sym._ApplicationPage_OnViewDetails
xor eax, eax
jmp 0x40d5da
call sym._ApplicationPage_OnViewSmallIcons
xor eax, eax
jmp 0x40d5da
call sym._ApplicationPage_OnViewLargeIcons
xor eax, eax
jmp 0x40d5da
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x113
mov dword [esp], edi
call dword [sym.imp.user32.dll_PostMessageW]
xor eax, eax
sub esp, 0x10
jmp 0x40d5da
call sym._TaskManager_OnOptionsHideWhenMinimized
xor eax, eax
jmp 0x40d5da
call sym._TaskManager_OnOptionsMinimizeOnUse
xor eax, eax
jmp 0x40d5da
call sym._TaskManager_OnOptionsAlwaysOnTop
xor eax, eax
jmp 0x40d5da
call sym._ProcessPage_OnDebugChannels
xor eax, eax
jmp 0x40d5da
call sym._ProcessPage_OnSetPriorityLow
xor eax, eax
jmp 0x40d5da
call sym._ProcessPage_OnSetPriorityBelowNormal
xor eax, eax
jmp 0x40d5da
call sym._ProcessPage_OnSetPriorityNormal
xor eax, eax
jmp 0x40d5da
call sym._ProcessPage_OnSetPriorityAboveNormal
xor eax, eax
jmp 0x40d5da
call sym._ProcessPage_OnSetPriorityHigh
xor eax, eax
jmp 0x40d5da
call sym._ProcessPage_OnSetPriorityRealTime
xor eax, eax
jmp 0x40d5da
call sym._ProcessPage_OnSetAffinity
xor eax, eax
jmp 0x40d5da
call sym._ProcessPage_OnDebug
xor eax, eax
jmp 0x40d5da
call sym._ProcessPage_OnEndProcessTree
xor eax, eax
jmp 0x40d5da
call sym._ProcessPage_OnEndProcess
xor eax, eax
jmp 0x40d5da
call sym._ApplicationPage_OnGotoProcess
xor eax, eax
jmp 0x40d5da
call sym._ApplicationPage_OnEndTask
xor eax, eax
jmp 0x40d5da
call sym._ApplicationPage_OnSwitchTo
xor eax, eax
jmp 0x40d5da
call sym._PerformancePage_OnViewCPUHistoryOneGraphPerCPU
xor eax, eax
jmp 0x40d5da
call sym._PerformancePage_OnViewCPUHistoryOneGraphAll
xor eax, eax
jmp 0x40d5da
call sym._PerformancePage_OnViewShowKernelTimes
xor eax, eax
jmp 0x40d5da
call sym._ProcessPage_OnViewSelectColumns
xor eax, eax
jmp 0x40d5da
call sym._TaskManager_OnOptionsShow16BitTasks
xor eax, eax
jmp 0x40d5da
mov dword [esp + 4], 1
mov dword [esp], edi
call dword [sym.imp.user32.dll_EndDialog]
xor eax, eax
sub esp, 8
jmp 0x40d5da
call sym._OnAbout
xor eax, eax
jmp 0x40d5da
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xb
mov dword [esp + 4], 0x4165a0
mov dword [esp], edi
call dword [sym.imp.user32.dll_WinHelpW]
xor eax, eax
sub esp, 0x10
jmp 0x40d5da
call sym._ApplicationPage_OnWindowsBringToFront
xor eax, eax
jmp 0x40d5da
call sym._ApplicationPage_OnWindowsCascade
xor eax, eax
jmp 0x40d5da
call sym._ApplicationPage_OnWindowsMaximize
xor eax, eax
jmp 0x40d5da
call sym._ApplicationPage_OnWindowsMinimize
xor eax, eax
jmp 0x40d5da
call sym._ApplicationPage_OnWindowsTileVertically
xor eax, eax
jmp 0x40d5da
call sym._ApplicationPage_OnWindowsTileHorizontally
xor eax, eax
jmp 0x40d5da
mov eax, dword [0x4117d0]
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetMenu]
mov ebx, dword [sym.imp.user32.dll_GetSubMenu]
sub esp, 4
mov dword [esp + 4], 2
mov dword [esp], eax
call ebx
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], eax
call ebx
mov dword [0x411628], 0
sub esp, 8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x8010
mov dword [esp + 8], 0x8010
mov dword [esp + 4], 0x800d
mov dword [esp], eax
call dword [sym.imp.user32.dll_CheckMenuRadioItem]
mov eax, dword [0x4117d0]
sub esp, 0x14
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [sym.imp.user32.dll_KillTimer]
xor eax, eax
sub esp, 8
jmp 0x40d5da
mov eax, dword [0x4117d0]
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetMenu]
mov ebx, dword [sym.imp.user32.dll_GetSubMenu]
sub esp, 4
mov dword [esp + 4], 2
mov dword [esp], eax
call ebx
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], eax
call ebx
mov dword [0x411628], 4
sub esp, 8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x800f
mov dword [esp + 8], 0x8010
mov dword [esp + 4], 0x800d
mov dword [esp], eax
call dword [sym.imp.user32.dll_CheckMenuRadioItem]
mov eax, dword [0x4117d0]
sub esp, 0x14
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [sym.imp.user32.dll_KillTimer]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xfa0
jmp 0x40e54e
mov eax, dword [0x4117d0]
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetMenu]
mov ebx, dword [sym.imp.user32.dll_GetSubMenu]
sub esp, 4
mov dword [esp + 4], 2
mov dword [esp], eax
call ebx
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], eax
call ebx
mov dword [0x411628], 2
sub esp, 8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x800e
mov dword [esp + 8], 0x8010
mov dword [esp + 4], 0x800d
mov dword [esp], eax
call dword [sym.imp.user32.dll_CheckMenuRadioItem]
mov eax, dword [0x4117d0]
sub esp, 0x14
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [sym.imp.user32.dll_KillTimer]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x7d0
jmp 0x40e54e
mov edi, dword [ebx + 4]
mov eax, dword [ebx + 0xc]
mov ecx, dword [0x411880]
sub eax, edi
mov dword [ebp - 0x23c], eax
mov eax, 1
cmp ecx, dword [ebp - 0x23c]
jle 0x40d5da
lea edx, [ecx + edi]
mov dword [ebx + 0xc], edx
jmp 0x40d5da
mov dword [esp + 0xc], 0x801d
jmp 0x40dc53
mov dword [esp + 8], 0
mov dword [esp + 4], 0x801c
mov dword [esp], esi
call ebx
sub esp, 0xc
jmp 0x40dbe1
mov dword [esp + 8], 0
jmp 0x40db59
mov dword [esp + 8], 0
jmp 0x40db2e
mov dword [esp + 8], 0
jmp 0x40db03
mov eax, dword [ebp - 0x240]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x8005
mov ebx, dword [sym.imp.user32.dll_CheckMenuItem]
mov dword [esp], eax
call ebx
sub esp, 0xc
mov dword [esp + 0x18], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xfffffffe
mov dword [esp], edi
call dword [sym.imp.user32.dll_SetWindowPos]
sub esp, 0x1c
jmp 0x40daed
mov dword [ebp - 0x228], 0x64
mov eax, 3
mov dword [ebp - 0x224], 0xd2
mov dword [ebp - 0x220], ecx
jmp 0x40e13a
mov dword [esp + 0xc], 0x800c
jmp 0x40db99
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x800a
jmp 0x40db99
mov dword [esp + 4], 3
mov dword [esp], edi
call dword [sym.imp.user32.dll_ShowWindow]
sub esp, 8
jmp 0x40da17
call dword [sym.imp.user32.dll_SetMenuDefaultItem]
sub esp, 0xc
jmp 0x40d57a
mov dword [esp + 0xc], 0x800f
jmp 0x40dc11
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.user32.dll_EndDialog]
mov eax, 1
sub esp, 8
jmp 0x40d5da
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x3e8
mov dword [esp + 4], 1
mov dword [esp], edi
call dword [sym.imp.user32.dll_SetTimer]
sub esp, 0x10
jmp 0x40dd33
mov dword [esp + 0xc], 0x800d
jmp 0x40dc11
mov dword [esp + 0xc], 0x800e
jmp 0x40dc11
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x7d0
mov dword [esp + 4], 1
mov dword [esp], edi
call dword [sym.imp.user32.dll_SetTimer]
sub esp, 0x10
jmp 0x40dd33
mov dword [esp + 8], 8
mov dword [esp + 4], 0x8005
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckMenuItem]
sub esp, 0xc
jmp 0x40d582
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xfa0
mov dword [esp + 4], 1
mov dword [esp], edi
call dword [sym.imp.user32.dll_SetTimer]
sub esp, 0x10
jmp 0x40dd33
cmp eax, dword [ebp - 0x23c]
jle 0x40e018
jmp 0x40e00d