Function at 0x4435a5
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x4e0
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetScrollPos]
push edi
xor ebx, ebx
push ebx
push dword [0x50e688]
call esi
xor edi, edi
inc edi
push edi
push dword [0x50e688]
mov dword [ebp + 0x64], eax
call esi
mov dword [ebp + 0x60], eax
mov eax, dword [ebp + 0x78]
cmp eax, dword [0x50e694]
je 0x44492d
cmp eax, dword [0x50e69c]
je 0x44492d
mov edx, dword [0x50e6a4]
cmp eax, edx
jne 0x443652
cmp dword [ebp + 0x7c], 0x300
jne 0x443652
push edx
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov esi, eax
cmp esi, ebx
je 0x443625
cmp dword [0x51a348], ebx
jne 0x44361e
cmp esi, 3
jg 0x443625
mov edi, 0x1f4
jmp 0x443628
push 0x64
pop edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x439e0b
push edi
push 0x19091969
push dword [ebp + 0x70]
mov dword [0x50e650], eax
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x51a348], esi
jmp 0x4449d8
cmp eax, dword [0x50e6b0]
jne 0x443665
push ebx
call fcn.0043cd82
jmp 0x4449d8
cmp eax, dword [0x50e6b4]
jne 0x443670
push edi
jmp 0x44365b
cmp eax, dword [0x50e688]
jne 0x44367f
mov eax, edi
jmp 0x4449da
mov esi, dword [ebp + 0x74]
mov ecx, 0x9d83
cmp esi, ecx
jg 0x443c0b
je 0x443bf4
lea eax, [ecx - 0x71]
cmp esi, eax
jg 0x44385b
je case.0x444492.41012
add eax, 0xffffffa7
cmp esi, eax
jg 0x4437f8
je 0x4437ee
mov eax, 0x9ca4
cmp esi, eax
jg 0x44378f
je 0x44377d
mov eax, esi
dec eax
je 0x443758
dec eax
je 0x443754
sub eax, 5
je case.0x444492.41017
sub eax, 0x9c84
jne case.0x444492.41018
mov esi, 0x50e730
push esi
call fcn.00427c81
push 0
push 0x427cad
push dword [ebp + 0x70]
push 0xbb8
push dword [0x50e678]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne case.0x444492.41017
push esi
call fcn.00427c97
mov eax, dword [0x50e734]
shr eax, 8
dec eax
mov dword [0x4a5b10], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 1
push 0xfade
push 0x113
push dword [0x50e67c]
mov dword [0x50efec], eax
call fcn.0043c86f
jmp case.0x444492.41017
push ebx
push edi
jmp 0x44376d
push 0xd
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge case.0x444492.41017
push 0
push 0
push 0x1116
push dword [0x50e684]
jmp 0x44465a
push ebx
push ebx
push 0x10
push dword [ebp + 0x70]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp case.0x444492.41017
mov eax, esi
sub eax, 0x9cae
je 0x443b23
sub eax, 5
je 0x4437b4
sub eax, 5
jne case.default.0x444492
call fcn.0043e8fa
jmp case.0x444492.41017
push ebx
push ebx
push 0x7f02
call fcn.00435888
call fcn.004339dc
push 0x4551b0
push 0x50da48
call fcn.00429a32
test eax, eax
je 0x444328
push ebx
push ebx
push 0x10
push dword [ebp + 0x70]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x444328
call fcn.0043ea3d
jmp case.0x444492.41017
mov eax, esi
sub eax, 0x9cbd
je case.0x444492.41016
dec eax
je case.0x444492.41017
dec eax
je case.0x444492.41015
sub eax, 0x49
je 0x44384b
dec eax
je 0x443835
dec eax
je 0x44382d
dec eax
jne case.0x444492.41018
push dword [0x50efe8]
jmp 0x44383b
push dword [0x50efe8]
jmp 0x443851
push dword [0x50efe0]
push dword [0x50e684]
call fcn.0043bd01
jmp case.0x444492.41017
push dword [0x50efe0]
call fcn.004362e8
jmp case.0x444492.41017
mov ecx, 0x9d7a
cmp esi, ecx
jg 0x443a4e
je 0x4439cb
mov eax, esi
sub eax, 0x9d13
je case.0x444492.41013
sub eax, 0x59
je 0x4439ab
sub eax, 5
je 0x44397a
dec eax
je 0x443962
dec eax
je 0x44394a
sub eax, 3
je 0x443932
sub eax, 3
jne case.default.0x444492
cmp dword [0x510c7c], ebx
sete al
push eax
push 0x9d79
mov dword [0x510c7c], eax
call fcn.00433fde
mov eax, dword [0x510c40]
cmp eax, ebx
je case.0x444492.41017
xor edi, edi
cmp dword [eax + 0xc], edi
jle case.0x444492.41017
push 0x14
pop esi
mov ecx, dword [esi + eax]
test ecx, ecx
je 0x443924
mov edx, dword [ecx + 0x18]
cmp edx, 9
jne 0x443900
cmp dword [ecx + 0x1154], ebx
je 0x443900
cmp dword [ecx + 0x1148], ebx
jne 0x443918
cmp edx, 1
jne 0x443924
mov edx, dword [ecx + 0x1154]
test edx, edx
je 0x443924
cmp dword [edx + 0x3ab4], 1
jne 0x443924
push 1
call fcn.0040b963
mov eax, dword [0x510c40]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x4438e1
jmp case.0x444492.41017
xor eax, eax
cmp dword [0x510c78], ebx
sete al
push eax
mov dword [0x510c78], eax
push 0x9d76
jmp 0x443990
xor eax, eax
cmp dword [0x510c5c], ebx
sete al
push eax
mov dword [0x510c5c], eax
push 0x9d73
jmp 0x443990
xor eax, eax
cmp dword [0x510c58], ebx
sete al
push eax
mov dword [0x510c58], eax
push 0x9d72
jmp 0x443990
xor eax, eax
cmp dword [0x510c54], ebx
sete al
push eax
mov dword [0x510c54], eax
push 0x9d71
call fcn.00433fde
mov dword [0x50f00c], ebx
mov dword [0x50f010], ebx
call fcn.00417993
jmp case.0x444492.41017
xor eax, eax
cmp dword [0x4a5b28], ebx
sete al
push eax
mov dword [0x4a5b28], eax
push 0x9d6c
call fcn.00433fde
jmp case.0x444492.41017
xor eax, eax
cmp dword [0x510c80], ebx
sete al
push eax
push ecx
mov dword [0x510c80], eax
call fcn.00433fde
mov eax, dword [0x510c40]
cmp eax, ebx
je case.0x444492.41017
xor edi, edi
cmp dword [eax + 0xc], edi
jle case.0x444492.41017
push 0x14
pop esi
mov ecx, dword [esi + eax]
test ecx, ecx
je 0x443a40
mov edx, dword [ecx + 0x18]
cmp edx, 9
jne 0x443a1c
cmp dword [ecx + 0x1154], ebx
je 0x443a1c
cmp dword [ecx + 0x1148], ebx
jne 0x443a34
cmp edx, 1
jne 0x443a40
mov edx, dword [ecx + 0x1154]
test edx, edx
je 0x443a40
cmp dword [edx + 0x3ab4], 1
jne 0x443a40
push 1
call fcn.0040b963
mov eax, dword [0x510c40]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x4439fd
jmp case.0x444492.41017
mov eax, esi
mov ecx, 0x9d7b
sub eax, ecx
je 0x443bd2
dec eax
je 0x443bba
dec eax
je 0x443b4d
dec eax
je 0x443b08
dec eax
dec eax
je 0x443aca
dec eax
je 0x443a99
dec eax
jne case.default.0x444492
cmp dword [0x4a5b30], ebx
sete al
push eax
mov dword [0x4a5b30], eax
push 0x9d82
jmp 0x4439c1
xor eax, eax
cmp dword [0x510c6c], ebx
sete al
push eax
push 0x9d81
mov dword [0x510c6c], eax
call fcn.00433fde
cmp dword [0x510c6c], ebx
jne 0x443afe
push ebx
mov dword [0x510c68], ebx
push 0x9d80
jmp 0x443af9
xor eax, eax
cmp dword [0x510c68], ebx
sete al
push eax
push 0x9d80
mov dword [0x510c68], eax
call fcn.00433fde
cmp dword [0x510c68], ebx
je 0x443afe
push edi
mov dword [0x510c6c], edi
push 0x9d81
call fcn.00433fde
call fcn.0043dedd
jmp case.0x444492.41017
xor eax, eax
cmp dword [0x4a5b38], ebx
sete al
push eax
push 0x9d7e
mov dword [0x4a5b38], eax
call fcn.00433fde
cmp dword [0x50e628], ebx
jne case.0x444492.41017
push str.Refresh...
push 0
push 1
push dword [0x50eff4]
call fcn.00405f8f
add esp, 0x10
push 0
jmp 0x443bea
xor eax, eax
cmp dword [0x510c84], ebx
sete al
push eax
push 0x9d7d
mov dword [0x510c84], eax
call fcn.00433fde
mov eax, dword [0x510c40]
cmp eax, ebx
je case.0x444492.41017
xor edi, edi
cmp dword [eax + 0xc], edi
jle case.0x444492.41017
push 0x14
pop esi
mov ecx, dword [esi + eax]
test ecx, ecx
je 0x443bac
cmp dword [ecx + 0x1154], ebx
je 0x443bac
cmp dword [ecx + 0x1148], ebx
jne 0x443ba0
cmp dword [ecx + 0x18], 4
jne 0x443bac
push 1
call fcn.0040b963
mov eax, dword [0x510c40]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x443b83
jmp case.0x444492.41017
xor eax, eax
cmp dword [0x510c90], ebx
sete al
push eax
mov dword [0x510c90], eax
push 0x9d7c
jmp 0x443be4
xor eax, eax
cmp dword [0x510c8c], ebx
sete al
push eax
mov dword [0x510c8c], eax
push ecx
call fcn.00433fde
push ebx
call fcn.0043e217
jmp case.0x444492.41017
xor eax, eax
cmp dword [0x4a5b34], ebx
sete al
mov dword [0x4a5b34], eax
push eax
push ecx
jmp 0x4439c1
mov eax, 0xa032
cmp esi, eax
jg 0x444463
je 0x444609
mov eax, 0x9dab
cmp esi, eax
jg 0x44426a
je 0x444162
lea ecx, [eax - 0x15]
cmp esi, ecx
jg 0x443d9e
add eax, 0xffffffe9
cmp esi, eax
jge 0x443d19
add ecx, 0xffffffee
cmp esi, ecx
je 0x443d04
mov ecx, 0x9d85
cmp esi, ecx
je 0x443cef
inc ecx
cmp esi, ecx
je 0x443cd8
cmp esi, 0x9d89
jle case.default.0x444492
mov eax, 0x9d8b
cmp esi, eax
jg case.default.0x444492
xor ecx, ecx
cmp esi, eax
sete cl
push eax
push 0x9d8a
push esi
mov dword [0x510c88], ecx
call fcn.00434028
mov eax, dword [0x510c40]
cmp eax, ebx
je case.0x444492.41017
xor edi, edi
cmp dword [eax + 0xc], edi
jle case.0x444492.41017
push 0x14
pop esi
mov ecx, dword [esi + eax]
test ecx, ecx
je 0x443cca
cmp dword [ecx + 0x18], 6
jl 0x443cca
push 1
call fcn.0040b963
mov eax, dword [0x510c40]
inc edi
add esi, 4
cmp edi, dword [eax + 0xc]
jl 0x443cb1
jmp case.0x444492.41017
xor eax, eax
cmp dword [0x4a5b2c], ebx
sete al
push eax
mov dword [0x4a5b2c], eax
push ecx
jmp 0x443af9
xor eax, eax
cmp dword [0x510c74], ebx
sete al
mov dword [0x510c74], eax
jmp 0x443c04
xor eax, eax
cmp dword [0x510c70], ebx
sete al
mov dword [0x510c70], eax
jmp 0x443c04
push ecx
push eax
lea edx, [esi - 0x9d94]
push esi
mov dword [0x4a5b3c], edx
call fcn.00434028
mov eax, dword [0x510c40]
cmp eax, ebx
je 0x443d93
cmp dword [eax + 0xc], ebx
mov dword [ebp + 0x78], ebx
jle 0x443d93
push 0x14
pop edi
mov esi, dword [edi + eax]
cmp esi, ebx
je 0x443d85
mov ecx, dword [esi + 0x18]
cmp ecx, 6
jl 0x443d85
cmp ecx, 7
jle 0x443d5d
add ecx, 0xfffffff7
cmp ecx, 1
ja 0x443d85
lea eax, [esi + 0x24]
push eax
push ebx
push esi
call fcn.0040ac0f
lea eax, [esi + 0x428]
push eax
push 1
push esi
call fcn.0040ac0f
push 1
mov ecx, esi
call fcn.0040b963
mov eax, dword [0x510c40]
inc dword [ebp + 0x78]
mov ecx, dword [ebp + 0x78]
add edi, 4
cmp ecx, dword [eax + 0xc]
jl 0x443d41
push ebx
call fcn.0043dec2
jmp case.0x444492.41017
mov eax, esi
sub eax, 0x9da8
je 0x444081
dec eax
je 0x443e87
dec eax
jne case.default.0x444492
mov eax, dword [0x50e660]
mov eax, dword [eax*4 + 0x50e548]
mov edx, 0x4a5f18
cmp eax, ebx
je 0x443df9
mov ecx, edx
cmp dword [ecx], eax
je 0x443df9
add ecx, 4
cmp ecx, 0x4a5f58
jl 0x443dd0
xor ecx, ecx
cmp dword [ecx*4 + 0x4a5f18], ebx
je 0x443df2
inc ecx
cmp ecx, 0x10
jl 0x443de1
jmp 0x443df9
mov dword [ecx*4 + 0x4a5f18], eax
mov ecx, dword [0x50e67c]
push 0x51a324
mov dword [0x51a324], 0x24
mov dword [0x51a328], ecx
mov dword [0x51a330], eax
mov dword [0x51a334], edx
mov dword [0x51a338], 3
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
test eax, eax
je case.0x444492.41017
push dword [0x51a330]
call fcn.0044ad87
mov ecx, dword [0x50e660]
cmp ecx, eax
je 0x443e5d
push 0x10
push 0x46bfd4
push str.Color_rejected
jmp 0x4442ec
mov eax, dword [0x51a330]
push eax
push 0
push 0x443
push dword [0x50e688]
mov dword [ecx*4 + 0x50e548], eax
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.004363db
jmp case.0x444492.41017
push 0x17
pop ecx
push 0x34
mov ebx, 0x50df80
lea eax, [ebp + 0x2c]
push 0
mov esi, ebx
lea edi, [ebp - 0x78]
push eax
rep movsd dword es:[edi], dword [esi]
mov dword [ebp + 0x24], 0x3c
call fcn.00449c78
mov eax, dword [0x50e67c]
and dword [ebp + 0x2c], 0
and dword [ebp + 0x34], 0
add esp, 0xc
push dword [0x4a5ad4]
mov dword [ebp + 0x28], eax
lea eax, [ebp - 0x78]
mov dword [ebp + 0x30], eax
mov eax, dword [0x50e660]
mov eax, dword [eax*4 + 0x50e03c]
push 0x60
push 8
mov dword [ebp + 0x38], 0x2141
mov dword [ebp + 0x3c], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp + 0x58], eax
mov eax, dword [ebp + 0x30]
mov esi, 0x47c3a4
push esi
add eax, 0x1c
push eax
mov dword [ebp + 0x5c], 0xc8
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x443f48
push 0x3e
push eax
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x1a]
push eax
call fcn.00449c78
add esp, 0xc
push 0x20
lea eax, [ebp - 0x1c]
push eax
push esi
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionFontSubstitutes
push 0x80000002
call fcn.00428e72
test eax, eax
je 0x443f48
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp + 0x30]
add eax, 0x1c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp + 0x24]
push eax
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
test eax, eax
je case.0x444492.41017
push dword [ebp + 0x3c]
call fcn.0044ad59
cmp dword [0x50e660], eax
je 0x443f86
push 0x10
push 0x46bfd4
push str.Color_rejected
push dword [0x50e67c]
call fcn.004514e7
jmp 0x44406b
push str.font
push 1
push 0x7f02
call fcn.00435888
mov eax, dword [ebp + 0x3c]
push 0x17
pop ecx
push eax
push 0
lea esi, [ebp - 0x78]
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x50e660]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x111e
push dword [0x50e684]
mov dword [ecx*4 + 0x50e03c], eax
call esi
push ebx
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push 0
mov edi, eax
push edi
push 0x30
push dword [0x50e684]
call esi
push dword [0x50e6d4]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov esi, dword [0x50e620]
mov dword [0x50e6d4], edi
call fcn.004371dc
cmp dword [0x50e620], esi
je 0x444039
mov eax, dword [0x510c40]
xor esi, esi
inc esi
cmp dword [eax + 0xc], esi
jle 0x444039
push 0x18
pop edi
push dword [edi + eax]
call fcn.004079b7
test eax, eax
je 0x44402b
mov eax, dword [0x510c40]
push dword [edi + eax]
call fcn.0043afeb
mov eax, dword [0x510c40]
inc esi
add edi, 4
cmp esi, dword [eax + 0xc]
jl 0x444012
push dword [0x50efe8]
push dword [0x50e684]
call fcn.0042f6b9
push dword [0x50efe8]
push dword [0x50e684]
call fcn.0042f8ac
push 1
push 0
push dword [0x50e684]
call dword [sym.imp.USER32.dll_InvalidateRect]
push str.font
push 1
push 0x7f00
call fcn.00435888
jmp case.0x444492.41017
push 0x34
lea eax, [ebp + 0x2c]
push ebx
push eax
mov dword [ebp + 0x24], 0x3c
call fcn.00449c78
mov eax, dword [0x50e67c]
add esp, 0xc
push dword [0x4a5ad4]
mov dword [ebp + 0x28], eax
mov eax, dword [0x50e660]
mov eax, dword [eax*4 + 0x50e1f8]
push 0x60
mov esi, 0x50dfe0
push 8
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x30], esi
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], 0x6141
mov dword [ebp + 0x3c], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp + 0x58], eax
lea eax, [ebp + 0x24]
push eax
mov dword [ebp + 0x5c], 0xc8
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
test eax, eax
je case.0x444492.41017
push dword [ebp + 0x3c]
call fcn.0044ad59
cmp dword [0x50e660], eax
jne 0x443e4c
push esi
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push 0
mov esi, eax
push esi
push 0x30
push dword [0x50e688]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [0x50e6d0]
call dword [sym.imp.GDI32.dll_DeleteObject]
push 1
push 0
push dword [0x50e688]
mov dword [0x50e6d0], esi
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp + 0x3c]
mov ecx, dword [0x50e660]
push 1
push eax
push dword [0x50e688]
mov dword [ecx*4 + 0x50e1f8], eax
call fcn.0042a8c3
jmp case.0x444492.41017
mov eax, dword [0x50e660]
shl eax, 2
mov esi, 0x4a5ed8
cmp dword [eax + 0x50e548], ebx
je 0x4441a8
mov edx, dword [eax + 0x50e1f0]
mov ecx, esi
cmp dword [ecx], edx
je 0x4441a8
add ecx, 4
cmp ecx, 0x4a5f18
jl 0x44417f
xor ecx, ecx
cmp dword [ecx*4 + 0x4a5ed8], ebx
je 0x4441a1
inc ecx
cmp ecx, 0x10
jl 0x444190
jmp 0x4441a8
mov dword [ecx*4 + 0x4a5ed8], edx
mov ecx, dword [0x50e67c]
mov eax, dword [eax + 0x50e1f0]
push 0x51a300
mov dword [0x51a300], 0x24
mov dword [0x51a304], ecx
mov dword [0x51a30c], eax
mov dword [0x51a310], esi
mov dword [0x51a314], 3
call dword [sym.imp.COMDLG32.dll_ChooseColorW]
test eax, eax
je case.0x444492.41017
push dword [0x51a30c]
call fcn.0044ad87
mov ecx, dword [0x50e660]
cmp ecx, eax
jne 0x443e4c
mov eax, dword [0x51a30c]
mov dword [ecx*4 + 0x50e1f0], eax
call fcn.004371dc
mov eax, dword [0x50e660]
push dword [eax*4 + 0x50e1f0]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
push edi
push 0x111d
push dword [0x50e684]
call esi
mov eax, dword [0x50e660]
push dword [eax*4 + 0x50e03c]
push edi
push 0x111e
push dword [0x50e684]
call esi
push 0x305
push edi
push edi
push dword [0x50e684]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp case.0x444492.41017
mov ecx, 0x9dc6
cmp esi, ecx
jg 0x444385
je 0x444350
mov eax, esi
add ecx, 0xfffffff7
sub eax, ecx
je 0x44432f
dec eax
je 0x4442ce
sub eax, 3
jne case.default.0x444492
cmp dword [0x510c9c], ebx
sete al
push eax
push 0x9dc1
mov dword [0x510c9c], eax
call fcn.00433fde
push 0x50dcd0
push dword [0x510c9c]
push str.OneInstance
push 0x4598c8
call fcn.0042a740
jmp case.0x444492.41017
cmp dword [0x50e660], ebx
jne 0x4442fc
call fcn.0042cf89
cmp eax, 0x20
je 0x4442fc
push 0x10
push 0x46bfd4
push str.Dark_Mode_needs_32_bits_per_pixel
push dword [0x50e67c]
call fcn.004514e7
jmp case.0x444492.41017
xor eax, eax
cmp dword [0x50e660], ebx
sete al
push eax
push 0x9dbe
mov dword [0x50e660], eax
call fcn.00433fde
push ebx
push ebx
push 0x7f02
call fcn.00435888
call fcn.00438ef5
push ebx
push ebx
jmp 0x444072
xor eax, eax
cmp dword [0x4a5b44], ebx
sete al
push eax
push ecx
mov dword [0x4a5b44], eax
call fcn.00433fde
call fcn.004340a0
jmp case.0x444492.41017
xor eax, eax
cmp dword [0x510c98], ebx
sete al
push eax
push ecx
mov dword [0x510c98], eax
call fcn.00433fde
xor eax, eax
cmp dword [0x510c98], ebx
setne al
dec eax
dec eax
push eax
push dword [0x50e67c]
call fcn.0042b82c
jmp case.0x444492.41017
mov eax, 0x9dd0
cmp esi, eax
jl case.default.0x444492
cmp esi, 0x9dd3
jle 0x4443f5
cmp esi, 0x9fc4
je 0x4443ca
cmp esi, 0x9fc5
jne case.default.0x444492
push dword [0x50e67c]
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
push 0x43aa56
push dword [0x50e67c]
push 0x67
jmp 0x4443e4
push dword [0x50e67c]
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
push 0x43a661
push dword [0x50e67c]
push 0x66
push dword [0x50e678]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.0x444492.41017
sub esi, eax
mov ecx, str.calc.exe
mov ebx, 0x4551b0
je 0x444429
dec esi
je 0x444422
dec esi
je 0x444418
dec esi
jne 0x444433
mov ecx, str.control.exe
mov ebx, str.ncpa.cpl
jmp 0x444433
push 3
mov ecx, str.eventvwr.exe
pop edi
jmp 0x444433
mov ebx, str.devmgmt.msc
jmp 0x44442e
mov ebx, str.diskmgmt.msc
mov ecx, str.mmc.exe
push ecx
mov esi, 0x50dc50
push esi
lea eax, [ebp - 0x280]
push 0x455344
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push edi
push esi
push ebx
lea eax, [ebp - 0x280]
push eax
call fcn.0042d793
jmp case.0x444492.41017
cmp esi, 0xa48b
mov edi, 0xa488
jg 0x4445f0
cmp esi, edi
jge 0x444798
lea eax, [esi - 0xa033]
cmp eax, 0x14
ja case.default.0x444492
movzx eax, byte [eax + 0x444a15]
jmp dword [eax*4 + 0x4449e5]
push edx
push dword [0x50e67c]
call fcn.0042a84d
jmp case.0x444492.41017
push dword [0x50e694]
push dword [0x50e67c]
call fcn.0042a84d
push 0
push 1
push 0x14f
push dword [0x50e694]
jmp 0x44465a
push dword [0x50e69c]
push dword [0x50e67c]
call fcn.0042a84d
push 0
push 1
push 0x14f
push dword [0x50e69c]
jmp 0x44465a
push 0
call fcn.0043cd82
jmp case.0x444492.41017
push 1
jmp 0x4444f6
call fcn.0043ee3f
jmp case.0x444492.41017
call fcn.0043bbf5
jmp case.0x444492.41017
push dword [0x50efe0]
call fcn.0043ef98
jmp case.0x444492.41017
push dword [0x50efe8]
call fcn.0043577c
push dword [eax + 8]
jmp 0x44451e
mov esi, dword [sym.imp.USER32.dll_GetFocus]
call esi
mov edi, eax
push 0x20
lea eax, [ebp - 0x1c]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
push str.Tree
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x444589
push dword [0x50efe8]
call fcn.0043577c
test eax, eax
je case.0x444492.41017
push 1
push dword [eax + 0x828]
call fcn.0042f9e2
jmp case.0x444492.41017
call esi
cmp eax, dword [0x50e6bc]
jne 0x4445a2
push 0
push 0
push 0x301
push edi
jmp 0x44465a
call esi
cmp eax, dword [0x50e6a4]
je 0x444593
cmp edi, dword [0x50e688]
jne case.0x444492.41017
xor ebx, ebx
push dword [0x50efe8]
call fcn.0043577c
cmp eax, ebx
jne 0x4446f6
push str.Dlg_OnCommand
push 0x1452
push str..UsbTreeView.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.0044fe2e
add esp, 0x14
jmp 0x4448d8
mov eax, esi
sub eax, 0xa492
je 0x444798
sub eax, 0x366
je 0x4445ba
sub eax, 3
jne case.default.0x444492
call dword [sym.imp.USER32.dll_GetFocus]
mov esi, eax
push 0x20
lea eax, [ebp + 0x40]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClassNameA]
cmp esi, ebx
je case.0x444492.41017
push 0x47c220
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x444650
push str.Rich
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je case.0x444492.41017
push 0xffffffffffffffff
push 0
push 0xb1
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x444492.41017
xor ebx, ebx
mov edi, dword [sym.imp.USER32.dll_GetMenuStringW]
lea eax, [esi - 0xa4d8]
cmp eax, 0x62
ja 0x4446a5
push ebx
push 0x104
lea eax, [ebp - 0x280]
push eax
push esi
push dword [0x510cdc]
call edi
test eax, eax
je 0x4446a5
push ebx
lea eax, [ebp - 0x280]
push eax
call fcn.0042bcb4
push eax
call fcn.0042f9e2
lea eax, [esi - 0xa53c]
cmp eax, 0x62
ja case.0x444492.41017
push dword [0x50e67c]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0
push 0x200
lea eax, [ebp - 0x478]
push eax
push esi
push dword [0x510ce0]
call edi
test eax, eax
je case.0x444492.41017
lea eax, [ebp - 0x478]
push eax
call fcn.0042bcb4
push eax
call fcn.004307b3
jmp case.0x444492.41017
mov ebx, dword [eax + 0xc74]
test ebx, ebx
je case.0x444492.41017
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push ebx
call edi
test eax, eax
je case.0x444492.41017
and dword [ebp + 0x78], 0
and dword [ebp + 0x70], 0
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x78]
push eax
push 0xb0
push dword [0x50e688]
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [ebp + 0x70]
mov eax, dword [ebp + 0x78]
cmp esi, eax
jle case.0x444492.41017
sub esi, eax
lea eax, [ebx + eax*2]
push eax
call edi
cmp eax, esi
jge 0x444752
mov esi, eax
xor ecx, ecx
push 2
pop edx
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00449e38
mov edi, eax
mov eax, dword [ebp + 0x78]
add esi, esi
push esi
lea eax, [ebx + eax*2]
push eax
push edi
call fcn.00449ce2
add esp, 0x10
push 1
xor eax, eax
push edi
mov word [esi + edi], ax
call fcn.0042f9e2
push edi
call fcn.00449e73
pop ecx
jmp case.0x444492.41017
push dword [0x50efe8]
call fcn.0043577c
cmp esi, edi
mov dword [ebp + 0x70], eax
mov eax, dword [eax + 0x1154]
mov dword [ebp + 0x78], ebx
jl 0x4447cb
cmp esi, 0xa489
jle 0x444824
cmp esi, 0xa48a
je 0x4447fd
cmp esi, 0xa492
je 0x444824
push str.Dlg_OnCommand
push ebx
push 0x7f8a
call fcn.00435888
mov eax, esi
sub eax, edi
mov ecx, 0x44fa76
je 0x444851
dec eax
je 0x444848
dec eax
je 0x44483f
dec eax
je 0x444836
sub eax, 7
jne 0x444854
mov dword [ebp + 0x78], 0x44dd26
jmp 0x444854
mov eax, dword [ebp + 0x70]
cmp dword [eax + 0x1148], ebx
jne 0x4447cb
push 0x30
push 0x46bfd4
push str.Oops__no_port
push dword [0x50e67c]
call fcn.0045149d
jmp case.0x444492.41017
cmp eax, ebx
jne 0x4447cb
push 0x30
push 0x46bfd4
push str.Oops__no_device
jmp 0x444814
mov dword [ebp + 0x78], 0x44dd21
jmp 0x444854
mov dword [ebp + 0x78], 0x44daea
jmp 0x444854
mov dword [ebp + 0x78], 0x44d9ed
jmp 0x444854
mov dword [ebp + 0x78], ecx
mov eax, dword [ebp + 0x70]
mov eax, dword [eax + 0x1154]
cmp eax, ebx
je 0x444866
mov edi, dword [eax + 0x10]
jmp 0x444868
xor edi, edi
cmp dword [ebp + 0x78], ecx
jne 0x44488c
cmp dword [eax + 0x3a74], ebx
jne 0x44487e
cmp word [eax + 0xc30], bx
jne 0x44488c
push ebx
push dword [ebp + 0x70]
push 0x443406
call fcn.004292b9
cmp dword [ebp + 0x78], 0x44d9ed
je 0x44489e
cmp dword [ebp + 0x78], 0x44daea
jne 0x4448b9
cmp edi, ebx
je 0x4448b9
push 0x43f5da
push 0xbb8
push edi
push dword [0x50e67c]
call dword [sym.imp.USER32.dll_SetTimer]
cmp esi, 0xa492
jne 0x4448cc
push dword [0x50e67c]
call fcn.004363c8
push ebx
push dword [ebp + 0x70]
push dword [ebp + 0x78]
call fcn.004292b9
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [sym.imp.USER32.dll_GetScrollPos]
push 0
push dword [0x50e688]
call esi
cmp dword [ebp + 0x64], eax
je 0x444905
push dword [ebp + 0x64]
push 0
push dword [0x50e688]
call fcn.00429702
push 1
push dword [0x50e688]
call esi
cmp dword [ebp + 0x60], eax
je 0x4449d8
push dword [ebp + 0x60]
push 1
push dword [0x50e688]
call fcn.00429702
jmp 0x4449d8
cmp dword [ebp + 0x7c], 9
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x4449bd
push ebx
push ebx
push 0x147
push eax
call esi
push ebx
push eax
mov edi, 0x150
push edi
push dword [ebp + 0x78]
mov dword [ebp + 0x70], eax
call esi
push ebx
push dword [ebp + 0x70]
push edi
push dword [ebp + 0x78]
call esi
mov edi, eax
push edi
mov dword [ebp + 0x70], edi
call fcn.004079b7
test eax, eax
je 0x4449ba
cmp dword [edi + 8], ebx
je 0x4449ba
push dword [0x50e67c]
mov edi, dword [sym.imp.USER32.dll_UpdateWindow]
call edi
mov ecx, dword [ebp + 0x70]
push ebx
call fcn.0040bed6
push dword [0x50e684]
push dword [0x50e67c]
call fcn.0042a84d
push dword [0x50e684]
call edi
mov eax, dword [ebp + 0x70]
push dword [eax + 8]
push 9
push 0x110b
push dword [0x50e684]
call esi
mov eax, dword [ebp + 0x78]
mov ecx, dword [0x50e694]
cmp eax, ecx
mov eax, dword [0x50e69c]
je 0x4449ce
mov eax, ecx
push ebx
push ebx
push 0x14e
push eax
call esi
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10