Function at 0x441d40
Capabilities:
Get common file path
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x454af9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2cc
mov eax, dword [ebp + 8]
mov dword [0x464bbc], eax
mov dword [ebp - 0x1e4], 0xff
mov dword [ebp - 0x1e8], 8
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
lea ecx, [ebp - 0x1e8]
push ecx
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov dword [ebp - 0x1b8], 0
mov dword [0x464b0c], 0
mov edx, dword [0x464b0c]
mov dword [0x464b10], edx
mov byte [ebp - 0x1ad], 1
mov dword [ebp - 0x1bc], 0
push 0x464a74
call dword [sym.imp.KERNEL32.DLL_InitializeCriticalSection]
call fcn.00426f00
push 0x200
call fcn.00438ba0
add esp, 4
mov dword [0x464b38], eax
push 0x200
call fcn.00438ba0
add esp, 4
mov dword [0x464b40], eax
push 0x104
call fcn.00438ba0
add esp, 4
mov dword [0x464b2c], eax
push 0x104
call fcn.00438ba0
add esp, 4
mov dword [0x464b28], eax
push 6
call fcn.00438ba0
add esp, 4
mov dword [0x464b30], eax
push 0x200
call fcn.00438ba0
add esp, 4
mov dword [0x464b08], eax
push 0x200
call fcn.00438ba0
add esp, 4
mov dword [0x464b24], eax
push 0x40
call fcn.00438ba0
add esp, 4
mov dword [0x464b20], eax
push 0x40
call fcn.00438ba0
add esp, 4
mov dword [0x464b1c], eax
push 0x200
call fcn.00438ba0
add esp, 4
mov dword [0x464b18], eax
push 0x200
call fcn.00438ba0
add esp, 4
mov dword [0x464b14], eax
push 0x200
call fcn.00438ba0
add esp, 4
mov dword [0x464b00], eax
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
mov dword [0x464bac], eax
call dword [sym.imp.KERNEL32.DLL_GetCurrentProcessId]
mov dword [0x464ba8], eax
mov eax, dword [0x464b08]
push eax
push 0x200
call dword [sym.imp.KERNEL32.DLL_GetTempPathA]
push 0x200
mov ecx, dword [0x464b40]
push ecx
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameA]
push 0x200
mov edx, dword [0x464b38]
push edx
mov eax, dword [0x464b40]
push eax
call fcn.00421640
add esp, 0xc
call fcn.0043f4b0
mov dword [0x464b04], 0
mov ecx, dword [0x464b1c]
push ecx
mov edx, dword [0x464b20]
push edx
mov eax, dword [0x464b30]
push eax
mov ecx, dword [0x464b40]
push ecx
call fcn.0044d140
add esp, 0x10
movzx edx, al
test edx, edx
jne 0x441f87
push 6
push 0
mov eax, dword [0x464b30]
push eax
call fcn.00409d10
add esp, 0xc
push 5
push 0x30
mov ecx, dword [0x464b30]
push ecx
call fcn.00409d10
add esp, 0xc
push 0x22
mov ecx, dword [0x464e9c]
call fcn.0043a670
push eax
mov edx, dword [0x464b20]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push 0x16
mov ecx, dword [0x464e9c]
call fcn.0043a670
push eax
mov eax, dword [0x464b1c]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push 0x104
mov ecx, dword [0x464b2c]
push ecx
mov edx, dword [0x464b40]
push edx
call fcn.0044b280
add esp, 0xc
cmp dword [0x464b40], 0
je 0x441ffa
mov eax, dword [0x464b40]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
mov dword [ebp - 0x1ec], eax
mov ecx, dword [ebp - 0x1ec]
add ecx, 1
push ecx
call fcn.00438be0
add esp, 4
mov dword [0x464b3c], eax
mov edx, dword [ebp - 0x1ec]
add edx, 1
push edx
mov eax, dword [0x464b3c]
push eax
mov ecx, dword [ebp - 0x1ec]
push ecx
mov edx, dword [0x464b40]
push edx
call fcn.00423980
add esp, 0x10
cmp dword [0x464b38], 0
je 0x442052
mov eax, dword [0x464b38]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
mov dword [ebp - 0x1f0], eax
mov ecx, dword [ebp - 0x1f0]
add ecx, 1
push ecx
call fcn.00438be0
add esp, 4
mov dword [0x464b34], eax
mov edx, dword [ebp - 0x1f0]
add edx, 1
push edx
mov eax, dword [0x464b34]
push eax
mov ecx, dword [ebp - 0x1f0]
push ecx
mov edx, dword [0x464b38]
push edx
call fcn.00423980
add esp, 0x10
call fcn.0043a100
mov eax, dword [0x464b2c]
push eax
mov ecx, dword [0x464b38]
push ecx
call fcn.004264f0
add esp, 8
call fcn.00438af0
call fcn.00426f30
call fcn.0044b1f0
call fcn.0044b1b0
mov edx, dword [0x464b2c]
push edx
call fcn.004267c0
add esp, 4
push 0x40
call fcn.00409db0
add esp, 4
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x1fc], 0
je 0x4420c2
mov ecx, dword [ebp - 0x1fc]
call fcn.00439240
mov dword [ebp - 0x26c], eax
jmp 0x4420cc
mov dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1f8]
mov dword [0x464a90], ecx
call fcn.0043f240
call fcn.0043e2e0
call fcn.0044c9a0
mov ecx, 0x464f74
call fcn.0043c790
movzx edx, al
test edx, edx
jne 0x442110
call fcn.0043f190
call fcn.0043e290
cmp eax, 1
jne 0x442144
push 0x23
mov ecx, dword [0x464e9c]
call fcn.0043a670
push eax
call fcn.00423830
add esp, 4
movzx eax, al
test eax, eax
jne 0x442144
call fcn.0043ef10
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
push 1
mov ecx, dword [0x464bbc]
push ecx
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [0x464bb8], eax
push 1
mov edx, dword [0x464bbc]
push edx
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [0x464bb4], eax
lea ecx, [ebp - 0x20]
call fcn.0043d8f0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1ac]
call fcn.00401460
mov byte [ebp - 4], 2
push 0x1b8
call fcn.00409db0
add esp, 4
mov dword [ebp - 0x204], eax
mov byte [ebp - 4], 3
cmp dword [ebp - 0x204], 0
je 0x4421bd
mov ecx, dword [ebp - 0x204]
call fcn.00402e60
mov dword [ebp - 0x270], eax
jmp 0x4421c7
mov dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x200], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x200]
mov dword [0x464b68], ecx
push 0xbb4
call fcn.00409db0
add esp, 4
mov dword [ebp - 0x20c], eax
mov byte [ebp - 4], 4
cmp dword [ebp - 0x20c], 0
je 0x442216
mov ecx, dword [ebp - 0x20c]
call fcn.0043aed0
mov dword [ebp - 0x274], eax
jmp 0x442220
mov dword [ebp - 0x274], 0
mov edx, dword [ebp - 0x274]
mov dword [ebp - 0x208], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x208]
mov dword [0x464e98], eax
push 0x20a
call fcn.00421760
add esp, 4
push eax
mov ecx, dword [0x464e98]
call fcn.0043b360
push 0
mov ecx, dword [0x464e9c]
call fcn.0043a670
push eax
mov ecx, dword [0x464e98]
add ecx, 0x388
push ecx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push 1
mov ecx, dword [0x464e9c]
call fcn.0043a670
push eax
mov edx, dword [0x464e98]
add edx, 0x48c
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push 5
mov ecx, dword [0x464e9c]
call fcn.0043a670
push eax
mov eax, dword [0x464e98]
add eax, 0x59c
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push 0
mov ecx, dword [0x464e9c]
call fcn.0043a670
push eax
mov ecx, dword [0x464e98]
add ecx, 0xab0
push ecx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov dword [0x464bb0], eax
push 0
mov ecx, dword [0x464b68]
call fcn.0042dd60
push 0x232
push 0x2f0
push 0
push 0
push str.Caption
push str.General
mov ecx, dword [0x464e98]
call fcn.0043afc0
push eax
push str.TaskBar
push str.General
mov ecx, dword [0x464e98]
call fcn.0043afc0
push eax
push 0
push 0
mov edx, dword [0x464b68]
mov eax, dword [edx]
mov ecx, dword [0x464b68]
mov edx, dword [eax + 0x8c]
call edx
mov dword [0x464afc], eax
call fcn.0044b040
push 0
mov ecx, 0x464a8c
call fcn.00401030
push 0x204
call fcn.00421760
add esp, 4
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x278], edx
mov eax, dword [ebp - 0x27c]
or eax, dword [ebp - 0x278]
jne 0x442464
mov ecx, 0x464f74
call fcn.0043c790
movzx ecx, al
test ecx, ecx
jne 0x4423b2
push fcn.00441ad0
push 0x57e40
push 0x8266
mov edx, dword [0x464afc]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, dword [0x464b68]
call fcn.004200c0
push 0x20
push 0x20
push 1
call fcn.00422220
add esp, 0xc
mov ecx, dword [0x464b68]
mov dword [ecx + 0x70], eax
mov ecx, dword [0x464b68]
call fcn.00440350
mov edx, dword [0x464b68]
mov byte [edx + 0x9e], 0
mov ecx, dword [0x464b68]
call fcn.004015b0
mov dword [ebp - 0x66], eax
mov eax, dword [0x464bb4]
push eax
push 1
push 0x80
mov ecx, dword [0x464afc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [0x464bb8]
push edx
push 0
push 0x80
mov eax, dword [0x464afc]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 1
push 0x204
call fcn.00425260
add esp, 0xc
mov ecx, dword [0x464b68]
cmp dword [ecx + 0x19c], 0
je 0x44245f
mov edx, dword [0x464b68]
mov ecx, dword [edx + 0x19c]
call fcn.00427e70
jmp 0x4427cf
mov byte [0x463a32], 0
mov al, byte [0x463a32]
mov byte [0x463a27], al
push 0x207
call fcn.00421760
add esp, 4
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x280], edx
mov ecx, dword [ebp - 0x284]
or ecx, dword [ebp - 0x280]
jne 0x4424b7
push 0
push 1
push 0x207
call fcn.00425260
add esp, 0xc
push 1
call fcn.0044d630
add esp, 4
mov ecx, dword [0x464b68]
call fcn.004200c0
push 0x20
push 0x20
push 1
call fcn.00422220
add esp, 0xc
mov edx, dword [0x464b68]
mov dword [edx + 0x70], eax
mov ecx, dword [0x464b68]
call fcn.00440350
mov ecx, dword [0x464b68]
call fcn.004015b0
mov dword [ebp - 0x66], eax
mov eax, dword [0x464bb4]
push eax
push 1
push 0x80
mov ecx, dword [0x464afc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [0x464bb8]
push edx
push 0
push 0x80
mov eax, dword [0x464afc]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, 0x464f74
call fcn.0043c790
movzx ecx, al
test ecx, ecx
jne 0x442678
push 0
push 1
push 0x201
call fcn.00425260
add esp, 0xc
push 0
push 0
push 0x202
call fcn.00425260
add esp, 0xc
push 0
push 1
push 0x203
call fcn.00425260
add esp, 0xc
push 0
mov ecx, 0x464f74
call fcn.0043ca00
push 0
mov ecx, 0x464f74
call fcn.00403520
push 1
mov edx, dword [0x464b68]
mov eax, dword [edx + 0x194]
mov ecx, dword [eax + 0xf8]
call fcn.004305c0
push 0
mov ecx, dword [0x464b68]
mov edx, dword [ecx + 0x194]
mov ecx, dword [edx + 0xfc]
call fcn.004305c0
push 1
mov eax, dword [0x464b68]
mov ecx, dword [eax + 0x194]
mov ecx, dword [ecx + 0x100]
call fcn.004305c0
push 0x204
call fcn.00421760
add esp, 4
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x288], edx
cmp dword [ebp - 0x288], 0
jl 0x442662
jg 0x4425fd
cmp dword [ebp - 0x28c], 0
jbe 0x442662
call fcn.0043eae0
push 0
push 0x44d0a0
mov ecx, dword [0x464a90]
call fcn.00439190
mov dword [ebp - 0x1f4], eax
mov edx, dword [ebp - 0x1f4]
push edx
mov ecx, dword [0x464a90]
call fcn.00439090
push fcn.00441ad0
push 0xea60
push 0x8266
mov eax, dword [0x464afc]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
push 0xea60
push 0x8266
push 0x113
mov ecx, dword [0x464afc]
push ecx
call fcn.00441ad0
push 0
push 1
push 0x204
call fcn.00425260
add esp, 0xc
jmp 0x44270e
push 1
mov ecx, 0x464f74
call fcn.00403520
push 0x205
call fcn.00421760
add esp, 4
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], edx
cmp dword [ebp - 0x294], 1
jne 0x4426bd
cmp dword [ebp - 0x290], 0
jne 0x4426bd
push 1
mov ecx, 0x464f74
call fcn.004034f0
jmp 0x4426c9
push 0
mov ecx, 0x464f74
call fcn.004034f0
push 0x206
call fcn.00421760
add esp, 4
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x298], edx
cmp dword [ebp - 0x29c], 1
jne 0x442702
cmp dword [ebp - 0x298], 0
jne 0x442702
push 1
mov ecx, 0x464f74
call fcn.004034c0
jmp 0x44270e
push 0
mov ecx, 0x464f74
call fcn.004034c0
push 0x202
call fcn.00421760
add esp, 4
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2a0], edx
cmp dword [ebp - 0x2a4], 1
jne 0x44279e
cmp dword [ebp - 0x2a0], 0
jne 0x44279e
mov edx, dword [0x464b68]
mov byte [edx + 0x9e], 0
mov eax, dword [0x464b68]
cmp dword [eax + 0x19c], 0
je 0x44277e
push 0x82c9
mov ecx, dword [0x464b68]
mov ecx, dword [ecx + 0x19c]
call fcn.00427760
mov ecx, dword [0x464b68]
call fcn.004015b0
push eax
call fcn.00428060
add esp, 4
mov ecx, 0x464f74
call fcn.0043c790
movzx edx, al
test edx, edx
jne 0x44279c
push 0xfffffffffffffffe
mov ecx, dword [0x464b68]
call fcn.0043e640
jmp 0x4427cf
push 1
mov ecx, dword [0x464b68]
call fcn.00402160
mov ecx, dword [0x464b68]
call fcn.004015b0
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [0x464b68]
call fcn.004015b0
push eax
call dword [sym.imp.USER32.dll_SetActiveWindow]
push 0x201
call fcn.00421760
add esp, 4
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2a8], edx
cmp dword [ebp - 0x2ac], 1
jne 0x442806
cmp dword [ebp - 0x2a8], 0
jne 0x442806
push 1
call fcn.00426830
add esp, 4
jmp 0x442810
push 0
call fcn.00426830
add esp, 4
mov ecx, dword [0x464b68]
call fcn.00402140
mov eax, dword [0x464b68]
mov edx, dword [eax]
mov ecx, dword [0x464b68]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x24], eax
cmp dword [0x464eb0], 0
je 0x442879
mov ecx, dword [0x464eb0]
mov dword [ebp - 0x214], ecx
mov edx, dword [ebp - 0x214]
mov dword [ebp - 0x210], edx
cmp dword [ebp - 0x210], 0
je 0x44286f
push 1
mov ecx, dword [ebp - 0x210]
call fcn.00403580
mov dword [ebp - 0x2b0], eax
jmp 0x442879
mov dword [ebp - 0x2b0], 0
cmp dword [0x464eac], 0
je 0x4428c1
mov eax, dword [0x464eac]
mov dword [ebp - 0x21c], eax
mov ecx, dword [ebp - 0x21c]
mov dword [ebp - 0x218], ecx
cmp dword [ebp - 0x218], 0
je 0x4428b7
push 1
mov ecx, dword [ebp - 0x218]
call fcn.00403580
mov dword [ebp - 0x2b4], eax
jmp 0x4428c1
mov dword [ebp - 0x2b4], 0
cmp dword [0x464ea8], 0
je 0x44290a
mov edx, dword [0x464ea8]
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
je 0x442900
push 1
mov ecx, dword [ebp - 0x220]
call fcn.00403580
mov dword [ebp - 0x2b8], eax
jmp 0x44290a
mov dword [ebp - 0x2b8], 0
cmp dword [0x464ea4], 0
je 0x442953
mov ecx, dword [0x464ea4]
mov dword [ebp - 0x22c], ecx
mov edx, dword [ebp - 0x22c]
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0
je 0x442949
push 1
mov ecx, dword [ebp - 0x228]
call fcn.00403580
mov dword [ebp - 0x2bc], eax
jmp 0x442953
mov dword [ebp - 0x2bc], 0
cmp dword [0x464ea0], 0
je 0x44299b
mov eax, dword [0x464ea0]
mov dword [ebp - 0x234], eax
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x230], ecx
cmp dword [ebp - 0x230], 0
je 0x442991
push 1
mov ecx, dword [ebp - 0x230]
call fcn.00403580
mov dword [ebp - 0x2c0], eax
jmp 0x44299b
mov dword [ebp - 0x2c0], 0
cmp dword [0x464e9c], 0
je 0x4429e4
mov edx, dword [0x464e9c]
mov dword [ebp - 0x23c], edx
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
je 0x4429da
push 1
mov ecx, dword [ebp - 0x238]
call fcn.00403580
mov dword [ebp - 0x2c4], eax
jmp 0x4429e4
mov dword [ebp - 0x2c4], 0
cmp dword [0x464b80], 0
je 0x442a34
mov ecx, dword [0x464b80]
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x244]
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0
je 0x442a2a
push 1
mov eax, dword [ebp - 0x240]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x240]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x2c8], eax
jmp 0x442a34
mov dword [ebp - 0x2c8], 0
cmp dword [0x464b78], 0
je 0x442a84
mov ecx, dword [0x464b78]
mov dword [ebp - 0x24c], ecx
mov edx, dword [ebp - 0x24c]
mov dword [ebp - 0x248], edx
cmp dword [ebp - 0x248], 0
je 0x442a7a
push 1
mov eax, dword [ebp - 0x248]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x248]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x2cc], eax
jmp 0x442a84
mov dword [ebp - 0x2cc], 0
cmp dword [0x464b7c], 0
je 0x442ad4
mov ecx, dword [0x464b7c]
mov dword [ebp - 0x254], ecx
mov edx, dword [ebp - 0x254]
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 0
je 0x442aca
push 1
mov eax, dword [ebp - 0x250]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x250]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x2d0], eax
jmp 0x442ad4
mov dword [ebp - 0x2d0], 0
cmp dword [0x464b68], 0
je 0x442b24
mov ecx, dword [0x464b68]
mov dword [ebp - 0x25c], ecx
mov edx, dword [ebp - 0x25c]
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 0
je 0x442b1a
push 1
mov eax, dword [ebp - 0x258]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x258]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x2d4], eax
jmp 0x442b24
mov dword [ebp - 0x2d4], 0
mov ecx, dword [0x464a90]
mov dword [ebp - 0x264], ecx
mov edx, dword [ebp - 0x264]
mov dword [ebp - 0x260], edx
cmp dword [ebp - 0x260], 0
je 0x442b5a
push 1
mov ecx, dword [ebp - 0x260]
call fcn.004035b0
mov dword [ebp - 0x2d8], eax
jmp 0x442b64
mov dword [ebp - 0x2d8], 0
call fcn.00423ba0
push 0x464a74
call dword [sym.imp.KERNEL32.DLL_DeleteCriticalSection]
mov dword [ebp - 0x268], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1ac]
call fcn.004047a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0043d8d0
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10