Function at 0x4432e6
Capabilities:
Terminate thread

Disassembly:
push 0x34
push 0xaa6628
call fcn.004f0bc0
mov ebx, ecx
xor eax, eax
mov dword [ebp - 4], eax
xor edx, edx
inc edx
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp + 0x1c]
sub ecx, eax
je 0x443319
sub ecx, edx
jne 0x4448bc
mov esi, dword [ebp + 0x18]
mov edi, dword [ebp + 0xc]
jmp 0x4436b6
mov edi, dword [ebp + 0xc]
cmp edi, 0x110
jne 0x44334f
mov dword [ebp - 0x1c], edx
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
mov ecx, ebx
call fcn.00445206
mov esi, dword [ebp + 0x18]
mov dword [esi], eax
cmp dword [ebp - 0x1c], 0
je 0x443354
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
inc eax
jmp 0x4448c5
mov esi, dword [ebp + 0x18]
jmp 0x443359
xor eax, eax
xor edx, edx
inc edx
cmp edi, 2
jne 0x4433a7
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1c], eax
cmp dword [0xd5ac34], 0
je 0x443380
mov dword [0xabac8c], eax
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
mov dword [0xd5ac34], eax
mov ecx, dword [0xd506f8]
test ecx, ecx
je 0x443392
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
lea eax, [ebx + 0x58]
mov dword [ebp - 0x20], eax
mov ecx, eax
call fcn.0042b65e
and dword [esi], 0
lea eax, [ebx + 0x58]
jmp 0x4433ad
lea eax, [ebx + 0x58]
mov dword [ebp - 0x20], eax
cmp edi, 5
jne 0x4433cf
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
mov ecx, eax
call fcn.0042b8c3
mov dword [esi], eax
mov dword [ebp - 4], 0xfffffffe
mov eax, ebx
jmp 0x4448c5
cmp edi, 0x113
jne 0x4433fa
mov dword [ebp - 0x1c], 1
lea eax, [ebp - 0x1c]
push eax
push ecx
push dword [ebp + 0x10]
push ecx
mov ecx, ebx
call fcn.0044bbe4
mov dword [esi], eax
cmp dword [ebp - 0x1c], 0
jne 0x443340
cmp edi, 0x409
jne 0x443415
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
mov ecx, dword [ebp + 0x10]
call fcn.0047b7ad
and dword [esi], 0
jmp 0x4433c1
push 0x4e
pop edx
mov ecx, 0x3f0
mov eax, dword [ebp + 0x14]
cmp edi, edx
jne 0x4434ae
cmp dword [eax + 4], ecx
jne 0x44344c
cmp dword [eax + 8], 0xffffff4b
jne 0x44344c
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
sub esp, 0xc
mov ecx, dword [ebp - 0x20]
call fcn.0042bbfc
jmp 0x4433bf
cmp edi, edx
jne 0x4434ae
cmp dword [eax + 4], ecx
jne 0x44347b
cmp dword [eax + 8], 0xffffff94
jne 0x44347b
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
push ecx
push eax
push ecx
mov ecx, ebx
call fcn.0044bafd
mov dword [esi], eax
mov dword [ebp - 4], 0xfffffffe
mov eax, edi
jmp 0x4448c5
cmp edi, edx
jne 0x4434ae
cmp dword [eax + 4], ecx
jne 0x4434ae
cmp dword [eax + 8], 0xfffffff4
jne 0x4434ae
mov dword [ebp - 0x1c], 1
lea ecx, [ebp - 0x1c]
push ecx
push eax
push ecx
lea ecx, [ebx + 0x58]
call fcn.0042bd47
mov dword [esi], eax
cmp dword [ebp - 0x1c], 0
jne 0x443340
push 0x4e
pop edx
cmp edi, 0x7b
jne 0x4434cc
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
push ecx
push dword [ebp + 0x14]
push ecx
push ecx
mov ecx, dword [ebp - 0x20]
call fcn.0042aede
jmp 0x4433bf
mov eax, dword [ebp + 0x14]
cmp edi, edx
jne 0x44356d
cmp dword [eax + 4], 0x3f0
jne 0x4434fe
cmp dword [eax + 8], 0xfffffffd
jne 0x4434fe
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
mov eax, dword [0xd58f54]
mov ecx, dword [eax + 0x58]
call fcn.00455c09
jmp 0x443410
cmp edi, edx
jne 0x44356d
cmp dword [eax + 8], 0xfffffed3
jne 0x443521
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
sub esp, 0xc
mov ecx, dword [ebp - 0x20]
call fcn.0042aa3d
jmp 0x4433bf
cmp edi, edx
jne 0x44356d
cmp dword [eax + 8], 0xfffffec9
jne 0x443544
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
sub esp, 0xc
mov ecx, dword [ebp - 0x20]
call fcn.0042ad9e
jmp 0x4433bf
cmp edi, edx
jne 0x44356d
cmp dword [eax + 4], 0x3f0
jne 0x44356d
cmp dword [eax + 8], 0xffffff9b
jne 0x44356d
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
push ecx
push eax
push ecx
mov ecx, dword [ebp - 0x20]
call fcn.0042ba19
jmp 0x4433bf
cmp edi, 0x47
jne 0x443594
mov dword [ebp - 0x1c], 1
lea ecx, [ebp - 0x1c]
push ecx
push eax
push ecx
push ecx
lea ecx, [ebx + 0x58]
call fcn.0042b555
mov dword [esi], eax
cmp dword [ebp - 0x1c], 0
jne 0x443340
mov edx, 0x111
mov ecx, dword [ebp + 0x10]
cmp edi, edx
jne 0x4435e9
mov eax, 0x4b9
cmp ax, cx
jne 0x4435e9
mov eax, ecx
shr eax, 0x10
mov dword [ebp - 0x40], 0x300
cmp word [ebp - 0x40], ax
jne 0x4435e9
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ecx]
push 3
call dword [eax + 0x1c]
push str.IDC_ED_FILTER
mov edx, str.OnFilterChanged
and dword [esi], 0
mov ecx, str.CProcListDlg
call fcn.0041e74f
pop ecx
jmp 0x4433c1
movzx eax, cx
cmp edi, edx
jne 0x443631
mov esi, eax
mov dword [ebp - 0x40], esi
mov esi, 0x584
cmp si, ax
mov esi, dword [ebp + 0x18]
jne 0x44362e
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, ebx
call fcn.0044e79b
push str.IDC_CH_TRAFFIC
mov edx, str.OnTraffic
mov dword [esi], eax
mov ecx, str.CProcListDlg
call fcn.0041e74f
pop ecx
jmp 0x44346d
mov eax, dword [ebp - 0x40]
movzx eax, ax
cmp edi, edx
jne 0x44365e
mov edx, 0x3f4
cmp dx, ax
jne 0x44365e
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, ebx
call fcn.00445df3
push str.IDC_CH_HIDDEN
mov edx, str.OnViewHiddenProcesses
jmp 0x44361c
push 0
push esi
push dword [ebp + 0x14]
push ecx
push edi
push dword [ebp + 8]
mov ecx, ebx
call fcn.0042df87
test eax, eax
jne 0x443340
push ecx
push esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edi
push dword [ebp + 8]
lea ecx, [ebx + 0x4208]
call fcn.0044ee97
test eax, eax
jne 0x443340
lea ecx, [ebx + 0x825c]
mov eax, dword [ecx]
push 0
push esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edi
push dword [ebp + 8]
call dword [eax]
test eax, eax
jne 0x443340
mov edx, 0x111
cmp edi, edx
jne 0x443705
mov eax, 0x811f
cmp ax, word [ebp + 0x10]
jne 0x443705
mov dword [ebp - 0x1c], 1
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
mov ecx, ebx
call fcn.0044e74f
mov dword [esi], eax
push str.ID_HIGHLIGHT_PROC_RESOURCES
mov edx, str.OnHighlightResEater
mov ecx, str.CProcListDlg
call fcn.0041e74f
pop ecx
cmp dword [ebp - 0x1c], 0
jne 0x443340
mov edx, 0x111
mov eax, dword [ebp + 0x10]
movzx ecx, ax
cmp edi, edx
jne 0x44375b
mov eax, ecx
mov esi, ecx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], eax
mov eax, 0x80c2
cmp ax, cx
mov esi, dword [ebp + 0x18]
jne 0x44376f
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
lea ecx, [ebx + 0x58]
push 0x18
pop eax
xor edx, edx
cmp dword [ebx + 0xe0], eax
cmove eax, edx
push eax
call fcn.0042b060
and dword [esi], 0
push str.ID_PROC_PROCESSTREE
mov edx, str.OnSortProcTree
jmp 0x44361e
movzx esi, ax
mov dword [ebp - 0x24], esi
movzx esi, ax
mov dword [ebp - 0x20], esi
movzx esi, ax
mov dword [ebp - 0x28], esi
jmp 0x443775
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x40]
movzx esi, cx
mov dword [ebp - 0x38], esi
movzx esi, cx
mov dword [ebp - 0x3c], esi
movzx esi, cx
mov dword [ebp - 0x40], esi
movzx ecx, cx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, cx
mov esi, dword [ebp - 0x20]
movzx esi, si
mov dword [ebp - 0x24], esi
mov esi, dword [ebp - 0x28]
movzx esi, si
mov dword [ebp - 0x28], esi
cmp edi, edx
jne 0x4437ef
mov eax, dword [ebp - 0x40]
movzx ecx, ax
mov eax, dword [ebp - 0x3c]
movzx eax, ax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x38]
movzx esi, ax
mov dword [ebp - 0x28], esi
movzx eax, ax
mov dword [ebp - 0x20], eax
mov eax, 0x83eb
cmp ax, word [ebp - 0x34]
mov esi, dword [ebp + 0x18]
jne 0x4437f5
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, ebx
call fcn.00445df3
push str.ID_VIEW_HIDDENPROCESSES
jmp 0x443657
movzx eax, ax
mov dword [ebp - 0x20], eax
movzx eax, cx
mov dword [ebp - 0x40], eax
movzx eax, cx
mov dword [ebp - 0x34], eax
movzx eax, cx
mov dword [ebp - 0x30], eax
movzx eax, cx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x24]
movzx eax, ax
mov ecx, dword [ebp - 0x28]
movzx ecx, cx
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, cx
mov dword [ebp - 0x20], ecx
cmp edi, edx
jne 0x443979
mov eax, dword [ebp - 0x30]
movzx eax, ax
mov ecx, dword [ebp - 0x34]
movzx ecx, cx
mov esi, dword [ebp - 0x40]
movzx esi, si
mov dword [ebp - 0x20], esi
mov esi, 0x8019
cmp si, word [ebp - 0x2c]
mov esi, dword [ebp + 0x18]
jne 0x4438a1
mov dword [ebp - 0x1c], 1
lea ecx, [ebx + 0x58]
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
call fcn.0042bfff
mov dword [esi], eax
push str.ID_GET_PROPERTIES
mov edx, str.OnProperties
mov ecx, str.CProcListDlg
call fcn.0041e74f
pop ecx
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov ecx, dword [ebp - 0x30]
movzx ecx, cx
mov edx, dword [ebp - 0x34]
movzx edx, dx
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x1c], 0
jne 0x443340
mov edx, 0x111
movzx esi, ax
mov dword [ebp - 0x40], esi
movzx esi, ax
mov dword [ebp - 0x30], esi
movzx eax, ax
mov dword [ebp - 0x34], eax
movzx ecx, cx
mov eax, dword [ebp - 0x20]
movzx eax, ax
mov dword [ebp - 0x20], eax
cmp edi, edx
mov esi, dword [ebp + 0x18]
jne 0x44392b
mov eax, dword [ebp - 0x30]
movzx ecx, ax
mov eax, dword [ebp - 0x40]
movzx eax, ax
mov dword [ebp - 0x20], eax
mov eax, 0x8013
cmp ax, word [ebp - 0x34]
jne 0x44392b
mov dword [ebp - 0x1c], 1
lea ecx, [ebx + 0x58]
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
call fcn.0042bfff
mov dword [esi], eax
push str.ID_PROC_PROPERTIES
mov edx, str.OnProperties
mov ecx, str.CProcListDlg
call fcn.0041e74f
pop ecx
mov eax, dword [ebp - 0x34]
movzx ecx, ax
mov eax, dword [ebp - 0x30]
movzx eax, ax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], 0
jne 0x443340
mov edx, 0x111
movzx eax, cx
movzx ecx, cx
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, cx
cmp edi, edx
jne 0x443981
mov ecx, eax
mov esi, eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], eax
mov eax, 0x805d
cmp ax, word [ebp - 0x40]
mov esi, dword [ebp + 0x18]
jne 0x443998
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
lea ecx, [ebx + 0x58]
sub esp, 0x10
call fcn.0042beb2
push str.ID_PROC_SYSCONTEXTMENU
mov edx, str.OnSysContextMenu
jmp 0x44361c
mov ecx, dword [ebp - 0x3c]
jmp 0x4438a1
mov eax, dword [ebp + 0x10]
movzx esi, ax
mov dword [ebp - 0x34], esi
movzx esi, ax
mov dword [ebp - 0x30], esi
movzx esi, ax
mov dword [ebp - 0x2c], esi
jmp 0x44399b
mov eax, dword [ebp + 0x10]
movzx esi, cx
mov dword [ebp - 0x38], esi
movzx esi, cx
mov dword [ebp - 0x3c], esi
movzx esi, cx
mov dword [ebp - 0x40], esi
movzx ecx, cx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x34]
movzx ecx, cx
mov esi, dword [ebp - 0x30]
movzx esi, si
mov dword [ebp - 0x34], esi
mov esi, dword [ebp - 0x2c]
movzx esi, si
mov dword [ebp - 0x30], esi
cmp edi, edx
jne 0x443a1e
mov eax, dword [ebp - 0x40]
movzx ecx, ax
mov eax, dword [ebp - 0x3c]
movzx eax, ax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
movzx esi, ax
mov dword [ebp - 0x30], esi
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov eax, 0x805f
cmp ax, word [ebp - 0x28]
mov esi, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x443a24
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
lea ecx, [ebx + 0x58]
sub esp, 0x10
call fcn.0042bf52
push str.ID_SYSCONTEXTMENU
mov edx, str.OnSysContextMenuKey
jmp 0x44361c
movzx esi, ax
mov dword [ebp - 0x2c], esi
movzx esi, cx
mov dword [ebp - 0x38], esi
movzx esi, cx
mov dword [ebp - 0x3c], esi
movzx esi, cx
mov dword [ebp - 0x40], esi
movzx ecx, cx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x34]
movzx ecx, cx
mov esi, dword [ebp - 0x30]
movzx edi, si
mov dword [ebp - 0x34], edi
mov esi, dword [ebp - 0x2c]
movzx esi, si
mov dword [ebp - 0x30], esi
mov edi, dword [ebp + 0xc]
cmp edi, edx
jne 0x443aa7
mov eax, dword [ebp - 0x40]
movzx ecx, ax
mov eax, dword [ebp - 0x3c]
movzx eax, ax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
movzx esi, ax
mov dword [ebp - 0x30], esi
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov eax, 0x8005
cmp ax, word [ebp - 0x28]
mov esi, dword [ebp + 0x18]
jne 0x443aad
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
lea ecx, [ebx + 0x58]
sub esp, 0x10
call fcn.0042baea
push str.ID_EDIT_REFRESH
mov edx, str.OnRefresh
jmp 0x44361c
movzx esi, ax
mov dword [ebp - 0x2c], esi
movzx esi, cx
mov dword [ebp - 0x38], esi
movzx eax, cx
mov dword [ebp - 0x3c], eax
movzx eax, cx
mov dword [ebp - 0x40], eax
movzx eax, cx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x34]
movzx ecx, cx
mov esi, dword [ebp - 0x30]
movzx eax, si
mov dword [ebp - 0x34], eax
mov esi, dword [ebp - 0x2c]
movzx eax, si
mov dword [ebp - 0x30], eax
cmp edi, edx
mov eax, dword [ebp + 0x10]
jne 0x443b41
mov eax, dword [ebp - 0x40]
movzx ecx, ax
mov eax, dword [ebp - 0x3c]
movzx esi, ax
mov dword [ebp - 0x34], esi
mov esi, dword [ebp - 0x38]
movzx eax, si
mov dword [ebp - 0x30], eax
movzx esi, si
mov dword [ebp - 0x2c], esi
mov eax, 0x8018
cmp ax, word [ebp - 0x28]
mov esi, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x443b47
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
push ecx
mov ecx, ebx
call fcn.004431f5
test eax, eax
je 0x443b2f
push dword [eax + 0x14]
mov ecx, ebx
call fcn.0044c6c9
and dword [esi], 0
push str.ID_PROC_FINDPARENT
mov edx, str.OnFindParentProc
jmp 0x44361e
movzx esi, ax
mov dword [ebp - 0x2c], esi
movzx esi, cx
mov dword [ebp - 0x38], esi
movzx esi, cx
mov dword [ebp - 0x3c], esi
movzx esi, cx
mov dword [ebp - 0x40], esi
movzx ecx, cx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x34]
movzx ecx, cx
mov esi, dword [ebp - 0x30]
movzx edi, si
mov dword [ebp - 0x34], edi
mov esi, dword [ebp - 0x2c]
movzx esi, si
mov dword [ebp - 0x30], esi
mov edi, dword [ebp + 0xc]
cmp edi, edx
jne 0x443bca
mov eax, dword [ebp - 0x40]
movzx ecx, ax
mov eax, dword [ebp - 0x3c]
movzx eax, ax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
movzx esi, ax
mov dword [ebp - 0x30], esi
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov eax, 0x815c
cmp ax, word [ebp - 0x28]
mov esi, dword [ebp + 0x18]
jne 0x443bd0
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
lea ecx, [ebx + 0x58]
sub esp, 0x10
call fcn.0042c11a
push str.ID_EDIT_ADDCOMMENT
mov edx, str.OnAddComment
jmp 0x44361c
movzx esi, ax
mov dword [ebp - 0x2c], esi
movzx esi, cx
mov dword [ebp - 0x38], esi
movzx eax, cx
mov dword [ebp - 0x3c], eax
movzx eax, cx
mov dword [ebp - 0x40], eax
movzx eax, cx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x34]
movzx ecx, cx
mov esi, dword [ebp - 0x30]
movzx eax, si
mov dword [ebp - 0x34], eax
mov esi, dword [ebp - 0x2c]
movzx eax, si
mov dword [ebp - 0x30], eax
cmp edi, edx
mov eax, dword [ebp + 0x10]
jne 0x443c75
mov eax, dword [ebp - 0x40]
movzx ecx, ax
mov eax, dword [ebp - 0x3c]
movzx esi, ax
mov dword [ebp - 0x34], esi
mov esi, dword [ebp - 0x38]
movzx eax, si
mov dword [ebp - 0x30], eax
movzx esi, si
mov dword [ebp - 0x2c], esi
mov eax, 0x814d
cmp ax, word [ebp - 0x28]
mov esi, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x443c7b
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
push ecx
mov ecx, ebx
call fcn.004431f5
mov ecx, eax
test ecx, ecx
je 0x443c63
cmp dword [ecx + 0x74], 0
je 0x443c63
mov eax, dword [0xd58f54]
push dword [ecx + 0x44]
push dword [ecx + 0x10]
mov ecx, dword [eax + 0x58]
call fcn.00456238
and dword [esi], 0
push str.ID_PROC_TO_START
mov edx, str.OnSwitchToStartup
jmp 0x44361e
movzx esi, ax
mov dword [ebp - 0x2c], esi
movzx esi, cx
mov dword [ebp - 0x38], esi
movzx esi, cx
mov dword [ebp - 0x3c], esi
movzx esi, cx
mov dword [ebp - 0x40], esi
movzx ecx, cx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x34]
movzx ecx, cx
mov esi, dword [ebp - 0x30]
movzx edi, si
mov dword [ebp - 0x34], edi
mov esi, dword [ebp - 0x2c]
movzx esi, si
mov dword [ebp - 0x30], esi
mov edi, dword [ebp + 0xc]
cmp edi, edx
jne 0x443cfd
mov eax, dword [ebp - 0x40]
movzx ecx, ax
mov eax, dword [ebp - 0x3c]
movzx eax, ax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
movzx esi, ax
mov dword [ebp - 0x30], esi
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov eax, 0x814c
cmp ax, word [ebp - 0x28]
mov esi, dword [ebp + 0x18]
jne 0x443d03
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, ebx
call fcn.0044c451
push str.ID_PROC_TO_SERV
mov edx, str.OnSwitchToService
jmp 0x44361c
movzx eax, ax
mov dword [ebp - 0x2c], eax
movzx eax, cx
mov dword [ebp - 0x40], eax
movzx eax, cx
mov dword [ebp - 0x3c], eax
movzx eax, cx
mov dword [ebp - 0x38], eax
movzx eax, cx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
movzx eax, ax
mov ecx, dword [ebp - 0x30]
movzx ecx, cx
mov dword [ebp - 0x20], ecx
mov esi, dword [ebp - 0x2c]
movzx ecx, si
mov dword [ebp - 0x24], ecx
cmp edi, edx
mov esi, dword [ebp + 0x18]
jne 0x443db4
mov eax, dword [ebp - 0x38]
movzx eax, ax
mov ecx, dword [ebp - 0x3c]
movzx ecx, cx
mov dword [ebp - 0x20], ecx
mov edi, dword [ebp - 0x40]
movzx ecx, di
mov dword [ebp - 0x24], ecx
mov ecx, 0x802e
cmp cx, word [ebp - 0x28]
mov edi, dword [ebp + 0xc]
jne 0x443db4
mov dword [ebp - 0x1c], 1
lea ecx, [ebx + 0x58]
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
call fcn.0042be4b
mov dword [esi], eax
push str.ID_PROC_JUMPTOEXEC
mov edx, str.OnJumpToExec
mov ecx, str.CProcListDlg
call fcn.0041e74f
pop ecx
mov eax, dword [ebp - 0x28]
movzx eax, ax
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x3c]
movzx ecx, dx
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x1c], 0
jne 0x443340
mov edx, 0x111
movzx ecx, ax
mov dword [ebp - 0x38], ecx
movzx ecx, ax
mov dword [ebp - 0x40], ecx
movzx eax, ax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x20]
movzx ecx, ax
mov eax, dword [ebp - 0x24]
movzx eax, ax
mov dword [ebp - 0x3c], eax
cmp edi, edx
jne 0x443e21
mov eax, dword [ebp - 0x40]
movzx ecx, ax
mov eax, dword [ebp - 0x38]
movzx esi, ax
mov dword [ebp - 0x3c], esi
movzx esi, ax
mov dword [ebp - 0x38], esi
movzx eax, ax
mov dword [ebp - 0x34], eax
mov eax, 0x8039
cmp ax, word [ebp - 0x30]
mov esi, dword [ebp + 0x18]
jne 0x443e32
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, ebx
call fcn.0044d57d
push str.ID_PROC_COPYCMDLINE
mov edx, str.OnCopyCommandLine
jmp 0x44361c
mov eax, dword [ebp + 0x10]
movzx esi, ax
mov dword [ebp - 0x38], esi
movzx esi, ax
mov dword [ebp - 0x34], esi
jmp 0x443e35
mov eax, dword [ebp + 0x10]
movzx esi, cx
mov dword [ebp - 0x2c], esi
movzx esi, cx
mov dword [ebp - 0x30], esi
movzx esi, cx
mov dword [ebp - 0x40], esi
movzx ecx, cx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x3c]
movzx ecx, cx
mov esi, dword [ebp - 0x38]
movzx esi, si
mov dword [ebp - 0x3c], esi
mov esi, dword [ebp - 0x34]
movzx esi, si
mov dword [ebp - 0x38], esi
cmp edi, edx
jne 0x443eac
mov eax, dword [ebp - 0x40]
movzx ecx, ax
mov eax, dword [ebp - 0x30]
movzx eax, ax
mov dword [ebp - 0x3c], eax
mov esi, dword [ebp - 0x2c]
movzx eax, si
mov dword [ebp - 0x38], eax
mov eax, 0x8006
cmp ax, word [ebp - 0x28]
mov esi, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x443eac
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, ebx
call fcn.0044d57d
push str.ID_COPY
jmp 0x443e17
movzx esi, cx
mov dword [ebp - 0x34], esi
movzx esi, cx
mov dword [ebp - 0x40], esi
movzx ecx, cx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x3c]
movzx ecx, cx
mov esi, dword [ebp - 0x38]
movzx esi, si
mov dword [ebp - 0x3c], esi
cmp edi, edx
jne 0x443f14
mov eax, dword [ebp - 0x40]
movzx ecx, ax
mov eax, dword [ebp - 0x34]
movzx esi, ax
mov dword [ebp - 0x3c], esi
movzx eax, ax
mov dword [ebp - 0x38], eax
mov eax, 0x8272
cmp ax, word [ebp - 0x30]
mov esi, dword [ebp + 0x18]
jne 0x443f1a
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
lea ecx, [ebx + 0x58]
sub esp, 0x10
call fcn.0042ca24
push str.ID_EDIT_COPYTOCLIPBOARD
mov edx, str.OnCopyToClipboard
jmp 0x44361c
movzx eax, ax
mov dword [ebp - 0x38], eax
movzx eax, cx
mov dword [ebp - 0x40], eax
movzx eax, cx
mov dword [ebp - 0x30], eax
movzx eax, cx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
movzx eax, ax
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
cmp edi, edx
jne 0x443f9e
mov eax, dword [ebp - 0x30]
movzx eax, ax
mov ecx, dword [ebp - 0x40]
movzx ecx, cx
mov esi, 0x8271
cmp si, word [ebp - 0x34]
mov esi, dword [ebp + 0x18]
jne 0x443f9e
mov dword [ebp - 0x1c], 1
lea ecx, [ebx + 0x58]
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
call fcn.0042c0b3
mov dword [esi], eax
push str.ID_EDIT_COPYPATH
mov edx, str.OnCopyPath
mov ecx, str.CProcListDlg
call fcn.0041e74f
pop ecx
mov eax, dword [ebp - 0x34]
movzx eax, ax
mov ecx, dword [ebp - 0x30]
movzx ecx, cx
cmp dword [ebp - 0x1c], 0
jne 0x443340
mov edx, 0x111
movzx esi, ax
mov dword [ebp - 0x40], esi
movzx eax, ax
mov dword [ebp - 0x3c], eax
movzx eax, cx
cmp edi, edx
mov esi, dword [ebp + 0x18]
jne 0x444007
mov eax, dword [ebp - 0x40]
movzx eax, ax
mov ecx, 0x8286
cmp cx, word [ebp - 0x3c]
jne 0x444007
mov dword [ebp - 0x1c], 1
lea ecx, [ebx + 0x58]
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
call fcn.0042c059
mov dword [esi], eax
push str.ID_EDIT_VIRUSTOTAL
mov edx, str.OnVirusTotal
mov ecx, str.CProcListDlg
call fcn.0041e74f
pop ecx
mov eax, dword [ebp - 0x3c]
movzx eax, ax
cmp dword [ebp - 0x1c], 0
jne 0x443340
mov edx, 0x111
movzx ecx, ax
lea eax, [ebx + 0x58]
mov dword [ebp - 0x40], eax
cmp edi, dword [0xd59db4]
jne 0x444030
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
push ecx
push dword [ebp + 0x14]
push ecx
push ecx
mov ecx, eax
call fcn.0042ae42
jmp 0x4433bf
cmp edi, edx
jne 0x4440cf
mov dword [ebp - 0x3c], 0xe124
cmp word [ebp - 0x3c], cx
jne 0x444066
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
sub esp, 0x10
mov ecx, eax
call fcn.0042adee
mov dword [esi], eax
push str.ID_EDIT_FIND
mov edx, str.OnEditFind
jmp 0x4435d9
cmp edi, edx
jne 0x4440cf
mov dword [ebp - 0x3c], 0x8273
cmp word [ebp - 0x3c], cx
jne 0x444098
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
sub esp, 0x10
mov ecx, eax
call fcn.0042ae10
mov dword [esi], eax
push str.ID_EDIT_FINDNEXT
mov edx, str.OnEditFindNext
jmp 0x4435d9
cmp edi, edx
jne 0x4440cf
mov eax, ecx
mov dword [ebp - 0x3c], eax
mov eax, 0x803c
cmp ax, cx
jne 0x4440da
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
call fcn.00444ed3
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
push 0
call dword [eax + 0x1c]
push str.ID_EDIT_NEWAPPLICATION
mov edx, str.OnNewApplication
jmp 0x4435d6
mov eax, dword [ebp + 0x10]
movzx esi, ax
mov dword [ebp - 0x3c], esi
jmp 0x4440dd
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp - 0x3c]
movzx esi, si
mov dword [ebp - 0x3c], esi
cmp edi, edx
jne 0x44411e
mov esi, ecx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], esi
mov esi, 0x8037
cmp si, cx
mov esi, dword [ebp + 0x18]
jne 0x444124
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, ebx
call fcn.0044d5d4
push str.ID_PROC_RUNAGAIN
mov edx, str.OnRestartProc
jmp 0x44361c
movzx esi, ax
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x3c]
movzx eax, si
mov dword [ebp - 0x3c], eax
mov esi, dword [ebp - 0x38]
movzx eax, si
mov dword [ebp - 0x38], eax
cmp edi, edx
mov eax, dword [ebp + 0x10]
jne 0x444174
mov esi, ecx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
mov esi, 0x808f
cmp si, cx
mov esi, dword [ebp + 0x18]
jne 0x44417d
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, ebx
call fcn.0044c4d1
push str.ID_PROC_ADDTOSTARTUP
mov edx, str.OnAddProcToStartup
jmp 0x44361c
movzx edi, ax
mov dword [ebp - 0x34], edi
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp - 0x3c]
movzx esi, si
mov dword [ebp - 0x3c], esi
mov esi, dword [ebp - 0x38]
movzx eax, si
mov dword [ebp - 0x38], eax
mov esi, dword [ebp - 0x34]
movzx eax, si
mov dword [ebp - 0x34], eax
cmp edi, edx
mov eax, dword [ebp + 0x10]
jne 0x4441d9
mov esi, ecx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], esi
mov esi, 0x8004
cmp si, cx
mov esi, dword [ebp + 0x18]
jne 0x4441df
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, ebx
call fcn.0044ce22
push str.ID_EDIT_DELETE1
mov edx, str.OnEndProc
jmp 0x44361c
movzx ecx, ax
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x3c]
movzx esi, cx
mov dword [ebp - 0x24], esi
movzx esi, cx
mov dword [ebp - 0x28], esi
movzx esi, cx
mov dword [ebp - 0x2c], esi
movzx ecx, cx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov esi, dword [ebp - 0x34]
movzx edi, si
mov dword [ebp - 0x3c], edi
mov esi, dword [ebp - 0x30]
movzx esi, si
mov dword [ebp - 0x38], esi
mov edi, dword [ebp + 0xc]
cmp edi, edx
jne 0x44425f
mov eax, dword [ebp - 0x2c]
movzx ecx, ax
mov eax, dword [ebp - 0x28]
movzx eax, ax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x24]
movzx esi, ax
mov dword [ebp - 0x38], esi
movzx eax, ax
mov dword [ebp - 0x34], eax
mov eax, 0x8010
cmp ax, word [ebp - 0x20]
mov esi, dword [ebp + 0x18]
jne 0x444265
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, ebx
call fcn.0044ce22
push str.ID_PROC_ENDPROC
jmp 0x4441cf
movzx esi, ax
mov dword [ebp - 0x34], esi
movzx esi, cx
mov dword [ebp - 0x28], esi
movzx eax, cx
mov dword [ebp - 0x2c], eax
movzx eax, cx
mov dword [ebp - 0x30], eax
movzx eax, cx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x3c]
movzx ecx, cx
mov esi, dword [ebp - 0x38]
movzx eax, si
mov dword [ebp - 0x3c], eax
mov esi, dword [ebp - 0x34]
movzx eax, si
mov dword [ebp - 0x38], eax
cmp edi, edx
mov eax, dword [ebp + 0x10]
jne 0x44430d
mov eax, dword [ebp - 0x30]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
movzx esi, ax
mov dword [ebp - 0x3c], esi
mov esi, dword [ebp - 0x28]
movzx eax, si
mov dword [ebp - 0x38], eax
movzx esi, si
mov dword [ebp - 0x34], esi
mov eax, 0x8011
cmp ax, word [ebp - 0x24]
mov esi, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x444313
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
push ecx
mov ecx, ebx
call fcn.004431f5
test eax, eax
je 0x4442fb
push eax
mov ecx, ebx
call fcn.0044d174
test eax, eax
je 0x4442fb
push 0
push 0xc8
push 3
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetTimer]
and dword [esi], 0
push str.ID_PROC_ENDPROCTREE
mov edx, str.OnEndProcTree
jmp 0x44361e
movzx esi, ax
mov dword [ebp - 0x34], esi
movzx esi, cx
mov dword [ebp - 0x28], esi
movzx esi, cx
mov dword [ebp - 0x2c], esi
movzx esi, cx
mov dword [ebp - 0x30], esi
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x3c]
movzx ecx, cx
mov esi, dword [ebp - 0x38]
movzx edi, si
mov dword [ebp - 0x3c], edi
mov esi, dword [ebp - 0x34]
movzx esi, si
mov dword [ebp - 0x38], esi
cmp dword [ebp + 0xc], edx
jne 0x444396
mov eax, dword [ebp - 0x30]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x28]
movzx esi, ax
mov dword [ebp - 0x38], esi
movzx eax, ax
mov dword [ebp - 0x34], eax
mov eax, 0x8234
cmp ax, word [ebp - 0x24]
mov esi, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x44439c
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, ebx
call fcn.0044d2ee
push str.ID_PROC_SUSPEND_RESUME
mov edx, str.OnSuspendResume
jmp 0x44361c
movzx esi, ax
mov dword [ebp - 0x34], esi
movzx esi, cx
mov dword [ebp - 0x28], esi
movzx esi, cx
mov dword [ebp - 0x2c], esi
movzx esi, cx
mov dword [ebp - 0x30], esi
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x3c]
movzx ecx, cx
mov esi, dword [ebp - 0x38]
movzx edi, si
mov dword [ebp - 0x3c], edi
mov esi, dword [ebp - 0x34]
movzx esi, si
mov dword [ebp - 0x38], esi
cmp dword [ebp + 0xc], edx
jne 0x44441f
mov eax, dword [ebp - 0x30]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x28]
movzx esi, ax
mov dword [ebp - 0x38], esi
movzx eax, ax
mov dword [ebp - 0x34], eax
mov eax, 0x8344
cmp ax, word [ebp - 0x24]
mov esi, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
jne 0x444425
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
sub esp, 0x10
mov ecx, ebx
call fcn.0044d50a
push str.ID_PROC_FREEMEMORY
mov edx, str.OnFreeMemory
jmp 0x44361c
movzx esi, ax
mov dword [ebp - 0x34], esi
movzx esi, cx
mov dword [ebp - 0x28], esi
movzx esi, cx
mov dword [ebp - 0x2c], esi
movzx esi, cx
mov dword [ebp - 0x30], esi
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x3c]
movzx ecx, cx
mov esi, dword [ebp - 0x38]
movzx edi, si
mov dword [ebp - 0x3c], edi
mov esi, dword [ebp - 0x34]
movzx esi, si
mov dword [ebp - 0x38], esi
mov edi, dword [ebp + 0xc]
cmp edi, edx
jne 0x4444c3
mov eax, dword [ebp - 0x30]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x28]
movzx esi, ax
mov dword [ebp - 0x38], esi
movzx eax, ax
mov dword [ebp - 0x34], eax
mov eax, 0x809a
cmp ax, word [ebp - 0x24]
mov esi, dword [ebp + 0x18]
jne 0x4444c9
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
push ecx
mov ecx, ebx
call fcn.004431f5
test eax, eax
je 0x4444b1
mov eax, dword [eax + 0x44]
cmp dword [eax - 0xc], 0
je 0x4444b1
push 0
push eax
mov ecx, dword [0xd58f54]
call fcn.00435773
and dword [esi], 0
push str.ID_PROC_BLOCKPROCESS
mov edx, str.OnBlockProc
jmp 0x44361e
movzx eax, ax
mov dword [ebp - 0x34], eax
movzx eax, cx
mov dword [ebp - 0x44], eax
movzx eax, cx
mov dword [ebp - 0x28], eax
movzx eax, cx
mov dword [ebp - 0x2c], eax
movzx eax, cx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x3c]
movzx eax, ax
mov ecx, dword [ebp - 0x38]
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov esi, dword [ebp - 0x34]
movzx ecx, si
mov dword [ebp - 0x20], ecx
cmp edi, edx
mov esi, dword [ebp + 0x18]
jne 0x44457a
mov eax, dword [ebp - 0x2c]
movzx eax, ax
mov ecx, dword [ebp - 0x28]
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov edi, dword [ebp - 0x44]
movzx ecx, di
mov dword [ebp - 0x20], ecx
mov ecx, 0x826e
cmp cx, word [ebp - 0x30]
mov edi, dword [ebp + 0xc]
jne 0x44457a
mov dword [ebp - 0x1c], 1
lea eax, [ebp - 0x1c]
push eax
sub esp, 0xc
lea ecx, [ebx + 0x58]
call fcn.0042bddd
mov dword [esi], eax
push str.ID_SEARCHWEB_GOOGLE
mov edx, str.OnSearchInWeb
mov ecx, str.CProcListDlg
call fcn.0041e74f
pop ecx
mov eax, dword [ebp - 0x30]
movzx eax, ax
mov ecx, dword [ebp - 0x2c]
movzx ecx, cx
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x28]
movzx ecx, dx
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x1c], 0
jne 0x443340
mov edx, 0x111
movzx ecx, ax
movzx esi, ax
mov dword [ebp - 0x44], esi
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x24]
movzx eax, ax
mov dword [ebp - 0x30], eax
mov esi, dword [ebp - 0x20]
movzx esi, si
mov dword [ebp - 0x3c], esi
cmp edi, edx
jne 0x4445fc
mov eax, dword [ebp - 0x44]
movzx eax, ax
mov dword [ebp - 0x30], eax
mov esi, ecx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], ecx
mov ecx, 0x80cd
cmp cx, word [ebp - 0x2c]
mov esi, dword [ebp + 0x18]
jne 0x444610
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
push ecx
mov ecx, ebx
call fcn.004431f5
test eax, eax
je 0x4445ea
mov eax, dword [eax + 0x44]
cmp dword [eax - 0xc], 0
je 0x4445ea
push eax
push 0
mov ecx, dword [0xd58f54]
call fcn.00435773
and dword [esi], 0
push str.ID_PROC_PRIORITY_AUTO
mov edx, str.OnSetPriorityAuto
jmp 0x44361e
mov ecx, dword [ebp + 0x10]
movzx edi, cx
mov dword [ebp - 0x38], edi
movzx edi, cx
mov dword [ebp - 0x34], edi
mov edi, dword [ebp + 0xc]
jmp 0x444613
mov ecx, dword [ebp + 0x10]
movzx esi, ax
mov dword [ebp - 0x28], esi
movzx esi, ax
mov dword [ebp - 0x2c], esi
movzx esi, ax
mov dword [ebp - 0x44], esi
movzx eax, ax
mov esi, dword [ebp - 0x3c]
movzx esi, si
mov dword [ebp - 0x3c], esi
mov esi, dword [ebp - 0x38]
movzx esi, si
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x34]
movzx esi, si
mov dword [ebp - 0x34], esi
cmp edi, edx
jne 0x4446ab
mov ecx, dword [ebp - 0x44]
movzx ecx, cx
mov dword [ebp - 0x3c], ecx
mov esi, dword [ebp - 0x2c]
movzx ecx, si
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x28]
movzx esi, cx
mov dword [ebp - 0x34], esi
movzx ecx, cx
mov dword [ebp - 0x2c], ecx
add eax, 0x7f54
push 5
pop ecx
cmp ax, cx
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x10]
ja 0x4446b1
mov dword [ebp - 0x1c], 1
push ecx
push ecx
mov eax, dword [ebp - 0x30]
movzx edi, ax
push edi
push ecx
mov ecx, ebx
call fcn.0044d6bd
mov edx, str.OnSetPriority
push edi
mov dword [esi], eax
mov ecx, str.CProcListDlg
call fcn.0041e6ff
pop ecx
jmp 0x443340
movzx eax, cx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x3c]
movzx esi, ax
mov dword [ebp - 0x24], esi
movzx esi, ax
mov dword [ebp - 0x28], esi
movzx esi, ax
mov dword [ebp - 0x44], esi
movzx eax, ax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
movzx eax, ax
mov dword [ebp - 0x30], eax
mov esi, dword [ebp - 0x34]
movzx esi, si
mov dword [ebp - 0x3c], esi
mov esi, dword [ebp - 0x2c]
movzx esi, si
mov dword [ebp - 0x38], esi
cmp edi, edx
jne 0x44474b
mov eax, dword [ebp - 0x44]
movzx eax, ax
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x28]
movzx esi, cx
mov dword [ebp - 0x3c], esi
mov ecx, dword [ebp - 0x24]
movzx esi, cx
mov dword [ebp - 0x38], esi
mov ecx, 0x83b9
cmp cx, word [ebp - 0x20]
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x10]
jne 0x44474b
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
push ecx
mov ecx, ebx
call fcn.004431f5
test eax, eax
je 0x444739
cmp dword [eax + 8], 0
jne 0x444739
push dword [eax + 0x10]
mov ecx, ebx
call fcn.0044d786
and dword [esi], 0
push str.ID_PROC_SETAFFINITY
mov edx, str.OnSetAffinity
jmp 0x44361e
movzx ecx, ax
mov dword [ebp - 0x34], ecx
movzx ecx, ax
mov dword [ebp - 0x44], ecx
movzx eax, ax
mov esi, dword [ebp - 0x3c]
movzx esi, si
mov dword [ebp - 0x24], esi
mov ecx, dword [ebp - 0x38]
movzx esi, cx
mov dword [ebp - 0x3c], esi
cmp edi, edx
mov ecx, dword [ebp + 0x10]
jne 0x4447d4
mov ecx, dword [ebp - 0x44]
movzx esi, cx
mov dword [ebp - 0x24], esi
mov ecx, dword [ebp - 0x34]
movzx esi, cx
mov dword [ebp - 0x3c], esi
add eax, 0x7f44
push 3
pop ecx
cmp ax, cx
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x10]
ja 0x4447d4
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x30]
movzx edi, ax
mov ecx, edi
lea eax, [ecx - 0x80bc]
cmp eax, 3
ja 0x4447bc
add ecx, 0xffff7f44
call fcn.0044d9e7
and dword [esi], 0
push edi
mov edx, str.OnSetUpdateSpeed
mov ecx, str.CProcListDlg
call fcn.0041e6ff
jmp 0x4435e3
mov eax, dword [ebp - 0x24]
movzx esi, ax
mov dword [ebp - 0x44], esi
movzx eax, ax
mov esi, dword [ebp - 0x3c]
movzx esi, si
mov dword [ebp - 0x3c], esi
cmp edi, edx
mov esi, dword [ebp + 0x18]
jne 0x444829
mov esi, dword [ebp - 0x44]
movzx esi, si
mov dword [ebp - 0x3c], esi
add eax, 0x7f18
cmp ax, 0x1c
mov esi, dword [ebp + 0x18]
ja 0x444829
mov dword [ebp - 0x1c], 1
push ecx
push ecx
mov eax, dword [ebp - 0x24]
movzx edi, ax
push edi
push ecx
mov ecx, ebx
call fcn.0044bb68
mov edx, str.OnMyShowColomn
jmp 0x444698
mov eax, dword [ebp - 0x3c]
movzx eax, ax
cmp edi, edx
jne 0x44485f
mov edx, 0x829a
cmp dx, ax
jne 0x44485f
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
sub esp, 0x10
mov ecx, dword [ebp - 0x40]
call fcn.0042ac1f
mov dword [esi], eax
push str.ID_VIEW_RESTORECOLUMNS
mov edx, str.OnRestoreColomns
jmp 0x4435d9
mov edx, dword [ebx + 0x110]
test edx, edx
je 0x4448bc
cmp edi, 0x117
je 0x444883
cmp edi, 0x2b
je 0x444883
cmp edi, 0x120
je 0x444883
cmp edi, 0x2c
jne 0x4448bc
mov eax, dword [edx]
push dword [ebp + 0x14]
push ecx
push edi
push edx
call dword [eax + 0x18]
jmp 0x4448bc
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
call fcn.004f0c06
ret 0x18