Function at 0x432c00
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4782ef
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x900
push ebx
push esi
push edi
mov edi, ecx
mov eax, dword [edi + 0x7f8]
test eax, eax
jne case.0x432da3.26
mov ecx, dword [0x4b66a4]
mov eax, dword [ecx + 0x48]
test eax, eax
jl 0x432c9e
lea eax, [ebp - 0x3c]
push eax
call fcn.00445ac0
mov ebx, dword [eax]
mov eax, dword [0x4b66a4]
mov edx, dword [eax + 0x48]
mov ecx, dword [eax + 0xc]
push edx
push 0x48dab0
push 1
mov dword [ebp - 0x38], ecx
call fcn.00453f30
mov ecx, dword [0x4b66a4]
add esp, 0xc
xor esi, esi
mov eax, dword [ecx + 0x48]
test eax, eax
jle 0x432c97
mov eax, dword [ebp - 0x38]
lea edx, [esi + eax]
lea eax, [ebp - 0x34]
push edx
push eax
call fcn.00445a90
mov edx, dword [eax + 0x20]
mov ecx, dword [0x4b66a4]
add ebx, edx
inc esi
cmp esi, dword [ecx + 0x48]
jl 0x432c76
mov dword [ecx + 0x48], 0xffffffff
mov eax, dword [0x4b6e0c]
test eax, eax
jne 0x432cad
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov ecx, edi
call fcn.004341d0
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0xc]
push esi
push ebx
mov ecx, edi
call fcn.00434040
cmp eax, 0xffffffff
je case.0x432da3.26
call sub.MFC42.DLL_AfxGetThread
test eax, eax
je 0x432cde
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x7c]
jmp 0x432ce0
xor eax, eax
mov eax, dword [eax + 0x20]
push 0x3ec
push eax
call dword [sym.imp.USER32.dll_KillTimer]
call sub.MFC42.DLL_AfxGetThread
test eax, eax
je 0x432d01
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x7c]
jmp 0x432d03
xor eax, eax
mov eax, dword [eax + 0x20]
push 0x3ed
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x4b66b8]
push 1
push 0
push 0
mov edx, dword [ecx]
push esi
push ebx
call dword [edx + 0x1c]
mov eax, dword [edi + 0x10]
test eax, eax
jne case.0x432da3.26
mov eax, dword [edi + 8]
dec eax
cmp eax, 0x12
ja case.0x432da3.26
xor ecx, ecx
mov cl, byte [eax + 0x433c38]
jmp dword [ecx*4 + 0x433c24]
mov eax, dword [edi + 0x18]
cmp eax, 3
jl case.0x432da3.26
cmp eax, 0x49
jg case.0x432da3.26
cmp dword [edi + 0x14], 1
jne case.0x432da3.26
cmp dword [edi + eax*4 + 0x1c], 2
jne case.0x432da3.26
xor ebx, ebx
push 0x103
mov dword [edi + eax*4 + 0x1c], ebx
mov ecx, dword [0x4b6684]
call fcn.0041f880
mov eax, dword [edi + 0xc]
add eax, 0xfffffffd
cmp eax, 0x45
ja case.0x432da3.26
xor edx, edx
mov dl, byte [eax + 0x433cac]
jmp dword [edx*4 + 0x433c4c]
cmp dword [0x494ef4], ebx
je 0x432dd0
push ebx
mov ecx, 0x494ec0
call fcn.00452ad0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
push 1
mov ecx, 0x494ec0
call fcn.00452ad0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4b6680]
cmp dword [eax + 0x2f14], ebx
je case.0x432da3.26
xor ecx, ecx
mov cl, byte [eax + 0x2eec]
cmp dword [eax + ecx*4 + 0x35dc], ebx
jne case.0x432da3.26
mov ecx, dword [0x4b6688]
push ebx
push 0x43
mov dword [0x4b6658], 1
call fcn.00434230
mov ecx, dword [0x4b6688]
push 1
push 0x44
call fcn.00434230
mov eax, dword [0x4b6680]
xor edx, edx
mov dword [ebp - 0x1c], edx
mov byte [ebp - 0x10], 0
mov dword [ebp - 0x18], edx
mov byte [ebp - 0x1c], 0x73
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x10], edx
mov cl, byte [eax + 0x2eec]
mov byte [ebp - 0x10], cl
mov ecx, dword [0x4b6838]
lea eax, [ebp - 0x1c]
mov edx, dword [ecx]
push eax
push 0x10
call dword [edx + 0x20]
mov ecx, dword [0x4b6680]
cmp dword [ecx + 0x84], ebx
je 0x432e96
push 0x3eb
call fcn.0044b4a0
mov ecx, dword [0x4b6680]
call fcn.0044a9e0
cmp eax, 1
jne case.0x432da3.26
mov ecx, dword [0x4b6680]
push 0x3ea
call fcn.0044b4a0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4b6680]
cmp dword [eax + 0x2f14], ebx
je case.0x432da3.26
xor ecx, ecx
mov byte [ebp - 0x10], 0
mov dword [ebp - 0x1c], ecx
mov dword [0x4b6658], ebx
mov dword [ebp - 0x18], ecx
mov byte [ebp - 0x1c], 0x75
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x10], ecx
mov dl, byte [eax + 0x2eec]
mov ecx, dword [0x4b6838]
mov byte [ebp - 0x10], dl
lea edx, [ebp - 0x1c]
mov eax, dword [ecx]
push edx
push 0x10
call dword [eax + 0x20]
mov ecx, dword [0x4b6688]
push 1
push 0x43
call fcn.00434230
mov ecx, dword [0x4b6688]
push ebx
push 0x44
call fcn.00434230
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b6688]
push ebx
push 0x47
call fcn.00434230
mov eax, dword [0x4b6680]
push 1
push 0x48
mov dword [eax + 0x368c], ebx
mov ecx, dword [0x4b6688]
call fcn.00434230
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b6688]
push 1
push 0x47
call fcn.00434230
mov ecx, dword [0x4b6688]
push ebx
push 0x48
call fcn.00434230
mov ecx, dword [0x4b6680]
pop edi
pop esi
pop ebx
mov dword [ecx + 0x368c], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
push ebx
lea ecx, [ebp - 0x248]
call fcn.00446170
lea ecx, [ebp - 0x248]
mov dword [ebp - 4], ebx
call sub.MFC42.DLL_CDialog::DoModal
mov dword [ebp - 4], 1
lea edx, [ebp - 0x44]
mov edi, 0x47bc6c
mov dword [ebp + 0x10], edx
mov dword [ebp - 0x44], edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 6
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov esi, 0x47bc58
lea eax, [ebp - 0x70]
mov dword [ebp - 0x44], esi
mov dword [ebp + 0x10], eax
mov dword [ebp - 0x70], edi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 7
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x70], esi
mov byte [ebp - 4], 3
mov dword [ebp - 0x78], 0x47c100
call fcn.00401730
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 2
call fcn.00405d20
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 1
call fcn.00405d20
lea ecx, [ebp - 0x248]
mov dword [ebp - 4], 0xffffffff
call fcn.00451a40
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
call sub.MFC42.DLL_AfxGetThread
cmp eax, ebx
je 0x43309d
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x7c]
push 6
mov ecx, eax
call sub.MFC42.DLL_CWnd::ShowWindow
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
xor eax, eax
push 6
mov ecx, eax
call sub.MFC42.DLL_CWnd::ShowWindow
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebx
call esi
push 1
mov edi, eax
call esi
cmp edi, 0x400
jl case.0x432da3.26
cmp eax, 0x300
jl case.0x432da3.26
mov ecx, dword [0x4b66b8]
push 1
mov eax, dword [ecx]
call dword [eax + 0x20]
mov ecx, dword [0x4b6684]
push ebx
push 1
call fcn.0041e400
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b66b8]
push ebx
mov edx, dword [ecx]
call dword [edx + 0x20]
mov ecx, dword [0x4b6684]
push ebx
push ebx
call fcn.0041e400
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
call sub.MFC42.DLL_AfxGetThread
cmp eax, ebx
je 0x43316c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x7c]
mov eax, dword [eax + 0x20]
push ebx
push ebx
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
xor eax, eax
push ebx
push ebx
push 0x10
mov eax, dword [eax + 0x20]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
call sub.MFC42.DLL_AfxGetThread
cmp eax, ebx
je 0x4331a1
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x7c]
jmp 0x4331a3
xor eax, eax
mov ecx, eax
call sub.MFC42.DLL_CFrameWnd::GetActiveView
mov eax, dword [eax + 0x20]
push ebx
push ebx
push 0x7f7
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
xor eax, eax
mov byte [ebp - 0x90c], 0x32
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1cc], 0x47df14
mov ecx, 0xc
lea edi, [ebp - 0x70]
mov esi, dword [sym.imp.MSVCRT.dll_strncpy]
mov word [ebp - 0x1b0], ax
mov dword [ebp - 0x140], 0x1ae
mov dword [ebp - 0x13c], 0x190
rep stosd dword es:[edi], eax
push 0x31
lea ecx, [ebp - 0x70]
push 0x48ec4c
push ecx
mov dword [ebp - 4], 8
stosw word es:[edi], ax
call esi
mov ecx, 0x32
xor eax, eax
lea edi, [ebp - 0x138]
push 0xc7
lea edx, [ebp - 0x138]
push str.http:__ptlogin.qq.com_jump_clientuin_uclientkey_skeyindex1u1http_3A_2F_2Fgame.qq.com_2Fjump_url.htm_3Furl_3D4
rep stosd dword es:[edi], eax
push edx
call esi
lea eax, [ebp - 0x1cc]
add esp, 0x18
neg eax
sbb eax, eax
lea ecx, [ebp - 0x1c8]
and eax, ecx
lea edx, [ebp + 0x12]
lea ecx, [ebp - 0x900]
mov word [ebp - 0x1c0], 0x4b0
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18], 0x47df10
mov dword [eax], ecx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
mov dword [eax + 4], edx
mov cx, word [ebp - 0x1b0]
mov edx, dword [ebp - 0x1b4]
lea eax, [ebp - 0x1ae]
mov word [ebp - 0x38], cx
push edx
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 9
mov dword [ebp - 0x3c], eax
call fcn.00434350
lea eax, [ebp - 0x3c]
lea ecx, [ebp - 0x1c8]
push eax
call fcn.00434380
mov ecx, dword [ebp - 0x148]
push ecx
lea ecx, [ebp - 0x1c8]
call fcn.00434350
mov edx, dword [ebp - 0x144]
lea ecx, [ebp - 0x1c8]
push edx
call fcn.00434350
mov eax, dword [ebp - 0x140]
lea ecx, [ebp - 0x1c8]
push eax
call fcn.00434350
mov ecx, dword [ebp - 0x13c]
push ecx
call sub.WSOCK32.dll_htonl
mov edx, dword [ebp - 0x1c4]
mov dword [edx], eax
mov esi, dword [ebp - 0x1c4]
add esi, 4
lea eax, [ebp - 0x138]
mov dword [ebp - 0x1c4], esi
push eax
mov ebx, dword [sym.imp.MSVCRT.dll__mbslen]
call ebx
mov esi, eax
add esp, 4
inc esi
lea ecx, [ebp - 0x1c8]
push esi
call fcn.00434320
mov eax, esi
mov edi, dword [ebp - 0x1c4]
and eax, 0xffff
lea esi, [ebp - 0x138]
mov ecx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edx, dword [ebp - 0x1c4]
add edx, eax
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x1c4], edx
call ebx
mov esi, eax
add esp, 4
inc esi
lea ecx, [ebp - 0x1c8]
push esi
call fcn.00434320
mov eax, esi
mov edi, dword [ebp - 0x1c4]
and eax, 0xffff
lea esi, [ebp - 0x70]
mov ecx, eax
mov byte [ebp - 4], 8
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ebx, dword [ebp - 0x1c4]
lea ecx, [ebp - 0x18]
add ebx, eax
mov dword [ebp - 0x1c4], ebx
call fcn.004343d0
movsx eax, word [ebp + 0x12]
mov ecx, dword [0x4b6838]
lea esi, [ebp - 0x900]
mov dword [ebp - 0x904], eax
push esi
mov edx, dword [ecx]
push eax
push 0x32
call dword [edx + 0x28]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x240]
rep stosd dword es:[edi], eax
mov ecx, dword [0x4b6838]
mov dword [ebp - 0x244], ebx
cmp ecx, ebx
mov dword [ebp - 0x240], 4
mov dword [ebp - 0x23c], 0x18a88
je case.0x432da3.26
mov eax, dword [ecx]
lea edx, [ebp - 0x244]
push edx
push 0x208
push 0x53
call dword [eax + 0x28]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, 0x4b692c
call fcn.00413cd0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4b6680]
xor ecx, ecx
cmp dword [eax + 0x3630], ebx
sete cl
mov dword [eax + 0x3630], ecx
mov eax, dword [0x4b6680]
xor edx, edx
cmp dword [eax + 0x3630], ebx
sete dl
mov dword [edi + 0x290], edx
mov edx, dword [0x4b6680]
xor ecx, ecx
cmp dword [edx + 0x3630], ebx
sete cl
mov dword [edi + 0x294], ecx
call sub.MFC42.DLL_AfxGetThread
cmp eax, ebx
je 0x4334c5
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x7c]
jmp 0x4334c7
xor eax, eax
mov ecx, eax
call sub.MFC42.DLL_CFrameWnd::GetActiveView
mov edx, dword [0x4b6680]
xor ecx, ecx
cmp dword [edx + 0x3630], ebx
sete cl
push ecx
lea ecx, [eax + 0xc0]
call sub.MFC42.DLL_CWnd::ShowWindow
mov edx, dword [0x4b6680]
cmp dword [edx + 0x3664], ebx
jne 0x433638
cmp dword [edx + 0x3668], ebx
jne 0x433638
mov ecx, dword [0x4b6684]
mov eax, 0x46
mov edi, 0xa0
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
xor eax, eax
lea esi, [ebp - 0x24]
cmp dword [ecx + 0x1600], ebx
jne 0x433574
cmp dword [edx + 0x3630], ebx
je 0x433552
mov edx, dword [esi]
add dword [eax + ecx + 0x30], edx
mov ecx, dword [0x4b6684]
mov edx, dword [0x4b6680]
cmp dword [ecx + 0x1600], ebx
jne 0x433574
cmp dword [edx + 0x3630], ebx
je 0x43357c
mov edx, dword [esi]
add dword [eax + ecx + 0x38], edx
mov ecx, dword [0x4b6684]
mov edx, dword [0x4b6680]
cmp dword [edx + 0x3630], ebx
jne 0x433598
mov edx, dword [esi]
sub dword [eax + ecx + 0x30], edx
mov ecx, dword [0x4b6684]
sub dword [eax + ecx + 0x38], edx
mov ecx, dword [0x4b6684]
mov edx, dword [0x4b6680]
add eax, 0x10
add esi, 4
cmp eax, 0x60
jl 0x433530
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], edi
xor esi, esi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], 0x5a
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
xor edi, edi
mov dword [ebp + 0x10], eax
jmp 0x4335d1
mov ecx, dword [0x4b6684]
mov edx, dword [0x4b6680]
mov eax, dword [esi + ecx + 0x18c]
mov ebx, dword [edi + ecx + 0x30]
sub eax, ebx
mov ebx, dword [esi + ecx + 0x190]
sub ebx, dword [edi + ecx + 0x34]
cmp dword [edx + 0x3630], 0
je 0x4335f7
mov edx, dword [ebp + 0x10]
add eax, dword [edx]
cdq
and edx, 7
add edi, 0x10
add eax, edx
add esi, 8
sar eax, 3
mov dword [esi + ecx + 0xe4], eax
mov eax, ebx
mov ecx, dword [0x4b6684]
cdq
and edx, 7
add eax, edx
mov edx, dword [ebp + 0x10]
sar eax, 3
mov dword [esi + ecx + 0xe8], eax
add edx, 4
cmp edi, 0x60
mov dword [ebp + 0x10], edx
jl 0x4335c5
jmp 0x4336fa
mov ecx, dword [0x4b6684]
mov dword [ebp - 0x24], 0xa
mov dword [ebp - 0x20], 0xa0
mov dword [ebp - 0x1c], 0x5a
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
xor eax, eax
lea esi, [ebp - 0x24]
mov edi, dword [ecx + 0x1600]
test edi, edi
jne 0x4336b9
mov edi, dword [edx + 0x3630]
test edi, edi
je 0x43368d
mov edx, dword [esi]
mov edi, dword [eax + ecx + 0x30]
add edi, edx
mov dword [eax + ecx + 0x30], edi
mov ecx, dword [0x4b6684]
mov edx, dword [0x4b6680]
mov edi, dword [ecx + 0x1600]
test edi, edi
jne 0x4336b9
mov edi, dword [edx + 0x3630]
test edi, edi
je 0x4336c3
mov edx, dword [esi]
mov edi, dword [eax + ecx + 0x38]
add edi, edx
mov dword [eax + ecx + 0x38], edi
mov ecx, dword [0x4b6684]
mov edx, dword [0x4b6680]
mov edi, dword [edx + 0x3630]
test edi, edi
jne 0x4336eb
mov edx, dword [esi]
mov ebx, dword [eax + ecx + 0x30]
sub ebx, edx
mov dword [eax + ecx + 0x30], ebx
mov ecx, dword [0x4b6684]
mov edi, dword [eax + ecx + 0x38]
sub edi, edx
mov dword [eax + ecx + 0x38], edi
mov ecx, dword [0x4b6684]
mov edx, dword [0x4b6680]
add eax, 0x10
add esi, 4
cmp eax, 0x60
jl 0x433661
mov eax, dword [0x4b66b0]
test eax, eax
je case.0x432da3.26
mov ecx, dword [eax]
push 0
push 0x3e9
push eax
call dword [ecx + 0x1c]
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b6680]
call fcn.00449b40
test eax, eax
je case.0x432da3.26
mov ecx, dword [0x4b6680]
push ebx
call fcn.0044cbf0
mov ecx, dword [0x4b6680]
push ebx
call fcn.00449ad0
mov ecx, dword [0x4b6680]
push 0x3e9
call fcn.0044b460
mov ecx, dword [0x4b667c]
mov edx, dword [ecx]
call dword [edx + 0xd0]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4b6690]
cmp dword [eax + 4], 4
jne 0x4337f5
mov ecx, dword [0x4b6680]
push 1
call fcn.0044b9a0
call sub.MFC42.DLL_AfxGetThread
cmp eax, ebx
je 0x4337b2
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x7c]
cmp eax, ebx
jne 0x4337d3
xor eax, eax
push 0x456
push eax
call dword [sym.imp.USER32.dll_KillTimer]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [eax + 0x20]
push 0x456
push eax
call dword [sym.imp.USER32.dll_KillTimer]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b6680]
push ebx
call fcn.0044b920
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov dword [edi + 0x1dc], 1
mov dword [edi + 0x1e0], ebx
mov ecx, dword [0x4b6684]
push 0x103
call fcn.0041f880
call sub.MFC42.DLL_AfxGetThread
cmp eax, ebx
je 0x433846
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x7c]
jmp 0x433848
xor eax, eax
mov eax, dword [eax + 0x20]
push 0x3ee
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x4b6680]
push ebx
call fcn.0044cb20
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b6684]
push 0x103
call fcn.0041f880
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b6698]
push ebx
call fcn.0043def0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b6698]
push ebx
call fcn.0043dec0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [edi + 0xc]
mov dword [ebp + 0x10], 0
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp + 0x10], eax
mov edx, dword [ebp + 0x10]
mov esi, dword [edx]
call sub.MFC42.DLL_AfxGetThread
test eax, eax
je 0x433903
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x7c]
test eax, eax
jne 0x433907
xor eax, eax
jmp 0x43390a
mov eax, dword [eax + 0x20]
push 0
push 0
push 0
push esi
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov edi, dword [edi + 0xc]
lea eax, [edi - 0x1c]
cmp eax, 0xe
ja case.0x432da3.26
jmp dword [eax*4 + 0x433cf4]
mov ecx, dword [0x4b6684]
call fcn.004215f0
test eax, eax
je case.0x432da3.26
mov ecx, dword [0x4b6684]
call fcn.004215f0
mov ecx, eax
call fcn.0044e830
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b6684]
call fcn.004215f0
test eax, eax
je case.0x432da3.26
call sub.MFC42.DLL_AfxGetThread
test eax, eax
je 0x4339a3
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x7c]
jmp 0x4339a5
xor eax, eax
mov ecx, eax
call sub.MFC42.DLL_CFrameWnd::GetActiveView
mov eax, dword [eax + 0x20]
push esi
push ebx
push 0x7f6
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b6684]
call fcn.004215f0
test eax, eax
je case.0x432da3.26
mov ecx, dword [0x4b6684]
call fcn.004215f0
mov ecx, eax
call fcn.0044e9e0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, 0x78
xor eax, eax
lea edi, [ebp - 0x21c]
rep stosd dword es:[edi], eax
mov ecx, dword [0x4b6838]
lea eax, [ebp - 0x21c]
mov byte [ebp - 0x218], 0x64
mov dword [ebp - 0x211], 2
mov edx, dword [ecx]
push eax
push 0xf
call dword [edx + 0x24]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b66a4]
pop edi
pop esi
pop ebx
mov dword [ecx + 0x3c], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b66a4]
call fcn.00445ae0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b66a4]
call fcn.00445b30
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b6680]
call fcn.0044bb30
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b6680]
call fcn.0044bae0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b66a4]
call fcn.00445db0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [0x4b66a4]
call fcn.00445dd0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov edi, dword [edi + 0xc]
lea eax, [edi - 0x2b]
cmp eax, 0x14
ja case.0x432da3.26
xor edx, edx
mov dl, byte [eax + 0x433d48]
jmp dword [edx*4 + 0x433d30]
mov eax, dword [0x494ef4]
test eax, eax
je case.0x432da3.26
push 0
mov ecx, 0x494ec0
call fcn.00452ad0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x44c]
rep stosd dword es:[edi], eax
mov ecx, dword [0x4b6838]
mov dword [ebp - 0x450], eax
test ecx, ecx
mov dword [ebp - 0x44c], 4
mov dword [ebp - 0x448], 0x493e0
je case.0x432da3.26
mov eax, dword [ecx]
lea edx, [ebp - 0x450]
push edx
push 0x208
push 0x53
call dword [eax + 0x28]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, 0x494ec0
call fcn.00452aa0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, 0x494ec0
call fcn.00452a30
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
add edi, 0xffffffd3
mov ecx, 0x494ec0
push edi
call fcn.00452940
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc