Function at 0x44f500
Capabilities:
Hide graphical window

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4d80b9
push eax
mov eax, 0x1698
mov dword fs:[0], esp
call fcn.004d3780
push ebx
mov ebx, dword [esp + 0x16ac]
push ebp
mov ebp, ebx
shr ebp, 0x10
push esi
xor eax, eax
push edi
mov edi, dword [0x6b3d74]
cmp bp, 4
mov esi, ecx
sete al
test edi, edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebx
je 0x44f593
push edi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x44f593
mov eax, dword [0x6b3dc4]
test eax, eax
jne 0x44f593
mov ecx, dword [esp + 0x16bc]
mov eax, dword [esi + 0x7590]
cmp ecx, eax
jne 0x44f57d
cmp bp, 1
je 0x44f57d
cmp bp, 9
jne 0x44f593
push 0
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0
push 0x10
push edi
call dword [sym.imp.USER32.dll_PostMessageW]
cmp bx, 0x1974
jne 0x44f5ae
mov edx, dword [esp + 0x16bc]
mov ecx, esi
push edx
call fcn.0044f4b0
jmp 0x450fb9
mov eax, dword [esi + 0x758c]
lea edi, [esi + 0x758c]
mov ecx, edi
mov dword [esp + 0x2c], edi
call dword [eax + 8]
cmp bx, 0xc350
jb 0x44f5e9
cmp bx, 0xc364
ja 0x44f5e9
mov ecx, dword [esp + 0x16bc]
push ecx
push ebx
mov ecx, 0x6bf520
call fcn.00483250
jmp 0x450fb9
lea edx, [esi + 0x6184]
test edx, edx
je 0x44f5fb
lea eax, [esi + 0x6188]
jmp 0x44f5fd
xor eax, eax
mov ecx, dword [esp + 0x16bc]
mov edx, dword [eax + 4]
cmp ecx, edx
jne 0x44f619
push ecx
push ebx
mov ecx, esi
call fcn.0045a080
jmp 0x450fb9
mov eax, dword [esi + 0x7590]
cmp ecx, eax
jne 0x44f642
mov eax, ebp
and eax, 0xffff
dec eax
je 0x44f642
sub eax, 8
jne 0x450fb7
mov ecx, edi
call fcn.004089e0
jmp 0x450fb7
lea eax, [esi + 0xb7a8]
test eax, eax
mov dword [esp + 0x10], eax
je 0x44f658
lea eax, [esi + 0xb7ac]
jmp 0x44f65a
xor eax, eax
cmp ecx, dword [eax + 4]
jne 0x44f67d
test ebx, ebx
jne 0x44f67d
mov ecx, esi
call fcn.004bab80
test eax, eax
jne 0x44ffa2
lea ecx, [esi + 0x15ac]
jmp 0x450b59
cmp bx, 0x2650
jb 0x44f69d
cmp bx, 0x2699
ja 0x44f69d
push ecx
push ebx
lea ecx, [esi + 0x29a4c]
call fcn.004764d0
jmp 0x450fb9
mov ebx, dword [esi + 0x24acc]
test bp, bp
jne 0x44f769
mov eax, dword [esp + 0x16bc]
test eax, eax
jne 0x44f7a1
lea eax, [esi + 0x43d8]
test eax, eax
je 0x44f6cd
lea eax, [esi + 0x43dc]
jmp 0x44f6cf
xor eax, eax
mov eax, dword [eax + 4]
push 0
push 0
push 0x1f
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, dword [esp + 0x16b8]
mov ecx, dword [esi + 0x2c65c]
mov eax, edi
and eax, 0xffff
cmp eax, ecx
jl 0x44f736
cmp eax, dword [esi + 0x2c660]
jg 0x44f736
test ebx, ebx
je 0x450fb7
cmp di, 0xe73
jne 0x44f71f
call fcn.004a87a0
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 8]
jmp 0x450fb7
push 0
push eax
mov eax, dword [ebx + 4]
push 0x9416
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
cmp di, 0x4e20
jbe 0x44f7a8
cmp di, 0x4ea0
jae 0x44f7a8
mov ecx, dword [esi + 0x2b5ac]
test ecx, ecx
je 0x450fb7
add eax, 0xffffb1df
push eax
call fcn.004aa890
mov ecx, esi
call fcn.0045b230
jmp 0x450fb7
mov edi, dword [esp + 0x16b8]
cmp bp, 1
jne 0x44f7a8
cmp di, 0x1388
jb 0x44f7a8
cmp di, 0x139c
ja 0x44f7a8
and edi, 0xffff
lea ecx, [esi + 0x43d8]
sub edi, 0x1388
push edi
call fcn.004beb60
jmp 0x450fb7
mov edi, dword [esp + 0x16b8]
lea eax, [esi + 0x685c]
test eax, eax
je 0x44f7ba
lea eax, [esi + 0x6860]
jmp 0x44f7bc
xor eax, eax
mov eax, dword [eax + 4]
mov ecx, dword [esp + 0x16bc]
cmp ecx, eax
jne 0x44f7e4
push ecx
push edi
mov ecx, esi
call fcn.00455510
cmp eax, 0xffffffff
je 0x450fb7
test eax, eax
je 0x44f7e4
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov ecx, dword [0x68e7e4]
and eax, 0xffff
cmp eax, 0x9c69
jg 0x4504eb
je 0x4504cd
cmp eax, 0x8060
jg 0x44ff5f
je 0x44ff4d
cmp eax, 0x7956
jg 0x44fcff
je 0x44fce1
cmp eax, 0xa8
jg 0x44fae1
je 0x44facc
add eax, 0xfffffffa
cmp eax, 0x7f
ja case.0x450c95.41111
xor edx, edx
mov dl, byte [eax + 0x451000]
jmp dword [edx*4 + 0x450fd4]
mov ecx, dword [0x6bfac8]
xor eax, eax
test ecx, ecx
sete al
mov ecx, esi
mov dword [0x6bfac8], eax
call fcn.00457780
mov ecx, dword [esp + 0x10]
call fcn.004c7700
jmp 0x450fb7
lea ecx, [esi + 0x43d8]
call fcn.004bf0d0
mov edi, dword [sym.imp.USER32.dll_GetSubMenu]
xor ebp, ebp
mov ebx, eax
push 2
push ebp
push ebx
call edi
push eax
call edi
cmp eax, ebp
je 0x450fb7
push 5
push eax
call edi
mov edi, eax
push 1
push edi
push ebx
push 2
mov ecx, esi
call fcn.00451b40
mov ebx, dword [esp + 0x10]
lea ecx, [esp + 0x1c]
push ecx
push 0x4a
mov ecx, ebx
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
call fcn.004c73c0
cmp ebx, ebp
je 0x44f8e1
lea eax, [esi + 0xb7ac]
jmp 0x44f8e3
xor eax, eax
mov eax, dword [eax + 4]
lea edx, [esp + 0x1c]
push 2
push edx
push ebp
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x38]
push ecx
push edx
mov dword [esp + 0x3c], 0x14
call dword [sym.imp.USER32.dll_CopyRect]
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x34]
push eax
mov eax, dword [esp + 0x28]
push ecx
push edx
push eax
push 0x28
push edi
call fcn.004bd130
add esp, 0x18
jmp 0x450fb7
xor ecx, ecx
cmp bp, 0x1000
sete cl
push ecx
mov ecx, esi
call fcn.00457a30
mov ecx, dword [esp + 0x10]
call fcn.004c7700
jmp 0x450fb7
test ebx, ebx
je 0x44fabe
mov edi, dword [esp + 0x10]
lea edx, [esp + 0x1c]
xor ebp, ebp
push edx
push 0x2d
mov ecx, edi
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
call fcn.004c73c0
cmp edi, ebp
je 0x44f988
lea eax, [esi + 0xb7ac]
jmp 0x44f98a
xor eax, eax
mov edx, dword [eax + 4]
lea ecx, [esp + 0x1c]
push 2
push ecx
push 0
push edx
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [0x6dcf80]
push 0x80
push eax
call dword [sym.imp.USER32.dll_LoadMenuW]
push 0
push eax
mov dword [esp + 0x1c], eax
call dword [sym.imp.USER32.dll_GetSubMenu]
mov ebp, eax
lea ecx, [esi + 0x2c600]
push ebp
mov dword [esp + 0x30], ecx
call fcn.004bcac0
push ebp
mov ecx, ebx
mov dword [esp + 0x34], eax
call fcn.004945e0
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x38]
push ecx
push edx
mov dword [esp + 0x3c], 0x14
call dword [sym.imp.USER32.dll_CopyRect]
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x34]
push eax
mov eax, dword [esp + 0x28]
push ecx
push edx
push eax
push 0x128
push ebp
call fcn.004bd130
mov edx, eax
mov ecx, 0x411
xor eax, eax
lea edi, [esp + 0x67a]
mov word [esp + 0x678], 0
add esp, 0x18
rep stosd dword es:[edi], eax
cmp edx, 0x9c71
stosw word es:[edi], ax
jl 0x44fa6a
push 0
lea ecx, [esp + 0x664]
push 0x823
push ecx
push edx
push ebp
call dword [sym.imp.USER32.dll_GetMenuStringW]
push 0
push 0
push 0
push 0
lea edx, [esp + 0x670]
push 1
push edx
mov ecx, esi
call fcn.00451540
jmp 0x44faa3
cmp edx, 0x9c6f
je 0x44fa95
cmp edx, 0x9c70
je 0x44fa95
cmp edx, 0x80ae
jne 0x44faa3
mov ecx, esi
mov dword [0x6bfb1c], 4
call fcn.00457c30
jmp 0x44faa3
mov ecx, ebx
call fcn.00494910
mov ecx, esi
call fcn.004569b0
mov eax, dword [esp + 0x14]
push eax
call fcn.004bcf20
mov ecx, dword [esp + 0x34]
add esp, 4
push ecx
mov ecx, dword [esp + 0x30]
call fcn.004bcae0
mov ecx, dword [esp + 0x10]
call fcn.004c7700
jmp 0x450fb7
mov edx, dword [esp + 0x16bc]
mov ecx, esi
push edx
push edi
call fcn.0045aaf0
jmp 0x450fb7
cmp eax, 0x7951
jg 0x44fc48
je 0x44fc2a
cmp eax, 0x44d
jg 0x44fc01
je case.0x44f84b.8
cmp eax, 0xaf
je 0x44fb32
cmp eax, 0x44c
jne case.0x450c95.41111
cmp bp, 1
jne 0x450fb7
mov eax, dword [esp + 0x14]
push 8
push eax
mov ecx, esi
call fcn.0045ab50
jmp 0x450fb7
lea ecx, [esi + 0x43d8]
call fcn.004bf0d0
mov ebp, dword [sym.imp.USER32.dll_GetSubMenu]
mov ebx, eax
push 4
push 0
push ebx
call ebp
push eax
call ebp
mov edi, eax
test edi, edi
je 0x450fb7
push 7
push edi
call ebp
push 1
push edi
push ebx
push 4
mov ecx, esi
mov ebp, eax
call fcn.00451b40
mov edi, dword [esp + 0x10]
lea ecx, [esp + 0x1c]
xor ebx, ebx
push ecx
push 0xaf
mov ecx, edi
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.004c73c0
cmp edi, ebx
je 0x44fba0
lea eax, [esi + 0xb7ac]
jmp 0x44fba2
xor eax, eax
mov eax, dword [eax + 4]
lea edx, [esp + 0x1c]
push 2
push edx
push 0
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x38]
push ecx
push edx
mov dword [esp + 0x3c], 0x14
call dword [sym.imp.USER32.dll_CopyRect]
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x34]
push eax
mov eax, dword [esp + 0x28]
push ecx
push edx
push eax
push 0x28
push ebp
call fcn.004bd130
add esp, 0x18
jmp 0x450fb7
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, esi
call fcn.004514a0
jmp 0x450fb7
cmp eax, 0x7950
jne case.0x450c95.41111
test ebx, ebx
je 0x450fb7
push ecx
push 0
push 0x26
push 0x100
mov ecx, ebx
call fcn.0049f2f0
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push ecx
push 0
push 0x28
push 0x100
mov ecx, ebx
call fcn.0049f2f0
jmp 0x450fb7
add eax, 0xffff86ae
cmp eax, 3
ja case.0x450c95.41111
jmp dword [eax*4 + 0x451080]
test ebx, ebx
je 0x450fb7
mov edx, dword [esp + 0x16bc]
push ecx
push edx
push 0x25
push 0x100
mov ecx, ebx
call fcn.0049f2f0
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov eax, dword [esp + 0x16bc]
push ecx
push eax
push 0x27
push 0x100
mov ecx, ebx
call fcn.0049f2f0
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push ecx
push 0
push 0x22
push 0x100
mov ecx, ebx
call fcn.0049f2f0
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push ecx
push 0
push 0x21
push 0x100
mov ecx, ebx
call fcn.0049f2f0
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push ecx
push 0
push 6
push 0x114
mov ecx, ebx
call fcn.0049f2f0
jmp 0x450fb7
cmp eax, 0x800a
jg 0x44fdee
je 0x44fdd1
add eax, 0xffff86a9
cmp eax, 4
ja case.0x450c95.41111
jmp dword [eax*4 + 0x451090]
test ebx, ebx
je 0x450fb7
push ecx
push 0
push 7
push 0x114
mov ecx, ebx
call fcn.0049f2f0
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push ecx
push 0
push 0x23
push 0x100
mov ecx, ebx
call fcn.0049f2f0
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push ecx
push 0
push 0x24
push 0x100
mov ecx, ebx
call fcn.0049f2f0
jmp 0x450fb7
push 0
push 0x25
call dword [sym.imp.USER32.dll_MapVirtualKeyW]
mov edi, dword [sym.imp.USER32.dll_keybd_event]
mov esi, eax
push 0
push 0
push esi
push 0x25
call edi
push 0
push 2
push esi
push 0x25
call edi
jmp 0x450fb7
push 0
push 0x27
call dword [sym.imp.USER32.dll_MapVirtualKeyW]
mov edi, dword [sym.imp.USER32.dll_keybd_event]
mov esi, eax
push 0
push 0
push esi
push 0x27
call edi
push 0
push 2
push esi
push 0x27
call edi
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x2c]
push 0
mov ecx, esi
call fcn.00451760
jmp 0x450fb7
lea edi, [eax - 0x800b]
cmp edi, 0x54
ja case.0x450c95.41111
xor ecx, ecx
mov cl, byte [edi + 0x4510dc]
jmp dword [ecx*4 + 0x4510a4]
test ebx, ebx
je 0x450fb7
add eax, 0xffff7ff2
mov ecx, ebx
push eax
call fcn.0049fea0
jmp 0x450fb7
push 0x4f199c
push ebx
mov ecx, esi
call fcn.00457b60
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 8]
jmp 0x450fb7
push 0x805d
lea ecx, [esi + 0xf814]
call fcn.004643a0
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov eax, dword [ebx + 4]
push 0
push 2
push 0x9410
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
mov ecx, dword [esi + 0x2d8b8]
push 0
push ecx
mov ecx, esi
call fcn.004534e0
jmp 0x450fb7
mov edx, dword [esi + 0x2d8b8]
push 2
push edx
mov ecx, esi
call fcn.004534e0
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov eax, dword [ebx + 4]
push 0
push 3
push 0x9410
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
mov ecx, esi
call fcn.00453ac0
jmp 0x450fb7
mov eax, dword [0x6c3ebc]
xor ecx, ecx
test eax, eax
sete cl
mov dword [0x6c3ebc], ecx
jmp 0x450fb7
mov eax, dword [0x6c2e88]
xor edx, edx
test eax, eax
sete dl
mov dword [0x6c2e88], edx
jmp 0x450fb7
mov ecx, dword [0x6c2e8c]
xor eax, eax
test ecx, ecx
sete al
mov dword [0x6c2e8c], eax
jmp 0x450fb7
mov ecx, dword [esi + 4]
push ecx
call fcn.0048ff80
add esp, 4
cmp eax, 1
jne 0x450fb7
push 0xfa0
push 0x21
call fcn.004ae820
add esp, 4
mov ecx, esi
push eax
call fcn.0044f2f0
jmp 0x450fb7
push 0x4f1994
push ebx
mov ecx, esi
call fcn.00457b60
jmp 0x450fb7
cmp eax, 0x8076
jg 0x450038
je 0x45001a
add eax, 0xffff7f9f
cmp eax, 0x10
ja case.0x450c95.41111
xor edx, edx
mov dl, byte [eax + 0x451158]
jmp dword [edx*4 + 0x451134]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x44ffa2
push 0
lea ecx, [esi + 0x15ac]
call fcn.004c3a30
mov ecx, esi
call fcn.004ba920
jmp 0x450fb7
push 0x4f198c
push ebx
mov ecx, esi
call fcn.00457b60
jmp 0x450fb7
push 0x4f1980
push ebx
mov ecx, esi
call fcn.00457b60
jmp 0x450fb7
push str.130_
push ebx
mov ecx, esi
call fcn.00457b60
jmp 0x450fb7
push 0x4f1968
push ebx
mov ecx, esi
call fcn.00457b60
jmp 0x450fb7
push 0x4f195c
push ebx
mov ecx, esi
call fcn.00457b60
jmp 0x450fb7
push 0x4f1950
push ebx
mov ecx, esi
call fcn.00457b60
jmp 0x450fb7
push 0x8076
lea ecx, [esi + 0xf814]
call fcn.004643a0
push 0
mov ecx, esi
call fcn.00451760
jmp 0x450fb7
cmp eax, 0x9c59
jg 0x450253
je 0x450f72
cmp eax, 0x80ad
jg 0x45014f
je 0x450133
add eax, 0xffff7f7b
cmp eax, 0x10
ja case.0x450c95.41111
xor ecx, ecx
mov cl, byte [eax + 0x45118c]
jmp dword [ecx*4 + 0x45116c]
mov eax, dword [esi + 0x4adc]
test eax, eax
je 0x4500a1
mov ecx, dword [esi + 0x2c650]
xor eax, eax
test ecx, ecx
sete al
push eax
mov ecx, esi
mov dword [esi + 0x2c650], eax
call fcn.004ba8d0
jmp 0x450fb7
mov ecx, dword [esi + 0x4ad8]
xor eax, eax
test ecx, ecx
sete al
push eax
mov ecx, esi
mov dword [esi + 0x4ad8], eax
call fcn.004ba8d0
jmp 0x450fb7
push 1
mov ecx, esi
call fcn.00457c50
jmp 0x450fb7
mov ecx, esi
call fcn.0045b310
jmp 0x450fb7
push 8
mov ecx, esi
call fcn.00457c50
jmp 0x450fb7
push 2
mov ecx, esi
call fcn.00457c50
jmp 0x450fb7
push 0x10
mov ecx, esi
call fcn.00457c50
jmp 0x450fb7
mov ecx, dword [0x6c2ea8]
xor edx, edx
test ecx, ecx
sete dl
mov ecx, esi
mov dword [0x6c2ea8], edx
call fcn.004577d0
test ebx, ebx
je 0x450fb7
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 8]
jmp 0x450fb7
mov eax, dword [0x6c2eb4]
xor ecx, ecx
test eax, eax
sete cl
mov dword [0x6c2eb4], ecx
call fcn.0042d110
jmp 0x450fb7
cmp eax, 0x9c4f
jg 0x4501d0
je 0x4501c4
sub eax, 0x80ae
je 0x4501ae
sub eax, 7
je 0x450199
sub eax, 0x1b8c
jne case.0x450c95.41111
test ebx, ebx
je 0x450fb7
push 0
push 0x11c
mov edx, dword [ebx + 0x40]
push 0x111
push edx
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
mov eax, dword [esi + 0x2d8b8]
push 1
push eax
mov ecx, esi
call fcn.004534e0
jmp 0x450fb7
mov ecx, esi
mov dword [0x6bfb1c], 4
call fcn.00457c30
jmp 0x450fb7
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
jmp 0x450fb7
sub eax, 0x9c55
je 0x450247
sub eax, 2
je 0x450212
dec eax
jne case.0x450c95.41111
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4501f7
mov ecx, esi
call fcn.004593a0
jmp 0x450fb7
push 0
push 1
push 0
push str.about:blank
lea ecx, [esi + 0xf814]
call fcn.00461e40
jmp 0x450fb7
mov eax, dword [0x6bfb20]
test eax, eax
jne 0x4501f7
mov eax, dword [0x6c4990]
test eax, eax
jne 0x4501f7
push 5
push 0x4ffec0
push 0x4ffec0
push 0x68d7f0
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x450fb7
mov ecx, esi
call fcn.00457da0
jmp 0x450fb7
add eax, 0xffff63a6
cmp eax, 0xe
ja case.0x450c95.41111
jmp dword [eax*4 + 0x4511a0]
lea ecx, [esi + 0xf814]
call fcn.00465d30
jmp 0x450fb7
push 0
push 0
push 0
push 1
lea ecx, [esi + 0xf814]
call fcn.00464c90
jmp 0x450fb7
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x48]
push 0x104
rep stosd dword es:[edi], eax
mov ecx, dword [0x6dcf80]
mov edi, dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [esp + 0x4c]
push eax
push 0x15
push ecx
call edi
mov eax, dword [0x6dcf80]
lea edx, [esp + 0x458]
push 0x104
push edx
push 0x16
push eax
call edi
lea ecx, [esp + 0x48]
push ecx
call fcn.004a8150
xor ebx, ebx
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x256]
mov word [esp + 0x254], bx
push 0x81800
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea edx, [esp + 0x258]
push 0x4f1948
lea eax, [esp + 0x54]
push edx
mov edx, dword [esi + 4]
lea ecx, [esp + 0x468]
push eax
mov eax, dword [0x6dcf84]
push ecx
push edx
push eax
call fcn.004a8200
add esp, 0x20
test eax, eax
je 0x450fb7
lea ecx, [esp + 0x660]
call fcn.004a94b0
lea ecx, [esp + 0x250]
mov dword [esp + 0x16b0], ebx
push ecx
lea ecx, [esp + 0x664]
call fcn.004a94d0
push ebx
push 1
push ebx
push eax
lea ecx, [esi + 0xf814]
call fcn.00461e40
lea ecx, [esp + 0x660]
mov dword [esp + 0x16b0], 0xffffffff
call fcn.00437c40
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov edx, dword [ebx + 4]
push 0
push 4
push 0x9404
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
lea ecx, [esi + 0xf814]
call fcn.00461ff0
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov eax, dword [ebx + 4]
push 0
push 8
push 0x9404
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov ecx, dword [ebx + 4]
push 0
push 6
push 0x9404
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov edx, dword [ebx + 4]
push 0
push 7
push 0x9404
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push 0
mov ecx, ebx
call fcn.0049e0c0
test eax, eax
jne 0x450fb7
push 0x40
mov ecx, esi
call fcn.004ba9b0
push eax
push 0x22
call fcn.004ae820
add esp, 4
push eax
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push 1
mov ecx, ebx
call fcn.0049e0c0
test eax, eax
jne 0x450fb7
push 0x40
mov ecx, esi
call fcn.004ba9b0
push eax
push 0x22
call fcn.004ae820
mov ecx, dword [esi + 4]
add esp, 4
push eax
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push 0
push 0x176
jmp 0x45017e
test ebx, ebx
je 0x450fb7
mov eax, dword [ebx + 4]
push 0
push 0xa
push 0x9404
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
push 0
mov ecx, esi
call fcn.0044f310
jmp 0x450fb7
mov eax, dword [0x6bfac8]
xor ecx, ecx
test eax, eax
sete cl
mov dword [0x6bfac8], ecx
mov ecx, esi
call fcn.00457780
jmp 0x450fb7
cmp eax, 0xa05a
jg 0x450935
je 0x450910
add eax, 0xffff6396
cmp eax, 0x37
ja case.0x450c95.41111
xor edx, edx
mov dl, byte [eax + 0x451260]
jmp dword [edx*4 + 0x4511dc]
mov ecx, esi
call fcn.00458ea0
jmp 0x450fb7
lea edi, [esi + 0xf11c]
mov ecx, edi
call fcn.0042f1c0
mov ecx, edi
call fcn.0042f590
mov ecx, dword [esi + 0x4adc]
test ecx, ecx
je 0x45054e
mov dword [esi + 0x2c658], eax
jmp 0x450fb7
mov dword [esi + 0x2c638], eax
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov eax, dword [ebx + 4]
push 0
push 0xb
push 0x9404
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov ecx, dword [ebx + 4]
push 0
push 0xc
push 0x9404
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov edx, dword [ebx + 4]
push 0
push 0xd
push 0x9404
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov eax, dword [ebx + 4]
push 0
push 0x11
push 0x9404
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push 0
mov ecx, ebx
call fcn.004a0640
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push ebx
call fcn.00435820
add esp, 4
jmp 0x450fb7
mov eax, dword [esi + 0x4adc]
test eax, eax
je 0x450624
mov ecx, dword [esi + 0x2c63c]
xor eax, eax
test ecx, ecx
sete al
mov dword [esi + 0x2c63c], eax
jmp 0x450637
mov ecx, dword [esi + 0x2c624]
xor eax, eax
test ecx, ecx
sete al
mov dword [esi + 0x2c624], eax
push 1
push eax
mov ecx, esi
call fcn.00452500
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 8]
jmp 0x450fb7
mov eax, dword [esi + 0x4adc]
test eax, eax
je 0x45066c
mov ecx, dword [esi + 0x2c640]
xor eax, eax
test ecx, ecx
sete al
mov dword [esi + 0x2c640], eax
jmp 0x45067f
mov ecx, dword [esi + 0x2c628]
xor eax, eax
test ecx, ecx
sete al
mov dword [esi + 0x2c628], eax
push 1
push eax
mov ecx, esi
call fcn.00457390
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 8]
jmp 0x450fb7
mov eax, dword [esi + 0x4adc]
test eax, eax
je 0x4506b4
mov ecx, dword [esi + 0x2c644]
xor eax, eax
test ecx, ecx
sete al
mov dword [esi + 0x2c644], eax
jmp 0x4506c6
mov ecx, dword [0x6c434c]
xor eax, eax
test ecx, ecx
sete al
mov dword [0x6c434c], eax
push 1
push eax
mov ecx, esi
call fcn.004573f0
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 8]
jmp 0x450fb7
mov eax, dword [esi + 0x4adc]
test eax, eax
je 0x4506fb
mov ecx, dword [esi + 0x2c648]
xor eax, eax
test ecx, ecx
sete al
mov dword [esi + 0x2c648], eax
jmp 0x45070e
mov ecx, dword [esi + 0x2c62c]
xor eax, eax
test ecx, ecx
sete al
mov dword [esi + 0x2c62c], eax
push 1
push eax
mov ecx, esi
call fcn.004573b0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 8]
jmp 0x450fb7
mov eax, dword [esi + 0x4adc]
test eax, eax
je 0x450743
mov ecx, dword [esi + 0x2c64c]
xor eax, eax
test ecx, ecx
sete al
mov dword [esi + 0x2c64c], eax
jmp 0x450756
mov ecx, dword [esi + 0x2c630]
xor eax, eax
test ecx, ecx
sete al
mov dword [esi + 0x2c630], eax
push 1
push eax
mov ecx, esi
call fcn.004573d0
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 8]
jmp 0x450fb7
push 0x4eccb8
push ebx
mov ecx, esi
call fcn.00457b60
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push 1
mov ecx, ebx
call fcn.004a01c0
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
push 0xffffffffffffffff
mov ecx, ebx
call fcn.004a01c0
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x34]
jmp 0x450fb7
mov ecx, ebx
call fcn.00494910
mov ecx, esi
call fcn.004569b0
jmp 0x450fb7
mov ecx, esi
call fcn.00457b80
jmp 0x450fb7
mov ecx, esi
call fcn.004517b0
jmp 0x450fb7
mov eax, dword [0x6bfb54]
xor ecx, ecx
test eax, eax
sete cl
mov dword [0x6bfb54], ecx
jmp 0x450fb7
lea ecx, [esi + 0xf814]
call fcn.00464e70
jmp 0x450fb7
test ebx, ebx
je 0x450fb7
mov edx, dword [ebx + 0x25cc]
push 0
push 0
push edx
push 0x9c78
lea ecx, [esi + 0xf814]
call fcn.004652c0
jmp 0x450fb7
push 0
lea ecx, [esi + 0xf868]
call fcn.004ca990
jmp 0x450fb7
push 1
lea ecx, [esi + 0xf868]
call fcn.004ca990
jmp 0x450fb7
push 1
lea ecx, [esi + 0xf814]
call fcn.004649a0
jmp 0x450fb7
mov ecx, dword [esp + 0x2c]
call fcn.004b72a0
jmp 0x450fb7
mov eax, dword [esi + 4]
mov ecx, dword [0x6dcf80]
push 0
push 0x44a480
push eax
push 0x9e
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x450fb7
push 0
push 0
push 1
push 0
push 1
push str.http:__bbs.360.cn
mov ecx, esi
call fcn.00451540
jmp 0x450fb7
push 0
push 0
push 1
push 0
push 1
push 0x78
call fcn.004ae820
add esp, 4
mov ecx, esi
push eax
call fcn.00451540
jmp 0x450fb7
push 0
push 0
push 1
push 0
push 1
push str.http:__www.cn235.com
mov ecx, esi
call fcn.00451540
jmp 0x450fb7
push 0
push 0
push 1
push 0
push 1
push str.http:__se.360.cn_guide_guide_start.htm
mov ecx, esi
call fcn.00451540
jmp 0x450fb7
mov eax, dword [0x6b3e54]
test eax, eax
je 0x450fb7
mov edx, dword [eax + 4]
push 0
push 1
push 0x9418
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
cmp eax, 0xa07e
jg 0x450c6d
je 0x450c52
add eax, 0xffff5fa5
cmp eax, 0x21
ja case.0x450c95.41111
jmp dword [eax*4 + 0x451298]
mov eax, dword [esi + 0x4adc]
test eax, eax
je 0x45098c
mov ecx, dword [esi + 0x2c654]
xor eax, eax
test ecx, ecx
sete al
push eax
mov ecx, esi
mov dword [esi + 0x2c654], eax
call fcn.00459700
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 8]
jmp 0x450fb7
mov ecx, dword [esi + 0x2c634]
xor eax, eax
test ecx, ecx
sete al
push eax
mov ecx, esi
mov dword [esi + 0x2c634], eax
call fcn.00459700
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 8]
jmp 0x450fb7
mov eax, dword [esi + 0x4adc]
test eax, eax
je 0x4509e1
mov ecx, dword [esi + 0x2c658]
xor eax, eax
test ecx, ecx
sete al
push eax
lea ecx, [esi + 0xf11c]
mov dword [esi + 0x2c658], eax
call fcn.0042eb30
jmp 0x450fb7
mov ecx, dword [esi + 0x2c638]
xor eax, eax
test ecx, ecx
sete al
push eax
lea ecx, [esi + 0xf11c]
mov dword [esi + 0x2c638], eax
call fcn.0042eb30
jmp 0x450fb7
lea ecx, [esi + 0x2c]
call fcn.004c1b40
jmp 0x450fb7
mov ecx, esi
call fcn.0045b2f0
mov ecx, esi
call fcn.0045b230
jmp 0x450fb7
lea ecx, [esi + 0x4dbc]
push ecx
mov ecx, esi
call fcn.00459530
jmp 0x450fb7
lea eax, [esi + 0x685c]
mov ecx, esi
push eax
call fcn.00459530
jmp 0x450fb7
lea edx, [esi + 0x5aec]
push edx
mov ecx, esi
call fcn.00459530
test eax, eax
je 0x450fb7
mov ecx, esi
call fcn.0044cc90
jmp 0x450fb7
lea eax, [esi + 0x5454]
push eax
jmp 0x450a52
lea ecx, [esi + 0x43d8]
push ecx
mov ecx, esi
call fcn.00459530
jmp 0x450fb7
mov edi, dword [esp + 0x10]
mov ecx, edi
call fcn.004c7550
push eax
mov ecx, esi
call fcn.00459530
mov ecx, esi
call fcn.004569b0
mov ecx, edi
call fcn.004c7260
mov ecx, edi
call fcn.004c7560
mov ecx, esi
call fcn.0045afc0
mov ecx, esi
call fcn.0045b0e0
push reloc.DSOUND.dll_DirectSoundCreate
push eax
push str.StatusPluginKey
push str.ToolBar
call fcn.004ae2c0
add esp, 0x10
jmp 0x450fb7
mov ecx, dword [0x6d91e4]
xor eax, eax
test ecx, ecx
sete al
mov dword [0x6d91e4], eax
mov dword [0x68eb40], eax
jmp 0x450fb7
mov eax, dword [0x6b3e54]
test eax, eax
je 0x450fb7
mov edx, dword [eax + 4]
push 0
push 0
push 0x9418
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
lea edi, [esi + 0x15ac]
push 1
push 4
mov ecx, edi
call fcn.004c3a70
mov ecx, edi
call fcn.004c3a20
mov ebx, eax
cmp ebx, 3
je 0x450b4c
push 3
mov ecx, edi
call fcn.004c3a30
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
mov ecx, esi
call fcn.004bab80
test eax, eax
jne 0x450b72
mov ecx, edi
call fcn.004c4b90
test eax, eax
jne 0x450fb7
mov ecx, esi
call fcn.004babd0
jmp 0x450fb7
cmp ebx, 3
jne 0x450fb7
cmp word [esp + 0x18], 0x4e
mov ecx, esi
jne 0x450b68
call fcn.004ba920
jmp 0x450fb7
xor eax, eax
mov dword [0x6bfb64], eax
mov dword [0x68f37c], eax
jmp 0x450fb7
mov dword [0x6bfb64], 1
mov dword [0x68f37c], 0x6b96bc
jmp 0x450fb7
mov dword [0x6bfb64], 2
mov dword [0x68f37c], 0x6b96bc
jmp 0x450fb7
mov ecx, esi
mov dword [0x6bfb1c], 0xa
call fcn.00457c30
jmp 0x450fb7
mov ecx, dword [esi + 4]
push ecx
call fcn.004365f0
add esp, 4
jmp 0x450fb7
mov edx, dword [esi + 4]
push edx
call fcn.004367a0
add esp, 4
jmp 0x450fb7
push 0
mov ecx, 0x68da80
call fcn.00481f50
jmp 0x450fb7
push 1
mov ecx, 0x68da80
call fcn.00481f50
jmp 0x450fb7
push 0
push 0xa048
mov ecx, esi
call fcn.00455510
jmp 0x450fb7
push 0
push 0xa047
mov ecx, esi
call fcn.00455510
jmp 0x450fb7
push 0
push 0
push 0
push 0
push 1
push str._http:__baike.360.cn_4000002.html
mov ecx, esi
call fcn.00451540
jmp 0x450fb7
cmp eax, 0xf060
jg case.0x450c95.41111
je 0x450f72
lea ecx, [eax - 0xa081]
cmp ecx, 0x29
ja case.0x450c95.41111
xor edx, edx
mov dl, byte [ecx + 0x45137c]
jmp dword [edx*4 + 0x451320]
mov ecx, esi
call fcn.0045bfb0
jmp 0x450fb7
mov ecx, esi
call fcn.0045c1b0
jmp 0x450fb7
mov eax, dword [0x6d91dc]
lea ecx, [esi + 0x4dbc]
dec eax
neg eax
sbb eax, eax
add eax, 2
push eax
mov dword [0x6d91dc], eax
call fcn.004d1020
mov ecx, esi
call fcn.0045c3d0
lea ecx, [esi + 0x2c]
call fcn.004c1030
jmp 0x450fb7
mov eax, dword [esi + 0x2d8b8]
push 3
push eax
mov ecx, esi
call fcn.004534e0
jmp 0x450fb7
mov ecx, dword [esi + 0x29a18]
test ecx, ecx
je 0x450d23
mov eax, dword [ecx + 0x8fc]
test eax, eax
je 0x450d56
test ecx, ecx
je 0x450d19
mov edx, dword [ecx]
push 1
call dword [edx]
mov dword [esi + 0x29a18], 0
mov eax, dword [esi + 0x29a18]
test eax, eax
jne 0x450d8a
push 0x918
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x2c], eax
test eax, eax
mov dword [esp + 0x16b0], 1
je 0x450d77
mov ecx, eax
call fcn.00449640
jmp 0x450d79
mov eax, dword [ecx + 4]
push 1
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x29a18]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x450fb7
xor eax, eax
mov dword [esp + 0x16b0], 0xffffffff
mov dword [esi + 0x29a18], eax
mov esi, dword [esi + 0x29a18]
test esi, esi
je 0x450fb7
push 0
mov ecx, esi
call fcn.004496f0
jmp 0x450fb7
mov ecx, esi
call fcn.00453a00
jmp 0x450fb7
push 0
push 1
call fcn.004352a0
add esp, 8
jmp 0x450fb7
push 0
push 0
call fcn.004352a0
add esp, 8
jmp 0x450fb7
add eax, 0xffff5f67
push 1
push eax
mov ecx, esi
call fcn.0045bc70
jmp 0x450fb7
mov eax, dword [0x6cc9d0]
test eax, eax
je 0x450fb7
mov ecx, esi
mov dword [0x6cc9d0], 0
call fcn.0045b230
mov ecx, esi
call fcn.00437c40
jmp 0x450fb7
cmp dword [0x6cc9d0], 1
je 0x450fb7
mov ecx, esi
mov dword [0x6cc9d0], 1
call fcn.0045b230
mov ecx, esi
call fcn.00437c40
jmp 0x450fb7
mov ecx, 0x411
xor eax, eax
lea edi, [esp + 0x662]
mov word [esp + 0x660], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x660]
push 0x823
push eax
push str.360SEFORM.HTM
call fcn.004aea30
add esp, 0xc
lea ecx, [esp + 0x660]
push 0
push 0
push 1
push 0
push 1
push ecx
mov ecx, esi
call fcn.00451540
jmp 0x450fb7
mov eax, dword [0x6b3e54]
test eax, eax
je 0x450fb7
mov edx, dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0x9423
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x450fb7
push 0
push 3
lea ecx, [esi + 0xf814]
call fcn.00464470
jmp 0x450fb7
mov ecx, esi
call fcn.0045b800
jmp 0x450fb7
push 0
push 0
push 0
push 0
push 1
push str.http:__se.360.cn_help.htm
mov ecx, esi
call fcn.00451540
jmp 0x450fb7
push 0
push 0
push 0
push 0
push 1
push str.http:__www.theworld.cn_
mov ecx, esi
call fcn.00451540
jmp 0x450fb7
push 1
mov ecx, 0x68da78
call fcn.004167a0
jmp 0x450fb7
push 0
push 0
push 0
push 0
push 1
push str.http:__baike.360.cn_help.html
mov ecx, esi
call fcn.00451540
jmp 0x450fb7
push 0
push 0
push 0
push 0
push 1
push str.http:__hao.360.cn_
mov ecx, esi
call fcn.00451540
jmp 0x450fb7
lea edi, [esi + 0x15ac]
push 0
mov ecx, edi
call fcn.004c3a30
mov ecx, esi
call fcn.004bab80
test eax, eax
jne 0x44ffa2
jmp 0x450b57
lea ecx, [esi + 0xf814]
call fcn.00461900
jmp 0x450fb7
mov eax, dword [esp + 0x16c0]
mov edx, dword [esp + 0x16bc]
lea ecx, [esp + 0x18]
push eax
mov eax, dword [esp + 0x16bc]
push ecx
push edx
push eax
lea ecx, [esi + 0xf814]
mov dword [esp + 0x28], 0
call fcn.00461aa0
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x450fb9
xor eax, eax
mov ecx, dword [esp + 0x16a8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x16a4
ret 0xc