Function at 0x45c360
Capabilities:
Contain obfuscated stackstrings
Get graphical window text

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5eeef3
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x228
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1d8], edi
push 1
push str.Process_Manager
call fcn.0045f680
push 1
push str.https:__www.carifred.com_uvk_help_process_manager.php
lea ecx, [edi + 0x119c]
mov dword [ebp - 0x1c4], eax
call fcn.005dc260
mov ecx, dword [edi + 0x1f70]
mov dword [ebp - 0x190], ecx
lea ecx, [edi + 0x1448]
push str.Process_Manager
mov dword [edi + 0x1f70], 0
mov byte [ebp - 0x19d], 0
call fcn.005dc510
mov esi, dword [edi + 0x14e4]
lea ecx, [ebp - 0xc4]
sub esp, 8
mov dword [ebp - 0x18c], esi
xorps xmm0, xmm0
mov dword [ebp - 0xbc], 0
movq qword [ebp - 0xc4], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x63623c
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
call fcn.005dc520
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xd0]
xorps xmm0, xmm0
mov dword [ebp - 0xc8], 0
movq qword [ebp - 0xd0], xmm0
call fcn.005dc5e0
push 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc4]
push 0xffffffffffffffff
mov dword [ebp - 0xd4], 0
call fcn.005dc190
push eax
lea ecx, [ebp - 0xd4]
call fcn.005d6a80
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 2
push eax
push str.HideCriticalProcesses
lea ecx, [ebp - 0xd4]
call fcn.005d66b0
test al, al
jne 0x45c4bc
mov dword [ebp - 0xd8], 1
push 0xffffffffffffffff
push 0x5e
push 0xd7
push 0xa
push 0x6e
push 0x75
mov ecx, edi
call fcn.0043ccb0
movsd xmm1, qword [0x6edb20]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x320
call fcn.005c42b0
push 0x37
push 0x5a
push 3
push 0xa
mov ecx, edi
call fcn.0045fec0
push 0xffffffffffffffff
push 0x10000001
push 0x2d
push 0x64
push 0x3c
push 5
push str.Process_Manager
mov ecx, esi
call fcn.005c0890
push dword [edi + 0x1438]
mov ecx, esi
push 0xffffffffffffffff
call fcn.005bec70
movsd xmm1, qword [0x6edb08]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push 0xffffffffffffffff
push 0x10000001
push 0x12
push 0xcd
push 0x12
push 0x73
push str.Creating_the_list_of_processes...
mov ecx, esi
call fcn.005c0890
push dword [edi + 0x1438]
mov ecx, esi
mov dword [ebp - 0x1d4], eax
push 0xffffffffffffffff
call fcn.005bec70
cmp dword [ebp - 0xd8], 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push str.Whether_to_hide_the_system_critical_processes_from_the_list.
setne al
movzx eax, al
push eax
push ecx
push 0xc3
push 0x28
push 0x78
push str._Hide_critical_processes
mov ecx, edi
call fcn.0045fc60
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push str.Enable_this_option_if_you_want_to_delete_the_executable_file_after_killing_the_process.
push 0
push ecx
push 0xc3
mov dword [ebp - 0x1c0], eax
push 0x3c
push 0x78
push str._Delete_EXE_file_when_killing
mov ecx, edi
call fcn.0045fc60
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0
push str.Uncheck_this_option_if_you_only_want_to_kill_this_process_and_leave_other_processes_with_the_same_path_running.
push 1
push ecx
push 0xc3
push 0x50
push 0x78
push str._Kill_all_with_the_same_path
mov ecx, edi
mov dword [ebp - 0x228], eax
call fcn.0045fc60
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Kill_the_selected_process._Check__Delete_parent_file_when_killing__if_you_want_to_delete_the_executable_file._r_nUncheck__Kill_all_with_this_path__if_you_only_want_to_kill_the_selected_process_and_leave_other_processes_with_the_same_path_running.
push 0x5f
push 0x50
push 0xa
push 0x14a
push 0x82
push str.Kill_process
mov dword [ebp - 0x230], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Show_information_on_the_selected_process__such_the_command_line__r_nthe_executable_file_description_or_digital_signature
push 0x5f
push 0x50
push 0xa
push 0x19f
push 0x8b
push str.Process_properties
mov dword [ebp - 0x1ac], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Kill_specific_processes_using_a_filter._This_action_does_not_kill_system_critical_processes___r_nthus_will_not_shut_down_the_computer._Youll_be_prompted_to_ignore_other_r_ntrustful_system_processes
push 0x5f
push 0x50
push 0xa
push 0x1f4
push 0x81
push str.Kill_all_processes
mov dword [ebp - 0x1bc], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Show_online_help__F1_
push 0x1b
push 0x46
push 0xa
push 0x249
push 0x7d
push str.Help
mov dword [ebp - 0x234], eax
call fcn.0045fd50
sub esp, 8
mov dword [edi + 0x11bc], eax
push 0x43
push 0x46
push 0x26
push 0x249
push ecx
mov ecx, esi
call fcn.005c0330
mov dword [ebp - 0x1d0], eax
push 0x20
push 0x59
mov ecx, edi
call fcn.00436320
push 0
push str.Click_the_Window_catcher_to_pick_it_up__and_then_drag_it_to_the_desired_program.
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x21c], eax
call fcn.0045b370
sub esp, 0xc
mov ecx, esi
push dword [ebp - 0x1d0]
call fcn.005c5730
mov edx, dword [ebp - 0x21c]
mov ecx, eax
call fcn.00595570
push eax
lea ecx, [ebp - 0x1b0]
call fcn.005c6510
push 0
push ecx
mov byte [ebp - 4], 3
mov ecx, edi
mov dword [esp], 0x41500000
push str.Go_back_to_the_Home_page__Esc_
push 0x5f
push 0x50
push 0xa
push 0x294
push 0xb3
push str.Home
call fcn.0045fdf0
push 0
push 0x10800080
push 0x19
push 0xb9
push 0x23
push 0x2f3
push str.Find_a_process__CtrlF_
mov ecx, esi
mov dword [edi + 0x11c0], eax
call fcn.005c0a40
push 0x909090
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x1b4], eax
call fcn.005bec70
movsd xmm0, qword [0x6edb08]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, esi
call fcn.005beb10
push 0x40
push 0xffffffffffffffff
mov ecx, esi
call fcn.005bd3f0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.List_menu
push 0x28
push 0x5a
push 0x41
push 0x2f3
push 0x86
push str.List_menu
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
push str.Find_next__F3_
push 0x28
push 0x5a
mov dword [ebp - 0x1ec], eax
push 0x41
push 0x352
push 0x99
push str.Find_next
mov ecx, edi
call fcn.0045fd50
movsd xmm1, qword [0x6edaf8]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
mov dword [ebp - 0x1e8], eax
call fcn.005c42b0
push 0x10020
push 0x10000009
push 0x1b3
push 0x2ee
push 0x73
push 0
push 0x627824
push str.Executable_path_nPublisher__Not_verified__nThreat_level_nCPU_nRAM_nPID_nName_nParent_PID
mov ecx, esi
call fcn.005c0620
push 0x433
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x188], eax
call fcn.005bda80
push 0
push str.ProcessExplorer
mov ecx, edi
call fcn.0045f4d0
mov ecx, edi
call fcn.0045f300
push dword [ebp - 0x1d0]
mov ecx, esi
call fcn.005c5730
push dword [ebp - 0x188]
mov ecx, esi
mov dword [ebp - 0x238], eax
call fcn.005c5730
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x19c], eax
push ecx
push eax
push str.ProcessExplorer
mov dword [ebp - 0x38], 8
mov dword [ebp - 0x34], 0x1ac
mov dword [ebp - 0x30], 0x96
mov dword [ebp - 0x2c], 0x4e
mov dword [ebp - 0x28], 0x44
mov dword [ebp - 0x24], 0x64
mov dword [ebp - 0x20], 0x3c
mov dword [ebp - 0x1c], 0x78
mov dword [ebp - 0x18], 0x46
call fcn.0045b1e0
lea eax, [ebp - 0x110]
mov dword [ebp - 0xe8], 0
push eax
push 2
xorps xmm0, xmm0
mov dword [ebp - 0x110], 1
push 0x1060
push dword [ebp - 0x19c]
movlpd qword [ebp - 0x108], xmm0
movlpd qword [ebp - 0x100], xmm0
movlpd qword [ebp - 0xf8], xmm0
movlpd qword [ebp - 0xf0], xmm0
mov dword [ebp - 0x10c], 2
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x110]
push eax
push 3
push 0x1060
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x110]
push eax
push 4
push 0x1060
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x110]
mov dword [ebp - 0x10c], 1
push eax
push 5
push 0x1060
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x110]
push eax
push 7
push 0x1060
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 1
mov ecx, edi
call fcn.0043d720
push 0x48
call dword [sym.imp.USER32.dll_GetSystemMetrics]
movsd xmm0, qword [0x6edab8]
comisd xmm0, xmmword [edi + 8]
mov dword [ebp - 0x1a4], eax
jb 0x45ca12
push 4
call dword [sym.imp.USER32.dll_GetSysColor]
or eax, 0xff000000
mov dword [ebp - 0x1a8], eax
jmp 0x45ca1c
mov dword [ebp - 0x1a8], 0
push 0
push ecx
push 0x12
push 0x55
mov ecx, edi
call fcn.00436320
add esp, 4
mov ecx, esi
push eax
push 1
push dword [ebp - 0x188]
call fcn.005be460
push dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x1a4]
mov ecx, edi
push eax
push eax
push 0x8b
call fcn.00436420
push eax
lea ecx, [ebp - 0x158]
call fcn.005c6520
mov byte [ebp - 4], 4
mov ecx, esi
push dword [ebp - 0x158]
push str.Process_properties_tCtrlEnter
push dword [ebp - 0x188]
call fcn.005c1450
push 0
push eax
push eax
mov ecx, esi
mov dword [ebp - 0x1e4], eax
call fcn.005c56e0
push eax
call dword [sym.imp.USER32.dll_SetMenuDefaultItem]
push dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x1a4]
mov ecx, edi
push eax
push eax
push 0x82
call fcn.00436420
push eax
lea ecx, [ebp - 0x15c]
call fcn.005c6520
push 0
mov byte [ebp - 4], 5
mov ecx, esi
push dword [ebp - 0x15c]
push 0
push 0x32
push str.Kill_selected_process_tDel
push dword [ebp - 0x188]
call fcn.005c0400
push 0
push dword [ebp - 0x15c]
mov ecx, esi
mov dword [ebp - 0x1f4], eax
push 0
push 0x32
push str.Kill_all_processes_with_the_selected_path_tShiftDel
push dword [ebp - 0x188]
call fcn.005c0400
push dword [ebp - 0x1a8]
mov dword [ebp - 0x22c], eax
mov ecx, edi
mov eax, dword [ebp - 0x1a4]
push eax
push eax
push 0x81
call fcn.00436420
push eax
lea ecx, [ebp - 0x160]
call fcn.005c6520
push 0
mov byte [ebp - 4], 6
push dword [ebp - 0x160]
push 0
push 0x32
push str.Kill_process_and_delete_file_tCtrlDel
push dword [ebp - 0x188]
mov ecx, esi
call fcn.005c0400
push dword [ebp - 0x1a8]
mov dword [ebp - 0x224], eax
mov ecx, edi
mov eax, dword [ebp - 0x1a4]
push eax
push eax
push 0x7a
call fcn.00436420
push eax
lea ecx, [ebp - 0x170]
call fcn.005c6520
push 0
mov byte [ebp - 4], 7
mov ecx, esi
push dword [ebp - 0x170]
push 0
push 0x32
push str.Delete_parent_directory_tAltDel
push dword [ebp - 0x188]
call fcn.005c0400
push 0
push dword [ebp - 0x160]
mov ecx, esi
mov dword [ebp - 0x1f0], eax
push 0
push 0x32
push str.Kill_all_using_filters_tCtrlA
push dword [ebp - 0x188]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x188]
mov ecx, esi
mov dword [ebp - 0x1dc], eax
call fcn.005c0400
push dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x1a4]
mov ecx, edi
push eax
push eax
push 0x89
call fcn.00436420
push eax
lea ecx, [ebp - 0x174]
call fcn.005c6520
push 0
mov byte [ebp - 4], 8
mov ecx, esi
push dword [ebp - 0x174]
push 0
push 0x32
push str.Pause_selected_process_tShiftP
push dword [ebp - 0x188]
call fcn.005c0400
push dword [ebp - 0x1a8]
mov dword [ebp - 0x200], eax
mov ecx, edi
mov eax, dword [ebp - 0x1a4]
push eax
push eax
push 0x96
call fcn.00436420
push eax
lea ecx, [ebp - 0x178]
call fcn.005c6520
push 0
mov byte [ebp - 4], 9
push dword [ebp - 0x178]
push 0
push 0x32
push str.Resume_selected_process_tShiftR
push dword [ebp - 0x188]
mov ecx, esi
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x188]
mov ecx, esi
mov dword [ebp - 0x204], eax
call fcn.005c0400
push dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x1a4]
mov ecx, edi
push eax
push eax
push 0x7c
call fcn.00436420
push eax
lea ecx, [ebp - 0x17c]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xa
mov ecx, esi
push dword [ebp - 0x17c]
push 0
push 0x32
push str.Google_file_name_tCtrlG
push dword [ebp - 0x188]
call fcn.005c0400
push dword [ebp - 0x1a8]
mov dword [ebp - 0x208], eax
mov ecx, edi
mov eax, dword [ebp - 0x1a4]
push eax
push eax
push 0x85
call fcn.00436420
push eax
lea ecx, [ebp - 0x16c]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xb
mov ecx, esi
push dword [ebp - 0x16c]
push 0
push 0x32
push str.Go_to_modules_tAltM
push dword [ebp - 0x188]
call fcn.005c0400
push dword [ebp - 0x1a8]
mov dword [ebp - 0x20c], eax
mov ecx, edi
mov eax, dword [ebp - 0x1a4]
push eax
push eax
push 0x80
call fcn.00436420
push eax
lea ecx, [ebp - 0x164]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xc
mov ecx, esi
push dword [ebp - 0x164]
push 0
push 0x32
push str.Verify_file_signature_tAltV
push dword [ebp - 0x188]
call fcn.005c0400
push dword [ebp - 0x1a8]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x1a4]
push eax
push eax
push 0xac
mov ecx, edi
call fcn.00436420
push eax
lea ecx, [ebp - 0x180]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xd
mov ecx, esi
push dword [ebp - 0x180]
push 0
push 0x32
push str.Open_file_location_tCtrlL
push dword [ebp - 0x188]
call fcn.005c0400
push 0
push dword [ebp - 0x158]
mov ecx, esi
mov dword [ebp - 0x214], eax
push 0
push 0x32
push str.File_properties_tCtrlP
push dword [ebp - 0x188]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x188]
mov ecx, esi
mov dword [ebp - 0x218], eax
call fcn.005c0400
push dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x1a4]
mov ecx, edi
push eax
push eax
push 0x94
call fcn.00436420
push eax
lea ecx, [ebp - 0x184]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xe
mov ecx, esi
push dword [ebp - 0x184]
push 0
push 0x32
push str.Refresh_now_tF5
push dword [ebp - 0x188]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x188]
mov ecx, esi
mov dword [ebp - 0x1c8], eax
call fcn.005c0400
push 0
push dword [ebp - 0x164]
mov ecx, esi
push 0
push 0x32
push str.VirusTotal_report_tCtrlM
push dword [ebp - 0x188]
call fcn.005c0400
push dword [ebp - 0x1a8]
mov dword [ebp - 0x1fc], eax
mov ecx, edi
mov eax, dword [ebp - 0x1a4]
push eax
push eax
push 0xb1
call fcn.00436420
push eax
lea ecx, [ebp - 0x168]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xf
mov ecx, esi
push dword [ebp - 0x168]
push 0
push 0x32
push str.Update_VirusTotal_results_tCtrlU
push dword [ebp - 0x188]
call fcn.005c0400
push 0
mov ecx, edi
mov dword [ebp - 0x1a8], eax
call fcn.0045f170
mov edx, eax
movzx ecx, word [edi + 0x11bc]
mov eax, 0x70
mov word [ebp - 0xac], cx
mov word [ebp - 0xae], ax
mov eax, 0x1b
mov word [ebp - 0xa8], ax
mov eax, 0xd
mov word [ebp - 0xa2], ax
mov eax, dword [ebp - 0x1e4]
mov word [ebp - 0xa0], ax
mov eax, dword [ebp - 0x1f4]
mov word [ebp - 0x9a], ax
mov eax, dword [ebp - 0x22c]
mov word [ebp - 0x94], ax
mov eax, dword [ebp - 0x224]
mov word [ebp - 0x8e], ax
mov eax, dword [ebp - 0x1f0]
movzx ecx, word [edi + 0x11c0]
mov word [ebp - 0x88], ax
mov eax, 0x41
mov word [ebp - 0x84], ax
mov eax, dword [ebp - 0x1dc]
mov word [ebp - 0x82], ax
mov eax, 0x50
mov word [ebp - 0x7e], ax
mov eax, dword [ebp - 0x200]
mov word [ebp - 0x7c], ax
mov eax, 0x52
mov word [ebp - 0x78], ax
mov eax, dword [ebp - 0x204]
mov word [ebp - 0x76], ax
mov eax, 0x47
mov word [ebp - 0x72], ax
mov eax, dword [ebp - 0x208]
mov word [ebp - 0x70], ax
mov eax, dword [ebp - 0x20c]
mov word [ebp - 0x6a], ax
mov eax, 0x56
mov word [ebp - 0xa6], cx
mov ecx, 0x2e
mov word [ebp - 0x66], ax
mov eax, dword [ebp - 0x210]
mov word [ebp - 0x9c], cx
mov word [ebp - 0x96], cx
mov word [ebp - 0x90], cx
mov word [ebp - 0x8a], cx
mov ecx, 0x4d
mov word [ebp - 0x64], ax
mov eax, 0x4c
mov dword [ebp - 0x1f8], edx
mov byte [ebp - 0xb0], 1
mov byte [ebp - 0xaa], 1
mov byte [ebp - 0xa4], 9
mov byte [ebp - 0x9e], 1
mov byte [ebp - 0x98], 5
mov byte [ebp - 0x92], 9
mov byte [ebp - 0x8c], 0x11
mov byte [ebp - 0x86], 9
mov byte [ebp - 0x80], 5
mov byte [ebp - 0x7a], 5
mov byte [ebp - 0x74], 9
mov byte [ebp - 0x6e], 0x11
mov word [ebp - 0x6c], cx
mov byte [ebp - 0x68], 0x11
mov byte [ebp - 0x62], 9
mov word [ebp - 0x60], ax
mov eax, dword [ebp - 0x214]
mov word [ebp - 0x5e], ax
mov eax, 0x50
mov word [ebp - 0x5a], ax
mov eax, dword [ebp - 0x218]
mov word [ebp - 0x58], ax
mov eax, 0x74
mov word [ebp - 0x54], ax
mov eax, dword [ebp - 0x1c8]
mov word [ebp - 0x52], ax
mov eax, dword [ebp - 0x1fc]
mov word [ebp - 0x4c], ax
mov eax, 0x55
mov word [ebp - 0x48], ax
mov eax, dword [ebp - 0x1a8]
mov word [ebp - 0x46], ax
mov eax, 0x72
mov word [ebp - 0x42], ax
mov eax, dword [ebp - 0x1e8]
mov word [ebp - 0x40], ax
mov eax, 0x46
mov word [ebp - 0x3c], ax
lea eax, [ebp - 0xb0]
push 0x14
mov word [ebp - 0x4e], cx
mov ecx, esi
push eax
mov byte [ebp - 0x5c], 9
mov byte [ebp - 0x56], 1
mov byte [ebp - 0x50], 9
mov byte [ebp - 0x4a], 9
mov byte [ebp - 0x44], 1
mov byte [ebp - 0x3e], 9
mov word [ebp - 0x3a], dx
call fcn.005c47a0
push 0x10a8
mov dword [ebp - 0x220], 0xffffffff
call fcn.0041e3d6
mov esi, eax
add esp, 4
mov dword [ebp - 0x198], esi
push 0x10a8
push 0
push esi
mov byte [ebp - 4], 0x10
call fcn.00420090
add esp, 0xc
mov ecx, esi
push dword [edi + 0xcc]
push dword [edi + 0xc8]
push dword [ebp - 0x19c]
call fcn.00597c50
mov dword [ebp - 0x154], eax
push 1
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x11
call fcn.005d0610
push 0
push 0
push 0xb
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [ebp - 0x18c]
push esi
push dword [ebp - 0x1c0]
push dword [ebp - 0x1d4]
push 0
push dword [ebp - 0x19c]
push dword [ebp - 0x154]
call fcn.0045aca0
push 0
push 1
push 0xb
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x45d1d5
push eax
lea ecx, [ebp - 0xd0]
call fcn.005db290
push 0xffffffffffffffff
push 0x19
push 5
lea ecx, [ebp - 0xd0]
call fcn.005dc190
mov ecx, dword [ebp - 0x19c]
mov edx, eax
call fcn.005c9ea0
push dword [ebp - 0x1bc]
mov ecx, edi
push dword [ebp - 0x1ac]
push dword [ebp - 0x188]
call fcn.0046af40
push 0
push 1
mov ecx, edi
call fcn.0043d720
call fcn.004357a0
test al, al
je 0x45d217
push 0xffffffffffffffff
push 0x20
push 2
push 0
push dword [ebp - 0x19c]
mov ecx, edi
call fcn.00435710
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_SetFocus]
push 0x20
push dword [ebp - 0x1b4]
mov ecx, esi
call fcn.005bd3f0
push 0
lea ecx, [ebp - 0x138]
mov byte [ebp - 0x19e], 0
call fcn.005d0610
push dword [ebp - 0x1e8]
mov ecx, esi
call fcn.005c4370
push 0
mov ecx, edi
call fcn.004771c0
test eax, eax
je 0x45ecc5
mov esi, dword [ebp - 0x1b0]
lea eax, [edi + 0x14a8]
xorps xmm1, xmm1
mov dword [ebp - 0x194], eax
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x1a4], eax
call fcn.005d05a0
comisd xmm0, xmmword [0x6edbb0]
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x1c0]
mov eax, dword [eax]
ja 0x45d2ca
cmp eax, ecx
jne 0x45d387
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x18c]
cmp dword [edi + 0x14d8], eax
jne 0x45d38d
jmp 0x45d2dc
cmp eax, ecx
jne 0x45d30d
mov eax, dword [ebp - 0x18c]
cmp dword [edi + 0x14d8], eax
jne 0x45d30d
push 4
push ecx
mov ecx, eax
call fcn.005bc500
neg eax
lea ecx, [ebp - 0xd4]
push 0
sbb eax, eax
neg eax
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xd8]
push eax
push 4
push str.HideCriticalProcesses
call fcn.005d5f20
lea ecx, [ebp - 0x150]
call fcn.005d05f0
push dword [ebp - 0x18c]
push dword [ebp - 0x1c0]
push dword [ebp - 0x1d4]
push 0xfffffffffffffffe
push dword [ebp - 0x19c]
push dword [ebp - 0x154]
call fcn.0045aca0
cmp al, 2
jne 0x45d362
call fcn.004357a0
test al, al
je 0x45d362
push 0xffffffffffffffff
push 0x18020
push 2
push 0
push dword [ebp - 0x19c]
mov ecx, edi
call fcn.00435710
push dword [ebp - 0x1bc]
mov ecx, edi
push dword [ebp - 0x1ac]
push dword [ebp - 0x188]
call fcn.0046af40
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x1a4]
mov edx, dword [ecx]
mov dword [ebp - 0x194], edx
cmp edx, 0xfffffffa
je 0x45ecc5
cmp dword [edi + 0x14d8], eax
jne 0x45ec9d
cmp edx, dword [edi + 0x11c0]
je 0x45ecbe
cmp byte [ebp - 0x19e], 1
jne 0x45d3e4
cmp edx, 0xffffff31
jne 0x45d3e4
lea ecx, [ebp - 0x138]
call fcn.005d05f0
mov byte [ebp - 0x19e], 2
jmp 0x45eca6
mov ecx, dword [ebp - 0x188]
cmp edx, 0xffffffea
jne 0x45d3f7
cmp dword [edi + 0x14b4], ecx
je 0x45d403
cmp edx, dword [ebp - 0x1ec]
jne 0x45d581
cmp edx, dword [ebp - 0x1ec]
jne 0x45d44f
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_SetFocus]
cmp byte [ebp - 0x19e], 2
jne 0x45d448
xorps xmm1, xmm1
lea ecx, [ebp - 0x138]
call fcn.005d05a0
movsd xmm1, qword [0x6edb98]
comisd xmm1, xmm0
jbe 0x45d448
mov byte [ebp - 0x19e], 0
jmp 0x45eca6
mov byte [ebp - 0x19e], 1
push 2
push 0xffffffffffffffff
push 0x100c
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [ebp - 0x1e4]
cmp eax, 0xffffffff
mov eax, 0x40
mov ecx, 0x20
cmove ecx, eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x198], ecx
cmp edx, eax
jge 0x45d4d0
mov esi, dword [ebp - 0x18c]
mov edi, edx
mov edx, dword [ebp - 0x1c8]
cmp edi, edx
je 0x45d4bf
cmp edi, dword [ebp - 0x1dc]
je 0x45d4bf
push ecx
push edi
mov ecx, esi
call fcn.005bd3f0
mov ecx, dword [ebp - 0x198]
mov eax, dword [ebp - 0x1a8]
mov edx, dword [ebp - 0x1c8]
inc edi
cmp edi, eax
jl 0x45d498
mov esi, dword [ebp - 0x1b0]
mov edi, dword [ebp - 0x1d8]
push 0
mov ecx, edi
call fcn.004356c0
test al, al
mov ecx, 0x20
mov eax, 0x40
cmovne ecx, eax
push ecx
push dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x18c]
call fcn.005bd3f0
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x194], eax
jne 0x45d547
lea ecx, [ebp - 0x120]
push ecx
mov ecx, dword [ebp - 0x18c]
push eax
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x120]
add eax, 0x5a
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x11c]
add eax, 0x2d
mov dword [ebp - 0x194], eax
mov eax, 8
jmp 0x45d55d
xor eax, eax
mov dword [ebp - 0x1b8], 0xffffffff
mov dword [ebp - 0x194], 0xffffffff
push dword [ebp - 0x194]
mov edx, dword [ebp - 0x188]
push dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x18c]
push eax
push edx
call fcn.005bbfd0
jmp 0x45ec9d
cmp edx, 0xffffffb3
jne 0x45d594
mov edx, dword [ebp - 0x1b4]
cmp dword [edi + 0x14b4], edx
je 0x45d5a8
mov edx, dword [ebp - 0x1a4]
mov edx, dword [edx]
cmp edx, dword [ebp - 0x1f8]
jne 0x45d666
mov ecx, edi
call fcn.0046c220
mov ecx, dword [ebp - 0x18c]
push 0x80
push dword [ebp - 0x1b4]
call fcn.005bd3f0
push dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x18c]
call fcn.005bc230
push eax
lea ecx, [ebp - 0xc4]
call fcn.005dc1c0
push str.Find_a_process__CtrlF_
lea ecx, [ebp - 0xc4]
call fcn.005dc4c0
mov ecx, dword [ebp - 0x18c]
test al, al
je 0x45d64d
push 0
push 0
push dword [ebp - 0x1b4]
call fcn.005bcd30
mov ecx, dword [ebp - 0x18c]
push 0
push dword [ebp - 0x1b4]
call fcn.005bec70
movsd xmm0, qword [0x6edb20]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
mov ecx, dword [ebp - 0x18c]
push 0x190
push dword [ebp - 0x1b4]
call fcn.005beb10
jmp 0x45ec9d
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp - 0x1b4]
call fcn.005befd0
jmp 0x45ec9d
cmp edx, 0xffffffb4
jne 0x45d6cf
mov esi, dword [ebp - 0x1b4]
cmp dword [edi + 0x14b4], esi
mov esi, dword [ebp - 0x1b0]
jne 0x45d6cf
push dword [ebp - 0x1b4]
mov ecx, eax
call fcn.005bc230
push eax
lea ecx, [ebp - 0xc4]
call fcn.005dc1c0
lea ecx, [ebp - 0xc4]
call fcn.005dc3a0
cmp eax, 3
jl 0x45eca6
push 0xffffffffffffffff
push 6
push 0xffffffffffffffff
lea ecx, [ebp - 0xc4]
call fcn.005dc190
mov ecx, dword [ebp - 0x19c]
mov edx, eax
call fcn.005c9ea0
jmp 0x45ec9d
cmp edx, dword [ebp - 0x1e8]
jne 0x45d7af
push dword [ebp - 0x1b4]
mov ecx, eax
call fcn.005bc230
push eax
lea ecx, [ebp - 0xc4]
call fcn.005dc1c0
push str.Find_a_process__CtrlF_
lea ecx, [ebp - 0xc4]
call fcn.005dc4c0
test al, al
jne 0x45d790
lea ecx, [ebp - 0xc4]
call fcn.005dbeb0
test al, al
jne 0x45d790
push dword [ebp - 0x220]
push 0x1e
push 0xffffffffffffffff
call fcn.005dc190
mov ecx, dword [ebp - 0x19c]
mov edx, eax
call fcn.005c9ea0
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x220], eax
push 0x80
cmp eax, 0xffffffff
je 0x45d75d
push dword [ebp - 0x188]
call fcn.005bd3f0
jmp 0x45ec9d
push dword [ebp - 0x1b4]
call fcn.005bd3f0
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push dword [ebp - 0x18c]
push 4
push str.Find_reached_the_end_of_the_list.
call fcn.0043e2e0
jmp 0x45ec9d
mov ecx, dword [ebp - 0x18c]
push 0
push 0
push 0x201
push dword [ebp - 0x1f8]
call fcn.005befd0
jmp 0x45eca6
cmp edx, 0xffffffca
jne 0x45d7fa
cmp dword [edi + 0x14b4], ecx
jne 0x45d82c
mov edx, dword [edi + 0x14b8]
cmp edx, 3
je 0x45d7e4
cmp edx, 4
je 0x45d7e4
cmp edx, 5
je 0x45d7e4
mov ecx, dword [ebp - 0x19c]
xor eax, eax
push eax
call fcn.005c8de0
jmp 0x45ec9d
mov ecx, dword [ebp - 0x19c]
mov eax, 0xfffffffd
push eax
call fcn.005c8de0
jmp 0x45ec9d
cmp edx, 0xffffffd3
je 0x45ec89
cmp edx, 0xffffffd2
je 0x45ec89
cmp edx, 0xffffffeb
jne 0x45d82c
cmp dword [edi + 0x14b4], ecx
jne 0x45d82c
push dword [ebp - 0x1b4]
push ecx
mov ecx, edi
call fcn.0043e280
jmp 0x45ec9d
mov edx, dword [ebp - 0x1a4]
mov edx, dword [edx]
cmp edx, dword [ebp - 0x1bc]
je 0x45ec4a
cmp edx, dword [ebp - 0x1e4]
je 0x45ec4a
cmp edx, 0xfffffff2
jne 0x45d85d
cmp dword [edi + 0x14b4], ecx
je 0x45ec4a
cmp edx, dword [ebp - 0x1f4]
je 0x45d8a1
cmp edx, dword [ebp - 0x1ac]
jne 0x45d8ee
push 4
push dword [ebp - 0x230]
mov ecx, eax
call fcn.005bc500
test eax, eax
jne 0x45d8e8
mov ecx, dword [ebp - 0x18c]
push 4
push dword [ebp - 0x228]
call fcn.005bc500
test eax, eax
mov eax, dword [ebp - 0x18c]
jne 0x45d8ee
push dword [ebp - 0x188]
xorps xmm0, xmm0
mov ecx, eax
movlpd qword [ebp - 0xb8], xmm0
call fcn.005bb360
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], 0
mov byte [ebp - 4], 0x13
cmp dword [eax], 0
jne 0x45eaca
push eax
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x1a4]
mov ecx, dword [ecx]
cmp ecx, dword [ebp - 0x224]
je 0x45e93d
mov edx, dword [ebp - 0x1ac]
cmp ecx, edx
jne 0x45d929
push 4
push dword [ebp - 0x228]
mov ecx, eax
call fcn.005bc500
test eax, eax
jne 0x45e93d
mov edx, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [ecx]
cmp eax, dword [ebp - 0x22c]
je 0x45e779
cmp eax, edx
jne 0x45d968
mov ecx, dword [ebp - 0x18c]
push 4
push dword [ebp - 0x230]
call fcn.005bc500
test eax, eax
jne 0x45e779
mov edx, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [ecx]
cmp eax, dword [ebp - 0x1f0]
jne 0x45dbbf
push dword [ebp - 0x188]
mov ecx, dword [ebp - 0x18c]
xorps xmm0, xmm0
movlpd qword [ebp - 0xb8], xmm0
call fcn.005bb360
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], 0
mov byte [ebp - 4], 0x19
cmp dword [eax], 0
jne 0x45d9bd
push eax
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x34]
push dword [ebp - 0x188]
movups xmmword [ebp - 0x34], xmm0
push dword [ebp - 0x1ac]
movups xmmword [ebp - 0x24], xmm0
push dword [ebp - 0x18c]
call fcn.005b8800
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x1a
mov eax, 0x62439c
mov ecx, dword [ebp - 0xb8]
push 0
push 0
push 0x624a00
cmp dword [ecx], 1
mov ecx, 0x636bb8
cmovne eax, ecx
lea ecx, [ebp - 0xc4]
push eax
push str.Are_you_sure_you_want_to_delete_the_parent_directory_of_the_selected_process
push str.Use_this_feature_at_your_own_risk._r_n_r_n
push str.Important:_This_feature_deletes_the_whole_folder_where_the_selected_EXE_file_resides.
call fcn.005dc200
sub esp, 8
lea ecx, [ebp - 0xc4]
push 0x8c
push 0
push 0
push 0
push 1
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
test eax, eax
jne 0x45da78
lea ecx, [ebp - 0x34]
call fcn.005b8790
mov byte [ebp - 4], 0x11
push dword [ebp - 0xb8]
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
xor eax, eax
mov dword [ebp - 0x198], 1
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0xb8]
cmp dword [eax], 1
jl 0x45db8b
mov esi, dword [ebp - 0x18c]
mov ecx, 4
mov dword [ebp - 0x190], ecx
push 0
push dword [eax + ecx]
mov ecx, esi
push dword [ebp - 0x188]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xc4]
call fcn.005dc1c0
push 0
lea ecx, [ebp - 0xc4]
call fcn.005dbed0
lea ecx, [ebp - 0xc4]
call fcn.005dc190
mov ecx, eax
call fcn.005e71d0
test al, al
je 0x45daff
inc dword [ebp - 0x1b8]
jmp 0x45db2d
push 0
push 0
lea ecx, [ebp - 0xc4]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0045a0e0
cmp eax, 2
jne 0x45db23
inc dword [ebp - 0x194]
jmp 0x45db2d
test eax, eax
jne 0x45db2d
inc dword [ebp - 0x1e0]
mov edx, dword [ebp - 0x198]
mov eax, dword [ebp - 0xb8]
inc edx
mov ecx, dword [ebp - 0x190]
add ecx, 4
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x190], ecx
cmp edx, dword [eax]
jle 0x45dab6
cmp dword [ebp - 0x1e0], 0
mov esi, dword [ebp - 0x1b0]
je 0x45db6d
mov eax, str.One_or_more_directories_could_not_be_removed.
jmp 0x45db90
cmp dword [ebp - 0x1b8], 0
je 0x45db7d
mov eax, str.One_or_more_critical_paths_were_skipped.
jmp 0x45db90
cmp dword [ebp - 0x194], 0
mov eax, str.One_or_more_paths_were_scheduled_for_removal_on_reboot.
jne 0x45db90
mov eax, str.All_selected_folders_were_successfully_removed.
mov byte [ebp - 0x1cc], 1
lea ecx, [ebp - 0xc4]
push dword [ebp - 0x1cc]
push eax
call fcn.005dc260
sub esp, 8
push 0x8c
push 0x190
push 0
push 0
jmp 0x45e047
cmp eax, dword [ebp - 0x1dc]
je 0x45e721
cmp eax, dword [ebp - 0x234]
je 0x45e721
cmp eax, dword [ebp - 0x1fc]
jne 0x45dbf3
push 0
push dword [ebp - 0x19c]
mov ecx, edi
call fcn.00435a20
jmp 0x45ec9d
cmp eax, dword [ebp - 0x1a8]
jne 0x45dc15
push 0xffffffffffffffff
push 0x20
push 2
push 0
push dword [ebp - 0x19c]
mov ecx, edi
call fcn.00435710
jmp 0x45ec9d
cmp eax, dword [ebp - 0x200]
jne 0x45de11
push dword [ebp - 0x188]
mov ecx, dword [ebp - 0x18c]
xorps xmm0, xmm0
movlpd qword [ebp - 0xb8], xmm0
call fcn.005bb360
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], 0
mov byte [ebp - 4], 0x1c
cmp dword [eax], 0
jne 0x45dc68
push eax
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x34]
push dword [ebp - 0x188]
movups xmmword [ebp - 0x34], xmm0
push dword [ebp - 0x1ac]
movups xmmword [ebp - 0x24], xmm0
push dword [ebp - 0x18c]
call fcn.005b8800
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x1d
mov eax, 0x624a00
mov ecx, dword [ebp - 0xb8]
push 0
push 0
push 0
cmp dword [ecx], 1
mov ecx, 0x6e27c8
push 0
cmovne eax, ecx
lea ecx, [ebp - 0xc4]
push eax
push str.Are_you_sure_you_want_to_pause_the_selected_process
call fcn.005dc200
sub esp, 8
lea ecx, [ebp - 0xc4]
push 0x8c
push 0x190
push 0
push 0
push 1
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
test eax, eax
jne 0x45dd1d
lea ecx, [ebp - 0x34]
call fcn.005b8790
mov byte [ebp - 4], 0x11
push dword [ebp - 0xb8]
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
mov eax, dword [ebp - 0xb8]
xor ecx, ecx
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x198], 1
cmp dword [eax], 1
jl 0x45ddf5
mov esi, dword [ebp - 0x18c]
mov ecx, 4
mov dword [ebp - 0x1b8], ecx
nop
push 5
push dword [ecx + eax]
mov ecx, esi
push dword [ebp - 0x188]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xd0]
call fcn.005dc1c0
lea ecx, [ebp - 0xd0]
call fcn.005dafe0
mov dl, 1
mov ecx, eax
call fcn.005cad10
lea ecx, [ebp - 0xd0]
test eax, eax
je 0x45dd9e
inc dword [ebp - 0x194]
mov dword [ebp - 0x190], str.Successfully_paused_process_ID
jmp 0x45dda8
mov dword [ebp - 0x190], str.Failed_to_pause_process_ID
call fcn.005dc190
push 0
push 0
push eax
push dword [ebp - 0x190]
mov ecx, edi
call fcn.0045a700
mov edx, dword [ebp - 0x198]
mov eax, dword [ebp - 0xb8]
inc edx
mov ecx, dword [ebp - 0x1b8]
add ecx, 4
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x1b8], ecx
cmp edx, dword [eax]
jle 0x45dd50
mov esi, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x194]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.successfully_paused.
jmp 0x45e009
cmp eax, dword [ebp - 0x204]
jne 0x45e07b
push dword [ebp - 0x188]
mov ecx, dword [ebp - 0x18c]
xorps xmm0, xmm0
movlpd qword [ebp - 0xb8], xmm0
call fcn.005bb360
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], 0
mov byte [ebp - 4], 0x1e
cmp dword [eax], 0
jne 0x45de64
push eax
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x34]
push dword [ebp - 0x188]
movups xmmword [ebp - 0x34], xmm0
push dword [ebp - 0x1ac]
movups xmmword [ebp - 0x24], xmm0
push dword [ebp - 0x18c]
call fcn.005b8800
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x1f
mov eax, 0x624a00
mov ecx, dword [ebp - 0xb8]
push 0
push 0
push 0
cmp dword [ecx], 1
mov ecx, 0x6e27c8
push 0
cmovne eax, ecx
lea ecx, [ebp - 0xc4]
push eax
push str.Are_you_sure_you_want_to_resume_the_selected_process
call fcn.005dc200
sub esp, 8
lea ecx, [ebp - 0xc4]
push 0x8c
push 0x190
push 0
push 0
push 1
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
test eax, eax
jne 0x45df19
lea ecx, [ebp - 0x34]
call fcn.005b8790
mov byte [ebp - 4], 0x11
push dword [ebp - 0xb8]
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
mov eax, dword [ebp - 0xb8]
xor ecx, ecx
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x190], 1
cmp dword [eax], 1
jl 0x45dff2
mov esi, dword [ebp - 0x18c]
mov ecx, 4
mov dword [ebp - 0x198], ecx
nop dword [eax + eax]
push 5
push dword [ecx + eax]
mov ecx, esi
push dword [ebp - 0x188]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xd0]
call fcn.005dc1c0
lea ecx, [ebp - 0xd0]
call fcn.005dafe0
xor dl, dl
mov ecx, eax
call fcn.005cad10
lea ecx, [ebp - 0xd0]
push 0
push 0
test eax, eax
je 0x45dfaa
call fcn.005dc190
push eax
push str.Successfully_resumed_process_ID
mov ecx, edi
call fcn.0045a700
inc dword [ebp - 0x194]
jmp 0x45dfbc
call fcn.005dc190
push eax
push str.Failed_to_resume_process_ID
mov ecx, edi
call fcn.0045a700
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0xb8]
inc edx
mov ecx, dword [ebp - 0x198]
add ecx, 4
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x198], ecx
cmp edx, dword [eax]
jle 0x45df50
mov esi, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x194]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.successfully_resumed.
cmp ecx, 1
mov edx, 0x6e3004
mov eax, 0x62438c
cmovne eax, edx
push eax
push str._process
push ecx
lea ecx, [ebp - 0xc4]
call fcn.005db320
mov ecx, eax
call fcn.005da780
sub esp, 8
push 0x8c
push 0x190
push 0
push dword [ebp - 0x18c]
push 4
lea ecx, [ebp - 0xc4]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
lea ecx, [ebp - 0x34]
call fcn.005b8790
mov byte [ebp - 4], 0x11
push dword [ebp - 0xb8]
call fcn.0041e1c3
add esp, 4
jmp 0x45ec9d
cmp eax, dword [ebp - 0x208]
jne 0x45e16d
push dword [ebp - 0x188]
mov ecx, dword [ebp - 0x18c]
xorps xmm0, xmm0
movlpd qword [ebp - 0xb8], xmm0
call fcn.005bb360
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], 0
mov byte [ebp - 4], 0x20
mov ecx, dword [eax]
test ecx, ecx
jne 0x45e0cf
push eax
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
mov dword [ebp - 0x190], 1
cmp ecx, 1
jl 0x45e15b
mov esi, dword [ebp - 0x18c]
mov ecx, 4
mov dword [ebp - 0x198], ecx
push 0
push dword [eax + ecx]
mov ecx, esi
push dword [ebp - 0x188]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xc4]
call fcn.005dc1c0
push 2
push 1
lea ecx, [ebp - 0xc4]
call fcn.005dbf40
mov ecx, eax
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0045ee00
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0xb8]
inc edx
mov ecx, dword [ebp - 0x198]
add ecx, 4
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x198], ecx
cmp edx, dword [eax]
jle 0x45e0f3
mov esi, dword [ebp - 0x1b0]
push eax
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45ec9d
cmp eax, dword [ebp - 0x20c]
jne 0x45e1d0
push 2
push 0xffffffffffffffff
push 0x100c
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0xffffffff
je 0x45eca6
mov ecx, dword [ebp - 0x18c]
push 5
push eax
push dword [ebp - 0x188]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xd0]
call fcn.005dc1c0
lea ecx, [ebp - 0xd0]
mov byte [ebp - 0x19d], 3
call fcn.005dafe0
mov dword [edi + 0x1f70], eax
jmp 0x45ecc5
cmp eax, dword [ebp - 0x210]
jne 0x45e495
push dword [ebp - 0x188]
mov ecx, dword [ebp - 0x18c]
xorps xmm0, xmm0
movlpd qword [ebp - 0xb8], xmm0
call fcn.005bb360
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], 0
mov byte [ebp - 4], 0x21
cmp dword [eax], 0
jne 0x45e223
push eax
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x34]
push dword [ebp - 0x188]
movups xmmword [ebp - 0x34], xmm0
push dword [ebp - 0x1ac]
movups xmmword [ebp - 0x24], xmm0
push dword [ebp - 0x18c]
call fcn.005b8800
sub esp, 8
mov byte [ebp - 4], 0x22
mov ecx, edi
push 0x46
push 0x258
push 0
push 0x62439c
call fcn.0043da60
push 0
lea ecx, [edi + 0x14f0]
push str.Cancel
call fcn.005b64a0
push 1
push str.Next_process
lea ecx, [edi + 0x14f0]
call fcn.005b64a0
xorps xmm0, xmm0
mov dword [ebp - 0xdc], 0
lea ecx, [ebp - 0xe4]
movq qword [ebp - 0xe4], xmm0
call fcn.005dc5e0
mov byte [ebp - 4], 0x23
mov eax, 1
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x194], eax
mov ecx, dword [ecx]
cmp ecx, eax
jl 0x45e45e
mov esi, dword [ebp - 0x18c]
cmp eax, ecx
mov dword [ebp - 0x1b8], 0x64
jne 0x45e30a
push 2
push 2
lea ecx, [edi + 0x14f0]
call fcn.005b61c0
push str.Close
push 1
lea ecx, [edi + 0x14f0]
call fcn.005b6150
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0xb8]
push 0
push dword [ecx + eax*4]
mov ecx, esi
push dword [ebp - 0x188]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xc4]
call fcn.005dc1c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x635758
lea ecx, [ebp - 0xc4]
call fcn.005dc190
push eax
push str.Verifying
lea ecx, [ebp - 0xe4]
call fcn.005dc200
lea ecx, [ebp - 0xe4]
call fcn.005dc190
mov ecx, dword [ebp - 0xb8]
push eax
mov eax, dword [ebp - 0x1b8]
cdq
idiv dword [ecx]
lea ecx, [edi + 0x14f0]
push eax
call fcn.005b66e0
push 0
push 1
mov ecx, edi
call fcn.0043d720
lea ecx, [ebp - 0xc4]
call fcn.005dc190
xor edx, edx
mov ecx, eax
call fcn.00594240
push eax
lea ecx, [ebp - 0xe4]
call fcn.005dc1c0
lea ecx, [edi + 0x14f0]
call fcn.005b6220
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0xc4]
call fcn.0058e5e0
sub esp, 0xc
lea ecx, [ebp - 0xc4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62781c
call fcn.005dc190
push eax
lea ecx, [ebp - 0xe4]
call fcn.005da510
lea ecx, [ebp - 0xe4]
call fcn.005dc190
push eax
push 0xffffffffffffffff
lea ecx, [edi + 0x14f0]
call fcn.005b66e0
push 3
mov ecx, edi
call fcn.0043d8e0
nop
push 0
push 0
mov ecx, edi
call fcn.0043d720
test eax, eax
je 0x45e420
cmp eax, 1
jg 0x45e458
mov ecx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x194]
add dword [ebp - 0x1b8], 0x64
inc eax
mov dword [ebp - 0x194], eax
mov ecx, dword [ecx]
cmp eax, ecx
jle 0x45e2e1
mov esi, dword [ebp - 0x1b0]
push 2
lea ecx, [edi + 0x14f0]
call fcn.005b6250
lea ecx, [ebp - 0xe4]
call fcn.005dc430
lea ecx, [ebp - 0x34]
call fcn.005b8790
mov byte [ebp - 4], 0x11
push dword [ebp - 0xb8]
call fcn.0041e1c3
add esp, 4
jmp 0x45ec9d
cmp eax, dword [ebp - 0x214]
jne 0x45e584
push dword [ebp - 0x188]
mov ecx, dword [ebp - 0x18c]
xorps xmm0, xmm0
movlpd qword [ebp - 0xb8], xmm0
call fcn.005bb360
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], 0
mov byte [ebp - 4], 0x24
mov ecx, dword [eax]
test ecx, ecx
jne 0x45e4e9
push eax
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
mov dword [ebp - 0x190], 1
cmp ecx, 1
jl 0x45e572
mov esi, dword [ebp - 0x18c]
mov ecx, 4
mov edi, dword [ebp - 0x188]
mov dword [ebp - 0x198], ecx
push 0
push dword [ecx + eax]
mov ecx, esi
push edi
call fcn.005bb510
push eax
lea ecx, [ebp - 0xc4]
call fcn.005dc1c0
lea ecx, [ebp - 0xc4]
call fcn.005dc190
xor edx, edx
mov ecx, eax
call fcn.00590c10
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0xb8]
inc edx
mov ecx, dword [ebp - 0x198]
add ecx, 4
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x198], ecx
cmp edx, dword [eax]
jle 0x45e513
mov esi, dword [ebp - 0x1b0]
mov edi, dword [ebp - 0x1d8]
push eax
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45ec9d
cmp eax, dword [ebp - 0x218]
jne 0x45e67d
push dword [ebp - 0x188]
mov ecx, dword [ebp - 0x18c]
xorps xmm0, xmm0
movlpd qword [ebp - 0xb8], xmm0
call fcn.005bb360
mov ecx, eax
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb8], ecx
mov byte [ebp - 4], 0x25
mov eax, dword [ecx]
test eax, eax
jne 0x45e5da
push ecx
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
mov dword [ebp - 0x190], 1
cmp eax, 1
jl 0x45e66b
mov esi, dword [ebp - 0x18c]
mov eax, 4
mov edi, dword [ebp - 0x188]
mov dword [ebp - 0x198], eax
push 0
push dword [eax + ecx]
mov ecx, esi
push edi
call fcn.005bb510
push eax
lea ecx, [ebp - 0xc4]
call fcn.005dc1c0
push 0
lea ecx, [ebp - 0xc4]
call fcn.005dc190
push eax
push 2
push dword [ebp - 0x1c4]
call dword [sym.imp.SHELL32.dll_SHObjectProperties]
mov edx, dword [ebp - 0x190]
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, dword [ebp - 0x198]
add eax, 4
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x198], eax
cmp edx, dword [ecx]
jle 0x45e604
mov esi, dword [ebp - 0x1b0]
mov edi, dword [ebp - 0x1d8]
push ecx
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45ec9d
cmp eax, dword [ebp - 0x1c8]
jne 0x45e6e6
push dword [ebp - 0x18c]
push dword [ebp - 0x1c0]
push dword [ebp - 0x1d4]
push 0xfffffffffffffffe
push dword [ebp - 0x19c]
push dword [ebp - 0x154]
call fcn.0045aca0
cmp al, 2
jne 0x45e6cf
call fcn.004357a0
test al, al
je 0x45e6cf
push 0xffffffffffffffff
push 0x18020
push 2
push 0
push dword [ebp - 0x19c]
mov ecx, edi
call fcn.00435710
push dword [ebp - 0x1bc]
push dword [ebp - 0x1ac]
push dword [ebp - 0x188]
jmp 0x45ec96
cmp eax, dword [ebp - 0x1d0]
jne 0x45ec9d
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_SetFocus]
mov edx, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x1c4]
push esi
push dword [ebp - 0x21c]
push dword [ebp - 0x19c]
call fcn.00595790
jmp 0x45ec9d
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x34]
push dword [ebp - 0x188]
movups xmmword [ebp - 0x34], xmm0
push edx
push dword [ebp - 0x18c]
movups xmmword [ebp - 0x24], xmm0
call fcn.005b8800
push 1
push 0
lea ecx, [edi + 0x1290]
mov byte [ebp - 4], 0x1b
call fcn.0057a800
push dword [ebp - 0x1c4]
call dword [sym.imp.USER32.dll_BringWindowToTop]
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x11
call fcn.005b8790
jmp 0x45ec9d
push dword [ebp - 0x188]
mov ecx, dword [ebp - 0x18c]
xorps xmm0, xmm0
movlpd qword [ebp - 0xb8], xmm0
call fcn.005bb360
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], 0
mov byte [ebp - 4], 0x17
mov ecx, dword [eax]
test ecx, ecx
jne 0x45e7c1
push eax
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
push 0
push 0
push 0
push 0
push 0
push 0
cmp ecx, 1
mov eax, 0x62439c
push str._will_NOT_be_deleted._Continue_
mov ecx, 0x648020
cmovne eax, ecx
lea ecx, [ebp - 0xc4]
push eax
push str._r_n_r_nThe_executable_file
push 0x624288
push eax
push str.This_will_kill_all_the_processes_with_the_selected_path
call fcn.005dc200
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x34]
push dword [ebp - 0x188]
movups xmmword [ebp - 0x34], xmm0
push dword [ebp - 0x1ac]
movups xmmword [ebp - 0x24], xmm0
push dword [ebp - 0x18c]
call fcn.005b8800
sub esp, 8
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xc4]
push 0x8c
push 0
push 0
push 0
push 1
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
test eax, eax
jne 0x45e875
lea ecx, [ebp - 0x34]
call fcn.005b8790
mov byte [ebp - 4], 0x11
push dword [ebp - 0xb8]
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x198], 1
cmp dword [eax], 1
jl 0x45e05c
mov esi, dword [ebp - 0x18c]
mov ecx, 4
mov dword [ebp - 0x194], ecx
nop
push 0
push dword [ecx + eax]
mov ecx, esi
push dword [ebp - 0x188]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xc4]
call fcn.005dc1c0
lea ecx, [ebp - 0xc4]
call fcn.005dc190
mov ecx, eax
call fcn.005cc690
mov dword [ebp - 0x190], str.Successfully_killed_process_with_path__
lea ecx, [ebp - 0xc4]
test eax, eax
jne 0x45e8ee
mov dword [ebp - 0x190], str.Failed_to_kill_process_with_path__
call fcn.005dc190
push 0
push 0x624388
push eax
push dword [ebp - 0x190]
mov ecx, edi
call fcn.0045a700
mov edx, dword [ebp - 0x198]
mov eax, dword [ebp - 0xb8]
inc edx
mov ecx, dword [ebp - 0x194]
add ecx, 4
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x194], ecx
cmp edx, dword [eax]
jle 0x45e8a0
mov esi, dword [ebp - 0x1b0]
jmp 0x45e05c
push dword [ebp - 0x188]
mov ecx, dword [ebp - 0x18c]
xorps xmm0, xmm0
movlpd qword [ebp - 0xb8], xmm0
call fcn.005bb360
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], 0
mov byte [ebp - 4], 0x15
mov ecx, dword [eax]
test ecx, ecx
jne 0x45e985
push eax
mov byte [ebp - 4], 0x11
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp ecx, 1
mov edx, str._r_n_r_nThe_executable_files_will_be_deleted._Continue_
push 0
push 0
mov eax, str._r_n_r_nThe_executable_file_will_be_deleted._Continue_
mov ecx, str.Are_you_sure_you_want_to_kill_the_selected_processes_
cmovg eax, edx
push eax
mov eax, str.Are_you_sure_you_want_to_kill_the_selected_process_
cmovg eax, ecx
lea ecx, [ebp - 0xc4]
push eax
call fcn.005dc200
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x34]
push dword [ebp - 0x188]
movups xmmword [ebp - 0x34], xmm0
push dword [ebp - 0x1ac]
movups xmmword [ebp - 0x24], xmm0
push dword [ebp - 0x18c]
call fcn.005b8800
sub esp, 8
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xc4]
push 0x8c
push 0
push 0
push 0
push 1
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
test eax, eax
jne 0x45ea3a
lea ecx, [ebp - 0x34]
call fcn.005b8790
mov byte [ebp - 4], 0x11
push dword [ebp - 0xb8]
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x190], 1
cmp dword [eax], 1
jl 0x45e05c
mov esi, dword [ebp - 0x18c]
mov ecx, 4
mov dword [ebp - 0x198], ecx
push 0
push dword [eax + ecx]
mov ecx, esi
push dword [ebp - 0x188]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xc4]
call fcn.005dc1c0
push 0
push 0xc
lea ecx, [ebp - 0xc4]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0045a0e0
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0xb8]
inc edx
mov ecx, dword [ebp - 0x198]
add ecx, 4
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x198], ecx
cmp edx, dword [eax]
jle 0x45ea64
mov esi, dword [ebp - 0x1b0]
jmp 0x45e05c
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x34]
push dword [ebp - 0x188]
movups xmmword [ebp - 0x34], xmm0
push dword [ebp - 0x1ac]
movups xmmword [ebp - 0x24], xmm0
push dword [ebp - 0x18c]
call fcn.005b8800
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x14
mov eax, 0x624a00
mov ecx, dword [ebp - 0xb8]
push 0
push 0
push 0
cmp dword [ecx], 1
mov ecx, 0x6e27c8
push 0
cmovne eax, ecx
lea ecx, [ebp - 0xc4]
push eax
push str.Are_you_sure_you_want_to_kill_the_selected_process
call fcn.005dc200
sub esp, 8
lea ecx, [ebp - 0xc4]
push 0x8c
push 0x190
push 0
push dword [edi + 0x14e4]
push 1
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
test eax, eax
jne 0x45eb83
lea ecx, [ebp - 0x34]
call fcn.005b8790
mov byte [ebp - 4], 0x11
push dword [ebp - 0xb8]
call fcn.0041e1c3
add esp, 4
jmp 0x45eca6
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x198], 1
cmp dword [eax], 1
jl 0x45e05c
mov esi, dword [ebp - 0x18c]
mov ecx, 4
mov dword [ebp - 0x194], ecx
nop dword [eax]
push 5
push dword [ecx + eax]
mov ecx, esi
push dword [ebp - 0x188]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xd0]
call fcn.005dc1c0
lea ecx, [ebp - 0xd0]
call fcn.005dafe0
mov ecx, eax
call fcn.005cc410
mov dword [ebp - 0x190], str.Successfully_killed_process_ID
lea ecx, [ebp - 0xd0]
test al, al
jne 0x45ebfe
mov dword [ebp - 0x190], str.Failed_to_kill_process_ID
call fcn.005dc190
push 0
push 0
push eax
push dword [ebp - 0x190]
mov ecx, edi
call fcn.0045a700
mov edx, dword [ebp - 0x198]
mov eax, dword [ebp - 0xb8]
inc edx
mov ecx, dword [ebp - 0x194]
add ecx, 4
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x194], ecx
cmp edx, dword [eax]
jle 0x45ebb0
mov esi, dword [ebp - 0x1b0]
jmp 0x45e05c
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
push ecx
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0x34]
push eax
movups xmmword [ebp - 0x34], xmm0
movups xmmword [ebp - 0x24], xmm0
call fcn.005b8800
push dword [ebp - 0x188]
mov ecx, edi
mov byte [ebp - 4], 0x12
call fcn.0045b4a0
mov byte [ebp - 0x19d], al
jmp 0x45e75c
push dword [ebp - 0x1bc]
push dword [ebp - 0x1ac]
push ecx
mov ecx, edi
call fcn.0046af40
cmp byte [ebp - 0x19d], 0
jne 0x45ecc5
push 0
mov ecx, edi
call fcn.004771c0
test eax, eax
je 0x45ecc5
mov eax, dword [ebp - 0x1a4]
jmp 0x45d270
mov byte [ebp - 0x19d], 1
mov esi, dword [ebp - 0x154]
test esi, esi
je 0x45ece4
mov ecx, esi
call fcn.00597a80
push 0x10a8
push esi
call fcn.0041e7c1
add esp, 8
push dword [ebp - 0x19c]
mov dword [ebp - 0x154], 0
push str.ProcessExplorer
call fcn.0045b060
ret
invalid
jmp [edx]
push str.ProcessExplorer
mov ecx, edi
call fcn.0045f380
cmp byte [ebp - 0x19d], 0
mov ecx, edi
sete al
movzx eax, al
push eax
call fcn.0045f260
lea ecx, [ebp - 0x168]
call fcn.005c6500
lea ecx, [ebp - 0x184]
call fcn.005c6500
lea ecx, [ebp - 0x180]
call fcn.005c6500
lea ecx, [ebp - 0x164]
call fcn.005c6500
lea ecx, [ebp - 0x16c]
call fcn.005c6500
lea ecx, [ebp - 0x17c]
call fcn.005c6500
lea ecx, [ebp - 0x178]
call fcn.005c6500
lea ecx, [ebp - 0x174]
call fcn.005c6500
lea ecx, [ebp - 0x170]
call fcn.005c6500
lea ecx, [ebp - 0x160]
call fcn.005c6500
lea ecx, [ebp - 0x15c]
call fcn.005c6500
lea ecx, [ebp - 0x158]
call fcn.005c6500
lea ecx, [ebp - 0x1b0]
call fcn.005c6500
lea ecx, [ebp - 0xd4]
call fcn.005d69e0
lea ecx, [ebp - 0xd0]
call fcn.005dc430
lea ecx, [ebp - 0xc4]
call fcn.005dc430
mov al, byte [ebp - 0x19d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret