Function at 0x45c710
Capabilities:
Enumerate gui resources
Enumerate network shares
Get graphical window text
Get http document via iwebbrowser2
Resolve function by parsing pe exports
Schedule task via itaskservice
Write file on windows

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4bc7a0
push eax
mov dword fs:[0], esp
sub esp, 0x374
push ebx
push ebp
xor eax, eax
push esi
push edi
mov ebp, 1
cmp dword [0x4de100], eax
je 0x45c80b
mov dword [esp + 0x10], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x18], eax
mov eax, dword [0x4de0d4]
sub eax, 2
je 0x45c760
add dword [0x4db920], ebp
mov edi, edi
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x18]
push edx
push 0xffffffffffffffff
lea eax, [esp + 0x24]
push eax
push 0x1f6
push 0
call sub.NETAPI32.dll_NetShareEnum
mov ebx, eax
test ebx, ebx
je 0x45c7a0
cmp ebx, 0xea
je 0x45c7a0
push ebx
push str.Error:__ld_n
call fcn.004a061a
add esp, 8
jmp 0x45c7ff
mov edi, ebp
cmp dword [esp + 0x10], ebp
jb 0x45c7f5
mov esi, dword [esp + 0x14]
add esi, 0x18
nop
mov ecx, dword [esi - 4]
mov edx, dword [esi]
mov eax, dword [esi - 0x18]
push ecx
push edx
push eax
push str.__20S__30S__8u
call fcn.004a061a
mov ecx, dword [esi + 0xc]
add esp, 0x10
push ecx
call dword [sym.imp.ADVAPI32.dll_IsValidSecurityDescriptor]
test eax, eax
je 0x45c7dd
push str.Yes_n
jmp 0x45c7e2
push 0x4beb54
call fcn.004a061a
add edi, ebp
add esp, 4
add esi, 0x28
cmp edi, dword [esp + 0x10]
jbe 0x45c7b0
mov edx, dword [esp + 0x14]
push edx
call sub.NETAPI32.dll_NetApiBufferFree
cmp ebx, 0xea
je 0x45c760
mov eax, dword [0x4de0f0]
cmp eax, dword [0x4de0d4]
jg 0x45cb72
xor edi, edi
push edi
push edi
call dword [sym.imp.ole32.dll_CoInitializeEx]
cmp eax, edi
jge 0x45c838
push eax
push str._nCoInitializeEx_failed:__x
call fcn.004a061a
add esp, 8
push edi
push edi
push edi
push 3
push 6
push edi
push edi
push 0xffffffffffffffff
push edi
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov ebx, dword [sym.imp.ole32.dll_CoUninitialize]
cmp eax, edi
jge 0x45c864
push eax
push str._nCoInitializeSecurity_failed:__x
call fcn.004a061a
add esp, 8
call ebx
push str.WINDIR
call fcn.004a078a
add esp, 4
xor ecx, ecx
mov word [esp + 0x78], cx
mov ecx, eax
mov dword [esp + 0x8c], 7
mov dword [esp + 0x88], edi
lea esi, [ecx + 2]
nop
mov dx, word [ecx]
add ecx, 2
cmp dx, di
jne 0x45c890
sub ecx, esi
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x80]
call fcn.0045bcb0
push 0x15
push str.SYSTEM32NOTEPAD.EXE
lea ecx, [esp + 0x80]
mov dword [esp + 0x394], edi
call fcn.0045bb90
lea edx, [esp + 0x14]
push edx
push 0x4cbb40
push 1
push edi
push 0x4cbd50
mov dword [esp + 0x28], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
jge 0x45c8f7
push eax
push str.Failed_to_create_an_instance_of_ITaskService:__x
call fcn.004a061a
add esp, 8
call ebx
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [esp + 0x24]
push eax
call esi
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov ebx, dword [esp + 0x2c]
lea edx, [esp + 0x48]
push edx
mov dword [esp + 0xe8], ecx
call esi
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x50]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0xc8]
push ecx
mov dword [esp + 0x64], edx
mov dword [esp + 0x68], eax
call esi
mov eax, dword [esp + 0xcc]
mov edx, dword [esp + 0xc8]
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0xd4]
lea eax, [esp + 0x68]
push eax
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], edx
call esi
mov esi, dword [esp + 0xe4]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], ebp
mov dword [eax + 8], ebx
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x68]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0x7c]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x80]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x84]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x58]
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0x6c]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x70]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x74]
mov dword [eax + 0xc], esi
mov esi, dword [esp + 0x98]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0xac]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xb0]
mov dword [eax + 8], esi
mov esi, dword [esp + 0xb4]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x28]
push ecx
mov byte [esp + 0x3d0], 4
call eax
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x68]
push ecx
mov edi, eax
call esi
lea edx, [esp + 0xc8]
push edx
call esi
lea eax, [esp + 0x48]
push eax
call esi
lea ecx, [esp + 0x24]
push ecx
mov byte [esp + 0x390], 0
call esi
test edi, edi
jns 0x45ca6f
push edi
push str.ITaskService::Connect_failed:__x
call fcn.004a061a
mov eax, dword [esp + 0x1c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
call dword [sym.imp.ole32.dll_CoUninitialize]
xor ebx, ebx
push 0xc
mov dword [esp + 0x20], ebx
call fcn.0049eddd
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
mov byte [esp + 0x38c], 5
cmp esi, ebx
je 0x45cab6
push 0x4bec68
mov dword [esi + 4], ebx
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
cmp eax, ebx
jne 0x45cab8
push 0x8007000e
call fcn.004bbae0
xor esi, esi
mov byte [esp + 0x38c], 0
mov dword [esp + 0x10], esi
cmp esi, ebx
jne 0x45cad2
push 0x8007000e
call fcn.004bbae0
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esi]
push edx
push eax
mov eax, dword [ecx + 0x1c]
mov byte [esp + 0x398], 6
call eax
lea ecx, [esi + 8]
push ecx
mov edi, eax
mov byte [esp + 0x390], 0
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
cmp eax, ebx
jne 0x45cb2c
mov eax, dword [esi]
cmp eax, ebx
je 0x45cb13
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x45cb23
push eax
call fcn.0049e9ee
add esp, 4
push esi
call fcn.0049e3c8
add esp, 4
cmp edi, ebx
jge 0x45cb50
push edi
push str.Cannot_get_Root_folder_pointer:__x
call fcn.004a061a
mov eax, dword [esp + 0x1c]
mov edx, dword [eax]
add esp, 8
push eax
mov eax, dword [edx + 8]
call eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [esp + 0x8c], 8
mov dword [esp + 0x38c], 0xffffffff
jb 0x45cb72
mov ecx, dword [esp + 0x78]
push ecx
call fcn.0049e3c8
add esp, 4
push 0x24
call fcn.0049c2fe
push 0x24
mov esi, eax
call fcn.0049c2fe
fld dword [0x4bf690]
fstp dword [esi]
push 0x24
fld dword [0x4bf68c]
fstp dword [esi + 4]
fld dword [0x4bf688]
fst dword [esi + 8]
fld dword [0x4bf684]
fstp dword [esi + 0xc]
fld dword [0x4bf680]
fst dword [esi + 0x10]
fxch st(1)
fst dword [esi + 0x14]
fld dword [0x4bf67c]
fstp dword [esi + 0x18]
fxch st(1)
fstp dword [esi + 0x1c]
fstp dword [esi + 0x20]
fld1
fst dword [eax]
fldz
fst dword [eax + 4]
fst dword [eax + 8]
fst dword [eax + 0xc]
fst dword [eax + 0x14]
fst dword [eax + 0x18]
fstp dword [eax + 0x1c]
fst dword [eax + 0x10]
fstp dword [eax + 0x20]
call fcn.0049c2fe
fld dword [0x4bf678]
add esp, 0xc
fstp dword [eax]
push 0x4dd970
fld dword [0x4bf68c]
fst dword [eax + 4]
fld dword [0x4bf688]
fst dword [eax + 8]
fld dword [0x4bf674]
fstp dword [eax + 0xc]
fld dword [0x4bf680]
fstp dword [eax + 0x10]
fst dword [eax + 0x14]
fld dword [0x4bf670]
fstp dword [eax + 0x18]
fxch st(1)
fstp dword [eax + 0x1c]
fstp dword [eax + 0x20]
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
push 0x4dd970
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor ebp, ebp
push ebp
push 0x80
push 2
push ebp
push ebp
push accept
push 0x4bec90
mov edi, eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push str.The_file_contains_the_following_resources:_r_n_r_n
lea edx, [esp + 0x7c]
push 0x50
push edx
mov esi, eax
call fcn.0045b310
add esp, 0xc
lea ecx, [ebp + 0x50]
lea eax, [esp + 0x78]
lea ecx, [ecx]
cmp byte [eax], 0
je 0x45cd5d
inc eax
dec ecx
jne 0x45cc80
xor eax, eax
push ebp
lea ecx, [esp + 0x20]
push ecx
push eax
lea edx, [esp + 0x84]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp dword [0x4de0ec], ebp
jne 0x45ccb5
cmp dword [0x4de100], ebp
je 0x45ccc7
mov eax, dword [0x4de0c8]
push eax
push 0x452710
push edi
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesA]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x394]
push 0x206
xor eax, eax
lea edx, [esp + 0xee]
xor ebx, ebx
push ebp
xor esi, esi
push edx
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], ecx
mov dword [esp + 0xec], esi
mov dword [esp + 0x58], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
call fcn.0049e6e0
add esp, 0xc
cmp word [0x4de0e4], bp
je 0x45cd2f
movzx eax, byte [0x4de0d8]
mov dword [esp + 0x44], eax
mov eax, dword [0x4de104]
mov edi, dword [0x4de0d4]
movzx ecx, ax
cmp ecx, dword [0x4de0e8]
jbe 0x45cd71
imul eax, dword [0x4de100]
movzx edx, word [0x4de0f0]
sub edx, eax
add dword [0x4db920], edx
jmp 0x45cd9d
cmp ecx, ebp
je 0x45cc8d
mov eax, 0x50
sub eax, ecx
jmp 0x45cc8f
movzx edx, word [0x4db920]
movzx ecx, word [0x4de0cc]
imul ecx, edx
movzx edx, di
sub edx, ecx
sub edx, dword [0x4de0c8]
mov ecx, 0x4dd768
movzx ecx, cx
add edx, eax
add ecx, edx
mov dword [esp + 0x10], ecx
mov edx, esi
sub edx, dword [esp + 0x394]
add edi, 0x33
add edx, ebp
add dword [esp + 0x44], edx
xor eax, eax
movzx esi, si
movzx ebp, al
jmp 0x45cdc0
mov ecx, dword [0x4de0ec]
lea ecx, [ecx + 0x4a]
mov eax, esi
cdq
idiv ecx
movzx edx, byte [0x4de0e0]
xor ecx, ecx
mov dword [esp + 0x24], ecx
neg ecx
sub edx, eax
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], eax
neg eax
push eax
push ecx
lea eax, [esp + 0x2c]
sub edx, ebp
push eax
add ebx, edx
call dword [sym.imp.USER32.dll_OffsetRect]
dec edi
jne 0x45cdc0
mov eax, dword [0x4de0ec]
mov ecx, dword [0x4de100]
lea edx, [eax + ecx + 5]
imul edx, dword [0x4de0f0]
mov dword [esp + 0x18], edi
test edx, edx
jle 0x45d049
mov edi, dword [sym.imp.KERNEL32.dll_AllocateUserPhysicalPages]
mov ebp, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
inc eax
shl eax, 0x14
cdq
and edx, 0xfff
add eax, edx
mov ebx, dword [esp + 0x10]
sar eax, 0xc
xor ecx, ecx
mov dword [esp + 0x1c], eax
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0049c2fe
add esp, 4
push eax
lea eax, [esp + 0x20]
push eax
call ebp
push eax
call edi
mov ecx, dword [0x4de0c8]
mov edx, dword [0x4de0ec]
push 8
push ecx
push edx
call dword [sym.imp.USER32.dll_CheckMenuItem]
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov esi, dword [0x4de104]
mov ecx, dword [0x4de100]
mov eax, ebx
imul eax, esi
imul eax, ecx
sub eax, dword [esp + 0x1e8]
movzx edx, bx
mov ebx, dword [0x4db920]
inc eax
sub ebx, edx
mov dword [0x4de0e4], eax
je 0x45ced1
movzx eax, ax
add eax, ecx
sub dword [esp + 0x14], eax
jmp 0x45cf05
mov ebx, dword [0x4de0dc]
mov eax, dword [0x4de0e8]
xor edx, edx
lea ebx, [ebx + 0x59]
div ebx
imul eax, esi
imul eax, ecx
sub eax, dword [0x4de0f4]
mov ecx, dword [0x4de0c8]
add eax, dword [0x4ddf88]
lea edx, [ecx + eax - 1]
mov dword [0x4de0c8], edx
push 0
call dword [sym.imp.USER32.dll_GetCaretPos]
movzx eax, byte [0x4ddf88]
imul eax, dword [0x4de0d4]
movzx ecx, word [0x4dde2c]
cmp eax, ecx
jl 0x45cf56
mov esi, dword [esp + 0x14]
movzx edx, word [0x4de0fc]
movzx ecx, si
imul ecx, edx
mov eax, 0xd20d20d3
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, dword [0x4de100]
add esi, eax
mov dword [esp + 0x14], esi
call dword [sym.imp.USER32.dll_GetClipboardOwner]
mov ecx, dword [0x4de0d8]
mov ebx, dword [sym.imp.USER32.dll_CopyImage]
push 8
mov esi, eax
mov eax, dword [0x4de0ec]
imul esi, dword [0x4de0d4]
push ecx
push eax
push 0
push eax
call ebx
cmp dword [0x4de100], esi
jne 0x45cfd3
cmp dword [0x4de0d4], 0
jne 0x45cfd3
cmp dword [0x4de0dc], 0
jne 0x45cfd3
cmp dword [0x4de0e0], 0
je 0x45cfd3
mov esi, dword [0x4de0ec]
lea edx, [esp + 0x78]
push edx
push 0x18
push esi
call dword [sym.imp.GDI32.dll_GetObjectA]
mov eax, dword [0x4de0d8]
mov ecx, dword [0x4de0ec]
push 8
push eax
push ecx
push 0
push esi
call ebx
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x45d022
xor eax, eax
lea edx, [esp + 0x78]
push edx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
call sub.pdh.dll_PdhBrowseCountersA
mov eax, dword [0x4de0ec]
mov edx, dword [0x4de100]
mov ecx, dword [esp + 0x18]
lea edx, [eax + edx + 5]
imul edx, dword [0x4de0f0]
inc ecx
mov dword [esp + 0x18], ecx
cmp ecx, edx
jl 0x45ce40
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov edi, dword [esp + 0x44]
mov ebp, dword [esp + 0x394]
mov ebx, 0x17
jmp 0x45d075
mov eax, dword [0x4de0ec]
movzx ecx, byte [esp + 0x4c]
cmp dword [0x4de0d8], ecx
jle 0x45d09e
movzx ecx, word [0x4de0c8]
movzx edx, di
sub ecx, edx
mov edx, 0x4dd768
movzx edx, dx
lea ecx, [ecx + edx + 1]
mov dword [esp + 0x4c], ecx
add eax, 4
push eax
push 0x4dd970
push ebp
call esi
test eax, eax
jne 0x45d0b4
inc dword [0x4db920]
dec ebx
jne 0x45d070
mov edx, dword [0x4de0f4]
imul edx, dword [0x4de0d4]
mov esi, dword [0x4de0ec]
add edx, 2
mov dword [0x4de0fc], edx
xor eax, eax
lea edi, [esi + 7]
xor edx, edx
mov ecx, eax
cmp esi, edi
jne 0x45d0e1
inc ecx
push 1
sub ecx, eax
push ecx
mov ecx, eax
sub ecx, edx
push ecx
push eax
push edx
mov edx, dword [0x4de100]
push edx
call dword [sym.imp.USER32.dll_MoveWindow]
mov esi, dword [0x4de0e0]
imul esi, dword [0x4de0ec]
mov ecx, dword [0x4de0d4]
mov eax, 0x2e8ba2e9
imul dword [0x4de0c8]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
cmp esi, ecx
jge 0x45d13c
mov edx, 0x4dd768
movzx eax, dx
imul eax, dword [0x4de0e8]
mov dword [0x4de0e8], eax
push 2
push 2
lea edx, [esp + 0x2c]
xor eax, eax
push edx
push ecx
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
mov eax, dword [0x4de0f0]
mov ecx, dword [0x4de100]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp dword [0x4de0ec], 0
push 0
mov esi, eax
setne bl
call dword [sym.imp.RPCRT4.dll_I_RpcMapWin32Status]
mov edi, dword [sym.imp.USER32.dll_GetWindowLongA]
push 0xfffffffffffffff0
push esi
mov dword [0x4de100], eax
call edi
test bl, bl
je 0x45d1a4
or eax, 0x50000
jmp 0x45d1a9
and eax, 0xfffaffff
push eax
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 0
call sub.RPCRT4.dll_I_RpcServerSetAddressChangeFn
push 0x227
push 0
push 0
push 0
push 0
push 0
push esi
mov dword [0x4de0dc], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0xfffffffffffffff0
push esi
mov dword [0x4de0cc], 0
call edi
mov esi, dword [0x4de100]
mov edi, dword [0x4de104]
and eax, 0xc00000
xor ecx, ecx
cmp eax, 0xc00000
mov eax, dword [0x4de0ec]
sete cl
mov dword [0x4db920], ecx
cmp eax, 0xf
ja 0x45d315
je 0x45d29f
mov edx, eax
dec edx
je 0x45d231
dec edx
jne 0x45d320
push edx
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x45d4ef
mov edx, dword [0x4de0cc]
mov eax, dword [0x4de0c8]
push 0
push ebp
push 0
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_CreateWindowExA]
push ecx
push edx
push eax
push 0x50800000
push 0
push str.edit
push 0
call edi
mov ecx, dword [0x4de104]
mov edx, dword [0x4db920]
push 0
push ebp
push 0
push esi
push ecx
mov ecx, dword [0x4de0c8]
push edx
mov dword [0x4de118], eax
mov eax, dword [0x4de0cc]
push eax
push ecx
push 0x50000000
push str.Load
push str.button
push 0
call edi
mov dword [0x4de114], eax
jmp 0x45d4ef
lea edx, [esp + 0x78]
push edx
push esi
call dword [sym.imp.USER32.dll_BeginPaint]
mov edi, eax
lea eax, [esp + 0x24]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov ebx, dword [sym.imp.USER32.dll_DrawTextA]
push 1
lea ecx, [esp + 0x28]
push ecx
push 0xffffffffffffffff
push 0x4dd970
push edi
call ebx
push 0x24
lea edx, [esp + 0x28]
push edx
push 0x3c
lea eax, [esp + 0x2fc]
push eax
push edi
call ebx
mov ecx, dword [0x4de0c8]
mov edx, dword [0x4de104]
mov eax, dword [0x4db920]
push ecx
push 0x4dd5a8
push edx
push eax
push edi
call dword [sym.imp.GDI32.dll_TextOutA]
lea ecx, [esp + 0x78]
push ecx
push esi
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x45d4ef
cmp eax, 0x111
je 0x45d4aa
push edi
push ecx
push eax
push esi
call dword [sym.imp.USER32.dll_DefWindowProcA]
cmp dword [0x4de100], 0
je 0x45d4ef
mov cx, word [0x4bece8]
mov edx, 0x5b
mov eax, 0x5d
mov word [esp + 0x20], dx
mov dl, byte [0x4becea]
mov word [esp + 0x34], ax
lea eax, [esp + 0x10]
mov word [esp + 0x18], cx
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1e], dl
push ecx
lea edx, [esp + 0xf0]
push edx
call fcn.004a03e7
add esp, 0xc
test eax, eax
je 0x45d449
lea ecx, [esp + 0x78]
mov edi, eax
mov edx, ecx
mov esi, 0x32
sub edi, edx
lea edx, [esi + 0x7fffffcc]
test edx, edx
je 0x45d3a9
mov dl, byte [ecx + edi]
test dl, dl
je 0x45d3a9
inc ecx
dec esi
jne 0x45d392
jmp 0x45d3ad
test esi, esi
jne 0x45d3ae
dec ecx
mov ebx, dword [0x4de0fc]
add ebx, 0x10
dec ebx
mov byte [ecx], 0
je 0x45d4ef
push eax
push str.__s_n
call fcn.004a06c1
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x40]
push ecx
push 0
call fcn.004a03e7
add esp, 0x14
test eax, eax
je 0x45d3ed
push eax
call fcn.004a060f
add esp, 4
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x24]
push eax
push 0
call fcn.004a03e7
add esp, 0xc
test eax, eax
je 0x45d4ef
lea ecx, [esp + 0x78]
mov edi, eax
mov edx, ecx
mov esi, 0x32
sub edi, edx
jmp 0x45d420
lea edx, [esi + 0x7fffffcc]
test edx, edx
je 0x45d43b
mov dl, byte [ecx + edi]
test dl, dl
je 0x45d43b
inc ecx
dec esi
jne 0x45d420
dec ecx
jmp 0x45d3b7
test esi, esi
jne 0x45d3b7
dec ecx
jmp 0x45d3b7
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0xf0]
push edx
call fcn.004a03e7
lea ecx, [esp + 0x84]
mov esi, eax
mov eax, ecx
add esp, 0xc
mov edx, 0x32
sub esi, eax
lea eax, [edx + 0x7fffffcc]
test eax, eax
je 0x45d48c
mov al, byte [ecx + esi]
test al, al
je 0x45d48c
inc ecx
dec edx
jne 0x45d475
jmp 0x45d490
test edx, edx
jne 0x45d491
dec ecx
mov byte [ecx], 0
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
call fcn.004a03e7
add esp, 0xc
jmp 0x45d4ef
cmp ecx, 0x6f
jne 0x45d4ef
mov ecx, dword [0x4de118]
push 0x3c
lea eax, [esp + 0xec]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea edx, [esp + 0xe8]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
lea eax, [esp + 0x24]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
push 0
push 0
push 0xf
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esp + 0x384]
pop edi
pop esi
pop ebp
xor eax, eax
mov dword fs:[0], ecx
pop ebx
add esp, 0x380
ret