Function at 0x48521f
Capabilities:
Hide graphical window
Query or enumerate registry value

Disassembly:
sub esp, 0x84
push ebx
push ebp
push esi
push edi
mov ebp, ecx
call fcn.004e20cc
mov ebx, dword [esp + 0x9c]
xor eax, eax
mov dword [ebp], 0x558bf0
mov word [ebp + 0x70], ax
mov dword [ebp + 0x8c], ebx
mov dword [ebp + 0xa0], eax
mov dword [ebp + 0xa4], 0xf
mov byte [ebp + 0x90], al
push 0xd5e6fb
mov byte [ebp + 0x72], al
mov byte [0x5f1fa9], 1
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [ebp + 0x68], eax
call fcn.00435829
push str.back_sims
call fcn.004d6e15
mov esi, dword [sym.imp.GDI32.dll_CreateFontW]
mov edi, str.Arial
push edi
push 2
mov eax, dword [eax]
mov dword [esp + 0x20], eax
mov dword [ebp + 0x6c], eax
xor eax, eax
push eax
push eax
push 8
push 1
push eax
push eax
push eax
push 0x2bc
push eax
push eax
push eax
push 0x10
call esi
push edi
push 2
mov dword [esp + 0x34], eax
xor eax, eax
push eax
push eax
push 8
push 1
push eax
push eax
push eax
push 0x190
push eax
push eax
push eax
push 0x10
call esi
mov dword [esp + 0x14], eax
xor esi, esi
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x20]
push eax
push esi
push 0xf003f
push esi
push esi
push esi
push 0x5584a8
push reloc.WS2_32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x48533d
cmp dword [esp + 0x20], 2
jne 0x48533d
lea eax, [esp + 0x24]
mov dword [esp + 0x24], 4
push eax
lea eax, [esp + 0x2c]
push eax
push esi
push esi
push str.simsWindowPos
push dword [esp + 0x30]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x48533d
mov eax, dword [esp + 0x28]
movsx edi, ax
shr eax, 0x10
cwde
test edi, edi
jne 0x4853b6
lea edx, [esp + 0x30]
mov ecx, ebx
call fcn.0048ead0
mov edi, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
test edi, edi
jne 0x4853b6
push 0x64
pop eax
xor ebx, ebx
mov dword [ebp + 0x34], 0x1f4
push ebx
push dword [ebp + 0x64]
lea esi, [ebp + 0x2c]
mov dword [ebp + 0x30], eax
push esi
mov dword [esi], eax
mov dword [ebp + 0x38], 0x190
call dword [sym.imp.USER32.dll_AdjustWindowRect]
mov edi, dword [ebp + 0x34]
lea eax, [esp + 0x30]
sub edi, dword [esi]
mov esi, dword [ebp + 0x38]
sub esi, dword [ebp + 0x30]
push ebx
push eax
push ebx
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [esp + 0x38]
sub eax, dword [esp + 0x30]
sub eax, edi
cdq
sub eax, edx
mov edi, eax
mov eax, dword [esp + 0x3c]
sub eax, dword [esp + 0x34]
sub eax, esi
sar edi, 1
cdq
sub eax, edx
sar eax, 1
xor esi, esi
push esi
push esi
push eax
push edi
mov edi, dword [esp + 0xa8]
mov ecx, ebp
push str.back_sims
push esi
push str.sims_title
push esi
push edi
push 0xca0000
call fcn.004e2376
push 0x44
call fcn.004ed632
mov ebx, dword [esp + 0x1c]
lea ecx, [esp + 0x34]
push 0x695252
push ebx
push dword [esp + 0x20]
mov dword [esp + 0x40], 0x23
push ecx
push 0x50000004
push 0x558d18
push edi
push dword [ebp + 0x10]
mov ecx, eax
mov dword [esp + 0x58], 0x4b
mov dword [esp + 0x5c], 0xf0
mov dword [esp + 0x60], 0x14
call fcn.004e41b3
lea ecx, [ebp + 0x4c]
mov dword [ebp + 0x78], eax
push eax
call fcn.004e4ab3
lea eax, [esp + 0x30]
push eax
call fcn.004ca6cd
mov ecx, eax
call fcn.00485180
lea ecx, [esp + 0x30]
mov esi, dword [eax + 0x10]
call fcn.0043c274
cmp esi, 5
jbe 0x48548a
lea eax, [esp + 0x30]
push eax
call fcn.004ca6cd
mov ecx, eax
call fcn.00485180
cmp dword [eax + 0x14], 8
jb 0x485470
mov eax, dword [eax]
mov ecx, dword [ebp + 0x78]
push eax
push 0
push 0xc
push dword [ecx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [esp + 0x30]
call fcn.0043c274
push dword [esp + 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x44
call fcn.004ed632
push 0x695252
push ebx
push dword [esp + 0x20]
lea ecx, [esp + 0x40]
mov dword [esp + 0x40], 0x26
push ecx
push 0x50000004
push 0x558d0c
push edi
push dword [ebp + 0x10]
mov ecx, eax
mov dword [esp + 0x58], 0x72
mov dword [esp + 0x5c], 0xf0
mov dword [esp + 0x60], 0x86
call fcn.004e41b3
push eax
lea ecx, [ebp + 0x4c]
mov dword [ebp + 0x7c], eax
call fcn.004e4ab3
and dword [esp + 0x58], 0
xor eax, eax
mov word [esp + 0x48], ax
lea eax, [esp + 0x30]
push eax
mov dword [esp + 0x60], 7
call fcn.004ca6cd
mov ecx, eax
call fcn.004851b5
lea ecx, [esp + 0x30]
mov esi, dword [eax + 0x10]
call fcn.0043c274
cmp esi, 5
jbe 0x485578
lea eax, [esp + 0x78]
push 0x558d34
push eax
call fcn.004ca6cd
mov ecx, eax
call fcn.004851b5
push eax
mov edx, str.Email:
lea ecx, [esp + 0x68]
call fcn.0048797c
pop ecx
mov edx, eax
lea ecx, [esp + 0x34]
call fcn.0043de86
pop ecx
push eax
lea ecx, [esp + 0x4c]
call fcn.0043a3e7
lea ecx, [esp + 0x30]
call fcn.0043c274
lea ecx, [esp + 0x60]
call fcn.0043c274
lea ecx, [esp + 0x78]
call fcn.0043c274
lea eax, [esp + 0x78]
push eax
call fcn.004ca6cd
mov ecx, eax
call fcn.004851ea
lea ecx, [esp + 0x78]
mov esi, dword [eax + 0x10]
call fcn.0043c274
test esi, esi
je 0x4855e4
lea eax, [esp + 0x60]
push str._r_n_n_n
push eax
call fcn.004ca6cd
mov ecx, eax
call fcn.004851ea
mov edx, eax
lea ecx, [esp + 0x7c]
call fcn.0043de86
pop ecx
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x4855c5
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [esp + 0x50]
call fcn.0043d30e
lea ecx, [esp + 0x78]
call fcn.0043c274
lea ecx, [esp + 0x60]
call fcn.0043c274
cmp dword [esp + 0x5c], 8
lea ecx, [esp + 0x48]
mov eax, dword [ebp + 0x7c]
cmovae ecx, dword [esp + 0x48]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push ecx
push 0
push 0xc
push dword [eax + 8]
call esi
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
mov eax, 0x1f4
push eax
push eax
mov eax, dword [ebp + 0x7c]
push 0xb1
push dword [eax + 0x10]
push dword [ebp + 0x10]
call ebx
push eax
call esi
push 0x40
call fcn.004ed632
push ecx
mov edx, str.sims_btn_send
mov dword [esp + 0x38], 0x22
push edx
push dword [esp + 0x38]
lea ecx, [esp + 0x40]
mov dword [esp + 0x44], 0x11d
push ecx
push edx
push edi
push dword [ebp + 0x10]
mov ecx, eax
mov dword [esp + 0x58], 0xf3
mov dword [esp + 0x5c], 0x1e
call fcn.004e40db
push eax
lea ecx, [ebp + 0x4c]
mov dword [ebp + 0x74], eax
call fcn.004e4ab3
mov eax, dword [ebp + 0x74]
push 0
push dword [eax + 0x10]
push dword [ebp + 0x10]
call ebx
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0x44
call fcn.004ed632
push 0xf
pop ecx
push 0x45b346
push dword [esp + 0x20]
mov dword [esp + 0x44], ecx
push dword [esp + 0x20]
mov dword [esp + 0x4c], ecx
lea ecx, [esp + 0x40]
push ecx
push 0x54ddd9
push edi
push dword [ebp + 0x10]
mov ecx, eax
mov dword [esp + 0x50], 0xa
mov dword [esp + 0x54], 0x125
call fcn.004e3fd3
push eax
lea ecx, [ebp + 0x4c]
mov dword [ebp + 0x80], eax
call fcn.004e4ab3
mov eax, dword [ebp + 0x80]
mov edi, dword [sym.imp.USER32.dll_SetWindowTextW]
push 0x558d5c
push dword [eax + 8]
call edi
mov eax, dword [ebp + 0x80]
push 0
push dword [eax + 0x10]
push dword [ebp + 0x10]
call ebx
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call esi
push 0x44
call fcn.004ed632
push 0xf
pop ecx
push 0x1b1be1
push dword [esp + 0x20]
mov dword [esp + 0x44], ecx
push dword [esp + 0x20]
mov dword [esp + 0x4c], ecx
lea ecx, [esp + 0x40]
push ecx
push 0x54ddd9
push dword [esp + 0xb0]
mov ecx, eax
mov dword [esp + 0x4c], 0xa
push dword [ebp + 0x10]
mov dword [esp + 0x54], 0x125
call fcn.004e3fd3
push eax
lea ecx, [ebp + 0x4c]
mov dword [ebp + 0x84], eax
call fcn.004e4ab3
mov eax, dword [ebp + 0x84]
push 0x558d58
push dword [eax + 8]
call edi
mov eax, dword [ebp + 0x84]
push 0
push dword [eax + 0x10]
push dword [ebp + 0x10]
call ebx
push eax
call esi
mov eax, dword [ebp + 0x7c]
push dword [eax + 8]
call dword [sym.imp.USER32.dll_SetFocus]
lea ecx, [esp + 0x48]
call fcn.0043c274
pop edi
pop esi
mov eax, ebp
pop ebp
pop ebx
add esp, 0x84
ret 8