Function at 0x44cf00
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4702bb
mov eax, dword fs:[0]
push eax
sub esp, 0x1f4
mov eax, dword [0x47f0c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1b0], ecx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x10], 0
jne 0x44cf46
mov dword [ebp - 0x138], 1
jmp 0x44cf50
mov dword [ebp - 0x138], 0
mov cl, byte [ebp - 0x138]
mov byte [ebp - 0xc6], cl
movzx edx, byte [ebp - 0xc6]
test edx, edx
je 0x44cf6c
jmp 0x44e25d
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0xb8]
call fcn.0044fda0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1b4]
push ecx
lea ecx, [ebp - 0xb8]
call fcn.004505d0
mov edx, dword [eax]
mov dword [ebp - 0x190], edx
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x188], eax
mov byte [ebp - 0xd2], 0x22
lea ecx, [ebp - 0x1b8]
push ecx
lea ecx, [ebp - 0xb8]
call fcn.004505d0
mov edx, dword [eax]
mov dword [ebp - 0x194], edx
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00450470
mov ecx, dword [eax]
mov dword [ebp - 0x198], ecx
lea edx, [ebp - 0xd2]
push edx
mov eax, dword [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0x198]
push ecx
lea edx, [ebp - 0x1c0]
push edx
call fcn.0044f990
add esp, 0x10
mov eax, dword [eax]
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x184]
mov dword [ebp - 0x18c], ecx
mov edx, dword [ebp - 0x188]
push edx
mov eax, dword [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
lea ecx, [ebp - 0xb8]
call fcn.004506d0
push 4
push 0
lea edx, [ebp - 0x128]
push edx
call fcn.00453ae0
add esp, 0xc
cmp dword [0x481484], 0
jne 0x44d06e
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb8]
call fcn.0042d9e0
jmp 0x44e25d
mov dword [ebp - 0x200], 0x3c
push 0x38
push 0
lea eax, [ebp - 0x1fc]
push eax
call fcn.00453ae0
add esp, 0xc
mov dword [ebp - 0x200], 0x3c
mov dword [ebp - 0x1fc], 0x440
mov ecx, dword [ebp - 0x128]
mov dword [ebp - 0x1f8], ecx
mov dword [ebp - 0x1f4], str.open
mov ecx, dword [ebp + 8]
call fcn.0042be00
mov dword [ebp - 0x144], eax
mov edx, dword [ebp - 0x144]
mov dword [ebp - 0x1f0], edx
lea ecx, [ebp - 0xb8]
call fcn.0042be00
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x1ec], eax
movzx ecx, byte [ebp + 0x10]
test ecx, ecx
je 0x44d100
mov dword [ebp - 0x13c], 5
jmp 0x44d10a
mov dword [ebp - 0x13c], 0
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x1e4], edx
cmp dword [0x48143c], 0
jne 0x44d541
mov eax, 0xfc80
mov word [ebp - 0xa0], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xa0]
mov word [ebp - 0x124], ax
movzx ecx, word [ebp - 0x124]
mov edx, 2
imul eax, edx, 0
movzx edx, word [eax + str.ole32.dll]
xor edx, ecx
mov word [ebp - 0x9e], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xa0]
mov word [ebp - 0x12a], dx
movzx eax, word [ebp - 0x12a]
mov ecx, 2
shl ecx, 0
movzx edx, word [ecx + str.ole32.dll]
xor edx, eax
mov word [ebp - 0x9c], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xa0]
mov word [ebp - 0x12c], dx
movzx eax, word [ebp - 0x12c]
mov ecx, 2
shl ecx, 1
movzx edx, word [ecx + str.ole32.dll]
xor edx, eax
mov word [ebp - 0x9a], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xa0]
mov word [ebp - 0x12e], dx
movzx eax, word [ebp - 0x12e]
mov ecx, 2
imul edx, ecx, 3
movzx ecx, word [edx + str.ole32.dll]
xor ecx, eax
mov word [ebp - 0x98], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xa0]
mov word [ebp - 0x130], cx
movzx edx, word [ebp - 0x130]
mov eax, 2
shl eax, 2
movzx ecx, word [eax + str.ole32.dll]
xor ecx, edx
mov word [ebp - 0x96], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xa0]
mov word [ebp - 0x132], cx
movzx edx, word [ebp - 0x132]
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + str.ole32.dll]
xor eax, edx
mov word [ebp - 0x94], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xa0]
mov word [ebp - 0x134], ax
movzx ecx, word [ebp - 0x134]
mov edx, 2
imul eax, edx, 6
movzx edx, word [eax + str.ole32.dll]
xor edx, ecx
mov word [ebp - 0x92], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xa0]
mov word [ebp - 0xe2], dx
movzx eax, word [ebp - 0xe2]
mov ecx, 2
imul edx, ecx, 7
movzx ecx, word [edx + str.ole32.dll]
xor ecx, eax
mov word [ebp - 0x90], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xa0]
mov word [ebp - 0xe4], cx
movzx edx, word [ebp - 0xe4]
mov eax, 2
shl eax, 3
movzx ecx, word [eax + str.ole32.dll]
xor ecx, edx
mov word [ebp - 0x8e], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xa0]
mov word [ebp - 0xe6], cx
movzx edx, word [ebp - 0xe6]
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + str.ole32.dll]
xor eax, edx
mov word [ebp - 0x8c], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xa0]
mov word [ebp - 0xe8], ax
movzx ecx, word [ebp - 0xe8]
mov edx, 2
imul eax, edx, 0xa
movzx edx, word [eax + str.ole32.dll]
xor edx, ecx
mov word [ebp - 0x8a], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xa0]
mov word [ebp - 0xea], dx
movzx eax, word [ebp - 0xea]
mov ecx, 2
imul edx, ecx, 0xb
movzx ecx, word [edx + str.ole32.dll]
xor ecx, eax
mov word [ebp - 0x88], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xa0]
mov word [ebp - 0x106], cx
movzx edx, word [ebp - 0x106]
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + str.ole32.dll]
xor eax, edx
mov word [ebp - 0x86], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xa0]
mov word [ebp - 0xec], ax
movzx ecx, word [ebp - 0xec]
mov edx, 2
imul eax, edx, 0xd
movzx edx, word [eax + str.ole32.dll]
xor edx, ecx
mov word [ebp - 0x84], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xa0]
mov word [ebp - 0xee], dx
movzx eax, word [ebp - 0xee]
mov ecx, 2
imul edx, ecx, 0xe
movzx ecx, word [edx + str.ole32.dll]
xor ecx, eax
mov word [ebp - 0x82], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xa0]
mov word [ebp - 0xf0], cx
movzx edx, word [ebp - 0xf0]
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + str.ole32.dll]
xor eax, edx
mov word [ebp - 0x80], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xa0]
mov word [ebp - 0xf2], ax
movzx ecx, word [ebp - 0xf2]
mov edx, 2
shl edx, 4
movzx eax, word [edx + str.ole32.dll]
xor eax, ecx
mov word [ebp - 0x7e], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xa0]
mov word [ebp - 0xf4], ax
movzx ecx, word [ebp - 0xf4]
mov edx, 2
imul eax, edx, 0x11
movzx edx, word [eax + str.ole32.dll]
xor edx, ecx
mov word [ebp - 0x7c], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xa0]
mov word [ebp - 0xf6], dx
movzx eax, word [ebp - 0xf6]
mov ecx, 2
imul edx, ecx, 0x12
movzx ecx, word [edx + str.ole32.dll]
xor ecx, eax
mov word [ebp - 0x7a], cx
xor edx, edx
mov word [ebp - 0x78], dx
lea ecx, [ebp - 0xa0]
call fcn.0044ce10
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x48143c], eax
mov byte [ebp - 0x34], 0x13
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0x34]
mov byte [ebp - 0xd3], dl
movsx eax, byte [ebp - 0xd3]
mov ecx, 1
imul edx, ecx, 0
movsx ecx, byte [edx + str.CoInitializeEx]
xor ecx, eax
mov byte [ebp - 0x33], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0x34]
mov byte [ebp - 0xd4], cl
movsx edx, byte [ebp - 0xd4]
mov eax, 1
shl eax, 0
movsx ecx, byte [eax + str.CoInitializeEx]
xor ecx, edx
mov byte [ebp - 0x32], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0x34]
mov byte [ebp - 0xd5], cl
movsx edx, byte [ebp - 0xd5]
mov eax, 1
shl eax, 1
movsx ecx, byte [eax + str.CoInitializeEx]
xor ecx, edx
mov byte [ebp - 0x31], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0x34]
mov byte [ebp - 0xd6], cl
movsx edx, byte [ebp - 0xd6]
mov eax, 1
imul ecx, eax, 3
movsx eax, byte [ecx + str.CoInitializeEx]
xor eax, edx
mov byte [ebp - 0x30], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0x34]
mov byte [ebp - 0xb9], al
movsx ecx, byte [ebp - 0xb9]
mov edx, 1
shl edx, 2
movsx eax, byte [edx + str.CoInitializeEx]
xor eax, ecx
mov byte [ebp - 0x2f], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0x34]
mov byte [ebp - 0xba], al
movsx ecx, byte [ebp - 0xba]
mov edx, 1
imul eax, edx, 5
movsx edx, byte [eax + str.CoInitializeEx]
xor edx, ecx
mov byte [ebp - 0x2e], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0x34]
mov byte [ebp - 0xbb], dl
movsx eax, byte [ebp - 0xbb]
mov ecx, 1
imul edx, ecx, 6
movsx ecx, byte [edx + str.CoInitializeEx]
xor ecx, eax
mov byte [ebp - 0x2d], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0x34]
mov byte [ebp - 0xbc], cl
movsx edx, byte [ebp - 0xbc]
mov eax, 1
imul ecx, eax, 7
movsx eax, byte [ecx + str.CoInitializeEx]
xor eax, edx
mov byte [ebp - 0x2c], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0x34]
mov byte [ebp - 0xbd], al
movsx ecx, byte [ebp - 0xbd]
mov edx, 1
shl edx, 3
movsx eax, byte [edx + str.CoInitializeEx]
xor eax, ecx
mov byte [ebp - 0x2b], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0x34]
mov byte [ebp - 0xbe], al
movsx ecx, byte [ebp - 0xbe]
mov edx, 1
imul eax, edx, 9
movsx edx, byte [eax + str.CoInitializeEx]
xor edx, ecx
mov byte [ebp - 0x2a], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0x34]
mov byte [ebp - 0xbf], dl
movsx eax, byte [ebp - 0xbf]
mov ecx, 1
imul edx, ecx, 0xa
movsx ecx, byte [edx + str.CoInitializeEx]
xor ecx, eax
mov byte [ebp - 0x29], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0x34]
mov byte [ebp - 0xc0], cl
movsx edx, byte [ebp - 0xc0]
mov eax, 1
imul ecx, eax, 0xb
movsx eax, byte [ecx + str.CoInitializeEx]
xor eax, edx
mov byte [ebp - 0x28], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0x34]
mov byte [ebp - 0xc1], al
movsx ecx, byte [ebp - 0xc1]
mov edx, 1
imul eax, edx, 0xc
movsx edx, byte [eax + str.CoInitializeEx]
xor edx, ecx
mov byte [ebp - 0x27], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0x34]
mov byte [ebp - 0xc2], dl
movsx eax, byte [ebp - 0xc2]
mov ecx, 1
imul edx, ecx, 0xd
movsx ecx, byte [edx + str.CoInitializeEx]
xor ecx, eax
mov byte [ebp - 0x26], cl
xor edx, edx
mov byte [ebp - 0x25], dl
lea ecx, [ebp - 0x34]
call fcn.00450560
mov dword [ebp - 0x14c], eax
mov eax, dword [0x48143c]
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x14c]
push ecx
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x158], eax
push 6
push 0
call dword [ebp - 0x158]
mov byte [ebp - 0x24], 0x26
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0x24]
mov byte [ebp - 0xc3], al
movsx ecx, byte [ebp - 0xc3]
mov edx, 1
imul eax, edx, 0
movsx edx, byte [eax + str.ShellExecuteExW]
xor edx, ecx
mov byte [ebp - 0x23], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0x24]
mov byte [ebp - 0xc4], dl
movsx eax, byte [ebp - 0xc4]
mov ecx, 1
shl ecx, 0
movsx edx, byte [ecx + str.ShellExecuteExW]
xor edx, eax
mov byte [ebp - 0x22], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0x24]
mov byte [ebp - 0xc5], dl
movsx eax, byte [ebp - 0xc5]
mov ecx, 1
shl ecx, 1
movsx edx, byte [ecx + str.ShellExecuteExW]
xor edx, eax
mov byte [ebp - 0x21], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0x24]
mov byte [ebp - 0xd7], dl
movsx eax, byte [ebp - 0xd7]
mov ecx, 1
imul edx, ecx, 3
movsx ecx, byte [edx + str.ShellExecuteExW]
xor ecx, eax
mov byte [ebp - 0x20], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0x24]
mov byte [ebp - 0xc7], cl
movsx edx, byte [ebp - 0xc7]
mov eax, 1
shl eax, 2
movsx ecx, byte [eax + str.ShellExecuteExW]
xor ecx, edx
mov byte [ebp - 0x1f], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0x24]
mov byte [ebp - 0xc8], cl
movsx edx, byte [ebp - 0xc8]
mov eax, 1
imul ecx, eax, 5
movsx eax, byte [ecx + str.ShellExecuteExW]
xor eax, edx
mov byte [ebp - 0x1e], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0x24]
mov byte [ebp - 0xc9], al
movsx ecx, byte [ebp - 0xc9]
mov edx, 1
imul eax, edx, 6
movsx edx, byte [eax + str.ShellExecuteExW]
xor edx, ecx
mov byte [ebp - 0x1d], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0x24]
mov byte [ebp - 0xca], dl
movsx eax, byte [ebp - 0xca]
mov ecx, 1
imul edx, ecx, 7
movsx ecx, byte [edx + str.ShellExecuteExW]
xor ecx, eax
mov byte [ebp - 0x1c], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0x24]
mov byte [ebp - 0xcb], cl
movsx edx, byte [ebp - 0xcb]
mov eax, 1
shl eax, 3
movsx ecx, byte [eax + str.ShellExecuteExW]
xor ecx, edx
mov byte [ebp - 0x1b], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0x24]
mov byte [ebp - 0xcc], cl
movsx edx, byte [ebp - 0xcc]
mov eax, 1
imul ecx, eax, 9
movsx eax, byte [ecx + str.ShellExecuteExW]
xor eax, edx
mov byte [ebp - 0x1a], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0x24]
mov byte [ebp - 0xcd], al
movsx ecx, byte [ebp - 0xcd]
mov edx, 1
imul eax, edx, 0xa
movsx edx, byte [eax + str.ShellExecuteExW]
xor edx, ecx
mov byte [ebp - 0x19], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0x24]
mov byte [ebp - 0xce], dl
movsx eax, byte [ebp - 0xce]
mov ecx, 1
imul edx, ecx, 0xb
movsx ecx, byte [edx + str.ShellExecuteExW]
xor ecx, eax
mov byte [ebp - 0x18], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0x24]
mov byte [ebp - 0xcf], cl
movsx edx, byte [ebp - 0xcf]
mov eax, 1
imul ecx, eax, 0xc
movsx eax, byte [ecx + str.ShellExecuteExW]
xor eax, edx
mov byte [ebp - 0x17], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0x24]
mov byte [ebp - 0xd0], al
movsx ecx, byte [ebp - 0xd0]
mov edx, 1
imul eax, edx, 0xd
movsx edx, byte [eax + str.ShellExecuteExW]
xor edx, ecx
mov byte [ebp - 0x16], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0x24]
mov byte [ebp - 0xd1], dl
movsx eax, byte [ebp - 0xd1]
mov ecx, 1
imul edx, ecx, 0xe
movsx ecx, byte [edx + str.ShellExecuteExW]
xor ecx, eax
mov byte [ebp - 0x15], cl
xor edx, edx
mov byte [ebp - 0x14], dl
lea ecx, [ebp - 0x24]
call fcn.0042ec20
mov dword [ebp - 0x15c], eax
mov eax, dword [0x481484]
mov dword [ebp - 0x160], eax
mov ecx, dword [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x160]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x168], eax
lea ecx, [ebp - 0x200]
push ecx
call dword [ebp - 0x168]
movzx edx, byte [ebp + 0x10]
test edx, edx
je 0x44e239
cmp dword [0x481488], 0
jne 0x44df2a
mov eax, 0x1457
mov word [ebp - 0x74], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0x74]
mov word [ebp - 0xf8], ax
movzx ecx, word [ebp - 0xf8]
mov edx, 2
imul eax, edx, 0
movzx edx, word [eax + str.user32.dll]
xor edx, ecx
mov word [ebp - 0x72], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0x74]
mov word [ebp - 0xfa], dx
movzx eax, word [ebp - 0xfa]
mov ecx, 2
shl ecx, 0
movzx edx, word [ecx + str.user32.dll]
xor edx, eax
mov word [ebp - 0x70], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0x74]
mov word [ebp - 0xfc], dx
movzx eax, word [ebp - 0xfc]
mov ecx, 2
shl ecx, 1
movzx edx, word [ecx + str.user32.dll]
xor edx, eax
mov word [ebp - 0x6e], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0x74]
mov word [ebp - 0xfe], dx
movzx eax, word [ebp - 0xfe]
mov ecx, 2
imul edx, ecx, 3
movzx ecx, word [edx + str.user32.dll]
xor ecx, eax
mov word [ebp - 0x6c], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0x74]
mov word [ebp - 0x100], cx
movzx edx, word [ebp - 0x100]
mov eax, 2
shl eax, 2
movzx ecx, word [eax + str.user32.dll]
xor ecx, edx
mov word [ebp - 0x6a], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0x74]
mov word [ebp - 0x102], cx
movzx edx, word [ebp - 0x102]
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + str.user32.dll]
xor eax, edx
mov word [ebp - 0x68], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0x74]
mov word [ebp - 0x104], ax
movzx ecx, word [ebp - 0x104]
mov edx, 2
imul eax, edx, 6
movzx edx, word [eax + str.user32.dll]
xor edx, ecx
mov word [ebp - 0x66], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0x74]
mov word [ebp - 0x122], dx
movzx eax, word [ebp - 0x122]
mov ecx, 2
imul edx, ecx, 7
movzx ecx, word [edx + str.user32.dll]
xor ecx, eax
mov word [ebp - 0x64], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0x74]
mov word [ebp - 0x108], cx
movzx edx, word [ebp - 0x108]
mov eax, 2
shl eax, 3
movzx ecx, word [eax + str.user32.dll]
xor ecx, edx
mov word [ebp - 0x62], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0x74]
mov word [ebp - 0x10a], cx
movzx edx, word [ebp - 0x10a]
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + str.user32.dll]
xor eax, edx
mov word [ebp - 0x60], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0x74]
mov word [ebp - 0x10c], ax
movzx ecx, word [ebp - 0x10c]
mov edx, 2
imul eax, edx, 0xa
movzx edx, word [eax + str.user32.dll]
xor edx, ecx
mov word [ebp - 0x5e], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0x74]
mov word [ebp - 0x10e], dx
movzx eax, word [ebp - 0x10e]
mov ecx, 2
imul edx, ecx, 0xb
movzx ecx, word [edx + str.user32.dll]
xor ecx, eax
mov word [ebp - 0x5c], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0x74]
mov word [ebp - 0x110], cx
movzx edx, word [ebp - 0x110]
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + str.user32.dll]
xor eax, edx
mov word [ebp - 0x5a], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0x74]
mov word [ebp - 0x112], ax
movzx ecx, word [ebp - 0x112]
mov edx, 2
imul eax, edx, 0xd
movzx edx, word [eax + str.user32.dll]
xor edx, ecx
mov word [ebp - 0x58], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0x74]
mov word [ebp - 0x114], dx
movzx eax, word [ebp - 0x114]
mov ecx, 2
imul edx, ecx, 0xe
movzx ecx, word [edx + str.user32.dll]
xor ecx, eax
mov word [ebp - 0x56], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0x74]
mov word [ebp - 0x116], cx
movzx edx, word [ebp - 0x116]
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + str.user32.dll]
xor eax, edx
mov word [ebp - 0x54], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0x74]
mov word [ebp - 0x118], ax
movzx ecx, word [ebp - 0x118]
mov edx, 2
shl edx, 4
movzx eax, word [edx + str.user32.dll]
xor eax, ecx
mov word [ebp - 0x52], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0x74]
mov word [ebp - 0x11a], ax
movzx ecx, word [ebp - 0x11a]
mov edx, 2
imul eax, edx, 0x11
movzx edx, word [eax + str.user32.dll]
xor edx, ecx
mov word [ebp - 0x50], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0x74]
mov word [ebp - 0x11c], dx
movzx eax, word [ebp - 0x11c]
mov ecx, 2
imul edx, ecx, 0x12
movzx ecx, word [edx + str.user32.dll]
xor ecx, eax
mov word [ebp - 0x4e], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0x74]
mov word [ebp - 0x11e], cx
movzx edx, word [ebp - 0x11e]
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + str.user32.dll]
xor eax, edx
mov word [ebp - 0x4c], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0x74]
mov word [ebp - 0x120], ax
movzx ecx, word [ebp - 0x120]
mov edx, 2
imul eax, edx, 0x14
movzx edx, word [eax + str.user32.dll]
xor edx, ecx
mov word [ebp - 0x4a], dx
xor eax, eax
mov word [ebp - 0x48], ax
lea ecx, [ebp - 0x74]
call fcn.0043e100
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x481488], eax
mov ecx, dword [ebp - 0x1c8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [ebp - 0x16c], eax
mov edx, dword [ebp - 0x16c]
mov dword [ebp - 0x1a8], edx
lea ecx, [ebp - 0x1a4]
call fcn.0044fea0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x1a8]
push eax
push 0x44e950
call dword [sym.imp.USER32.dll_EnumWindows]
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x140], ecx
mov edx, dword [ebp - 0x140]
mov eax, dword [edx]
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebp - 0x140]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x170], edx
jmp 0x44dfa4
mov eax, dword [ebp - 0xe0]
add eax, 4
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebp - 0xe0]
cmp ecx, dword [ebp - 0x170]
je 0x44e22a
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx]
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x128]
push ecx
call dword [sym.imp.USER32.dll_BringWindowToTop]
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0
movsx eax, byte [ecx + str.SetWindowPos]
add eax, edx
mov byte [ebp - 0x44], al
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 0
movsx ecx, byte [eax + str.SetWindowPos]
add ecx, edx
mov byte [ebp - 0x43], cl
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 1
movsx ecx, byte [eax + str.SetWindowPos]
add ecx, edx
mov byte [ebp - 0x42], cl
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 3
movsx eax, byte [ecx + str.SetWindowPos]
add eax, edx
mov byte [ebp - 0x41], al
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 2
movsx ecx, byte [eax + str.SetWindowPos]
add ecx, edx
mov byte [ebp - 0x40], cl
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 5
movsx eax, byte [ecx + str.SetWindowPos]
add eax, edx
mov byte [ebp - 0x3f], al
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 6
movsx eax, byte [ecx + str.SetWindowPos]
add eax, edx
mov byte [ebp - 0x3e], al
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 7
movsx eax, byte [ecx + str.SetWindowPos]
add eax, edx
mov byte [ebp - 0x3d], al
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 3
movsx ecx, byte [eax + str.SetWindowPos]
add ecx, edx
mov byte [ebp - 0x3c], cl
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 9
movsx eax, byte [ecx + str.SetWindowPos]
add eax, edx
mov byte [ebp - 0x3b], al
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xa
movsx eax, byte [ecx + str.SetWindowPos]
add eax, edx
mov byte [ebp - 0x3a], al
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xb
movsx eax, byte [ecx + str.SetWindowPos]
add eax, edx
mov byte [ebp - 0x39], al
mov byte [ebp - 0x38], 0
mov dword [ebp - 0xdc], 0
jmp 0x44e19f
mov ecx, dword [ebp - 0xdc]
add ecx, 1
mov dword [ebp - 0xdc], ecx
cmp dword [ebp - 0xdc], 0xc
jae 0x44e1d1
mov eax, 0x32
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, dword [ebp - 0xdc]
movsx ecx, byte [ebp + eax - 0x44]
sub ecx, edx
mov edx, dword [ebp - 0xdc]
mov byte [ebp + edx - 0x44], cl
jmp 0x44e190
lea eax, [ebp - 0x44]
mov dword [ebp - 0x174], eax
mov ecx, dword [0x481488]
mov dword [ebp - 0x178], ecx
mov edx, dword [ebp - 0x174]
push edx
mov eax, dword [ebp - 0x178]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x17c], eax
mov ecx, dword [ebp - 0x17c]
mov dword [ebp - 0x180], ecx
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
mov edx, dword [ebp - 0x128]
push edx
call dword [ebp - 0x180]
jmp 0x44df95
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1a4]
call fcn.0042d530
push 0xbb8
mov eax, dword [ebp - 0x1c8]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb8]
call fcn.0042d9e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00451fec
mov esp, ebp
pop ebp
ret 0xc