Function at 0x456ed8
Capabilities:
Bypass mark of the web
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d0dd3
mov eax, dword fs:[0]
push eax
sub esp, 0x520
mov eax, dword [0x513b94]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x498], edi
mov eax, dword [ebp + 0x10]
movzx edx, word [ebp + 0xc]
mov esi, dword [edi + 4]
mov ecx, edx
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x4a4], eax
lea eax, [edi + 4]
mov dword [ebp - 0x4a8], eax
mov eax, edx
mov dword [ebp - 0x4ac], esi
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x424], ecx
cmp ecx, 0x9c41
ja 0x45587a
je 0x455858
sub eax, 1
je case.0x4558a3.40003
sub eax, 0x12b
jne case.default.0x457acd
push eax
push 0x41c240
push esi
push 0x4e6c80
push dword [0x518ee0]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x457db1
push dword [edi + 0x15c]
push 0x438c70
push esi
push 0x4e6a44
push dword [0x518ee0]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x457db1
cmp ecx, 0xd101
ja 0x457abf
je case.0x457acd.53506
sub eax, 0x9c43
cmp eax, 0xa4
ja case.default.0x457acd
movzx eax, byte [eax + 0x457eac]
jmp dword [eax*4 + 0x457ddc]
push 0
push 0x9c53
push 0x111
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.default.0x457acd
cmp byte [0x513654], 0
push 0
sete al
mov byte [0x513654], al
movzx eax, al
push eax
push ecx
lea ecx, [edi + 0x40]
call fcn.0045dbf0
movzx eax, byte [0x513654]
push eax
push esi
call fcn.00466ad0
add esp, 8
jmp case.default.0x457acd
cmp byte [0x513657], 0
push 0
sete al
mov byte [0x513657], al
movzx eax, al
push eax
push 0x9cc0
lea ecx, [edi + 0x40]
call fcn.0045dbf0
mov ecx, 0x5181b8
call fcn.0042cae0
jmp case.default.0x457acd
cmp byte [0x513658], 0
push 0
sete al
mov byte [0x513658], al
movzx eax, al
push eax
push 0x9ce6
jmp 0x455910
cmp byte [0x513659], 0
push 0
sete al
mov byte [0x513659], al
movzx eax, al
push eax
push 0x9ce7
jmp 0x455910
push 1
push dword [edi + 0x15c]
call fcn.00451bf0
add esp, 8
jmp case.default.0x457acd
mov ecx, 0x5181b8
call fcn.0042ba30
test al, al
je 0x4559a1
mov edi, dword [ebp - 0x4a8]
push 0x10
push 0x4de0b8
push 0x4e6988
push dword [edi]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp case.default.0x457acd
push dword [edi + 0x15c]
call fcn.0041d110
add esp, 4
jmp case.default.0x457acd
mov ecx, dword [edi + 0x4198]
mov edx, 0x9cdd
mov eax, ecx
and ecx, 0xfffffffe
or eax, 1
cmp word [ebp - 0x4a0], dx
cmovne ecx, eax
mov dword [edi + 0x4198], ecx
and ecx, 1
mov byte [ebp - 0x491], 0
lea eax, [ecx*2 - 1]
lea ecx, [ebp - 0x491]
push ecx
push eax
push dword [edi + 0x15c]
call fcn.0041d5a0
add esp, 0xc
test al, al
jne 0x455a81
cmp byte [ebp - 0x491], al
jne 0x455a81
push 0x4e69fc
call fcn.0049c580
push eax
push 0x4e69fc
call fcn.0049c710
add esp, 0xc
mov dword [ebp - 0x4ac], eax
push esi
mov dword [ebp - 4], 0
call dword [sym.imp.USER32.dll_SetForegroundWindow]
lea ecx, [ebp - 0x4ac]
call fcn.0049c120
mov edi, dword [ebp - 0x4a8]
push 0x30
push 0x4de0b8
push eax
push dword [edi]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x4ac]
mov dword [ebp - 4], 1
test ecx, ecx
je 0x455a87
call fcn.0049c750
push dword [edi]
call dword [sym.imp.USER32.dll_SetFocus]
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x457acd
mov edi, dword [ebp - 0x4a8]
push dword [edi]
call dword [sym.imp.USER32.dll_SetFocus]
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x457acd
cmp byte [0x513655], 0
lea ecx, [edi + 0x40]
push 0
sete al
mov byte [0x513655], al
movzx eax, al
push eax
push 0x9c53
call fcn.0045dbf0
jmp 0x457db1
push 0
push 0x48f0d0
push esi
push 0x4e6a20
push dword [0x518ee0]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.default.0x457acd
lea ecx, [edi + 0x15c]
call fcn.00454680
mov edi, eax
test edi, edi
js case.default.0x457acd
push 0x5181b8
mov dword [ebp - 0x49c], 0x5181b8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
lea eax, [ebp - 0x434]
mov dword [ebp - 4], 2
push eax
mov ecx, 0x5181b8
call fcn.0041d870
mov dword [ebp - 0x4ac], 0
lea eax, [ebp - 0x4ac]
mov byte [ebp - 4], 4
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x434]
call fcn.00424220
mov eax, dword [ebp - 0x42c]
movzx eax, word [eax + 8]
sub eax, 2
je 0x455b97
sub eax, 1
je 0x455b75
mov edi, dword [ebp - 0x4a8]
push 0x10
push 0x4de0b8
push 0x4e6a60
push dword [edi]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x455bba
push ecx
mov eax, esp
mov dword [ebp - 0x498], eax
mov ecx, dword [ebp - 0x4ac]
mov dword [eax], ecx
test ecx, ecx
je 0x455b8f
call fcn.0049c480
push esi
call fcn.004503e0
jmp 0x455bb7
push ecx
mov eax, esp
mov dword [ebp - 0x498], eax
mov ecx, dword [ebp - 0x4ac]
mov dword [eax], ecx
test ecx, ecx
je 0x455bb1
call fcn.0049c480
push esi
call fcn.004505d0
add esp, 8
mov ecx, dword [ebp - 0x4ac]
mov byte [ebp - 4], 5
test ecx, ecx
je 0x455bcd
call fcn.0049c750
lea ecx, [ebp - 0x434]
call fcn.004231e0
jmp 0x457d9a
lea ecx, [edi + 0x15c]
call fcn.00454680
mov edi, eax
test edi, edi
js case.default.0x457acd
push 0x5181b8
mov dword [ebp - 0x49c], 0x5181b8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
lea eax, [ebp - 0x434]
mov dword [ebp - 4], 6
push eax
mov ecx, 0x5181b8
call fcn.0041d870
cmp dword [ebp - 0x42c], 0
mov byte [ebp - 4], 7
je 0x455c59
push 0x104
lea eax, [ebp - 0x420]
push eax
push 0x9c75
lea ecx, [ebp - 0x434]
call fcn.00424940
lea eax, [ebp - 0x420]
push eax
push esi
call fcn.004661b0
add esp, 8
lea ecx, [ebp - 0x434]
call fcn.004231e0
jmp 0x457d9a
push 0
push 0
push 0x1042
push dword [edi + 0x15c]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
js case.default.0x457acd
push dword [ebp - 0x424]
lea ecx, [edi + 0x38]
push eax
push esi
push ecx
call fcn.00440810
add esp, 0x10
jmp case.default.0x457acd
xor esi, esi
mov eax, dword [esi + 0x4e6960]
cmp eax, ecx
jne 0x455cdc
push 0
push eax
push 0x40a
push dword [edi + 0x160]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
setne al
movzx eax, al
push eax
push dword [esi + 0x4e6964]
call fcn.00484f10
mov ecx, dword [ebp - 0x424]
add esp, 8
add esi, 8
cmp esi, 0x28
jb 0x455ca1
jmp case.default.0x457acd
cmp byte [0x513656], 0
lea ecx, [edi + 0x40]
push 0
sete al
mov byte [0x513656], al
movzx eax, al
push eax
push 0x9c7f
call fcn.0045dbf0
cmp byte [0x513656], 0
mov ecx, 0x51823c
sete al
movzx eax, al
push eax
call fcn.004283e0
push 0
mov ecx, 0x5181b8
call fcn.0042c390
jmp case.default.0x457acd
mov eax, dword [0x518ac0]
test eax, eax
je 0x455d57
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x518ac0]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x457db1
push 0x48
call fcn.004a0e21
mov edi, eax
add esp, 4
mov dword [ebp - 0x4a4], edi
test edi, edi
je 0x455de5
mov dword [edi + 4], 0
mov ecx, edi
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
push 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov byte [edi + 0x3c], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0xffffffff
mov dword [edi + 0x38], 0xffffffff
push esi
mov dword [edi], vtable.CFilterDlg.0
mov dword [edi + 0x40], 0xb8
call fcn.00453a10
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x457db1
xor edi, edi
push edi
push esi
mov ecx, edi
call fcn.00453a10
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x457db1
push 0x51823c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [0x518258]
sub esi, dword [0x518254]
push 0x51823c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp esi, 0x20
jae 0x455e46
mov edi, dword [ebp - 0x4a8]
push 0x40
push 0x4de0b8
push 0x4e6ab8
push dword [edi]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp case.default.0x457acd
mov esi, dword [ebp - 0x4ac]
push 0
push 0x4947b0
push esi
push 0x4e6b04
push dword [0x518ee0]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
push dword [edi + 0x4174]
mov ecx, 0x518f38
call fcn.00454570
jmp case.default.0x457acd
push 0
push 0x46eed0
push esi
push 0x4e6b1c
jmp 0x455e59
mov eax, dword [0x518ac4]
test eax, eax
je 0x455eac
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x518ac4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.default.0x457acd
push 0x44
call fcn.004a0e21
mov edi, eax
add esp, 4
mov dword [ebp - 0x49c], edi
test edi, edi
je 0x455f1f
mov dword [edi + 4], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov byte [edi + 0x3c], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0xffffffff
mov dword [edi + 0x38], 0xffffffff
mov dword [edi], vtable.CHighlightDlg.0
mov byte [edi + 0x40], 0
jmp 0x455f21
xor edi, edi
mov eax, dword [edi + 0x14]
test eax, eax
jne 0x455f4c
call fcn.004a26fc
mov dword [edi + 0x14], eax
test eax, eax
jne 0x455f4c
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x457acd
push 0
push 0
push eax
call fcn.004a27fe
lea eax, [edi + 8]
test eax, eax
je 0x457dd0
test edi, edi
je 0x457dd0
mov dword [eax], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5131bc
mov dword [edi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5131d4]
lea ecx, [edi + 8]
mov dword [ecx + 8], eax
push 0x5131bc
mov dword [0x5131d4], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x440a20
push esi
push 0xbc
push dword [0x5198e0]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x457acd
push dword [0x513668]
lea ecx, [ebp - 0x52c]
push dword [0x51366c]
call fcn.0044e290
mov dword [ebp - 4], 8
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov esi, eax
mov eax, dword [ebp - 0x518]
test eax, eax
jne 0x456010
call fcn.004a26fc
mov dword [ebp - 0x518], eax
test eax, eax
jne 0x456010
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x4560a7
push 0
push 0
push eax
call fcn.004a27fe
lea eax, [ebp - 0x52c]
lea edi, [ebp - 0x524]
mov dword [ebp - 0x524], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5131bc
mov dword [ebp - 0x520], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5131d4]
push 0x5131bc
mov dword [ebp - 0x51c], eax
mov dword [0x5131d4], edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x440a20
push esi
push 0xbd
push dword [0x5198e0]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x4560a7
lea ecx, [ebp - 0x52c]
call fcn.0044e4c0
lea ecx, [ebp - 0x52c]
mov dword [0x51366c], eax
call fcn.0044e4d0
mov ecx, 0x5181b8
mov dword [0x513668], eax
call fcn.0042cae0
mov eax, dword [ebp - 0x518]
test eax, eax
je case.default.0x457acd
push eax
call fcn.004a27a8
jmp case.default.0x457acd
push 0x34
lea eax, [ebp - 0x4e0]
mov dword [ebp - 0x4e8], 0x3c
push 0
push eax
call fcn.004a3e00
push 0x5c
lea eax, [ebp - 0x490]
push 0
push eax
call fcn.004a3e00
add esp, 0x18
lea eax, [ebp - 0x490]
push eax
push 0x5c
push dword [0x5134c8]
call dword [sym.imp.GDI32.dll_GetObjectW]
lea eax, [ebp - 0x490]
mov dword [ebp - 0x4e4], esi
mov dword [ebp - 0x4dc], eax
lea eax, [ebp - 0x4e8]
push eax
mov dword [ebp - 0x4d4], 0x10041
call dword [sym.imp.COMDLG32.dll_ChooseFontW]
test eax, eax
je case.default.0x457acd
push dword [0x5134c8]
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
call edi
mov esi, dword [sym.imp.GDI32.dll_CreateFontIndirectW]
lea eax, [ebp - 0x490]
push eax
call esi
mov ecx, dword [ebp - 0x498]
push 0
push eax
push 0x30
mov dword [0x5134c8], eax
push dword [ecx + 0x15c]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [0x5134cc]
mov ecx, 0x2bc
mov eax, 0x320
cmp dword [ebp - 0x480], ecx
cmovl eax, ecx
mov dword [ebp - 0x480], eax
call edi
lea eax, [ebp - 0x490]
push eax
call esi
mov edi, dword [ebp - 0x4a8]
mov esi, dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [0x5134cc], eax
lea eax, [ebp - 0x430]
push eax
push dword [edi]
call esi
mov eax, dword [ebp - 0x424]
mov edx, dword [ebp - 0x42c]
sub eax, edx
mov ecx, dword [ebp - 0x430]
push 0
push eax
mov eax, dword [ebp - 0x428]
sub eax, ecx
dec eax
push eax
push edx
push ecx
mov ecx, edi
call fcn.00455370
mov eax, dword [ebp - 0x424]
mov edx, dword [ebp - 0x42c]
sub eax, edx
mov ecx, dword [ebp - 0x430]
push 0
push eax
mov eax, dword [ebp - 0x428]
sub eax, ecx
push eax
push edx
push ecx
mov ecx, edi
call fcn.00455370
lea eax, [ebp - 0x430]
push eax
push dword [edi]
call esi
mov eax, dword [ebp - 0x424]
mov edx, dword [ebp - 0x42c]
sub eax, edx
mov ecx, dword [ebp - 0x430]
push 4
push eax
mov eax, dword [ebp - 0x428]
sub eax, ecx
dec eax
push eax
push edx
push ecx
push 0
mov ecx, edi
call fcn.0045d320
mov eax, dword [ebp - 0x424]
mov esi, dword [ebp - 0x42c]
sub eax, esi
push 4
mov edx, dword [ebp - 0x430]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x428]
sub eax, edx
push eax
push esi
push edx
push 0
call fcn.0045d320
jmp case.default.0x457acd
push 0
push 0x44f440
push esi
push 0x4e6b40
push dword [0x518ee0]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x457db1
mov ecx, 0x5181b8
call fcn.0042aa90
test eax, eax
je 0x4562b6
push 0
push 0x4a04d0
push esi
push 0x4e6b5c
push dword [0x518ee0]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x457db1
mov edi, dword [ebp - 0x4a8]
push 0x10
push 0x4de0b8
push 0x4e6b80
push dword [edi]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x457db1
push 0x44
call fcn.004a0e21
mov edi, eax
add esp, 4
mov dword [ebp - 0x4a4], edi
test edi, edi
je 0x45634b
mov dword [edi + 4], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov byte [edi + 0x3c], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0xffffffff
mov dword [edi + 0x38], 0xffffffff
mov dword [edi], vtable.COccurrencesDlg.0
mov dword [edi + 0x40], 0
jmp 0x45634d
xor edi, edi
mov eax, dword [edi + 0x14]
test eax, eax
jne 0x456378
call fcn.004a26fc
mov dword [edi + 0x14], eax
test eax, eax
jne 0x456378
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x457db1
push 0
push 0
push eax
call fcn.004a27fe
lea eax, [edi + 8]
test eax, eax
je 0x457dd0
test edi, edi
je 0x457dd0
mov dword [eax], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5131bc
mov dword [edi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5131d4]
lea ecx, [edi + 8]
mov dword [ecx + 8], eax
push 0x5131bc
mov dword [0x5131d4], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x440a20
push esi
push 0xbf
push dword [0x5198e0]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x457db1
mov eax, dword [0x518abc]
test eax, eax
je 0x456413
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x518abc]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x456537
push 0x44
call fcn.004a0e21
mov esi, eax
add esp, 4
mov dword [ebp - 0x49c], esi
test esi, esi
je 0x456490
test edi, edi
je 0x456432
lea eax, [edi + 0x38]
jmp 0x456434
xor eax, eax
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CProcessTreeDlg.0
mov dword [esi + 0x40], eax
jmp 0x456492
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x4564ba
call fcn.004a26fc
mov dword [esi + 0x14], eax
test eax, eax
jne 0x4564ba
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
jmp 0x456527
push 0
push 0
push eax
call fcn.004a27fe
lea eax, [esi + 8]
test eax, eax
je 0x457dd0
test esi, esi
je 0x457dd0
mov dword [eax], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5131bc
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5131d4]
lea ecx, [esi + 8]
mov dword [ecx + 8], eax
push 0x5131bc
mov dword [0x5131d4], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x440a20
push dword [ebp - 0x498]
push 0xae
push dword [0x5198e0]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
mov dword [0x518abc], eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x5181b8
mov dword [ebp - 0x49c], 0x5181b8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [edi + 0x15c]
mov dword [ebp - 4], 9
call fcn.00454680
push eax
lea eax, [ebp - 0x434]
mov ecx, 0x5181b8
push eax
call fcn.0041d870
cmp dword [ebp - 0x42c], 0
mov byte [ebp - 4], 0xa
je 0x45659e
lea ecx, [ebp - 0x434]
call fcn.004253d0
push dword [eax + 4]
push 0
push 0x8003
push dword [0x518abc]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x434]
call fcn.004231e0
jmp 0x457d9a
push 0x40
call fcn.004a0e21
mov esi, eax
add esp, 4
mov dword [ebp - 0x4a4], esi
test esi, esi
je 0x45661d
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CProcessActivitySummaryDlg.0
jmp 0x45661f
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x456645
call fcn.004a26fc
mov dword [esi + 0x14], eax
test eax, eax
jne 0x456645
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x4566b2
push 0
push 0
push eax
call fcn.004a27fe
lea eax, [esi + 8]
test eax, eax
je 0x457dd0
test esi, esi
je 0x457dd0
mov dword [eax], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5131bc
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5131d4]
lea ecx, [esi + 8]
mov dword [ecx + 8], eax
push 0x5131bc
mov dword [0x5131d4], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x440a20
push dword [ebp - 0x498]
push 0x99
push dword [0x5198e0]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x457db1
push 0x44
call fcn.004a0e21
mov esi, eax
add esp, 4
mov dword [ebp - 0x4a4], esi
test esi, esi
je 0x456741
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CFileSummaryDlg.0
mov dword [esi + 0x40], 0
jmp 0x456743
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x456763
call fcn.004a26fc
mov dword [esi + 0x14], eax
test eax, eax
je 0x45663b
push 0
push 0
push eax
call fcn.004a27fe
lea eax, [esi + 8]
test eax, eax
je 0x457dd0
test esi, esi
je 0x457dd0
mov dword [eax], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5131bc
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5131d4]
lea ecx, [esi + 8]
mov dword [ecx + 8], eax
push 0x5131bc
mov dword [0x5131d4], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x440a20
push dword [ebp - 0x498]
push 0xba
jmp 0x4566a6
push 0x44
call fcn.004a0e21
mov esi, eax
add esp, 4
mov dword [ebp - 0x4a4], esi
test esi, esi
je 0x45683f
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CRegistrySummaryDlg.0
mov dword [esi + 0x40], 0
jmp 0x456841
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x456861
call fcn.004a26fc
mov dword [esi + 0x14], eax
test eax, eax
je 0x45663b
push 0
push 0
push eax
call fcn.004a27fe
lea eax, [esi + 8]
test eax, eax
je 0x457dd0
test esi, esi
je 0x457dd0
mov dword [eax], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5131bc
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5131d4]
lea ecx, [esi + 8]
mov dword [ecx + 8], eax
push 0x5131bc
mov dword [0x5131d4], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x440a20
push dword [ebp - 0x498]
push 0x96
jmp 0x4566a6
push 0x44
call fcn.004a0e21
mov esi, eax
add esp, 4
mov dword [ebp - 0x4a4], esi
test esi, esi
je 0x45693d
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CNetworkSummaryDlg.0
mov dword [esi + 0x40], 0
jmp 0x45693f
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x45695f
call fcn.004a26fc
mov dword [esi + 0x14], eax
test eax, eax
je 0x45663b
push 0
push 0
push eax
call fcn.004a27fe
lea eax, [esi + 8]
test eax, eax
je 0x457dd0
test esi, esi
je 0x457dd0
mov dword [eax], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5131bc
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5131d4]
lea ecx, [esi + 8]
mov dword [ecx + 8], eax
push 0x5131bc
mov dword [0x5131d4], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x440a20
push dword [ebp - 0x498]
push 0x98
jmp 0x4566a6
push 0xa8
call fcn.004a0e21
add esp, 4
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 4], 0xb
test eax, eax
je 0x456b4d
mov dword [eax + 4], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov byte [eax + 0x3c], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 0xffffffff
mov dword [eax + 0x38], 0xffffffff
lea esi, [eax + 0x40]
mov dword [eax], vtable.CStackSummaryDlg.0
mov dword [ebp - 0x4a4], esi
mov dword [ebp - 0x49c], esi
mov dword [esi], 0
push 0x4e6e4c
mov ecx, esi
mov byte [ebp - 4], 0xe
call fcn.0049c0a0
xorps xmm0, xmm0
movups xmmword [esi + 8], xmm0
movq qword [esi + 0x18], xmm0
mov dword [esi + 0x20], 0
push 0x4e6e4c
mov byte [ebp - 4], 0xf
call fcn.0049c580
push eax
push 0x4e6e4c
call fcn.0049c710
mov dword [esi + 0x28], eax
mov eax, dword [ebp - 0x4a0]
push 0x40
mov byte [ebp - 4], 0x10
mov dword [eax + 0x70], esi
lea esi, [eax + 0x74]
mov dword [ebp - 0x4a4], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004a0e21
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov eax, dword [ebp - 0x4a0]
mov dword [eax + 0x80], 0xffffffff
mov dword [eax + 0x84], 0xffffffff
mov dword [eax + 0x88], 0xffffffff
mov dword [eax + 0x90], 0
mov dword [eax + 0x94], 0
mov dword [eax + 0x98], 0
lea esi, [eax + 0xa0]
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x4a4], esi
push 0x3c
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004a0e21
add esp, 0x14
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov esi, dword [ebp - 0x4a0]
jmp 0x456b4f
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x456b83
call fcn.004a26fc
mov dword [esi + 0x14], eax
test eax, eax
jne 0x456b83
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x457db1
push 0
push 0
push eax
call fcn.004a27fe
lea eax, [esi + 8]
test eax, eax
je 0x457dd0
test esi, esi
je 0x457dd0
mov dword [eax], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5131bc
mov dword [esi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5131d4]
lea ecx, [esi + 8]
mov dword [ecx + 8], eax
push 0x5131bc
mov dword [0x5131d4], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x440a20
push dword [ebp - 0x498]
push 0x9f
push dword [0x5198e0]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x457db1
push 0x44
call fcn.004a0e21
mov esi, eax
add esp, 4
mov dword [ebp - 0x4a4], esi
test esi, esi
je 0x456c76
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CCrossReferenceSummaryDlg.0
mov dword [esi + 0x40], 0
jmp 0x456c78
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x456c98
call fcn.004a26fc
mov dword [esi + 0x14], eax
test eax, eax
je 0x456b6b
push 0
push 0
push eax
call fcn.004a27fe
lea edi, [esi + 8]
test edi, edi
je 0x457dd0
test esi, esi
je 0x457dd0
mov dword [edi], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5131bc
mov dword [edi + 4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5131d4]
mov dword [edi + 8], eax
push 0x5131bc
mov dword [0x5131d4], edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x440a20
push dword [ebp - 0x498]
push 0xa0
jmp 0x456be4
push 0
push 0x49f4f0
push esi
push 0x4e6bc4
push dword [0x518ee0]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x457db1
and dword [edi + 0x4198], 0xffffffbf
lea eax, [edi + 0x418c]
push eax
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov dword [0x5188a4], eax
jmp 0x457db1
mov ecx, dword [edi + 0x4198]
mov esi, 0x9cd3
mov edx, dword [edi + 0x15c]
mov eax, ecx
and ecx, 0xfffffffe
mov dword [ebp - 0x424], edx
or eax, 1
cmp word [ebp - 0x4a0], si
push 0
cmovne ecx, eax
push 0
mov dword [edi + 0x4198], ecx
and cl, 1
push 0x1042
push edx
mov byte [ebp - 0x498], cl
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp - 0x498]
mov ecx, 0x5181b8
push eax
call fcn.0042bed0
mov ecx, 0x5181b8
mov dword [ebp - 0x4a8], eax
call fcn.0042aa90
mov esi, dword [ebp - 0x4ac]
cmp dword [ebp - 0x4a8], eax
jb 0x456e15
push 0x4e6be0
call fcn.0049c580
push eax
push 0x4e6be0
call fcn.0049c710
add esp, 0xc
mov dword [ebp - 0x424], eax
push esi
mov dword [ebp - 4], 0x12
call dword [sym.imp.USER32.dll_SetForegroundWindow]
lea ecx, [ebp - 0x424]
call fcn.0049c120
push 0x30
push 0x4de0b8
push eax
push dword [edi + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x424]
mov dword [ebp - 4], 0x13
test ecx, ecx
je 0x457db1
call fcn.0049c750
jmp 0x457db1
mov esi, dword [ebp - 0x424]
lea eax, [ebp - 0x4e8]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 0xffffffffffffffff
push 0x102b
push esi
mov dword [ebp - 0x4d8], 3
mov dword [ebp - 0x4dc], 0
call edi
lea eax, [ebp - 0x4e8]
mov dword [ebp - 0x4d8], 3
push eax
push dword [ebp - 0x4a8]
mov dword [ebp - 0x4dc], 3
push 0x102b
push esi
call edi
push 0
push dword [ebp - 0x4a8]
push 0x1013
push esi
call edi
push dword [ebp - 0x4a8]
push 0
push 0x1043
push esi
call edi
push esi
call dword [sym.imp.USER32.dll_UpdateWindow]
jmp 0x457db1
mov ecx, dword [edi + 0x4198]
mov edx, 0x9c7e
mov eax, ecx
and ecx, 0xfffffffe
or eax, 1
cmp word [ebp - 0x4a0], dx
cmovne ecx, eax
lea eax, [edi + 0x418c]
push eax
push 0
push 0x8004
push esi
mov dword [edi + 0x4198], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x457db1
push 0x5188a8
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.004b4900
lea eax, [ebp - 0x420]
push 0x5c
push eax
call fcn.004a500e
lea ecx, [ebp - 0x218]
sub ecx, eax
push 0x4e6c08
sar ecx, 1
push ecx
push eax
call fcn.004b4900
lea eax, [ebp - 0x420]
push eax
push 0x4e6c24
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00404390
add esp, 0x30
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push 0
lea eax, [ebp - 0x420]
push eax
push esi
call fcn.004a0ce4
test eax, eax
jne 0x457db1
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0
push ecx
mov ecx, esp
push 0x4e6c4c
call fcn.004365a0
call fcn.004664c0
add esp, 8
jmp 0x457db1
push 0
push 0x41c240
push esi
push 0x4e6c94
push dword [0x518ee0]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x457db1
lea eax, [ebp - 0x4dc]
mov dword [ebp - 0x4dc], 0x30
push eax
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x4d8], 1
push 0x9cb0
push dword [edi + 0xb4]
movups xmmword [ebp - 0x4d4], xmm0
movups xmmword [ebp - 0x4c4], xmm0
movq qword [ebp - 0x4b4], xmm0
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
mov ecx, dword [ebp - 0x4d0]
shr ecx, 3
mov al, cl
not ecx
push 0
and ecx, 1
not al
push ecx
and al, 1
lea ecx, [edi + 0x40]
push 0x9cb0
mov byte [0x513664], al
call fcn.0045dbf0
jmp case.default.0x457acd
push 1
push 0xffffffffffffffff
push 0x100c
push dword [edi + 0x15c]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x1028
push dword [edi + 0x15c]
mov esi, eax
call dword [sym.imp.USER32.dll_SendMessageW]
movzx ecx, word [ebp + 0xc]
lea edx, [eax + eax*4]
mov eax, 0x9c8e
add edx, edx
cmp cx, ax
jne 0x45705b
mov eax, esi
mov esi, 0
sub eax, edx
cmovns esi, eax
jmp 0x457079
push 0
push 0
push 0x1004
push dword [edi + 0x15c]
add esi, edx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp esi, eax
jl 0x457079
lea esi, [eax - 1]
lea eax, [ebp - 0x4e8]
mov dword [ebp - 0x4d8], 3
push eax
push esi
push 0x102b
push dword [edi + 0x15c]
mov dword [ebp - 0x4dc], 3
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push esi
push 0x1013
push dword [edi + 0x15c]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.default.0x457acd
push 0x5181b8
mov dword [ebp - 0x49c], 0x5181b8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
mov ecx, 0x518268
mov dword [ebp - 4], 0x14
call fcn.0045d1f0
cmp byte [0x513656], 0
mov ecx, 0x51823c
sete al
movzx eax, al
push eax
call fcn.0045d1f0
push 0
jmp 0x457d7b
push 0x44
call fcn.004a0e21
mov esi, eax
add esp, 4
mov dword [ebp - 0x49c], esi
test esi, esi
je 0x45717c
mov dword [esi + 4], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov byte [esi + 0x3c], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi], vtable.CBackingFileDlg.0
mov dword [esi + 0x40], 0
jmp 0x45717e
xor esi, esi
mov eax, dword [edi + 4]
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 0x14]
test eax, eax
jne 0x4571b2
call fcn.004a26fc
mov dword [esi + 0x14], eax
test eax, eax
jne 0x4571b2
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x457acd
push 0
push 0
push eax
call fcn.004a27fe
lea edi, [esi + 8]
test edi, edi
je 0x457dd0
test esi, esi
je 0x457dd0
mov dword [edi], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5131bc
mov dword [edi + 4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5131d4]
mov dword [edi + 8], eax
push 0x5131bc
mov dword [0x5131d4], edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x440a20
push dword [ebp - 0x498]
push 0x93
push dword [0x5198e0]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x457acd
mov eax, 0x9cc7
cmp dx, ax
lea eax, [ebp - 0x504]
push 0x58
push 0
push eax
sete byte [ebp - 0x498]
call fcn.004a3e00
movups xmm0, xmmword [0x4e6ca0]
mov ax, word [0x4e6cd0]
push 0x1d6
movups xmmword [ebp - 0x420], xmm0
mov word [ebp - 0x3f0], ax
lea eax, [ebp - 0x3ee]
movups xmm0, xmmword [0x4e6cb0]
push 0
push eax
movups xmmword [ebp - 0x410], xmm0
movups xmm0, xmmword [0x4e6cc0]
movups xmmword [ebp - 0x400], xmm0
call fcn.004a3e00
lea eax, [ebp - 0x420]
mov dword [ebp - 0x500], esi
movzx esi, word [ebp + 0xc]
add esp, 0x18
mov dword [ebp - 0x4e8], eax
mov ecx, 0x9cc7
xor eax, eax
mov dword [ebp - 0x504], 0x58
cmp si, cx
mov dword [ebp - 0x4e4], 0x104
lea ecx, [ebp - 0x504]
mov dword [ebp - 0x4f8], 0x4e6cd8
setne al
push ecx
lea eax, [eax*4 + 8]
mov dword [ebp - 0x4d0], eax
mov eax, dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
cmove eax, dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
call eax
test eax, eax
je case.default.0x457acd
mov ecx, 6
lea eax, [ebp - 0xe8]
nop
mov dword [eax - 8], 0
lea eax, [eax + 0x20]
mov dword [eax - 0x24], 0
mov dword [eax - 0x20], 0
mov dword [eax - 0x1c], 0
mov dword [eax - 0x18], 0
mov dword [eax - 0x14], 0
mov dword [eax - 0x10], 0
sub ecx, 1
jne 0x457310
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [ebp - 0x110]
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
mov word [ebp - 0x108], 0
movlpd qword [ebp - 0x110], xmm0
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0xfc], 0
movlpd qword [ebp - 0xf8], xmm0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x420]
mov dword [ebp - 4], 0x1d
push 0x2e
push eax
call fcn.004a4db5
add esp, 8
test eax, eax
jne 0x4573f4
push 0x4e6d24
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.004b5462
add esp, 0xc
push 0
push dword [ebp - 0x498]
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x110]
call fcn.0045ea60
test al, al
jne 0x457438
mov eax, dword [ebp - 0x4a8]
push 0x10
push 0x4de0b8
push 0x4e6d30
push dword [eax]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 4], 0x1e
jmp 0x457596
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x428]
call fcn.004951a0
mov eax, 0x9cc7
mov byte [ebp - 4], 0x1f
cmp si, ax
lea eax, [ebp - 0x428]
jne 0x457575
push eax
call fcn.00495aa0
add esp, 4
lea ecx, [edi + 0x40]
xor eax, eax
cmp byte [0x513654], al
push 0
setne al
push eax
push 0x9cb4
call fcn.0045dbf0
xor eax, eax
lea ecx, [edi + 0x40]
cmp byte [0x513655], al
push 0
setne al
push eax
push 0x9c53
call fcn.0045dbf0
xor eax, eax
lea ecx, [edi + 0x40]
cmp byte [0x513656], al
push 0
setne al
push eax
push 0x9c7f
call fcn.0045dbf0
mov ecx, edi
call fcn.0045de90
xor eax, eax
lea ecx, [edi + 0x40]
cmp byte [0x513664], 1
push 0
sete al
push eax
push 0x9cb0
call fcn.0045dbf0
xor eax, eax
lea ecx, [edi + 0x40]
cmp byte [0x513657], al
push 0
setne al
push eax
push 0x9cc0
call fcn.0045dbf0
xor eax, eax
lea ecx, [edi + 0x40]
cmp byte [0x513658], al
push 0
setne al
push eax
push 0x9ce6
call fcn.0045dbf0
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push dword [0x5134c8]
push 0x30
push dword [edi + 0x15c]
call esi
push dword [0x513550]
push 0x5134d0
push 0x513554
push dword [edi + 0x15c]
call fcn.00438f00
push dword [edi + 0x134]
call fcn.0048c7d0
add esp, 4
mov ecx, 0x5181b8
push 0
call fcn.0042c390
push 0
push 0
push 0x800b
push dword [0x518ac0]
call esi
jmp 0x457584
push dword [edi + 0x15c]
push eax
call fcn.00495d50
add esp, 8
lea ecx, [ebp - 0x428]
call fcn.00405010
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0x110]
call fcn.0045f480
mov esi, dword [ebp - 0x18]
test esi, esi
je 0x4575f3
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
dec eax
jne 0x4575ec
test esi, esi
je 0x4575ec
mov eax, dword [esi]
test eax, eax
je 0x4575ca
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x4575e1
push eax
call fcn.004a0e5f
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
call fcn.004a0e51
add esp, 8
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
jmp case.default.0x457acd
call fcn.004699d0
mov esi, eax
call fcn.00469000
push 0x7f02
push 0
mov byte [ebp - 0x491], al
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0x498], eax
test esi, esi
je 0x457685
cmp byte [ebp - 0x491], 0
je 0x457685
push 1
call fcn.004699e0
add esp, 4
mov ecx, 0x5181b8
push 0
call fcn.0042a1c0
push 0x518cd0
push 0x518ac8
push 0
push 0x513880
mov ecx, 0x5181b8
call fcn.0042ab00
mov esi, dword [ebp - 0x4ac]
test al, al
je 0x4576a1
push 0
push 1
push esi
call fcn.00469360
add esp, 0xc
jmp 0x4576a1
push 0
call fcn.004699e0
add esp, 4
mov ecx, 0x5181b8
push 0
call fcn.0042a1c0
mov esi, dword [ebp - 0x4ac]
push 0
push 0xfa
push 1
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
push ecx
mov ecx, esp
push 0x513880
call fcn.004365a0
push esi
call fcn.0048b3f0
add esp, 8
call fcn.00469000
xor ecx, ecx
test al, al
push 0
setne cl
push ecx
push 0x9c52
lea ecx, [edi + 0x40]
call fcn.0045dbf0
push dword [edi + 0x134]
call fcn.0048c7d0
add esp, 4
push dword [ebp - 0x498]
call dword [sym.imp.USER32.dll_SetCursor]
jmp 0x457db1
push 0
lea eax, [edi + 0x40]
push 1
push 0x9c54
mov ecx, eax
call fcn.0045db00
call fcn.00469000
test al, al
jne 0x457740
call fcn.004699d0
test eax, eax
jne 0x457740
push eax
push 0x9c87
push 0x111
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x457db1
call fcn.00469000
mov byte [ebp - 0x491], al
mov dword [ebp - 0x424], 0
test al, al
je 0x457794
call fcn.00464b30
test al, al
jne 0x45778e
push 0
push 0x482d80
push esi
push 0x4e6d78
push dword [0x518ee0]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push eax
mov dword [ebp - 0x424], eax
call dword [sym.imp.USER32.dll_UpdateWindow]
call dword [sym.imp.GDI32.dll_GdiFlush]
mov al, byte [ebp - 0x491]
test al, al
push 0
sete cl
movzx ecx, cl
push ecx
call fcn.00469b50
add esp, 8
mov esi, eax
push dword [ebp - 0x424]
call dword [sym.imp.USER32.dll_DestroyWindow]
test esi, esi
je 0x4577db
call fcn.00469000
lea esi, [edi + 4]
test al, al
jne 0x4577de
push 0x30
push 0x4de0b8
push 0x4e6d98
push dword [esi]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4577de
lea esi, [edi + 4]
call fcn.00469000
xor edx, edx
lea ecx, [edi + 0x40]
test al, al
push 0
setne dl
push edx
push 0x9c52
call fcn.0045dbf0
push dword [edi + 0x134]
call fcn.0048c7d0
add esp, 4
call fcn.00469000
test al, al
je 0x457db1
push 0
push 0xfa
push 1
push dword [esi]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x457db1
cmp byte [0x5188a1], 0
push 0xffffffffffffffff
sete al
mov byte [0x5188a1], al
push 0
movzx eax, al
push eax
push esi
call fcn.00422410
add esp, 0x10
mov byte [0x5188a1], al
xor ecx, ecx
mov edx, 8
test al, al
cmovne ecx, edx
push ecx
push 0x9c8c
push dword [edi + 0xb4]
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x457db1
push 0
push 0x493e20
push esi
push 0x4e6de4
push dword [0x518ee0]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.default.0x457acd
push esi
call fcn.00487c60
add esp, 4
test al, al
je case.default.0x457acd
push 0
push 0
push 0x9c54
lea ecx, [edi + 0x40]
call fcn.0045db00
jmp case.default.0x457acd
push 0
call fcn.004699e0
add esp, 4
mov ecx, 0x5181b8
push 0
call fcn.0042a1c0
call fcn.00469000
xor ecx, ecx
test al, al
push 0
setne cl
push ecx
push 0x9c52
lea ecx, [edi + 0x40]
call fcn.0045dbf0
push ecx
mov ecx, esp
push 0x4dd79c
call fcn.004365a0
push esi
call fcn.0048b3f0
add esp, 8
jmp case.default.0x457acd
mov eax, dword [ebp - 0x49c]
mov byte [ebp - 0x424], 1
mov dword [ebp - 0x4a0], 0
test eax, eax
je 0x457933
cmp byte [eax], 0
mov eax, dword [eax + 4]
sete byte [ebp - 0x424]
mov dword [ebp - 0x4a0], eax
push 0
push 0x9c8a
push 0x111
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x518cd0
push 0x518ac8
push dword [ebp - 0x424]
mov ecx, 0x5181b8
push 0x513880
call fcn.0042ab00
mov byte [ebp - 0x491], al
test al, al
je 0x457998
push dword [ebp - 0x4a0]
push 0
push esi
call fcn.00469360
add esp, 0xc
mov byte [ebp - 0x491], al
push 0
push 0xfa
push 1
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
call fcn.00469000
xor ecx, ecx
test al, al
push 0
setne cl
push ecx
push 0x9c52
lea ecx, [edi + 0x40]
call fcn.0045dbf0
push ecx
mov ecx, esp
push 0x513880
call fcn.004365a0
push esi
call fcn.0048b3f0
movzx eax, byte [ebp - 0x491]
add esp, 8
jmp 0x457db3
lea eax, [ebp - 0x4a0]
push esi
push eax
call fcn.0045fc70
add esp, 8
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 4], 0x21
call fcn.0049c770
test eax, eax
jne 0x457a0c
lea ecx, [ebp - 0x4a0]
call fcn.0041c440
jmp case.default.0x457acd
push 0
push 0x9c8a
push 0x111
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x4e6df0
push 0x4e6e1c
push 0
push 0x513880
mov ecx, 0x5181b8
call fcn.0042ab00
test al, al
je 0x457a56
push ecx
lea eax, [ebp - 0x4a0]
mov ecx, esp
push eax
call fcn.004528b0
push esi
call fcn.00469560
add esp, 8
call fcn.00469000
xor edx, edx
lea ecx, [edi + 0x40]
test al, al
push 0
setne dl
push edx
push 0x9c52
call fcn.0045dbf0
push ecx
mov ecx, esp
push 0x513880
call fcn.004365a0
mov esi, dword [ebp - 0x4ac]
push esi
call fcn.0048b3f0
add esp, 8
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp - 4], 0x22
test ecx, ecx
je case.default.0x457acd
call fcn.0049c750
jmp case.default.0x457acd
push 0
push 0
push 0x10
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x457db1
sub eax, 0xd102
cmp eax, 5
ja case.default.0x457acd
jmp dword [eax*4 + 0x457f54]
push 0x5181b8
mov dword [ebp - 0x498], 0x5181b8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx ecx, word [ebp + 0xc]
mov eax, 0xd101
cmp cx, ax
mov dword [ebp - 4], 0x15
sete al
movzx eax, al
push eax
lea eax, [edi + 0x164]
push eax
push 0
push dword [edi + 0x4164]
jmp 0x457d65
mov eax, dword [0x518ac0]
test eax, eax
je 0x457b3a
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x518ac0]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x457bd1
push 0x48
call fcn.004a0e21
add esp, 4
mov dword [ebp - 0x424], eax
test eax, eax
je 0x457bae
mov dword [eax + 4], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov byte [eax + 0x3c], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 0xffffffff
mov dword [eax + 0x38], 0xffffffff
mov dword [eax], vtable.CFilterDlg.0
mov dword [eax + 0x40], 0xb8
jmp 0x457bb6
xor eax, eax
mov dword [ebp - 0x424], eax
push 0
push esi
mov ecx, eax
call fcn.00453a10
mov eax, dword [ebp - 0x424]
push 5
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x5181b8
mov dword [ebp - 0x4a0], 0x5181b8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x20
mov dword [ebp - 4], 0x16
call fcn.004a0e21
add esp, 4
mov dword [ebp - 0x424], eax
mov byte [ebp - 4], 0x17
test eax, eax
je 0x457c6b
mov ecx, dword [ebp - 0x498]
lea esi, [eax + 8]
add edi, 0x164
mov dword [ebp - 0x498], esi
mov ecx, dword [ecx + 0x4164]
push ecx
mov dword [eax], ecx
mov dword [eax + 4], 0
call fcn.00438750
push edi
mov byte [ebp - 0x49c], al
call fcn.0049c580
push eax
push edi
call fcn.0049c710
mov dword [esi], eax
push dword [ebp - 0x49c]
mov byte [ebp - 4], 0x18
push edi
call fcn.004666c0
mov dword [esi + 8], eax
add esp, 0x18
mov eax, dword [ebp - 0x424]
mov dword [esi + 0xc], edx
mov word [eax + 0x18], 0x101
jmp 0x457c6d
xor eax, eax
push eax
push 0
push 0x800d
push 0x418
push dword [0x518ac0]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
jmp 0x457d94
push 0x5181b8
mov dword [ebp - 0x49c], 0x5181b8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 1
lea eax, [edi + 0x164]
mov dword [ebp - 4], 0x19
push eax
push 0
push dword [edi + 0x4164]
mov ecx, 0x518268
call fcn.00426c30
mov ecx, 0x5181b8
call fcn.0042cae0
push 0
push 0
push 0x800b
push dword [0x518ac4]
jmp 0x457d94
lea eax, [edi + 0x164]
push eax
lea ecx, [ebp - 0x498]
call fcn.004365a0
lea eax, [ebp - 0x498]
mov dword [ebp - 4], 0x1a
push eax
push esi
call fcn.00461d90
add esp, 8
mov ecx, dword [ebp - 0x498]
mov dword [ebp - 4], 0x1b
test ecx, ecx
je case.default.0x457acd
call fcn.0049c750
jmp case.default.0x457acd
push 0x5181b8
mov dword [ebp - 0x498], 0x5181b8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx ecx, word [ebp + 0xc]
lea eax, [edi + 0x2164]
push 0
push eax
xor eax, eax
mov dword [ebp - 4], 0x1c
mov edx, 0xd104
cmp cx, dx
setne al
add eax, 2
push eax
push 0x9c74
mov ecx, 0x51823c
call fcn.00426c30
mov byte [ebp - 0x49c], al
push dword [ebp - 0x49c]
mov ecx, 0x5181b8
call fcn.0042c390
push 0
push 0
push 0x800b
push dword [0x518ac0]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x5181b8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0x4a4]
mov dword [eax], 0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a0e13
mov esp, ebp
pop ebp
ret 0x10
push 1
push 0xc0000005
call fcn.00441500
imul ebx, dword [ebp + eax*2], case.0x4558a3.40004
jae 4554334
inc ebp
add byte [esi], al
jno 0x457e30
add byte [edi - 0x27ffba90], bh
outsb dx, byte [esi]
inc ebp
add byte [edi + esi*2], al
inc ebp
add byte [ebx + 0x200455a], bl
jbe 0x457e44
add al, dh
arpl word [ebp], ax
xor al, 0x5d
inc ebp
add byte [ecx], bl
insd dword es:[edi], dx
inc ebp
add al, al
pushal
inc ebp
add byte [ebp - 0x6effba86], ch
js 0x457e5c
add byte [edi + 0x59], bl
inc ebp
add byte [edi - 0x76ffbaa4], bl
pop esi
inc ebp
add al, ah
pop edx
inc ebp
add byte [edx + 0x45], ch
add ah, al
pop edi
inc ebp
add byte [ebx - 0x16ffba92], bl
wait
outsb dx, byte [esi]
inc ebp
add cl, ch
pop esp
inc ebp
add byte [eax], al
pop esi
inc ebp
add byte [edx + 0x5e], bh
inc ebp
add byte [0xd6004579], al
salc
jns 0x457e8c
add byte [eax + 0x2b004578], bh
js 0x457e94
add byte [esi], cl
jo 0x457e98
add ch, dl
bound eax, qword [ebp]
scasb al, byte es:[edi]
inc ebp
add bl, cl
inc bp
retf
inc ebp
add byte [ebx + 0x6f], bh
inc ebp
add cl, cl
inc ebp
add ch, al
imul eax, dword [ebp], case.0x4558a3.40095
fstp qword [ebx + 0x45]
add byte [edx - 1728035496], ch
outsd dx, dword [esi]
inc ebp
add byte [eax], al
insb byte es:[edi], dx
inc ebp
add dl, al
pop eax
inc ebp
add byte [edx - 0x9ffba9e], cl
pop eax
inc ebp
add bh, al
push 0x722c0045
inc ebp
add byte [edi], dh
invalid
aaa
insd dword es:[edi], dx
inc ebp
add byte [ecx + ebx*2 + 0x59740045], dh
inc ebp
mov ah, 0x59
inc ebp
add byte [ecx + ebx*2 + 0x45], dh
add byte [edi], ah
pop ecx
inc ebp
add byte [ebx + 0x59], al
inc ebp
add byte [ebp + 0x457d], ah
add dword [edx], eax
xor esi, dword [ebx]
xor esi, dword [ebx]
xor eax, dword [ebx]
xor esi, dword [ebx]
add al, 51
xor eax, dword [151521030]
xor ecx, dword [edx]
or esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
or al, 13
xor esi, dword [ebx]
push cs
add byte [ebx], dh
xor ecx, dword [edi]
adc byte [eax], dl
adc byte [eax], dl
adc dword [eax], edx
xor esi, dword [ebx]
xor esi, dword [ebx]
adc dh, byte [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
adc edx, dword [edx + 857150997]
sbb byte [ebx], dh
xor esi, dword [ebx]
xor ebx, dword [ecx]
sbb dh, byte [ebx]
sbb esi, dword [ebx]
sbb al, 29
sbb eax, 857617203
xor ebx, dword [edi]
xor esi, dword [ebx]
xor esp, dword [eax]
xor esp, dword [ecx]
xor esp, dword [edx]
xor esp, dword [ebx]
and al, 51
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esp, dword [858993446]
xor esp, dword [edi]
xor ebp, dword [eax]
xor ebp, dword [ecx]
xor esi, dword [ebx]
xor esi, dword [ebx]
sub dh, byte [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor ebp, dword [ebx]
xor ebp, dword [ebx + esi]
xor esi, dword [ebx]
xor ebp, dword [858993453]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword cs:[ebx]
xor esi, dword [ebx]
das
xor byte [ebx], dh
xor esi, dword [ebx]
das
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor esi, dword [ebx]
xor dword [edx], esi
nop dword [eax]
aam 0x7a
inc ebp
add byte [esp + edi*2 + 0x7d260045], cl
inc ebp
add byte [esi], ah
jge 0x457fa8
add cl, ah
jl 0x457fac
add byte [edi], dl
jnp 0x457fb0
add ah, cl
int3
invalid
dec ebp
add byte [ebx - 0xbb43], al
invalid