Function at 0x44fdc0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f9011
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x54c040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x2c], esi
mov edi, dword [ebp + 8]
mov eax, dword [edi + 8]
lea ebx, [edi + 8]
mov ecx, ebx
call dword [eax + 0x20]
cmp eax, 0x2710
jne 0x450590
mov edx, dword [edi + 0x18]
test edx, edx
je 0x450442
mov ecx, str.btn_close
mov eax, edx
nop dword [eax + eax]
mov si, word [eax]
cmp si, word [ecx]
jne 0x44fe46
test si, si
je 0x44fe42
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x44fe46
add eax, 4
add ecx, 4
test si, si
jne 0x44fe20
xor eax, eax
jmp 0x44fe4b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x44fe75
mov ecx, dword [ebp - 0x2c]
mov byte [edi + 0xc], al
call fcn.00450d60
call fcn.00453c20
mov ecx, dword [ebp - 0x2c]
call dword [sym.imp.soui.dll_protected:_void___thiscall_SOUI::SHostDialog::OnCancel_void_]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov ecx, str.sel_area_svr_btn
mov eax, edx
nop dword [eax]
mov si, word [eax]
cmp si, word [ecx]
jne 0x44fea6
test si, si
je 0x44fea2
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x44fea6
add eax, 4
add ecx, 4
test si, si
jne 0x44fe80
xor eax, eax
jmp 0x44feab
sbb eax, eax
or eax, 1
test eax, eax
jne 0x44ff1e
mov esi, dword [ebp - 0x2c]
push ecx
add esi, 4
mov byte [edi + 0xc], al
push str.sel_area_svr_btn
mov ecx, esi
call fcn.00427c00
mov ebx, dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SWindow::SetCheck_int_]
test eax, eax
je 0x44fed5
push 1
mov ecx, eax
call ebx
push ecx
push str.sel_node_btn
mov ecx, esi
call fcn.00427c00
test eax, eax
je 0x44feec
push 0
mov ecx, eax
call ebx
push ecx
push str.area_node_tab_ctrl
mov ecx, esi
call fcn.004555e0
test eax, eax
je 0x44ff07
push 0
mov ecx, eax
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::STabCtrl::SetCurSel_int_]
sub esp, 8
mov ecx, esi
call fcn.00455190
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov ecx, str.sel_node_btn
mov eax, edx
mov si, word [eax]
cmp si, word [ecx]
jne 0x44ff4b
test si, si
je 0x44ff47
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x44ff4b
add eax, 4
add ecx, 4
test si, si
jne 0x44ff25
xor eax, eax
jmp 0x44ff50
sbb eax, eax
or eax, 1
test eax, eax
jne 0x44ffcf
mov esi, dword [ebp - 0x2c]
push ecx
add esi, 4
mov byte [edi + 0xc], al
push str.sel_area_svr_btn
mov ecx, esi
call fcn.00427c00
mov ebx, dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SWindow::SetCheck_int_]
test eax, eax
je 0x44ff7a
push 0
mov ecx, eax
call ebx
push ecx
push str.sel_node_btn
mov ecx, esi
call fcn.00427c00
test eax, eax
je 0x44ff91
push 1
mov ecx, eax
call ebx
push ecx
push str.area_node_tab_ctrl
mov ecx, esi
call fcn.004555e0
test eax, eax
je 0x44ffac
push 1
mov ecx, eax
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::STabCtrl::SetCurSel_int_]
sub esp, 8
mov ecx, esi
call fcn.00455190
test eax, eax
je 0x44ffc2
mov ecx, eax
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SWindow::SetFocus_void_]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov ecx, str.svr_back_btn
mov eax, edx
mov si, word [eax]
cmp si, word [ecx]
jne 0x44fffc
test si, si
je 0x44fff8
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x44fffc
add eax, 4
add ecx, 4
test si, si
jne 0x44ffd6
xor eax, eax
jmp 0x450001
sbb eax, eax
or eax, 1
test eax, eax
jne 0x450034
push ecx
mov ecx, dword [ebp - 0x2c]
push str.area_tab_ctrl
mov byte [edi + 0xc], al
lea ecx, [ecx + 4]
call fcn.004555e0
test eax, eax
je 0x44ffc2
push 0
mov ecx, eax
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::STabCtrl::SetCurSel_int_]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov ecx, str.node_reload_btn
mov eax, edx
nop dword [eax + eax]
mov si, word [eax]
cmp si, word [ecx]
jne 0x450066
test si, si
je 0x450062
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x450066
add eax, 4
add ecx, 4
test si, si
jne 0x450040
xor eax, eax
jmp 0x45006b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x450087
mov ecx, dword [ebp - 0x2c]
mov byte [edi + 0xc], al
call fcn.00453160
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov ecx, str.area_node_speed
mov eax, edx
nop
mov si, word [eax]
cmp si, word [ecx]
jne 0x4500b6
test si, si
je 0x4500b2
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x4500b6
add eax, 4
add ecx, 4
test si, si
jne 0x450090
xor eax, eax
jmp 0x4500bb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4500d7
mov ecx, dword [ebp - 0x2c]
mov byte [edi + 0xc], al
call fcn.004532f0
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov ecx, str.mode_btn
mov eax, edx
nop
mov si, word [eax]
cmp si, word [ecx]
jne 0x450106
test si, si
je 0x450102
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x450106
add eax, 4
add ecx, 4
test si, si
jne 0x4500e0
xor eax, eax
jmp 0x45010b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x450127
mov ecx, dword [ebp - 0x2c]
mov byte [edi + 0xc], al
call fcn.004536c0
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov ecx, str.node_select_btn
mov eax, edx
nop
mov si, word [eax]
cmp si, word [ecx]
jne 0x450156
test si, si
je 0x450152
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x450156
add eax, 4
add ecx, 4
test si, si
jne 0x450130
xor eax, eax
jmp 0x45015b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4501e9
mov esi, dword [ebp - 0x2c]
push ecx
push str.node_select_btn
mov byte [edi + 0xc], al
lea ecx, [esi + 4]
call fcn.00427a90
test eax, eax
je 0x4501dc
mov ecx, eax
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::SWindow::IsChecked_void_]
test eax, eax
je 0x4501d3
push 0xffffffffffffffff
call fcn.0041e8c0
mov ecx, eax
call fcn.00422a80
sub esp, 8
lea ecx, [esi + 4]
call fcn.00455190
mov esi, eax
test esi, esi
je 0x4501dc
push 0
push 0
mov ecx, esi
call fcn.004441d0
push 1
push 0
push 1
mov ecx, esi
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::SPanel::SetScrollPos_int__int__int_]
mov ecx, esi
call fcn.004445c0
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
call fcn.0044ef20
mov byte [eax + 0x28], 0
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov ecx, str.btn_failed_feedback
mov eax, edx
mov si, word [eax]
cmp si, word [ecx]
jne 0x450216
test si, si
je 0x450212
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x450216
add eax, 4
add ecx, 4
test si, si
jne 0x4501f0
xor eax, eax
jmp 0x45021b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4502e4
mov byte [edi + 0xc], al
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x556110]
cmp eax, dword [ecx + 4]
jle 0x45027e
push 0x556110
call fcn.004c0595
add esp, 4
cmp dword [0x556110], 0xffffffff
jne 0x45027e
mov dword [ebp - 4], 0
call fcn.004a0bd0
push 0x5015e0
call fcn.004c0b4a
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x556110
call fcn.004c0544
add esp, 4
mov edx, 0x5561f4
lea ecx, [ebp - 0x28]
call fcn.00418f50
cmp dword [ebp - 0x14], 7
lea eax, [ebp - 0x28]
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmova eax, dword [ebp - 0x28]
push 1
push 0
push 0
push eax
push 0x50dd9c
push 0
call esi
cmp eax, 0x20
ja 0x4502cf
cmp dword [ebp - 0x14], 7
lea eax, [ebp - 0x28]
push 1
cmova eax, dword [ebp - 0x28]
push 0
push eax
push 0x50dda8
push 0x50dd9c
push 0
call esi
lea ecx, [ebp - 0x28]
call fcn.004177f0
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov eax, str.btn_failed_retry
nop dword [eax]
mov cx, word [edx]
cmp cx, word [eax]
jne 0x450316
test cx, cx
je 0x450312
mov cx, word [edx + 2]
cmp cx, word [eax + 2]
jne 0x450316
add edx, 4
add eax, 4
test cx, cx
jne 0x4502f0
xor eax, eax
jmp 0x45031b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x45043f
mov byte [edi + 0xc], al
mov eax, dword [ebp - 0x2c]
push ecx
push str.loading_png_wnd
lea ecx, [eax + 4]
call fcn.00427920
mov esi, dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::SWindow::IsVisible_int_]
mov ebx, eax
test ebx, ebx
je 0x450377
push 0
mov ecx, ebx
call esi
push 0
mov ecx, ebx
call esi
test eax, eax
jne 0x450377
push 1
push 1
mov ecx, ebx
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SWindow::SetVisible_int__int_]
push ecx
push str.loading_png_wnd_animateimg
mov ecx, ebx
call fcn.00455300
test eax, eax
je 0x450377
mov ecx, eax
call fcn.004385c0
push ecx
mov ecx, dword [ebp - 0x2c]
push str.area_svr_node_wnd
add ecx, 4
call fcn.00427920
mov ebx, eax
test ebx, ebx
je 0x4503aa
push 0
mov ecx, ebx
call esi
push 0
mov ecx, ebx
call esi
test eax, eax
je 0x4503aa
push 1
push 0
mov ecx, ebx
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SWindow::SetVisible_int__int_]
push ecx
mov ecx, dword [ebp - 0x2c]
push str.area_node_failed_wnd
lea ecx, [ecx + 4]
call fcn.00427920
mov ebx, eax
test ebx, ebx
je 0x4503dd
push 0
mov ecx, ebx
call esi
push 0
mov ecx, ebx
call esi
test eax, eax
je 0x4503dd
push 1
push 0
mov ecx, ebx
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SWindow::SetVisible_int__int_]
call fcn.0044ef20
mov esi, dword [eax + 4]
call fcn.0041e8c0
push esi
call dword [0x555990]
mov ecx, dword [ebp - 0x2c]
add esp, 4
mov ebx, dword [ecx + 0x248]
test al, al
jne 0x450423
call fcn.0041e8c0
push 0x451170
push esi
push ebx
call dword [0x55590c]
xor eax, eax
add esp, 0xc
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
push esi
push 0
push 0xbd0
push ebx
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov esi, dword [ebp - 0x2c]
mov eax, dword [edi + 0x18]
test eax, eax
je 0x4504a3
mov ecx, str.node_more_btn
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x450476
test dx, dx
je 0x450472
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x450476
add eax, 4
add ecx, 4
test dx, dx
jne 0x450450
xor eax, eax
jmp 0x45047b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4504a3
push eax
push eax
push 0xc36
mov byte [edi + 0xc], 0
push dword [esi + 0x248]
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov eax, dword [edi + 0x18]
test eax, eax
je 0x45092b
mov edx, str.nodesearch_btn
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4504db
test si, si
je 0x4504d7
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4504db
add ecx, 4
add edx, 4
test si, si
jne 0x4504b5
xor ecx, ecx
jmp 0x4504e0
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x45053f
mov esi, dword [ebp - 0x2c]
push ecx
mov byte [edi + 0xc], cl
push str.nodesearch_btn
lea ecx, [esi + 4]
call fcn.00427c00
mov ebx, dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SWindow::SetVisible_int__int_]
test eax, eax
je 0x45050a
push 1
push 0
mov ecx, eax
call ebx
push ecx
push str.node_search
lea ecx, [esi + 4]
call fcn.0042a110
mov esi, eax
test esi, esi
je 0x44ffc2
push 1
push 1
mov ecx, esi
call ebx
mov ecx, esi
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SWindow::SetFocus_void_]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov ecx, str.node_used_btn
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45056a
test dx, dx
je 0x450566
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45056a
add eax, 4
add ecx, 4
test dx, dx
jne 0x450544
xor eax, eax
jmp 0x45056f
sbb eax, eax
or eax, 1
test eax, eax
jne 0x45092b
mov ecx, dword [ebp - 0x2c]
push edi
mov byte [edi + 0xc], al
call fcn.004543e0
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
cmp eax, 0x4650
jne 0x450619
xor eax, eax
mov byte [edi + 0xc], 0
test edi, edi
cmove ebx, eax
test ebx, ebx
je 0x4505bf
mov eax, dword [ebx]
mov ecx, ebx
push str.on_header_click
call dword [eax + 4]
test eax, eax
je 0x4505bf
add ebx, 0x18
jmp 0x4505c4
mov ebx, 0x20
cmp dword [ebx], 0
jne 0x44ffc2
call fcn.0044ef20
push ecx
push str.node_select_btn
lea ecx, [esi + 4]
mov byte [eax + 0x28], 0
call fcn.00427a90
mov esi, eax
test esi, esi
je 0x44ffc2
call fcn.0044ef20
movzx ecx, byte [eax + 0x28]
push ecx
mov ecx, esi
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SWindow::SetCheck_int_]
push 1
push 1
mov ecx, esi
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SWindow::EnableWindow_int__int_]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
cmp eax, 0x989684
jne 0x45066b
mov eax, dword [edi + 0x18]
test eax, eax
je 0x45092b
mov ecx, str.node_list_view
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x450656
test dx, dx
je 0x450652
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x450656
add eax, 4
add ecx, 4
test dx, dx
jne 0x450630
xor eax, eax
jmp 0x45065b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x45092b
push eax
push 1
jmp 0x450481
cmp eax, 0x3e80
jne 0x45075d
mov eax, dword [edi + 0x18]
test eax, eax
je 0x45092b
mov ecx, str.node_search
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4506ac
test dx, dx
je 0x4506a8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4506ac
add eax, 4
add ecx, 4
test dx, dx
jne 0x450686
xor eax, eax
jmp 0x4506b1
sbb eax, eax
or eax, 1
test eax, eax
jne 0x45092b
push ecx
push str.node_search
lea ecx, [esi + 4]
mov byte [edi + 0xc], al
call fcn.0042a110
mov dword [ebp - 0x30], eax
test eax, eax
je 0x44ffc2
xor eax, eax
test edi, edi
cmove ebx, eax
test ebx, ebx
je 0x44ffc2
mov eax, dword [ebx]
mov ecx, ebx
push 0x514614
call dword [eax + 4]
test eax, eax
je 0x44ffc2
lea esi, [ebx - 8]
test esi, esi
je 0x44ffc2
cmp dword [esi + 0x20], 0x300
jne 0x44ffc2
mov esi, dword [esi + 0x1c]
test esi, esi
je 0x44ffc2
mov eax, dword [esi]
mov ecx, esi
push 0x50e904
call dword [eax + 4]
test eax, eax
je 0x44ffc2
cmp esi, dword [ebp - 0x30]
jne 0x44ffc2
mov eax, dword [ebp - 0x2c]
push 0
push 2
push 0xc35
push dword [eax + 0x248]
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
cmp eax, 0x1fa4
jne 0x4507b4
mov eax, dword [edi + 0x18]
test eax, eax
je 0x45092b
mov ecx, str.node_search
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45079a
test dx, dx
je 0x450796
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45079a
add eax, 4
add ecx, 4
test dx, dx
jne 0x450774
xor eax, eax
jmp 0x45079f
sbb eax, eax
or eax, 1
test eax, eax
jne 0x45092b
push eax
push 1
push 0xc35
jmp 0x450486
cmp eax, 0x1fa5
jne 0x45080f
mov eax, dword [edi + 0x18]
test eax, eax
je 0x45092b
mov ecx, str.node_search
nop dword [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4507f6
test dx, dx
je 0x4507f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4507f6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4507d0
xor eax, eax
jmp 0x4507fb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x45092b
push eax
push eax
push 0xc35
jmp 0x450486
cmp eax, 0x989683
jne 0x45092b
mov eax, dword [edi + 0x18]
test eax, eax
je 0x45092b
mov ecx, str.node_search
nop word [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x450856
test dx, dx
je 0x450852
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x450856
add eax, 4
add ecx, 4
test dx, dx
jne 0x450830
xor eax, eax
jmp 0x45085b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x45092b
push ecx
push str.node_search
lea ecx, [esi + 4]
mov byte [edi + 0xc], al
call fcn.0042a110
sub esp, 8
mov dword [ebp - 0x2c], eax
lea ecx, [esi + 4]
call fcn.00455190
cmp dword [edi + 0x1c], 0
mov dword [ebp - 0x30], eax
je 0x44ffc2
cmp dword [ebp - 0x2c], 0
je 0x44ffc2
test eax, eax
je 0x44ffc2
xor eax, eax
test edi, edi
cmove ebx, eax
test ebx, ebx
je 0x44ffc2
mov eax, dword [ebx]
mov ecx, ebx
push str.on_mouse_wheel
call dword [eax + 4]
test eax, eax
je 0x44ffc2
add ebx, 0xfffffff8
je 0x44ffc2
mov esi, dword [ebx + 0x1c]
test esi, esi
je 0x44ffc2
mov eax, dword [esi]
mov ecx, esi
push 0x50e904
call dword [eax + 4]
test eax, eax
je 0x44ffc2
cmp esi, dword [ebp - 0x2c]
jne 0x44ffc2
movzx ecx, word [ebx + 0x2c]
movzx eax, word [ebx + 0x28]
shl ecx, 0x10
or ecx, eax
movzx eax, word [ebx + 0x20]
push 0
push ecx
movzx ecx, word [ebx + 0x24]
shl ecx, 0x10
or ecx, eax
push ecx
mov ecx, dword [ebp - 0x30]
push 0x20a
call dword [sym.imp.soui.dll_public:_long_int___thiscall_SOUI::SWindow::SSendMessage_unsigned_int__unsigned_int__long_int__int__]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
jmp 0x450935
mov ecx, dword [ebp - 0x2c]
push edi
call dword [sym.imp.soui.dll_public_virtual:_int___thiscall_SOUI::SHostDialog::_HandleEvent_class_SOUI::EventArgs__]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004c048e
mov esp, ebp
pop ebp
ret 4