Function at 0x408810
Capabilities:
Terminate process

Disassembly:
mov eax, dword [esp + 4]
mov ecx, dword [0x44a8e8]
sub esp, 0x200
mov dword [0x447c3c], eax
mov eax, dword [ecx + 4]
push ebx
xor ebx, ebx
push ebp
push esi
cmp eax, ebx
push edi
je 0x408878
push str.encrypt
push eax
call fcn.0041f950
add esp, 8
test eax, eax
jne 0x408878
mov eax, dword [0x44a8e8]
mov ecx, dword [eax + 8]
cmp ecx, ebx
je 0x408db8
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x408db8
push eax
push ecx
call fcn.0041e140
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x200
ret 0x10
mov edx, dword [0x44a8e8]
mov eax, dword [edx + 4]
cmp eax, ebx
je 0x4088fa
push str.rfcpassword
push eax
call fcn.0041f950
add esp, 8
test eax, eax
jne 0x4088fa
mov eax, dword [0x44a8e8]
mov eax, dword [eax + 8]
cmp eax, ebx
je 0x408db8
push 0x100
lea ecx, [esp + 0x114]
push eax
push ecx
call fcn.004166c0
lea edx, [esp + 0x11c]
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.0040f200
lea ecx, [esp + 0x24]
push ecx
call fcn.0041e030
add esp, 0x18
lea edx, [esp + 0x10]
push ebx
push str.RfcPasswordEnc__copied_to_the_Clipboard_
push edx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x200
ret 0x10
mov eax, dword [0x44a8e8]
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x4089e8
push str.stop
push eax
call fcn.0041f950
add esp, 8
test eax, eax
jne 0x4089e8
call fcn.00408ea0
test eax, eax
je 0x408db8
call fcn.00408fb0
mov eax, dword [0x447e38]
cmp eax, ebx
je 0x4089cd
mov edi, str.Synactive_GuiXT_stopped
or ecx, 0xffffffff
xor eax, eax
mov byte [0x4463c4], 0x4e
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x4463c4
mov edx, ecx
mov esi, edi
mov edi, 0x4463c5
push str.Wed_Mar_17_00:02:42_2010
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x4463c4
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4463c4
push ecx
call fcn.00414880
mov eax, dword [0x447e38]
push 0x4463c5
mov ecx, dword [eax + 0x72b0]
push ecx
call fcn.00408560
mov eax, dword [0x447e38]
add esp, 0x14
cmp dword [eax + 0x5ebc], ebx
je 0x4089cd
mov edx, dword [eax + 0x72b4]
push 0x4463c4
push edx
call fcn.00408560
mov eax, dword [0x447e38]
add esp, 8
mov ecx, dword [eax + 0x7264]
mov edx, dword [eax + 0x72ac]
push ebx
push ebx
push ecx
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x408daa
mov eax, dword [0x44a8e8]
mov ebp, 1
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x408a4a
push str.visible
push eax
call fcn.0041f950
add esp, 8
test eax, eax
jne 0x408a4a
call fcn.00408dd0
test eax, eax
je 0x408a39
mov ecx, dword [0x447e38]
push 5
mov edx, dword [ecx + 0x72a8]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x447e38]
mov dword [eax + 0x118], ebx
jmp 0x408daa
mov eax, dword [0x44a8e8]
mov dword [0x447e4c], ebp
mov ecx, dword [eax + 8]
mov dword [eax + 4], ecx
mov edx, dword [0x44a8e8]
mov esi, dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov edi, dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov eax, dword [edx + 4]
cmp eax, ebx
je 0x408bad
push str._traceon
push eax
call fcn.0041f950
add esp, 8
test eax, eax
jne 0x408bad
push str.GUI_XT_OPTIONS
push ebx
push 0xf001f
call esi
cmp eax, ebx
mov dword [0x447e34], eax
je 0x408db8
push ebx
push ebx
push ebx
push 0xf001f
push eax
call edi
cmp eax, ebx
mov dword [0x447e38], eax
je 0x408bad
mov eax, dword [0x44a8e8]
mov eax, dword [eax + 8]
cmp eax, ebx
je 0x408af4
push 5
push str.file
push eax
call fcn.0041f530
add esp, 0xc
test eax, eax
jne 0x408af4
mov ecx, dword [0x44a8e8]
mov eax, dword [0x447e38]
push 0x100
add eax, 0x5ec0
mov edx, dword [ecx + 8]
add edx, 5
push edx
push eax
call fcn.004166c0
add esp, 0xc
mov eax, dword [0x44a8e8]
cmp dword [eax + 8], ebx
je 0x408b3e
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x408b3e
push 5
push str.file
push eax
call fcn.0041f530
add esp, 0xc
test eax, eax
jne 0x408b3e
mov ecx, dword [0x44a8e8]
mov eax, dword [0x447e38]
push 0x100
add eax, 0x5ec0
mov edx, dword [ecx + 0xc]
add edx, 5
push edx
push eax
call fcn.004166c0
add esp, 0xc
mov ecx, dword [0x44a8e8]
mov eax, dword [ecx + 8]
cmp eax, ebx
je 0x408b5d
push str._inputscript
push eax
call fcn.0041f950
add esp, 8
test eax, eax
je 0x408b80
mov eax, dword [0x44a8e8]
cmp dword [eax + 8], ebx
je 0x408b9c
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x408b9c
push str._inputscript
push eax
call fcn.0041f950
add esp, 8
test eax, eax
jne 0x408b9c
mov edx, dword [0x447e38]
mov dword [edx + 0x5ebc], ebx
mov eax, dword [0x447e38]
mov dword [eax + 0x5bac], ebp
jmp 0x408daa
mov ecx, dword [0x447e38]
mov dword [ecx + 0x5ebc], ebp
jmp 0x408daa
mov edx, dword [0x44a8e8]
mov eax, dword [edx + 4]
cmp eax, ebx
je 0x408c10
push str._traceoff
push eax
call fcn.0041f950
add esp, 8
test eax, eax
jne 0x408c10
push str.GUI_XT_OPTIONS
push ebx
push 0xf001f
call esi
cmp eax, ebx
mov dword [0x447e34], eax
je 0x408db8
push ebx
push ebx
push ebx
push 0xf001f
push eax
call edi
cmp eax, ebx
mov dword [0x447e38], eax
je 0x408c10
mov dword [eax + 0x5ebc], ebx
mov eax, dword [0x447e38]
mov dword [eax + 0x5bac], ebx
jmp 0x408daa
mov ecx, dword [0x44a8e8]
mov eax, dword [ecx + 4]
cmp eax, ebx
je 0x408c72
push str.editprofile
push eax
call fcn.0041f950
add esp, 8
test eax, eax
jne 0x408c72
call fcn.00408dd0
test eax, eax
je 0x408c5b
mov edx, dword [0x447e38]
push ebx
push 0x9c62
push 0x111
mov eax, dword [edx + 0x72a8]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x408daa
mov eax, dword [0x44a8e8]
mov dword [0x447e4c], ebp
mov dword [0x447e50], ebp
mov ecx, dword [eax + 8]
mov dword [eax + 4], ecx
mov edx, dword [0x44a8e8]
mov eax, dword [edx + 4]
cmp eax, ebx
je 0x408ce6
push 6
push str.input
push eax
call fcn.0041f530
add esp, 0xc
test eax, eax
jne 0x408ce6
call fcn.00408dd0
test eax, eax
je 0x408daa
mov eax, dword [0x447e38]
cmp dword [eax + 0x4770], ebx
je 0x408daa
mov ecx, dword [0x44a8e8]
mov edx, dword [ecx + 4]
add edx, 6
push edx
call fcn.00408600
add esp, 4
push eax
mov eax, dword [0x447e38]
push ebx
mov ecx, dword [eax + 0x7268]
mov edx, dword [eax + 0x72ac]
push ecx
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x408daa
call fcn.00408ea0
test eax, eax
jne 0x408daa
call fcn.00408fb0
mov eax, dword [0x447e38]
mov dword [eax + 0x5ba0], ebp
mov ecx, dword [0x447e38]
mov dword [ecx + 0x60c8], ebx
call fcn.0041e3c0
call fcn.0040b8c0
mov edx, dword [0x447e14]
mov edi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x64
push edx
call edi
call fcn.0040e030
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventA]
push ebx
push ebp
push ebp
push ebx
call esi
push ebx
push ebp
push ebx
push ebx
mov dword [0x447dd0], eax
call esi
mov dword [0x447dd4], eax
mov eax, dword [0x447e50]
cmp eax, ebx
je 0x408d7b
mov eax, dword [0x447e38]
push ebx
mov ecx, dword [eax + 0x72a8]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.00414390
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x200
ret 0x10
mov eax, dword [0x447e38]
cmp dword [eax + 0x5ebc], ebx
je 0x408da0
mov edx, dword [eax + 0x72a8]
push ebx
push str.GuiXT_System_Trace_active
push str.___The_trace_causes_increased_response_times______n_nDo_not_use_this_option_in_normal_productive_mode
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [0x447e14]
push 0xffffffffffffffff
push eax
call edi
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x200
ret 0x10